Read the docs

Vulnerabilities

Filters

Reset all
Threatist priority
Signals
Fix status
Impact type
Attack vector
Requirements
Product

Products as named in CPE, with their records.

Published
Weakness (CWE)
1 selected

8 records

Priority LOW 22

Insufficient policy enforcement in Autofill in Google Chrome prior to 95.0.4638.69 allowed a remote attacker to leak cross-origin data via a crafted HTML page.

CVSS 3.1MEDIUM 4.3 Network No auth User interaction EPSS 0.0087 Published 2021-11-23 Fixed in 95.0.4638.69 CWE-668
Priority CRITICAL 97KEV

Inappropriate implementation in V8 in Google Chrome prior to 95.0.4638.69 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page.

CVSS 3.1HIGH 8.8 Network No auth User interaction EPSS 0.38573 Published 2021-11-23 Fixed in 95.0.4638.69 CWE-755
TI-2021-15746 CVE-2021-38002 · GHSA-4jw2-qgm3-j49h

Use after free in Google Chrome

Priority MEDIUM 43

Use after free in Web Transport in Google Chrome prior to 95.0.4638.69 allowed a remote attacker to potentially perform a sandbox escape via a crafted HTML page.

CVSS 3.1CRITICAL 9.6 Network No auth User interaction EPSS 0.00973 Published 2021-11-23 Fixed in 95.0.4638.69 CWE-416
TI-2021-15745 CVE-2021-38001 · GHSA-pp89-rwqv-pgh4

Type confusion in Google Chrome

Priority MEDIUM 60

Type confusion in V8 in Google Chrome prior to 95.0.4638.69 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page.

CVSS 3.1HIGH 8.8 Network No auth User interaction EPSS 0.26703 Published 2021-11-23 Fixed in 95.0.4638.69 CWE-843
TI-2021-15744 CVE-2021-38000 · GHSA-xrj7-4gfh-q9h7

Improper input validation in Google Chrome

Priority HIGH 84KEV

Insufficient validation of untrusted input in Intents in Google Chrome on Android prior to 95.0.4638.69 allowed a remote attacker to arbitrarily browser to a malicious URL via a crafted HTML page.

CVSS 3.1MEDIUM 6.1 Network No auth User interaction EPSS 0.04948 Published 2021-11-23 Fixed in 95.0.4638.69 CWE-20
TI-2021-15743 CVE-2021-37999 · GHSA-pr36-w94p-68r3

Cross-site scripting in Google Chrome

Priority LOW 29

Insufficient data validation in New Tab Page in Google Chrome prior to 95.0.4638.69 allowed a remote attacker to inject arbitrary scripts or HTML in a new browser tab via a crafted HTML page.

CVSS 3.1MEDIUM 6.1 Network No auth User interaction EPSS 0.00955 Published 2021-11-23 Fixed in 95.0.4638.69 CWE-79
TI-2021-15742 CVE-2021-37998 · GHSA-pj4m-2rg7-r9hh

Use after free in Google Chrome

Priority MEDIUM 40

Use after free in Garbage Collection in Google Chrome prior to 95.0.4638.69 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page.

CVSS 3.1HIGH 8.8 Network No auth User interaction EPSS 0.00973 Published 2021-11-23 Fixed in 95.0.4638.69 CWE-416
TI-2021-15741 CVE-2021-37997 · GHSA-h8rj-qxf5-m5r5

Use after free in Google Chrome

Priority MEDIUM 40

Use after free in Sign-In in Google Chrome prior to 95.0.4638.69 allowed a remote attacker who convinced a user to sign into Chrome to potentially exploit heap corruption via a crafted HTML page.

CVSS 3.1HIGH 8.8 Network No auth User interaction EPSS 0.00973 Published 2021-11-23 Fixed in 95.0.4638.69 CWE-416