Read the docs

Vulnerabilities

Filters

Reset all
Threatist priority
Signals
Fix status
Impact type
Attack vector
Requirements
Product

Products as named in CPE, with their records.

Published
Weakness (CWE)
1 selected

6 records

TI-2023-06134 CVE-2023-6707 · GHSA-8jgg-mv8q-h7xh

Use after free in Google Chrome

Priority MEDIUM 41

Use after free in CSS in Google Chrome prior to 120.0.6099.109 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page.

CVSS 3.1HIGH 8.8 Network No auth User interaction EPSS 0.0065 Published 2023-12-14 Fixed in 120.0.6099.109 CWE-416
TI-2023-06133 CVE-2023-6706 · GHSA-jqrg-rvpw-5fw5

Use after free in Google Chrome

Priority MEDIUM 41

Use after free in FedCM in Google Chrome prior to 120.0.6099.109 allowed a remote attacker who convinced a user to engage in specific UI interaction to potentially exploit heap corruption via a crafted HTML page.

CVSS 3.1HIGH 8.8 Network No auth User interaction EPSS 0.0065 Published 2023-12-14 Fixed in 120.0.6099.109 CWE-416
TI-2023-06132 CVE-2023-6705 · GHSA-h27f-fw5q-c2gh

Use after free in Google Chrome

Priority MEDIUM 41

Use after free in WebRTC in Google Chrome prior to 120.0.6099.109 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page.

CVSS 3.1HIGH 8.8 Network No auth User interaction EPSS 0.00668 Published 2023-12-14 Fixed in 120.0.6099.109 CWE-416
TI-2023-06131 CVE-2023-6704 · GHSA-587x-fmc5-99p9

Use after free in Google Chrome

Priority MEDIUM 41

Use after free in libavif in Google Chrome prior to 120.0.6099.109 allowed a remote attacker to potentially exploit heap corruption via a crafted image file.

CVSS 3.1HIGH 8.8 Network No auth User interaction EPSS 0.00664 Published 2023-12-14 Fixed in 120.0.6099.109 CWE-416
TI-2023-06130 CVE-2023-6703 · GHSA-9v72-359m-2vx4

Use after free in Google Chrome

Priority MEDIUM 41

Use after free in Blink in Google Chrome prior to 120.0.6099.109 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page.

CVSS 3.1HIGH 8.8 Network No auth User interaction EPSS 0.0065 Published 2023-12-14 Fixed in 120.0.6099.109 CWE-416
TI-2023-06129 CVE-2023-6702 · GHSA-7hjc-c62g-4w73

Type confusion in Google Chrome

Priority HIGH 69

Type confusion in V8 in Google Chrome prior to 120.0.6099.109 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page.

CVSS 3.1HIGH 8.8 Network No auth User interaction EPSS 0.44259 Published 2023-12-14 Fixed in 120.0.6099.109 CWE-843