Read the docs

Vulnerabilities

Filters

Reset all
Threatist priority
Signals
Fix status
Impact type
Attack vector
Requirements
Product

Products as named in CPE, with their records.

Published
Weakness (CWE)
1 selected

6 records

Priority LOW 31

Uninitialized Use in V8 in Google Chrome prior to 87.0.4280.88 allowed a remote attacker to obtain potentially sensitive information from process memory via a crafted HTML page.

CVSS 3.1MEDIUM 6.5 Network No auth User interaction EPSS 0.01111 Published 2021-01-08 Partial fix · 87.0.4280.88 CWE-908
TI-2020-12653 CVE-2020-16041 · GHSA-9p5g-qpwr-674r

Out-of-bounds read in Google Chrome

Priority LOW 39

Out of bounds read in networking in Google Chrome prior to 87.0.4280.88 allowed a remote attacker who had compromised the renderer process to obtain potentially sensitive information from process memory via a crafted HTM…

CVSS 3.1HIGH 8.1 Network No auth User interaction EPSS 0.02116 Published 2021-01-08 Fixed in 87.0.4280.88 CWE-125
TI-2020-12652 CVE-2020-16040 · GHSA-6v42-384q-wwf5

Integer overflow in Google Chrome

Priority HIGH 74

Insufficient data validation in V8 in Google Chrome prior to 87.0.4280.88 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page.

CVSS 3.1MEDIUM 6.5 Network No auth User interaction EPSS 0.99595 Published 2021-01-08 Fixed in 87.0.4280.88 CWE-190
TI-2020-12651 CVE-2020-16039 · GHSA-j5fv-c2rq-qx5w

Use after free in Google Chrome

Priority MEDIUM 41

Use after free in extensions in Google Chrome prior to 87.0.4280.88 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page.

CVSS 3.1HIGH 8.8 Network No auth User interaction EPSS 0.01256 Published 2021-01-08 Fixed in 87.0.4280.88 CWE-416
TI-2020-12650 CVE-2020-16038 · GHSA-j6j9-67jq-2hgx

Use after free in Google Chrome

Priority MEDIUM 41

Use after free in media in Google Chrome on OS X prior to 87.0.4280.88 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page.

CVSS 3.1HIGH 8.8 Network No auth User interaction EPSS 0.01256 Published 2021-01-08 Fixed in 87.0.4280.88 CWE-416
TI-2020-12649 CVE-2020-16037 · GHSA-gr2x-jjff-73f3

Use after free in Google Chrome

Priority MEDIUM 41

Use after free in clipboard in Google Chrome prior to 87.0.4280.88 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page.

CVSS 3.1HIGH 8.8 Network No auth User interaction EPSS 0.01256 Published 2021-01-08 Fixed in 87.0.4280.88 CWE-416