Read the docs

Vulnerabilities

Filters

Reset all
Threatist priority
Signals
Fix status
Impact type
Attack vector
Requirements
Product

Products as named in CPE, with their records.

Published
Weakness (CWE)
1 selected

6 records

TI-2021-04302 CVE-2021-21199 · GHSA-7ghg-hpv2-5chp

Use after free in Google Chrome

Priority MEDIUM 40

Use after free in Aura in Google Chrome on Linux prior to 89.0.4389.114 allowed a remote attacker who had compromised the renderer process to potentially exploit heap corruption via a crafted HTML page.

CVSS 3.1HIGH 8.8 Network No auth User interaction EPSS 0.01146 Published 2021-04-09 Fixed in 89.0.4389.114 CWE-416
TI-2021-04301 CVE-2021-21198 · GHSA-8hpv-ffwj-685g

Out-of-bounds read in Google Chrome

Priority LOW 36

Out of bounds read in IPC in Google Chrome prior to 89.0.4389.114 allowed a remote attacker who had compromised the renderer process to potentially perform a sandbox escape via a crafted HTML page.

CVSS 3.1HIGH 7.4 Network No auth User interaction EPSS 0.01793 Published 2021-04-09 Fixed in 89.0.4389.114 CWE-125
TI-2021-04300 CVE-2021-21197 · GHSA-cc25-6prm-723p

Out-of-bounds write in Google Chrome

Priority MEDIUM 41

Heap buffer overflow in TabStrip in Google Chrome prior to 89.0.4389.114 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page.

CVSS 3.1HIGH 8.8 Network No auth User interaction EPSS 0.01361 Published 2021-04-09 Fixed in 89.0.4389.114 CWE-787
TI-2021-04299 CVE-2021-21196 · GHSA-rm46-xc8p-9869

Out-of-bounds write in Google Chrome

Priority MEDIUM 41

Heap buffer overflow in TabStrip in Google Chrome on Windows prior to 89.0.4389.114 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page.

CVSS 3.1HIGH 8.8 Network No auth User interaction EPSS 0.01337 Published 2021-04-09 Fixed in 89.0.4389.114 CWE-787
TI-2021-04298 CVE-2021-21195 · GHSA-j7jw-wv9q-c58g

Use after free in Google Chrome

Priority MEDIUM 41

Use after free in V8 in Google Chrome prior to 89.0.4389.114 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page.

CVSS 3.1HIGH 8.8 Network No auth User interaction EPSS 0.01353 Published 2021-04-09 Fixed in 89.0.4389.114 CWE-416
TI-2021-04297 CVE-2021-21194 · GHSA-2qv4-c5gv-5f74

Use after free in Google Chrome

Priority MEDIUM 40

Use after free in screen sharing in Google Chrome prior to 89.0.4389.114 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page.

CVSS 3.1HIGH 8.8 Network No auth User interaction EPSS 0.0121 Published 2021-04-09 Fixed in 89.0.4389.114 CWE-416