Read the docs

Vulnerabilities

Filters

Reset all
Threatist priority
Signals
Fix status
Impact type
Attack vector
Requirements
Product

Products as named in CPE, with their records.

Published
Weakness (CWE)
1 selected

13 records

TI-2025-00366 CVE-2025-0448 · GHSA-fr5q-g65c-mjcx

Cross-site scripting in Google Chrome

Priority LOW 20

Inappropriate implementation in Compositing in Google Chrome prior to 132.0.6834.83 allowed a remote attacker to perform UI spoofing via a crafted HTML page.

CVSS 3.1MEDIUM 4.3 Network No auth User interaction EPSS 0.00291 Published 2025-01-15 Fixed in 132.0.6834.83 CWE-79
TI-2025-00365 CVE-2025-0447 · GHSA-chr7-82mw-8gc7

Cross-site scripting in Google Chrome

Priority MEDIUM 40

Inappropriate implementation in Navigation in Google Chrome prior to 132.0.6834.83 allowed a remote attacker to perform privilege escalation via a crafted HTML page.

CVSS 3.1HIGH 8.8 Network No auth User interaction EPSS 0.00447 Published 2025-01-15 Fixed in 132.0.6834.83 CWE-79
Priority LOW 20

Inappropriate implementation in Extensions in Google Chrome prior to 132.0.6834.83 allowed a remote attacker who convinced a user to engage in specific UI gestures to perform UI spoofing via a crafted Chrome Extension.

CVSS 3.1MEDIUM 4.3 Network No auth User interaction EPSS 0.00273 Published 2025-01-15 Fixed in 132.0.6834.83 CWE-451
TI-2025-00361 CVE-2025-0443 · GHSA-v6w7-99w8-xfj4

Cross-site scripting in Google Chrome

Priority MEDIUM 40

Insufficient data validation in Extensions in Google Chrome prior to 132.0.6834.83 allowed a remote attacker who convinced a user to engage in specific UI gestures to perform privilege escalation via a crafted HTML page.

CVSS 3.1HIGH 8.8 Network No auth User interaction EPSS 0.00447 Published 2025-01-15 Fixed in 132.0.6834.83 CWE-79
Priority LOW 29

Inappropriate implementation in Payments in Google Chrome prior to 132.0.6834.83 allowed a remote attacker who convinced a user to engage in specific UI gestures to perform UI spoofing via a crafted HTML page.

CVSS 3.1MEDIUM 6.5 Network No auth User interaction EPSS 0.0033 Published 2025-01-15 Fixed in 132.0.6834.83 CWE-290
TI-2025-00359 CVE-2025-0441 · GHSA-r498-8rcj-p67x

Information disclosure in Google Chrome

Priority LOW 29

Inappropriate implementation in Fenced Frames in Google Chrome prior to 132.0.6834.83 allowed a remote attacker to obtain potentially sensitive information from the system via a crafted HTML page.

CVSS 3.1MEDIUM 6.5 Network No auth User interaction EPSS 0.00371 Published 2025-01-15 Fixed in 132.0.6834.83 CWE-200
Priority LOW 29

Inappropriate implementation in Fullscreen in Google Chrome on Windows prior to 132.0.6834.83 allowed a remote attacker to perform UI spoofing via a crafted HTML page.

CVSS 3.1MEDIUM 6.5 Network No auth User interaction EPSS 0.00415 Published 2025-01-15 Fixed in 132.0.6834.83 CWE-290
TI-2025-00357 CVE-2025-0439 · GHSA-wphw-46wj-2jvh

Race condition in Google Chrome

Priority LOW 28

Race in Frames in Google Chrome prior to 132.0.6834.83 allowed a remote attacker who convinced a user to engage in specific UI gestures to perform UI spoofing via a crafted HTML page.

CVSS 3.1MEDIUM 6.5 Network No auth User interaction EPSS 0.00271 Published 2025-01-15 Fixed in 132.0.6834.83 CWE-362
Priority LOW 38

Stack buffer overflow in Tracing in Google Chrome prior to 132.0.6834.83 allowed a remote attacker to potentially exploit stack corruption via a crafted HTML page.

CVSS 3.1HIGH 8.8 Network No auth User interaction EPSS 0.00455 Published 2025-01-15 Fixed in 132.0.6834.83 CWE-121
TI-2025-00355 CVE-2025-0437 · GHSA-4353-vp82-4qq4

Out-of-bounds read in Google Chrome

Priority LOW 38

Out of bounds read in Metrics in Google Chrome prior to 132.0.6834.83 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page.

CVSS 3.1HIGH 8.8 Network No auth User interaction EPSS 0.00295 Published 2025-01-15 Fixed in 132.0.6834.83 CWE-125
Priority MEDIUM 49

Out of bounds memory access in V8 in Google Chrome prior to 132.0.6834.83 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page.

CVSS 3.1HIGH 8.8 Network No auth User interaction EPSS 0.05956 Published 2025-01-15 Fixed in 132.0.6834.83 CWE-122