Priority MEDIUM 40
Heap buffer overflow in PDF in Google Chrome prior to 104.0.5112.79 allowed a remote attacker who convinced a user to engage in specific user interactions to potentially exploit heap corruption via a crafted PDF file.
CVSS 3.1HIGH 8.8· Network · No auth · User interaction · EPSS 0.00948 · Published 2022-08-12 · Fixed in 104.0.5112.79 CWE-787
Priority LOW 39
Use after free in Offline in Google Chrome on Android prior to 104.0.5112.79 allowed a remote attacker who convinced a user to engage in specific user interactions to potentially exploit heap corruption via specific UI i…
CVSS 3.1HIGH 8.8· Network · No auth · User interaction · EPSS 0.00717 · Published 2022-08-12 · Fixed in 104.0.5112.79 CWE-362
Priority LOW 30
Insufficient validation of untrusted input in Safe Browsing in Google Chrome on Windows prior to 104.0.5112.79 allowed a remote attacker to bypass download restrictions via a crafted file.
CVSS 3.1MEDIUM 6.5· Network · No auth · User interaction · EPSS 0.00714 · Published 2022-08-12 · Fixed in 104.0.5112.79
Priority LOW 39
Use after free in Extensions in Google Chrome prior to 104.0.5112.79 allowed an attacker who convinced a user to install a malicious extension to potentially exploit heap corruption via specific UI interactions.
CVSS 3.1HIGH 8.8· Network · No auth · User interaction · EPSS 0.00774 · Published 2022-08-12 · Fixed in 104.0.5112.79 CWE-416
Priority LOW 39
Use after free in WebUI in Google Chrome on Chrome OS prior to 104.0.5112.79 allowed a remote attacker who convinced a user to engage in specific user interactions to potentially exploit heap corruption via specific UI i…
CVSS 3.1HIGH 8.8· Network · No auth · User interaction · EPSS 0.00724 · Published 2022-08-12 · Fixed in 104.0.5112.79 CWE-665
Priority LOW 20
Insufficient validation of untrusted input in Settings in Google Chrome prior to 104.0.5112.79 allowed an attacker who convinced a user to install a malicious extension to inject scripts or HTML into a privileged page vi…
CVSS 3.1MEDIUM 4.3· Network · No auth · User interaction · EPSS 0.00448 · Published 2022-08-12 · Fixed in 104.0.5112.79 CWE-116
Priority LOW 30
Insufficient validation of untrusted input in Internals in Google Chrome prior to 104.0.5112.79 allowed a remote attacker to bypass download restrictions via a malicious file .
CVSS 3.1MEDIUM 6.5· Network · No auth · User interaction · EPSS 0.00761 · Published 2022-08-12 · Fixed in 104.0.5112.79 CWE-20
Priority LOW 38
Use after free in Extensions API in Google Chrome prior to 104.0.5112.79 allowed an attacker who convinced a user to install a malicious extension to potentially exploit heap corruption via specific UI interactions.
CVSS 3.1HIGH 8.8· Network · No auth · User interaction · EPSS 0.0043 · Published 2022-08-12 · Fixed in 104.0.5112.79 CWE-362
Priority LOW 29
Inappropriate implementation in Extensions API in Google Chrome prior to 104.0.5112.79 allowed an attacker who convinced a user to install a malicious extension to spoof the contents of the Omnibox (URL bar) via a crafte…
CVSS 3.1MEDIUM 6.5· Network · No auth · User interaction · EPSS 0.00502 · Published 2022-08-12 · Fixed in 104.0.5112.79
Priority LOW 30
Insufficient policy enforcement in Cookies in Google Chrome prior to 104.0.5112.79 allowed a remote attacker to leak cross-origin data via a crafted HTML page.
CVSS 3.1MEDIUM 6.5· Network · No auth · User interaction · EPSS 0.00768 · Published 2022-08-12 · Fixed in 104.0.5112.79 CWE-565
Priority LOW 39
Use after free in Sign-In Flow in Google Chrome prior to 104.0.5112.79 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page.
