Search for packages
| purl | pkg:deb/debian/chromium@120.0.6099.224-1~deb11u1 |
| Next non-vulnerable version | 138.0.7204.183-1~deb12u1 |
| Latest non-vulnerable version | 139.0.7258.127-1 |
| Risk | 10.0 |
| Vulnerability | Summary | Fixed by |
|---|---|---|
|
VCID-1159-an1j-g7ae
Aliases: CVE-2024-9123 |
Integer overflow in Skia in Google Chrome prior to 129.0.6668.70 allowed a remote attacker to perform an out of bounds memory write via a crafted HTML page. (Chromium security severity: High) |
Affected by 13 other vulnerabilities. |
|
VCID-169w-b9p4-dfhk
Aliases: CVE-2025-3074 |
Inappropriate implementation in Downloads in Google Chrome prior to 135.0.7049.52 allowed a remote attacker to perform UI spoofing via a crafted HTML page. (Chromium security severity: Low) |
Affected by 13 other vulnerabilities. |
|
VCID-16f7-fu3r-2kdu
Aliases: CVE-2024-5836 |
Inappropriate Implementation in DevTools in Google Chrome prior to 126.0.6478.54 allowed an attacker who convinced a user to install a malicious extension to execute arbitrary code via a crafted Chrome Extension. (Chromium security severity: High) |
Affected by 13 other vulnerabilities. |
|
VCID-17tp-x467-cyhn
Aliases: CVE-2024-7535 |
Inappropriate implementation in V8 in Google Chrome prior to 127.0.6533.99 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. (Chromium security severity: High) |
Affected by 13 other vulnerabilities. |
|
VCID-18zw-j5uv-gfgt
Aliases: CVE-2025-7657 |
Use after free in WebRTC in Google Chrome prior to 138.0.7204.157 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. (Chromium security severity: High) |
Affected by 13 other vulnerabilities. |
|
VCID-1bx3-tmt9-pudk
Aliases: CVE-2024-6992 |
Affected by 13 other vulnerabilities. |
|
|
VCID-1dj2-fmb4-tffu
Aliases: CVE-2025-8581 |
Inappropriate implementation in Extensions in Google Chrome prior to 139.0.7258.66 allowed a remote attacker who convinced a user to engage in specific UI gestures to leak cross-origin data via a crafted HTML page. (Chromium security severity: Low) |
Affected by 13 other vulnerabilities. Affected by 0 other vulnerabilities. Affected by 5 other vulnerabilities. |
|
VCID-1e45-s2j8-jfc7
Aliases: CVE-2024-6101 |
Inappropriate implementation in V8 in Google Chrome prior to 126.0.6478.114 allowed a remote attacker to perform out of bounds memory access via a crafted HTML page. (Chromium security severity: High) |
Affected by 13 other vulnerabilities. |
|
VCID-1hu4-932j-rqf5
Aliases: CVE-2024-1939 |
Type Confusion in V8 in Google Chrome prior to 122.0.6261.94 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. (Chromium security severity: High) |
Affected by 13 other vulnerabilities. |
|
VCID-1j6j-9s7w-uker
Aliases: CVE-2025-0444 |
Use after free in Skia in Google Chrome prior to 133.0.6943.53 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. (Chromium security severity: High) |
Affected by 13 other vulnerabilities. |
|
VCID-1qv8-33js-sfec
Aliases: CVE-2024-7256 |
Insufficient data validation in Dawn in Google Chrome on Android prior to 127.0.6533.88 allowed a remote attacker to execute arbitrary code via a crafted HTML page. (Chromium security severity: High) |
Affected by 13 other vulnerabilities. |
|
VCID-1v93-vh92-hqgp
Aliases: CVE-2024-6103 |
Use after free in Dawn in Google Chrome prior to 126.0.6478.114 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. (Chromium security severity: High) |
Affected by 13 other vulnerabilities. |
|
VCID-1vs2-ggcc-8qfs
Aliases: CVE-2024-0804 |
Insufficient policy enforcement in iOS Security UI in Google Chrome prior to 121.0.6167.85 allowed a remote attacker to leak cross-origin data via a crafted HTML page. (Chromium security severity: Medium) |
Affected by 13 other vulnerabilities. |
|
VCID-1wae-hbup-7kcv
Aliases: CVE-2024-1283 |
Heap buffer overflow in Skia in Google Chrome prior to 121.0.6167.160 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. (Chromium security severity: High) |
Affected by 13 other vulnerabilities. |
|
VCID-24dr-2v9y-eye2
Aliases: CVE-2024-7534 |
Heap buffer overflow in Layout in Google Chrome prior to 127.0.6533.99 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. (Chromium security severity: High) |
Affected by 13 other vulnerabilities. |
|
VCID-2rxk-vcuk-ruet
Aliases: CVE-2025-5281 |
Inappropriate implementation in BFCache in Google Chrome prior to 137.0.7151.55 allowed a remote attacker to potentially obtain user information via a crafted HTML page. (Chromium security severity: Medium) |
Affected by 13 other vulnerabilities. |
|
VCID-2s1x-5s3a-43gd
Aliases: CVE-2024-3172 |
Insufficient data validation in DevTools in Google Chrome prior to 121.0.6167.85 allowed a remote attacker who convinced a user to engage in specific UI gestures to execute arbitrary code via a crafted HTML page. (Chromium security severity: High) |
Affected by 13 other vulnerabilities. |
|
VCID-2sup-cgbf-dubd
Aliases: CVE-2024-7969 |
Type Confusion in V8 in Google Chrome prior to 128.0.6613.113 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. (Chromium security severity: High) |
Affected by 13 other vulnerabilities. |
|
VCID-2v8v-eh92-tbaz
Aliases: CVE-2024-1673 |
Use after free in Accessibility in Google Chrome prior to 122.0.6261.57 allowed a remote attacker who had compromised the renderer process to potentially exploit heap corruption via specific UI gestures. (Chromium security severity: Medium) |
Affected by 13 other vulnerabilities. |
|
VCID-2x92-9831-rqca
Aliases: CVE-2024-5847 |
Use after free in PDFium in Google Chrome prior to 126.0.6478.54 allowed a remote attacker to potentially exploit heap corruption via a crafted PDF file. (Chromium security severity: Medium) |
Affected by 13 other vulnerabilities. |
|
VCID-2zjh-wsww-vqhj
Aliases: CVE-2024-3159 |
Out of bounds memory access in V8 in Google Chrome prior to 123.0.6312.105 allowed a remote attacker to perform arbitrary read/write via a crafted HTML page. (Chromium security severity: High) |
Affected by 13 other vulnerabilities. |
|
VCID-31sv-wqyj-que6
Aliases: CVE-2024-7976 |
Inappropriate implementation in FedCM in Google Chrome prior to 128.0.6613.84 allowed a remote attacker to perform UI spoofing via a crafted HTML page. (Chromium security severity: Medium) |
Affected by 13 other vulnerabilities. |
|
VCID-335h-2b4h-zyde
Aliases: CVE-2024-2630 |
Inappropriate implementation in iOS in Google Chrome prior to 123.0.6312.58 allowed a remote attacker to leak cross-origin data via a crafted HTML page. (Chromium security severity: Medium) |
Affected by 13 other vulnerabilities. |
|
VCID-39tg-z1d3-pfds
Aliases: CVE-2024-2884 |
Out of bounds read in V8 in Google Chrome prior to 121.0.6167.139 allowed a remote attacker to potentially perform out of bounds memory access via a crafted HTML page. (Chromium security severity: Medium) |
Affected by 13 other vulnerabilities. |
|
VCID-3ccq-ysar-kuav
Aliases: CVE-2024-11111 |
Inappropriate implementation in Autofill in Google Chrome prior to 131.0.6778.69 allowed a remote attacker who convinced a user to engage in specific UI gestures to perform UI spoofing via a crafted HTML page. (Chromium security severity: Medium) |
Affected by 13 other vulnerabilities. |
|
VCID-3dn7-j519-wug6
Aliases: CVE-2024-9965 |
Insufficient data validation in DevTools in Google Chrome on Windows prior to 130.0.6723.58 allowed a remote attacker who convinced a user to engage in specific UI gestures to execute arbitrary code via a crafted HTML page. (Chromium security severity: Low) |
Affected by 13 other vulnerabilities. |
|
VCID-3fdd-4w8j-uqgn
Aliases: CVE-2024-7255 |
Out of bounds read in WebTransport in Google Chrome prior to 127.0.6533.88 allowed a remote attacker to potentially perform out of bounds memory access via a crafted HTML page. (Chromium security severity: High) |
Affected by 13 other vulnerabilities. |
|
VCID-3rcd-4cs7-gfgt
Aliases: CVE-2025-1921 |
Inappropriate implementation in Media Stream in Google Chrome prior to 134.0.6998.35 allowed a remote attacker to obtain information about a peripheral via a crafted HTML page. (Chromium security severity: Medium) |
Affected by 13 other vulnerabilities. |
|
VCID-3rx6-mam3-eqgx
Aliases: CVE-2024-7975 |
Inappropriate implementation in Permissions in Google Chrome prior to 128.0.6613.84 allowed a remote attacker to perform UI spoofing via a crafted HTML page. (Chromium security severity: Medium) |
Affected by 13 other vulnerabilities. |
|
VCID-3s78-5cxw-wfeq
Aliases: CVE-2025-5063 |
Use after free in Compositing in Google Chrome prior to 137.0.7151.55 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. (Chromium security severity: High) |
Affected by 13 other vulnerabilities. |
|
VCID-3sbe-k81q-qkd7
Aliases: CVE-2024-8034 |
Inappropriate implementation in Custom Tabs in Google Chrome on Android prior to 128.0.6613.84 allowed a remote attacker to perform UI spoofing via a crafted HTML page. (Chromium security severity: Low) |
Affected by 13 other vulnerabilities. |
|
VCID-3zse-2gm4-p7hj
Aliases: CVE-2025-5068 |
Use after free in Blink in Google Chrome prior to 137.0.7151.68 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. (Chromium security severity: Medium) |
Affected by 13 other vulnerabilities. |
|
VCID-428s-bqtq-v3cy
Aliases: CVE-2024-7981 |
Inappropriate implementation in Views in Google Chrome prior to 128.0.6613.84 allowed a remote attacker to perform UI spoofing via a crafted HTML page. (Chromium security severity: Low) |
Affected by 13 other vulnerabilities. |
|
VCID-44hs-aqfs-z7hm
Aliases: CVE-2025-8583 |
Inappropriate implementation in Permissions in Google Chrome prior to 139.0.7258.66 allowed a remote attacker to perform UI spoofing via a crafted HTML page. (Chromium security severity: Low) |
Affected by 13 other vulnerabilities. Affected by 0 other vulnerabilities. Affected by 5 other vulnerabilities. |
|
VCID-44n6-2hcn-wufs
Aliases: CVE-2024-5833 |
Type Confusion in V8 in Google Chrome prior to 126.0.6478.54 allowed a remote attacker to potentially perform out of bounds memory access via a crafted HTML page. (Chromium security severity: High) |
Affected by 13 other vulnerabilities. |
|
VCID-45uj-17s3-cbb2
Aliases: CVE-2025-6555 |
Use after free in Animation in Google Chrome prior to 138.0.7204.49 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. (Chromium security severity: Medium) |
Affected by 13 other vulnerabilities. |
|
VCID-47x9-smem-cyd6
Aliases: CVE-2024-11395 |
Type Confusion in V8 in Google Chrome prior to 131.0.6778.85 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. (Chromium security severity: High) |
Affected by 13 other vulnerabilities. |
|
VCID-484q-2jz3-4ufr
Aliases: CVE-2024-6995 |
Inappropriate implementation in Fullscreen in Google Chrome on Android prior to 127.0.6533.72 allowed a remote attacker who convinced a user to engage in specific UI gestures to spoof the contents of the Omnibox (URL bar) via a crafted HTML page. (Chromium security severity: Medium) |
Affected by 13 other vulnerabilities. |
|
VCID-4a66-85ec-zqcw
Aliases: CVE-2024-5495 |
Use after free in Dawn in Google Chrome prior to 125.0.6422.141 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. (Chromium security severity: High) |
Affected by 13 other vulnerabilities. |
|
VCID-4a75-fngf-euhc
Aliases: CVE-2024-4060 |
Use after free in Dawn in Google Chrome prior to 124.0.6367.78 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. (Chromium security severity: High) |
Affected by 13 other vulnerabilities. |
|
VCID-4bnv-s2sj-nbds
Aliases: CVE-2024-3845 |
Inappropriate implementation in Networks in Google Chrome prior to 124.0.6367.60 allowed a remote attacker to bypass mixed content policy via a crafted HTML page. (Chromium security severity: Low) |
Affected by 13 other vulnerabilities. |
|
VCID-4c72-fk9w-rbem
Aliases: CVE-2024-8636 |
Heap buffer overflow in Skia in Google Chrome prior to 128.0.6613.137 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. (Chromium security severity: High) |
Affected by 13 other vulnerabilities. |
|
VCID-4ew6-7q14-kfd6
Aliases: CVE-2024-4331 |
Use after free in Picture In Picture in Google Chrome prior to 124.0.6367.118 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. (Chromium security severity: High) |
Affected by 13 other vulnerabilities. |
|
VCID-4f5z-c65v-dqhf
Aliases: CVE-2024-8639 |
Use after free in Autofill in Google Chrome on Android prior to 128.0.6613.137 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. (Chromium security severity: High) |
Affected by 13 other vulnerabilities. |
|
VCID-4g3z-1ngr-33dr
Aliases: CVE-2024-2176 |
Use after free in FedCM in Google Chrome prior to 122.0.6261.111 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. (Chromium security severity: High) |
Affected by 13 other vulnerabilities. |
|
VCID-4jtt-57s4-sybc
Aliases: CVE-2024-3170 |
Use after free in WebRTC in Google Chrome prior to 121.0.6167.85 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. (Chromium security severity: High) |
Affected by 13 other vulnerabilities. |
|
VCID-4m16-wyq9-13fd
Aliases: CVE-2024-7020 |
Inappropriate implementation in Autofill in Google Chrome prior to 124.0.6367.60 allowed a remote attacker to perform UI spoofing via a crafted HTML page. (Chromium security severity: Low) |
Affected by 13 other vulnerabilities. |
|
VCID-553j-n48t-kybf
Aliases: CVE-2025-3619 |
Heap buffer overflow in Codecs in Google Chrome on Windows prior to 135.0.7049.95 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. (Chromium security severity: Critical) |
Affected by 13 other vulnerabilities. |
|
VCID-588y-9qxh-2uez
Aliases: CVE-2025-0612 |
Out of bounds memory access in V8 in Google Chrome prior to 132.0.6834.110 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. (Chromium security severity: High) |
Affected by 13 other vulnerabilities. |
|
VCID-5dve-drxz-uffa
Aliases: CVE-2024-12381 |
Type Confusion in V8 in Google Chrome prior to 131.0.6778.139 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. (Chromium security severity: High) |
