Read the docs

Vulnerabilities

Filters

Reset all
Threatist priority
Signals
Fix status
Impact type
Attack vector
Requirements
Product

Products as named in CPE, with their records.

Published
Weakness (CWE)
1 selected

21 records

TI-2022-00241 CVE-2022-0311 · GHSA-399p-vvqg-vp88

Out-of-bounds write in Google Chrome

Priority MEDIUM 40

Heap buffer overflow in Task Manager in Google Chrome prior to 97.0.4692.99 allowed a remote attacker who convinced a user to engage in specific user interaction to potentially exploit heap corruption via a crafted HTML…

CVSS 3.1HIGH 8.8 Network No auth User interaction EPSS 0.00877 Published 2022-02-12 Fixed in 97.0.4692.99 CWE-787
TI-2022-00240 CVE-2022-0310 · GHSA-rxgm-2242-x5jj

Out-of-bounds write in Google Chrome

Priority MEDIUM 40

Heap buffer overflow in Task Manager in Google Chrome prior to 97.0.4692.99 allowed a remote attacker to potentially exploit heap corruption via specific user interactions.

CVSS 3.1HIGH 8.8 Network No auth User interaction EPSS 0.00809 Published 2022-02-12 Fixed in 97.0.4692.99 CWE-787
TI-2022-00239 CVE-2022-0309 · GHSA-4fgx-xv5w-xfcp

Incorrect authorization in Google Chrome

Priority LOW 30

Inappropriate implementation in Autofill in Google Chrome prior to 97.0.4692.99 allowed a remote attacker to bypass navigation restrictions via a crafted HTML page.

CVSS 3.1MEDIUM 6.5 Network No auth User interaction EPSS 0.00582 Published 2022-02-12 Fixed in 97.0.4692.99 CWE-863
TI-2022-00238 CVE-2022-0308 · GHSA-vh5c-hf77-22mh

Use after free in Google Chrome

Priority LOW 39

Use after free in Data Transfer in Google Chrome on Chrome OS prior to 97.0.4692.99 allowed a remote attacker who convinced a user to engage in specific user interaction to potentially exploit heap corruption via a craft…

CVSS 3.1HIGH 8.8 Network No auth User interaction EPSS 0.0075 Published 2022-02-12 Fixed in 97.0.4692.99 CWE-416
TI-2022-00237 CVE-2022-0307 · GHSA-5m67-68fr-r9h3

Use after free in Google Chrome

Priority LOW 39

Use after free in Optimization Guide in Google Chrome prior to 97.0.4692.99 allowed a remote attacker who convinced a user to engage in specific user interaction to potentially exploit heap corruption via a crafted HTML…

CVSS 3.1HIGH 8.8 Network No auth User interaction EPSS 0.0075 Published 2022-02-12 Fixed in 97.0.4692.99 CWE-416
TI-2022-00236 CVE-2022-0306 · GHSA-v2fq-q4m8-fwf4

Out-of-bounds write in Google Chrome

Priority HIGH 80

Heap buffer overflow in PDFium in Google Chrome prior to 97.0.4692.99 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page.

CVSS 3.1HIGH 8.8 Network No auth User interaction EPSS 0.85352 Published 2022-02-12 Fixed in 97.0.4692.99 CWE-787
TI-2022-00234 CVE-2022-0304 · GHSA-pc3h-fhrr-pc2g

Use after free in Google Chrome

Priority LOW 39

Use after free in Bookmarks in Google Chrome prior to 97.0.4692.99 allowed a remote attacker who convinced a user to engage in specific user interactions to potentially exploit heap corruption via a crafted HTML page.

CVSS 3.1HIGH 8.8 Network No auth User interaction EPSS 0.0075 Published 2022-02-12 Fixed in 97.0.4692.99 CWE-416
TI-2022-00233 CVE-2022-0302 · GHSA-xxw2-f852-rrc4

Use after free in Google Chrome

Priority LOW 39

Use after free in Omnibox in Google Chrome prior to 97.0.4692.99 allowed an attacker who convinced a user to engage in specific user interactions to potentially exploit heap corruption via a crafted HTML page.

