Read the docs

Vulnerabilities

Filters

Reset all
Threatist priority
Signals
Fix status
Impact type
Attack vector
Requirements
Product

Products as named in CPE, with their records.

Published
Weakness (CWE)
1 selected

8 records

TI-2021-11025 CVE-2021-30633 · GHSA-7pph-hp2f-gxfg

Use after free in Google Chrome

Priority CRITICAL 100KEV

Use after free in Indexed DB API in Google Chrome prior to 93.0.4577.82 allowed a remote attacker who had compromised the renderer process to potentially perform a sandbox escape via a crafted HTML page.

CVSS 3.1CRITICAL 9.6 Network No auth User interaction EPSS 0.3318 Published 2021-10-08 Fixed in 93.0.4577.82 CWE-416
TI-2021-11023 CVE-2021-30630 · GHSA-hg3g-9j92-v2wp

Origin validation error in Google Chrome

Priority LOW 21

Inappropriate implementation in Blink in Google Chrome prior to 93.0.4577.82 allowed a remote attacker who had compromised the renderer process to leak cross-origin data via a crafted HTML page.

CVSS 3.1MEDIUM 4.3 Network No auth User interaction EPSS 0.00732 Published 2021-10-08 Fixed in 93.0.4577.82 CWE-346
TI-2021-11022 CVE-2021-30629 · GHSA-xm4x-wc47-pq9m

Use after free in Google Chrome

Priority MEDIUM 40

Use after free in Permissions in Google Chrome prior to 93.0.4577.82 allowed a remote attacker who had compromised the renderer process to potentially exploit heap corruption via a crafted HTML page.

CVSS 3.1HIGH 8.8 Network No auth User interaction EPSS 0.0088 Published 2021-10-08 Fixed in 93.0.4577.82 CWE-416
TI-2021-11021 CVE-2021-30628 · GHSA-2rgp-5g7q-m8w2

Out-of-bounds write in Google Chrome

Priority MEDIUM 40

Stack buffer overflow in ANGLE in Google Chrome prior to 93.0.4577.82 allowed a remote attacker to potentially exploit stack corruption via a crafted HTML page.

CVSS 3.1HIGH 8.8 Network No auth User interaction EPSS 0.00979 Published 2021-10-08 Fixed in 93.0.4577.82 CWE-787
TI-2021-11020 CVE-2021-30627 · GHSA-m7v7-jc6r-6fw4

Type confusion in Google Chrome

Priority MEDIUM 40

Type confusion in Blink layout in Google Chrome prior to 93.0.4577.82 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page.

CVSS 3.1HIGH 8.8 Network No auth User interaction EPSS 0.00905 Published 2021-10-08 Fixed in 93.0.4577.82 CWE-843
TI-2021-11019 CVE-2021-30626 · GHSA-vhp8-4rh9-77xp

Out-of-bounds write in Google Chrome

Priority MEDIUM 40

Out of bounds memory access in ANGLE in Google Chrome prior to 93.0.4577.82 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page.

CVSS 3.1HIGH 8.8 Network No auth User interaction EPSS 0.01013 Published 2021-10-08 Fixed in 93.0.4577.82 CWE-787
TI-2021-11018 CVE-2021-30625 · GHSA-vxhq-cfwm-48pw

Use after free in Google Chrome

Priority MEDIUM 50

Use after free in Selection API in Google Chrome prior to 93.0.4577.82 allowed a remote attacker who convinced the user the visit a malicious website to potentially exploit heap corruption via a crafted HTML page.

CVSS 3.1HIGH 8.8 Network No auth User interaction EPSS 0.10127 Published 2021-10-08 Fixed in 93.0.4577.82 CWE-416
TI-2021-11024 CVE-2021-30632 · GHSA-38c8-mw66-j237

Out-of-bounds write in Google Chrome

Priority CRITICAL 97KEV

Out of bounds write in V8 in Google Chrome prior to 93.0.4577.82 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page.

CVSS 3.1HIGH 8.8 Network No auth User interaction EPSS 0.6319 Published 2021-10-08 Fixed in 93.0.4577.82 CWE-787