Affected by 13 other vulnerabilities. |
|
VCID-5fvj-zsct-hkfq
Aliases: CVE-2024-3158 |
Use after free in Bookmarks in Google Chrome prior to 123.0.6312.105 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. (Chromium security severity: High) |
Affected by 13 other vulnerabilities. |
|
VCID-5mjm-b28g-8ugs
Aliases: CVE-2024-10826 |
Use after free in Family Experiences in Google Chrome on Android prior to 130.0.6723.116 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. (Chromium security severity: High) |
Affected by 13 other vulnerabilities. |
|
VCID-5q2a-gf5t-47b8
Aliases: CVE-2024-8905 |
Inappropriate implementation in V8 in Google Chrome prior to 129.0.6668.58 allowed a remote attacker to potentially exploit stack corruption via a crafted HTML page. (Chromium security severity: Medium) |
Affected by 13 other vulnerabilities. |
|
VCID-5rj9-27rw-sbaj
Aliases: CVE-2024-1672 |
Inappropriate implementation in Content Security Policy in Google Chrome prior to 122.0.6261.57 allowed a remote attacker to bypass content security policy via a crafted HTML page. (Chromium security severity: Medium) |
Affected by 13 other vulnerabilities. |
|
VCID-5tcf-x6uu-23bx
Aliases: CVE-2024-7019 |
Inappropriate implementation in UI in Google Chrome prior to 124.0.6367.60 allowed a remote attacker who convinced a user to engage in specific UI gestures to perform UI spoofing via a crafted HTML page. (Chromium security severity: Medium) |
Affected by 13 other vulnerabilities. |
|
VCID-5z7w-juqm-fkbr
Aliases: CVE-2025-5065 |
Inappropriate implementation in FileSystemAccess API in Google Chrome prior to 137.0.7151.55 allowed a remote attacker to perform UI spoofing via a crafted HTML page. (Chromium security severity: Medium) |
Affected by 13 other vulnerabilities. |
|
VCID-667w-zj5e-hfee
Aliases: CVE-2024-5837 |
Type Confusion in V8 in Google Chrome prior to 126.0.6478.54 allowed a remote attacker to potentially perform out of bounds memory access via a crafted HTML page. (Chromium security severity: High) |
Affected by 13 other vulnerabilities. |
|
VCID-68r9-zpsd-pbce
Aliases: CVE-2024-12694 |
Use after free in Compositing in Google Chrome prior to 131.0.6778.204 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. (Chromium security severity: High) |
Affected by 13 other vulnerabilities. |
|
VCID-6b13-bgnh-3qeh
Aliases: CVE-2024-4761 |
Out of bounds write in V8 in Google Chrome prior to 124.0.6367.207 allowed a remote attacker to perform an out of bounds memory write via a crafted HTML page. (Chromium security severity: High) |
Affected by 13 other vulnerabilities. |
|
VCID-6ckg-crgg-juea
Aliases: CVE-2025-0997 |
Use after free in Navigation in Google Chrome prior to 133.0.6943.98 allowed a remote attacker to potentially exploit heap corruption via a crafted Chrome Extension. (Chromium security severity: High) |
Affected by 13 other vulnerabilities. |
|
VCID-6h3t-uy3r-pkc8
Aliases: CVE-2024-7980 |
Insufficient data validation in Installer in Google Chrome on Windows prior to 128.0.6613.84 allowed a local attacker to perform privilege escalation via a crafted symbolic link. (Chromium security severity: Medium) |
Affected by 13 other vulnerabilities. |
|
VCID-6n16-prxu-qkfd
Aliases: CVE-2025-0439 |
Race in Frames in Google Chrome prior to 132.0.6834.83 allowed a remote attacker who convinced a user to engage in specific UI gestures to perform UI spoofing via a crafted HTML page. (Chromium security severity: Medium) |
Affected by 13 other vulnerabilities. |
|
VCID-6uc2-v9dq-jud1
Aliases: CVE-2025-8580 |
Inappropriate implementation in Filesystems in Google Chrome prior to 139.0.7258.66 allowed a remote attacker to perform UI spoofing via a crafted HTML page. (Chromium security severity: Low) |
Affected by 13 other vulnerabilities. Affected by 0 other vulnerabilities. Affected by 5 other vulnerabilities. |
|
VCID-6usc-cpw5-1qhy
Aliases: CVE-2024-2631 |
Inappropriate implementation in iOS in Google Chrome prior to 123.0.6312.58 allowed a remote attacker to perform UI spoofing via a crafted HTML page. (Chromium security severity: Low) |
Affected by 13 other vulnerabilities. |
|
VCID-6vxy-bwe5-ubhw
Aliases: CVE-2025-2135 |
Type Confusion in V8 in Google Chrome prior to 134.0.6998.88 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. (Chromium security severity: High) |
Affected by 13 other vulnerabilities. |
|
VCID-6yvu-ezux-mbgq
Aliases: CVE-2024-4368 |
Use after free in Dawn in Google Chrome prior to 124.0.6367.118 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. (Chromium security severity: High) |
Affected by 13 other vulnerabilities. |
|
VCID-7335-q494-yba8
Aliases: CVE-2024-7964 |
Use after free in Passwords in Google Chrome on Android prior to 128.0.6613.84 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. (Chromium security severity: High) |
Affected by 13 other vulnerabilities. |
|
VCID-77db-nbjj-h3g2
Aliases: CVE-2024-6776 |
Use after free in Audio in Google Chrome prior to 126.0.6478.182 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. (Chromium security severity: High) |
Affected by 13 other vulnerabilities. |
|
VCID-78n9-h3jg-9ygf
Aliases: CVE-2025-0611 |
Object corruption in V8 in Google Chrome prior to 132.0.6834.110 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. (Chromium security severity: High) |
Affected by 13 other vulnerabilities. |
|
VCID-7bsj-bpkp-6bh9
Aliases: CVE-2024-12382 |
Use after free in Translate in Google Chrome prior to 131.0.6778.139 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. (Chromium security severity: High) |
Affected by 13 other vulnerabilities. |
|
VCID-7g93-6hwg-tkep
Aliases: CVE-2024-5274 |
Type Confusion in V8 in Google Chrome prior to 125.0.6422.112 allowed a remote attacker to execute arbitrary code inside a sandbox via a crafted HTML page. (Chromium security severity: High) |
Affected by 13 other vulnerabilities. |
|
VCID-7hm8-q8wb-p7eb
Aliases: CVE-2025-8881 |
Inappropriate implementation in File Picker in Google Chrome prior to 139.0.7258.127 allowed a remote attacker who convinced a user to engage in specific UI gestures to leak cross-origin data via a crafted HTML page. (Chromium security severity: Medium) |
Affected by 13 other vulnerabilities. Affected by 0 other vulnerabilities. Affected by 0 other vulnerabilities. |
|
VCID-7hq6-5sht-uug9
Aliases: CVE-2024-3837 |
Use after free in QUIC in Google Chrome prior to 124.0.6367.60 allowed a remote attacker who had compromised the renderer process to potentially exploit heap corruption via a crafted HTML page. (Chromium security severity: Medium) |
Affected by 13 other vulnerabilities. |
|
VCID-7mwk-c8tb-1fhf
Aliases: CVE-2024-2883 |
Use after free in ANGLE in Google Chrome prior to 123.0.6312.86 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. (Chromium security severity: Critical) |
Affected by 13 other vulnerabilities. |
|
VCID-7rcs-fka9-tbdr
Aliases: CVE-2024-10229 |
Inappropriate implementation in Extensions in Google Chrome prior to 130.0.6723.69 allowed a remote attacker to bypass site isolation via a crafted Chrome Extension. (Chromium security severity: High) |
Affected by 13 other vulnerabilities. |
|
VCID-7w1h-rbz6-33ha
Aliases: CVE-2024-1674 |
Inappropriate implementation in Navigation in Google Chrome prior to 122.0.6261.57 allowed a remote attacker to bypass navigation restrictions via a crafted HTML page. (Chromium security severity: Medium) |
Affected by 13 other vulnerabilities. |
|
VCID-7xuy-4kvj-eubr
Aliases: CVE-2024-1669 |
Out of bounds memory access in Blink in Google Chrome prior to 122.0.6261.57 allowed a remote attacker to perform out of bounds memory access via a crafted HTML page. (Chromium security severity: High) |
Affected by 13 other vulnerabilities. |
|
VCID-7y2u-x13h-tkbm
Aliases: CVE-2024-10230 |
Type Confusion in V8 in Google Chrome prior to 130.0.6723.69 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. (Chromium security severity: High) |
Affected by 13 other vulnerabilities. |
|
VCID-7zza-zewc-y3f4
Aliases: CVE-2025-5958 |
Use after free in Media in Google Chrome prior to 137.0.7151.103 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. (Chromium security severity: High) |
Affected by 13 other vulnerabilities. |
|
VCID-81te-ne9y-pqcc
Aliases: CVE-2024-9959 |
Use after free in DevTools in Google Chrome prior to 130.0.6723.58 allowed a remote attacker who had compromised the renderer process to potentially exploit heap corruption via a crafted Chrome Extension. (Chromium security severity: Medium) |
Affected by 13 other vulnerabilities. |
|
VCID-858n-yeka-yffj
Aliases: CVE-2025-7656 |
Integer overflow in V8 in Google Chrome prior to 138.0.7204.157 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. (Chromium security severity: High) |
Affected by 13 other vulnerabilities. |
|
VCID-87q8-hpm2-skgk
Aliases: CVE-2025-8582 |
Insufficient validation of untrusted input in Core in Google Chrome prior to 139.0.7258.66 allowed a remote attacker to spoof the contents of the Omnibox (URL bar) via a crafted HTML page. (Chromium security severity: Low) |
Affected by 13 other vulnerabilities. Affected by 0 other vulnerabilities. Affected by 5 other vulnerabilities. |
|
VCID-87s9-3mht-3bbg
Aliases: CVE-2024-1077 |
Use after free in Network in Google Chrome prior to 121.0.6167.139 allowed a remote attacker to potentially exploit heap corruption via a malicious file. (Chromium security severity: High) |
Affected by 13 other vulnerabilities. |
|
VCID-87vp-pk1c-qyhb
Aliases: CVE-2024-4559 |
Heap buffer overflow in WebAudio in Google Chrome prior to 124.0.6367.155 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. (Chromium security severity: High) |
Affected by 13 other vulnerabilities. |
|
VCID-8e73-r6vf-p3bj
Aliases: CVE-2024-6996 |
Race in Frames in Google Chrome prior to 127.0.6533.72 allowed a remote attacker who convinced a user to engage in specific UI gestures to perform UI spoofing via a crafted HTML page. (Chromium security severity: Medium) |
Affected by 13 other vulnerabilities. |
|
VCID-8fun-52w6-u7ap
Aliases: CVE-2024-6774 |
Use after free in Screen Capture in Google Chrome prior to 126.0.6478.182 allowed a remote attacker who convinced a user to engage in specific UI gestures to potentially exploit heap corruption via a crafted HTML page. (Chromium security severity: High) |
Affected by 13 other vulnerabilities. |
|
VCID-8h7f-n8vx-jucd
Aliases: CVE-2024-5838 |
Type Confusion in V8 in Google Chrome prior to 126.0.6478.54 allowed a remote attacker to perform out of bounds memory access via a crafted HTML page. (Chromium security severity: High) |
Affected by 13 other vulnerabilities. |
|
VCID-8j55-e778-zfck
Aliases: CVE-2025-0999 |
Heap buffer overflow in V8 in Google Chrome prior to 133.0.6943.126 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. (Chromium security severity: High) |
Affected by 13 other vulnerabilities. |
|
VCID-8mta-q459-4be9
Aliases: CVE-2025-8880 |
Race in V8 in Google Chrome prior to 139.0.7258.127 allowed a remote attacker to execute arbitrary code inside a sandbox via a crafted HTML page. (Chromium security severity: High) |
Affected by 13 other vulnerabilities. Affected by 0 other vulnerabilities. Affected by 0 other vulnerabilities. |
|
VCID-8n16-bqw2-ayap
Aliases: CVE-2024-6778 |
Race in DevTools in Google Chrome prior to 126.0.6478.182 allowed an attacker who convinced a user to install a malicious extension to inject scripts or HTML into a privileged page via a crafted Chrome Extension. (Chromium security severity: High) |
Affected by 13 other vulnerabilities. |
|
VCID-8p4m-z4n6-w3f8
Aliases: CVE-2024-2174 |
Inappropriate implementation in V8 in Google Chrome prior to 122.0.6261.111 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. (Chromium security severity: High) |
Affected by 13 other vulnerabilities. |
|
VCID-8ps7-ftmj-abbj
Aliases: CVE-2024-9960 |
Use after free in Dawn in Google Chrome prior to 130.0.6723.58 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. (Chromium security severity: Medium) |
Affected by 13 other vulnerabilities. |
|
VCID-8smq-vqef-87du
Aliases: CVE-2025-8882 |
Use after free in Aura in Google Chrome prior to 139.0.7258.127 allowed a remote attacker who convinced a user to engage in specific UI gestures to potentially exploit heap corruption via a crafted HTML page. (Chromium security severity: Medium) |
Affected by 13 other vulnerabilities. Affected by 0 other vulnerabilities. Affected by 0 other vulnerabilities. |
|
VCID-8uv7-s3ah-s3gf
Aliases: CVE-2024-3171 |
Use after free in Accessibility in Google Chrome prior to 122.0.6261.57 allowed a remote attacker who convinced a user to engage in specific UI gestures to potentially exploit heap corruption via specific UI gestures. (Chromium security severity: Medium) |
Affected by 13 other vulnerabilities. |
|
VCID-8w96-qkq6-pugz
Aliases: CVE-2024-7003 |
Inappropriate implementation in FedCM in Google Chrome prior to 127.0.6533.72 allowed a remote attacker who convinced a user to engage in specific UI gestures to perform UI spoofing via a crafted HTML page. (Chromium security severity: Low) |
Affected by 13 other vulnerabilities. |
|
VCID-8yy8-73wf-uyhq
Aliases: CVE-2024-7965 |
Inappropriate implementation in V8 in Google Chrome prior to 128.0.6613.84 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. (Chromium security severity: High) |
Affected by 13 other vulnerabilities. |
|
VCID-91nb-59xg-n3h2
Aliases: CVE-2024-0807 |
Use after free in Web Audio in Google Chrome prior to 121.0.6167.85 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. (Chromium security severity: High) |
Affected by 13 other vulnerabilities. |
|
VCID-923j-tsrq-rkhj
Aliases: CVE-2025-1917 |
Inappropriate implementation in Browser UI in Google Chrome on Android prior to 134.0.6998.35 allowed a remote attacker to perform UI spoofing via a crafted HTML page. (Chromium security severity: Medium) |
Affected by 13 other vulnerabilities. |
