Read the docs

Vulnerabilities

Filters

Reset all
Threatist priority
Signals
Fix status
Impact type
Attack vector
Requirements
Product

Products as named in CPE, with their records.

Published
Weakness (CWE)
1 selected

16 records

TI-2021-15716 CVE-2021-37972 · GHSA-fwwp-958j-rpq7

Out-of-bounds read in Google Chrome

Priority MEDIUM 42

Out of bounds read in libjpeg-turbo in Google Chrome prior to 94.0.4606.54 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page.

CVSS 3.1HIGH 8.8 Network No auth User interaction EPSS 0.01787 Published 2021-10-08 Fixed in 94.0.4606.54 CWE-125
TI-2021-15715 CVE-2021-37971 · GHSA-mg5m-5fx8-79xh

Clickjacking in Google Chrome

Priority LOW 23

Incorrect security UI in Web Browser UI in Google Chrome prior to 94.0.4606.54 allowed a remote attacker to spoof the contents of the Omnibox (URL bar) via a crafted HTML page.

CVSS 3.1MEDIUM 4.3 Network No auth User interaction EPSS 0.01263 Published 2021-10-08 Fixed in 94.0.4606.54 CWE-1021
TI-2021-15714 CVE-2021-37970 · GHSA-g9v6-qf5c-6v3h

Use after free in Google Chrome

Priority MEDIUM 41

Use after free in File System API in Google Chrome prior to 94.0.4606.54 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page.

CVSS 3.1HIGH 8.8 Network No auth User interaction EPSS 0.01451 Published 2021-10-08 Fixed in 94.0.4606.54 CWE-416
TI-2021-15713 CVE-2021-37969 · GHSA-w47r-7v68-q6fc

Link following in Google Chrome

Priority LOW 36

Inappropriate implementation in Google Updater in Google Chrome on Windows prior to 94.0.4606.54 allowed a remote attacker to perform local privilege escalation via a crafted file.

CVSS 3.1HIGH 7.8 Local No auth User interaction EPSS 0.00949 Published 2021-10-08 Fixed in 94.0.4606.54 CWE-59
TI-2021-15712 CVE-2021-37968 · GHSA-64jv-qm35-q966

Observable discrepancy in Google Chrome

Priority LOW 23

Inappropriate implementation in Background Fetch API in Google Chrome prior to 94.0.4606.54 allowed a remote attacker to leak cross-origin data via a crafted HTML page.

CVSS 3.1MEDIUM 4.3 Network No auth User interaction EPSS 0.01278 Published 2021-10-08 Fixed in 94.0.4606.54 CWE-203
TI-2021-15711 CVE-2021-37967 · GHSA-66rx-5xf7-qhwq

Origin validation error in Google Chrome

Priority LOW 21

Inappropriate implementation in Background Fetch API in Google Chrome prior to 94.0.4606.54 allowed a remote attacker who had compromised the renderer process to leak cross-origin data via a crafted HTML page.

CVSS 3.1MEDIUM 4.3 Network No auth User interaction EPSS 0.00795 Published 2021-10-08 Fixed in 94.0.4606.54 CWE-346
TI-2021-15710 CVE-2021-37966 · GHSA-pw2p-q8x2-5578

Origin validation error in Google Chrome

Priority LOW 21

Inappropriate implementation in Compositing in Google Chrome on Android prior to 94.0.4606.54 allowed a remote attacker to spoof the contents of the Omnibox (URL bar) via a crafted HTML page.

CVSS 3.1MEDIUM 4.3 Network No auth User interaction EPSS 0.00708 Published 2021-10-08 Fixed in 94.0.4606.54 CWE-346
Priority LOW 17

Inappropriate implementation in ChromeOS Networking in Google Chrome on ChromeOS prior to 94.0.4606.54 allowed an attacker with a rogue wireless access point to to potentially carryout a wifi impersonation attack via a c…

CVSS 3.1LOW 3.3 Local No auth User interaction EPSS 0.00521 Published 2021-10-08 Fixed in 94.0.4606.54
TI-2021-15706 CVE-2021-37962 · GHSA-xh2p-5693-w8r8

Use after free in Google Chrome

Priority MEDIUM 41

Use after free in Performance Manager in Google Chrome prior to 94.0.4606.54 allowed a remote attacker who had compromised the renderer process to potentially exploit heap corruption via a crafted HTML page.

CVSS 3.1HIGH 8.8 Network No auth User interaction EPSS 0.01315 Published 2021-10-08 Fixed in 94.0.4606.54 CWE-416
TI-2021-15705 CVE-2021-37961 · GHSA-x4gp-h8wm-xcjx

Use after free in Google Chrome

Priority MEDIUM 41

Use after free in Tab Strip in Google Chrome prior to 94.0.4606.54 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page.

CVSS 3.1HIGH 8.8 Network No auth User interaction EPSS 0.01315 Published 2021-10-08 Fixed in 94.0.4606.54 CWE-416
TI-2021-15704 CVE-2021-37959 · GHSA-phj8-vj5r-3wxm

Use after free in Google Chrome

Priority MEDIUM 40

Use after free in Task Manager in Google Chrome prior to 94.0.4606.54 allowed an attacker who convinced a user to enage in a series of user gestures to potentially exploit heap corruption via a crafted HTML page.

CVSS 3.1HIGH 8.8 Network No auth User interaction EPSS 0.00944 Published 2021-10-08 Fixed in 94.0.4606.54 CWE-416
TI-2021-15702 CVE-2021-37957 · GHSA-x8jx-7mq3-5rpv

Use after free in Google Chrome

Priority MEDIUM 41

Use after free in WebGPU in Google Chrome prior to 94.0.4606.54 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page.

CVSS 3.1HIGH 8.8 Network No auth User interaction EPSS 0.01245 Published 2021-10-08 Fixed in 94.0.4606.54 CWE-416
TI-2021-15701 CVE-2021-37956 · GHSA-gmfw-7mhc-h58r

Use after free in Google Chrome

Priority MEDIUM 41

Use after free in Offline use in Google Chrome on Android prior to 94.0.4606.54 allowed a remote attacker who had compromised the renderer process to potentially exploit heap corruption via a crafted HTML page.

CVSS 3.1HIGH 8.8 Network No auth User interaction EPSS 0.01245 Published 2021-10-08 Fixed in 94.0.4606.54 CWE-416