Read the docs

Vulnerabilities

Filters

Reset all
Threatist priority
Signals
Fix status
Impact type
Attack vector
Requirements
Product

Products as named in CPE, with their records.

Published
Weakness (CWE)
1 selected

19 records

TI-2022-00393 CVE-2022-0470 · GHSA-mx8f-gvgq-494c

Out-of-bounds write in Google Chrome

Priority MEDIUM 40

Out of bounds memory access in V8 in Google Chrome prior to 98.0.4758.80 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page.

CVSS 3.1HIGH 8.8 Network No auth User interaction EPSS 0.00968 Published 2022-04-05 Fixed in 98.0.4758.80 CWE-787
TI-2022-00392 CVE-2022-0469 · GHSA-9ggj-qxwx-fj5p

Use after free in Google Chrome

Priority LOW 39

Use after free in Cast in Google Chrome prior to 98.0.4758.80 allowed a remote attacker who convinced a user to engage in specific interactions to potentially exploit heap corruption via a crafted HTML page.

CVSS 3.1HIGH 8.8 Network No auth User interaction EPSS 0.00728 Published 2022-04-05 Fixed in 98.0.4758.80 CWE-416
TI-2022-00391 CVE-2022-0468 · GHSA-r2qx-qm2q-j2rj

Use after free in Google Chrome

Priority LOW 39

Use after free in Payments in Google Chrome prior to 98.0.4758.80 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page.

CVSS 3.1HIGH 8.8 Network No auth User interaction EPSS 0.00728 Published 2022-04-05 Fixed in 98.0.4758.80 CWE-416
Priority MEDIUM 42

Inappropriate implementation in Extensions Platform in Google Chrome prior to 98.0.4758.80 allowed an attacker who convinced a user to install a malicious extension to potentially perform a sandbox escape via a crafted H…

CVSS 3.1CRITICAL 9.6 Network No auth User interaction EPSS 0.00601 Published 2022-04-05 Fixed in 98.0.4758.80
TI-2022-00388 CVE-2022-0465 · GHSA-9rrh-86fv-rghc

Use after free in Google Chrome

Priority LOW 39

Use after free in Extensions in Google Chrome prior to 98.0.4758.80 allowed a remote attacker to potentially exploit heap corruption via user interaction.

CVSS 3.1HIGH 8.8 Network No auth User interaction EPSS 0.0076 Published 2022-04-05 Fixed in 98.0.4758.80 CWE-416
TI-2022-00387 CVE-2022-0464 · GHSA-8g6m-m6xm-q2j7

Use after free in Google Chrome

Priority MEDIUM 40

Use after free in Accessibility in Google Chrome prior to 98.0.4758.80 allowed a remote attacker who convinced a user to engage in specific user interaction to potentially exploit heap corruption via user interaction.

CVSS 3.1HIGH 8.8 Network No auth User interaction EPSS 0.00843 Published 2022-04-05 Fixed in 98.0.4758.80 CWE-416
TI-2022-00386 CVE-2022-0463 · GHSA-cm72-jqm4-jj9v

Use after free in Google Chrome

Priority LOW 39

Use after free in Accessibility in Google Chrome prior to 98.0.4758.80 allowed a remote attacker who convinced a user to engage in specific user interaction to potentially exploit heap corruption via user interaction.

CVSS 3.1HIGH 8.8 Network No auth User interaction EPSS 0.00713 Published 2022-04-05 Fixed in 98.0.4758.80 CWE-416
TI-2022-00383 CVE-2022-0460 · GHSA-5fp8-36f9-q5mp

Use after free in Google Chrome

Priority LOW 39

Use after free in Window Dialogue in Google Chrome prior to 98.0.4758.80 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page.

CVSS 3.1HIGH 8.8 Network No auth User interaction EPSS 0.00775 Published 2022-04-05 Fixed in 98.0.4758.80 CWE-416
TI-2022-00382 CVE-2022-0459 · GHSA-8w67-56w2-2gr6

Use after free in Google Chrome

Priority LOW 39

Use after free in Screen Capture in Google Chrome prior to 98.0.4758.80 allowed a remote attacker who had compromised the renderer process and convinced a user to engage in specific user interaction to potentially exploi…

CVSS 3.1HIGH 8.8 Network No auth User interaction EPSS 0.00792 Published 2022-04-05 Fixed in 98.0.4758.80 CWE-416
TI-2022-00381 CVE-2022-0458 · GHSA-ppx8-ggp8-43v8

Use after free in Google Chrome

Priority LOW 39

Use after free in Thumbnail Tab Strip in Google Chrome prior to 98.0.4758.80 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page.

CVSS 3.1HIGH 8.8 Network No auth User interaction EPSS 0.00748 Published 2022-04-05 Fixed in 98.0.4758.80 CWE-416
TI-2022-00380 CVE-2022-0457 · GHSA-jg9w-wm2g-x7h3

Type confusion in Google Chrome

Priority LOW 39

Type confusion in V8 in Google Chrome prior to 98.0.4758.80 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page.

CVSS 3.1HIGH 8.8 Network No auth User interaction EPSS 0.00775 Published 2022-04-05 Fixed in 98.0.4758.80 CWE-843
TI-2022-00379 CVE-2022-0456 · GHSA-2hq5-5vh4-f96j

Use after free in Google Chrome

Priority LOW 39

Use after free in Web Search in Google Chrome prior to 98.0.4758.80 allowed a remote attacker to potentially exploit heap corruption via profile destruction.

CVSS 3.1HIGH 8.8 Network No auth User interaction EPSS 0.0076 Published 2022-04-05 Fixed in 98.0.4758.80 CWE-416
TI-2022-00378 CVE-2022-0455 · GHSA-mjr9-7xpx-33j5

Clickjacking in Google Chrome

Priority LOW 30

Inappropriate implementation in Full Screen Mode in Google Chrome on Android prior to 98.0.4758.80 allowed a remote attacker to spoof the contents of the Omnibox (URL bar) via a crafted HTML page.

CVSS 3.1MEDIUM 6.5 Network No auth User interaction EPSS 0.00655 Published 2022-04-05 Fixed in 98.0.4758.80 CWE-1021
TI-2022-00377 CVE-2022-0454 · GHSA-wjrq-7g43-926p

Out-of-bounds write in Google Chrome

Priority MEDIUM 40

Heap buffer overflow in ANGLE in Google Chrome prior to 98.0.4758.80 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page.

CVSS 3.1HIGH 8.8 Network No auth User interaction EPSS 0.00838 Published 2022-04-05 Fixed in 98.0.4758.80 CWE-787
TI-2022-00376 CVE-2022-0453 · GHSA-fcp5-2wfm-xfhh

Use after free in Google Chrome

Priority LOW 39

Use after free in Reader Mode in Google Chrome prior to 98.0.4758.80 allowed a remote attacker who had compromised the renderer process to potentially exploit heap corruption via a crafted HTML page.

CVSS 3.1HIGH 8.8 Network No auth User interaction EPSS 0.00775 Published 2022-04-05 Fixed in 98.0.4758.80 CWE-416
TI-2022-00375 CVE-2022-0452 · GHSA-cf5v-p8qx-329f

Use after free in Google Chrome

Priority MEDIUM 43

Use after free in Safe Browsing in Google Chrome prior to 98.0.4758.80 allowed a remote attacker to potentially perform a sandbox escape via a crafted HTML page.

CVSS 3.1CRITICAL 9.6 Network No auth User interaction EPSS 0.00775 Published 2022-04-05 Fixed in 98.0.4758.80 CWE-416