|
VCID-93rc-7rr6-kud4
Aliases: CVE-2024-11110 |
Inappropriate implementation in Extensions in Google Chrome prior to 131.0.6778.69 allowed a remote attacker to bypass site isolation via a crafted Chrome Extension. (Chromium security severity: High) |
Affected by 13 other vulnerabilities. |
|
VCID-981p-4agu-8uaf
Aliases: CVE-2024-8193 |
Heap buffer overflow in Skia in Google Chrome prior to 128.0.6613.113 allowed a remote attacker who had compromised the renderer process to potentially exploit heap corruption via a crafted HTML page. (Chromium security severity: High) |
Affected by 13 other vulnerabilities. |
|
VCID-99g4-v8cd-4kfm
Aliases: CVE-2024-12692 |
Type Confusion in V8 in Google Chrome prior to 131.0.6778.204 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. (Chromium security severity: High) |
Affected by 13 other vulnerabilities. |
|
VCID-9a9m-5bak-gbdh
Aliases: CVE-2024-1284 |
Use after free in Mojo in Google Chrome prior to 121.0.6167.160 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. (Chromium security severity: High) |
Affected by 13 other vulnerabilities. |
|
VCID-9fn7-cecs-dqdg
Aliases: CVE-2024-3169 |
Use after free in V8 in Google Chrome prior to 121.0.6167.139 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. (Chromium security severity: High) |
Affected by 13 other vulnerabilities. |
|
VCID-9htd-ebnu-4qdf
Aliases: CVE-2024-7024 |
Inappropriate implementation in V8 in Google Chrome prior to 126.0.6478.54 allowed a remote attacker to potentially perform a sandbox escape via a crafted HTML page. (Chromium security severity: Low) |
Affected by 13 other vulnerabilities. |
|
VCID-9msz-qpxn-q7ck
Aliases: CVE-2025-0440 |
Inappropriate implementation in Fullscreen in Google Chrome on Windows prior to 132.0.6834.83 allowed a remote attacker to perform UI spoofing via a crafted HTML page. (Chromium security severity: Medium) |
Affected by 13 other vulnerabilities. |
|
VCID-9p2a-qx8m-mqdf
Aliases: CVE-2024-6994 |
Heap buffer overflow in Layout in Google Chrome prior to 127.0.6533.72 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. (Chromium security severity: Medium) |
Affected by 13 other vulnerabilities. |
|
VCID-9sgq-bwf9-7bb9
Aliases: CVE-2025-0434 |
Out of bounds memory access in V8 in Google Chrome prior to 132.0.6834.83 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. (Chromium security severity: High) |
Affected by 13 other vulnerabilities. |
|
VCID-9t1q-axzz-fqcj
Aliases: CVE-2024-8638 |
Type Confusion in V8 in Google Chrome prior to 128.0.6613.137 allowed a remote attacker to potentially exploit object corruption via a crafted HTML page. (Chromium security severity: High) |
Affected by 13 other vulnerabilities. |
|
VCID-9vcq-3skk-zfbu
Aliases: CVE-2024-3516 |
Heap buffer overflow in ANGLE in Google Chrome prior to 123.0.6312.122 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. (Chromium security severity: High) |
Affected by 13 other vulnerabilities. |
|
VCID-9vkw-qr2a-r3b8
Aliases: CVE-2024-7536 |
Use after free in WebAudio in Google Chrome prior to 127.0.6533.99 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. (Chromium security severity: High) |
Affected by 13 other vulnerabilities. |
|
VCID-a1fx-c3kk-ubc1
Aliases: CVE-2025-8011 |
Type Confusion in V8 in Google Chrome prior to 138.0.7204.168 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. (Chromium security severity: High) |
Affected by 13 other vulnerabilities. |
|
VCID-a5y3-parp-6yex
Aliases: CVE-2024-1671 |
Inappropriate implementation in Site Isolation in Google Chrome prior to 122.0.6261.57 allowed a remote attacker to bypass content security policy via a crafted HTML page. (Chromium security severity: Medium) |
Affected by 13 other vulnerabilities. |
|
VCID-ajcj-nr32-uuee
Aliases: CVE-2024-5830 |
Type Confusion in V8 in Google Chrome prior to 126.0.6478.54 allowed a remote attacker to perform an out of bounds memory write via a crafted HTML page. (Chromium security severity: High) |
Affected by 13 other vulnerabilities. |
|
VCID-amxd-mnfe-1uhw
Aliases: CVE-2024-3833 |
Object corruption in WebAssembly in Google Chrome prior to 124.0.6367.60 allowed a remote attacker to potentially exploit object corruption via a crafted HTML page. (Chromium security severity: High) |
Affected by 13 other vulnerabilities. |
|
VCID-aq7b-ugj1-b3er
Aliases: CVE-2024-5831 |
Use after free in Dawn in Google Chrome prior to 126.0.6478.54 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. (Chromium security severity: High) |
Affected by 13 other vulnerabilities. |
|
VCID-asy7-6h5g-qbb9
Aliases: CVE-2024-6997 |
Use after free in Tabs in Google Chrome prior to 127.0.6533.72 allowed a remote attacker who convinced a user to engage in specific UI gestures to potentially exploit heap corruption via a crafted HTML page. (Chromium security severity: Medium) |
Affected by 13 other vulnerabilities. |
|
VCID-azyd-af8k-3uav
Aliases: CVE-2025-0438 |
Stack buffer overflow in Tracing in Google Chrome prior to 132.0.6834.83 allowed a remote attacker to potentially exploit stack corruption via a crafted HTML page. (Chromium security severity: High) |
Affected by 13 other vulnerabilities. |
|
VCID-b5yy-vuxn-gye9
Aliases: CVE-2024-9958 |
Inappropriate implementation in PictureInPicture in Google Chrome prior to 130.0.6723.58 allowed a remote attacker to perform UI spoofing via a crafted HTML page. (Chromium security severity: Medium) |
Affected by 13 other vulnerabilities. |
|
VCID-b8u9-xknk-ckap
Aliases: CVE-2024-12053 |
Type Confusion in V8 in Google Chrome prior to 131.0.6778.108 allowed a remote attacker to potentially exploit object corruption via a crafted HTML page. (Chromium security severity: High) |
Affected by 13 other vulnerabilities. |
|
VCID-bpv1-y8z1-fybm
Aliases: CVE-2024-8637 |
Use after free in Media Router in Google Chrome on Android prior to 128.0.6613.137 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. (Chromium security severity: High) |
Affected by 13 other vulnerabilities. |
|
VCID-bq1h-2w86-huab
Aliases: CVE-2024-4948 |
Use after free in Dawn in Google Chrome prior to 125.0.6422.60 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. (Chromium security severity: High) |
Affected by 13 other vulnerabilities. |
|
VCID-bqtm-nk1y-ukh7
Aliases: CVE-2024-1675 |
Insufficient policy enforcement in Download in Google Chrome prior to 122.0.6261.57 allowed a remote attacker to bypass filesystem restrictions via a crafted HTML page. (Chromium security severity: Medium) |
Affected by 13 other vulnerabilities. |
|
VCID-br2p-2ct4-gybj
Aliases: CVE-2024-9957 |
Use after free in UI in Google Chrome on iOS prior to 130.0.6723.58 allowed a remote attacker who convinced a user to engage in specific UI gestures to potentially exploit heap corruption via a crafted HTML page. (Chromium security severity: Medium) |
Affected by 13 other vulnerabilities. |
|
VCID-buew-hjjx-gfgg
Aliases: CVE-2025-6192 |
Use after free in Metrics in Google Chrome prior to 137.0.7151.119 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. (Chromium security severity: High) |
Affected by 13 other vulnerabilities. |
|
VCID-buma-pdcn-8ybk
Aliases: CVE-2024-3832 |
Object corruption in V8 in Google Chrome prior to 124.0.6367.60 allowed a remote attacker to potentially exploit object corruption via a crafted HTML page. (Chromium security severity: High) |
Affected by 13 other vulnerabilities. |
|
VCID-bunq-tu53-pqdj
Aliases: CVE-2024-11114 |
Inappropriate implementation in Views in Google Chrome on Windows prior to 131.0.6778.69 allowed a remote attacker who had compromised the renderer process to potentially perform a sandbox escape via a crafted HTML page. (Chromium security severity: Medium) |
Affected by 13 other vulnerabilities. |
|
VCID-bv7s-b31u-a7f1
Aliases: CVE-2024-6779 |
Out of bounds memory access in V8 in Google Chrome prior to 126.0.6478.182 allowed a remote attacker to potentially perform a sandbox escape via a crafted HTML page. (Chromium security severity: High) |
Affected by 13 other vulnerabilities. |
|
VCID-c85m-uxc9-k7ef
Aliases: CVE-2024-5159 |
Heap buffer overflow in ANGLE in Google Chrome prior to 125.0.6422.76 allowed a remote attacker to perform an out of bounds memory read via a crafted HTML page. (Chromium security severity: High) |
Affected by 13 other vulnerabilities. |
|
VCID-c95e-f2ds-xyhs
Aliases: CVE-2024-1670 |
Use after free in Mojo in Google Chrome prior to 122.0.6261.57 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. (Chromium security severity: High) |
Affected by 13 other vulnerabilities. |
|
VCID-ca9n-pg2y-qyfs
Aliases: CVE-2024-5834 |
Inappropriate implementation in Dawn in Google Chrome prior to 126.0.6478.54 allowed a remote attacker to execute arbitrary code via a crafted HTML page. (Chromium security severity: High) |
Affected by 13 other vulnerabilities. |
|
VCID-cdue-apcy-1fh6
Aliases: CVE-2025-0437 |
Out of bounds read in Metrics in Google Chrome prior to 132.0.6834.83 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. (Chromium security severity: High) |
Affected by 13 other vulnerabilities. |
|
VCID-ce3y-qvrk-uqb5
Aliases: CVE-2024-11116 |
Inappropriate implementation in Blink in Google Chrome prior to 131.0.6778.69 allowed a remote attacker who convinced a user to engage in specific UI gestures to perform UI spoofing via a crafted HTML page. (Chromium security severity: Medium) |
Affected by 13 other vulnerabilities. |
|
VCID-cetp-er48-y3fb
Aliases: CVE-2025-3072 |
Inappropriate implementation in Custom Tabs in Google Chrome prior to 135.0.7049.52 allowed a remote attacker who convinced a user to engage in specific UI gestures to perform UI spoofing via a crafted HTML page. (Chromium security severity: Low) |
Affected by 13 other vulnerabilities. |
|
VCID-cfpg-d13f-pya7
Aliases: CVE-2024-6290 |
Use after free in Dawn in Google Chrome prior to 126.0.6478.126 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. (Chromium security severity: High) |
Affected by 13 other vulnerabilities. |
|
VCID-cgzu-5yhd-mkd9
Aliases: CVE-2024-2887 |
Type Confusion in WebAssembly in Google Chrome prior to 123.0.6312.86 allowed a remote attacker to execute arbitrary code via a crafted HTML page. (Chromium security severity: High) |
Affected by 13 other vulnerabilities. |
|
VCID-cjer-98d5-3qfb
Aliases: CVE-2024-4947 |
Type Confusion in V8 in Google Chrome prior to 125.0.6422.60 allowed a remote attacker to execute arbitrary code inside a sandbox via a crafted HTML page. (Chromium security severity: High) |
Affected by 13 other vulnerabilities. |
|
VCID-cjyb-8rhr-9uc1
Aliases: CVE-2024-2629 |
Incorrect security UI in iOS in Google Chrome prior to 123.0.6312.58 allowed a remote attacker to perform UI spoofing via a crafted HTML page. (Chromium security severity: Medium) |
Affected by 13 other vulnerabilities. |
|
VCID-cmpu-gbwd-vqek
Aliases: CVE-2024-0809 |
Inappropriate implementation in Autofill in Google Chrome prior to 121.0.6167.85 allowed a remote attacker to bypass Autofill restrictions via a crafted HTML page. (Chromium security severity: Low) |
Affected by 13 other vulnerabilities. |
|
VCID-cpnx-85sk-w3fc
Aliases: CVE-2024-5839 |
Inappropriate Implementation in Memory Allocator in Google Chrome prior to 126.0.6478.54 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. (Chromium security severity: Medium) |
Affected by 13 other vulnerabilities. |
|
VCID-cq8z-h8jp-wkb5
Aliases: CVE-2024-5835 |
Heap buffer overflow in Tab Groups in Google Chrome prior to 126.0.6478.54 allowed a remote attacker who convinced a user to engage in specific UI gestures to potentially exploit heap corruption via a crafted HTML page. (Chromium security severity: High) |
Affected by 13 other vulnerabilities. |
|
VCID-d1a2-6cqj-e7e9
Aliases: CVE-2024-5493 |
Heap buffer overflow in WebRTC in Google Chrome prior to 125.0.6422.141 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. (Chromium security severity: High) |
Affected by 13 other vulnerabilities. |
|
VCID-d2y5-ez6x-tfb9
Aliases: CVE-2025-0436 |
Integer overflow in Skia in Google Chrome prior to 132.0.6834.83 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. (Chromium security severity: High) |
Affected by 13 other vulnerabilities. |
|
VCID-d4un-v7rc-dybj
Aliases: CVE-2024-2173 |
Out of bounds memory access in V8 in Google Chrome prior to 122.0.6261.111 allowed a remote attacker to perform out of bounds memory access via a crafted HTML page. (Chromium security severity: High) |
Affected by 13 other vulnerabilities. |
|
VCID-d4vd-r2pk-aqcv
Aliases: CVE-2025-2137 |
Out of bounds read in V8 in Google Chrome prior to 134.0.6998.88 allowed a remote attacker to perform out of bounds memory access via a crafted HTML page. (Chromium security severity: Medium) |
Affected by 13 other vulnerabilities. |
|
VCID-de34-thx4-pubq
Aliases: CVE-2025-0441 |
Inappropriate implementation in Fenced Frames in Google Chrome prior to 132.0.6834.83 allowed a remote attacker to obtain potentially sensitive information from the system via a crafted HTML page. (Chromium security severity: Medium) |
Affected by 13 other vulnerabilities. |
|
VCID-dmnx-77x9-33bj
Aliases: CVE-2024-9966 |
Inappropriate implementation in Navigations in Google Chrome prior to 130.0.6723.58 allowed a remote attacker to bypass content security policy via a crafted HTML page. (Chromium security severity: Low) |
Affected by 13 other vulnerabilities. |
|
VCID-dpga-gaam-vugu
Aliases: CVE-2025-2136 |
Use after free in Inspector in Google Chrome prior to 134.0.6998.88 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. (Chromium security severity: Medium) |
Affected by 13 other vulnerabilities. |
|
VCID-dr54-pmjh-ayba
Aliases: CVE-2025-8292 |
Use after free in Media Stream in Google Chrome prior to 138.0.7204.183 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. (Chromium security severity: High) |
Affected by 13 other vulnerabilities. Affected by 5 other vulnerabilities. |
|
VCID-drsu-p1w1-mqar
