Read the docs

Vulnerabilities

Filters

Reset all
Threatist priority
Signals
Fix status
Impact type
Attack vector
Requirements
Product

Products as named in CPE, with their records.

Published
Weakness (CWE)
1 selected

24 records

TI-2021-10983 CVE-2021-30589 · GHSA-9cg7-vc83-98qm

Improper output encoding in Google Chrome

Priority LOW 23

Insufficient validation of untrusted input in Sharing in Google Chrome prior to 92.0.4515.107 allowed a remote attacker to bypass navigation restrictions via a crafted click-to-call link.

CVSS 3.1MEDIUM 4.3 Network No auth User interaction EPSS 0.01517 Published 2021-08-03 Fixed in 92.0.4515.107 CWE-116
TI-2021-10982 CVE-2021-30588 · GHSA-h8m5-6qp4-4pmm

Type confusion in Google Chrome

Priority MEDIUM 42

Type confusion in V8 in Google Chrome prior to 92.0.4515.107 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page.

CVSS 3.1HIGH 8.8 Network No auth User interaction EPSS 0.01992 Published 2021-08-03 Fixed in 92.0.4515.107 CWE-843
TI-2021-10980 CVE-2021-30586 · GHSA-gwmp-qw7h-46m8

Use after free in Google Chrome

Priority MEDIUM 40

Use after free in dialog box handling in Windows in Google Chrome prior to 92.0.4515.107 allowed an attacker who convinced a user to install a malicious extension to potentially exploit heap corruption via a crafted HTML…

CVSS 3.1HIGH 8.8 Network No auth User interaction EPSS 0.01053 Published 2021-08-03 Fixed in 92.0.4515.107 CWE-416
TI-2021-10979 CVE-2021-30585 · GHSA-68jx-4qq5-mrgm

Use after free in Google Chrome

Priority MEDIUM 41

Use after free in sensor handling in Google Chrome on Windows prior to 92.0.4515.107 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page.

CVSS 3.1HIGH 8.8 Network No auth User interaction EPSS 0.01359 Published 2021-08-03 Fixed in 92.0.4515.107 CWE-416
TI-2021-10975 CVE-2021-30581 · GHSA-x75q-532j-6f9m

Use after free in Google Chrome

Priority MEDIUM 41

Use after free in DevTools in Google Chrome prior to 92.0.4515.107 allowed an attacker who convinced a user to install a malicious extension to potentially exploit heap corruption via a crafted HTML page.

CVSS 3.1HIGH 8.8 Network No auth User interaction EPSS 0.01233 Published 2021-08-03 Fixed in 92.0.4515.107 CWE-416
Priority LOW 32

Insufficient policy enforcement in Android intents in Google Chrome prior to 92.0.4515.107 allowed an attacker who convinced a user to install a malicious application to obtain potentially sensitive information via a cra…

CVSS 3.1MEDIUM 6.5 Network No auth User interaction EPSS 0.01341 Published 2021-08-03 Fixed in 92.0.4515.107
TI-2021-10973 CVE-2021-30579 · GHSA-58wq-824w-jq9w

Use after free in Google Chrome

Priority MEDIUM 41

Use after free in UI framework in Google Chrome prior to 92.0.4515.107 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page.

CVSS 3.1HIGH 8.8 Network No auth User interaction EPSS 0.01592 Published 2021-08-03 Fixed in 92.0.4515.107 CWE-416
Priority MEDIUM 42

Uninitialized use in Media in Google Chrome prior to 92.0.4515.107 allowed a remote attacker to perform out of bounds memory access via a crafted HTML page.

CVSS 3.1HIGH 8.8 Network No auth User interaction EPSS 0.01738 Published 2021-08-03 Fixed in 92.0.4515.107 CWE-908
Priority LOW 36

Insufficient policy enforcement in Installer in Google Chrome prior to 92.0.4515.107 allowed a remote attacker to perform local privilege escalation via a crafted file.

CVSS 3.1HIGH 7.8 Local No auth User interaction EPSS 0.00952 Published 2021-08-03 Fixed in 92.0.4515.107 CWE-732
TI-2021-10970 CVE-2021-30576 · GHSA-8w73-5h5m-j4f4

Use after free in Google Chrome

Priority MEDIUM 41

Use after free in DevTools in Google Chrome prior to 92.0.4515.107 allowed an attacker who convinced a user to install a malicious extension to potentially exploit heap corruption via a crafted HTML page.

