Read the docs

Vulnerabilities

Filters

Reset all
Threatist priority
Signals
Fix status
Impact type
Attack vector
Requirements
Product

Products as named in CPE, with their records.

Published
Weakness (CWE)
1 selected

11 records

TI-2022-02768 CVE-2022-2998 · GHSA-f84q-wwjh-mq43

Use after free in Google Chrome

Priority HIGH 71

Use after free in Browser Creation in Google Chrome prior to 104.0.5112.101 allowed a remote attacker who had convinced a user to engage in a specific UI interaction to potentially exploit heap corruption via a crafted H…

CVSS 3.1HIGH 8.8 Network No auth User interaction EPSS 0.30265 Published 2022-09-26 Fixed in 104.0.5112.101 CWE-416
TI-2022-02653 CVE-2022-2861 · GHSA-wfwp-jxjq-2m26

Cross-site scripting in Google Chrome

Priority MEDIUM 62

Inappropriate implementation in Extensions API in Google Chrome prior to 104.0.5112.101 allowed an attacker who convinced a user to install a malicious extension to inject arbitrary scripts into WebUI via a crafted HTML…

CVSS 3.1MEDIUM 6.5 Network No auth User interaction EPSS 0.00713 Published 2022-09-26 Fixed in 104.0.5112.101 CWE-79
TI-2022-02651 CVE-2022-2859 · GHSA-jcrm-h74j-pg7j

Use after free in Google Chrome

Priority HIGH 71

Use after free in Chrome OS Shell in Google Chrome prior to 104.0.5112.101 allowed a remote attacker who convinced a user to engage in specific UI interactions to potentially exploit heap corruption via specific UI inter…

CVSS 3.1HIGH 8.8 Network No auth User interaction EPSS 0.00925 Published 2022-09-26 Fixed in 104.0.5112.101 CWE-416
TI-2022-02650 CVE-2022-2858 · GHSA-w3h3-52fr-jjhw

Use after free in Google Chrome

Priority MEDIUM 40

Use after free in Sign-In Flow in Google Chrome prior to 104.0.5112.101 allowed a remote attacker to potentially exploit heap corruption via specific UI interaction.

CVSS 3.1HIGH 8.8 Network No auth User interaction EPSS 0.0095 Published 2022-09-26 Fixed in 104.0.5112.101 CWE-416
TI-2022-02649 CVE-2022-2857 · GHSA-3gr5-mvfp-p295

Race condition in Google Chrome

Priority HIGH 73

Use after free in Blink in Google Chrome prior to 104.0.5112.101 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page.

CVSS 3.1HIGH 8.8 Network No auth User interaction EPSS 0.00771 Published 2022-09-26 Fixed in 104.0.5112.101 CWE-362
TI-2022-02648 CVE-2022-2856 · GHSA-hq6m-mwgx-2pr8

Improper input validation in Google Chrome

Priority CRITICAL 86KEV

Insufficient validation of untrusted input in Intents in Google Chrome on Android prior to 104.0.5112.101 allowed a remote attacker to arbitrarily browse to a malicious website via a crafted HTML page.

CVSS 3.1MEDIUM 6.5 Network No auth User interaction EPSS 0.04561 Published 2022-09-26 Fixed in 104.0.5112.101 CWE-20
TI-2022-02647 CVE-2022-2855 · GHSA-37g6-48vw-mwpm

Use after free in Google Chrome

Priority HIGH 73

Use after free in ANGLE in Google Chrome prior to 104.0.5112.101 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page.

CVSS 3.1HIGH 8.8 Network No auth User interaction EPSS 0.00944 Published 2022-09-26 Fixed in 104.0.5112.101 CWE-416
TI-2022-02646 CVE-2022-2854 · GHSA-q869-52p3-m2g6

Race condition in Google Chrome

Priority MEDIUM 41

Use after free in SwiftShader in Google Chrome prior to 104.0.5112.101 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page.

CVSS 3.1HIGH 8.8 Network No auth User interaction EPSS 0.00784 Published 2022-09-26 Fixed in 104.0.5112.101 CWE-362
TI-2022-02645 CVE-2022-2853 · GHSA-xmjv-jv6c-x229

Out-of-bounds write in Google Chrome

Priority HIGH 73

Heap buffer overflow in Downloads in Google Chrome on Android prior to 104.0.5112.101 allowed a remote attacker who had compromised the renderer process to potentially exploit heap corruption via a crafted HTML page.

CVSS 3.1HIGH 8.8 Network No auth User interaction EPSS 0.02138 Published 2022-09-26 Fixed in 104.0.5112.101 CWE-787
TI-2022-02644 CVE-2022-2852 · GHSA-75mx-hh4q-h54x

Use after free in Google Chrome

Priority HIGH 73

Use after free in FedCM in Google Chrome prior to 104.0.5112.101 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page.

CVSS 3.1HIGH 8.8 Network No auth User interaction EPSS 0.03017 Published 2022-09-26 Fixed in 104.0.5112.101 CWE-416