Read the docs

Vulnerabilities

Filters

Reset all
Threatist priority
Signals
Fix status
Impact type
Attack vector
Requirements
Product

Products as named in CPE, with their records.

Published
Weakness (CWE)
1 selected

6 records

TI-2020-12610 CVE-2020-15998 · GHSA-77rh-rhf3-j265

Use after free in Google Chrome

Priority LOW 39

Use after free in USB in Google Chrome prior to 86.0.4240.99 allowed a remote attacker who had compromised the renderer process to potentially perform a sandbox escape via a crafted HTML page.

CVSS 3.1HIGH 8.8 Network No auth User interaction EPSS 0.00745 Published 2020-11-03 Fixed in 86.0.4240.99 CWE-416
TI-2020-12609 CVE-2020-15997 · GHSA-pv4c-f5cp-hcvh

Use after free in Google Chrome

Priority MEDIUM 40

Use after free in Mojo in Google Chrome prior to 86.0.4240.99 allowed a remote attacker who had compromised the renderer process to potentially perform a sandbox escape via a crafted HTML page.

CVSS 3.1HIGH 8.8 Network No auth User interaction EPSS 0.00921 Published 2020-11-03 Fixed in 86.0.4240.99 CWE-416
TI-2020-12608 CVE-2020-15996 · GHSA-536w-qxrw-jpgf

Use after free in Google Chrome

Priority MEDIUM 40

Use after free in passwords in Google Chrome prior to 86.0.4240.99 allowed a remote attacker who had compromised the renderer process to potentially perform a sandbox escape via a crafted HTML page.

CVSS 3.1HIGH 8.8 Network No auth User interaction EPSS 0.00844 Published 2020-11-03 Fixed in 86.0.4240.99 CWE-416
TI-2020-12607 CVE-2020-15995 · GHSA-j83x-r8mr-4j9g

Out-of-bounds write in Google Chrome

Priority MEDIUM 41

Out of bounds write in V8 in Google Chrome prior to 86.0.4240.99 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page.

CVSS 3.1HIGH 8.8 Network No auth User interaction EPSS 0.01271 Published 2020-11-03 Fixed in 86.0.4240.99 CWE-787
TI-2020-12606 CVE-2020-15994 · GHSA-9pg9-hg9f-fw5m

Use after free in Google Chrome

Priority MEDIUM 52

Use after free in V8 in Google Chrome prior to 86.0.4240.99 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page.

CVSS 3.1HIGH 8.8 Network No auth User interaction EPSS 0.12225 Published 2020-11-03 Fixed in 86.0.4240.99 CWE-416
TI-2020-12605 CVE-2020-15993 · GHSA-3fx3-ffmg-4cwp

Use after free in Google Chrome

Priority MEDIUM 44

Use after free in printing in Google Chrome prior to 86.0.4240.99 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.01125 Published 2020-11-03 Fixed in 86.0.4240.99 CWE-416