Read the docs

Vulnerabilities

Filters

Reset all
Threatist priority
Signals
Fix status
Impact type
Attack vector
Requirements
Product

Products as named in CPE, with their records.

Published
Weakness (CWE)
1 selected

6 records

TI-2022-03187 CVE-2022-3450 · GHSA-j5xv-wjfv-f3gx

Use after free in Google Chrome

Priority MEDIUM 41

Use after free in Peer Connection in Google Chrome prior to 106.0.5249.119 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page.

CVSS 3.1HIGH 8.8 Network No auth User interaction EPSS 0.00801 Published 2022-11-09 Fixed in 106.0.5249.119 CWE-416
TI-2022-03186 CVE-2022-3449 · GHSA-9692-35cp-x87f

Use after free in Google Chrome

Priority MEDIUM 41

Use after free in Safe Browsing in Google Chrome prior to 106.0.5249.119 allowed an attacker who convinced a user to install a malicious extension to potentially exploit heap corruption via a crafted Chrome Extension.

CVSS 3.1HIGH 8.8 Network No auth User interaction EPSS 0.00518 Published 2022-11-09 Fixed in 106.0.5249.119 CWE-416
TI-2022-03185 CVE-2022-3448 · GHSA-h46w-c2m7-wm7p

Use after free in Google Chrome

Priority MEDIUM 42

Use after free in Permissions API in Google Chrome prior to 106.0.5249.119 allowed a remote attacker who convinced a user to engage in specific UI gestures to potentially exploit heap corruption via a crafted HTML page.

CVSS 3.1HIGH 8.8 Network No auth User interaction EPSS 0.00822 Published 2022-11-09 Fixed in 106.0.5249.119 CWE-416
TI-2022-03184 CVE-2022-3447 · GHSA-h3fq-ggc9-j2q9

Out-of-bounds read in Google Chrome

Priority LOW 22

Inappropriate implementation in Custom Tabs in Google Chrome on Android prior to 106.0.5249.119 allowed a remote attacker to spoof the contents of the Omnibox (URL bar) via a crafted HTML page.

CVSS 3.1MEDIUM 4.3 Network No auth User interaction EPSS 0.00813 Published 2022-11-09 Fixed in 106.0.5249.119 CWE-125
TI-2022-03183 CVE-2022-3446 · GHSA-74v5-9p2j-jpmh

Out-of-bounds write in Google Chrome

Priority MEDIUM 42

Heap buffer overflow in WebSQL in Google Chrome prior to 106.0.5249.119 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page.

CVSS 3.1HIGH 8.8 Network No auth User interaction EPSS 0.01012 Published 2022-11-09 Fixed in 106.0.5249.119 CWE-787
TI-2022-03182 CVE-2022-3445 · GHSA-vfpx-fww4-ggcq

Use after free in Google Chrome

Priority MEDIUM 42

Use after free in Skia in Google Chrome prior to 106.0.5249.119 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page.

CVSS 3.1HIGH 8.8 Network No auth User interaction EPSS 0.00909 Published 2022-11-09 Fixed in 106.0.5249.119 CWE-416