| 0 |
| url |
VCID-1kpz-7d56-efg4 |
| vulnerability_id |
VCID-1kpz-7d56-efg4 |
| summary |
Use after free in Swiftshader in Google Chrome prior to 126.0.6478.126 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. (Chromium security severity: High) |
| references |
|
| fixed_packages |
|
| aliases |
CVE-2024-6291
|
| risk_score |
3.4 |
| exploitability |
0.5 |
| weighted_severity |
6.8 |
| resource_url |
http://public2.vulnerablecode.io/vulnerabilities/VCID-1kpz-7d56-efg4 |
|
| 1 |
| url |
VCID-1p2n-rjwf-pfec |
| vulnerability_id |
VCID-1p2n-rjwf-pfec |
| summary |
Inappropriate implementation in Custom Tabs in Google Chrome on Android prior to 128.0.6613.84 allowed a remote attacker to perform UI spoofing via a crafted HTML page. (Chromium security severity: Low) |
| references |
|
| fixed_packages |
|
| aliases |
CVE-2024-8034
|
| risk_score |
1.3 |
| exploitability |
0.5 |
| weighted_severity |
2.6 |
| resource_url |
http://public2.vulnerablecode.io/vulnerabilities/VCID-1p2n-rjwf-pfec |
|
| 2 |
| url |
VCID-1ryr-jxjy-8qdz |
| vulnerability_id |
VCID-1ryr-jxjy-8qdz |
| summary |
Use after free in Autofill in Google Chrome on Android prior to 128.0.6613.137 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. (Chromium security severity: High) |
| references |
|
| fixed_packages |
|
| aliases |
CVE-2024-8639
|
| risk_score |
2.6 |
| exploitability |
0.5 |
| weighted_severity |
5.3 |
| resource_url |
http://public2.vulnerablecode.io/vulnerabilities/VCID-1ryr-jxjy-8qdz |
|
| 3 |
| url |
VCID-23wb-8nen-7yff |
| vulnerability_id |
VCID-23wb-8nen-7yff |
| summary |
Inappropriate implementation in V8 in Google Chrome prior to 129.0.6668.70 allowed a remote attacker to potentially perform out of bounds memory access via a crafted HTML page. (Chromium security severity: High) |
| references |
|
| fixed_packages |
|
| aliases |
CVE-2024-9121
|
| risk_score |
2.6 |
| exploitability |
0.5 |
| weighted_severity |
5.3 |
| resource_url |
http://public2.vulnerablecode.io/vulnerabilities/VCID-23wb-8nen-7yff |
|
| 4 |
| url |
VCID-2xms-eh4q-4yhp |
| vulnerability_id |
VCID-2xms-eh4q-4yhp |
| summary |
Inappropriate implementation in Views in Google Chrome prior to 128.0.6613.84 allowed a remote attacker to perform UI spoofing via a crafted HTML page. (Chromium security severity: Low) |
| references |
|
| fixed_packages |
|
| aliases |
CVE-2024-7981
|
| risk_score |
1.3 |
| exploitability |
0.5 |
| weighted_severity |
2.6 |
| resource_url |
http://public2.vulnerablecode.io/vulnerabilities/VCID-2xms-eh4q-4yhp |
|
| 5 |
|
| 6 |
| url |
VCID-412y-26a3-9ffb |
| vulnerability_id |
VCID-412y-26a3-9ffb |
| summary |
Inappropriate implementation in FedCM in Google Chrome prior to 127.0.6533.72 allowed a remote attacker who convinced a user to engage in specific UI gestures to perform UI spoofing via a crafted HTML page. (Chromium security severity: Low) |
| references |
|
| fixed_packages |
|
| aliases |
CVE-2024-7003
|
| risk_score |
1.3 |
| exploitability |
0.5 |
| weighted_severity |
2.6 |
| resource_url |
http://public2.vulnerablecode.io/vulnerabilities/VCID-412y-26a3-9ffb |
|
| 7 |
| url |
VCID-4231-xz4w-uydn |
| vulnerability_id |
VCID-4231-xz4w-uydn |
| summary |
Inappropriate implementation in FedCM in Google Chrome prior to 128.0.6613.84 allowed a remote attacker to perform UI spoofing via a crafted HTML page. (Chromium security severity: Medium) |
| references |
|
| fixed_packages |
|
| aliases |
CVE-2024-7976
|
| risk_score |
1.3 |
| exploitability |
0.5 |
| weighted_severity |
2.6 |
| resource_url |
http://public2.vulnerablecode.io/vulnerabilities/VCID-4231-xz4w-uydn |
|
| 8 |
| url |
VCID-4yev-vfhj-rqhv |
| vulnerability_id |
VCID-4yev-vfhj-rqhv |
| summary |
Integer overflow in Skia in Google Chrome prior to 129.0.6668.70 allowed a remote attacker to perform an out of bounds memory write via a crafted HTML page. (Chromium security severity: High) |
| references |
|
| fixed_packages |
|
| aliases |
CVE-2024-9123
|
| risk_score |
2.6 |
| exploitability |
0.5 |
| weighted_severity |
5.3 |
| resource_url |
http://public2.vulnerablecode.io/vulnerabilities/VCID-4yev-vfhj-rqhv |
|
| 9 |
| url |
VCID-52ve-9a1v-yba5 |
| vulnerability_id |
VCID-52ve-9a1v-yba5 |
| summary |
Inappropriate implementation in Extensions in Google Chrome prior to 130.0.6723.69 allowed a remote attacker to bypass site isolation via a crafted Chrome Extension. (Chromium security severity: High) |
| references |
|
| fixed_packages |
|
| aliases |
CVE-2024-10229
|
| risk_score |
2.5 |
| exploitability |
0.5 |
| weighted_severity |
4.9 |
| resource_url |
http://public2.vulnerablecode.io/vulnerabilities/VCID-52ve-9a1v-yba5 |
|
| 10 |
| url |
VCID-5fhv-8w2m-nkch |
| vulnerability_id |
VCID-5fhv-8w2m-nkch |
| summary |
Type Confusion in V8 in Google Chrome prior to 130.0.6723.69 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. (Chromium security severity: High) |
| references |
|
| fixed_packages |
|
| aliases |
CVE-2024-10230
|
| risk_score |
2.6 |
| exploitability |
0.5 |
| weighted_severity |
5.3 |
| resource_url |
http://public2.vulnerablecode.io/vulnerabilities/VCID-5fhv-8w2m-nkch |
|
| 11 |
| url |
VCID-5hh6-199c-kubx |
| vulnerability_id |
VCID-5hh6-199c-kubx |
| summary |
Use after free in CSS in Google Chrome prior to 127.0.6533.72 allowed a remote attacker who convinced a user to engage in specific UI gestures to potentially exploit heap corruption via a crafted HTML page. (Chromium security severity: Medium) |
| references |
|
| fixed_packages |
|
| aliases |
CVE-2024-7000
|
| risk_score |
2.6 |
| exploitability |
0.5 |
| weighted_severity |
5.3 |
| resource_url |
http://public2.vulnerablecode.io/vulnerabilities/VCID-5hh6-199c-kubx |
|
| 12 |
| url |
