Priority MEDIUM 40
Inappropriate implementation in Extensions in Google Chrome prior to 115.0.5790.170 allowed an attacker who convinced a user to install a malicious extension to inject scripts or HTML into a privileged page via a crafted…
CVSS 3.1HIGH 8.8· Network · No auth · User interaction · EPSS 0.00903 · Published 2023-08-03 · Fixed in 115.0.5790.170
Priority MEDIUM 40
Insufficient data validation in Extensions in Google Chrome prior to 115.0.5790.170 allowed an attacker who convinced a user to install a malicious extension to inject scripts or HTML into a privileged page via a crafted…
CVSS 3.1HIGH 8.8· Network · No auth · User interaction · EPSS 0.00903 · Published 2023-08-03 · Fixed in 115.0.5790.170
Priority MEDIUM 40
Use after free in WebRTC in Google Chrome prior to 115.0.5790.170 allowed a remote attacker to potentially exploit heap corruption via a crafted WebRTC session.
CVSS 3.1HIGH 8.8· Network · No auth · User interaction · EPSS 0.00924 · Published 2023-08-03 · Fixed in 115.0.5790.170 CWE-416
Priority MEDIUM 40
Use after free in Cast in Google Chrome prior to 115.0.5790.170 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page.
CVSS 3.1HIGH 8.8· Network · No auth · User interaction · EPSS 0.01193 · Published 2023-08-03 · Fixed in 115.0.5790.170 CWE-416
Priority MEDIUM 40
Use after free in Blink Task Scheduling in Google Chrome prior to 115.0.5790.170 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page.
CVSS 3.1HIGH 8.8· Network · No auth · User interaction · EPSS 0.01096 · Published 2023-08-03 · Fixed in 115.0.5790.170 CWE-416
Priority MEDIUM 41
Out of bounds memory access in ANGLE in Google Chrome on Mac prior to 115.0.5790.170 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page.
CVSS 3.1HIGH 8.8· Network · No auth · User interaction · EPSS 0.01227 · Published 2023-08-03 · Fixed in 115.0.5790.170 CWE-119
Priority MEDIUM 41
Out of bounds read and write in WebGL in Google Chrome prior to 115.0.5790.170 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page.
CVSS 3.1HIGH 8.8· Network · No auth · User interaction · EPSS 0.01227 · Published 2023-08-03 · Fixed in 115.0.5790.170 CWE-125
Priority MEDIUM 41
Heap buffer overflow in Visuals in Google Chrome prior to 115.0.5790.170 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page.
CVSS 3.1HIGH 8.8· Network · No auth · User interaction · EPSS 0.01252 · Published 2023-08-03 · Fixed in 115.0.5790.170 CWE-787
Priority LOW 38
Type Confusion in V8 in Google Chrome prior to 115.0.5790.170 allowed a remote attacker to perform arbitrary read/write via a crafted HTML page.
CVSS 3.1HIGH 8.1· Network · No auth · User interaction · EPSS 0.01411 · Published 2023-08-03 · Fixed in 115.0.5790.170 CWE-843
Priority MEDIUM 59
Type Confusion in V8 in Google Chrome prior to 115.0.5790.170 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page.
CVSS 3.1HIGH 8.8· Network · No auth · User interaction · EPSS 0.24918 · Published 2023-08-03 · Fixed in 115.0.5790.170 CWE-843
Priority MEDIUM 52
Type Confusion in V8 in Google Chrome prior to 115.0.5790.170 allowed a remote attacker to perform arbitrary read/write via a crafted HTML page.
CVSS 3.1HIGH 8.1· Network · No auth · User interaction · EPSS 0.16141 · Published 2023-08-03 · Fixed in 115.0.5790.170 CWE-843