Read the docs

Vulnerabilities

Filters

Reset all
Threatist priority
Signals
Fix status
Impact type
Attack vector
Requirements
Product

Products as named in CPE, with their records.

Published
Weakness (CWE)
1 selected

14 records

TI-2024-06500 CVE-2024-7005 · GHSA-w28c-f4w5-mfwh

Improper input validation in Google Chrome

Priority MEDIUM 41

Insufficient validation of untrusted input in Safe Browsing in Google Chrome prior to 127.0.6533.72 allowed a remote attacker who convinced a user to engage in specific UI gestures to bypass discretionary access control…

CVSS 3.1HIGH 8.8 Network No auth User interaction EPSS 0.00492 Published 2024-08-06 Fixed in 127.0.6533.72 CWE-20
TI-2024-06499 CVE-2024-7004 · GHSA-fvf5-wm7j-89hj

Improper input validation in Google Chrome

Priority LOW 20

Insufficient validation of untrusted input in Safe Browsing in Google Chrome prior to 127.0.6533.72 allowed a remote attacker who convinced a user to engage in specific UI gestures to bypass discretionary access control…

CVSS 3.1MEDIUM 4.3 Network No auth User interaction EPSS 0.00431 Published 2024-08-06 Fixed in 127.0.6533.72 CWE-20
TI-2024-06496 CVE-2024-7000 · GHSA-g494-wr54-xx2g

Use after free in Google Chrome

Priority MEDIUM 47

Use after free in CSS in Google Chrome prior to 127.0.6533.72 allowed a remote attacker who convinced a user to engage in specific UI gestures to potentially exploit heap corruption via a crafted HTML page.

CVSS 3.1HIGH 8.8 Network No auth User interaction EPSS 0.00593 Published 2024-08-06 Fixed in 127.0.6533.72 CWE-416
TI-2024-06494 CVE-2024-6998 · GHSA-c6ch-gp25-6cpv

Use after free in Google Chrome

Priority MEDIUM 41

Use after free in User Education in Google Chrome prior to 127.0.6533.72 allowed a remote attacker who convinced a user to engage in specific UI gestures to potentially exploit heap corruption via a crafted HTML page.

CVSS 3.1HIGH 8.8 Network No auth User interaction EPSS 0.00619 Published 2024-08-06 Fixed in 127.0.6533.72 CWE-416
TI-2024-06493 CVE-2024-6997 · GHSA-pwf4-rc9f-r3rx

Use after free in Google Chrome

Priority MEDIUM 41

Use after free in Tabs in Google Chrome prior to 127.0.6533.72 allowed a remote attacker who convinced a user to engage in specific UI gestures to potentially exploit heap corruption via a crafted HTML page.

CVSS 3.1HIGH 8.8 Network No auth User interaction EPSS 0.00619 Published 2024-08-06 Fixed in 127.0.6533.72 CWE-416
TI-2024-06492 CVE-2024-6996 · GHSA-p739-c89q-vj36

Race condition in Google Chrome

Priority LOW 16

Race in Frames in Google Chrome prior to 127.0.6533.72 allowed a remote attacker who convinced a user to engage in specific UI gestures to perform UI spoofing via a crafted HTML page.

CVSS 3.1LOW 3.1 Network No auth User interaction EPSS 0.0043 Published 2024-08-06 Fixed in 127.0.6533.72 CWE-362
Priority MEDIUM 41

Inappropriate implementation in Fullscreen in Google Chrome on Android prior to 127.0.6533.72 allowed a remote attacker who convinced a user to engage in specific UI gestures to spoof the contents of the Omnibox (URL bar…

CVSS 3.1HIGH 8.8 Network No auth User interaction EPSS 0.00582 Published 2024-08-06 Fixed in 127.0.6533.72 CWE-358
Priority MEDIUM 41

Heap buffer overflow in Layout in Google Chrome prior to 127.0.6533.72 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page.

CVSS 3.1HIGH 8.8 Network No auth User interaction EPSS 0.00628 Published 2024-08-06 Fixed in 127.0.6533.72 CWE-122
TI-2024-06489 CVE-2024-6991 · GHSA-3v8g-fm64-g4mc

Use after free in Google Chrome

Priority MEDIUM 47

Use after free in Dawn in Google Chrome prior to 127.0.6533.72 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page.

CVSS 3.1HIGH 8.8 Network No auth User interaction EPSS 0.00644 Published 2024-08-06 Fixed in 127.0.6533.72 CWE-416
TI-2024-06487 CVE-2024-6989 · GHSA-32j6-235r-7fmm

Use after free in Google Chrome

Priority MEDIUM 41

Use after free in Loader in Google Chrome prior to 127.0.6533.72 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page.

CVSS 3.1HIGH 8.8 Network No auth User interaction EPSS 0.00644 Published 2024-08-06 Fixed in 127.0.6533.72 CWE-416
TI-2024-06486 CVE-2024-6988 · GHSA-wpvc-jgp6-vg6f

Use after free in Google Chrome

Priority MEDIUM 41

Use after free in Downloads in Google Chrome on iOS prior to 127.0.6533.72 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page.

CVSS 3.1HIGH 8.8 Network No auth User interaction EPSS 0.00641 Published 2024-08-06 Fixed in 127.0.6533.72 CWE-416