Read the docs

Vulnerabilities

Filters

Reset all
Threatist priority
Signals
Fix status
Impact type
Attack vector
Requirements
Product

Products as named in CPE, with their records.

Published
Weakness (CWE)
1 selected

4 records

Release: Google Chrome 125.0.6422.60 Clear all filters
TI-2024-04603 CVE-2024-4950 · GHSA-h2pj-pf6w-85p2

Clickjacking in Google Chrome

Priority LOW 39

Inappropriate implementation in Downloads in Google Chrome prior to 125.0.6422.60 allowed a remote attacker who convinced a user to engage in specific UI gestures to perform UI spoofing via a crafted HTML page.

CVSS 3.1MEDIUM 6.5 Network No auth User interaction EPSS 0.00907 Published 2024-05-15 Fixed in 125.0.6422.60 CWE-451
TI-2024-04602 CVE-2024-4949 · GHSA-p76p-6f26-4vgq

Use after free in Google Chrome

Priority MEDIUM 45

Use after free in V8 in Google Chrome prior to 125.0.6422.60 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page.

CVSS 3.1CRITICAL 9.6 Network No auth User interaction EPSS 0.00947 Published 2024-05-15 Fixed in 125.0.6422.60 CWE-416
TI-2024-04601 CVE-2024-4948 · GHSA-xvp9-87cv-m4fv

Use after free in Google Chrome

Priority MEDIUM 42

Use after free in Dawn in Google Chrome prior to 125.0.6422.60 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page.

CVSS 3.1HIGH 8.8 Network No auth User interaction EPSS 0.00955 Published 2024-05-15 Fixed in 125.0.6422.60 CWE-416
TI-2024-04600 CVE-2024-4947 · GHSA-p8v3-5hqq-7c5r

Type confusion in Google Chrome

Priority CRITICAL 100KEV

Type Confusion in V8 in Google Chrome prior to 125.0.6422.60 allowed a remote attacker to execute arbitrary code inside a sandbox via a crafted HTML page.

CVSS 3.1CRITICAL 9.6 Network No auth User interaction EPSS 0.15236 Published 2024-05-15 Partial fix · 125.0.6422.60 CWE-843