Read the docs

Vulnerabilities

Filters

Reset all
Threatist priority
Signals
Fix status
Impact type
Attack vector
Requirements
Product

Products as named in CPE, with their records.

Published
Weakness (CWE)
1 selected

14 records

TI-2023-05038 CVE-2023-5473 · GHSA-f483-q24h-3j43

Use after free in Google Chrome

Priority LOW 29

Use after free in Cast in Google Chrome prior to 118.0.5993.70 allowed a remote attacker who had compromised the renderer process to potentially exploit heap corruption via a crafted HTML page.

CVSS 3.1MEDIUM 6.3 Network No auth User interaction EPSS 0.00723 Published 2023-10-11 Fixed in 118.0.5993.70 CWE-416
TI-2023-05050 CVE-2023-5485 · GHSA-74q5-gg24-8jcf

Cross-site scripting in Google Chrome

Priority LOW 21

Inappropriate implementation in Autofill in Google Chrome prior to 118.0.5993.70 allowed a remote attacker to bypass autofill restrictions via a crafted HTML page.

CVSS 3.1MEDIUM 4.3 Network No auth User interaction EPSS 0.00715 Published 2023-10-11 Fixed in 118.0.5993.70 CWE-79
TI-2023-05039 CVE-2023-5474 · GHSA-ch24-2427-xcwg

Out-of-bounds write in Google Chrome

Priority MEDIUM 42

Heap buffer overflow in PDF in Google Chrome prior to 118.0.5993.70 allowed a remote attacker who convinced a user to engage in specific user interactions to potentially exploit heap corruption via a crafted PDF file.

CVSS 3.1HIGH 8.8 Network No auth User interaction EPSS 0.00907 Published 2023-10-11 Fixed in 118.0.5993.70 CWE-787
TI-2023-05041 CVE-2023-5476 · GHSA-63pw-wc3v-c9g9

Use after free in Google Chrome

Priority MEDIUM 42

Use after free in Blink History in Google Chrome prior to 118.0.5993.70 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page.

CVSS 3.1HIGH 8.8 Network No auth User interaction EPSS 0.00908 Published 2023-10-11 Fixed in 118.0.5993.70 CWE-416
Priority LOW 30

Inappropriate implementation in DevTools in Google Chrome prior to 118.0.5993.70 allowed an attacker who convinced a user to install a malicious extension to bypass discretionary access control via a crafted Chrome Exten…

CVSS 3.1MEDIUM 6.5 Network No auth User interaction EPSS 0.00607 Published 2023-10-11 Fixed in 118.0.5993.70
Priority LOW 30

Inappropriate implementation in Fullscreen in Google Chrome prior to 118.0.5993.70 allowed an attacker who convinced a user to install a malicious extension to bypass navigation restrictions via a crafted Chrome Extensio…

CVSS 3.1MEDIUM 6.5 Network No auth User interaction EPSS 0.00624 Published 2023-10-11 Fixed in 118.0.5993.70
TI-2023-04800 CVE-2023-5218 · GHSA-cvp3-7vpw-ffh6

Use after free in Google Chrome

Priority MEDIUM 43

Use after free in Site Isolation in Google Chrome prior to 118.0.5993.70 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page.

CVSS 3.1HIGH 8.8 Network No auth User interaction EPSS 0.01349 Published 2023-10-11 Fixed in 118.0.5993.70 CWE-416