Read the docs

Vulnerabilities

Filters

Reset all
Threatist priority
Signals
Fix status
Impact type
Attack vector
Requirements
Product

Products as named in CPE, with their records.

Published
Weakness (CWE)
1 selected

7 records

Release: Google Chrome 105.0.5195.125 Clear all filters
TI-2022-02956 CVE-2022-3201 · GHSA-3qqv-xxhx-9ggc

Improper input validation in Google Chrome

Priority LOW 26

Insufficient validation of untrusted input in DevTools in Google Chrome on Chrome OS prior to 105.0.5195.125 allowed an attacker who convinced a user to install a malicious extension to bypass navigation restrictions via…

CVSS 3.1MEDIUM 5.4 Network No auth User interaction EPSS 0.00817 Published 2022-09-26 Fixed in 105.0.5195.125 CWE-20
TI-2022-02955 CVE-2022-3200 · GHSA-4p6f-vmpg-88hm

Out-of-bounds write in Google Chrome

Priority MEDIUM 42

Heap buffer overflow in Internals in Google Chrome prior to 105.0.5195.125 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page.

CVSS 3.1HIGH 8.8 Network No auth User interaction EPSS 0.00881 Published 2022-09-26 Fixed in 105.0.5195.125 CWE-787
TI-2022-02954 CVE-2022-3199 · GHSA-rpc9-wm96-3rrj

Use after free in Google Chrome

Priority MEDIUM 45

Use after free in Frames in Google Chrome prior to 105.0.5195.125 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page.

CVSS 3.1HIGH 8.8 Network No auth User interaction EPSS 0.02418 Published 2022-09-26 Fixed in 105.0.5195.125 CWE-416
TI-2022-02953 CVE-2022-3198 · GHSA-33cr-xf9m-fqqr

Use after free in Google Chrome

Priority MEDIUM 41

Use after free in PDF in Google Chrome prior to 105.0.5195.125 allowed a remote attacker to potentially exploit heap corruption via a crafted PDF file.

CVSS 3.1HIGH 8.8 Network No auth User interaction EPSS 0.00776 Published 2022-09-26 Fixed in 105.0.5195.125 CWE-416
TI-2022-02952 CVE-2022-3197 · GHSA-gwrf-xxxj-ch7q

Use after free in Google Chrome

Priority MEDIUM 42

Use after free in PDF in Google Chrome prior to 105.0.5195.125 allowed a remote attacker to potentially exploit heap corruption via a crafted PDF file.

CVSS 3.1HIGH 8.8 Network No auth User interaction EPSS 0.01083 Published 2022-09-26 Fixed in 105.0.5195.125 CWE-416
TI-2022-02951 CVE-2022-3196 · GHSA-xv7p-vwj6-p73h

Use after free in Google Chrome

Priority HIGH 73

Use after free in PDF in Google Chrome prior to 105.0.5195.125 allowed a remote attacker to potentially exploit heap corruption via a crafted PDF file.

CVSS 3.1HIGH 8.8 Network No auth User interaction EPSS 0.01086 Published 2022-09-26 Fixed in 105.0.5195.125 CWE-416
TI-2022-02950 CVE-2022-3195 · GHSA-m2pv-ff2q-qxxj

Out-of-bounds write in Google Chrome

Priority HIGH 73

Out of bounds write in Storage in Google Chrome prior to 105.0.5195.125 allowed a remote attacker to perform an out of bounds memory write via a crafted HTML page.

CVSS 3.1HIGH 8.8 Network No auth User interaction EPSS 0.01294 Published 2022-09-26 Fixed in 105.0.5195.125 CWE-787