Read the docs

Vulnerabilities

Filters

Reset all
Threatist priority
Signals
Fix status
Impact type
Attack vector
Requirements
Product

Products as named in CPE, with their records.

Published
Weakness (CWE)
1 selected

8 records

TI-2026-04075 CVE-2026-4680 · GHSA-ff93-q3vw-vxx2

Use after free in Google Chrome

Priority MEDIUM 40

Use after free in FedCM in Google Chrome prior to 146.0.7680.165 allowed a remote attacker to execute arbitrary code inside a sandbox via a crafted HTML page.

CVSS 3.1HIGH 8.8 Network No auth User interaction EPSS 0.00428 Published 2026-03-24 Fixed in 146.0.7680.165 CWE-416
TI-2026-04074 CVE-2026-4679 · GHSA-ffwc-xvf2-hgr5

Integer overflow in Google Chrome

Priority MEDIUM 40

Integer overflow in Fonts in Google Chrome prior to 146.0.7680.165 allowed a remote attacker to perform an out of bounds memory write via a crafted HTML page.

CVSS 3.1HIGH 8.8 Network No auth User interaction EPSS 0.00346 Published 2026-03-24 Fixed in 146.0.7680.165 CWE-472
TI-2026-04073 CVE-2026-4678 · GHSA-2f37-6r53-rgxp

Use after free in Google Chrome

Priority MEDIUM 40

Use after free in WebGPU in Google Chrome prior to 146.0.7680.165 allowed a remote attacker to execute arbitrary code inside a sandbox via a crafted HTML page.

CVSS 3.1HIGH 8.8 Network No auth User interaction EPSS 0.00404 Published 2026-03-24 Fixed in 146.0.7680.165 CWE-416
TI-2026-04072 CVE-2026-4677 · GHSA-5v75-mv76-85fm

Out-of-bounds read in Google Chrome

Priority MEDIUM 40

Inappropriate implementation in WebAudio in Google Chrome prior to 146.0.7680.165 allowed a remote attacker to perform an out of bounds memory read via a crafted HTML page.

CVSS 3.1HIGH 8.8 Network No auth User interaction EPSS 0.00455 Published 2026-03-24 Fixed in 146.0.7680.165 CWE-125
TI-2026-04071 CVE-2026-4676 · GHSA-2448-99wr-g9vj

Use after free in Google Chrome

Priority MEDIUM 40

Use after free in Dawn in Google Chrome prior to 146.0.7680.165 allowed a remote attacker to potentially perform a sandbox escape via a crafted HTML page.

CVSS 3.1HIGH 8.8 Network No auth User interaction EPSS 0.00365 Published 2026-03-24 Fixed in 146.0.7680.165 CWE-416
Priority MEDIUM 40

Heap buffer overflow in WebGL in Google Chrome prior to 146.0.7680.165 allowed a remote attacker to perform an out of bounds memory read via a crafted HTML page.

CVSS 3.1HIGH 8.8 Network No auth User interaction EPSS 0.00392 Published 2026-03-24 Fixed in 146.0.7680.165 CWE-122
TI-2026-04069 CVE-2026-4674 · GHSA-3364-vw5q-hfh3

Out-of-bounds read in Google Chrome

Priority MEDIUM 40

Out of bounds read in CSS in Google Chrome prior to 146.0.7680.165 allowed a remote attacker to perform out of bounds memory access via a crafted HTML page.

CVSS 3.1HIGH 8.8 Network No auth User interaction EPSS 0.00462 Published 2026-03-24 Fixed in 146.0.7680.165 CWE-125
Priority MEDIUM 41

Heap buffer overflow in WebAudio in Google Chrome prior to 146.0.7680.165 allowed a remote attacker to perform an out of bounds memory write via a crafted HTML page.

CVSS 3.1HIGH 8.8 Network No auth User interaction EPSS 0.00513 Published 2026-03-24 Fixed in 146.0.7680.165 CWE-122