Read the docs

Vulnerabilities

Filters

Reset all
Threatist priority
Signals
Fix status
Impact type
Attack vector
Requirements
Product

Products as named in CPE, with their records.

Published
Weakness (CWE)
1 selected

3 records

TI-2024-02974 CVE-2024-3174 · GHSA-qw4m-qq5c-43c6

Cross-site scripting in Google Chrome

Priority MEDIUM 40

Inappropriate implementation in V8 in Google Chrome prior to 119.0.6045.105 allowed a remote attacker to potentially exploit object corruption via a crafted HTML page.

CVSS 3.1HIGH 8.8 Network No auth User interaction EPSS 0.00366 Published 2024-07-16 Fixed in 119.0.6045.105 CWE-79
TI-2023-06410 CVE-2023-7013 · GHSA-6mmr-3476-3p9f

Clickjacking in Google Chrome

Priority LOW 24

Inappropriate implementation in Compositing in Google Chrome prior to 119.0.6045.105 allowed a remote attacker to potentially spoof security UI via a crafted HTML page.

CVSS 3.1MEDIUM 5.4 Network No auth User interaction EPSS 0.00248 Published 2024-07-16 Fixed in 119.0.6045.105 CWE-1021
Priority MEDIUM 62

Inappropriate implementation in Picture in Picture in Google Chrome prior to 119.0.6045.105 allowed a remote attacker to spoof the contents of the Omnibox (URL bar) via a crafted HTML page.

CVSS 3.1MEDIUM 6.5 Network No auth User interaction EPSS 0.00415 Published 2024-07-16 Fixed in 119.0.6045.105 CWE-451