Read the docs

Vulnerabilities

Filters

Reset all
Threatist priority
Signals
Fix status
Impact type
Attack vector
Requirements
Product

Products as named in CPE, with their records.

Published
Weakness (CWE)
1 selected

4 records

TI-2024-08473 CVE-2024-9123 · GHSA-xwv3-34j2-7jgx

Integer overflow in Google Chrome

Priority MEDIUM 41

Integer overflow in Skia in Google Chrome prior to 129.0.6668.70 allowed a remote attacker to perform an out of bounds memory write via a crafted HTML page.

CVSS 3.1HIGH 8.8 Network No auth User interaction EPSS 0.00484 Published 2024-09-24 Partial fix · 129.0.6668.70 CWE-472
TI-2024-08472 CVE-2024-9122 · GHSA-4fw3-822r-pqw6

Type confusion in Google Chrome

Priority MEDIUM 49

Type Confusion in V8 in Google Chrome prior to 129.0.6668.70 allowed a remote attacker to perform out of bounds memory access via a crafted HTML page.

CVSS 3.1HIGH 8.8 Network No auth User interaction EPSS 0.06264 Published 2024-09-24 Fixed in 129.0.6668.70 CWE-843
TI-2024-08471 CVE-2024-9121 · GHSA-qcr8-x9j3-5j62

Out-of-bounds write in Google Chrome

Priority LOW 39

Inappropriate implementation in V8 in Google Chrome prior to 129.0.6668.70 allowed a remote attacker to potentially perform out of bounds memory access via a crafted HTML page.

CVSS 3.1HIGH 8.8 Network No auth User interaction EPSS 0.0051 Published 2024-09-24 Fixed in 129.0.6668.70 CWE-787
TI-2024-08470 CVE-2024-9120 · GHSA-xh87-v57g-jhpw

Use after free in Google Chrome

Priority MEDIUM 40

Use after free in Dawn in Google Chrome on Windows prior to 129.0.6668.70 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page.

CVSS 3.1HIGH 8.8 Network No auth User interaction EPSS 0.00452 Published 2024-09-24 Fixed in 129.0.6668.70 CWE-416