VCID-5j2x-fkb9-s7hb |
| vulnerability_id |
VCID-5j2x-fkb9-s7hb |
| summary |
Inappropriate Implementation in Memory Allocator in Google Chrome prior to 126.0.6478.54 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. (Chromium security severity: Medium) |
| references |
|
| fixed_packages |
|
| aliases |
CVE-2024-5839
|
| risk_score |
4.0 |
| exploitability |
0.5 |
| weighted_severity |
7.9 |
| resource_url |
http://public2.vulnerablecode.io/vulnerabilities/VCID-5j2x-fkb9-s7hb |
|
| 13 |
| url |
VCID-5nes-6xec-nuav |
| vulnerability_id |
VCID-5nes-6xec-nuav |
| summary |
Race in Frames in Google Chrome prior to 127.0.6533.72 allowed a remote attacker who convinced a user to engage in specific UI gestures to perform UI spoofing via a crafted HTML page. (Chromium security severity: Medium) |
| references |
|
| fixed_packages |
|
| aliases |
CVE-2024-6996
|
| risk_score |
0.9 |
| exploitability |
0.5 |
| weighted_severity |
1.9 |
| resource_url |
http://public2.vulnerablecode.io/vulnerabilities/VCID-5nes-6xec-nuav |
|
| 14 |
| url |
VCID-5qnw-htvj-rkaj |
| vulnerability_id |
VCID-5qnw-htvj-rkaj |
| summary |
Use after free in Autofill in Google Chrome prior to 128.0.6613.84 allowed a remote attacker who had convinced the user to engage in specific UI interactions to potentially exploit heap corruption via a crafted HTML page. (Chromium security severity: High) |
| references |
|
| fixed_packages |
|
| aliases |
CVE-2024-7968
|
| risk_score |
2.6 |
| exploitability |
0.5 |
| weighted_severity |
5.3 |
| resource_url |
http://public2.vulnerablecode.io/vulnerabilities/VCID-5qnw-htvj-rkaj |
|
| 15 |
| url |
VCID-6684-d2b1-bug5 |
| vulnerability_id |
VCID-6684-d2b1-bug5 |
| summary |
Type confusion in ANGLE in Google Chrome prior to 124.0.6367.78 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. (Chromium security severity: Critical) |
| references |
|
| fixed_packages |
|
| aliases |
CVE-2024-4058
|
| risk_score |
4.0 |
| exploitability |
0.5 |
| weighted_severity |
8.1 |
| resource_url |
http://public2.vulnerablecode.io/vulnerabilities/VCID-6684-d2b1-bug5 |
|
| 16 |
|
| 17 |
| url |
VCID-6wej-2e63-k7fn |
| vulnerability_id |
VCID-6wej-2e63-k7fn |
| summary |
Insufficient validation of untrusted input in Safe Browsing in Google Chrome prior to 127.0.6533.72 allowed a remote attacker who convinced a user to engage in specific UI gestures to bypass discretionary access control via a malicious file. (Chromium security severity: Low) |
| references |
|
| fixed_packages |
|
| aliases |
CVE-2024-7005
|
| risk_score |
2.6 |
| exploitability |
0.5 |
| weighted_severity |
5.3 |
| resource_url |
http://public2.vulnerablecode.io/vulnerabilities/VCID-6wej-2e63-k7fn |
|
| 18 |
| url |
VCID-71jp-wf9g-vuaz |
| vulnerability_id |
VCID-71jp-wf9g-vuaz |
| summary |
Inappropriate implementation in V8 in Google Chrome prior to 128.0.6613.84 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. (Chromium security severity: High) |
| references |
|
| fixed_packages |
|
| aliases |
CVE-2024-7965
|
| risk_score |
2.6 |
| exploitability |
0.5 |
| weighted_severity |
5.3 |
| resource_url |
http://public2.vulnerablecode.io/vulnerabilities/VCID-71jp-wf9g-vuaz |
|
| 19 |
| url |
VCID-77bu-m9se-f3b1 |
| vulnerability_id |
VCID-77bu-m9se-f3b1 |
| summary |
Insufficient validation of untrusted input in Safe Browsing in Google Chrome prior to 127.0.6533.72 allowed a remote attacker who convinced a user to engage in specific UI gestures to bypass discretionary access control via a malicious file. (Chromium security severity: Low) |
| references |
|
| fixed_packages |
|
| aliases |
CVE-2024-7004
|
| risk_score |
1.3 |
| exploitability |
0.5 |
| weighted_severity |
2.6 |
| resource_url |
http://public2.vulnerablecode.io/vulnerabilities/VCID-77bu-m9se-f3b1 |
|
| 20 |
| url |
VCID-7uwz-uu1t-z7ab |
| vulnerability_id |
VCID-7uwz-uu1t-z7ab |
| summary |
Inappropriate Implementation in DevTools in Google Chrome prior to 126.0.6478.54 allowed an attacker who convinced a user to install a malicious extension to execute arbitrary code via a crafted Chrome Extension. (Chromium security severity: High) |
| references |
|
| fixed_packages |
|
| aliases |
CVE-2024-5836
|
| risk_score |
4.0 |
| exploitability |
0.5 |
| weighted_severity |
7.9 |
| resource_url |
http://public2.vulnerablecode.io/vulnerabilities/VCID-7uwz-uu1t-z7ab |
|
| 21 |
| url |
VCID-87ux-czey-wqdh |
| vulnerability_id |
VCID-87ux-czey-wqdh |
| summary |
Inappropriate implementation in Fullscreen in Google Chrome on Android prior to 127.0.6533.72 allowed a remote attacker who convinced a user to engage in specific UI gestures to spoof the contents of the Omnibox (URL bar) via a crafted HTML page. (Chromium security severity: Medium) |
| references |
|
| fixed_packages |
|
| aliases |
CVE-2024-6995
|
| risk_score |
2.6 |
| exploitability |
0.5 |
| weighted_severity |
5.3 |
| resource_url |
http://public2.vulnerablecode.io/vulnerabilities/VCID-87ux-czey-wqdh |
|
| 22 |
| url |
VCID-8ew8-pgjz-2ugu |
| vulnerability_id |
VCID-8ew8-pgjz-2ugu |
| summary |
Use after free in Passwords in Google Chrome on Android prior to 128.0.6613.84 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. (Chromium security severity: High) |
| references |
|
| fixed_packages |
|
| aliases |
CVE-2024-7964
|
| risk_score |
2.6 |
| exploitability |
0.5 |
| weighted_severity |
5.3 |
| resource_url |
http://public2.vulnerablecode.io/vulnerabilities/VCID-8ew8-pgjz-2ugu |
|
| 23 |
| url |
VCID-8qjf-zrsu-jkd2 |
| vulnerability_id |
VCID-8qjf-zrsu-jkd2 |
| summary |
Type Confusion in V8 in Google Chrome prior to 128.0.6613.137 allowed a remote attacker to potentially exploit object corruption via a crafted HTML page. (Chromium security severity: High) |