Aliases: CVE-2024-0814 |
Incorrect security UI in Payments in Google Chrome prior to 121.0.6167.85 allowed a remote attacker to potentially spoof security UI via a crafted HTML page. (Chromium security severity: Medium) |
Affected by 13 other vulnerabilities. |
|
VCID-ds16-zqxt-87d7
Aliases: CVE-2024-4058 |
Type confusion in ANGLE in Google Chrome prior to 124.0.6367.78 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. (Chromium security severity: Critical) |
Affected by 13 other vulnerabilities. |
|
VCID-dup8-awae-y7dm
Aliases: CVE-2024-3844 |
Inappropriate implementation in Extensions in Google Chrome prior to 124.0.6367.60 allowed a remote attacker to perform UI spoofing via a crafted Chrome Extension. (Chromium security severity: Low) |
Affected by 13 other vulnerabilities. |
|
VCID-e3ap-kmq1-t7gy
Aliases: CVE-2024-0808 |
Integer underflow in WebUI in Google Chrome prior to 121.0.6167.85 allowed a remote attacker to potentially exploit heap corruption via a malicious file. (Chromium security severity: High) |
Affected by 13 other vulnerabilities. |
|
VCID-ecm1-qzrn-hkfq
Aliases: CVE-2025-4096 |
Heap buffer overflow in HTML in Google Chrome prior to 136.0.7103.59 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. (Chromium security severity: High) |
Affected by 13 other vulnerabilities. |
|
VCID-eh51-y3nw-cugf
Aliases: CVE-2024-3847 |
Insufficient policy enforcement in WebUI in Google Chrome prior to 124.0.6367.60 allowed a remote attacker to bypass content security policy via a crafted HTML page. (Chromium security severity: Low) |
Affected by 13 other vulnerabilities. |
|
VCID-en6e-zwjb-17ay
Aliases: CVE-2024-1060 |
Use after free in Canvas in Google Chrome prior to 121.0.6167.139 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. (Chromium security severity: High) |
Affected by 13 other vulnerabilities. |
|
VCID-evke-f1sx-9kdm
Aliases: CVE-2024-3157 |
Out of bounds memory access in Compositing in Google Chrome prior to 123.0.6312.122 allowed a remote attacker who had compromised the GPU process to potentially perform a sandbox escape via specific UI gestures. (Chromium security severity: High) |
Affected by 13 other vulnerabilities. |
|
VCID-evz9-g7vp-wkg2
Aliases: CVE-2024-4950 |
Inappropriate implementation in Downloads in Google Chrome prior to 125.0.6422.60 allowed a remote attacker who convinced a user to engage in specific UI gestures to perform UI spoofing via a crafted HTML page. (Chromium security severity: Low) |
Affected by 13 other vulnerabilities. |
|
VCID-exv7-r2kt-tfe6
Aliases: CVE-2025-8010 |
Type Confusion in V8 in Google Chrome prior to 138.0.7204.168 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. (Chromium security severity: High) |
Affected by 13 other vulnerabilities. |
|
VCID-eyq9-z155-uqac
Aliases: CVE-2024-9964 |
Inappropriate implementation in Payments in Google Chrome prior to 130.0.6723.58 allowed a remote attacker who convinced a user to engage in specific UI gestures to perform UI spoofing via a crafted Chrome Extension. (Chromium security severity: Low) |
Affected by 13 other vulnerabilities. |
|
VCID-f4f3-6z23-a3cn
Aliases: CVE-2024-8035 |
Inappropriate implementation in Extensions in Google Chrome on Windows prior to 128.0.6613.84 allowed a remote attacker to perform UI spoofing via a crafted HTML page. (Chromium security severity: Low) |
Affected by 13 other vulnerabilities. |
|
VCID-f89x-24dz-p7ef
Aliases: CVE-2024-10827 |
Use after free in Serial in Google Chrome prior to 130.0.6723.116 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. (Chromium security severity: High) |
Affected by 13 other vulnerabilities. |
|
VCID-fcpm-8f9d-z7gk
Aliases: CVE-2025-3620 |
Use after free in USB in Google Chrome prior to 135.0.7049.95 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. (Chromium security severity: High) |
Affected by 13 other vulnerabilities. |
|
VCID-fejf-q24c-9yc3
Aliases: CVE-2024-9121 |
Inappropriate implementation in V8 in Google Chrome prior to 129.0.6668.70 allowed a remote attacker to potentially perform out of bounds memory access via a crafted HTML page. (Chromium security severity: High) |
Affected by 13 other vulnerabilities. |
|
VCID-fmv3-sxyz-zyhq
Aliases: CVE-2024-6293 |
Use after free in Dawn in Google Chrome prior to 126.0.6478.126 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. (Chromium security severity: High) |
Affected by 13 other vulnerabilities. |
|
VCID-fqgb-buqu-8qca
Aliases: CVE-2024-6292 |
Use after free in Dawn in Google Chrome prior to 126.0.6478.126 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. (Chromium security severity: High) |
Affected by 13 other vulnerabilities. |
|
VCID-g1sk-8229-pqfb
Aliases: CVE-2025-4664 |
Insufficient policy enforcement in Loader in Google Chrome prior to 136.0.7103.113 allowed a remote attacker to leak cross-origin data via a crafted HTML page. (Chromium security severity: High) |
Affected by 13 other vulnerabilities. |
|
VCID-gc7t-hh2a-77c9
Aliases: CVE-2024-7550 |
Type Confusion in V8 in Google Chrome prior to 127.0.6533.99 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. (Chromium security severity: High) |
Affected by 13 other vulnerabilities. |
|
VCID-gcww-gpc1-tyhr
Aliases: CVE-2024-5158 |
Type Confusion in V8 in Google Chrome prior to 125.0.6422.76 allowed a remote attacker to potentially perform arbitrary read/write via a crafted HTML page. (Chromium security severity: High) |
Affected by 13 other vulnerabilities. |
|
VCID-gfe4-rt6z-4kgc
Aliases: CVE-2024-3834 |
Use after free in Downloads in Google Chrome prior to 124.0.6367.60 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. (Chromium security severity: High) |
Affected by 13 other vulnerabilities. |
|
VCID-gjrr-5atb-suhs
Aliases: CVE-2025-4052 |
Inappropriate implementation in DevTools in Google Chrome prior to 136.0.7103.59 allowed a remote attacker who convinced a user to engage in specific UI gestures to bypass discretionary access control via a crafted HTML page. (Chromium security severity: Low) |
Affected by 13 other vulnerabilities. |
|
VCID-gmfy-2f35-fbds
Aliases: CVE-2025-8579 |
Inappropriate implementation in Picture In Picture in Google Chrome prior to 139.0.7258.66 allowed a remote attacker who convinced a user to engage in specific UI gestures to perform UI spoofing via a crafted HTML page. (Chromium security severity: Low) |
Affected by 13 other vulnerabilities. Affected by 0 other vulnerabilities. Affected by 5 other vulnerabilities. |
|
VCID-gmpn-k2fu-qkdy
Aliases: CVE-2024-7966 |
Out of bounds memory access in Skia in Google Chrome prior to 128.0.6613.84 allowed a remote attacker who had compromised the renderer process to perform out of bounds memory access via a crafted HTML page. (Chromium security severity: High) |
Affected by 13 other vulnerabilities. |
|
VCID-gu9w-fju8-kkcb
Aliases: CVE-2024-2400 |
Use after free in Performance Manager in Google Chrome prior to 122.0.6261.128 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. (Chromium security severity: High) |
Affected by 13 other vulnerabilities. |
|
VCID-gw8f-56ya-fyaj
Aliases: CVE-2025-5283 |
A double-free could have occurred in `vpx_codec_enc_init_multi` after a failed allocation when initializing the encoder for WebRTC. This could have caused memory corruption and a potentially exploitable crash. |
Affected by 13 other vulnerabilities. |
|
VCID-gwnq-vvp2-7bc2
Aliases: CVE-2025-0445 |
Use after free in V8 in Google Chrome prior to 133.0.6943.53 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. (Chromium security severity: High) |
Affected by 13 other vulnerabilities. |
|
VCID-h13b-rgtt-bff8
Aliases: CVE-2025-0443 |
Insufficient data validation in Extensions in Google Chrome prior to 132.0.6834.83 allowed a remote attacker who convinced a user to engage in specific UI gestures to perform privilege escalation via a crafted HTML page. (Chromium security severity: Medium) |
Affected by 13 other vulnerabilities. |
|
VCID-h1ry-2zcs-cfg3
Aliases: CVE-2024-5844 |
Heap buffer overflow in Tab Strip in Google Chrome prior to 126.0.6478.54 allowed a remote attacker to perform an out of bounds memory read via a crafted HTML page. (Chromium security severity: Medium) |
Affected by 13 other vulnerabilities. |
|
VCID-h22n-cean-1ug9
Aliases: CVE-2025-4050 |
Out of bounds memory access in DevTools in Google Chrome prior to 136.0.7103.59 allowed a remote attacker who convinced a user to engage in specific UI gestures to potentially exploit heap corruption via a crafted HTML page. (Chromium security severity: Medium) |
Affected by 13 other vulnerabilities. |
|
VCID-h826-8mu3-1ybp
Aliases: CVE-2025-5066 |
Inappropriate implementation in Messages in Google Chrome on Android prior to 137.0.7151.55 allowed a remote attacker who convinced a user to engage in specific UI gestures to perform UI spoofing via a crafted HTML page. (Chromium security severity: Medium) |
Affected by 13 other vulnerabilities. |
|
VCID-h9n4-k3wc-4qcu
Aliases: CVE-2024-1938 |
Type Confusion in V8 in Google Chrome prior to 122.0.6261.94 allowed a remote attacker to potentially exploit object corruption via a crafted HTML page. (Chromium security severity: High) |
Affected by 13 other vulnerabilities. |
|
VCID-h9yv-73q9-rygr
Aliases: CVE-2025-3069 |
Inappropriate implementation in Extensions in Google Chrome prior to 135.0.7049.52 allowed a remote attacker to perform privilege escalation via a crafted HTML page. (Chromium security severity: Medium) |
Affected by 13 other vulnerabilities. |
|
VCID-hhpa-zdd6-t7e4
Aliases: CVE-2024-7001 |
Inappropriate implementation in HTML in Google Chrome prior to 127.0.6533.72 allowed a remote attacker who convinced a user to engage in specific UI gestures to perform UI spoofing via a crafted HTML page. (Chromium security severity: Medium) |
Affected by 13 other vulnerabilities. |
|
VCID-hhsp-s431-z3am
Aliases: CVE-2025-1918 |
Out of bounds read in PDFium in Google Chrome prior to 134.0.6998.35 allowed a remote attacker to potentially perform out of bounds memory access via a crafted PDF file. (Chromium security severity: Medium) |
Affected by 13 other vulnerabilities. |
|
VCID-hu9y-28bq-e3g5
Aliases: CVE-2024-9962 |
Inappropriate implementation in Permissions in Google Chrome prior to 130.0.6723.58 allowed a remote attacker who convinced a user to engage in specific UI gestures to perform UI spoofing via a crafted HTML page. (Chromium security severity: Medium) |
Affected by 13 other vulnerabilities. |
|
VCID-hywg-6v6c-nye6
Aliases: CVE-2025-4372 |
Use after free in WebAudio in Google Chrome prior to 136.0.7103.92 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. (Chromium security severity: Medium) |
Affected by 13 other vulnerabilities. |
|
VCID-j1jk-jk6b-wkcq
Aliases: CVE-2025-3067 |
Inappropriate implementation in Custom Tabs in Google Chrome on Android prior to 135.0.7049.52 allowed a remote attacker who convinced a user to engage in specific UI gestures to perform privilege escalation via a crafted app. (Chromium security severity: Medium) |
Affected by 13 other vulnerabilities. |
|
VCID-j1ya-2b77-hqg1
Aliases: CVE-2024-2628 |
Inappropriate implementation in Downloads in Google Chrome prior to 123.0.6312.58 allowed a remote attacker to perform UI spoofing via a crafted URL. (Chromium security severity: Medium) |
Affected by 13 other vulnerabilities. |
|
VCID-j28j-46mg-vqhd
Aliases: CVE-2024-6773 |
Inappropriate implementation in V8 in Google Chrome prior to 126.0.6478.182 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. (Chromium security severity: High) |
Affected by 13 other vulnerabilities. |
|
VCID-j3kg-ezap-qfby
Aliases: CVE-2025-3066 |
Use after free in Site Isolation in Google Chrome prior to 135.0.7049.84 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. (Chromium security severity: High) |
Affected by 13 other vulnerabilities. |
|
VCID-j5gm-3tsz-h7fe
Aliases: CVE-2024-8198 |
Heap buffer overflow in Skia in Google Chrome prior to 128.0.6613.113 allowed a remote attacker who had compromised the renderer process to potentially exploit heap corruption via a crafted HTML page. (Chromium security severity: High) |
Affected by 13 other vulnerabilities. |
|
VCID-j6hr-xyn1-nfaf
Aliases: CVE-2024-11117 |
Inappropriate implementation in FileSystem in Google Chrome prior to 131.0.6778.69 allowed a remote attacker to bypass filesystem restrictions via a crafted HTML page. (Chromium security severity: Low) |
Affected by 13 other vulnerabilities. |
|
VCID-j7x4-zeb7-rfgd
Aliases: CVE-2024-6100 |
Type Confusion in V8 in Google Chrome prior to 126.0.6478.114 allowed a remote attacker to execute arbitrary code via a crafted HTML page. (Chromium security severity: High) |
Affected by 13 other vulnerabilities. |
|
VCID-jgte-yaxt-5ucc
Aliases: CVE-2024-7974 |
Insufficient data validation in V8 API in Google Chrome prior to 128.0.6613.84 allowed a remote attacker to potentially exploit heap corruption via a crafted Chrome Extension. (Chromium security severity: Medium) |
Affected by 13 other vulnerabilities. |
|
VCID-jhap-r53a-t3es
Aliases: CVE-2024-2625 |
Object lifecycle issue in V8 in Google Chrome prior to 123.0.6312.58 allowed a remote attacker to potentially exploit object corruption via a crafted HTML page. (Chromium security severity: High) |
Affected by 13 other vulnerabilities. |
|
VCID-jjep-1ckh-nba8
Aliases: CVE-2025-5959 |
Type Confusion in V8 in Google Chrome prior to 137.0.7151.103 allowed a remote attacker to execute arbitrary code inside a sandbox via a crafted HTML page. (Chromium security severity: High) |
Affected by 13 other vulnerabilities. |
|
VCID-jntf-wzkr-vubd
Aliases: CVE-2025-8576 |
Use after free in Extensions in Google Chrome prior to 139.0.7258.66 allowed a remote attacker to potentially exploit heap corruption via a crafted Chrome Extension. (Chromium security severity: Medium) |
Affected by 13 other vulnerabilities. Affected by 0 other vulnerabilities. Affected by 5 other vulnerabilities. |
|
