Read the docs

Vulnerabilities

Filters

Reset all
Threatist priority
Signals
Fix status
Impact type
Attack vector
Requirements
Product

Products as named in CPE, with their records.

Published
Weakness (CWE)
1 selected

5 records

TI-2023-02005 CVE-2023-2137 · GHSA-6653-c3g4-g7jm

Out-of-bounds write in Google Chrome

Priority MEDIUM 42

Heap buffer overflow in sqlite in Google Chrome prior to 112.0.5615.137 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page.

CVSS 3.1HIGH 8.8 Network No auth User interaction EPSS 0.0112 Published 2023-04-19 Fixed in 112.0.5615.137 CWE-787
TI-2023-02004 CVE-2023-2136 · GHSA-63j8-q3xx-g3c2

Integer overflow in Google Chrome

Priority CRITICAL 100KEV

Integer overflow in Skia in Google Chrome prior to 112.0.5615.137 allowed a remote attacker who had compromised the renderer process to potentially perform a sandbox escape via a crafted HTML page.

CVSS 3.1CRITICAL 9.6 Network No auth User interaction EPSS 0.05786 Published 2023-04-19 Fixed in 112.0.5615.137 CWE-190
TI-2023-02003 CVE-2023-2135 · GHSA-7xwm-fqxv-h2q5

Use after free in Google Chrome

Priority LOW 37

Use after free in DevTools in Google Chrome prior to 112.0.5615.137 allowed a remote attacker who convinced a user to enable specific preconditions to potentially exploit heap corruption via a crafted HTML page.

CVSS 3.1HIGH 7.5 Network No auth User interaction EPSS 0.01 Published 2023-04-19 Fixed in 112.0.5615.137 CWE-416
TI-2023-02002 CVE-2023-2134 · GHSA-x223-wmx3-frr5

Out-of-bounds write in Google Chrome

Priority MEDIUM 42

Out of bounds memory access in Service Worker API in Google Chrome prior to 112.0.5615.137 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page.

CVSS 3.1HIGH 8.8 Network No auth User interaction EPSS 0.01059 Published 2023-04-19 Fixed in 112.0.5615.137 CWE-787
TI-2023-02001 CVE-2023-2133 · GHSA-qh6h-7xw2-m89f

Out-of-bounds write in Google Chrome

Priority MEDIUM 42

Out of bounds memory access in Service Worker API in Google Chrome prior to 112.0.5615.137 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page.

CVSS 3.1HIGH 8.8 Network No auth User interaction EPSS 0.01059 Published 2023-04-19 Fixed in 112.0.5615.137 CWE-787