Read the docs

Vulnerabilities

Filters

Reset all
Threatist priority
Signals
Fix status
Impact type
Attack vector
Requirements
Product

Products as named in CPE, with their records.

Published
Weakness (CWE)
1 selected

7 records

TI-2024-02447 CVE-2024-2630 · GHSA-34g8-74vq-q8mf

Cross-site scripting in Google Chrome

Priority LOW 30

Inappropriate implementation in iOS in Google Chrome prior to 123.0.6312.58 allowed a remote attacker to leak cross-origin data via a crafted HTML page.

CVSS 3.1MEDIUM 6.5 Network No auth User interaction EPSS 0.00846 Published 2024-03-20 Fixed in 123.0.6312.58 CWE-79
TI-2024-02444 CVE-2024-2627 · GHSA-7gq4-2ph9-c8g7

Use after free in Google Chrome

Priority MEDIUM 42

Use after free in Canvas in Google Chrome prior to 123.0.6312.58 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page.

CVSS 3.1HIGH 8.8 Network No auth User interaction EPSS 0.00884 Published 2024-03-20 Fixed in 123.0.6312.58 CWE-416
TI-2024-02443 CVE-2024-2626 · GHSA-4www-jw36-m87h

Out-of-bounds read in Google Chrome

Priority LOW 30

Out of bounds read in Swiftshader in Google Chrome prior to 123.0.6312.58 allowed a remote attacker to perform out of bounds memory access via a crafted HTML page.

CVSS 3.1MEDIUM 6.5 Network No auth User interaction EPSS 0.00818 Published 2024-03-20 Fixed in 123.0.6312.58 CWE-125