Read the docs

Vulnerabilities

Filters

Reset all
Threatist priority
Signals
Fix status
Impact type
Attack vector
Requirements
Product

Products as named in CPE, with their records.

Published
Weakness (CWE)
1 selected

9 records

TI-2022-01511 CVE-2022-1641 · GHSA-fqcp-q7w4-qwrv

Use after free in Google Chrome

Priority MEDIUM 40

Use after free in Web UI Diagnostics in Google Chrome on Chrome OS prior to 101.0.4951.64 allowed a remote attacker who convinced a user to engage in specific UI interactions to potentially exploit heap corruption via sp…

CVSS 3.1HIGH 8.8 Network No auth User interaction EPSS 0.00952 Published 2022-07-26 Fixed in 101.0.4951.64 CWE-416
TI-2022-01510 CVE-2022-1640 · GHSA-38f8-6mx5-p5qh

Use after free in Google Chrome

Priority MEDIUM 40

Use after free in Sharing in Google Chrome prior to 101.0.4951.64 allowed a remote attacker who convinced a user to engage in specific UI interactions to potentially exploit heap corruption via a crafted HTML page.

CVSS 3.1HIGH 8.8 Network No auth User interaction EPSS 0.00901 Published 2022-07-26 Fixed in 101.0.4951.64 CWE-416
TI-2022-01509 CVE-2022-1639 · GHSA-xv5j-xw3x-cwr6

Use after free in Google Chrome

Priority MEDIUM 40

Use after free in ANGLE in Google Chrome prior to 101.0.4951.64 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page.

CVSS 3.1HIGH 8.8 Network No auth User interaction EPSS 0.00901 Published 2022-07-26 Fixed in 101.0.4951.64 CWE-416
TI-2022-01508 CVE-2022-1638 · GHSA-v898-xxg8-qvgf

Out-of-bounds write in Google Chrome

Priority LOW 39

Heap buffer overflow in V8 Internationalization in Google Chrome prior to 101.0.4951.64 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page.

CVSS 3.1HIGH 8.8 Network No auth User interaction EPSS 0.00729 Published 2022-07-26 Fixed in 101.0.4951.64 CWE-787
Priority LOW 22

Inappropriate implementation in Web Contents in Google Chrome prior to 101.0.4951.64 allowed a remote attacker to leak cross-origin data via a crafted HTML page.

CVSS 3.1MEDIUM 4.3 Network No auth User interaction EPSS 0.00858 Published 2022-07-26 Fixed in 101.0.4951.64 CWE-668
TI-2022-01506 CVE-2022-1636 · GHSA-6w2c-2wm7-v55g

Use after free in Google Chrome

Priority MEDIUM 40

Use after free in Performance APIs in Google Chrome prior to 101.0.4951.64 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page.

CVSS 3.1HIGH 8.8 Network No auth User interaction EPSS 0.00886 Published 2022-07-26 Fixed in 101.0.4951.64 CWE-416
TI-2022-01505 CVE-2022-1635 · GHSA-f7p7-wp94-6pj5

Use after free in Google Chrome

Priority MEDIUM 40

Use after free in Permission Prompts in Google Chrome prior to 101.0.4951.64 allowed a remote attacker who convinced a user to engage in specific UI interactions to potentially exploit heap corruption via specific user i…

CVSS 3.1HIGH 8.8 Network No auth User interaction EPSS 0.00829 Published 2022-07-26 Fixed in 101.0.4951.64 CWE-416
TI-2022-01504 CVE-2022-1634 · GHSA-276r-jxx7-v78h

Use after free in Google Chrome

Priority MEDIUM 40

Use after free in Browser UI in Google Chrome prior to 101.0.4951.64 allowed a remote attacker who had convinced a user to engage in specific UI interaction to potentially exploit heap corruption via specific user intera…

CVSS 3.1HIGH 8.8 Network No auth User interaction EPSS 0.00829 Published 2022-07-26 Fixed in 101.0.4951.64 CWE-416
TI-2022-01503 CVE-2022-1633 · GHSA-v52h-39q4-ccvw

Use after free in Google Chrome

Priority MEDIUM 40

Use after free in Sharesheet in Google Chrome on Chrome OS prior to 101.0.4951.64 allowed a remote attacker who convinced a user to engage in specific UI interactions to potentially exploit heap corruption via specific u…

CVSS 3.1HIGH 8.8 Network No auth User interaction EPSS 0.00837 Published 2022-07-26 Fixed in 101.0.4951.64 CWE-416