Read the docs

Vulnerabilities

Filters

Reset all
Threatist priority
Signals
Fix status
Impact type
Attack vector
Requirements
Product

Products as named in CPE, with their records.

Published
Weakness (CWE)
1 selected

13 records

Priority LOW 21

Inappropriate implementation in Extensions API in Google Chrome prior to 114.0.5735.90 allowed an attacker who convinced a user to install a malicious extension to spoof the contents of the UI via a crafted Chrome Extens…

CVSS 3.1MEDIUM 4.3 Network No auth User interaction EPSS 0.00621 Published 2023-05-30 Fixed in 114.0.5735.90 CWE-451
TI-2023-02756 CVE-2023-2940 · GHSA-28m3-c955-h29j

Improper access control in Google Chrome

Priority LOW 30

Inappropriate implementation in Downloads in Google Chrome prior to 114.0.5735.90 allowed an attacker who convinced a user to install a malicious extension to bypass file access restrictions via a crafted HTML page.

CVSS 3.1MEDIUM 6.5 Network No auth User interaction EPSS 0.00693 Published 2023-05-30 Fixed in 114.0.5735.90 CWE-284
TI-2023-02755 CVE-2023-2939 · GHSA-vpfc-9392-2w4q

Link following in Google Chrome

Priority LOW 36

Insufficient data validation in Installer in Google Chrome on Windows prior to 114.0.5735.90 allowed a local attacker to perform privilege escalation via crafted symbolic link.

CVSS 3.1HIGH 7.8 Local No auth User interaction EPSS 0.00454 Published 2023-05-30 Fixed in 114.0.5735.90 CWE-59
Priority LOW 22

Inappropriate implementation in Picture In Picture in Google Chrome prior to 114.0.5735.90 allowed a remote attacker who had compromised the renderer process to spoof the contents of the Omnibox (URL bar) via a crafted H…

CVSS 3.1MEDIUM 4.3 Network No auth User interaction EPSS 0.00906 Published 2023-05-30 Fixed in 114.0.5735.90 CWE-451
Priority LOW 22

Inappropriate implementation in Picture In Picture in Google Chrome prior to 114.0.5735.90 allowed a remote attacker who had compromised the renderer process to spoof the contents of the Omnibox (URL bar) via a crafted H…

CVSS 3.1MEDIUM 4.3 Network No auth User interaction EPSS 0.00906 Published 2023-05-30 Fixed in 114.0.5735.90 CWE-451
TI-2023-02752 CVE-2023-2936 · GHSA-x723-3x32-qg44

Type confusion in Google Chrome

Priority MEDIUM 60

Type Confusion in V8 in Google Chrome prior to 114.0.5735.90 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page.

CVSS 3.1HIGH 8.8 Network No auth User interaction EPSS 0.23022 Published 2023-05-30 Fixed in 114.0.5735.90 CWE-843
TI-2023-02751 CVE-2023-2935 · GHSA-5ccq-3h49-vjp2

Type confusion in Google Chrome

Priority MEDIUM 61

Type Confusion in V8 in Google Chrome prior to 114.0.5735.90 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page.

CVSS 3.1HIGH 8.8 Network No auth User interaction EPSS 0.23855 Published 2023-05-30 Fixed in 114.0.5735.90 CWE-843
TI-2023-02750 CVE-2023-2934 · GHSA-mqff-qm67-cr66

Out-of-bounds write in Google Chrome

Priority MEDIUM 43

Out of bounds memory access in Mojo in Google Chrome prior to 114.0.5735.90 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page.

CVSS 3.1HIGH 8.8 Network No auth User interaction EPSS 0.01463 Published 2023-05-30 Fixed in 114.0.5735.90 CWE-787
TI-2023-02749 CVE-2023-2933 · GHSA-qrc7-3p69-2jpf

Use after free in Google Chrome

Priority MEDIUM 42

Use after free in PDF in Google Chrome prior to 114.0.5735.90 allowed a remote attacker to potentially exploit heap corruption via a crafted PDF file.

CVSS 3.1HIGH 8.8 Network No auth User interaction EPSS 0.00918 Published 2023-05-30 Fixed in 114.0.5735.90 CWE-416
TI-2023-02748 CVE-2023-2932 · GHSA-7g49-wq8x-r6rh

Use after free in Google Chrome

Priority MEDIUM 42

Use after free in PDF in Google Chrome prior to 114.0.5735.90 allowed a remote attacker to potentially exploit heap corruption via a crafted PDF file.

CVSS 3.1HIGH 8.8 Network No auth User interaction EPSS 0.00962 Published 2023-05-30 Fixed in 114.0.5735.90 CWE-416
TI-2023-02747 CVE-2023-2931 · GHSA-w3xh-m877-x3c2

Use after free in Google Chrome

Priority MEDIUM 42

Use after free in PDF in Google Chrome prior to 114.0.5735.90 allowed a remote attacker to potentially exploit heap corruption via a crafted PDF file.

CVSS 3.1HIGH 8.8 Network No auth User interaction EPSS 0.00918 Published 2023-05-30 Fixed in 114.0.5735.90 CWE-416
TI-2023-02746 CVE-2023-2930 · GHSA-44xq-533g-gj79

Use after free in Google Chrome

Priority MEDIUM 41

Use after free in Extensions in Google Chrome prior to 114.0.5735.90 allowed an attacker who convinced a user to install a malicious extension to potentially exploit heap corruption via a crafted HTML page.

CVSS 3.1HIGH 8.8 Network No auth User interaction EPSS 0.00792 Published 2023-05-30 Fixed in 114.0.5735.90 CWE-416
TI-2023-02745 CVE-2023-2929 · GHSA-m73q-fj49-fjhp

Out-of-bounds write in Google Chrome

Priority MEDIUM 42

Out of bounds write in Swiftshader in Google Chrome prior to 114.0.5735.90 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page.

CVSS 3.1HIGH 8.8 Network No auth User interaction EPSS 0.01107 Published 2023-05-30 Fixed in 114.0.5735.90 CWE-787