Read the docs

Vulnerabilities

Filters

Reset all
Threatist priority
Signals
Fix status
Impact type
Attack vector
Requirements
Product

Products as named in CPE, with their records.

Published
Weakness (CWE)
1 selected

12 records

TI-2021-04220 CVE-2021-21116 · GHSA-p83v-6fw4-64rm

Out-of-bounds write in Google Chrome

Priority MEDIUM 41

Heap buffer overflow in audio in Google Chrome prior to 87.0.4280.141 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page.

CVSS 3.1HIGH 8.8 Network No auth User interaction EPSS 0.01452 Published 2021-01-08 Fixed in 87.0.4280.141 CWE-787
TI-2021-04219 CVE-2021-21115 · GHSA-hj7w-jjq4-xh7q

Use after free in Google Chrome

Priority MEDIUM 44

User after free in safe browsing in Google Chrome prior to 87.0.4280.141 allowed a remote attacker who had compromised the renderer process to potentially perform a sandbox escape via a crafted HTML page.

CVSS 3.1CRITICAL 9.6 Network No auth User interaction EPSS 0.01409 Published 2021-01-08 Fixed in 87.0.4280.141 CWE-416
TI-2021-04218 CVE-2021-21114 · GHSA-363j-9xx8-29r4

Use after free in Google Chrome

Priority MEDIUM 41

Use after free in audio in Google Chrome prior to 87.0.4280.141 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page.

CVSS 3.1HIGH 8.8 Network No auth User interaction EPSS 0.0137 Published 2021-01-08 Fixed in 87.0.4280.141 CWE-416
TI-2021-04217 CVE-2021-21113 · GHSA-w4j5-x3m4-x3jx

Out-of-bounds write in Google Chrome

Priority MEDIUM 41

Heap buffer overflow in Skia in Google Chrome prior to 87.0.4280.141 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page.

CVSS 3.1HIGH 8.8 Network No auth User interaction EPSS 0.01492 Published 2021-01-08 Fixed in 87.0.4280.141 CWE-787
TI-2021-04216 CVE-2021-21112 · GHSA-gx2v-252m-68c8

Use after free in Google Chrome

Priority MEDIUM 41

Use after free in Blink in Google Chrome prior to 87.0.4280.141 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page.

CVSS 3.1HIGH 8.8 Network No auth User interaction EPSS 0.01369 Published 2021-01-08 Fixed in 87.0.4280.141 CWE-416
TI-2021-04215 CVE-2021-21111 · GHSA-543r-2767-7774

Clickjacking in Google Chrome

Priority MEDIUM 43

Insufficient policy enforcement in WebUI in Google Chrome prior to 87.0.4280.141 allowed an attacker who convinced a user to install a malicious extension to potentially perform a sandbox escape via a crafted Chrome Exte…

CVSS 3.1CRITICAL 9.6 Network No auth User interaction EPSS 0.01078 Published 2021-01-08 Fixed in 87.0.4280.141 CWE-1021
TI-2021-04214 CVE-2021-21110 · GHSA-cgc9-vr83-r9vv

Use after free in Google Chrome

Priority MEDIUM 47

Use after free in safe browsing in Google Chrome prior to 87.0.4280.141 allowed a remote attacker to potentially perform a sandbox escape via a crafted HTML page.

CVSS 3.1CRITICAL 9.6 Network No auth User interaction EPSS 0.03095 Published 2021-01-08 Fixed in 87.0.4280.141 CWE-416
TI-2021-04213 CVE-2021-21109 · GHSA-pcrm-wg3j-58j3

Use after free in Google Chrome

Priority MEDIUM 44

Use after free in payments in Google Chrome prior to 87.0.4280.141 allowed a remote attacker who had compromised the renderer process to potentially perform a sandbox escape via a crafted HTML page.

CVSS 3.1CRITICAL 9.6 Network No auth User interaction EPSS 0.01333 Published 2021-01-08 Fixed in 87.0.4280.141 CWE-416
TI-2021-04212 CVE-2021-21108 · GHSA-q83w-52wv-55jx

Use after free in Google Chrome

Priority MEDIUM 44

Use after free in media in Google Chrome prior to 87.0.4280.141 allowed a remote attacker who had compromised the renderer process to potentially perform a sandbox escape via a crafted HTML page.

CVSS 3.1CRITICAL 9.6 Network No auth User interaction EPSS 0.01333 Published 2021-01-08 Fixed in 87.0.4280.141 CWE-416
TI-2021-04211 CVE-2021-21107 · GHSA-4456-4h4r-g935

Use after free in Google Chrome

Priority MEDIUM 44

Use after free in drag and drop in Google Chrome on Linux prior to 87.0.4280.141 allowed a remote attacker who had compromised the renderer process to potentially perform a sandbox escape via a crafted HTML page.

CVSS 3.1CRITICAL 9.6 Network No auth User interaction EPSS 0.0113 Published 2021-01-08 Fixed in 87.0.4280.141 CWE-416
TI-2021-04210 CVE-2021-21106 · GHSA-xcj4-r8wq-5rcc

Use after free in Google Chrome

Priority MEDIUM 46

Use after free in autofill in Google Chrome prior to 87.0.4280.141 allowed a remote attacker who had compromised the renderer process to potentially perform a sandbox escape via a crafted HTML page.

CVSS 3.1CRITICAL 9.6 Network No auth User interaction EPSS 0.02266 Published 2021-01-08 Fixed in 87.0.4280.141 CWE-416