Read the docs

Vulnerabilities

Filters

Reset all
Threatist priority
Signals
Fix status
Impact type
Attack vector
Requirements
Product

Products as named in CPE, with their records.

Published
Weakness (CWE)
1 selected

4 records

TI-2024-11770 CVE-2024-12695 · GHSA-6895-2frg-pq5j

Out-of-bounds write in Google Chrome

Priority MEDIUM 40

Out of bounds write in V8 in Google Chrome prior to 131.0.6778.204 allowed a remote attacker to execute arbitrary code inside a sandbox via a crafted HTML page.

CVSS 3.1HIGH 8.8 Network No auth User interaction EPSS 0.00424 Published 2024-12-18 Fixed in 131.0.6778.204 CWE-787
TI-2024-11769 CVE-2024-12694 · GHSA-cgc6-4xgf-5q5x

Use after free in Google Chrome

Priority MEDIUM 40

Use after free in Compositing in Google Chrome prior to 131.0.6778.204 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page.

CVSS 3.1HIGH 8.8 Network No auth User interaction EPSS 0.0036 Published 2024-12-18 Fixed in 131.0.6778.204 CWE-416
TI-2024-11768 CVE-2024-12693 · GHSA-m84q-p89f-6cc5

Out-of-bounds read in Google Chrome

Priority MEDIUM 40

Out of bounds memory access in V8 in Google Chrome prior to 131.0.6778.204 allowed a remote attacker to execute arbitrary code inside a sandbox via a crafted HTML page.

CVSS 3.1HIGH 8.8 Network No auth User interaction EPSS 0.00448 Published 2024-12-18 Fixed in 131.0.6778.204 CWE-125
TI-2024-11767 CVE-2024-12692 · GHSA-2xhp-fvvw-3838

Type confusion in Google Chrome

Priority MEDIUM 50

Type Confusion in V8 in Google Chrome prior to 131.0.6778.204 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page.

CVSS 3.1HIGH 8.8 Network No auth User interaction EPSS 0.07144 Published 2024-12-18 Fixed in 131.0.6778.204 CWE-843