CVSS 3.1HIGH 8.8 Network No auth User interaction EPSS 0.00527 Published 2022-02-12 Fixed in 97.0.4692.99 CWE-416
TI-2022-00232 CVE-2022-0301 · GHSA-j8m3-w6cg-p954

Use after free in Google Chrome

Priority LOW 34

Heap buffer overflow in DevTools in Google Chrome prior to 97.0.4692.99 allowed an attacker who convinced a user to install a malicious extension to potentially exploit heap corruption via a crafted HTML page.

CVSS 3.1HIGH 7.8 Local No auth User interaction EPSS 0.00454 Published 2022-02-12 Fixed in 97.0.4692.99 CWE-416
TI-2022-00231 CVE-2022-0300 · GHSA-pq8c-7829-94j2

Use after free in Google Chrome

Priority LOW 39

Use after free in Text Input Method Editor in Google Chrome on Android prior to 97.0.4692.99 allowed a remote attacker who convinced a user to engage in specific user interactions to potentially exploit heap corruption v…

CVSS 3.1HIGH 8.8 Network No auth User interaction EPSS 0.0075 Published 2022-02-12 Fixed in 97.0.4692.99 CWE-416
TI-2022-00230 CVE-2022-0298 · GHSA-p8r2-hm7q-cvfj

Use after free in Google Chrome

Priority LOW 39

Use after free in Scheduling in Google Chrome prior to 97.0.4692.99 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page.

CVSS 3.1HIGH 8.8 Network No auth User interaction EPSS 0.0075 Published 2022-02-12 Fixed in 97.0.4692.99 CWE-416
TI-2022-00229 CVE-2022-0297 · GHSA-2832-r3gh-ghrj

Use after free in Google Chrome

Priority LOW 39

Use after free in Vulkan in Google Chrome prior to 97.0.4692.99 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page.

CVSS 3.1HIGH 8.8 Network No auth User interaction EPSS 0.0075 Published 2022-02-12 Fixed in 97.0.4692.99 CWE-416
TI-2022-00228 CVE-2022-0296 · GHSA-qq39-9gc2-6ggx

Use after free in Google Chrome

Priority LOW 39

Use after free in Printing in Google Chrome prior to 97.0.4692.99 allowed a remote attacker who convinced the user to engage is specific user interactions to potentially exploit heap corruption via a crafted HTML page.

CVSS 3.1HIGH 8.8 Network No auth User interaction EPSS 0.0075 Published 2022-02-12 Fixed in 97.0.4692.99 CWE-416
TI-2022-00227 CVE-2022-0295 · GHSA-wjr5-pg63-rf4x

Use after free in Google Chrome

Priority LOW 39

Use after free in Omnibox in Google Chrome prior to 97.0.4692.99 allowed a remote attacker who convinced the user to engage is specific user interactions to potentially exploit heap corruption via a crafted HTML page.

CVSS 3.1HIGH 8.8 Network No auth User interaction EPSS 0.0075 Published 2022-02-12 Fixed in 97.0.4692.99 CWE-416
TI-2022-00225 CVE-2022-0293 · GHSA-9wqr-mpwr-rf7h

Use after free in Google Chrome

Priority LOW 39

Use after free in Web packaging in Google Chrome prior to 97.0.4692.99 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page.

CVSS 3.1HIGH 8.8 Network No auth User interaction EPSS 0.0075 Published 2022-02-12 Fixed in 97.0.4692.99 CWE-416
TI-2022-00222 CVE-2022-0290 · GHSA-5xr9-wjmq-6q75

Use after free in Google Chrome

Priority MEDIUM 45

Use after free in Site isolation in Google Chrome prior to 97.0.4692.99 allowed a remote attacker to potentially perform a sandbox escape via a crafted HTML page.

CVSS 3.1CRITICAL 9.6 Network No auth User interaction EPSS 0.02038 Published 2022-02-12 Fixed in 97.0.4692.99 CWE-416
TI-2022-00221 CVE-2022-0289 · GHSA-qr83-g76r-xrjw

Use after free in Google Chrome

Priority MEDIUM 60

Use after free in Safe browsing in Google Chrome prior to 97.0.4692.99 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page.

CVSS 3.1HIGH 8.8 Network No auth User interaction EPSS 0.27734 Published 2022-02-12 Fixed in 97.0.4692.99 CWE-416