VCID-jzqz-6yj6-d7ak
Aliases: CVE-2024-8909 |
Inappropriate implementation in UI in Google Chrome on iOS prior to 129.0.6668.58 allowed a remote attacker to perform UI spoofing via a crafted HTML page. (Chromium security severity: Low) |
Affected by 13 other vulnerabilities. |
|
VCID-k173-7w1z-sqf2
Aliases: CVE-2024-3843 |
Insufficient data validation in Downloads in Google Chrome prior to 124.0.6367.60 allowed a remote attacker to perform UI spoofing via a crafted HTML page. (Chromium security severity: Medium) |
Affected by 13 other vulnerabilities. |
|
VCID-k1m4-9wpj-yqcg
Aliases: CVE-2024-5846 |
Use after free in PDFium in Google Chrome prior to 126.0.6478.54 allowed a remote attacker to potentially exploit heap corruption via a crafted PDF file. (Chromium security severity: Medium) |
Affected by 13 other vulnerabilities. |
|
VCID-k2uq-b2qy-cfc7
Aliases: CVE-2024-8362 |
Use after free in WebAudio in Google Chrome prior to 128.0.6613.119 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. (Chromium security severity: High) |
Affected by 13 other vulnerabilities. |
|
VCID-kb96-eety-87ba
Aliases: CVE-2024-9961 |
Use after free in ParcelTracking in Google Chrome on iOS prior to 130.0.6723.58 allowed a remote attacker who convinced a user to engage in specific UI gestures to potentially exploit heap corruption via a crafted HTML page. (Chromium security severity: Medium) |
Affected by 13 other vulnerabilities. |
|
VCID-kpaw-gtx4-rkgp
Aliases: CVE-2025-1916 |
Use after free in Profiles in Google Chrome prior to 134.0.6998.35 allowed an attacker who convinced a user to install a malicious extension to potentially exploit heap corruption via a crafted HTML page. (Chromium security severity: Medium) |
Affected by 13 other vulnerabilities. |
|
VCID-kpyb-yxnw-a3fp
Aliases: CVE-2024-8033 |
Inappropriate implementation in WebApp Installs in Google Chrome on Windows prior to 128.0.6613.84 allowed an attacker who convinced a user to install a malicious application to perform UI spoofing via a crafted HTML page. (Chromium security severity: Low) |
Affected by 13 other vulnerabilities. |
|
VCID-kxz6-wx7m-ybh5
Aliases: CVE-2025-3073 |
Inappropriate implementation in Autofill in Google Chrome prior to 135.0.7049.52 allowed a remote attacker who convinced a user to engage in specific UI gestures to perform UI spoofing via a crafted HTML page. (Chromium security severity: Low) |
Affected by 13 other vulnerabilities. |
|
VCID-kzxn-nat1-tkc5
Aliases: CVE-2024-7025 |
Integer overflow in Layout in Google Chrome prior to 129.0.6668.89 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. (Chromium security severity: High) |
Affected by 13 other vulnerabilities. |
|
VCID-m7cb-6zj3-ebev
Aliases: CVE-2024-5160 |
Heap buffer overflow in Dawn in Google Chrome prior to 125.0.6422.76 allowed a remote attacker to perform an out of bounds memory write via a crafted HTML page. (Chromium security severity: High) |
Affected by 13 other vulnerabilities. |
|
VCID-mhuc-6jhj-fufs
Aliases: CVE-2024-2627 |
Use after free in Canvas in Google Chrome prior to 123.0.6312.58 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. (Chromium security severity: Medium) |
Affected by 13 other vulnerabilities. |
|
VCID-ms51-zent-m3az
Aliases: CVE-2024-9859 |
Type confusion in WebAssembly in Google Chrome prior to 126.0.6478.126 allowed a remote attacker to execute arbitrary code via a crafted HTML page. (Chromium security severity: High) |
Affected by 13 other vulnerabilities. |
|
VCID-muwh-9v7h-gbbz
Aliases: CVE-2025-2476 |
Use after free in Lens in Google Chrome prior to 134.0.6998.117 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. (Chromium security severity: Critical) |
Affected by 13 other vulnerabilities. |
|
VCID-n1c7-z48p-wyhy
Aliases: CVE-2024-5497 |
Out of bounds memory access in Browser UI in Google Chrome prior to 125.0.6422.141 allowed a remote attacker who convinced a user to engage in specific UI gestures to potentially exploit heap corruption via a crafted HTML page. (Chromium security severity: High) |
Affected by 13 other vulnerabilities. |
|
VCID-n9pm-d36j-v3e1
Aliases: CVE-2025-1919 |
Out of bounds read in Media in Google Chrome prior to 134.0.6998.35 allowed a remote attacker to potentially perform out of bounds memory access via a crafted HTML page. (Chromium security severity: Medium) |
Affected by 13 other vulnerabilities. |
|
VCID-na32-u979-73ar
Aliases: CVE-2024-11115 |
Insufficient policy enforcement in Navigation in Google Chrome on iOS prior to 131.0.6778.69 allowed a remote attacker to perform privilege escalation via a series of UI gestures. (Chromium security severity: Medium) |
Affected by 13 other vulnerabilities. |
|
VCID-nahe-pqq2-bfhv
Aliases: CVE-2024-7972 |
Inappropriate implementation in V8 in Google Chrome prior to 128.0.6613.84 allowed a remote attacker to potentially perform out of bounds memory access via a crafted HTML page. (Chromium security severity: Medium) |
Affected by 13 other vulnerabilities. |
|
VCID-ncg5-vr6g-p7f6
Aliases: CVE-2024-5500 |
Inappropriate implementation in Sign-In in Google Chrome prior to 1.3.36.351 allowed a remote attacker to bypass navigation restrictions via a crafted HTML page. (Chromium security severity: Medium) |
Affected by 13 other vulnerabilities. |
|
VCID-ndsn-ec4g-t3ep
Aliases: CVE-2024-10488 |
Use after free in WebRTC in Google Chrome prior to 130.0.6723.92 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. (Chromium security severity: High) |
Affected by 13 other vulnerabilities. |
|
VCID-nhrs-vmuq-4yd4
Aliases: CVE-2024-8908 |
Inappropriate implementation in Autofill in Google Chrome prior to 129.0.6668.58 allowed a remote attacker to perform UI spoofing via a crafted HTML page. (Chromium security severity: Low) |
Affected by 13 other vulnerabilities. |
|
VCID-nkka-79d3-4ydy
Aliases: CVE-2024-6990 |
Uninitialized Use in Dawn in Google Chrome on Android prior to 127.0.6533.88 allowed a remote attacker to potentially perform out of bounds memory access via a crafted HTML page. (Chromium security severity: Critical) |
Affected by 13 other vulnerabilities. |
|
VCID-nmgv-61af-z3bg
Aliases: CVE-2024-7968 |
Use after free in Autofill in Google Chrome prior to 128.0.6613.84 allowed a remote attacker who had convinced the user to engage in specific UI interactions to potentially exploit heap corruption via a crafted HTML page. (Chromium security severity: High) |
Affected by 13 other vulnerabilities. |
|
VCID-npmy-uxnm-57g3
Aliases: CVE-2024-7018 |
Heap buffer overflow in PDF in Google Chrome prior to 124.0.6367.78 allowed a remote attacker to potentially exploit heap corruption via a crafted PDF file. (Chromium security severity: Medium) |
Affected by 13 other vulnerabilities. |
|
VCID-ntpx-a37m-mybs
Aliases: CVE-2024-7977 |
Insufficient data validation in Installer in Google Chrome on Windows prior to 128.0.6613.84 allowed a local attacker to perform privilege escalation via a malicious file. (Chromium security severity: Medium) |
Affected by 13 other vulnerabilities. |
|
VCID-nwzv-5yc9-abdr
Aliases: CVE-2025-6558 |
Insufficient validation of untrusted input in ANGLE and GPU in Google Chrome prior to 138.0.7204.157 allowed a remote attacker to potentially perform a sandbox escape via a crafted HTML page. (Chromium security severity: High) |
Affected by 13 other vulnerabilities. |
|
VCID-nz51-3c3h-17ex
Aliases: CVE-2024-5842 |
Use after free in Browser UI in Google Chrome prior to 126.0.6478.54 allowed a remote attacker who convinced a user to engage in specific UI gestures to perform an out of bounds memory read via a crafted HTML page. (Chromium security severity: Medium) |
Affected by 13 other vulnerabilities. |
|
VCID-nzxr-y314-cfc7
Aliases: CVE-2024-3846 |
Inappropriate implementation in Prompts in Google Chrome prior to 124.0.6367.60 allowed a remote attacker who convinced a user to engage in specific UI gestures to perform UI spoofing via a crafted HTML page. (Chromium security severity: Low) |
Affected by 13 other vulnerabilities. |
|
VCID-p186-4ck3-87dm
Aliases: CVE-2025-4609 |
Affected by 13 other vulnerabilities. |
|
|
VCID-p1w4-psvx-97ap
Aliases: CVE-2025-6556 |
Insufficient policy enforcement in Loader in Google Chrome prior to 138.0.7204.49 allowed a remote attacker to bypass content security policy via a crafted HTML page. (Chromium security severity: Low) |
Affected by 13 other vulnerabilities. |
|
VCID-p45k-cbh4-bqhz
Aliases: CVE-2024-7022 |
Uninitialized Use in V8 in Google Chrome prior to 123.0.6312.58 allowed a remote attacker to perform out of bounds memory access via a crafted HTML page. (Chromium security severity: Medium) |
Affected by 13 other vulnerabilities. |
|
VCID-p6jb-te34-1fbn
Aliases: CVE-2024-7967 |
Heap buffer overflow in Fonts in Google Chrome prior to 128.0.6613.84 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. (Chromium security severity: High) |
Affected by 13 other vulnerabilities. |
|
VCID-p8wj-ytx4-13ga
Aliases: CVE-2024-9602 |
Type Confusion in V8 in Google Chrome prior to 129.0.6668.100 allowed a remote attacker to perform an out of bounds memory write via a crafted HTML page. (Chromium security severity: High) |
Affected by 13 other vulnerabilities. |
|
VCID-p97x-pevd-9fep
Aliases: CVE-2025-1923 |
Inappropriate implementation in Permission Prompts in Google Chrome prior to 134.0.6998.35 allowed an attacker who convinced a user to install a malicious extension to perform UI spoofing via a crafted Chrome Extension. (Chromium security severity: Low) |
Affected by 13 other vulnerabilities. |
|
VCID-pam3-68r9-q3gp
Aliases: CVE-2025-0762 |
Use after free in DevTools in Google Chrome prior to 132.0.6834.159 allowed a remote attacker to potentially exploit heap corruption via a crafted Chrome Extension. (Chromium security severity: Medium) |
Affected by 13 other vulnerabilities. |
|
VCID-pbh5-n9a2-7fbf
Aliases: CVE-2024-9370 |
Affected by 13 other vulnerabilities. |
|
|
VCID-pct7-dbb1-pfgy
Aliases: CVE-2024-5494 |
Use after free in Dawn in Google Chrome prior to 125.0.6422.141 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. (Chromium security severity: High) |
Affected by 13 other vulnerabilities. |
|
VCID-pd9y-1hsy-dygz
Aliases: CVE-2024-5496 |
Use after free in Media Session in Google Chrome prior to 125.0.6422.141 allowed a remote attacker to execute arbitrary code inside a sandbox via a crafted HTML page. (Chromium security severity: High) |
Affected by 13 other vulnerabilities. |
|
VCID-pjm5-5fec-3qhm
Aliases: CVE-2024-7000 |
Use after free in CSS in Google Chrome prior to 127.0.6533.72 allowed a remote attacker who convinced a user to engage in specific UI gestures to potentially exploit heap corruption via a crafted HTML page. (Chromium security severity: Medium) |
Affected by 13 other vulnerabilities. |
|
VCID-pjrs-b3v5-5qcp
Aliases: CVE-2024-3839 |
Out of bounds read in Fonts in Google Chrome prior to 124.0.6367.60 allowed a remote attacker to obtain potentially sensitive information from process memory via a crafted HTML page. (Chromium security severity: Medium) |
Affected by 13 other vulnerabilities. |
|
VCID-pk72-jgx4-cke7
Aliases: CVE-2025-1426 |
Heap buffer overflow in GPU in Google Chrome on Android prior to 133.0.6943.126 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. (Chromium security severity: High) |
Affected by 13 other vulnerabilities. |
|
VCID-pn52-eabv-1ues
Aliases: CVE-2025-6191 |
Integer overflow in V8 in Google Chrome prior to 137.0.7151.119 allowed a remote attacker to potentially perform out of bounds memory access via a crafted HTML page. (Chromium security severity: High) |
Affected by 13 other vulnerabilities. |
|
VCID-pwaz-g2v5-dbc8
Aliases: CVE-2024-11112 |
Use after free in Media in Google Chrome on Windows prior to 131.0.6778.69 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. (Chromium security severity: Medium) |
Affected by 13 other vulnerabilities. |
|
VCID-pxzw-sdsp-yfep
Aliases: CVE-2024-3156 |
Inappropriate implementation in V8 in Google Chrome prior to 123.0.6312.105 allowed a remote attacker to potentially perform out of bounds memory access via a crafted HTML page. (Chromium security severity: High) |
Affected by 13 other vulnerabilities. |
|
VCID-pzsg-nha8-hfet
Aliases: CVE-2024-8194 |
Type Confusion in V8 in Google Chrome prior to 128.0.6613.113 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. (Chromium security severity: High) |
Affected by 13 other vulnerabilities. |
|
VCID-q41a-urtt-cfc3
Aliases: CVE-2024-3914 |
Use after free in V8 in Google Chrome prior to 124.0.6367.60 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. (Chromium security severity: High) |
Affected by 13 other vulnerabilities. |
|
VCID-q77q-c43x-x7hn
Aliases: CVE-2024-7970 |
Out of bounds write in V8 in Google Chrome prior to 128.0.6613.119 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. (Chromium security severity: High) |
Affected by 13 other vulnerabilities. |
|
VCID-q7rc-hrs8-qka9
Aliases: CVE-2024-10231 |
Type Confusion in V8 in Google Chrome prior to 130.0.6723.69 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. (Chromium security severity: High) |
Affected by 13 other vulnerabilities. |
|
VCID-qaaw-ws9n-gke4
Aliases: CVE-2025-1922 |
Inappropriate implementation in Selection in Google Chrome on Android prior to 134.0.6998.35 allowed a remote attacker who convinced a user to engage in specific UI gestures to perform UI spoofing via a crafted HTML page. (Chromium security severity: Low) |
Affected by 13 other vulnerabilities. |
|
VCID-qdrt-8q19-vuhz
Aliases: CVE-2024-11113 |
Use after free in Accessibility in Google Chrome prior to 131.0.6778.69 allowed a remote attacker who had compromised the renderer process to potentially exploit heap corruption via a crafted HTML page. (Chromium security severity: Medium) |
Affected by 13 other vulnerabilities. |
|
VCID-qfws-sg4e-pkcq
Aliases: CVE-2024-3840 |
