Read the docs

Vulnerabilities

Filters

Reset all
Threatist priority
Signals
Fix status
Impact type
Attack vector
Requirements
Product

Products as named in CPE, with their records.

Published
Weakness (CWE)
1 selected

6 records

TI-2023-02552 CVE-2023-2725 · GHSA-c4fp-wmv9-q4cr

Use after free in Google Chrome

Priority MEDIUM 61

Use after free in Guest View in Google Chrome prior to 113.0.5672.126 allowed an attacker who convinced a user to install a malicious extension to potentially exploit heap corruption via a crafted HTML page.

CVSS 3.1HIGH 8.8 Network No auth User interaction EPSS 0.24663 Published 2023-05-16 Fixed in 113.0.5672.126 CWE-416
TI-2023-02551 CVE-2023-2724 · GHSA-j5rv-3m5p-q6rc

Type confusion in Google Chrome

Priority MEDIUM 63

Type confusion in V8 in Google Chrome prior to 113.0.5672.126 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page.

CVSS 3.1HIGH 8.8 Network No auth User interaction EPSS 0.29136 Published 2023-05-16 Fixed in 113.0.5672.126 CWE-843
TI-2023-02550 CVE-2023-2723 · GHSA-7797-6fvm-v8xw

Use after free in Google Chrome

Priority MEDIUM 56

Use after free in DevTools in Google Chrome prior to 113.0.5672.126 allowed a remote attacker who had compromised the renderer process to potentially exploit heap corruption via a crafted HTML page.

CVSS 3.1HIGH 8.8 Network No auth User interaction EPSS 0.15428 Published 2023-05-16 Fixed in 113.0.5672.126 CWE-416
TI-2023-02549 CVE-2023-2722 · GHSA-9gjv-mqxv-j44m

Use after free in Google Chrome

Priority MEDIUM 42

Use after free in Autofill UI in Google Chrome on Android prior to 113.0.5672.126 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page.

CVSS 3.1HIGH 8.8 Network No auth User interaction EPSS 0.0085 Published 2023-05-16 Fixed in 113.0.5672.126 CWE-416
TI-2023-02548 CVE-2023-2721 · GHSA-5cww-gpqh-ggqj

Use after free in Google Chrome

Priority MEDIUM 42

Use after free in Navigation in Google Chrome prior to 113.0.5672.126 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page.

CVSS 3.1HIGH 8.8 Network No auth User interaction EPSS 0.00873 Published 2023-05-16 Fixed in 113.0.5672.126 CWE-416