Read the docs

Vulnerabilities

Filters

Reset all
Threatist priority
Signals
Fix status
Impact type
Attack vector
Requirements
Product

Products as named in CPE, with their records.

Published
Weakness (CWE)
1 selected

9 records

TI-2026-03055 CVE-2026-3545 · GHSA-x8x5-qwxv-2p9j

Improper input validation in Google Chrome

Priority MEDIUM 43

Insufficient data validation in Navigation in Google Chrome prior to 145.0.7632.159 allowed a remote attacker to potentially perform a sandbox escape via a crafted HTML page.

CVSS 3.1CRITICAL 9.6 Network No auth User interaction EPSS 0.00407 Published 2026-03-04 Fixed in 145.0.7632.159 CWE-20
Priority MEDIUM 40

Heap buffer overflow in WebCodecs in Google Chrome prior to 145.0.7632.159 allowed a remote attacker to perform an out of bounds memory write via a crafted HTML page.

CVSS 3.1HIGH 8.8 Network No auth User interaction EPSS 0.00354 Published 2026-03-04 Fixed in 145.0.7632.159 CWE-122
TI-2026-03053 CVE-2026-3543 · GHSA-3pcr-vjhr-9fhf

Improper access control in Google Chrome

Priority MEDIUM 40

Inappropriate implementation in V8 in Google Chrome prior to 145.0.7632.159 allowed a remote attacker to potentially perform out of bounds memory access via a crafted HTML page.

CVSS 3.1HIGH 8.8 Network No auth User interaction EPSS 0.00327 Published 2026-03-04 Fixed in 145.0.7632.159 CWE-284
TI-2026-03052 CVE-2026-3542 · GHSA-7qgq-r5g3-prxq

Improper access control in Google Chrome

Priority MEDIUM 40

Inappropriate implementation in WebAssembly in Google Chrome prior to 145.0.7632.159 allowed a remote attacker to perform out of bounds memory access via a crafted HTML page.

CVSS 3.1HIGH 8.8 Network No auth User interaction EPSS 0.00396 Published 2026-03-04 Fixed in 145.0.7632.159 CWE-284
TI-2026-03051 CVE-2026-3541 · GHSA-v8qc-j9px-44hw

Improper access control in Google Chrome

Priority MEDIUM 40

Inappropriate implementation in CSS in Google Chrome prior to 145.0.7632.159 allowed a remote attacker to perform an out of bounds memory read via a crafted HTML page.

CVSS 3.1HIGH 8.8 Network No auth User interaction EPSS 0.00292 Published 2026-03-04 Fixed in 145.0.7632.159 CWE-284
TI-2026-03050 CVE-2026-3540 · GHSA-3g3j-379w-ccm3

Out-of-bounds read in Google Chrome

Priority MEDIUM 40

Inappropriate implementation in WebAudio in Google Chrome prior to 145.0.7632.159 allowed a remote attacker to perform out of bounds memory access via a crafted HTML page.

CVSS 3.1HIGH 8.8 Network No auth User interaction EPSS 0.00339 Published 2026-03-04 Fixed in 145.0.7632.159 CWE-125
TI-2026-03049 CVE-2026-3538 · GHSA-3g9w-x9xq-cq9g

Integer underflow in Google Chrome

Priority MEDIUM 41

Integer overflow in Skia in Google Chrome prior to 145.0.7632.159 allowed a remote attacker to potentially perform out of bounds memory access via a crafted HTML page.

CVSS 3.1HIGH 8.8 Network No auth User interaction EPSS 0.00779 Published 2026-03-04 Partial fix · 145.0.7632.159 CWE-472
TI-2026-03048 CVE-2026-3537 · GHSA-86pv-gh94-gp63

Out-of-bounds write in Google Chrome

Priority MEDIUM 40

Object lifecycle issue in PowerVR in Google Chrome on Android prior to 145.0.7632.159 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page.

CVSS 3.1HIGH 8.8 Network No auth User interaction EPSS 0.00375 Published 2026-03-04 Fixed in 145.0.7632.159 CWE-1091
TI-2026-03047 CVE-2026-3536 · GHSA-v45g-23ff-xjm9

Integer overflow in Google Chrome

Priority MEDIUM 41

Integer overflow in ANGLE in Google Chrome prior to 145.0.7632.159 allowed a remote attacker to potentially perform out of bounds memory access via a crafted HTML page.

CVSS 3.1HIGH 8.8 Network No auth User interaction EPSS 0.00704 Published 2026-03-04 Partial fix · 145.0.7632.159 CWE-472