Read the docs

Vulnerabilities

Filters

Reset all
Threatist priority
Signals
Fix status
Impact type
Attack vector
Requirements
Product

Products as named in CPE, with their records.

Published
Weakness (CWE)
1 selected

10 records

TI-2021-10948 CVE-2021-30553 · GHSA-q87w-m784-6jm8

Use after free in Google Chrome

Priority MEDIUM 40

Use after free in Network service in Google Chrome prior to 91.0.4472.101 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page.

CVSS 3.1HIGH 8.8 Network No auth User interaction EPSS 0.01173 Published 2021-06-15 Fixed in 91.0.4472.101 CWE-416
TI-2021-10947 CVE-2021-30552 · GHSA-r283-h95m-m4ph

Use after free in Google Chrome

Priority MEDIUM 40

Use after free in Extensions in Google Chrome prior to 91.0.4472.101 allowed an attacker who convinced a user to install a malicious extension to potentially exploit heap corruption via a crafted HTML page.

CVSS 3.1HIGH 8.8 Network No auth User interaction EPSS 0.00977 Published 2021-06-15 Fixed in 91.0.4472.101 CWE-416
TI-2021-10946 CVE-2021-30551 · GHSA-gmxf-qj4v-rf52

Type confusion in Google Chrome

Priority CRITICAL 97KEV

Type confusion in V8 in Google Chrome prior to 91.0.4472.101 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page.

CVSS 3.1HIGH 8.8 Network No auth User interaction EPSS 0.64701 Published 2021-06-15 Fixed in 91.0.4472.101 CWE-843
TI-2021-10945 CVE-2021-30550 · GHSA-gm9g-wrw9-grgh

Use after free in Google Chrome

Priority MEDIUM 40

Use after free in Accessibility in Google Chrome prior to 91.0.4472.101 allowed an attacker who convinced a user to install a malicious extension to potentially exploit heap corruption via a crafted HTML page.

CVSS 3.1HIGH 8.8 Network No auth User interaction EPSS 0.00874 Published 2021-06-15 Fixed in 91.0.4472.101 CWE-416
TI-2021-10944 CVE-2021-30549 · GHSA-2jfr-2v34-hr95

Use after free in Google Chrome

Priority MEDIUM 40

Use after free in Spell check in Google Chrome prior to 91.0.4472.101 allowed an attacker who convinced a user to install a malicious extension to potentially exploit heap corruption via a crafted HTML page.

CVSS 3.1HIGH 8.8 Network No auth User interaction EPSS 0.00931 Published 2021-06-15 Fixed in 91.0.4472.101 CWE-416
TI-2021-10943 CVE-2021-30548 · GHSA-qpcj-526h-j78r

Use after free in Google Chrome

Priority MEDIUM 40

Use after free in Loader in Google Chrome prior to 91.0.4472.101 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page.

CVSS 3.1HIGH 8.8 Network No auth User interaction EPSS 0.01173 Published 2021-06-15 Fixed in 91.0.4472.101 CWE-416
TI-2021-10942 CVE-2021-30547 · GHSA-h3c6-pc9c-gf82

Out-of-bounds write in Google Chrome

Priority MEDIUM 44

Out of bounds write in ANGLE in Google Chrome prior to 91.0.4472.101 allowed a remote attacker to potentially perform out of bounds memory access via a crafted HTML page.

CVSS 3.1HIGH 8.8 Network No auth User interaction EPSS 0.03612 Published 2021-06-15 Partial fix · 91.0.4472.101 CWE-787
TI-2021-10941 CVE-2021-30546 · GHSA-38j3-rhq2-4x2j

Use after free in Google Chrome

Priority MEDIUM 40

Use after free in Autofill in Google Chrome prior to 91.0.4472.101 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page.

CVSS 3.1HIGH 8.8 Network No auth User interaction EPSS 0.01101 Published 2021-06-15 Fixed in 91.0.4472.101 CWE-416
TI-2021-10940 CVE-2021-30545 · GHSA-q33p-c64w-m225

Use after free in Google Chrome

Priority MEDIUM 40

Use after free in Extensions in Google Chrome prior to 91.0.4472.101 allowed a remote attacker who had compromised the renderer process to potentially exploit heap corruption via a crafted HTML page.

CVSS 3.1HIGH 8.8 Network No auth User interaction EPSS 0.01101 Published 2021-06-15 Fixed in 91.0.4472.101 CWE-416
TI-2021-10939 CVE-2021-30544 · GHSA-wh2q-ff35-69g7

Use after free in Google Chrome

Priority MEDIUM 41

Use after free in BFCache in Google Chrome prior to 91.0.4472.101 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page.

CVSS 3.1HIGH 8.8 Network No auth User interaction EPSS 0.01236 Published 2021-06-15 Fixed in 91.0.4472.101 CWE-416