| references |
|
| fixed_packages |
|
| aliases |
CVE-2024-8638
|
| risk_score |
2.6 |
| exploitability |
0.5 |
| weighted_severity |
5.3 |
| resource_url |
http://public2.vulnerablecode.io/vulnerabilities/VCID-8qjf-zrsu-jkd2 |
|
| 24 |
| url |
VCID-96q3-byvr-wyhf |
| vulnerability_id |
VCID-96q3-byvr-wyhf |
| summary |
Insufficient data validation in Installer in Google Chrome on Windows prior to 128.0.6613.84 allowed a local attacker to perform privilege escalation via a malicious file. (Chromium security severity: Medium) |
| references |
|
| fixed_packages |
|
| aliases |
CVE-2024-7977
|
| risk_score |
2.4 |
| exploitability |
0.5 |
| weighted_severity |
4.7 |
| resource_url |
http://public2.vulnerablecode.io/vulnerabilities/VCID-96q3-byvr-wyhf |
|
| 25 |
| url |
VCID-9a4k-7yes-1qb7 |
| vulnerability_id |
VCID-9a4k-7yes-1qb7 |
| summary |
Inappropriate implementation in Downloads in Google Chrome prior to 126.0.6478.54 allowed a remote attacker to obfuscate security UI via a malicious file. (Chromium security severity: Medium) |
| references |
|
| fixed_packages |
|
| aliases |
CVE-2024-5843
|
| risk_score |
4.0 |
| exploitability |
0.5 |
| weighted_severity |
7.9 |
| resource_url |
http://public2.vulnerablecode.io/vulnerabilities/VCID-9a4k-7yes-1qb7 |
|
| 26 |
| url |
VCID-9j2p-4teu-y7d6 |
| vulnerability_id |
VCID-9j2p-4teu-y7d6 |
| summary |
Heap buffer overflow in Tab Groups in Google Chrome prior to 126.0.6478.54 allowed a remote attacker who convinced a user to engage in specific UI gestures to potentially exploit heap corruption via a crafted HTML page. (Chromium security severity: High) |
| references |
|
| fixed_packages |
|
| aliases |
CVE-2024-5835
|
| risk_score |
1.9 |
| exploitability |
0.5 |
| weighted_severity |
3.8 |
| resource_url |
http://public2.vulnerablecode.io/vulnerabilities/VCID-9j2p-4teu-y7d6 |
|
| 27 |
| url |
VCID-9tgk-e53p-k3bn |
| vulnerability_id |
VCID-9tgk-e53p-k3bn |
| summary |
Inappropriate implementation in V8 in Google Chrome prior to 127.0.6533.99 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. (Chromium security severity: High) |
| references |
|
| fixed_packages |
|
| aliases |
CVE-2024-7535
|
| risk_score |
2.6 |
| exploitability |
0.5 |
| weighted_severity |
5.3 |
| resource_url |
http://public2.vulnerablecode.io/vulnerabilities/VCID-9tgk-e53p-k3bn |
|
| 28 |
| url |
VCID-9ycq-2jhe-97gm |
| vulnerability_id |
VCID-9ycq-2jhe-97gm |
| summary |
Use after free in Dawn in Google Chrome prior to 126.0.6478.126 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. (Chromium security severity: High) |
| references |
|
| fixed_packages |
|
| aliases |
CVE-2024-6293
|
| risk_score |
3.4 |
| exploitability |
0.5 |
| weighted_severity |
6.8 |
| resource_url |
http://public2.vulnerablecode.io/vulnerabilities/VCID-9ycq-2jhe-97gm |
|
| 29 |
| url |
VCID-ah6v-4jn1-ufer |
| vulnerability_id |
VCID-ah6v-4jn1-ufer |
| summary |
Inappropriate implementation in HTML in Google Chrome prior to 127.0.6533.72 allowed a remote attacker who convinced a user to engage in specific UI gestures to perform UI spoofing via a crafted HTML page. (Chromium security severity: Medium) |
| references |
|
| fixed_packages |
|
| aliases |
CVE-2024-7001
|
| risk_score |
1.3 |
| exploitability |
0.5 |
| weighted_severity |
2.6 |
| resource_url |
http://public2.vulnerablecode.io/vulnerabilities/VCID-ah6v-4jn1-ufer |
|
| 30 |
| url |
VCID-b99r-163b-23c5 |
| vulnerability_id |
VCID-b99r-163b-23c5 |
| summary |
Use after free in ANGLE in Google Chrome prior to 124.0.6367.155 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. (Chromium security severity: High) |
| references |
| 0 |
|
| 1 |
|
| 2 |
|
| 3 |
|
| 4 |
|
| 5 |
|
| 6 |
|
| 7 |
|
| 8 |
|
| 9 |
|
| 10 |
|
| 11 |
|
| 12 |
|
| 13 |
|
| 14 |
|
| 15 |
|
| 16 |
|
| 17 |
|
| 18 |
|
| 19 |
|
| 20 |
|
| 21 |
|
| 22 |
|
| 23 |
|
| 24 |
|
| 25 |
|
| 26 |
|
|
| fixed_packages |
|
| aliases |
CVE-2024-4558
|
| risk_score |
3.4 |
| exploitability |
0.5 |
| weighted_severity |
6.8 |
| resource_url |
http://public2.vulnerablecode.io/vulnerabilities/VCID-b99r-163b-23c5 |
|
| 31 |
| url |
VCID-bc1w-gud4-akgw |
| vulnerability_id |
VCID-bc1w-gud4-akgw |
| summary |
Heap buffer overflow in ANGLE in Google Chrome prior to 125.0.6422.76 allowed a remote attacker to perform an out of bounds memory read via a crafted HTML page. (Chromium security severity: High) |
| references |
|
| fixed_packages |
|
| aliases |
CVE-2024-5159
|
| risk_score |
4.0 |
| exploitability |
0.5 |
| weighted_severity |
7.9 |
| resource_url |
http://public2.vulnerablecode.io/vulnerabilities/VCID-bc1w-gud4-akgw |
|
| 32 |
| url |
VCID-bqya-p3jq-4ybk |
| vulnerability_id |
VCID-bqya-p3jq-4ybk |
| summary |
Out of bounds memory access in ANGLE in Google Chrome prior to 127.0.6533.99 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. (Chromium security severity: Critical) |
| references |
|
| fixed_packages |
|
| aliases |
CVE-2024-7532
|
| risk_score |
2.6 |
| exploitability |
0.5 |
| weighted_severity |
5.3 |
| resource_url |
http://public2.vulnerablecode.io/vulnerabilities/VCID-bqya-p3jq-4ybk |
|
| 33 |
| url |
VCID-bt1c-sd66-m7gz |
| vulnerability_id |
VCID-bt1c-sd66-m7gz |
| summary |
Type Confusion in V8 in Google Chrome prior to 130.0.6723.69 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. (Chromium security severity: High) |
| references |
|
| fixed_packages |
|
| aliases |
CVE-2024-10231
|
| risk_score |
2.6 |
| exploitability |
0.5 |
| weighted_severity |
5.3 |
| resource_url |
http://public2.vulnerablecode.io/vulnerabilities/VCID-bt1c-sd66-m7gz |
|
| 34 |
| url |
VCID-btbb-rk65-mucs |
| vulnerability_id |
VCID-btbb-rk65-mucs |
| summary |