CVSS 3.1HIGH 8.8· Network · No auth · User interaction · EPSS 0.0079 · Published 2022-08-12 · Fixed in 104.0.5112.79 CWE-416
Priority MEDIUM 40
Use after free in Input in Google Chrome on Chrome OS prior to 104.0.5112.79 allowed a remote attacker who convinced a user to enage in specific user interactions to potentially exploit heap corruption via specific UI in…
CVSS 3.1HIGH 8.8· Network · No auth · User interaction · EPSS 0.01014 · Published 2022-08-12 · Fixed in 104.0.5112.79 CWE-416
Priority LOW 30
Side-channel information leakage in Keyboard input in Google Chrome prior to 104.0.5112.79 allowed a remote attacker who had compromised the renderer process to obtain potentially sensitive information from process memor…
CVSS 3.1MEDIUM 6.5· Network · No auth · User interaction · EPSS 0.00789 · Published 2022-08-12 · Fixed in 104.0.5112.79 CWE-203
Priority LOW 21
Inappropriate implementation in Fullscreen API in Google Chrome on Android prior to 104.0.5112.79 allowed a remote attacker to spoof the contents of the Omnibox (URL bar) via a crafted HTML page.
CVSS 3.1MEDIUM 4.3· Network · No auth · User interaction · EPSS 0.0067 · Published 2022-08-12 · Fixed in 104.0.5112.79
Priority LOW 30
Insufficient policy enforcement in Background Fetch in Google Chrome prior to 104.0.5112.79 allowed a remote attacker to leak cross-origin data via a crafted HTML page.
CVSS 3.1MEDIUM 6.5· Network · No auth · User interaction · EPSS 0.00818 · Published 2022-08-12 · Fixed in 104.0.5112.79 CWE-668
Priority LOW 39
Use after free in Nearby Share in Google Chrome on Chrome OS prior to 104.0.5112.79 allowed a remote attacker who convinced a user to engage in specific user interactions to potentially exploit heap corruption via specif…
CVSS 3.1HIGH 8.8· Network · No auth · User interaction · EPSS 0.00528 · Published 2022-08-12 · Fixed in 104.0.5112.79 CWE-362
Priority LOW 39
Use after free in Overview Mode in Google Chrome on Chrome OS prior to 104.0.5112.79 allowed a remote attacker who convinced a user to engage in specific user interactions to potentially exploit heap corruption via speci…
CVSS 3.1HIGH 8.8· Network · No auth · User interaction · EPSS 0.00528 · Published 2022-08-12 · Fixed in 104.0.5112.79 CWE-362
Priority LOW 39
Use after free in Tab Strip in Google Chrome on Chrome OS prior to 104.0.5112.79 allowed a remote attacker who convinced a user to engage in specific user interactions to potentially exploit heap corruption via specific…
CVSS 3.1HIGH 8.8· Network · No auth · User interaction · EPSS 0.00514 · Published 2022-08-12 · Fixed in 104.0.5112.79 CWE-362
Priority LOW 39
Use after free in Managed devices API in Google Chrome prior to 104.0.5112.79 allowed a remote attacker who convinced a user to enable a specific Enterprise policy to potentially exploit heap corruption via a crafted HTM…
CVSS 3.1HIGH 8.8· Network · No auth · User interaction · EPSS 0.00769 · Published 2022-08-12 · Fixed in 104.0.5112.79 CWE-416
Priority LOW 30
Out of bounds read in Dawn in Google Chrome prior to 104.0.5112.79 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page.
CVSS 3.1MEDIUM 6.5· Network · No auth · User interaction · EPSS 0.00768 · Published 2022-08-12 · Fixed in 104.0.5112.79 CWE-125
Priority LOW 39
Use after free in Safe Browsing in Google Chrome prior to 104.0.5112.79 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page.
CVSS 3.1HIGH 8.8· Network · No auth · User interaction · EPSS 0.00769 · Published 2022-08-12 · Fixed in 104.0.5112.79 CWE-416
Priority MEDIUM 40
Use after free in Omnibox in Google Chrome prior to 104.0.5112.79 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page.
CVSS 3.1HIGH 8.8· Network · No auth · User interaction · EPSS 0.00814 · Published 2022-08-12 · Fixed in 104.0.5112.79 CWE-416