Read the docs

Vulnerabilities

Filters

Reset all
Threatist priority
Signals
Fix status
Impact type
Attack vector
Requirements
Product

Products as named in CPE, with their records.

Published
Weakness (CWE)
1 selected

13 records

TI-2025-12457 CVE-2025-13633 · GHSA-gvmq-hr29-xrx3

Use after free in Google Chrome

Priority MEDIUM 41

Use after free in Digital Credentials in Google Chrome prior to 143.0.7499.41 allowed a remote attacker who had compromised the renderer process to potentially exploit heap corruption via a crafted HTML page.

CVSS 3.1HIGH 8.8 Network No auth User interaction EPSS 0.00502 Published 2025-12-02 Fixed in 143.0.7499.41 CWE-416
TI-2025-12541 CVE-2025-13721 · GHSA-72mf-gf7v-562w

Race condition in Google Chrome

Priority LOW 34

Race in v8 in Google Chrome prior to 143.0.7499.41 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page.

CVSS 3.1HIGH 7.5 Network No auth User interaction EPSS 0.00258 Published 2025-12-02 Fixed in 143.0.7499.41 CWE-362
TI-2025-12540 CVE-2025-13720 · GHSA-p4q8-mx85-6fc8

Incorrect type conversion in Google Chrome

Priority MEDIUM 40

Bad cast in Loader in Google Chrome prior to 143.0.7499.41 allowed a remote attacker who had compromised the renderer process to potentially exploit heap corruption via a crafted HTML page.

CVSS 3.1HIGH 8.8 Network No auth User interaction EPSS 0.00331 Published 2025-12-02 Fixed in 143.0.7499.41 CWE-704
TI-2025-12463 CVE-2025-13639 · GHSA-9www-pqcc-jm28

Cross-site scripting in Google Chrome

Priority LOW 37

Inappropriate implementation in WebRTC in Google Chrome prior to 143.0.7499.41 allowed a remote attacker to perform arbitrary read/write via a crafted HTML page.

CVSS 3.1HIGH 8.1 Network No auth User interaction EPSS 0.0031 Published 2025-12-02 Fixed in 143.0.7499.41 CWE-79
TI-2025-12462 CVE-2025-13638 · GHSA-6jxr-vc7p-9hqv

Use after free in Google Chrome

Priority MEDIUM 40

Use after free in Media Stream in Google Chrome prior to 143.0.7499.41 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page.

CVSS 3.1HIGH 8.8 Network No auth User interaction EPSS 0.00318 Published 2025-12-02 Fixed in 143.0.7499.41 CWE-416
Priority LOW 20

Inappropriate implementation in Downloads in Google Chrome prior to 143.0.7499.41 allowed a remote attacker who convinced a user to engage in specific UI gestures to bypass download protections via a crafted HTML page.

CVSS 3.1MEDIUM 4.3 Network No auth User interaction EPSS 0.0025 Published 2025-12-02 Fixed in 143.0.7499.41 CWE-449
Priority LOW 20

Inappropriate implementation in Split View in Google Chrome prior to 143.0.7499.41 allowed a remote attacker who convinced a user to engage in specific UI gestures to perform UI spoofing via a crafted domain name.

CVSS 3.1MEDIUM 4.3 Network No auth User interaction EPSS 0.0024 Published 2025-12-02 Fixed in 143.0.7499.41 CWE-290
Priority LOW 20

Inappropriate implementation in Downloads in Google Chrome prior to 143.0.7499.41 allowed a local attacker to perform UI spoofing via a crafted HTML page.

CVSS 3.1MEDIUM 4.4 Local No auth User interaction EPSS 0.00183 Published 2025-12-02 Fixed in 143.0.7499.41 CWE-290
Priority LOW 20

Inappropriate implementation in Downloads in Google Chrome on Windows prior to 143.0.7499.41 allowed a local attacker to bypass mark of the web via a crafted HTML page.

CVSS 3.1MEDIUM 4.4 Local No auth User interaction EPSS 0.00167 Published 2025-12-02 Fixed in 143.0.7499.41 CWE-290
Priority LOW 24

Inappropriate implementation in DevTools in Google Chrome prior to 143.0.7499.41 allowed an attacker who convinced a user to install a malicious extension to potentially perform a sandbox escape via a crafted Chrome Exte…

CVSS 3.1MEDIUM 5.4 Network No auth User interaction EPSS 0.00243 Published 2025-12-02 Fixed in 143.0.7499.41 CWE-194
TI-2025-12454 CVE-2025-13630 · GHSA-r3pv-9whv-57xc

Type confusion in Google Chrome

Priority MEDIUM 40

Type Confusion in V8 in Google Chrome prior to 143.0.7499.41 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page.

CVSS 3.1HIGH 8.8 Network No auth User interaction EPSS 0.00457 Published 2025-12-02 Fixed in 143.0.7499.41 CWE-843