Insufficient policy enforcement in Site Isolation in Google Chrome prior to 124.0.6367.60 allowed a remote attacker to bypass navigation restrictions via a crafted HTML page. (Chromium security severity: Medium) |
Affected by 13 other vulnerabilities. |
|
VCID-qqbp-4y39-2uh6
Aliases: CVE-2024-7533 |
Use after free in Sharing in Google Chrome on iOS prior to 127.0.6533.99 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. (Chromium security severity: High) |
Affected by 13 other vulnerabilities. |
|
VCID-qrh1-z3ap-v3ej
Aliases: CVE-2024-0812 |
Inappropriate implementation in Accessibility in Google Chrome prior to 121.0.6167.85 allowed a remote attacker to potentially exploit object corruption via a crafted HTML page. (Chromium security severity: High) |
Affected by 13 other vulnerabilities. |
|
VCID-qrut-krg8-h3a8
Aliases: CVE-2024-1676 |
Inappropriate implementation in Navigation in Google Chrome prior to 122.0.6261.57 allowed a remote attacker to spoof security UI via a crafted HTML page. (Chromium security severity: Low) |
Affected by 13 other vulnerabilities. |
|
VCID-qrvf-rwrd-2udu
Aliases: CVE-2025-5419 |
Out of bounds read and write in V8 in Google Chrome prior to 137.0.7151.68 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. (Chromium security severity: High) |
Affected by 13 other vulnerabilities. |
|
VCID-qtmk-vf8d-dufz
Aliases: CVE-2024-9956 |
Malicious pages could use Firefox for Android to pass FIDO: links to the OS and trigger the "hybrid" passkey transport. An attacker within Bluetooth range could have used this to trick the user into using their passkey to log the attacker's computer into the target account. |
Affected by 13 other vulnerabilities. |
|
VCID-qttc-jn66-d3f4
Aliases: CVE-2024-12695 |
Out of bounds write in V8 in Google Chrome prior to 131.0.6778.204 allowed a remote attacker to execute arbitrary code inside a sandbox via a crafted HTML page. (Chromium security severity: High) |
Affected by 13 other vulnerabilities. |
|
VCID-qyf4-rwr1-ffd4
Aliases: CVE-2025-3070 |
Insufficient validation of untrusted input in Extensions in Google Chrome prior to 135.0.7049.52 allowed a remote attacker to perform privilege escalation via a crafted HTML page. (Chromium security severity: Medium) |
Affected by 13 other vulnerabilities. |
|
VCID-qzgy-wnnv-gyh1
Aliases: CVE-2024-6999 |
Inappropriate implementation in FedCM in Google Chrome prior to 127.0.6533.72 allowed a remote attacker who convinced a user to engage in specific UI gestures to perform UI spoofing via a crafted HTML page. (Chromium security severity: Medium) |
Affected by 13 other vulnerabilities. |
|
VCID-r2hv-qa9r-rqdy
Aliases: CVE-2024-7004 |
Insufficient validation of untrusted input in Safe Browsing in Google Chrome prior to 127.0.6533.72 allowed a remote attacker who convinced a user to engage in specific UI gestures to bypass discretionary access control via a malicious file. (Chromium security severity: Low) |
Affected by 13 other vulnerabilities. |
|
VCID-r5pr-92eq-nbaw
Aliases: CVE-2025-5067 |
Inappropriate implementation in Tab Strip in Google Chrome prior to 137.0.7151.55 allowed a remote attacker to perform UI spoofing via a crafted HTML page. (Chromium security severity: Low) |
Affected by 13 other vulnerabilities. |
|
VCID-rfm6-uyyq-rudp
Aliases: CVE-2024-0813 |
Use after free in Reading Mode in Google Chrome prior to 121.0.6167.85 allowed an attacker who convinced a user to install a malicious extension to potentially exploit heap corruption via specific UI interaction. (Chromium security severity: Medium) |
Affected by 13 other vulnerabilities. |
|
VCID-rg2a-abyw-8yak
Aliases: CVE-2024-0805 |
Inappropriate implementation in Downloads in Google Chrome prior to 121.0.6167.85 allowed a remote attacker to perform domain spoofing via a crafted domain name. (Chromium security severity: Medium) |
Affected by 13 other vulnerabilities. |
|
VCID-rnzq-4ccf-hbfz
Aliases: CVE-2024-4059 |
Out of bounds read in V8 API in Google Chrome prior to 124.0.6367.78 allowed a remote attacker to leak cross-site data via a crafted HTML page. (Chromium security severity: High) |
Affected by 13 other vulnerabilities. |
|
VCID-rpzu-nzxz-47b5
Aliases: CVE-2024-6291 |
Use after free in Swiftshader in Google Chrome prior to 126.0.6478.126 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. (Chromium security severity: High) |
Affected by 13 other vulnerabilities. |
|
VCID-s3xj-93c5-2fav
Aliases: CVE-2024-9963 |
Insufficient data validation in Downloads in Google Chrome prior to 130.0.6723.58 allowed a remote attacker who convinced a user to engage in specific UI gestures to perform UI spoofing via a crafted HTML page. (Chromium security severity: Medium) |
Affected by 13 other vulnerabilities. |
|
VCID-s4bj-d9cw-r3hg
Aliases: CVE-2024-7005 |
Insufficient validation of untrusted input in Safe Browsing in Google Chrome prior to 127.0.6533.72 allowed a remote attacker who convinced a user to engage in specific UI gestures to bypass discretionary access control via a malicious file. (Chromium security severity: Low) |
Affected by 13 other vulnerabilities. |
|
VCID-s9kc-hevf-wbdz
Aliases: CVE-2024-0806 |
Use after free in Passwords in Google Chrome prior to 121.0.6167.85 allowed a remote attacker to potentially exploit heap corruption via specific UI interaction. (Chromium security severity: Medium) |
Affected by 13 other vulnerabilities. |
|
VCID-sa1f-aqp8-n3fv
Aliases: CVE-2024-7532 |
Out of bounds memory access in ANGLE in Google Chrome prior to 127.0.6533.99 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. (Chromium security severity: Critical) |
Affected by 13 other vulnerabilities. |
|
VCID-sa4u-vqwr-vqcx
Aliases: CVE-2024-6772 |
Inappropriate implementation in V8 in Google Chrome prior to 126.0.6478.182 allowed a remote attacker to perform out of bounds memory access via a crafted HTML page. (Chromium security severity: High) |
Affected by 13 other vulnerabilities. |
|
VCID-seqb-kgfb-zyeg
Aliases: CVE-2025-0435 |
Inappropriate implementation in Navigation in Google Chrome on Android prior to 132.0.6834.83 allowed a remote attacker to perform UI spoofing via a crafted HTML page. (Chromium security severity: High) |
Affected by 13 other vulnerabilities. |
|
VCID-sghr-z7g1-jugg
Aliases: CVE-2025-8577 |
Inappropriate implementation in Picture In Picture in Google Chrome prior to 139.0.7258.66 allowed a remote attacker who convinced a user to engage in specific UI gestures to perform UI spoofing via a crafted HTML page. (Chromium security severity: Medium) |
Affected by 13 other vulnerabilities. Affected by 0 other vulnerabilities. Affected by 5 other vulnerabilities. |
|
VCID-sm2q-xk7f-h7gu
Aliases: CVE-2025-3068 |
Inappropriate implementation in Intents in Google Chrome on Android prior to 135.0.7049.52 allowed a remote attacker to perform privilege escalation via a crafted HTML page. (Chromium security severity: Medium) |
Affected by 13 other vulnerabilities. |
|
VCID-smmh-mds7-z7bv
Aliases: CVE-2025-5064 |
Inappropriate implementation in Background Fetch API in Google Chrome prior to 137.0.7151.55 allowed a remote attacker to leak cross-origin data via a crafted HTML page. (Chromium security severity: Medium) |
Affected by 13 other vulnerabilities. |
|
VCID-sn44-k2mb-myf8
Aliases: CVE-2024-9122 |
Type Confusion in V8 in Google Chrome prior to 129.0.6668.70 allowed a remote attacker to perform out of bounds memory access via a crafted HTML page. (Chromium security severity: High) |
Affected by 13 other vulnerabilities. |
|
VCID-t1ef-qku4-hycz
Aliases: CVE-2024-6989 |
Use after free in Loader in Google Chrome prior to 127.0.6533.72 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. (Chromium security severity: High) |
Affected by 13 other vulnerabilities. |
|
VCID-t7tb-3rq8-8udp
Aliases: CVE-2024-12693 |
Out of bounds memory access in V8 in Google Chrome prior to 131.0.6778.204 allowed a remote attacker to execute arbitrary code inside a sandbox via a crafted HTML page. (Chromium security severity: High) |
Affected by 13 other vulnerabilities. |
|
VCID-tak9-m4j8-wyf2
Aliases: CVE-2025-1920 |
Type Confusion in V8 in Google Chrome prior to 134.0.6998.88 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. (Chromium security severity: High) |
Affected by 13 other vulnerabilities. |
|
VCID-tc55-stdk-t3ay
Aliases: CVE-2024-0811 |
Inappropriate implementation in Extensions API in Google Chrome prior to 121.0.6167.85 allowed an attacker who convinced a user to install a malicious extension to leak cross-origin data via a crafted Chrome Extension. (Chromium security severity: Low) |
Affected by 13 other vulnerabilities. |
|
VCID-tgh6-yp1h-aucp
Aliases: CVE-2025-8578 |
Use after free in Cast in Google Chrome prior to 139.0.7258.66 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. (Chromium security severity: Medium) |
Affected by 13 other vulnerabilities. Affected by 0 other vulnerabilities. Affected by 5 other vulnerabilities. |
|
VCID-tphj-4331-bfgn
Aliases: CVE-2024-9603 |
Type Confusion in V8 in Google Chrome prior to 129.0.6668.100 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. (Chromium security severity: High) |
Affected by 13 other vulnerabilities. |
|
VCID-tryu-2wq3-n7c3
Aliases: CVE-2024-2885 |
Use after free in Dawn in Google Chrome prior to 123.0.6312.86 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. (Chromium security severity: High) |
Affected by 13 other vulnerabilities. |
|
VCID-tsqg-4ejg-e7h1
Aliases: CVE-2025-1006 |
Use after free in Network in Google Chrome prior to 133.0.6943.126 allowed a remote attacker to potentially exploit heap corruption via a crafted web app. (Chromium security severity: Medium) |
Affected by 13 other vulnerabilities. |
|
VCID-tunx-rv8y-quhv
Aliases: CVE-2024-6993 |
Affected by 13 other vulnerabilities. |
|
|
VCID-u4b6-puwb-x7hk
Aliases: CVE-2025-0442 |
Inappropriate implementation in Payments in Google Chrome prior to 132.0.6834.83 allowed a remote attacker who convinced a user to engage in specific UI gestures to perform UI spoofing via a crafted HTML page. (Chromium security severity: Medium) |
Affected by 13 other vulnerabilities. |
|
VCID-u5e3-ea83-rqa8
Aliases: CVE-2024-5157 |
Use after free in Scheduling in Google Chrome prior to 125.0.6422.76 allowed a remote attacker to execute arbitrary code inside a sandbox via a crafted HTML page. (Chromium security severity: High) |
Affected by 13 other vulnerabilities. |
|
VCID-ucuj-63kk-n7cp
Aliases: CVE-2025-8879 |
Heap buffer overflow in libaom in Google Chrome prior to 139.0.7258.127 allowed a remote attacker to potentially exploit heap corruption via a curated set of gestures. (Chromium security severity: High) |
Affected by 13 other vulnerabilities. Affected by 0 other vulnerabilities. Affected by 0 other vulnerabilities. |
|
VCID-uens-sap4-gke9
Aliases: CVE-2024-9369 |
Insufficient data validation in Mojo in Google Chrome prior to 129.0.6668.89 allowed a remote attacker who had compromised the renderer process to perform an out of bounds memory write via a crafted HTML page. (Chromium security severity: High) |
Affected by 13 other vulnerabilities. |
|
VCID-ukav-hjmb-qkdq
Aliases: CVE-2024-6988 |
Use after free in Downloads in Google Chrome on iOS prior to 127.0.6533.72 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. (Chromium security severity: High) |
Affected by 13 other vulnerabilities. |
|
VCID-umhm-wrfe-nfg7
Aliases: CVE-2024-8907 |
Insufficient data validation in Omnibox in Google Chrome on Android prior to 129.0.6668.58 allowed a remote attacker who convinced a user to engage in specific UI gestures to inject arbitrary scripts or HTML (XSS) via a crafted set of UI gestures. (Chromium security severity: Medium) |
Affected by 13 other vulnerabilities. |
|
VCID-usgw-61f3-4qa2
Aliases: CVE-2025-0447 |
Inappropriate implementation in Navigation in Google Chrome prior to 132.0.6834.83 allowed a remote attacker to perform privilege escalation via a crafted HTML page. (Chromium security severity: Low) |
Affected by 13 other vulnerabilities. |
|
VCID-uxpx-bhnj-zygr
Aliases: CVE-2025-0995 |
Use after free in V8 in Google Chrome prior to 133.0.6943.98 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. (Chromium security severity: High) |
Affected by 13 other vulnerabilities. |
|
VCID-v348-jtj5-57b5
Aliases: CVE-2024-3515 |
Use after free in Dawn in Google Chrome prior to 123.0.6312.122 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. (Chromium security severity: High) |
Affected by 13 other vulnerabilities. |
|
VCID-v9gp-nv8j-s3ba
Aliases: CVE-2024-5499 |
Out of bounds write in Streams API in Google Chrome prior to 125.0.6422.141 allowed a remote attacker to execute arbitrary code inside a sandbox via a crafted HTML page. (Chromium security severity: High) |
Affected by 13 other vulnerabilities. |
|
VCID-vfdx-12f2-qyhm
Aliases: CVE-2024-8904 |
Type Confusion in V8 in Google Chrome prior to 129.0.6668.58 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. (Chromium security severity: High) |
Affected by 13 other vulnerabilities. |
|
VCID-vgfz-b2gj-vubm
Aliases: CVE-2024-7978 |
Insufficient policy enforcement in Data Transfer in Google Chrome prior to 128.0.6613.84 allowed a remote attacker who convinced a user to engage in specific UI gestures to leak cross-origin data via a crafted HTML page. (Chromium security severity: Medium) |
Affected by 13 other vulnerabilities. |
|
VCID-vn5u-qk1x-g7aq
Aliases: CVE-2024-9120 |
Use after free in Dawn in Google Chrome on Windows prior to 129.0.6668.70 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. (Chromium security severity: High) |
Affected by 13 other vulnerabilities. |
|
VCID-vqhn-akhv-ybbu
Aliases: CVE-2024-7971 |
Type confusion in V8 in Google Chrome prior to 128.0.6613.84 allowed a remote attacker to exploit heap corruption via a crafted HTML page. (Chromium security severity: High) |
Affected by 13 other vulnerabilities. |
|
VCID-vtm8-q4hu-3ubh
Aliases: CVE-2024-7979 |
