Read the docs

Vulnerabilities

Filters

Reset all
Threatist priority
Signals
Fix status
Impact type
Attack vector
Requirements
Product

Products as named in CPE, with their records.

Published
Weakness (CWE)
1 selected

3 records

Release: Google Chrome 138.0.7204.49 Clear all filters
TI-2025-05956 CVE-2025-6557 · GHSA-35qc-7cp5-9q9m

Clickjacking in Google Chrome

Priority LOW 26

Insufficient data validation in DevTools in Google Chrome on Windows prior to 138.0.7204.49 allowed a remote attacker who convinced a user to engage in specific UI gestures to execute arbitrary code via a crafted HTML pa…

CVSS 3.1MEDIUM 5.4 Network No auth User interaction EPSS 0.00232 Published 2025-06-24 Fixed in 138.0.7204.49 CWE-1021
TI-2025-05955 CVE-2025-6556 · GHSA-96h5-q657-fqcv

Authentication bypass in Google Chrome

Priority LOW 26

Insufficient policy enforcement in Loader in Google Chrome prior to 138.0.7204.49 allowed a remote attacker to bypass content security policy via a crafted HTML page.

CVSS 3.1MEDIUM 5.4 Network No auth User interaction EPSS 0.00208 Published 2025-06-24 Fixed in 138.0.7204.49 CWE-288
TI-2025-05954 CVE-2025-6555 · GHSA-p5pm-vpwj-6rcc

Use after free in Google Chrome

Priority LOW 26

Use after free in Animation in Google Chrome prior to 138.0.7204.49 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page.

CVSS 3.1MEDIUM 5.4 Network No auth User interaction EPSS 0.0021 Published 2025-06-24 Fixed in 138.0.7204.49 CWE-416