Use after free in Dawn in Google Chrome prior to 124.0.6367.78 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. (Chromium security severity: High) |
| references |
|
| fixed_packages |
|
| aliases |
CVE-2024-4060
|
| risk_score |
3.4 |
| exploitability |
0.5 |
| weighted_severity |
6.8 |
| resource_url |
http://public2.vulnerablecode.io/vulnerabilities/VCID-btbb-rk65-mucs |
|
| 35 |
|
| 36 |
| url |
VCID-cmvr-xfbp-8qdf |
| vulnerability_id |
VCID-cmvr-xfbp-8qdf |
| summary |
Heap buffer overflow in PDFium in Google Chrome prior to 128.0.6613.84 allowed a remote attacker to perform an out of bounds memory read via a crafted PDF file. (Chromium security severity: Medium) |
| references |
|
| fixed_packages |
|
| aliases |
CVE-2024-7973
|
| risk_score |
2.6 |
| exploitability |
0.5 |
| weighted_severity |
5.3 |
| resource_url |
http://public2.vulnerablecode.io/vulnerabilities/VCID-cmvr-xfbp-8qdf |
|
| 37 |
| url |
VCID-dy6r-h3xc-cyfn |
| vulnerability_id |
VCID-dy6r-h3xc-cyfn |
| summary |
Use after free in Loader in Google Chrome prior to 127.0.6533.72 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. (Chromium security severity: High) |
| references |
|
| fixed_packages |
|
| aliases |
CVE-2024-6989
|
| risk_score |
2.6 |
| exploitability |
0.5 |
| weighted_severity |
5.3 |
| resource_url |
http://public2.vulnerablecode.io/vulnerabilities/VCID-dy6r-h3xc-cyfn |
|
| 38 |
| url |
VCID-e7nx-bwmw-v3br |
| vulnerability_id |
VCID-e7nx-bwmw-v3br |
| summary |
Inappropriate implementation in Extensions in Google Chrome on Windows prior to 128.0.6613.84 allowed a remote attacker to perform UI spoofing via a crafted HTML page. (Chromium security severity: Low) |
| references |
|
| fixed_packages |
|
| aliases |
CVE-2024-8035
|
| risk_score |
1.3 |
| exploitability |
0.5 |
| weighted_severity |
2.6 |
| resource_url |
http://public2.vulnerablecode.io/vulnerabilities/VCID-e7nx-bwmw-v3br |
|
| 39 |
| url |
VCID-eefc-55k4-7fbw |
| vulnerability_id |
VCID-eefc-55k4-7fbw |
| summary |
Type Confusion in V8 in Google Chrome prior to 128.0.6613.113 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. (Chromium security severity: High) |
| references |
|
| fixed_packages |
|
| aliases |
CVE-2024-7969
|
| risk_score |
2.6 |
| exploitability |
0.5 |
| weighted_severity |
5.3 |
| resource_url |
http://public2.vulnerablecode.io/vulnerabilities/VCID-eefc-55k4-7fbw |
|
| 40 |
| url |
VCID-ehqp-69yh-tkcm |
| vulnerability_id |
VCID-ehqp-69yh-tkcm |
| summary |
Heap buffer overflow in Tab Strip in Google Chrome prior to 126.0.6478.54 allowed a remote attacker to perform an out of bounds memory read via a crafted HTML page. (Chromium security severity: Medium) |
| references |
|
| fixed_packages |
|
| aliases |
CVE-2024-5844
|
| risk_score |
4.0 |
| exploitability |
0.5 |
| weighted_severity |
7.9 |
| resource_url |
http://public2.vulnerablecode.io/vulnerabilities/VCID-ehqp-69yh-tkcm |
|
| 41 |
| url |
VCID-ek2g-16u9-t3dv |
| vulnerability_id |
VCID-ek2g-16u9-t3dv |
| summary |
Insufficient data validation in Installer in Google Chrome on Windows prior to 128.0.6613.84 allowed a local attacker to perform privilege escalation via a crafted symbolic link. (Chromium security severity: Medium) |
| references |
|
| fixed_packages |
|
| aliases |
CVE-2024-7980
|
| risk_score |
2.2 |
| exploitability |
0.5 |
| weighted_severity |
4.4 |
| resource_url |
http://public2.vulnerablecode.io/vulnerabilities/VCID-ek2g-16u9-t3dv |
|
| 42 |
| url |
VCID-f3q3-4hn8-2bch |
| vulnerability_id |
VCID-f3q3-4hn8-2bch |
| summary |
Type Confusion in V8 in Google Chrome prior to 125.0.6422.76 allowed a remote attacker to potentially perform arbitrary read/write via a crafted HTML page. (Chromium security severity: High) |
| references |
|
| fixed_packages |
|
| aliases |
CVE-2024-5158
|
| risk_score |
4.0 |
| exploitability |
0.5 |
| weighted_severity |
7.9 |
| resource_url |
http://public2.vulnerablecode.io/vulnerabilities/VCID-f3q3-4hn8-2bch |
|
| 43 |
| url |
VCID-fh3n-cggq-r3ff |
| vulnerability_id |
VCID-fh3n-cggq-r3ff |
| summary |
Use after free in Family Experiences in Google Chrome on Android prior to 130.0.6723.116 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. (Chromium security severity: High) |
| references |
|
| fixed_packages |
|
| aliases |
CVE-2024-10826
|
| risk_score |
2.6 |
| exploitability |
0.5 |
| weighted_severity |
5.3 |
| resource_url |
http://public2.vulnerablecode.io/vulnerabilities/VCID-fh3n-cggq-r3ff |
|
| 44 |
| url |
VCID-fuqn-2bh3-b7ef |
| vulnerability_id |
VCID-fuqn-2bh3-b7ef |
| summary |
Use after free in Dawn in Google Chrome prior to 126.0.6478.54 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. (Chromium security severity: High) |
| references |
|
| fixed_packages |
|
| aliases |
CVE-2024-5832
|
| risk_score |
4.0 |
| exploitability |
0.5 |
| weighted_severity |
7.9 |
| resource_url |
http://public2.vulnerablecode.io/vulnerabilities/VCID-fuqn-2bh3-b7ef |
|
| 45 |
| url |
VCID-g4as-qw78-hfba |
| vulnerability_id |
VCID-g4as-qw78-hfba |
| summary |
Heap buffer overflow in Skia in Google Chrome prior to 128.0.6613.113 allowed a remote attacker who had compromised the renderer process to potentially exploit heap corruption via a crafted HTML page. (Chromium security severity: High) |
| references |
|
| fixed_packages |
|
| aliases |
CVE-2024-8193
|
| risk_score |
2.6 |
| exploitability |
0.5 |
| weighted_severity |
5.3 |
| resource_url |
http://public2.vulnerablecode.io/vulnerabilities/VCID-g4as-qw78-hfba |
|
| 46 |
| url |
VCID-hkkt-jr3t-ufff |
| vulnerability_id |
VCID-hkkt-jr3t-ufff |
| summary |
Type Confusion in V8 in Google Chrome prior to 126.0.6478.54 allowed a remote attacker to perform an out of bounds memory write via a crafted HTML page. (Chromium security severity: High) |
