Read the docs

Vulnerabilities

Filters

Reset all
Threatist priority
Signals
Fix status
Impact type
Attack vector
Requirements
Product

Products as named in CPE, with their records.

Published
Weakness (CWE)
1 selected

26 records

TI-2026-03875 CVE-2026-4464 · GHSA-2gq2-w87f-g8c3

Integer overflow in Google Chrome

Priority MEDIUM 40

Integer overflow in ANGLE in Google Chrome prior to 146.0.7680.153 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page.

CVSS 3.1HIGH 8.8 Network No auth User interaction EPSS 0.00277 Published 2026-03-20 Partial fix · 146.0.7680.153 CWE-472
Priority MEDIUM 40

Heap buffer overflow in WebRTC in Google Chrome prior to 146.0.7680.153 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page.

CVSS 3.1HIGH 8.8 Network No auth User interaction EPSS 0.00313 Published 2026-03-20 Fixed in 146.0.7680.153 CWE-122
TI-2026-03873 CVE-2026-4462 · GHSA-3x8c-3563-5425

Out-of-bounds read in Google Chrome

Priority MEDIUM 40

Out of bounds read in Blink in Google Chrome prior to 146.0.7680.153 allowed a remote attacker to perform an out of bounds memory read via a crafted HTML page.

CVSS 3.1HIGH 8.8 Network No auth User interaction EPSS 0.00262 Published 2026-03-20 Fixed in 146.0.7680.153 CWE-125
TI-2026-03871 CVE-2026-4460 · GHSA-6j59-cw39-q7x9

Out-of-bounds read in Google Chrome

Priority MEDIUM 40

Out of bounds read in Skia in Google Chrome prior to 146.0.7680.153 allowed a remote attacker to perform an out of bounds memory read via a crafted HTML page.

CVSS 3.1HIGH 8.8 Network No auth User interaction EPSS 0.00277 Published 2026-03-20 Partial fix · 146.0.7680.153 CWE-125
TI-2026-03870 CVE-2026-4459 · GHSA-rh22-fcwv-gfhj

Out-of-bounds read in Google Chrome

Priority MEDIUM 40

Out of bounds read and write in WebAudio in Google Chrome prior to 146.0.7680.153 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page.

CVSS 3.1HIGH 8.8 Network No auth User interaction EPSS 0.00292 Published 2026-03-20 Fixed in 146.0.7680.153 CWE-125
TI-2026-03869 CVE-2026-4458 · GHSA-fj38-hpf4-jxg7

Use after free in Google Chrome

Priority LOW 39

Use after free in Extensions in Google Chrome prior to 146.0.7680.153 allowed an attacker who convinced a user to install a malicious extension to potentially exploit heap corruption via a crafted Chrome Extension.

CVSS 3.1HIGH 8.8 Network No auth User interaction EPSS 0.002 Published 2026-03-20 Fixed in 146.0.7680.153 CWE-416
TI-2026-03868 CVE-2026-4457 · GHSA-r5p3-fpfp-qv8x

Type confusion in Google Chrome

Priority MEDIUM 40

Type Confusion in V8 in Google Chrome prior to 146.0.7680.153 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page.

CVSS 3.1HIGH 8.8 Network No auth User interaction EPSS 0.00365 Published 2026-03-20 Fixed in 146.0.7680.153 CWE-843
TI-2026-03867 CVE-2026-4456 · GHSA-wjgc-pmhg-6hfh

Use after free in Google Chrome

Priority MEDIUM 40

Use after free in Digital Credentials API in Google Chrome prior to 146.0.7680.153 allowed a remote attacker who had compromised the renderer process to potentially perform a sandbox escape via a crafted HTML page.

CVSS 3.1HIGH 8.8 Network No auth User interaction EPSS 0.00262 Published 2026-03-20 Fixed in 146.0.7680.153 CWE-416
Priority MEDIUM 40

Heap buffer overflow in PDFium in Google Chrome prior to 146.0.7680.153 allowed a remote attacker to potentially exploit heap corruption via a crafted PDF file.

CVSS 3.1HIGH 8.8 Network No auth User interaction EPSS 0.0026 Published 2026-03-20 Fixed in 146.0.7680.153 CWE-122
TI-2026-03865 CVE-2026-4454 · GHSA-vprh-jj4g-r8h9

Use after free in Google Chrome

Priority MEDIUM 40

Use after free in Network in Google Chrome prior to 146.0.7680.153 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page.

CVSS 3.1HIGH 8.8 Network No auth User interaction EPSS 0.00262 Published 2026-03-20 Fixed in 146.0.7680.153 CWE-416
TI-2026-03864 CVE-2026-4453 · GHSA-x582-7573-343x

Integer overflow in Google Chrome

Priority LOW 19

Integer overflow in Dawn in Google Chrome on Mac prior to 146.0.7680.153 allowed a remote attacker to leak cross-origin data via a crafted HTML page.

CVSS 3.1MEDIUM 4.3 Network No auth User interaction EPSS 0.00183 Published 2026-03-20 Fixed in 146.0.7680.153 CWE-472
TI-2026-03863 CVE-2026-4452 · GHSA-mf4x-rv7p-66j9

Integer overflow in Google Chrome

Priority MEDIUM 40

Integer overflow in ANGLE in Google Chrome on Windows prior to 146.0.7680.153 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page.

