Read the docs

Vulnerabilities

Filters

Reset all
Threatist priority
Signals
Fix status
Impact type
Attack vector
Requirements
Product

Products as named in CPE, with their records.

Published
Weakness (CWE)
1 selected

2 records

Release: Google Chrome 86.0.4240.198 Clear all filters
TI-2020-12629 CVE-2020-16017 · GHSA-gvqv-779r-4jgp

Use after free in Google Chrome

Priority CRITICAL 100KEV

Use after free in site isolation in Google Chrome prior to 86.0.4240.198 allowed a remote attacker who had compromised the renderer process to potentially perform a sandbox escape via a crafted HTML page.

CVSS 3.1CRITICAL 9.6 Network No auth User interaction EPSS 0.0273 Published 2021-01-08 Fixed in 86.0.4240.198, 86.0.241 CWE-416
TI-2020-12625 CVE-2020-16013 · GHSA-x7fx-mcc9-27j7

Out-of-bounds write in Google Chrome

Priority CRITICAL 97KEV

Inappropriate implementation in V8 in Google Chrome prior to 86.0.4240.198 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page.

CVSS 3.1HIGH 8.8 Network No auth User interaction EPSS 0.02756 Published 2021-01-08 Fixed in 86.0.4240.198, 86.0.241 CWE-787