Read the docs

Vulnerabilities

Filters

Reset all
Threatist priority
Signals
Fix status
Impact type
Attack vector
Requirements
Product

Products as named in CPE, with their records.

Published
Weakness (CWE)
1 selected

3 records

TI-2024-03276 CVE-2024-3515 · GHSA-x6cj-gx36-vcxv

Use after free in Google Chrome

Priority LOW 32

Use after free in Dawn in Google Chrome prior to 123.0.6312.122 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page.

CVSS 3.1MEDIUM 6.5 Network No auth User interaction EPSS 0.00779 Published 2024-04-10 Fixed in 123.0.6312.122 CWE-416
Priority MEDIUM 42

Heap buffer overflow in ANGLE in Google Chrome prior to 123.0.6312.122 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page.

CVSS 3.1HIGH 8.8 Network No auth User interaction EPSS 0.01009 Published 2024-04-10 Fixed in 123.0.6312.122 CWE-122
TI-2024-02957 CVE-2024-3157 · GHSA-4m4g-p795-cmq7

Out-of-bounds write in Google Chrome

Priority MEDIUM 44

Out of bounds memory access in Compositing in Google Chrome prior to 123.0.6312.122 allowed a remote attacker who had compromised the GPU process to potentially perform a sandbox escape via specific UI gestures.

CVSS 3.1CRITICAL 9.6 Network No auth User interaction EPSS 0.00848 Published 2024-04-10 Fixed in 123.0.6312.122 CWE-787