Read the docs

Vulnerabilities

Filters

Reset all
Threatist priority
Signals
Fix status
Impact type
Attack vector
Requirements
Product

Products as named in CPE, with their records.

Published
Weakness (CWE)
1 selected

9 records

TI-2025-01668 CVE-2025-1923 · GHSA-wgc8-974c-v6qg

Clickjacking in Google Chrome

Priority LOW 19

Inappropriate implementation in Permission Prompts in Google Chrome prior to 134.0.6998.35 allowed an attacker who convinced a user to install a malicious extension to perform UI spoofing via a crafted Chrome Extension.

CVSS 3.1MEDIUM 4.3 Network No auth User interaction EPSS 0.00208 Published 2025-03-05 Fixed in 134.0.6998.35 CWE-1021
Priority LOW 20

Inappropriate implementation in Selection in Google Chrome on Android prior to 134.0.6998.35 allowed a remote attacker who convinced a user to engage in specific UI gestures to perform UI spoofing via a crafted HTML page…

CVSS 3.1MEDIUM 4.3 Network No auth User interaction EPSS 0.00288 Published 2025-03-05 Fixed in 134.0.6998.35 CWE-451
TI-2025-01664 CVE-2025-1919 · GHSA-gmc4-5rff-2xrj

Out-of-bounds read in Google Chrome

Priority MEDIUM 40

Out of bounds read in Media in Google Chrome prior to 134.0.6998.35 allowed a remote attacker to potentially perform out of bounds memory access via a crafted HTML page.

CVSS 3.1HIGH 8.8 Network No auth User interaction EPSS 0.00393 Published 2025-03-05 Fixed in 134.0.6998.35 CWE-125
TI-2025-01663 CVE-2025-1918 · GHSA-jxvq-qf85-7whf

Out-of-bounds read in Google Chrome

Priority MEDIUM 40

Out of bounds read in PDFium in Google Chrome prior to 134.0.6998.35 allowed a remote attacker to potentially perform out of bounds memory access via a crafted PDF file.

CVSS 3.1HIGH 8.8 Network No auth User interaction EPSS 0.00398 Published 2025-03-05 Fixed in 134.0.6998.35 CWE-125
TI-2025-01662 CVE-2025-1917 · GHSA-ghrx-ww4x-q83j

Clickjacking in Google Chrome

Priority LOW 20

Inappropriate implementation in Browser UI in Google Chrome on Android prior to 134.0.6998.35 allowed a remote attacker to perform UI spoofing via a crafted HTML page.

CVSS 3.1MEDIUM 4.3 Network No auth User interaction EPSS 0.00342 Published 2025-03-05 Fixed in 134.0.6998.35 CWE-1021
TI-2025-01661 CVE-2025-1916 · GHSA-7qw8-w379-55hx

Use after free in Google Chrome

Priority MEDIUM 40

Use after free in Profiles in Google Chrome prior to 134.0.6998.35 allowed an attacker who convinced a user to install a malicious extension to potentially exploit heap corruption via a crafted HTML page.

CVSS 3.1HIGH 8.8 Network No auth User interaction EPSS 0.00283 Published 2025-03-05 Fixed in 134.0.6998.35 CWE-416
TI-2025-01660 CVE-2025-1915 · GHSA-mp7q-385v-fvgp

Path traversal in Google Chrome

Priority LOW 38

Improper Limitation of a Pathname to a Restricted Directory in DevTools in Google Chrome on Windows prior to 134.0.6998.35 allowed an attacker who convinced a user to install a malicious extension to bypass file access r…

CVSS 3.1HIGH 8.1 Network No auth User interaction EPSS 0.00418 Published 2025-03-05 Fixed in 134.0.6998.35 CWE-22
TI-2025-01659 CVE-2025-1914 · GHSA-69cm-jm55-39mv

Out-of-bounds read in Google Chrome

Priority MEDIUM 40

Out of bounds read in V8 in Google Chrome prior to 134.0.6998.35 allowed a remote attacker to perform out of bounds memory access via a crafted HTML page.

CVSS 3.1HIGH 8.8 Network No auth User interaction EPSS 0.00393 Published 2025-03-05 Fixed in 134.0.6998.35 CWE-125