Read the docs

Vulnerabilities

Filters

Reset all
Threatist priority
Signals
Fix status
Impact type
Attack vector
Requirements
Product

Products as named in CPE, with their records.

Published
Weakness (CWE)
1 selected

13 records

TI-2023-05394 CVE-2023-5859 · GHSA-qf75-86xr-cfpw

Origin validation error in Google Chrome

Priority LOW 21

Incorrect security UI in Picture In Picture in Google Chrome prior to 119.0.6045.105 allowed a remote attacker to perform domain spoofing via a crafted local HTML page.

CVSS 3.1MEDIUM 4.3 Network No auth User interaction EPSS 0.00606 Published 2023-11-01 Fixed in 119.0.6045.105 CWE-346
TI-2023-05393 CVE-2023-5858 · GHSA-g35p-9423-7ww9

Origin validation error in Google Chrome

Priority LOW 21

Inappropriate implementation in WebApp Provider in Google Chrome prior to 119.0.6045.105 allowed a remote attacker to obfuscate security UI via a crafted HTML page.

CVSS 3.1MEDIUM 4.3 Network No auth User interaction EPSS 0.00632 Published 2023-11-01 Fixed in 119.0.6045.105 CWE-346
TI-2023-05391 CVE-2023-5856 · GHSA-xmhq-fw78-wjxr

Use after free in Google Chrome

Priority MEDIUM 42

Use after free in Side Panel in Google Chrome prior to 119.0.6045.105 allowed a remote attacker who convinced a user to engage in specific UI gestures to potentially exploit heap corruption via a crafted HTML page.

CVSS 3.1HIGH 8.8 Network No auth User interaction EPSS 0.01147 Published 2023-11-01 Fixed in 119.0.6045.105 CWE-416
TI-2023-05390 CVE-2023-5855 · GHSA-jwj7-8489-4jqm

Use after free in Google Chrome

Priority MEDIUM 42

Use after free in Reading Mode in Google Chrome prior to 119.0.6045.105 allowed a remote attacker who convinced a user to engage in specific UI gestures to potentially exploit heap corruption via specific UI gestures.

CVSS 3.1HIGH 8.8 Network No auth User interaction EPSS 0.00983 Published 2023-11-01 Fixed in 119.0.6045.105 CWE-416
TI-2023-05389 CVE-2023-5854 · GHSA-c46p-5pq2-qpcg

Use after free in Google Chrome

Priority MEDIUM 42

Use after free in Profiles in Google Chrome prior to 119.0.6045.105 allowed a remote attacker who convinced a user to engage in specific UI gestures to potentially exploit heap corruption via specific UI gestures.

CVSS 3.1HIGH 8.8 Network No auth User interaction EPSS 0.011 Published 2023-11-01 Fixed in 119.0.6045.105 CWE-416
TI-2023-05388 CVE-2023-5853 · GHSA-39vm-62wp-46hv

Origin validation error in Google Chrome

Priority LOW 21

Incorrect security UI in Downloads in Google Chrome prior to 119.0.6045.105 allowed a remote attacker to obfuscate security UI via a crafted HTML page.

CVSS 3.1MEDIUM 4.3 Network No auth User interaction EPSS 0.00632 Published 2023-11-01 Fixed in 119.0.6045.105 CWE-346
TI-2023-05387 CVE-2023-5852 · GHSA-qfx8-xprj-wvh4

Use after free in Google Chrome

Priority MEDIUM 42

Use after free in Printing in Google Chrome prior to 119.0.6045.105 allowed a remote attacker who convinced a user to engage in specific UI gestures to potentially exploit heap corruption via specific UI gestures.

CVSS 3.1HIGH 8.8 Network No auth User interaction EPSS 0.0101 Published 2023-11-01 Fixed in 119.0.6045.105 CWE-416
TI-2023-05386 CVE-2023-5851 · GHSA-75mv-f5hh-c65h

Origin validation error in Google Chrome

Priority LOW 22

Inappropriate implementation in Downloads in Google Chrome prior to 119.0.6045.105 allowed a remote attacker to obfuscate security UI via a crafted HTML page.

CVSS 3.1MEDIUM 4.3 Network No auth User interaction EPSS 0.00907 Published 2023-11-01 Fixed in 119.0.6045.105 CWE-346
TI-2023-05384 CVE-2023-5849 · GHSA-7cjp-92p9-vr97

Integer overflow in Google Chrome

Priority MEDIUM 43

Integer overflow in USB in Google Chrome prior to 119.0.6045.105 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page.

CVSS 3.1HIGH 8.8 Network No auth User interaction EPSS 0.01288 Published 2023-11-01 Fixed in 119.0.6045.105 CWE-190
Priority MEDIUM 50

Insufficient data validation in USB in Google Chrome prior to 119.0.6045.105 allowed a remote attacker to perform out of bounds memory access via a crafted HTML page.

CVSS 3.1HIGH 8.8 Network No auth User interaction EPSS 0.07349 Published 2023-11-01 Fixed in 119.0.6045.105 CWE-345
TI-2023-05045 CVE-2023-5480 · GHSA-c8pp-vxj4-7mp3

Cross-site scripting in Google Chrome

Priority LOW 30

Inappropriate implementation in Payments in Google Chrome prior to 119.0.6045.105 allowed a remote attacker to bypass XSS preventions via a malicious file.

CVSS 3.1MEDIUM 6.1 Network No auth User interaction EPSS 0.0114 Published 2023-11-01 Fixed in 119.0.6045.105 CWE-79