Read the docs

Vulnerabilities

Filters

Reset all
Threatist priority
Signals
Fix status
Impact type
Attack vector
Requirements
Product

Products as named in CPE, with their records.

Published
Weakness (CWE)
1 selected

8 records

TI-2024-01557 CVE-2024-1676 · GHSA-r5qg-76hh-gr9p

Cross-site scripting in Google Chrome

Priority HIGH 66

Inappropriate implementation in Navigation in Google Chrome prior to 122.0.6261.57 allowed a remote attacker to spoof security UI via a crafted HTML page.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.1789 Published 2024-02-21 Fixed in 122.0.6261.57 CWE-79
TI-2024-01556 CVE-2024-1675 · GHSA-78w9-qxr3-hqhc

Improper access control in Google Chrome

Priority HIGH 73

Insufficient policy enforcement in Download in Google Chrome prior to 122.0.6261.57 allowed a remote attacker to bypass filesystem restrictions via a crafted HTML page.

CVSS 3.1HIGH 8.8 Network No auth User interaction EPSS 0.10511 Published 2024-02-21 Fixed in 122.0.6261.57 CWE-284
TI-2024-01554 CVE-2024-1673 · GHSA-672f-vpw8-x67x

Use after free in Google Chrome

Priority HIGH 79

Use after free in Accessibility in Google Chrome prior to 122.0.6261.57 allowed a remote attacker who had compromised the renderer process to potentially exploit heap corruption via specific UI gestures.

CVSS 3.1HIGH 8.8 Network No auth User interaction EPSS 0.00801 Published 2024-02-21 Fixed in 122.0.6261.57 CWE-416
Priority LOW 30

Inappropriate implementation in Site Isolation in Google Chrome prior to 122.0.6261.57 allowed a remote attacker to bypass content security policy via a crafted HTML page.

CVSS 3.1MEDIUM 6.5 Network No auth User interaction EPSS 0.00753 Published 2024-02-21 Fixed in 122.0.6261.57 CWE-693
TI-2024-01551 CVE-2024-1670 · GHSA-wjv4-j3hc-gxvv

Use after free in Google Chrome

Priority MEDIUM 52

Use after free in Mojo in Google Chrome prior to 122.0.6261.57 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page.

CVSS 3.1HIGH 8.8 Network No auth User interaction EPSS 0.09144 Published 2024-02-21 Fixed in 122.0.6261.57 CWE-416
TI-2024-01550 CVE-2024-1669 · GHSA-f8gg-fh4p-4795

Out-of-bounds read in Google Chrome

Priority MEDIUM 46

Out of bounds memory access in Blink in Google Chrome prior to 122.0.6261.57 allowed a remote attacker to perform out of bounds memory access via a crafted HTML page.

CVSS 3.1HIGH 8.8 Network No auth User interaction EPSS 0.00961 Published 2024-02-21 Fixed in 122.0.6261.57 CWE-125