Read the docs

Vulnerabilities

Filters

Reset all
Threatist priority
Signals
Fix status
Impact type
Attack vector
Requirements
Product

Products as named in CPE, with their records.

Published
Weakness (CWE)
1 selected

6 records

Release: Google Chrome 129.0.6668.58 Clear all filters
TI-2024-08271 CVE-2024-8908 · GHSA-86wc-gr98-6p59

Authentication bypass by spoofing in Google Chrome

Priority LOW 20

Inappropriate implementation in Autofill in Google Chrome prior to 129.0.6668.58 allowed a remote attacker to perform UI spoofing via a crafted HTML page.

CVSS 3.1MEDIUM 4.3 Network No auth User interaction EPSS 0.00369 Published 2024-09-17 Fixed in 129.0.6668.58 CWE-290
TI-2024-08270 CVE-2024-8907 · GHSA-76f7-g9hr-v32c

Cross-site scripting in Google Chrome

Priority LOW 27

Insufficient data validation in Omnibox in Google Chrome on Android prior to 129.0.6668.58 allowed a remote attacker who convinced a user to engage in specific UI gestures to inject arbitrary scripts or HTML (XSS) via a…

CVSS 3.1MEDIUM 6.1 Network No auth User interaction EPSS 0.00277 Published 2024-09-17 Fixed in 129.0.6668.58 CWE-79
TI-2024-08268 CVE-2024-8905 · GHSA-xrx8-f378-fwph

Heap-based buffer overflow in Google Chrome

Priority MEDIUM 41

Inappropriate implementation in V8 in Google Chrome prior to 129.0.6668.58 allowed a remote attacker to potentially exploit stack corruption via a crafted HTML page.

CVSS 3.1HIGH 8.8 Network No auth User interaction EPSS 0.00505 Published 2024-09-17 Fixed in 129.0.6668.58 CWE-122
TI-2024-08267 CVE-2024-8904 · GHSA-cwr3-4fc3-j8h8

Type confusion in Google Chrome

Priority MEDIUM 41

Type Confusion in V8 in Google Chrome prior to 129.0.6668.58 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page.

CVSS 3.1HIGH 8.8 Network No auth User interaction EPSS 0.00512 Published 2024-09-17 Fixed in 129.0.6668.58 CWE-843