| references |
|
| fixed_packages |
|
| aliases |
CVE-2024-5830
|
| risk_score |
4.0 |
| exploitability |
0.5 |
| weighted_severity |
7.9 |
| resource_url |
http://public2.vulnerablecode.io/vulnerabilities/VCID-hkkt-jr3t-ufff |
|
| 47 |
| url |
VCID-jefa-spzq-kybm |
| vulnerability_id |
VCID-jefa-spzq-kybm |
| summary |
Heap buffer overflow in Dawn in Google Chrome prior to 125.0.6422.76 allowed a remote attacker to perform an out of bounds memory write via a crafted HTML page. (Chromium security severity: High) |
| references |
|
| fixed_packages |
|
| aliases |
CVE-2024-5160
|
| risk_score |
4.0 |
| exploitability |
0.5 |
| weighted_severity |
7.9 |
| resource_url |
http://public2.vulnerablecode.io/vulnerabilities/VCID-jefa-spzq-kybm |
|
| 48 |
| url |
VCID-jt6n-p329-zbep |
| vulnerability_id |
VCID-jt6n-p329-zbep |
| summary |
Heap buffer overflow in Layout in Google Chrome prior to 127.0.6533.72 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. (Chromium security severity: Medium) |
| references |
|
| fixed_packages |
|
| aliases |
CVE-2024-6994
|
| risk_score |
2.6 |
| exploitability |
0.5 |
| weighted_severity |
5.3 |
| resource_url |
http://public2.vulnerablecode.io/vulnerabilities/VCID-jt6n-p329-zbep |
|
| 49 |
| url |
VCID-jzx6-d2k6-y7aj |
| vulnerability_id |
VCID-jzx6-d2k6-y7aj |
| summary |
Policy bypass in CORS in Google Chrome prior to 126.0.6478.54 allowed a remote attacker to bypass discretionary access control via a crafted HTML page. (Chromium security severity: Medium) |
| references |
|
| fixed_packages |
|
| aliases |
CVE-2024-5840
|
| risk_score |
3.0 |
| exploitability |
0.5 |
| weighted_severity |
5.9 |
| resource_url |
http://public2.vulnerablecode.io/vulnerabilities/VCID-jzx6-d2k6-y7aj |
|
| 50 |
|
| 51 |
| url |
VCID-md5b-xzry-1kg2 |
| vulnerability_id |
VCID-md5b-xzry-1kg2 |
| summary |
Inappropriate implementation in FedCM in Google Chrome prior to 127.0.6533.72 allowed a remote attacker who convinced a user to engage in specific UI gestures to perform UI spoofing via a crafted HTML page. (Chromium security severity: Medium) |
| references |
|
| fixed_packages |
|
| aliases |
CVE-2024-6999
|
| risk_score |
1.3 |
| exploitability |
0.5 |
| weighted_severity |
2.6 |
| resource_url |
http://public2.vulnerablecode.io/vulnerabilities/VCID-md5b-xzry-1kg2 |
|
| 52 |
| url |
VCID-mf3y-1swm-sfhm |
| vulnerability_id |
VCID-mf3y-1swm-sfhm |
| summary |
Use after free in WebAudio in Google Chrome prior to 127.0.6533.99 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. (Chromium security severity: High) |
| references |
|
| fixed_packages |
|
| aliases |
CVE-2024-7536
|
| risk_score |
2.6 |
| exploitability |
0.5 |
| weighted_severity |
5.3 |
| resource_url |
http://public2.vulnerablecode.io/vulnerabilities/VCID-mf3y-1swm-sfhm |
|
| 53 |
| url |
VCID-nfzy-6dej-7kaq |
| vulnerability_id |
VCID-nfzy-6dej-7kaq |
| summary |
Use after free in Tabs in Google Chrome prior to 127.0.6533.72 allowed a remote attacker who convinced a user to engage in specific UI gestures to potentially exploit heap corruption via a crafted HTML page. (Chromium security severity: Medium) |
| references |
|
| fixed_packages |
|
| aliases |
CVE-2024-6997
|
| risk_score |
2.6 |
| exploitability |
0.5 |
| weighted_severity |
5.3 |
| resource_url |
http://public2.vulnerablecode.io/vulnerabilities/VCID-nfzy-6dej-7kaq |
|
| 54 |
| url |
VCID-nvk5-tvxw-47h7 |
| vulnerability_id |
VCID-nvk5-tvxw-47h7 |
| summary |
Use after free in Serial in Google Chrome prior to 130.0.6723.116 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. (Chromium security severity: High) |
| references |
|
| fixed_packages |
|
| aliases |
CVE-2024-10827
|
| risk_score |
2.6 |
| exploitability |
0.5 |
| weighted_severity |
5.3 |
| resource_url |
http://public2.vulnerablecode.io/vulnerabilities/VCID-nvk5-tvxw-47h7 |
|
| 55 |
| url |
VCID-pjgm-mgh8-1kad |
| vulnerability_id |
VCID-pjgm-mgh8-1kad |
| summary |
Type Confusion in V8 in Google Chrome prior to 126.0.6478.54 allowed a remote attacker to potentially perform out of bounds memory access via a crafted HTML page. (Chromium security severity: High) |
| references |
|
| fixed_packages |
|
| aliases |
CVE-2024-5833
|
| risk_score |
4.0 |
| exploitability |
0.5 |
| weighted_severity |
7.9 |
| resource_url |
http://public2.vulnerablecode.io/vulnerabilities/VCID-pjgm-mgh8-1kad |
|
| 56 |
| url |
VCID-pspf-mhe7-4bgy |
| vulnerability_id |
VCID-pspf-mhe7-4bgy |
| summary |
Inappropriate implementation in V8 in Google Chrome prior to 128.0.6613.84 allowed a remote attacker to potentially perform out of bounds memory access via a crafted HTML page. (Chromium security severity: Medium) |
| references |
|
| fixed_packages |
|
| aliases |
CVE-2024-7972
|
| risk_score |
2.5 |
| exploitability |
0.5 |
| weighted_severity |
4.9 |
| resource_url |
http://public2.vulnerablecode.io/vulnerabilities/VCID-pspf-mhe7-4bgy |
|
| 57 |
| url |
VCID-pv4f-wjkp-qkdw |
| vulnerability_id |
VCID-pv4f-wjkp-qkdw |
| summary |
Use after free in Audio in Google Chrome prior to 126.0.6478.54 allowed a remote attacker to potentially exploit heap corruption via a crafted PDF file. (Chromium security severity: Medium) |
| references |
|
| fixed_packages |
|
| aliases |
CVE-2024-5845
|
| risk_score |
4.0 |
| exploitability |
0.5 |
| weighted_severity |
7.9 |
| resource_url |
http://public2.vulnerablecode.io/vulnerabilities/VCID-pv4f-wjkp-qkdw |
|
| 58 |
| url |
VCID-pwh1-y6zm-9bdk |
| vulnerability_id |
VCID-pwh1-y6zm-9bdk |
| summary |
Insufficient data validation in Installer in Google Chrome on Windows prior to 128.0.6613.84 allowed a local attacker to perform privilege escalation via a crafted symbolic link. (Chromium security severity: Medium) |
