Priority LOW 21
Inappropriate implementation in Extensions API in Google Chrome prior to 114.0.5735.90 allowed an attacker who convinced a user to install a malicious extension to spoof the contents of the UI via a crafted Chrome Extens…
CVSS 3.1MEDIUM 4.3· Network · No auth · User interaction · EPSS 0.00621 · Published 2023-05-30 · Fixed in 114.0.5735.90 CWE-451
Priority LOW 30
Inappropriate implementation in Downloads in Google Chrome prior to 114.0.5735.90 allowed an attacker who convinced a user to install a malicious extension to bypass file access restrictions via a crafted HTML page.
CVSS 3.1MEDIUM 6.5· Network · No auth · User interaction · EPSS 0.00693 · Published 2023-05-30 · Fixed in 114.0.5735.90 CWE-284
Priority LOW 36
Insufficient data validation in Installer in Google Chrome on Windows prior to 114.0.5735.90 allowed a local attacker to perform privilege escalation via crafted symbolic link.
CVSS 3.1HIGH 7.8· Local · No auth · User interaction · EPSS 0.00454 · Published 2023-05-30 · Fixed in 114.0.5735.90 CWE-59
Priority LOW 22
Inappropriate implementation in Picture In Picture in Google Chrome prior to 114.0.5735.90 allowed a remote attacker who had compromised the renderer process to spoof the contents of the Omnibox (URL bar) via a crafted H…
CVSS 3.1MEDIUM 4.3· Network · No auth · User interaction · EPSS 0.00906 · Published 2023-05-30 · Fixed in 114.0.5735.90 CWE-451
Priority LOW 22
Inappropriate implementation in Picture In Picture in Google Chrome prior to 114.0.5735.90 allowed a remote attacker who had compromised the renderer process to spoof the contents of the Omnibox (URL bar) via a crafted H…
CVSS 3.1MEDIUM 4.3· Network · No auth · User interaction · EPSS 0.00906 · Published 2023-05-30 · Fixed in 114.0.5735.90 CWE-451
Priority MEDIUM 60
Type Confusion in V8 in Google Chrome prior to 114.0.5735.90 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page.
CVSS 3.1HIGH 8.8· Network · No auth · User interaction · EPSS 0.23022 · Published 2023-05-30 · Fixed in 114.0.5735.90 CWE-843
Priority MEDIUM 61
Type Confusion in V8 in Google Chrome prior to 114.0.5735.90 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page.
CVSS 3.1HIGH 8.8· Network · No auth · User interaction · EPSS 0.23855 · Published 2023-05-30 · Fixed in 114.0.5735.90 CWE-843
Priority MEDIUM 43
Out of bounds memory access in Mojo in Google Chrome prior to 114.0.5735.90 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page.
CVSS 3.1HIGH 8.8· Network · No auth · User interaction · EPSS 0.01463 · Published 2023-05-30 · Fixed in 114.0.5735.90 CWE-787
Priority MEDIUM 42
Use after free in PDF in Google Chrome prior to 114.0.5735.90 allowed a remote attacker to potentially exploit heap corruption via a crafted PDF file.
CVSS 3.1HIGH 8.8· Network · No auth · User interaction · EPSS 0.00918 · Published 2023-05-30 · Fixed in 114.0.5735.90 CWE-416
Priority MEDIUM 42
Use after free in PDF in Google Chrome prior to 114.0.5735.90 allowed a remote attacker to potentially exploit heap corruption via a crafted PDF file.
CVSS 3.1HIGH 8.8· Network · No auth · User interaction · EPSS 0.00962 · Published 2023-05-30 · Fixed in 114.0.5735.90 CWE-416
Priority MEDIUM 42
Use after free in PDF in Google Chrome prior to 114.0.5735.90 allowed a remote attacker to potentially exploit heap corruption via a crafted PDF file.
CVSS 3.1HIGH 8.8· Network · No auth · User interaction · EPSS 0.00918 · Published 2023-05-30 · Fixed in 114.0.5735.90 CWE-416
Priority MEDIUM 41
Use after free in Extensions in Google Chrome prior to 114.0.5735.90 allowed an attacker who convinced a user to install a malicious extension to potentially exploit heap corruption via a crafted HTML page.
CVSS 3.1HIGH 8.8· Network · No auth · User interaction · EPSS 0.00792 · Published 2023-05-30 · Fixed in 114.0.5735.90 CWE-416
Priority MEDIUM 42
Out of bounds write in Swiftshader in Google Chrome prior to 114.0.5735.90 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page.
CVSS 3.1HIGH 8.8· Network · No auth · User interaction · EPSS 0.01107 · Published 2023-05-30 · Fixed in 114.0.5735.90 CWE-787