Read the docs

Vulnerabilities

Filters

Reset all
Threatist priority
Signals
Fix status
Impact type
Attack vector
Requirements
Product

Products as named in CPE, with their records.

Published
Weakness (CWE)
1 selected

13 records

Priority MEDIUM 41

Insufficient data validation in DevTools in Google Chrome on Windows prior to 130.0.6723.58 allowed a remote attacker who convinced a user to engage in specific UI gestures to execute arbitrary code via a crafted HTML pa…

CVSS 3.1HIGH 8.8 Network No auth User interaction EPSS 0.00488 Published 2024-10-15 Fixed in 130.0.6723.58
TI-2024-09244 CVE-2024-9961 · GHSA-89v2-8rj2-3464

Use after free in Google Chrome

Priority MEDIUM 40

Use after free in ParcelTracking in Google Chrome on iOS prior to 130.0.6723.58 allowed a remote attacker who convinced a user to engage in specific UI gestures to potentially exploit heap corruption via a crafted HTML p…

CVSS 3.1HIGH 8.8 Network No auth User interaction EPSS 0.00465 Published 2024-10-15 Fixed in 130.0.6723.58 CWE-416
TI-2024-09243 CVE-2024-9960 · GHSA-3j36-mj45-fgp4

Use after free in Google Chrome

Priority MEDIUM 40

Use after free in Dawn in Google Chrome prior to 130.0.6723.58 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page.

CVSS 3.1HIGH 8.8 Network No auth User interaction EPSS 0.00469 Published 2024-10-15 Fixed in 130.0.6723.58 CWE-416
TI-2024-09242 CVE-2024-9959 · GHSA-h5h2-jj79-rjrp

Use after free in Google Chrome

Priority MEDIUM 40

Use after free in DevTools in Google Chrome prior to 130.0.6723.58 allowed a remote attacker who had compromised the renderer process to potentially exploit heap corruption via a crafted Chrome Extension.

CVSS 3.1HIGH 8.8 Network No auth User interaction EPSS 0.00402 Published 2024-10-15 Fixed in 130.0.6723.58 CWE-416
TI-2024-09240 CVE-2024-9957 · GHSA-c2h4-jx6m-jp2q

Use after free in Google Chrome

Priority MEDIUM 40

Use after free in UI in Google Chrome on iOS prior to 130.0.6723.58 allowed a remote attacker who convinced a user to engage in specific UI gestures to potentially exploit heap corruption via a crafted HTML page.

CVSS 3.1HIGH 8.8 Network No auth User interaction EPSS 0.00465 Published 2024-10-15 Fixed in 130.0.6723.58 CWE-416
TI-2024-09238 CVE-2024-9955 · GHSA-gj3r-7jjv-636h

Use after free in Google Chrome

Priority MEDIUM 42

Use after free in WebAuthentication in Google Chrome prior to 130.0.6723.58 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page.

CVSS 3.1HIGH 8.8 Network No auth User interaction EPSS 0.00966 Published 2024-10-15 Fixed in 130.0.6723.58 CWE-416
TI-2024-09237 CVE-2024-9954 · GHSA-q8jf-j34w-q74g

Use after free in Google Chrome

Priority MEDIUM 48

Use after free in AI in Google Chrome prior to 130.0.6723.58 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page.

CVSS 3.1HIGH 8.8 Network No auth User interaction EPSS 0.0529 Published 2024-10-15 Fixed in 130.0.6723.58 CWE-416