CVSS 3.1HIGH 8.8 Network No auth User interaction EPSS 0.01233 Published 2021-08-03 Fixed in 92.0.4515.107 CWE-416
TI-2021-10969 CVE-2021-30575 · GHSA-3m39-g5p7-h3x5

Out-of-bounds write in Google Chrome

Priority MEDIUM 41

Out of bounds write in Autofill in Google Chrome prior to 92.0.4515.107 allowed a remote attacker who had compromised the renderer process to potentially exploit heap corruption via a crafted HTML page.

CVSS 3.1HIGH 8.8 Network No auth User interaction EPSS 0.01595 Published 2021-08-03 Fixed in 92.0.4515.107 CWE-787
TI-2021-10968 CVE-2021-30574 · GHSA-wj8f-3xj8-qmr2

Use after free in Google Chrome

Priority MEDIUM 41

Use after free in protocol handling in Google Chrome prior to 92.0.4515.107 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page.

CVSS 3.1HIGH 8.8 Network No auth User interaction EPSS 0.01602 Published 2021-08-03 Fixed in 92.0.4515.107 CWE-416
TI-2021-10967 CVE-2021-30573 · GHSA-m2r2-333q-9xh7

Use after free in Google Chrome

Priority MEDIUM 47

Use after free in GPU in Google Chrome prior to 92.0.4515.107 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page.

CVSS 3.1HIGH 8.8 Network No auth User interaction EPSS 0.06282 Published 2021-08-03 Fixed in 92.0.4515.107 CWE-416
TI-2021-10966 CVE-2021-30572 · GHSA-vx55-4h84-w3q4

Use after free in Google Chrome

Priority MEDIUM 41

Use after free in Autofill in Google Chrome prior to 92.0.4515.107 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page.

CVSS 3.1HIGH 8.8 Network No auth User interaction EPSS 0.01592 Published 2021-08-03 Fixed in 92.0.4515.107 CWE-416
TI-2021-10965 CVE-2021-30571 · GHSA-5267-2ghv-2r3v

Incorrect authorization in Google Chrome

Priority MEDIUM 44

Insufficient policy enforcement in DevTools in Google Chrome prior to 92.0.4515.107 allowed an attacker who convinced a user to install a malicious extension to potentially perform a sandbox escape via a crafted HTML pag…

CVSS 3.1CRITICAL 9.6 Network No auth User interaction EPSS 0.01189 Published 2021-08-03 Fixed in 92.0.4515.107 CWE-863
TI-2021-10964 CVE-2021-30569 · GHSA-h69r-x8vg-jvc2

Use after free in Google Chrome

Priority MEDIUM 41

Use after free in sqlite in Google Chrome prior to 92.0.4515.107 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page.

CVSS 3.1HIGH 8.8 Network No auth User interaction EPSS 0.01359 Published 2021-08-03 Fixed in 92.0.4515.107 CWE-416
TI-2021-10963 CVE-2021-30568 · GHSA-54mc-h384-h6f4

Out-of-bounds write in Google Chrome

Priority MEDIUM 41

Heap buffer overflow in WebGL in Google Chrome prior to 92.0.4515.107 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page.

CVSS 3.1HIGH 8.8 Network No auth User interaction EPSS 0.01512 Published 2021-08-03 Fixed in 92.0.4515.107 CWE-787
TI-2021-10962 CVE-2021-30567 · GHSA-p5wc-jq36-626m

Use after free in Google Chrome

Priority MEDIUM 40

Use after free in DevTools in Google Chrome prior to 92.0.4515.107 allowed an attacker who convinced a user to open DevTools to potentially exploit heap corruption via specific user gesture.

CVSS 3.1HIGH 8.8 Network No auth User interaction EPSS 0.01156 Published 2021-08-03 Fixed in 92.0.4515.107 CWE-416
TI-2021-10961 CVE-2021-30566 · GHSA-wvxv-hx3q-c798

Out-of-bounds write in Google Chrome

Priority MEDIUM 42

Stack buffer overflow in Printing in Google Chrome prior to 92.0.4515.107 allowed a remote attacker who had compromised the renderer process to potentially exploit stack corruption via a crafted HTML page.

CVSS 3.1HIGH 8.8 Network No auth User interaction EPSS 0.01737 Published 2021-08-03 Fixed in 92.0.4515.107 CWE-787
TI-2021-10960 CVE-2021-30565 · GHSA-h3p6-qjpv-q3p7

Out-of-bounds write in Google Chrome

Priority MEDIUM 42

Out of bounds write in Tab Groups in Google Chrome on Linux and ChromeOS prior to 92.0.4515.107 allowed an attacker who convinced a user to install a malicious extension to perform an out of bounds memory write via a cra…

CVSS 3.1HIGH 8.8 Network No auth User interaction EPSS 0.01886 Published 2021-08-03 Fixed in 92.0.4515.107 CWE-787