Read the docs

Vulnerabilities

Filters

Reset all
Threatist priority
Signals
Fix status
Impact type
Attack vector
Requirements
Product

Products as named in CPE, with their records.

Published
Weakness (CWE)
1 selected

2 records

Release: Google Chrome 70.0.3538.67 Clear all filters
TI-2018-14232 CVE-2018-20071 · GHSA-fp62-x6pf-8qrh

Cross-site scripting in Google Chrome

Priority LOW 27

Insufficiently strict origin checks during JIT payment app installation in Payments in Google Chrome prior to 70.0.3538.67 allowed a remote attacker to install a service worker for a domain that can host attacker control…

CVSS 3.0MEDIUM 6.1 Network No auth User interaction EPSS 0.00384 Published 2019-01-09 Fixed in 70.0.3538.67 CWE-79
TI-2018-12461 CVE-2018-17470 · GHSA-4764-h9h5-c5jx

Memory corruption in Google Chrome

Priority LOW 36

A heap buffer overflow in GPU in Google Chrome prior to 70.0.3538.67 allowed a remote attacker who had compromised the renderer process to potentially perform a sandbox escape via a crafted HTML page.

CVSS 3.0HIGH 7.4 Network No auth User interaction EPSS 0.01519 Published 2019-01-09 Fixed in 70.0.3538.67 CWE-119