Read the docs

Vulnerabilities

Filters

Reset all
Threatist priority
Signals
Fix status
Impact type
Attack vector
Requirements
Product

Products as named in CPE, with their records.

Published
Weakness (CWE)
1 selected

14 records

TI-2023-01711 CVE-2023-1820 · GHSA-5h57-ggm2-4677

Out-of-bounds write in Google Chrome

Priority MEDIUM 42

Heap buffer overflow in Browser History in Google Chrome prior to 112.0.5615.49 allowed a remote attacker who convinced a user to engage in specific UI interaction to potentially exploit heap corruption via a crafted HTM…

CVSS 3.1HIGH 8.8 Network No auth User interaction EPSS 0.00975 Published 2023-04-04 Fixed in 112.0.5615.49 CWE-787
TI-2023-01710 CVE-2023-1819 · GHSA-hpj3-f6gx-66wv

Out-of-bounds read in Google Chrome

Priority LOW 31

Out of bounds read in Accessibility in Google Chrome prior to 112.0.5615.49 allowed a remote attacker to perform an out of bounds memory read via a crafted HTML page.

CVSS 3.1MEDIUM 6.5 Network No auth User interaction EPSS 0.0088 Published 2023-04-04 Fixed in 112.0.5615.49 CWE-125
TI-2023-01709 CVE-2023-1818 · GHSA-cgq6-65fg-2fvf

Use after free in Google Chrome

Priority MEDIUM 42

Use after free in Vulkan in Google Chrome prior to 112.0.5615.49 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page.

CVSS 3.1HIGH 8.8 Network No auth User interaction EPSS 0.00877 Published 2023-04-04 Fixed in 112.0.5615.49 CWE-416
TI-2023-01706 CVE-2023-1815 · GHSA-2x86-mm52-25f7

Use after free in Google Chrome

Priority MEDIUM 42

Use after free in Networking APIs in Google Chrome prior to 112.0.5615.49 allowed a remote attacker who convinced a user to engage in specific UI interaction to potentially exploit heap corruption via a crafted HTML page…

CVSS 3.1HIGH 8.8 Network No auth User interaction EPSS 0.00914 Published 2023-04-04 Fixed in 112.0.5615.49 CWE-416
Priority LOW 30

Inappropriate implementation in Extensions in Google Chrome prior to 112.0.5615.49 allowed an attacker who convinced a user to install a malicious extension to bypass file access restrictions via a crafted HTML page.

CVSS 3.1MEDIUM 6.5 Network No auth User interaction EPSS 0.00762 Published 2023-04-04 Fixed in 112.0.5615.49
TI-2023-01703 CVE-2023-1812 · GHSA-f9x5-j429-h4gf

Out-of-bounds write in Google Chrome

Priority MEDIUM 42

Out of bounds memory access in DOM Bindings in Google Chrome prior to 112.0.5615.49 allowed a remote attacker to perform out of bounds memory access via a crafted HTML page.

CVSS 3.1HIGH 8.8 Network No auth User interaction EPSS 0.00935 Published 2023-04-04 Fixed in 112.0.5615.49 CWE-787
TI-2023-01702 CVE-2023-1811 · GHSA-hp5r-49h3-68qp

Use after free in Google Chrome

Priority MEDIUM 42

Use after free in Frames in Google Chrome prior to 112.0.5615.49 allowed a remote attacker who convinced a user to engage in specific UI interaction to potentially exploit heap corruption via a crafted HTML page.

CVSS 3.1HIGH 8.8 Network No auth User interaction EPSS 0.00968 Published 2023-04-04 Fixed in 112.0.5615.49 CWE-416
TI-2023-01701 CVE-2023-1810 · GHSA-p7f9-5qw7-2qpr

Out-of-bounds write in Google Chrome

Priority MEDIUM 42

Heap buffer overflow in Visuals in Google Chrome prior to 112.0.5615.49 allowed a remote attacker who had compromised the renderer process to potentially exploit heap corruption via a crafted HTML page.

CVSS 3.1HIGH 8.8 Network No auth User interaction EPSS 0.01077 Published 2023-04-04 Fixed in 112.0.5615.49 CWE-787