Read the docs

Vulnerabilities

Filters

Reset all
Threatist priority
Signals
Fix status
Impact type
Attack vector
Requirements
Product

Products as named in CPE, with their records.

Published
Weakness (CWE)
1 selected

2 records

TI-2022-04516 CVE-2022-4925 · GHSA-mc6p-cr25-crfc

Improper input validation in Google Chrome

Priority LOW 30

Insufficient validation of untrusted input in QUIC in Google Chrome prior to 97.0.4692.71 allowed a remote attacker to perform header splitting via malicious network traffic.

CVSS 3.1MEDIUM 6.5 Network No auth User interaction EPSS 0.00566 Published 2023-07-28 Fixed in 97.0.4692.71 CWE-20
TI-2022-04515 CVE-2022-4924 · GHSA-vvx4-72qg-p3h5

Use after free in Google Chrome

Priority MEDIUM 42

Use after free in WebRTC in Google Chrome prior to 97.0.4692.71 allowed a remote attacker who had compromised the renderer process to potentially perform a sandbox escape via a crafted HTML page.

CVSS 3.1CRITICAL 9.6 Network No auth User interaction EPSS 0.00662 Published 2023-07-28 Fixed in 97.0.4692.71 CWE-416