Read the docs

Vulnerabilities

Filters

Reset all
Threatist priority
Signals
Fix status
Impact type
Attack vector
Requirements
Product

Products as named in CPE, with their records.

Published
Weakness (CWE)
1 selected

3 records

TI-2023-03492 CVE-2023-3739 · GHSA-gm85-g783-h7qr

Command injection in Google Chrome

Priority LOW 28

Insufficient validation of untrusted input in Chromad in Google Chrome on ChromeOS prior to 115.0.5790.131 allowed a remote attacker to execute arbitrary code via a crafted shell script.

CVSS 3.1MEDIUM 6.3 Network No auth User interaction EPSS 0.00397 Published 2023-08-01 Fixed in 115.0.5790.131 CWE-77
TI-2023-03484 CVE-2023-3731 · GHSA-f4qh-cfrh-87m4

Use after free in Google Chrome

Priority LOW 38

Use after free in Diagnostics in Google Chrome on ChromeOS prior to 115.0.5790.131 allowed an attacker who convinced a user to install a malicious extension to potentially exploit heap corruption via a crafted Chrome Ext…

CVSS 3.1HIGH 8.8 Network No auth User interaction EPSS 0.00363 Published 2023-08-01 Fixed in 115.0.5790.131 CWE-416
TI-2023-03482 CVE-2023-3729 · GHSA-77rh-qgrp-wjrm

Use after free in Google Chrome

Priority LOW 38

Use after free in Splitscreen in Google Chrome on ChromeOS prior to 115.0.5790.131 allowed a remote attacker who convinced a user to engage in specific UI interactions to potentially exploit heap corruption via crafted U…

CVSS 3.1HIGH 8.8 Network No auth User interaction EPSS 0.00406 Published 2023-08-01 Fixed in 115.0.5790.131 CWE-416