Read the docs

Vulnerabilities

Filters

Reset all
Threatist priority
Signals
Fix status
Impact type
Attack vector
Requirements
Product

Products as named in CPE, with their records.

Published
Weakness (CWE)
1 selected

11 records

Priority MEDIUM 40

Inappropriate implementation in Extensions in Google Chrome prior to 115.0.5790.170 allowed an attacker who convinced a user to install a malicious extension to inject scripts or HTML into a privileged page via a crafted…

CVSS 3.1HIGH 8.8 Network No auth User interaction EPSS 0.00903 Published 2023-08-03 Fixed in 115.0.5790.170
Priority MEDIUM 40

Insufficient data validation in Extensions in Google Chrome prior to 115.0.5790.170 allowed an attacker who convinced a user to install a malicious extension to inject scripts or HTML into a privileged page via a crafted…

CVSS 3.1HIGH 8.8 Network No auth User interaction EPSS 0.00903 Published 2023-08-03 Fixed in 115.0.5790.170
TI-2023-03781 CVE-2023-4076 · GHSA-7rfc-cwhj-x2qv

Use after free in Google Chrome

Priority MEDIUM 40

Use after free in WebRTC in Google Chrome prior to 115.0.5790.170 allowed a remote attacker to potentially exploit heap corruption via a crafted WebRTC session.

CVSS 3.1HIGH 8.8 Network No auth User interaction EPSS 0.00924 Published 2023-08-03 Fixed in 115.0.5790.170 CWE-416
TI-2023-03780 CVE-2023-4075 · GHSA-7332-j628-x48x

Use after free in Google Chrome

Priority MEDIUM 40

Use after free in Cast in Google Chrome prior to 115.0.5790.170 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page.

CVSS 3.1HIGH 8.8 Network No auth User interaction EPSS 0.01193 Published 2023-08-03 Fixed in 115.0.5790.170 CWE-416
TI-2023-03779 CVE-2023-4074 · GHSA-6j3m-7hm6-qjrx

Use after free in Google Chrome

Priority MEDIUM 40

Use after free in Blink Task Scheduling in Google Chrome prior to 115.0.5790.170 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page.

CVSS 3.1HIGH 8.8 Network No auth User interaction EPSS 0.01096 Published 2023-08-03 Fixed in 115.0.5790.170 CWE-416
TI-2023-03778 CVE-2023-4073 · GHSA-g9wf-6ppg-937x

Memory corruption in Google Chrome

Priority MEDIUM 41

Out of bounds memory access in ANGLE in Google Chrome on Mac prior to 115.0.5790.170 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page.

CVSS 3.1HIGH 8.8 Network No auth User interaction EPSS 0.01227 Published 2023-08-03 Fixed in 115.0.5790.170 CWE-119
TI-2023-03777 CVE-2023-4072 · GHSA-9j4r-qr47-rcxp

Out-of-bounds read in Google Chrome

Priority MEDIUM 41

Out of bounds read and write in WebGL in Google Chrome prior to 115.0.5790.170 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page.

CVSS 3.1HIGH 8.8 Network No auth User interaction EPSS 0.01227 Published 2023-08-03 Fixed in 115.0.5790.170 CWE-125
TI-2023-03776 CVE-2023-4071 · GHSA-qc3g-vp59-7vwh

Out-of-bounds write in Google Chrome

Priority MEDIUM 41

Heap buffer overflow in Visuals in Google Chrome prior to 115.0.5790.170 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page.

CVSS 3.1HIGH 8.8 Network No auth User interaction EPSS 0.01252 Published 2023-08-03 Fixed in 115.0.5790.170 CWE-787
TI-2023-03775 CVE-2023-4070 · GHSA-9xxv-mx64-rx27

Type confusion in Google Chrome

Priority LOW 38

Type Confusion in V8 in Google Chrome prior to 115.0.5790.170 allowed a remote attacker to perform arbitrary read/write via a crafted HTML page.

CVSS 3.1HIGH 8.1 Network No auth User interaction EPSS 0.01411 Published 2023-08-03 Fixed in 115.0.5790.170 CWE-843
TI-2023-03774 CVE-2023-4069 · GHSA-g63v-hwv9-j9q5

Type confusion in Google Chrome

Priority MEDIUM 59

Type Confusion in V8 in Google Chrome prior to 115.0.5790.170 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page.

CVSS 3.1HIGH 8.8 Network No auth User interaction EPSS 0.24918 Published 2023-08-03 Fixed in 115.0.5790.170 CWE-843
TI-2023-03773 CVE-2023-4068 · GHSA-wh89-h5f7-hhcr

Type confusion in Google Chrome

Priority MEDIUM 52

Type Confusion in V8 in Google Chrome prior to 115.0.5790.170 allowed a remote attacker to perform arbitrary read/write via a crafted HTML page.

CVSS 3.1HIGH 8.1 Network No auth User interaction EPSS 0.16141 Published 2023-08-03 Fixed in 115.0.5790.170 CWE-843