| references |
|
| fixed_packages |
|
| aliases |
CVE-2024-7979
|
| risk_score |
2.1 |
| exploitability |
0.5 |
| weighted_severity |
4.2 |
| resource_url |
http://public2.vulnerablecode.io/vulnerabilities/VCID-pwh1-y6zm-9bdk |
|
| 59 |
| url |
VCID-q1az-85e1-k7hd |
| vulnerability_id |
VCID-q1az-85e1-k7hd |
| summary |
Out of bounds memory access in Skia in Google Chrome prior to 128.0.6613.84 allowed a remote attacker who had compromised the renderer process to perform out of bounds memory access via a crafted HTML page. (Chromium security severity: High) |
| references |
|
| fixed_packages |
|
| aliases |
CVE-2024-7966
|
| risk_score |
2.6 |
| exploitability |
0.5 |
| weighted_severity |
5.3 |
| resource_url |
http://public2.vulnerablecode.io/vulnerabilities/VCID-q1az-85e1-k7hd |
|
| 60 |
| url |
VCID-qddn-seu4-pybq |
| vulnerability_id |
VCID-qddn-seu4-pybq |
| summary |
Type Confusion in V8 in Google Chrome prior to 129.0.6668.100 allowed a remote attacker to perform an out of bounds memory write via a crafted HTML page. (Chromium security severity: High) |
| references |
|
| fixed_packages |
|
| aliases |
CVE-2024-9602
|
| risk_score |
2.6 |
| exploitability |
0.5 |
| weighted_severity |
5.3 |
| resource_url |
http://public2.vulnerablecode.io/vulnerabilities/VCID-qddn-seu4-pybq |
|
| 61 |
| url |
VCID-r6x1-dbds-nqd9 |
| vulnerability_id |
VCID-r6x1-dbds-nqd9 |
| summary |
Use after free in Dawn in Google Chrome prior to 126.0.6478.126 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. (Chromium security severity: High) |
| references |
|
| fixed_packages |
|
| aliases |
CVE-2024-6292
|
| risk_score |
3.4 |
| exploitability |
0.5 |
| weighted_severity |
6.8 |
| resource_url |
http://public2.vulnerablecode.io/vulnerabilities/VCID-r6x1-dbds-nqd9 |
|
| 62 |
| url |
VCID-re7j-71ad-xqer |
| vulnerability_id |
VCID-re7j-71ad-xqer |
| summary |
Use after free in Dawn in Google Chrome on Windows prior to 129.0.6668.70 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. (Chromium security severity: High) |
| references |
|
| fixed_packages |
|
| aliases |
CVE-2024-9120
|
| risk_score |
2.6 |
| exploitability |
0.5 |
| weighted_severity |
5.3 |
| resource_url |
http://public2.vulnerablecode.io/vulnerabilities/VCID-re7j-71ad-xqer |
|
| 63 |
| url |
VCID-sd7b-qgw6-5ubf |
| vulnerability_id |
VCID-sd7b-qgw6-5ubf |
| summary |
Type Confusion in V8 in Google Chrome prior to 126.0.6478.54 allowed a remote attacker to perform out of bounds memory access via a crafted HTML page. (Chromium security severity: High) |
| references |
|
| fixed_packages |
|
| aliases |
CVE-2024-5838
|
| risk_score |
4.0 |
| exploitability |
0.5 |
| weighted_severity |
7.9 |
| resource_url |
http://public2.vulnerablecode.io/vulnerabilities/VCID-sd7b-qgw6-5ubf |
|
| 64 |
| url |
VCID-sqn5-wrdb-ffcp |
| vulnerability_id |
VCID-sqn5-wrdb-ffcp |
| summary |
Heap buffer overflow in Skia in Google Chrome prior to 128.0.6613.137 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. (Chromium security severity: High) |
| references |
|
| fixed_packages |
|
| aliases |
CVE-2024-8636
|
| risk_score |
2.6 |
| exploitability |
0.5 |
| weighted_severity |
5.3 |
| resource_url |
http://public2.vulnerablecode.io/vulnerabilities/VCID-sqn5-wrdb-ffcp |
|
| 65 |
| url |
VCID-tbv6-dpx7-tqbe |
| vulnerability_id |
VCID-tbv6-dpx7-tqbe |
| summary |
Use after free in Dawn in Google Chrome prior to 126.0.6478.126 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. (Chromium security severity: High) |
| references |
|
| fixed_packages |
|
| aliases |
CVE-2024-6290
|
| risk_score |
3.4 |
| exploitability |
0.5 |
| weighted_severity |
6.8 |
| resource_url |
http://public2.vulnerablecode.io/vulnerabilities/VCID-tbv6-dpx7-tqbe |
|
| 66 |
| url |
VCID-tc7g-xfgx-4ffw |
| vulnerability_id |
VCID-tc7g-xfgx-4ffw |
| summary |
Use after free in Downloads in Google Chrome on iOS prior to 127.0.6533.72 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. (Chromium security severity: High) |
| references |
|
| fixed_packages |
|
| aliases |
CVE-2024-6988
|
| risk_score |
2.6 |
| exploitability |
0.5 |
| weighted_severity |
5.3 |
| resource_url |
http://public2.vulnerablecode.io/vulnerabilities/VCID-tc7g-xfgx-4ffw |
|
| 67 |
| url |
VCID-teqt-fy5t-27dj |
| vulnerability_id |
VCID-teqt-fy5t-27dj |
| summary |
Use after free in PDFium in Google Chrome prior to 126.0.6478.54 allowed a remote attacker to potentially exploit heap corruption via a crafted PDF file. (Chromium security severity: Medium) |
| references |
|
| fixed_packages |
|
| aliases |
CVE-2024-5847
|
| risk_score |
4.0 |
| exploitability |
0.5 |
| weighted_severity |
7.9 |
| resource_url |
http://public2.vulnerablecode.io/vulnerabilities/VCID-teqt-fy5t-27dj |
|
| 68 |
| url |
VCID-tmdp-81uh-zufh |
| vulnerability_id |
VCID-tmdp-81uh-zufh |
| summary |
Type Confusion in V8 in Google Chrome prior to 126.0.6478.54 allowed a remote attacker to potentially perform out of bounds memory access via a crafted HTML page. (Chromium security severity: High) |
| references |
|
| fixed_packages |
|
| aliases |
CVE-2024-5837
|
| risk_score |
4.0 |
| exploitability |
0.5 |
| weighted_severity |
7.9 |
| resource_url |
http://public2.vulnerablecode.io/vulnerabilities/VCID-tmdp-81uh-zufh |
|
| 69 |
| url |
VCID-uds2-kkev-e7d9 |
| vulnerability_id |
VCID-uds2-kkev-e7d9 |
| summary |
Type Confusion in V8 in Google Chrome prior to 128.0.6613.113 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. (Chromium security severity: High) |
| references |
|
| fixed_packages |
|
| aliases |
CVE-2024-8194
|
| risk_score |
2.2 |
| exploitability |
0.5 |
