Read the docs

Vulnerabilities

Filters

Reset all
Threatist priority
Signals
Fix status
Impact type
Attack vector
Requirements
Product

Products as named in CPE, with their records.

Published
Weakness (CWE)
1 selected

11 records

Priority LOW 24

Inappropriate implementation in File input in Google Chrome prior to 145.0.7632.45 allowed a remote attacker who convinced a user to engage in specific UI gestures to perform UI spoofing via a crafted HTML page.

CVSS 3.1MEDIUM 5.4 Network No auth User interaction EPSS 0.00247 Published 2026-02-11 Fixed in 145.0.7632.45 CWE-451
TI-2026-01962 CVE-2026-2321 · GHSA-hpj8-5pv7-f58m

Use after free in Google Chrome

Priority MEDIUM 40

Use after free in Ozone in Google Chrome prior to 145.0.7632.45 allowed a remote attacker who convinced a user to engage in specific UI gestures to potentially exploit heap corruption via a crafted HTML page.

CVSS 3.1HIGH 8.8 Network No auth User interaction EPSS 0.00287 Published 2026-02-11 Fixed in 145.0.7632.45 CWE-416
Priority LOW 28

Inappropriate implementation in File input in Google Chrome prior to 145.0.7632.45 allowed a remote attacker who convinced a user to engage in specific UI gestures to perform UI spoofing via a crafted HTML page.

CVSS 3.1MEDIUM 6.5 Network No auth User interaction EPSS 0.00248 Published 2026-02-11 Fixed in 145.0.7632.45 CWE-451
TI-2026-01960 CVE-2026-2319 · GHSA-pp78-hqqc-jrrq

Race condition in Google Chrome

Priority LOW 34

Race in DevTools in Google Chrome prior to 145.0.7632.45 allowed a remote attacker who convinced a user to engage in specific UI gestures and install a malicious extension to potentially exploit object corruption via a m…

CVSS 3.1HIGH 7.5 Network No auth User interaction EPSS 0.00224 Published 2026-02-11 Fixed in 145.0.7632.45 CWE-362
Priority LOW 28

Inappropriate implementation in PictureInPicture in Google Chrome prior to 145.0.7632.45 allowed a remote attacker who convinced a user to engage in specific UI gestures to perform UI spoofing via a crafted HTML page.

CVSS 3.1MEDIUM 6.5 Network No auth User interaction EPSS 0.00266 Published 2026-02-11 Fixed in 145.0.7632.45 CWE-451
TI-2026-01958 CVE-2026-2317 · GHSA-gvjm-pmwp-75mw

Information disclosure in Google Chrome

Priority LOW 28

Inappropriate implementation in Animation in Google Chrome prior to 145.0.7632.45 allowed a remote attacker to leak cross-origin data via a crafted HTML page.

CVSS 3.1MEDIUM 6.5 Network No auth User interaction EPSS 0.00235 Published 2026-02-11 Fixed in 145.0.7632.45 CWE-200
Priority MEDIUM 48

Heap buffer overflow in Codecs in Google Chrome prior to 145.0.7632.45 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page.

CVSS 3.1HIGH 8.8 Network No auth User interaction EPSS 0.04624 Published 2026-02-11 Fixed in 145.0.7632.45 CWE-122
TI-2026-01954 CVE-2026-2313 · GHSA-4r9x-qh7r-9qv9

Use after free in Google Chrome

Priority MEDIUM 47

Use after free in CSS in Google Chrome prior to 145.0.7632.45 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page.

CVSS 3.1HIGH 8.8 Network No auth User interaction EPSS 0.04508 Published 2026-02-11 Fixed in 145.0.7632.45 CWE-416