Read the docs

Vulnerabilities

Filters

Reset all
Threatist priority
Signals
Fix status
Impact type
Attack vector
Requirements
Product

Products as named in CPE, with their records.

Published
Weakness (CWE)
1 selected

22 records

TI-2022-02426 CVE-2022-2624 · GHSA-8vhq-5hmx-q53c

Out-of-bounds write in Google Chrome

Priority MEDIUM 40

Heap buffer overflow in PDF in Google Chrome prior to 104.0.5112.79 allowed a remote attacker who convinced a user to engage in specific user interactions to potentially exploit heap corruption via a crafted PDF file.

CVSS 3.1HIGH 8.8 Network No auth User interaction EPSS 0.00948 Published 2022-08-12 Fixed in 104.0.5112.79 CWE-787
TI-2022-02425 CVE-2022-2623 · GHSA-6ffw-v5jw-v335

Race condition in Google Chrome

Priority LOW 39

Use after free in Offline in Google Chrome on Android prior to 104.0.5112.79 allowed a remote attacker who convinced a user to engage in specific user interactions to potentially exploit heap corruption via specific UI i…

CVSS 3.1HIGH 8.8 Network No auth User interaction EPSS 0.00717 Published 2022-08-12 Fixed in 104.0.5112.79 CWE-362
TI-2022-02423 CVE-2022-2621 · GHSA-wfvr-4p83-r8mf

Use after free in Google Chrome

Priority LOW 39

Use after free in Extensions in Google Chrome prior to 104.0.5112.79 allowed an attacker who convinced a user to install a malicious extension to potentially exploit heap corruption via specific UI interactions.

CVSS 3.1HIGH 8.8 Network No auth User interaction EPSS 0.00774 Published 2022-08-12 Fixed in 104.0.5112.79 CWE-416
Priority LOW 39

Use after free in WebUI in Google Chrome on Chrome OS prior to 104.0.5112.79 allowed a remote attacker who convinced a user to engage in specific user interactions to potentially exploit heap corruption via specific UI i…

CVSS 3.1HIGH 8.8 Network No auth User interaction EPSS 0.00724 Published 2022-08-12 Fixed in 104.0.5112.79 CWE-665
TI-2022-02421 CVE-2022-2619 · GHSA-7jm8-q7ph-7v6r

Improper output encoding in Google Chrome

Priority LOW 20

Insufficient validation of untrusted input in Settings in Google Chrome prior to 104.0.5112.79 allowed an attacker who convinced a user to install a malicious extension to inject scripts or HTML into a privileged page vi…

CVSS 3.1MEDIUM 4.3 Network No auth User interaction EPSS 0.00448 Published 2022-08-12 Fixed in 104.0.5112.79 CWE-116
TI-2022-02420 CVE-2022-2618 · GHSA-59wq-hh48-23vg

Improper input validation in Google Chrome

Priority LOW 30

Insufficient validation of untrusted input in Internals in Google Chrome prior to 104.0.5112.79 allowed a remote attacker to bypass download restrictions via a malicious file .

CVSS 3.1MEDIUM 6.5 Network No auth User interaction EPSS 0.00761 Published 2022-08-12 Fixed in 104.0.5112.79 CWE-20
TI-2022-02419 CVE-2022-2617 · GHSA-mjvf-v49w-4rwj

Race condition in Google Chrome

Priority LOW 38

Use after free in Extensions API in Google Chrome prior to 104.0.5112.79 allowed an attacker who convinced a user to install a malicious extension to potentially exploit heap corruption via specific UI interactions.

CVSS 3.1HIGH 8.8 Network No auth User interaction EPSS 0.0043 Published 2022-08-12 Fixed in 104.0.5112.79 CWE-362
Priority LOW 29

Inappropriate implementation in Extensions API in Google Chrome prior to 104.0.5112.79 allowed an attacker who convinced a user to install a malicious extension to spoof the contents of the Omnibox (URL bar) via a crafte…

CVSS 3.1MEDIUM 6.5 Network No auth User interaction EPSS 0.00502 Published 2022-08-12 Fixed in 104.0.5112.79
TI-2022-02416 CVE-2022-2614 · GHSA-7ggx-3w8m-q494

Use after free in Google Chrome

Priority LOW 39

Use after free in Sign-In Flow in Google Chrome prior to 104.0.5112.79 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page.

