Priority HIGH 71
Use after free in Browser Creation in Google Chrome prior to 104.0.5112.101 allowed a remote attacker who had convinced a user to engage in a specific UI interaction to potentially exploit heap corruption via a crafted H…
CVSS 3.1HIGH 8.8· Network · No auth · User interaction · EPSS 0.30265 · Published 2022-09-26 · Fixed in 104.0.5112.101 CWE-416
Priority MEDIUM 62
Inappropriate implementation in Extensions API in Google Chrome prior to 104.0.5112.101 allowed an attacker who convinced a user to install a malicious extension to inject arbitrary scripts into WebUI via a crafted HTML…
CVSS 3.1MEDIUM 6.5· Network · No auth · User interaction · EPSS 0.00713 · Published 2022-09-26 · Fixed in 104.0.5112.101 CWE-79
Priority MEDIUM 62
Insufficient policy enforcement in Cookies in Google Chrome prior to 104.0.5112.101 allowed a remote attacker to bypass cookie prefix restrictions via a crafted HTML page.
CVSS 3.1MEDIUM 6.5· Network · No auth · User interaction · EPSS 0.01015 · Published 2022-09-26 · Fixed in 104.0.5112.101
Priority HIGH 71
Use after free in Chrome OS Shell in Google Chrome prior to 104.0.5112.101 allowed a remote attacker who convinced a user to engage in specific UI interactions to potentially exploit heap corruption via specific UI inter…
CVSS 3.1HIGH 8.8· Network · No auth · User interaction · EPSS 0.00925 · Published 2022-09-26 · Fixed in 104.0.5112.101 CWE-416
Priority MEDIUM 40
Use after free in Sign-In Flow in Google Chrome prior to 104.0.5112.101 allowed a remote attacker to potentially exploit heap corruption via specific UI interaction.
CVSS 3.1HIGH 8.8· Network · No auth · User interaction · EPSS 0.0095 · Published 2022-09-26 · Fixed in 104.0.5112.101 CWE-416
Priority HIGH 73
Use after free in Blink in Google Chrome prior to 104.0.5112.101 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page.
CVSS 3.1HIGH 8.8· Network · No auth · User interaction · EPSS 0.00771 · Published 2022-09-26 · Fixed in 104.0.5112.101 CWE-362
Priority CRITICAL 86KEV
Insufficient validation of untrusted input in Intents in Google Chrome on Android prior to 104.0.5112.101 allowed a remote attacker to arbitrarily browse to a malicious website via a crafted HTML page.
CVSS 3.1MEDIUM 6.5· Network · No auth · User interaction · EPSS 0.04561 · Published 2022-09-26 · Fixed in 104.0.5112.101 CWE-20
Priority HIGH 73
Use after free in ANGLE in Google Chrome prior to 104.0.5112.101 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page.
CVSS 3.1HIGH 8.8· Network · No auth · User interaction · EPSS 0.00944 · Published 2022-09-26 · Fixed in 104.0.5112.101 CWE-416
Priority MEDIUM 41
Use after free in SwiftShader in Google Chrome prior to 104.0.5112.101 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page.
CVSS 3.1HIGH 8.8· Network · No auth · User interaction · EPSS 0.00784 · Published 2022-09-26 · Fixed in 104.0.5112.101 CWE-362
Priority HIGH 73
Heap buffer overflow in Downloads in Google Chrome on Android prior to 104.0.5112.101 allowed a remote attacker who had compromised the renderer process to potentially exploit heap corruption via a crafted HTML page.
CVSS 3.1HIGH 8.8· Network · No auth · User interaction · EPSS 0.02138 · Published 2022-09-26 · Fixed in 104.0.5112.101 CWE-787
Priority HIGH 73
Use after free in FedCM in Google Chrome prior to 104.0.5112.101 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page.
CVSS 3.1HIGH 8.8· Network · No auth · User interaction · EPSS 0.03017 · Published 2022-09-26 · Fixed in 104.0.5112.101 CWE-416