Read the docs

Vulnerabilities

Filters

Reset all
Threatist priority
Signals
Fix status
Impact type
Attack vector
Requirements
Product

Products as named in CPE, with their records.

Published
Weakness (CWE)
1 selected

7 records

Priority MEDIUM 40

Improper resource control in Linux Toolkit Theming in Google Chrome prior to 151.0.7922.173 allowed a remote attacker who had compromised the renderer process to execute arbitrary code outside the sandbox via a crafted H…

CVSS 3.1HIGH 8.8 Network No auth User interaction EPSS 0.00451 Published 2026-08-20 Fixed in 151.0.7922.173 CWE-913
TI-2026-53220 CVE-2026-76022 · GHSA-wr7h-49gf-v6j2

Heap-based buffer overflow in Google Chrome

Priority MEDIUM 40

Buffer overflow in Network in Google Chrome prior to 151.0.7922.173 allowed a remote attacker to execute arbitrary code outside the sandbox via a crafted HTML page.

CVSS 3.1HIGH 8.8 Network No auth User interaction EPSS 0.00453 Published 2026-08-20 Fixed in 151.0.7922.173 CWE-122
TI-2026-53219 CVE-2026-76021 · GHSA-x6v2-55rx-6qcx

Use after free in Google Chrome

Priority MEDIUM 40

Use after free in DOM in Google Chrome prior to 151.0.7922.173 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML page.

CVSS 3.1HIGH 8.8 Network No auth User interaction EPSS 0.00413 Published 2026-08-20 Fixed in 151.0.7922.173 CWE-416
Priority LOW 35

Race condition in V8 in Google Chrome prior to 151.0.7922.173 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML page.

CVSS 3.1HIGH 7.5 Network No auth User interaction EPSS 0.00289 Published 2026-08-20 Fixed in 151.0.7922.173 CWE-367
TI-2026-53217 CVE-2026-76019 · GHSA-p594-q3qj-x3q3

Incorrect authorization in Google Chrome

Priority LOW 35

Incorrect authorization in Workers in Google Chrome prior to 151.0.7922.173 allowed a remote attacker who had compromised the renderer process and leveraged social engineering to bypass web origin policy via a crafted HT…

CVSS 3.1HIGH 8.1 Network No auth User interaction EPSS 0.00335 Published 2026-08-20 Fixed in 151.0.7922.173 CWE-863
TI-2026-53215 CVE-2026-76017 · GHSA-jpjq-vq2m-mhq6

Use after free in Google Chrome

Priority MEDIUM 40

Use after free in Chromoting in Google Chrome prior to 151.0.7922.173 allowed a remote attacker to execute arbitrary code outside the sandbox via crafted network traffic.

CVSS 3.1HIGH 8.8 Network No auth User interaction EPSS 0.00382 Published 2026-08-20 Fixed in 151.0.7922.173 CWE-416