Read the docs

Vulnerabilities

Filters

Reset all
Threatist priority
Signals
Fix status
Impact type
Attack vector
Requirements
Product

Products as named in CPE, with their records.

Published
Weakness (CWE)
1 selected

4 records

TI-2024-02695 CVE-2024-2887 · GHSA-q75f-2pp5-9phj

Type confusion in Google Chrome

Priority HIGH 70

Type Confusion in WebAssembly in Google Chrome prior to 123.0.6312.86 allowed a remote attacker to execute arbitrary code via a crafted HTML page.

CVSS 3.1HIGH 8.1 Local No auth No interaction EPSS 0.17922 Published 2024-03-26 Fixed in 123.0.6312.86 CWE-843
TI-2024-02694 CVE-2024-2886 · GHSA-5pj4-f8gh-j3mr

Use after free in Google Chrome

Priority LOW 38

Use after free in WebCodecs in Google Chrome prior to 123.0.6312.86 allowed a remote attacker to perform arbitrary read/write via a crafted HTML page.

CVSS 3.1HIGH 7.5 Network No auth User interaction EPSS 0.01762 Published 2024-03-26 Fixed in 123.0.6312.86 CWE-416
TI-2024-02693 CVE-2024-2885 · GHSA-qccw-wmvp-8pv9

Use after free in Google Chrome

Priority MEDIUM 43

Use after free in Dawn in Google Chrome prior to 123.0.6312.86 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page.

CVSS 3.1HIGH 8.8 Network No auth User interaction EPSS 0.01489 Published 2024-03-26 Fixed in 123.0.6312.86 CWE-416
TI-2024-02691 CVE-2024-2883 · GHSA-gg9c-7j6m-3qq2

Use after free in Google Chrome

Priority MEDIUM 52

Use after free in ANGLE in Google Chrome prior to 123.0.6312.86 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page.

CVSS 3.1HIGH 8.8 Network No auth User interaction EPSS 0.03369 Published 2024-03-26 Fixed in 123.0.6312.86 CWE-416