Read the docs

Vulnerabilities

Filters

Reset all
Threatist priority
Signals
Fix status
Impact type
Attack vector
Requirements
Product

Products as named in CPE, with their records.

Published
Weakness (CWE)
1 selected

5 records

TI-2021-02981 CVE-2021-4102 · GHSA-vjvx-2q28-pjv2

Use after free in Google Chrome

Priority CRITICAL 97KEV

Use after free in V8 in Google Chrome prior to 96.0.4664.110 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page.

CVSS 3.1HIGH 8.8 Network No auth User interaction EPSS 0.07836 Published 2022-02-11 Fixed in 96.0.4664.110 CWE-416
TI-2021-02980 CVE-2021-4101 · GHSA-887j-jqhg-82c9

Out-of-bounds write in Google Chrome

Priority MEDIUM 40

Heap buffer overflow in Swiftshader in Google Chrome prior to 96.0.4664.110 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page.

CVSS 3.1HIGH 8.8 Network No auth User interaction EPSS 0.01042 Published 2022-02-11 Fixed in 96.0.4664.110 CWE-787
TI-2021-02979 CVE-2021-4100 · GHSA-pjg5-4frx-8m6r

Out-of-bounds read in Google Chrome

Priority LOW 39

Object lifecycle issue in ANGLE in Google Chrome prior to 96.0.4664.110 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page.

CVSS 3.1HIGH 8.8 Network No auth User interaction EPSS 0.0075 Published 2022-02-11 Fixed in 96.0.4664.110 CWE-125
TI-2021-02978 CVE-2021-4099 · GHSA-4464-3c7m-p3r9

Use after free in Google Chrome

Priority LOW 39

Use after free in Swiftshader in Google Chrome prior to 96.0.4664.110 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page.

CVSS 3.1HIGH 8.8 Network No auth User interaction EPSS 0.0075 Published 2022-02-11 Fixed in 96.0.4664.110 CWE-416
Priority LOW 33

Insufficient data validation in Mojo in Google Chrome prior to 96.0.4664.110 allowed a remote attacker who had compromised the renderer process to potentially perform a sandbox escape via a crafted HTML page.

CVSS 3.1HIGH 7.4 Network No auth User interaction EPSS 0.00645 Published 2022-02-11 Fixed in 96.0.4664.110 CWE-367