Read the docs

Vulnerabilities

Filters

Reset all
Threatist priority
Signals
Fix status
Impact type
Attack vector
Requirements
Product

Products as named in CPE, with their records.

Published
Weakness (CWE)
1 selected

3 records

TI-2023-04775 CVE-2023-5187 · GHSA-hg3r-958g-g8vq

Use after free in Google Chrome

Priority MEDIUM 40

Use after free in Extensions in Google Chrome prior to 117.0.5938.132 allowed an attacker who convinced a user to install a malicious extension to potentially exploit heap corruption via a crafted HTML page.

CVSS 3.1HIGH 8.8 Network No auth User interaction EPSS 0.00815 Published 2023-09-28 Fixed in 117.0.5938.132 CWE-416
TI-2023-04774 CVE-2023-5186 · GHSA-qf8c-938w-pvrw

Use after free in Google Chrome

Priority MEDIUM 40

Use after free in Passwords in Google Chrome prior to 117.0.5938.132 allowed a remote attacker who convinced a user to engage in specific UI interaction to potentially exploit heap corruption via crafted UI interaction.

CVSS 3.1HIGH 8.8 Network No auth User interaction EPSS 0.00935 Published 2023-09-28 Fixed in 117.0.5938.132 CWE-416
TI-2023-04799 CVE-2023-5217 · GHSA-qqvq-6xgj-jw8g

Out-of-bounds write in Google Chrome

Priority CRITICAL 97KEV

Heap buffer overflow in vp8 encoding in libvpx in Google Chrome prior to 117.0.5938.132 and libvpx 1.13.1 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page.

CVSS 3.1HIGH 8.8 Network No auth User interaction EPSS 0.49013 Published 2023-09-28 Partial fix · 117.0.5938.132, 1.13.1 +5 CWE-787