Insufficient data validation in Installer in Google Chrome on Windows prior to 128.0.6613.84 allowed a local attacker to perform privilege escalation via a crafted symbolic link. (Chromium security severity: Medium) |
Affected by 13 other vulnerabilities. |
|
VCID-vu5k-qcjm-xyfd
Aliases: CVE-2025-0446 |
Inappropriate implementation in Extensions in Google Chrome prior to 132.0.6834.83 allowed a remote attacker who convinced a user to engage in specific UI gestures to perform UI spoofing via a crafted Chrome Extension. (Chromium security severity: Low) |
Affected by 13 other vulnerabilities. |
|
VCID-vunz-9eft-xugs
Aliases: CVE-2024-5841 |
Use after free in V8 in Google Chrome prior to 126.0.6478.54 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. (Chromium security severity: Medium) |
Affected by 13 other vulnerabilities. |
|
VCID-vus3-ypzg-wugh
Aliases: CVE-2024-4671 |
Use after free in Visuals in Google Chrome prior to 124.0.6367.201 allowed a remote attacker who had compromised the renderer process to potentially perform a sandbox escape via a crafted HTML page. (Chromium security severity: High) |
Affected by 13 other vulnerabilities. |
|
VCID-vuwd-s9qd-zuhh
Aliases: CVE-2025-1914 |
Out of bounds read in V8 in Google Chrome prior to 134.0.6998.35 allowed a remote attacker to perform out of bounds memory access via a crafted HTML page. (Chromium security severity: High) |
Affected by 13 other vulnerabilities. |
|
VCID-vv52-dv8d-nfaz
Aliases: CVE-2024-9955 |
Use after free in WebAuthentication in Google Chrome prior to 130.0.6723.58 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. (Chromium security severity: Medium) |
Affected by 13 other vulnerabilities. |
|
VCID-vybm-2pyr-myda
Aliases: CVE-2025-0291 |
Type Confusion in V8 in Google Chrome prior to 131.0.6778.264 allowed a remote attacker to execute arbitrary code inside a sandbox via a crafted HTML page. (Chromium security severity: High) |
Affected by 13 other vulnerabilities. |
|
VCID-w1cq-sykb-wubt
Aliases: CVE-2025-1915 |
Improper Limitation of a Pathname to a Restricted Directory in DevTools in Google Chrome on Windows prior to 134.0.6998.35 allowed an attacker who convinced a user to install a malicious extension to bypass file access restrictions via a crafted Chrome Extension. (Chromium security severity: Medium) |
Affected by 13 other vulnerabilities. |
|
VCID-w3hq-5t3a-y7hp
Aliases: CVE-2025-6554 |
Type confusion in V8 in Google Chrome prior to 138.0.7204.96 allowed a remote attacker to perform arbitrary read/write via a crafted HTML page. (Chromium security severity: High) |
Affected by 13 other vulnerabilities. |
|
VCID-w89m-f8mc-2ubd
Aliases: CVE-2025-6557 |
Insufficient data validation in DevTools in Google Chrome on Windows prior to 138.0.7204.49 allowed a remote attacker who convinced a user to engage in specific UI gestures to execute arbitrary code via a crafted HTML page. (Chromium security severity: Low) |
Affected by 13 other vulnerabilities. |
|
VCID-wc55-uzw3-uudz
Aliases: CVE-2024-6102 |
Out of bounds memory access in Dawn in Google Chrome prior to 126.0.6478.114 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. (Chromium security severity: High) |
Affected by 13 other vulnerabilities. |
|
VCID-wn35-efw4-k7by
Aliases: CVE-2024-5845 |
Use after free in Audio in Google Chrome prior to 126.0.6478.54 allowed a remote attacker to potentially exploit heap corruption via a crafted PDF file. (Chromium security severity: Medium) |
Affected by 13 other vulnerabilities. |
|
VCID-wr9v-3hch-e3ez
Aliases: CVE-2024-5832 |
Use after free in Dawn in Google Chrome prior to 126.0.6478.54 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. (Chromium security severity: High) |
Affected by 13 other vulnerabilities. |
|
VCID-wuhp-4k29-auhw
Aliases: CVE-2025-4051 |
Insufficient data validation in DevTools in Google Chrome prior to 136.0.7103.59 allowed a remote attacker who convinced a user to engage in specific UI gestures to bypass discretionary access control via a crafted HTML page. (Chromium security severity: Medium) |
Affected by 13 other vulnerabilities. |
|
VCID-wz68-rczb-7yec
Aliases: CVE-2024-3838 |
Inappropriate implementation in Autofill in Google Chrome prior to 124.0.6367.60 allowed an attacker who convinced a user to install a malicious app to perform UI spoofing via a crafted app. (Chromium security severity: Medium) |
Affected by 13 other vulnerabilities. |
|
VCID-x2dt-fche-z7h8
Aliases: CVE-2025-3071 |
Inappropriate implementation in Navigations in Google Chrome prior to 135.0.7049.52 allowed a remote attacker who convinced a user to engage in specific UI gestures to bypass same origin policy via a crafted HTML page. (Chromium security severity: Low) |
Affected by 13 other vulnerabilities. |
|
VCID-x4ww-ehfv-63cq
Aliases: CVE-2024-4558 |
Use after free in ANGLE in Google Chrome prior to 124.0.6367.155 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. (Chromium security severity: High) |
Affected by 13 other vulnerabilities. |
|
VCID-x73h-qwug-p7gr
Aliases: CVE-2024-10487 |
Out of bounds write in Dawn in Google Chrome prior to 130.0.6723.92 allowed a remote attacker to perform out of bounds memory access via a crafted HTML page. (Chromium security severity: Critical) |
Affected by 13 other vulnerabilities. |
|
VCID-x9be-q596-3be8
Aliases: CVE-2024-4949 |
Use after free in V8 in Google Chrome prior to 125.0.6422.60 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. (Chromium security severity: Medium) |
Affected by 13 other vulnerabilities. |
|
VCID-xbgz-h2r3-guh1
Aliases: CVE-2025-0448 |
Inappropriate implementation in Compositing in Google Chrome prior to 132.0.6834.83 allowed a remote attacker to perform UI spoofing via a crafted HTML page. (Chromium security severity: Low) |
Affected by 13 other vulnerabilities. |
|
VCID-xddc-38kx-6qdn
Aliases: CVE-2024-5840 |
Policy bypass in CORS in Google Chrome prior to 126.0.6478.54 allowed a remote attacker to bypass discretionary access control via a crafted HTML page. (Chromium security severity: Medium) |
Affected by 13 other vulnerabilities. |
|
VCID-xnv7-vjr6-9bfb
Aliases: CVE-2024-3168 |
Use after free in DevTools in Google Chrome prior to 122.0.6261.57 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. (Chromium security severity: Medium) |
Affected by 13 other vulnerabilities. |
|
VCID-xqke-wwmn-v3cz
Aliases: CVE-2024-6775 |
Use after free in Media Stream in Google Chrome prior to 126.0.6478.182 allowed a remote attacker who convinced a user to engage in specific UI gestures to potentially exploit heap corruption via a crafted HTML page. (Chromium security severity: High) |
Affected by 13 other vulnerabilities. |
|
VCID-y1me-empd-pubq
Aliases: CVE-2024-1059 |
Use after free in Peer Connection in Google Chrome prior to 121.0.6167.139 allowed a remote attacker to potentially exploit stack corruption via a crafted HTML page. (Chromium security severity: High) |
Affected by 13 other vulnerabilities. |
|
VCID-y55d-19xz-nqgd
Aliases: CVE-2024-7973 |
Heap buffer overflow in PDFium in Google Chrome prior to 128.0.6613.84 allowed a remote attacker to perform an out of bounds memory read via a crafted PDF file. (Chromium security severity: Medium) |
Affected by 13 other vulnerabilities. |
|
VCID-y6rx-h581-9qdy
Aliases: CVE-2024-6777 |
Use after free in Navigation in Google Chrome prior to 126.0.6478.182 allowed an attacker who convinced a user to install a malicious extension to potentially exploit heap corruption via a crafted Chrome Extension. (Chromium security severity: High) |
Affected by 13 other vulnerabilities. |
|
VCID-ysrd-m52t-bbcf
Aliases: CVE-2025-0996 |
Inappropriate implementation in Browser UI in Google Chrome on Android prior to 133.0.6943.98 allowed a remote attacker to spoof the contents of the Omnibox (URL bar) via a crafted HTML page. (Chromium security severity: High) |
Affected by 13 other vulnerabilities. |
|
VCID-yxn6-wmu5-8qe2
Aliases: CVE-2025-5280 |
Out of bounds write in V8 in Google Chrome prior to 137.0.7151.55 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. (Chromium security severity: High) |
Affected by 13 other vulnerabilities. |
|
VCID-yybs-w5rv-53hn
Aliases: CVE-2025-8901 |
Out of bounds write in ANGLE in Google Chrome prior to 139.0.7258.127 allowed a remote attacker to perform out of bounds memory access via a crafted HTML page. (Chromium security severity: High) |
Affected by 13 other vulnerabilities. Affected by 0 other vulnerabilities. Affected by 0 other vulnerabilities. |
|
VCID-z3zd-17x9-zqaj
Aliases: CVE-2024-3841 |
Insufficient data validation in Browser Switcher in Google Chrome prior to 124.0.6367.60 allowed a remote attacker to inject scripts or HTML into a privileged page via a malicious file. (Chromium security severity: Medium) |
Affected by 13 other vulnerabilities. |
|
VCID-z4fu-b9gx-nqcg
Aliases: CVE-2024-2886 |
Use after free in WebCodecs in Google Chrome prior to 123.0.6312.86 allowed a remote attacker to perform arbitrary read/write via a crafted HTML page. (Chromium security severity: High) |
Affected by 13 other vulnerabilities. |
|
VCID-z6sn-szbt-h7h6
Aliases: CVE-2024-9954 |
Use after free in AI in Google Chrome prior to 130.0.6723.58 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. (Chromium security severity: High) |
Affected by 13 other vulnerabilities. |
|
VCID-z9cu-quqx-9yhd
Aliases: CVE-2024-2626 |
Out of bounds read in Swiftshader in Google Chrome prior to 123.0.6312.58 allowed a remote attacker to perform out of bounds memory access via a crafted HTML page. (Chromium security severity: Medium) |
Affected by 13 other vulnerabilities. |
|
VCID-zey3-m86u-muhz
Aliases: CVE-2024-5843 |
Inappropriate implementation in Downloads in Google Chrome prior to 126.0.6478.54 allowed a remote attacker to obfuscate security UI via a malicious file. (Chromium security severity: Medium) |
Affected by 13 other vulnerabilities. |
|
VCID-zj56-rkb8-qfbr
Aliases: CVE-2024-0810 |
Insufficient policy enforcement in DevTools in Google Chrome prior to 121.0.6167.85 allowed an attacker who convinced a user to install a malicious extension to leak cross-origin data via a crafted Chrome Extension. (Chromium security severity: Medium) |
Affected by 13 other vulnerabilities. |
|
VCID-zs1y-mszx-ckcp
Aliases: CVE-2024-6998 |
Use after free in User Education in Google Chrome prior to 127.0.6533.72 allowed a remote attacker who convinced a user to engage in specific UI gestures to potentially exploit heap corruption via a crafted HTML page. (Chromium security severity: Medium) |
Affected by 13 other vulnerabilities. |
|
VCID-zu1c-w9aj-puaw
Aliases: CVE-2024-8906 |
Incorrect security UI in Downloads in Google Chrome prior to 129.0.6668.58 allowed a remote attacker who convinced a user to engage in specific UI gestures to perform UI spoofing via a crafted HTML page. (Chromium security severity: Medium) |
Affected by 13 other vulnerabilities. |
|
VCID-zwpy-eces-pyb8
Aliases: CVE-2024-6991 |
Use after free in Dawn in Google Chrome prior to 127.0.6533.72 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. (Chromium security severity: High) |
Affected by 13 other vulnerabilities. |
|
VCID-zxmk-95qh-4uf4
Aliases: CVE-2024-5498 |
Use after free in Presentation API in Google Chrome prior to 125.0.6422.141 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. (Chromium security severity: High) |
Affected by 13 other vulnerabilities. |
|
VCID-zyfq-jhxk-s3g7
Aliases: CVE-2025-0451 |
Inappropriate implementation in Extensions API in Google Chrome prior to 133.0.6943.53 allowed a remote attacker who convinced a user to engage in specific UI gestures to perform UI spoofing via a crafted Chrome Extension. (Chromium security severity: Medium) |
Affected by 13 other vulnerabilities. |
| Vulnerability | Summary | Aliases |
|---|---|---|
| VCID-11x1-5hyy-13bk | Use after free in V8 in Google Chrome prior to 107.0.5304.106 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. (Chromium security severity: High) |
CVE-2022-3885
|
| VCID-12ve-5kd6-6fby | Heap buffer overflow in WebUI in Google Chrome prior to 100.0.4896.60 allowed a remote attacker who convinced a user to engage in specific user interaction to potentially exploit heap corruption via specific input into DevTools. |
CVE-2022-1142
|
| VCID-139c-hnza-ukeg | Out of bounds write in TabStrip in Google Chrome prior to 91.0.4472.77 allowed an attacker who convinced a user to install a malicious extension to perform an out of bounds memory write via a crafted HTML page. |
CVE-2021-30526
|
| VCID-13q1-4he3-ekdx | Insufficient data validation in Extensions in Google Chrome prior to 115.0.5790.170 allowed an attacker who convinced a user to install a malicious extension to inject scripts or HTML into a privileged page via a crafted Chrome Extension. (Chromium security severity: Medium) |
CVE-2023-4077
|
| VCID-14j6-k78s-5bb8 | Type confusion in V8 in Google Chrome prior to 107.0.5304.106 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. (Chromium security severity: High) |
CVE-2022-3889
|
| VCID-14tz-qqa9-1yej | Inappropriate implementation in in iframe Sandbox in Google Chrome prior to 109.0.5414.74 allowed a remote attacker to bypass file download restrictions via a crafted HTML page. (Chromium security severity: Medium) |
CVE-2023-0131
|
| VCID-157a-6skt-fkgj | multiple issues |
CVE-2021-37995
|
| VCID-16r3-pne5-4fhk | Insufficient validation of untrusted input in Safe Browsing in Google Chrome prior to 106.0.5249.62 allowed a remote attacker to bypass security feature via a crafted HTML page. (Chromium security severity: Low) |
CVE-2022-3316
|
| VCID-17ke-cwy4-q3fr | Use after free in Safe Browsing in Google Chrome prior to 99.0.4844.74 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. |
CVE-2022-0973
|
| VCID-17zq-wcu5-3kdr | Insufficient validation of untrusted input in Internals in Google Chrome prior to 104.0.5112.79 allowed a remote attacker to bypass download restrictions via a malicious file . |
CVE-2022-2618
|
