Read the docs

Vulnerabilities

Filters

Reset all
Threatist priority
Signals
Fix status
Impact type
Attack vector
Requirements
Product

Products as named in CPE, with their records.

Published
Weakness (CWE)
1 selected

8 records

TI-2024-06282 CVE-2024-6779 · GHSA-v4v9-v4wf-9c86

Out-of-bounds read in Google Chrome

Priority MEDIUM 52

Out of bounds memory access in V8 in Google Chrome prior to 126.0.6478.182 allowed a remote attacker to potentially perform a sandbox escape via a crafted HTML page.

CVSS 3.1CRITICAL 9.6 Network No auth User interaction EPSS 0.06265 Published 2024-07-16 Fixed in 126.0.6478.182 CWE-125
TI-2024-06281 CVE-2024-6778 · GHSA-9m98-937v-r97x

Race condition in Google Chrome

Priority MEDIUM 41

Race in DevTools in Google Chrome prior to 126.0.6478.182 allowed an attacker who convinced a user to install a malicious extension to inject scripts or HTML into a privileged page via a crafted Chrome Extension.

CVSS 3.1HIGH 8.8 Network No auth User interaction EPSS 0.00788 Published 2024-07-16 Fixed in 126.0.6478.182 CWE-362
TI-2024-06280 CVE-2024-6777 · GHSA-w2v8-c457-cjvf

Use after free in Google Chrome

Priority MEDIUM 40

Use after free in Navigation in Google Chrome prior to 126.0.6478.182 allowed an attacker who convinced a user to install a malicious extension to potentially exploit heap corruption via a crafted Chrome Extension.

CVSS 3.1HIGH 8.8 Network No auth User interaction EPSS 0.00338 Published 2024-07-16 Fixed in 126.0.6478.182 CWE-416
TI-2024-06279 CVE-2024-6776 · GHSA-7hjm-9cg2-rcg6

Use after free in Google Chrome

Priority MEDIUM 40

Use after free in Audio in Google Chrome prior to 126.0.6478.182 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page.

CVSS 3.1HIGH 8.8 Network No auth User interaction EPSS 0.00465 Published 2024-07-16 Fixed in 126.0.6478.182 CWE-416
TI-2024-06278 CVE-2024-6775 · GHSA-mxwm-jm3p-mh5m

Use after free in Google Chrome

Priority MEDIUM 40

Use after free in Media Stream in Google Chrome prior to 126.0.6478.182 allowed a remote attacker who convinced a user to engage in specific UI gestures to potentially exploit heap corruption via a crafted HTML page.

CVSS 3.1HIGH 8.8 Network No auth User interaction EPSS 0.00465 Published 2024-07-16 Fixed in 126.0.6478.182 CWE-416
TI-2024-06277 CVE-2024-6774 · GHSA-cgm7-mqr6-f7vg

Use after free in Google Chrome

Priority MEDIUM 41

Use after free in Screen Capture in Google Chrome prior to 126.0.6478.182 allowed a remote attacker who convinced a user to engage in specific UI gestures to potentially exploit heap corruption via a crafted HTML page.

CVSS 3.1HIGH 8.8 Network No auth User interaction EPSS 0.00477 Published 2024-07-16 Fixed in 126.0.6478.182 CWE-416
TI-2024-06276 CVE-2024-6773 · GHSA-7gj8-545r-5295

Out-of-bounds write in Google Chrome

Priority MEDIUM 41

Inappropriate implementation in V8 in Google Chrome prior to 126.0.6478.182 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page.

CVSS 3.1HIGH 8.8 Network No auth User interaction EPSS 0.00477 Published 2024-07-16 Fixed in 126.0.6478.182 CWE-787
TI-2024-06275 CVE-2024-6772 · GHSA-cc8c-62x7-qwjr

Out-of-bounds write in Google Chrome

Priority MEDIUM 41

Inappropriate implementation in V8 in Google Chrome prior to 126.0.6478.182 allowed a remote attacker to perform out of bounds memory access via a crafted HTML page.

CVSS 3.1HIGH 8.8 Network No auth User interaction EPSS 0.00534 Published 2024-07-16 Fixed in 126.0.6478.182 CWE-358