Read the docs

Vulnerabilities

Filters

Reset all
Threatist priority
Signals
Fix status
Impact type
Attack vector
Requirements
Product

Products as named in CPE, with their records.

Published
Weakness (CWE)
1 selected

3 records

TI-2024-02976 CVE-2024-3176 · GHSA-h2v6-2834-235m

Out-of-bounds write in Google Chrome

Priority HIGH 73

Out of bounds write in SwiftShader in Google Chrome prior to 117.0.5938.62 allowed a remote attacker to perform an out of bounds memory write via a crafted HTML page.

CVSS 3.1HIGH 8.8 Network No auth User interaction EPSS 0.00346 Published 2024-07-16 Fixed in 117.0.5938.62 CWE-787
TI-2023-06409 CVE-2023-7012 · GHSA-c369-vvw4-mwwv

Improper input validation in Google Chrome

Priority HIGH 76

Insufficient data validation in Permission Prompts in Google Chrome prior to 117.0.5938.62 allowed an attacker who convinced a user to install a malicious app to potentially perform a sandbox escape via a malicious file.

CVSS 3.1CRITICAL 9.6 Network No auth User interaction EPSS 0.00319 Published 2024-07-16 Fixed in 117.0.5938.62 CWE-138
TI-2023-06407 CVE-2023-7010 · GHSA-9r7j-5v58-v463

Use after free in Google Chrome

Priority HIGH 73

Use after free in WebRTC in Google Chrome prior to 117.0.5938.62 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page.

CVSS 3.1HIGH 8.8 Network No auth User interaction EPSS 0.00411 Published 2024-07-16 Fixed in 117.0.5938.62 CWE-416