| weighted_severity |
4.5 |
| resource_url |
http://public2.vulnerablecode.io/vulnerabilities/VCID-uds2-kkev-e7d9 |
|
| 70 |
| url |
VCID-uenb-ycyj-c3c2 |
| vulnerability_id |
VCID-uenb-ycyj-c3c2 |
| summary |
Inappropriate implementation in Dawn in Google Chrome prior to 126.0.6478.54 allowed a remote attacker to execute arbitrary code via a crafted HTML page. (Chromium security severity: High) |
| references |
|
| fixed_packages |
|
| aliases |
CVE-2024-5834
|
| risk_score |
2.5 |
| exploitability |
0.5 |
| weighted_severity |
5.0 |
| resource_url |
http://public2.vulnerablecode.io/vulnerabilities/VCID-uenb-ycyj-c3c2 |
|
| 71 |
| url |
VCID-uf7q-z3em-2qce |
| vulnerability_id |
VCID-uf7q-z3em-2qce |
| summary |
Insufficient policy enforcement in Data Transfer in Google Chrome prior to 128.0.6613.84 allowed a remote attacker who convinced a user to engage in specific UI gestures to leak cross-origin data via a crafted HTML page. (Chromium security severity: Medium) |
| references |
|
| fixed_packages |
|
| aliases |
CVE-2024-7978
|
| risk_score |
1.3 |
| exploitability |
0.5 |
| weighted_severity |
2.6 |
| resource_url |
http://public2.vulnerablecode.io/vulnerabilities/VCID-uf7q-z3em-2qce |
|
| 72 |
| url |
VCID-upf1-jfct-1bf6 |
| vulnerability_id |
VCID-upf1-jfct-1bf6 |
| summary |
Inappropriate implementation in Permissions in Google Chrome prior to 128.0.6613.84 allowed a remote attacker to perform UI spoofing via a crafted HTML page. (Chromium security severity: Medium) |
| references |
|
| fixed_packages |
|
| aliases |
CVE-2024-7975
|
| risk_score |
1.3 |
| exploitability |
0.5 |
| weighted_severity |
2.6 |
| resource_url |
http://public2.vulnerablecode.io/vulnerabilities/VCID-upf1-jfct-1bf6 |
|
| 73 |
| url |
VCID-uzpf-cd8q-afax |
| vulnerability_id |
VCID-uzpf-cd8q-afax |
| summary |
Use after free in Sharing in Google Chrome on iOS prior to 127.0.6533.99 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. (Chromium security severity: High) |
| references |
|
| fixed_packages |
|
| aliases |
CVE-2024-7533
|
| risk_score |
2.6 |
| exploitability |
0.5 |
| weighted_severity |
5.3 |
| resource_url |
http://public2.vulnerablecode.io/vulnerabilities/VCID-uzpf-cd8q-afax |
|
| 74 |
| url |
VCID-vdbe-pt9h-k7ep |
| vulnerability_id |
VCID-vdbe-pt9h-k7ep |
| summary |
Use after free in Dawn in Google Chrome prior to 126.0.6478.54 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. (Chromium security severity: High) |
| references |
|
| fixed_packages |
|
| aliases |
CVE-2024-5831
|
| risk_score |
4.0 |
| exploitability |
0.5 |
| weighted_severity |
7.9 |
| resource_url |
http://public2.vulnerablecode.io/vulnerabilities/VCID-vdbe-pt9h-k7ep |
|
| 75 |
| url |
VCID-vkkm-8uuw-7qfe |
| vulnerability_id |
VCID-vkkm-8uuw-7qfe |
| summary |
Out of bounds write in V8 in Google Chrome prior to 124.0.6367.207 allowed a remote attacker to perform an out of bounds memory write via a crafted HTML page. (Chromium security severity: High) |
| references |
|
| fixed_packages |
|
| aliases |
CVE-2024-4761
|
| risk_score |
3.8 |
| exploitability |
0.5 |
| weighted_severity |
7.5 |
| resource_url |
http://public2.vulnerablecode.io/vulnerabilities/VCID-vkkm-8uuw-7qfe |
|
| 76 |
| url |
VCID-vn6f-b6bw-9qgq |
| vulnerability_id |
VCID-vn6f-b6bw-9qgq |
| summary |
Use after free in Media Router in Google Chrome on Android prior to 128.0.6613.137 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. (Chromium security severity: High) |
| references |
|
| fixed_packages |
|
| aliases |
CVE-2024-8637
|
| risk_score |
2.6 |
| exploitability |
0.5 |
| weighted_severity |
5.3 |
| resource_url |
http://public2.vulnerablecode.io/vulnerabilities/VCID-vn6f-b6bw-9qgq |
|
| 77 |
| url |
VCID-vuhz-7tby-bygw |
| vulnerability_id |
VCID-vuhz-7tby-bygw |
| summary |
Type Confusion in V8 in Google Chrome prior to 127.0.6533.99 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. (Chromium security severity: High) |
| references |
|
| fixed_packages |
|
| aliases |
CVE-2024-7550
|
| risk_score |
2.6 |
| exploitability |
0.5 |
| weighted_severity |
5.3 |
| resource_url |
http://public2.vulnerablecode.io/vulnerabilities/VCID-vuhz-7tby-bygw |
|
| 78 |
| url |
VCID-w3d4-g7jk-9faw |
| vulnerability_id |
VCID-w3d4-g7jk-9faw |
| summary |
Heap buffer overflow in Fonts in Google Chrome prior to 128.0.6613.84 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. (Chromium security severity: High) |
| references |
|
| fixed_packages |
|
| aliases |
CVE-2024-7967
|
| risk_score |
2.6 |
| exploitability |
0.5 |
| weighted_severity |
5.3 |
| resource_url |
http://public2.vulnerablecode.io/vulnerabilities/VCID-w3d4-g7jk-9faw |
|
| 79 |
| url |
VCID-w6xd-c4y3-tydr |
| vulnerability_id |
VCID-w6xd-c4y3-tydr |
| summary |
Heap buffer overflow in Skia in Google Chrome prior to 128.0.6613.113 allowed a remote attacker who had compromised the renderer process to potentially exploit heap corruption via a crafted HTML page. (Chromium security severity: High) |
| references |
|
| fixed_packages |
|
| aliases |
CVE-2024-8198
|
| risk_score |
2.2 |
| exploitability |
0.5 |
| weighted_severity |
4.5 |
| resource_url |
http://public2.vulnerablecode.io/vulnerabilities/VCID-w6xd-c4y3-tydr |
|
| 80 |
| url |
VCID-wk74-ey3e-z3c2 |
| vulnerability_id |
VCID-wk74-ey3e-z3c2 |
| summary |
Type Confusion in V8 in Google Chrome prior to 129.0.6668.100 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. (Chromium security severity: High) |
| references |
|
| fixed_packages |
|
| aliases |
CVE-2024-9603
|
| risk_score |
2.6 |
| exploitability |
0.5 |
| weighted_severity |
5.3 |
| resource_url |
http://public2.vulnerablecode.io/vulnerabilities/VCID-wk74-ey3e-z3c2 |
|
| 81 |
| url |
VCID-wv8u-t5qd-afav |
