Read the docs

Vulnerabilities

Filters

Reset all
Threatist priority
Signals
Fix status
Impact type
Attack vector
Requirements
Product

Products as named in CPE, with their records.

Published
Weakness (CWE)
1 selected

12 records

TI-2026-58427 CVE-2026-85047 · GHSA-j5vm-rh4f-hp6m

Improper input validation in Google Chrome

Priority MEDIUM 43

Improper input validation in Transactions Platform in Google Chrome on on iOS prior to 152.0.7977.82 allowed a remote attacker to potentially execute arbitrary code outside the sandbox via a crafted HTML page.

CVSS 3.1CRITICAL 9.6 Network No auth User interaction EPSS 0.00462 Published 2026-09-03 Fixed in 152.0.7977.82 CWE-20
TI-2026-58431 CVE-2026-85051 · GHSA-v7gw-jq5m-j988

Type confusion in Google Chrome

Priority MEDIUM 40

Type confusion in Compositing in Google Chrome prior to 152.0.7977.82 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML page.

CVSS 3.1HIGH 8.8 Network No auth User interaction EPSS 0.00451 Published 2026-09-03 Fixed in 152.0.7977.82 CWE-843
TI-2026-58429 CVE-2026-85049 · GHSA-49c5-693h-32p7

Use after free in Google Chrome

Priority MEDIUM 40

Use after free in Skia in Google Chrome prior to 152.0.7977.82 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML page.

CVSS 3.1HIGH 8.8 Network No auth User interaction EPSS 0.00283 Published 2026-09-03 Partial fix · 152.0.7977.82 CWE-416
TI-2026-58422 CVE-2026-85042 · GHSA-6crp-w3gv-hwr8

Use after free in Google Chrome

Priority MEDIUM 43

Use after free in DevTools in Google Chrome prior to 152.0.7977.82 allowed a remote attacker to execute arbitrary code outside the sandbox via a crafted HTML page.

CVSS 3.1CRITICAL 9.6 Network No auth User interaction EPSS 0.00462 Published 2026-09-03 Fixed in 152.0.7977.82 CWE-416
Priority MEDIUM 40

Improper resource exposure in CacheStorage in Google Chrome prior to 152.0.7977.82 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML page.

CVSS 3.1HIGH 8.8 Network No auth User interaction EPSS 0.00413 Published 2026-09-03 Fixed in 152.0.7977.82 CWE-668
TI-2026-58430 CVE-2026-85050 · GHSA-vrhg-r48c-vprm

Out-of-bounds write in Google Chrome

Priority MEDIUM 43

Out of bounds write in WebGL in Google Chrome on on Android prior to 152.0.7977.82 allowed a remote attacker to execute arbitrary code outside the sandbox via a crafted HTML page.

CVSS 3.1CRITICAL 9.6 Network No auth User interaction EPSS 0.00462 Published 2026-09-03 Fixed in 152.0.7977.82 CWE-787
Priority LOW 34

Race condition in V8 in Google Chrome prior to 152.0.7977.82 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML page.

CVSS 3.1HIGH 7.5 Network No auth User interaction EPSS 0.00217 Published 2026-09-03 Fixed in 152.0.7977.82 CWE-367
TI-2026-58428 CVE-2026-85048 · GHSA-wmvp-4mc4-v6jr

Use after free in Google Chrome

Priority LOW 38

Use after free in Compositing in Google Chrome prior to 152.0.7977.82 allowed a remote attacker who had compromised the renderer process to execute arbitrary code outside the sandbox via a crafted HTML page.

CVSS 3.1HIGH 8.3 Network No auth User interaction EPSS 0.00404 Published 2026-09-03 Fixed in 152.0.7977.82 CWE-416
TI-2026-58432 CVE-2026-85052 · GHSA-5v3g-r79r-5599

Out-of-bounds read in Google Chrome

Priority LOW 15

Out of bounds read in CrashReporting in Google Chrome prior to 152.0.7977.82 allowed a remote attacker who had compromised the renderer process to read memory outside the sandbox via a crafted HTML page.

CVSS 3.1LOW 3.1 Network No auth User interaction EPSS 0.0023 Published 2026-09-03 Fixed in 152.0.7977.82 CWE-125
TI-2026-58426 CVE-2026-85046 · GHSA-84qv-4wj5-wwmm

Type confusion in Google Chrome

Priority CRITICAL 97KEV

Type confusion in V8 in Google Chrome prior to 152.0.7977.82 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML page.

CVSS 3.1HIGH 8.8 Network No auth User interaction EPSS 0.01806 Published 2026-09-03 Fixed in 152.0.7977.82 CWE-843