Read the docs

Vulnerabilities

Filters

Reset all
Threatist priority
Signals
Fix status
Impact type
Attack vector
Requirements
Product

Products as named in CPE, with their records.

Published
Weakness (CWE)
1 selected

4 records

TI-2023-00449 CVE-2023-0474 · GHSA-wj5q-gv6p-4mq7

Use after free in Google Chrome

Priority MEDIUM 41

Use after free in GuestView in Google Chrome prior to 109.0.5414.119 allowed an attacker who convinced a user to install a malicious extension to potentially exploit heap corruption via a Chrome web app.

CVSS 3.1HIGH 8.8 Network No auth User interaction EPSS 0.00506 Published 2023-01-24 Fixed in 109.0.5414.119 CWE-416
TI-2023-00448 CVE-2023-0473 · GHSA-hcvf-6jgc-ffmq

Type confusion in Google Chrome

Priority MEDIUM 41

Type Confusion in ServiceWorker API in Google Chrome prior to 109.0.5414.119 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page.

CVSS 3.1HIGH 8.8 Network No auth User interaction EPSS 0.00696 Published 2023-01-24 Fixed in 109.0.5414.119 CWE-843
TI-2023-00447 CVE-2023-0472 · GHSA-c5g6-68cc-f3vh

Use after free in Google Chrome

Priority MEDIUM 41

Use after free in WebRTC in Google Chrome prior to 109.0.5414.119 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page.

CVSS 3.1HIGH 8.8 Network No auth User interaction EPSS 0.0071 Published 2023-01-24 Fixed in 109.0.5414.119 CWE-416
TI-2023-00446 CVE-2023-0471 · GHSA-h993-r4m3-557w

Use after free in Google Chrome

Priority MEDIUM 41

Use after free in WebTransport in Google Chrome prior to 109.0.5414.119 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page.

CVSS 3.1HIGH 8.8 Network No auth User interaction EPSS 0.00757 Published 2023-01-24 Fixed in 109.0.5414.119 CWE-416