CVSS 3.1HIGH 8.8 Network No auth User interaction EPSS 0.0079 Published 2022-08-12 Fixed in 104.0.5112.79 CWE-416
TI-2022-02415 CVE-2022-2613 · GHSA-m3ww-86w6-hqwq

Use after free in Google Chrome

Priority MEDIUM 40

Use after free in Input in Google Chrome on Chrome OS prior to 104.0.5112.79 allowed a remote attacker who convinced a user to enage in specific user interactions to potentially exploit heap corruption via specific UI in…

CVSS 3.1HIGH 8.8 Network No auth User interaction EPSS 0.01014 Published 2022-08-12 Fixed in 104.0.5112.79 CWE-416
TI-2022-02414 CVE-2022-2612 · GHSA-842w-xcc3-c388

Observable discrepancy in Google Chrome

Priority LOW 30

Side-channel information leakage in Keyboard input in Google Chrome prior to 104.0.5112.79 allowed a remote attacker who had compromised the renderer process to obtain potentially sensitive information from process memor…

CVSS 3.1MEDIUM 6.5 Network No auth User interaction EPSS 0.00789 Published 2022-08-12 Fixed in 104.0.5112.79 CWE-203
Priority LOW 30

Insufficient policy enforcement in Background Fetch in Google Chrome prior to 104.0.5112.79 allowed a remote attacker to leak cross-origin data via a crafted HTML page.

CVSS 3.1MEDIUM 6.5 Network No auth User interaction EPSS 0.00818 Published 2022-08-12 Fixed in 104.0.5112.79 CWE-668
TI-2022-02411 CVE-2022-2609 · GHSA-95q6-7mr2-cvjh

Race condition in Google Chrome

Priority LOW 39

Use after free in Nearby Share in Google Chrome on Chrome OS prior to 104.0.5112.79 allowed a remote attacker who convinced a user to engage in specific user interactions to potentially exploit heap corruption via specif…

CVSS 3.1HIGH 8.8 Network No auth User interaction EPSS 0.00528 Published 2022-08-12 Fixed in 104.0.5112.79 CWE-362
TI-2022-02410 CVE-2022-2608 · GHSA-53hr-c96x-9633

Race condition in Google Chrome

Priority LOW 39

Use after free in Overview Mode in Google Chrome on Chrome OS prior to 104.0.5112.79 allowed a remote attacker who convinced a user to engage in specific user interactions to potentially exploit heap corruption via speci…

CVSS 3.1HIGH 8.8 Network No auth User interaction EPSS 0.00528 Published 2022-08-12 Fixed in 104.0.5112.79 CWE-362
TI-2022-02409 CVE-2022-2607 · GHSA-xfw5-333j-65xg

Race condition in Google Chrome

Priority LOW 39

Use after free in Tab Strip in Google Chrome on Chrome OS prior to 104.0.5112.79 allowed a remote attacker who convinced a user to engage in specific user interactions to potentially exploit heap corruption via specific…

CVSS 3.1HIGH 8.8 Network No auth User interaction EPSS 0.00514 Published 2022-08-12 Fixed in 104.0.5112.79 CWE-362
TI-2022-02408 CVE-2022-2606 · GHSA-q32c-f6mp-gx6h

Use after free in Google Chrome

Priority LOW 39

Use after free in Managed devices API in Google Chrome prior to 104.0.5112.79 allowed a remote attacker who convinced a user to enable a specific Enterprise policy to potentially exploit heap corruption via a crafted HTM…

CVSS 3.1HIGH 8.8 Network No auth User interaction EPSS 0.00769 Published 2022-08-12 Fixed in 104.0.5112.79 CWE-416
TI-2022-02407 CVE-2022-2605 · GHSA-2mp9-g8xj-wfxh

Out-of-bounds read in Google Chrome

Priority LOW 30

Out of bounds read in Dawn in Google Chrome prior to 104.0.5112.79 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page.

CVSS 3.1MEDIUM 6.5 Network No auth User interaction EPSS 0.00768 Published 2022-08-12 Fixed in 104.0.5112.79 CWE-125
TI-2022-02406 CVE-2022-2604 · GHSA-635r-969h-v4w6

Use after free in Google Chrome

Priority LOW 39

Use after free in Safe Browsing in Google Chrome prior to 104.0.5112.79 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page.

CVSS 3.1HIGH 8.8 Network No auth User interaction EPSS 0.00769 Published 2022-08-12 Fixed in 104.0.5112.79 CWE-416
TI-2022-02405 CVE-2022-2603 · GHSA-j92r-6hmg-4p28

Use after free in Google Chrome

Priority MEDIUM 40

Use after free in Omnibox in Google Chrome prior to 104.0.5112.79 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page.

CVSS 3.1HIGH 8.8 Network No auth User interaction EPSS 0.00814 Published 2022-08-12 Fixed in 104.0.5112.79 CWE-416