CVSS 3.1HIGH 8.8 Network No auth User interaction EPSS 0.00262 Published 2026-03-20 Partial fix · 146.0.7680.153 CWE-472
TI-2026-03862 CVE-2026-4451 · GHSA-xqw2-jp6f-x74j

Improper input validation in Google Chrome

Priority MEDIUM 40

Insufficient validation of untrusted input in Navigation in Google Chrome prior to 146.0.7680.153 allowed a remote attacker who had compromised the renderer process to potentially perform a sandbox escape via a crafted H…

CVSS 3.1HIGH 8.8 Network No auth User interaction EPSS 0.00262 Published 2026-03-20 Fixed in 146.0.7680.153 CWE-20
TI-2026-03861 CVE-2026-4450 · GHSA-999p-9mfm-ffqr

Out-of-bounds write in Google Chrome

Priority MEDIUM 40

Out of bounds write in V8 in Google Chrome prior to 146.0.7680.153 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page.

CVSS 3.1HIGH 8.8 Network No auth User interaction EPSS 0.00292 Published 2026-03-20 Fixed in 146.0.7680.153 CWE-787
TI-2026-03860 CVE-2026-4449 · GHSA-c2v8-5j79-xq5g

Use after free in Google Chrome

Priority MEDIUM 40

Use after free in Blink in Google Chrome prior to 146.0.7680.153 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page.

CVSS 3.1HIGH 8.8 Network No auth User interaction EPSS 0.00262 Published 2026-03-20 Fixed in 146.0.7680.153 CWE-416
Priority MEDIUM 40

Heap buffer overflow in ANGLE in Google Chrome prior to 146.0.7680.153 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page.

CVSS 3.1HIGH 8.8 Network No auth User interaction EPSS 0.00297 Published 2026-03-20 Partial fix · 146.0.7680.153 CWE-122
Priority MEDIUM 40

Inappropriate implementation in V8 in Google Chrome prior to 146.0.7680.153 allowed a remote attacker to execute arbitrary code inside a sandbox via a crafted HTML page.

CVSS 3.1HIGH 8.8 Network No auth User interaction EPSS 0.00368 Published 2026-03-20 Fixed in 146.0.7680.153 CWE-693
TI-2026-03857 CVE-2026-4446 · GHSA-xh56-mjcr-q6vw

Use after free in Google Chrome

Priority MEDIUM 40

Use after free in WebRTC in Google Chrome prior to 146.0.7680.153 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page.

CVSS 3.1HIGH 8.8 Network No auth User interaction EPSS 0.00292 Published 2026-03-20 Fixed in 146.0.7680.153 CWE-416
TI-2026-03856 CVE-2026-4445 · GHSA-wcgw-6rfm-f2q6

Use after free in Google Chrome

Priority MEDIUM 40

Use after free in WebRTC in Google Chrome prior to 146.0.7680.153 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page.

CVSS 3.1HIGH 8.8 Network No auth User interaction EPSS 0.00262 Published 2026-03-20 Fixed in 146.0.7680.153 CWE-416
Priority MEDIUM 40

Stack buffer overflow in WebRTC in Google Chrome prior to 146.0.7680.153 allowed a remote attacker to potentially exploit stack corruption via a crafted HTML page.

CVSS 3.1HIGH 8.8 Network No auth User interaction EPSS 0.00301 Published 2026-03-20 Fixed in 146.0.7680.153 CWE-121
Priority MEDIUM 40

Heap buffer overflow in WebAudio in Google Chrome prior to 146.0.7680.153 allowed a remote attacker to execute arbitrary code inside a sandbox via a crafted HTML page.

CVSS 3.1HIGH 8.8 Network No auth User interaction EPSS 0.00431 Published 2026-03-20 Fixed in 146.0.7680.153 CWE-122
Priority MEDIUM 40

Heap buffer overflow in CSS in Google Chrome prior to 146.0.7680.153 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page.

CVSS 3.1HIGH 8.8 Network No auth User interaction EPSS 0.00282 Published 2026-03-20 Fixed in 146.0.7680.153 CWE-122
TI-2026-03852 CVE-2026-4441 · GHSA-ww22-f5h3-4mvm

Use after free in Google Chrome

Priority MEDIUM 40

Use after free in Base in Google Chrome prior to 146.0.7680.153 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page.

CVSS 3.1HIGH 8.8 Network No auth User interaction EPSS 0.0033 Published 2026-03-20 Fixed in 146.0.7680.153 CWE-416
TI-2026-03851 CVE-2026-4440 · GHSA-g29j-jgj6-89w3

Out-of-bounds read in Google Chrome

Priority MEDIUM 40

Out of bounds read and write in WebGL in Google Chrome prior to 146.0.7680.153 allowed a remote attacker to perform arbitrary read/write via a crafted HTML page.

CVSS 3.1HIGH 8.8 Network No auth User interaction EPSS 0.00336 Published 2026-03-20 Fixed in 146.0.7680.153 CWE-125
Load more