| vulnerability_id |
VCID-wv8u-t5qd-afav |
| summary |
Use after free in User Education in Google Chrome prior to 127.0.6533.72 allowed a remote attacker who convinced a user to engage in specific UI gestures to potentially exploit heap corruption via a crafted HTML page. (Chromium security severity: Medium) |
| references |
|
| fixed_packages |
|
| aliases |
CVE-2024-6998
|
| risk_score |
2.6 |
| exploitability |
0.5 |
| weighted_severity |
5.3 |
| resource_url |
http://public2.vulnerablecode.io/vulnerabilities/VCID-wv8u-t5qd-afav |
|
| 82 |
| url |
VCID-x5ak-y16e-8fem |
| vulnerability_id |
VCID-x5ak-y16e-8fem |
| summary |
Use after free in PDFium in Google Chrome prior to 126.0.6478.54 allowed a remote attacker to potentially exploit heap corruption via a crafted PDF file. (Chromium security severity: Medium) |
| references |
|
| fixed_packages |
|
| aliases |
CVE-2024-5846
|
| risk_score |
4.0 |
| exploitability |
0.5 |
| weighted_severity |
7.9 |
| resource_url |
http://public2.vulnerablecode.io/vulnerabilities/VCID-x5ak-y16e-8fem |
|
| 83 |
| url |
VCID-x7y5-sqns-3kc2 |
| vulnerability_id |
VCID-x7y5-sqns-3kc2 |
| summary |
Inappropriate implementation in WebApp Installs in Google Chrome on Windows prior to 128.0.6613.84 allowed an attacker who convinced a user to install a malicious application to perform UI spoofing via a crafted HTML page. (Chromium security severity: Low) |
| references |
|
| fixed_packages |
|
| aliases |
CVE-2024-8033
|
| risk_score |
1.3 |
| exploitability |
0.5 |
| weighted_severity |
2.6 |
| resource_url |
http://public2.vulnerablecode.io/vulnerabilities/VCID-x7y5-sqns-3kc2 |
|
| 84 |
| url |
VCID-xrp5-x4x5-83br |
| vulnerability_id |
VCID-xrp5-x4x5-83br |
| summary |
Use after free in Browser UI in Google Chrome prior to 126.0.6478.54 allowed a remote attacker who convinced a user to engage in specific UI gestures to perform an out of bounds memory read via a crafted HTML page. (Chromium security severity: Medium) |
| references |
|
| fixed_packages |
|
| aliases |
CVE-2024-5842
|
| risk_score |
3.4 |
| exploitability |
0.5 |
| weighted_severity |
6.8 |
| resource_url |
http://public2.vulnerablecode.io/vulnerabilities/VCID-xrp5-x4x5-83br |
|
| 85 |
| url |
VCID-y8x9-qswa-mff4 |
| vulnerability_id |
VCID-y8x9-qswa-mff4 |
| summary |
Heap buffer overflow in Layout in Google Chrome prior to 127.0.6533.99 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. (Chromium security severity: High) |
| references |
|
| fixed_packages |
|
| aliases |
CVE-2024-7534
|
| risk_score |
2.6 |
| exploitability |
0.5 |
| weighted_severity |
5.3 |
| resource_url |
http://public2.vulnerablecode.io/vulnerabilities/VCID-y8x9-qswa-mff4 |
|
| 86 |
|
| 87 |
| url |
VCID-ykhp-4fbp-k3aq |
| vulnerability_id |
VCID-ykhp-4fbp-k3aq |
| summary |
Use after free in Scheduling in Google Chrome prior to 125.0.6422.76 allowed a remote attacker to execute arbitrary code inside a sandbox via a crafted HTML page. (Chromium security severity: High) |
| references |
|
| fixed_packages |
|
| aliases |
CVE-2024-5157
|
| risk_score |
4.0 |
| exploitability |
0.5 |
| weighted_severity |
7.9 |
| resource_url |
http://public2.vulnerablecode.io/vulnerabilities/VCID-ykhp-4fbp-k3aq |
|
| 88 |
| url |
VCID-yp2j-9t5g-dfe6 |
| vulnerability_id |
VCID-yp2j-9t5g-dfe6 |
| summary |
Insufficient data validation in V8 API in Google Chrome prior to 128.0.6613.84 allowed a remote attacker to potentially exploit heap corruption via a crafted Chrome Extension. (Chromium security severity: Medium) |
| references |
|
| fixed_packages |
|
| aliases |
CVE-2024-7974
|
| risk_score |
2.6 |
| exploitability |
0.5 |
| weighted_severity |
5.3 |
| resource_url |
http://public2.vulnerablecode.io/vulnerabilities/VCID-yp2j-9t5g-dfe6 |
|
| 89 |
| url |
VCID-yrga-zkxc-97d8 |
| vulnerability_id |
VCID-yrga-zkxc-97d8 |
| summary |
Heap buffer overflow in WebAudio in Google Chrome prior to 124.0.6367.155 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. (Chromium security severity: High) |
| references |
|
| fixed_packages |
|
| aliases |
CVE-2024-4559
|
| risk_score |
3.4 |
| exploitability |
0.5 |
| weighted_severity |
6.8 |
| resource_url |
http://public2.vulnerablecode.io/vulnerabilities/VCID-yrga-zkxc-97d8 |
|
| 90 |
| url |
VCID-z7gn-npfa-nbgr |
| vulnerability_id |
VCID-z7gn-npfa-nbgr |
| summary |
Use after free in Dawn in Google Chrome prior to 127.0.6533.72 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. (Chromium security severity: High) |
| references |
|
| fixed_packages |
|
| aliases |
CVE-2024-6991
|
| risk_score |
2.6 |
| exploitability |
0.5 |
| weighted_severity |
5.3 |
| resource_url |
http://public2.vulnerablecode.io/vulnerabilities/VCID-z7gn-npfa-nbgr |
|
| 91 |
| url |
VCID-z8sf-zmqn-ykc1 |
| vulnerability_id |
VCID-z8sf-zmqn-ykc1 |
| summary |
Use after free in V8 in Google Chrome prior to 126.0.6478.54 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. (Chromium security severity: Medium) |
| references |
|
| fixed_packages |
|
| aliases |
CVE-2024-5841
|
| risk_score |
4.0 |
| exploitability |
0.5 |
| weighted_severity |
7.9 |
| resource_url |
http://public2.vulnerablecode.io/vulnerabilities/VCID-z8sf-zmqn-ykc1 |
|
| 92 |
| url |
VCID-zu7x-y7wz-w7ff |
| vulnerability_id |
VCID-zu7x-y7wz-w7ff |
| summary |
Type Confusion in V8 in Google Chrome prior to 129.0.6668.70 allowed a remote attacker to perform out of bounds memory access via a crafted HTML page. (Chromium security severity: High) |
| references |
|
| fixed_packages |
|
| aliases |
CVE-2024-9122
|
| risk_score |
2.6 |
| exploitability |
0.5 |
| weighted_severity |
5.3 |
| resource_url |
http://public2.vulnerablecode.io/vulnerabilities/VCID-zu7x-y7wz-w7ff |
|