Priority MEDIUM 41
Insufficient validation of untrusted input in Safe Browsing in Google Chrome prior to 127.0.6533.72 allowed a remote attacker who convinced a user to engage in specific UI gestures to bypass discretionary access control…
CVSS 3.1HIGH 8.8· Network · No auth · User interaction · EPSS 0.00492 · Published 2024-08-06 · Fixed in 127.0.6533.72 CWE-20
Priority LOW 20
Insufficient validation of untrusted input in Safe Browsing in Google Chrome prior to 127.0.6533.72 allowed a remote attacker who convinced a user to engage in specific UI gestures to bypass discretionary access control…
CVSS 3.1MEDIUM 4.3· Network · No auth · User interaction · EPSS 0.00431 · Published 2024-08-06 · Fixed in 127.0.6533.72 CWE-20
Priority LOW 23
Inappropriate implementation in FedCM in Google Chrome prior to 127.0.6533.72 allowed a remote attacker who convinced a user to engage in specific UI gestures to perform UI spoofing via a crafted HTML page.
CVSS 3.1MEDIUM 4.3· Network · No auth · User interaction · EPSS 0.00521 · Published 2024-08-06 · Fixed in 127.0.6533.72 CWE-358
Priority LOW 21
Inappropriate implementation in HTML in Google Chrome prior to 127.0.6533.72 allowed a remote attacker who convinced a user to engage in specific UI gestures to perform UI spoofing via a crafted HTML page.
CVSS 3.1MEDIUM 4.3· Network · No auth · User interaction · EPSS 0.00493 · Published 2024-08-06 · Fixed in 127.0.6533.72 CWE-474
Priority MEDIUM 47
Use after free in CSS in Google Chrome prior to 127.0.6533.72 allowed a remote attacker who convinced a user to engage in specific UI gestures to potentially exploit heap corruption via a crafted HTML page.
CVSS 3.1HIGH 8.8· Network · No auth · User interaction · EPSS 0.00593 · Published 2024-08-06 · Fixed in 127.0.6533.72 CWE-416
Priority LOW 21
Inappropriate implementation in FedCM in Google Chrome prior to 127.0.6533.72 allowed a remote attacker who convinced a user to engage in specific UI gestures to perform UI spoofing via a crafted HTML page.
CVSS 3.1MEDIUM 4.3· Network · No auth · User interaction · EPSS 0.00493 · Published 2024-08-06 · Fixed in 127.0.6533.72 CWE-451
Priority MEDIUM 41
Use after free in User Education in Google Chrome prior to 127.0.6533.72 allowed a remote attacker who convinced a user to engage in specific UI gestures to potentially exploit heap corruption via a crafted HTML page.
CVSS 3.1HIGH 8.8· Network · No auth · User interaction · EPSS 0.00619 · Published 2024-08-06 · Fixed in 127.0.6533.72 CWE-416
Priority MEDIUM 41
Use after free in Tabs in Google Chrome prior to 127.0.6533.72 allowed a remote attacker who convinced a user to engage in specific UI gestures to potentially exploit heap corruption via a crafted HTML page.
CVSS 3.1HIGH 8.8· Network · No auth · User interaction · EPSS 0.00619 · Published 2024-08-06 · Fixed in 127.0.6533.72 CWE-416
Priority LOW 16
Race in Frames in Google Chrome prior to 127.0.6533.72 allowed a remote attacker who convinced a user to engage in specific UI gestures to perform UI spoofing via a crafted HTML page.
CVSS 3.1LOW 3.1· Network · No auth · User interaction · EPSS 0.0043 · Published 2024-08-06 · Fixed in 127.0.6533.72 CWE-362
Priority MEDIUM 41
Inappropriate implementation in Fullscreen in Google Chrome on Android prior to 127.0.6533.72 allowed a remote attacker who convinced a user to engage in specific UI gestures to spoof the contents of the Omnibox (URL bar…
CVSS 3.1HIGH 8.8· Network · No auth · User interaction · EPSS 0.00582 · Published 2024-08-06 · Fixed in 127.0.6533.72 CWE-358
Priority MEDIUM 41
Heap buffer overflow in Layout in Google Chrome prior to 127.0.6533.72 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page.
CVSS 3.1HIGH 8.8· Network · No auth · User interaction · EPSS 0.00628 · Published 2024-08-06 · Fixed in 127.0.6533.72 CWE-122
Priority MEDIUM 47
Use after free in Dawn in Google Chrome prior to 127.0.6533.72 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page.
CVSS 3.1HIGH 8.8· Network · No auth · User interaction · EPSS 0.00644 · Published 2024-08-06 · Fixed in 127.0.6533.72 CWE-416
Priority MEDIUM 41
Use after free in Loader in Google Chrome prior to 127.0.6533.72 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page.
CVSS 3.1HIGH 8.8· Network · No auth · User interaction · EPSS 0.00644 · Published 2024-08-06 · Fixed in 127.0.6533.72 CWE-416
Priority MEDIUM 41
Use after free in Downloads in Google Chrome on iOS prior to 127.0.6533.72 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page.
CVSS 3.1HIGH 8.8· Network · No auth · User interaction · EPSS 0.00641 · Published 2024-08-06 · Fixed in 127.0.6533.72 CWE-416