Read the docs

Vulnerabilities

Filters

Reset all
Threatist priority
Signals
Fix status
Impact type
Attack vector
Requirements
Product

Products as named in CPE, with their records.

Published
Weakness (CWE)
1 selected

4 records

Priority MEDIUM 50

Inappropriate implementation in DevTools in Google Chrome prior to 136.0.7103.59 allowed a remote attacker who convinced a user to engage in specific UI gestures to bypass discretionary access control via a crafted HTML…

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.00556 Published 2025-05-05 Fixed in 136.0.7103.59 CWE-838
TI-2025-03591 CVE-2025-4051 · GHSA-2xf7-h82x-mhhg

Improper access control in Google Chrome

Priority LOW 28

Insufficient data validation in DevTools in Google Chrome prior to 136.0.7103.59 allowed a remote attacker who convinced a user to engage in specific UI gestures to bypass discretionary access control via a crafted HTML…

CVSS 3.1MEDIUM 6.3 Network No auth User interaction EPSS 0.00284 Published 2025-05-05 Fixed in 136.0.7103.59 CWE-284
TI-2025-03590 CVE-2025-4050 · GHSA-vvqw-r3vv-46ph

Out-of-bounds write in Google Chrome

Priority MEDIUM 40

Out of bounds memory access in DevTools in Google Chrome prior to 136.0.7103.59 allowed a remote attacker who convinced a user to engage in specific UI gestures to potentially exploit heap corruption via a crafted HTML p…

CVSS 3.1HIGH 8.8 Network No auth User interaction EPSS 0.00442 Published 2025-05-05 Fixed in 136.0.7103.59 CWE-787
Priority MEDIUM 40

Heap buffer overflow in HTML in Google Chrome prior to 136.0.7103.59 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page.

CVSS 3.1HIGH 8.8 Network No auth User interaction EPSS 0.00454 Published 2025-05-05 Fixed in 136.0.7103.59 CWE-122