Read the docs

Vulnerabilities

Filters

Reset all
Threatist priority
Signals
Fix status
Impact type
Attack vector
Requirements
Product

Products as named in CPE, with their records.

Published
Weakness (CWE)
1 selected

12 records

TI-2025-10276 CVE-2025-11219 · GHSA-3x9v-3chp-c9cc

Use after free in Google Chrome

Priority LOW 15

Use after free in V8 in Google Chrome prior to 141.0.7390.54 allowed a remote attacker to potentially perform out of bounds memory access via a crafted HTML page.

CVSS 3.1LOW 3.1 Network No auth User interaction EPSS 0.00273 Published 2025-11-06 Fixed in 141.0.7390.54 CWE-416
Priority LOW 27

Inappropriate implementation in Omnibox in Google Chrome on Android prior to 141.0.7390.54 allowed a remote attacker who convinced a user to engage in specific UI gestures to perform domain spoofing via a crafted HTML pa…

CVSS 3.1MEDIUM 6.3 Network No auth User interaction EPSS 0.00226 Published 2025-11-06 Fixed in 141.0.7390.54 CWE-451
Priority LOW 27

Inappropriate implementation in Media in Google Chrome on Windows prior to 141.0.7390.54 allowed a remote attacker who convinced a user to engage in specific UI gestures to perform domain spoofing via a crafted HTML page…

CVSS 3.1MEDIUM 6.3 Network No auth User interaction EPSS 0.00211 Published 2025-11-06 Fixed in 141.0.7390.54 CWE-451
TI-2025-10271 CVE-2025-11211 · GHSA-p97f-m8c4-2pvc

Out-of-bounds read in Google Chrome

Priority LOW 33

Out of bounds read in Media in Google Chrome prior to 141.0.7390.54 allowed a remote attacker to potentially perform out of bounds memory access via a crafted HTML page.

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.00379 Published 2025-11-06 Fixed in 141.0.7390.54 CWE-125
Priority LOW 35

Inappropriate implementation in Omnibox in Google Chrome on Android prior to 141.0.7390.54 allowed a remote attacker to spoof the contents of the Omnibox (URL bar) via a crafted HTML page.

CVSS 3.1HIGH 8.2 Network No auth No interaction EPSS 0.00258 Published 2025-11-06 Fixed in 141.0.7390.54 CWE-290
TI-2025-10267 CVE-2025-11207 · GHSA-vrf4-5hv4-fc3q

Out-of-bounds read in Google Chrome

Priority LOW 28

Side-channel information leakage in Storage in Google Chrome prior to 141.0.7390.54 allowed a remote attacker to perform arbitrary read/write via a crafted HTML page.

CVSS 3.1MEDIUM 6.5 Network No auth No interaction EPSS 0.00258 Published 2025-11-06 Fixed in 141.0.7390.54 CWE-1300
TI-2025-10266 CVE-2025-11206 · GHSA-62xm-7pjx-wfv7

Heap-based buffer overflow in Google Chrome

Priority LOW 33

Heap buffer overflow in Video in Google Chrome prior to 141.0.7390.54 allowed a remote attacker to potentially perform a sandbox escape via a crafted HTML page.

CVSS 3.1HIGH 7.1 Network No auth User interaction EPSS 0.00226 Published 2025-11-06 Fixed in 141.0.7390.54 CWE-122
TI-2025-10265 CVE-2025-11205 · GHSA-j64g-h2wj-jx5r

Heap-based buffer overflow in Google Chrome

Priority MEDIUM 40

Heap buffer overflow in WebGPU in Google Chrome prior to 141.0.7390.54 allowed a remote attacker who had compromised the renderer process to potentially exploit heap corruption via a crafted HTML page.

CVSS 3.1HIGH 8.8 Network No auth User interaction EPSS 0.00321 Published 2025-11-06 Fixed in 141.0.7390.54 CWE-122