Read the docs

Vulnerabilities

Filters

Reset all
Threatist priority
Signals
Fix status
Impact type
Attack vector
Requirements
Product

Products as named in CPE, with their records.

Published
Weakness (CWE)
1 selected

6 records

TI-2023-05824 CVE-2023-6345 · GHSA-xm5p-7w7v-qqr5

Integer overflow in Google Chrome

Priority CRITICAL 100KEV

Integer overflow in Skia in Google Chrome prior to 119.0.6045.199 allowed a remote attacker who had compromised the renderer process to potentially perform a sandbox escape via a malicious file.

CVSS 3.1CRITICAL 9.6 Network No auth User interaction EPSS 0.16468 Published 2023-11-29 Fixed in 119.0.6045.199 CWE-190
TI-2023-05830 CVE-2023-6351 · GHSA-47vw-3hx2-6877

Use after free in Google Chrome

Priority MEDIUM 40

Use after free in libavif in Google Chrome prior to 119.0.6045.199 allowed a remote attacker to potentially exploit heap corruption via a crafted avif file.

CVSS 3.1HIGH 8.8 Network No auth User interaction EPSS 0.00917 Published 2023-11-29 Fixed in 119.0.6045.199 CWE-416
TI-2023-05829 CVE-2023-6350 · GHSA-wmh6-7xp9-5gh8

Use after free in Google Chrome

Priority MEDIUM 41

Use after free in libavif in Google Chrome prior to 119.0.6045.199 allowed a remote attacker to potentially exploit heap corruption via a crafted avif file.

CVSS 3.1HIGH 8.8 Network No auth User interaction EPSS 0.01277 Published 2023-11-29 Fixed in 119.0.6045.199 CWE-416
TI-2023-05825 CVE-2023-6346 · GHSA-w427-5x7p-xj8x

Use after free in Google Chrome

Priority MEDIUM 40

Use after free in WebAudio in Google Chrome prior to 119.0.6045.199 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page.

CVSS 3.1HIGH 8.8 Network No auth User interaction EPSS 0.01003 Published 2023-11-29 Fixed in 119.0.6045.199 CWE-416
TI-2023-05826 CVE-2023-6347 · GHSA-6jj9-4hh8-6xpv

Use after free in Google Chrome

Priority MEDIUM 42

Use after free in Mojo in Google Chrome prior to 119.0.6045.199 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page.

CVSS 3.1HIGH 8.8 Network No auth User interaction EPSS 0.01138 Published 2023-11-29 Fixed in 119.0.6045.199 CWE-416
TI-2023-05827 CVE-2023-6348 · GHSA-4vx9-ghq5-84jw

Type confusion in Google Chrome

Priority MEDIUM 40

Type Confusion in Spellcheck in Google Chrome prior to 119.0.6045.199 allowed a remote attacker who had compromised the renderer process to potentially exploit heap corruption via a crafted HTML page.

CVSS 3.1HIGH 8.8 Network No auth User interaction EPSS 0.01078 Published 2023-11-29 Fixed in 119.0.6045.199 CWE-843