Read the docs

Vulnerabilities

Filters

Reset all
Threatist priority
Signals
Fix status
Impact type
Attack vector
Requirements
Product

Products as named in CPE, with their records.

Published
Weakness (CWE)
1 selected

4 records

Release: Google Chrome 125.0.6422.76 Clear all filters
TI-2024-04791 CVE-2024-5160 · GHSA-c24q-2hx9-mjpc

Heap-based buffer overflow in Google Chrome

Priority MEDIUM 41

Heap buffer overflow in Dawn in Google Chrome prior to 125.0.6422.76 allowed a remote attacker to perform an out of bounds memory write via a crafted HTML page.

CVSS 3.1HIGH 8.8 Network No auth User interaction EPSS 0.00613 Published 2024-05-22 Fixed in 125.0.6422.76 CWE-122
TI-2024-04790 CVE-2024-5159 · GHSA-qmp7-vwf7-6g2g

Out-of-bounds read in Google Chrome

Priority MEDIUM 41

Heap buffer overflow in ANGLE in Google Chrome prior to 125.0.6422.76 allowed a remote attacker to perform an out of bounds memory read via a crafted HTML page.

CVSS 3.1HIGH 8.8 Network No auth User interaction EPSS 0.00643 Published 2024-05-22 Fixed in 125.0.6422.76 CWE-125
TI-2024-04789 CVE-2024-5158 · GHSA-4433-jwm9-48r5

Type confusion in Google Chrome

Priority MEDIUM 41

Type Confusion in V8 in Google Chrome prior to 125.0.6422.76 allowed a remote attacker to potentially perform arbitrary read/write via a crafted HTML page.

CVSS 3.1HIGH 8.8 Network No auth User interaction EPSS 0.00612 Published 2024-05-22 Fixed in 125.0.6422.76 CWE-843
TI-2024-04788 CVE-2024-5157 · GHSA-w7g4-69hj-jcrq

Use after free in Google Chrome

Priority MEDIUM 41

Use after free in Scheduling in Google Chrome prior to 125.0.6422.76 allowed a remote attacker to execute arbitrary code inside a sandbox via a crafted HTML page.

CVSS 3.1HIGH 8.8 Network No auth User interaction EPSS 0.00785 Published 2024-05-22 Fixed in 125.0.6422.76 CWE-416