Read the docs

Vulnerabilities

Filters

Reset all
Threatist priority
Signals
Fix status
Impact type
Attack vector
Requirements
Product

Products as named in CPE, with their records.

Published
Weakness (CWE)
1 selected

7 records

TI-2024-05110 CVE-2024-5499 · GHSA-hqfv-mf6j-g3j6

Out-of-bounds write in Google Chrome

Priority MEDIUM 48

Out of bounds write in Streams API in Google Chrome prior to 125.0.6422.141 allowed a remote attacker to execute arbitrary code inside a sandbox via a crafted HTML page.

CVSS 3.1HIGH 8.8 Network No auth User interaction EPSS 0.00975 Published 2024-05-30 Fixed in 125.0.6422.141 CWE-787
TI-2024-05109 CVE-2024-5498 · GHSA-fqjc-cfjx-7rv8

Use after free in Google Chrome

Priority LOW 39

Use after free in Presentation API in Google Chrome prior to 125.0.6422.141 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page.

CVSS 3.1HIGH 8.8 Network No auth User interaction EPSS 0.00726 Published 2024-05-30 Fixed in 125.0.6422.141 CWE-416
TI-2024-05108 CVE-2024-5497 · GHSA-8mwf-wgf7-7qpx

Out-of-bounds read in Google Chrome

Priority MEDIUM 42

Out of bounds memory access in Browser UI in Google Chrome prior to 125.0.6422.141 allowed a remote attacker who convinced a user to engage in specific UI gestures to potentially exploit heap corruption via a crafted HTM…

CVSS 3.1HIGH 8.8 Network No auth User interaction EPSS 0.00841 Published 2024-05-30 Fixed in 125.0.6422.141 CWE-125
TI-2024-05107 CVE-2024-5496 · GHSA-8xgv-q88p-ghq4

Use after free in Google Chrome

Priority MEDIUM 42

Use after free in Media Session in Google Chrome prior to 125.0.6422.141 allowed a remote attacker to execute arbitrary code inside a sandbox via a crafted HTML page.

CVSS 3.1HIGH 8.8 Network No auth User interaction EPSS 0.00896 Published 2024-05-30 Fixed in 125.0.6422.141 CWE-416
TI-2024-05106 CVE-2024-5495 · GHSA-wrxh-8wc3-33rm

Use after free in Google Chrome

Priority MEDIUM 41

Use after free in Dawn in Google Chrome prior to 125.0.6422.141 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page.

CVSS 3.1HIGH 8.8 Network No auth User interaction EPSS 0.00778 Published 2024-05-30 Fixed in 125.0.6422.141 CWE-416
TI-2024-05105 CVE-2024-5494 · GHSA-fv2x-w8xf-gxpq

Use after free in Google Chrome

Priority MEDIUM 41

Use after free in Dawn in Google Chrome prior to 125.0.6422.141 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page.

CVSS 3.1HIGH 8.8 Network No auth User interaction EPSS 0.00761 Published 2024-05-30 Fixed in 125.0.6422.141 CWE-416
Priority MEDIUM 42

Heap buffer overflow in WebRTC in Google Chrome prior to 125.0.6422.141 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page.

CVSS 3.1HIGH 8.8 Network No auth User interaction EPSS 0.00851 Published 2024-05-30 Fixed in 125.0.6422.141 CWE-122