Read the docs

Vulnerabilities

Filters

Reset all
Threatist priority
Signals
Fix status
Impact type
Attack vector
Requirements
Product

Products as named in CPE, with their records.

Published
Weakness (CWE)
1 selected

5 records

TI-2025-08132 CVE-2025-8882 · GHSA-2cw7-hww6-h37w

Use after free in Google Chrome

Priority MEDIUM 40

Use after free in Aura in Google Chrome prior to 139.0.7258.127 allowed a remote attacker who convinced a user to engage in specific UI gestures to potentially exploit heap corruption via a crafted HTML page.

CVSS 3.1HIGH 8.8 Network No auth User interaction EPSS 0.00274 Published 2025-08-13 Fixed in 139.0.7258.127 CWE-416
TI-2025-08131 CVE-2025-8881 · GHSA-c4fm-x36h-pwf6

Origin validation error in Google Chrome

Priority LOW 28

Inappropriate implementation in File Picker in Google Chrome prior to 139.0.7258.127 allowed a remote attacker who convinced a user to engage in specific UI gestures to leak cross-origin data via a crafted HTML page.

CVSS 3.1MEDIUM 6.5 Network No auth User interaction EPSS 0.00256 Published 2025-08-13 Fixed in 139.0.7258.127 CWE-303
TI-2025-08149 CVE-2025-8901 · GHSA-9369-5fxh-crgj

Out-of-bounds write in Google Chrome

Priority MEDIUM 40

Out of bounds write in ANGLE in Google Chrome prior to 139.0.7258.127 allowed a remote attacker to perform out of bounds memory access via a crafted HTML page.

CVSS 3.1HIGH 8.8 Network No auth User interaction EPSS 0.00335 Published 2025-08-13 Partial fix · 139.0.7258.127 CWE-787
TI-2025-08130 CVE-2025-8880 · GHSA-fq24-jfwg-3h3p

Race condition in Google Chrome

Priority MEDIUM 40

Race in V8 in Google Chrome prior to 139.0.7258.127 allowed a remote attacker to execute arbitrary code inside a sandbox via a crafted HTML page.

CVSS 3.1HIGH 8.8 Network No auth User interaction EPSS 0.0028 Published 2025-08-13 Fixed in 139.0.7258.127 CWE-362
Priority MEDIUM 40

Heap buffer overflow in libaom in Google Chrome prior to 139.0.7258.127 allowed a remote attacker to potentially exploit heap corruption via a curated set of gestures.

CVSS 3.1HIGH 8.8 Network No auth User interaction EPSS 0.00295 Published 2025-08-13 Fixed in 139.0.7258.127 CWE-122