| VCID-1aa5-h3zx-t7gd | Heap buffer overflow in Metrics in Google Chrome prior to 111.0.5563.64 allowed a remote attacker who had compromised the renderer process to potentially exploit heap corruption via a crafted HTML page. (Chromium security severity: High) |
CVE-2023-1219
|
| VCID-1b6v-pnag-rucp | Use after free in Tab Groups in Google Chrome prior to 115.0.5790.98 allowed a remote attacker who convinced a user to engage in specific UI interactions to potentially exploit heap corruption via a crafted HTML page. (Chromium security severity: High) |
CVE-2023-3730
|
| VCID-1bzw-s2m4-v3ee | Use after free in Core in Google Chrome on Lacros prior to 111.0.5563.64 allowed a remote attacker who convinced a user to engage in specific UI interaction to potentially exploit heap corruption via crafted UI interaction. (Chromium security severity: Medium) |
CVE-2023-1227
|
| VCID-1czj-3tfw-ebc7 | Use after free in Animation in Google Chrome prior to 98.0.4758.102 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. |
CVE-2022-0609
GHSA-vv6j-ww6x-54gx GMS-2022-140 GMS-2022-141 GMS-2022-142 GMS-2022-143 GMS-2022-144 GMS-2022-145 GMS-2022-146 GMS-2022-147 GMS-2022-148 |
| VCID-1dh7-ytbz-yuc6 | An out of bounds write in ANGLE could have allowed an attacker to corrupt memory leading to a potentially exploitable crash. |
CVE-2021-30547
|
| VCID-1ezw-4dha-47ch | Insufficient policy enforcement in custom tabs in Google Chrome on Android prior to 106.0.5249.62 allowed an attacker who convinced the user to install an application to bypass same origin policy via a crafted application. (Chromium security severity: Medium) |
CVE-2022-3310
|
| VCID-1gpq-gzz5-mbfs | Heap buffer overflow in Visuals in Google Chrome prior to 112.0.5615.49 allowed a remote attacker who had compromised the renderer process to potentially exploit heap corruption via a crafted HTML page. (Chromium security severity: High) |
CVE-2023-1810
|
| VCID-1h2w-w37g-q7ae | Heap buffer overflow in PDF in Google Chrome prior to 104.0.5112.79 allowed a remote attacker who convinced a user to engage in specific user interactions to potentially exploit heap corruption via a crafted PDF file. |
CVE-2022-2624
|
| VCID-1h5g-cng5-jfb1 | Use after free in Audio in Google Chrome prior to 116.0.5845.96 allowed a remote attacker who has convinced a user to engage in specific UI interaction to potentially exploit heap corruption via a crafted HTML page. (Chromium security severity: Medium) |
CVE-2023-4356
|
| VCID-1j4b-prth-cycq | Use after free in Screen Capture in Google Chrome prior to 98.0.4758.80 allowed a remote attacker who had compromised the renderer process and convinced a user to engage in specific user interaction to potentially exploit heap corruption via a crafted HTML page. |
CVE-2022-0459
|
| VCID-1jvz-3kb8-g3b7 | Out of bounds memory access in UI Shelf in Google Chrome on Chrome OS, Lacros prior to 101.0.4951.41 allowed a remote attacker to potentially exploit heap corruption via specific user interactions. |
CVE-2022-1489
|
| VCID-1kk6-ttzg-e3am | multiple issues |
CVE-2021-37961
|
| VCID-1q6b-99nj-9fhf | Insufficient validation of untrusted input in Data Transfer in Google Chrome prior to 102.0.5005.61 allowed a remote attacker to bypass same origin policy via a crafted clipboard content. |
CVE-2022-1867
|
| VCID-1q7h-k749-zybh | Type confusion in V8 in Google Chrome prior to 113.0.5672.126 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. (Chromium security severity: High) |
CVE-2023-2724
|
| VCID-1qk3-v137-rbce | Inappropriate implementation in Intents in Google Chrome on Android prior to 117.0.5938.62 allowed a remote attacker to obfuscate security UI via a crafted HTML page. (Chromium security severity: Low) |
CVE-2023-4907
|
| VCID-1qtu-3xun-bfdc | multiple issues |
CVE-2021-37991
|
| VCID-1sa9-j3y7-tkat | Inappropriate implementation in Skia in Google Chrome prior to 115.0.5790.98 allowed a remote attacker who had compromised the renderer process to potentially perform a sandbox escape via a crafted HTML page. (Chromium security severity: High) |
CVE-2023-4860
|
| VCID-1suq-4nv1-z3fd | Heap buffer overflow in Task Manager in Google Chrome prior to 97.0.4692.99 allowed a remote attacker to potentially exploit heap corruption via specific user interactions. |
CVE-2022-0310
|
| VCID-1tbw-qr73-hqet | Inappropriate implementation in Custom Tabs in Google Chrome on Android prior to 115.0.5790.98 allowed a remote attacker to leak cross-origin data via a crafted HTML page. (Chromium security severity: Medium) |
CVE-2023-3736
|
| VCID-1u2c-j46y-b7bq | Use after free in Sharesheet in Google Chrome on Chrome OS prior to 101.0.4951.64 allowed a remote attacker who convinced a user to engage in specific UI interactions to potentially exploit heap corruption via specific user interactions. |
CVE-2022-1633
|
| VCID-1u5a-ptb3-a7b9 | Use after free in MediaStream in Google Chrome prior to 99.0.4844.51 allowed an attacker who convinced a user to install a malicious extension to potentially exploit heap corruption via a crafted Chrome Extension. |
CVE-2022-0798
|
| VCID-1wa2-nbhk-yyhj | Use after free in Cast in Google Chrome prior to 98.0.4758.80 allowed a remote attacker who convinced a user to engage in specific interactions to potentially exploit heap corruption via a crafted HTML page. |
CVE-2022-0469
|
| VCID-1wnt-73yp-5bcf | Incorrect security UI in BFCache in Google Chrome prior to 116.0.5845.179 allowed a remote attacker to spoof the contents of the Omnibox (URL bar) via a crafted HTML page. (Chromium security severity: High) |
CVE-2023-4764
|
| VCID-1xab-5sek-r3gd | Use after free in Blink Layout in Google Chrome on Android prior to 99.0.4844.74 allowed a remote attacker who had compromised the renderer process to potentially exploit heap corruption via a crafted HTML page. |
CVE-2022-0971
|
| VCID-22kq-hntq-4yb6 | Insufficient data validation in loader in Google Chrome prior to 96.0.4664.93 allowed a remote attacker to leak cross-origin data via a crafted HTML page. |
CVE-2021-4059
|
| VCID-234r-dvur-tfd4 | Use after free in Mojo in Google Chrome prior to 119.0.6045.199 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. (Chromium security severity: High) |
CVE-2023-6347
|
| VCID-237u-1mbm-ffek | Out of bounds write in V8 in Google Chrome prior to 120.0.6099.224 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. (Chromium security severity: High) |
CVE-2024-0517
|
| VCID-24az-ybtw-7ker | Use after free in Cast UI in Google Chrome prior to 100.0.4896.60 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. |
CVE-2022-1131
|
| VCID-24f8-yudp-cucp | Out of bounds write in Swiftshader in Google Chrome prior to 114.0.5735.90 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. (Chromium security severity: High) |
CVE-2023-2929
|
| VCID-24j7-vb4m-9qh7 | Use after free in Browser UI in Google Chrome on Chrome OS prior to 99.0.4844.74 allowed a remote attacker who convinced a user to engage in specific user interaction to potentially exploit heap corruption via a crafted HTML page. |
CVE-2022-0977
|
| VCID-266c-jcnc-mye4 | Chromium: CVE-2021-30624 Use after free in Autofill |
CVE-2021-30624
|
| VCID-27p6-tk7b-kfc3 | multiple issues |
CVE-2021-37962
|
| VCID-28xk-a83r-nka6 | Use after free in DevTools in Google Chrome prior to 92.0.4515.107 allowed an attacker who convinced a user to open DevTools to potentially exploit heap corruption via specific user gesture. |
CVE-2021-30567
|
| VCID-2967-8d1f-57aq | Heap buffer overflow in ANGLE in Google Chrome prior to 99.0.4844.51 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. |
CVE-2022-0789
|
| VCID-29hg-zjwk-z7a7 | multiple issues |
CVE-2021-37965
|
| VCID-29sv-99hj-jkb8 | Inappropriate implementation in Sandbox in Google Chrome on Windows prior to 112.0.5615.49 allowed a remote attacker who had compromised the renderer process to perform arbitrary read/write via a malicious file. (Chromium security severity: High) |
CVE-2023-2313
|
| VCID-2aqb-q8pj-83h3 | Type Confusion in ServiceWorker API in Google Chrome prior to 109.0.5414.119 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. (Chromium security severity: Medium) |
CVE-2023-0473
|
| VCID-2c1u-pvet-aka2 | Use after free in Media in Google Chrome prior to 103.0.5060.53 allowed a remote attacker to perform arbitrary read/write via a crafted HTML page. (Chromium security severity: High) |
CVE-2022-4916
|
| VCID-2cr3-dpjt-vqdf | Use after free in Extensions in Google Chrome prior to 108.0.5359.71 allowed an attacker who convinced a user to install an extension to potentially exploit heap corruption via a crafted Chrome Extension and UI interaction. (Chromium security severity: High) |
CVE-2022-4177
|
| VCID-2dax-k887-3ba6 | Heap buffer overflow in PrintPreview in Google Chrome prior to 104.0.5112.79 allowed an attacker who convinced a user to install a malicious extension to potentially exploit heap corruption via a crafted HTML page. (Chromium security severity: Medium) |
CVE-2022-4914
|
| VCID-2ebb-sse4-fug8 | Use after free in FedCM in Google Chrome prior to 120.0.6099.109 allowed a remote attacker who convinced a user to engage in specific UI interaction to potentially exploit heap corruption via a crafted HTML page. (Chromium security severity: High) |
CVE-2023-6706
|
| VCID-2etq-5wnw-zyhn | Insufficient policy enforcement in DevTools in Google Chrome on Windows prior to 108.0.5359.71 allowed a remote attacker to bypass filesystem restrictions via a crafted HTML page. (Chromium security severity: Medium) |
CVE-2022-4187
|
| VCID-2hn7-k8yh-v7c4 | Insufficient policy enforcement in Navigation in Google Chrome on iOS prior to 111.0.5563.64 allowed a remote attacker to bypass same origin policy via a crafted HTML page. (Chromium security severity: Medium) |
CVE-2023-1225
|
| VCID-2hwh-z8aq-3kg6 | Use after free in Speech Recognition in Google Chrome prior to 107.0.5304.106 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. (Chromium security severity: High) |
CVE-2022-3886
|
| VCID-2kbt-7pd5-byd9 | Use after free in Blink History in Google Chrome prior to 118.0.5993.70 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. (Chromium security severity: Medium) |
CVE-2023-5476
|
| VCID-2kw7-aqeg-eqha | Use after free in Autofill in Google Chrome prior to 97.0.4692.71 allowed a remote attacker who convinced a user to perform specific user gesture to potentially exploit heap corruption via a crafted HTML page. |
CVE-2022-0106
|
| VCID-2nhy-qjzm-hyd6 | Use after free in WebAudio in Google Chrome prior to 119.0.6045.199 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. (Chromium security severity: High) |
CVE-2023-6346
|
| VCID-2qg3-2pc8-jbeq | Out of bounds write in Lacros Graphics in Google Chrome on Chrome OS and Lacros prior to 108.0.5359.71 allowed a remote attacker who convinced a user to engage in specific UI interactions to potentially exploit heap corruption via UI interactions. (Chromium security severity: High) |
CVE-2022-4176
|
| VCID-2qkh-184p-aqfj | Inappropriate implementation in Autofill in Google Chrome prior to 120.0.6099.62 allowed a remote attacker to bypass Autofill restrictions via a crafted HTML page. (Chromium security severity: Low) |
CVE-2023-6511
|
| VCID-2rzq-2mba-nufx | Use after free in Profiles in Google Chrome prior to 118.0.5993.117 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. (Chromium security severity: High) |
CVE-2023-5472
|
| VCID-2tre-9g6v-5fd1 | Use after free in WebRTC in Google Chrome prior to 111.0.5563.64 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. (Chromium security severity: High) |
CVE-2023-1218
|
| VCID-2ueh-vbzc-r3fq | Out of bounds read and write in ANGLE in Google Chrome prior to 114.0.5735.90 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. (Chromium security severity: High) |
CVE-2023-3598
|
| VCID-2vvj-1dxm-ekc8 | Use after free in Screen Capture in Google Chrome on Chrome OS prior to 97.0.4692.71 allowed an attacker who convinced a user to perform specific user gestures to potentially exploit heap corruption via specific user gestures. |
CVE-2022-0098
|
| VCID-2vyw-cwwd-mfdv | Use after free in Shopping Cart in Google Chrome prior to 100.0.4896.60 allowed a remote attacker to potentially exploit heap corruption via standard feature user interaction. |
CVE-2022-1135
|
| VCID-2w9n-rt45-h3bn | Heap buffer overflow in WebRTC in Google Chrome prior to 103.0.5060.114 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. |
CVE-2022-2294
|
| VCID-2xcs-9zvn-qker | Use after free in Live Caption in Google Chrome prior to 108.0.5359.71 allowed a remote attacker who convinced a user to engage in specific UI interaction to potentially exploit heap corruption via UI interaction. (Chromium security severity: Medium) |
CVE-2022-4192
|
| VCID-2yuj-4hks-buhv | Heap buffer overflow in Task Manager in Google Chrome prior to 97.0.4692.99 allowed a remote attacker who convinced a user to engage in specific user interaction to potentially exploit heap corruption via a crafted HTML page. |
CVE-2022-0311
|
| VCID-2zxf-28ww-yfdz | Use after free in WebUI in Google Chrome prior to 91.0.4472.77 allowed an attacker who convinced a user to install a malicious extension to potentially exploit heap corruption via a crafted HTML page. |
CVE-2021-30527
|
| VCID-312w-h34f-23hs | Insufficient policy enforcement in content security policy in Google Chrome prior to 91.0.4472.77 allowed a remote attacker to bypass content security policy via a crafted HTML page. |
CVE-2021-30539
|
| VCID-33zq-6bce-d7e9 | Inappropriate implementation in Extensions API in Google Chrome prior to 102.0.5005.61 allowed an attacker who convinced a user to install a malicious extension to bypass navigation restrictions via a crafted HTML page. |
CVE-2022-1868
|
| VCID-34x5-6tax-sbdq | Inappropriate implementation in Resource Timing in Google Chrome prior to 100.0.4896.60 allowed a remote attacker to leak cross-origin data via a crafted HTML page. |
CVE-2022-1146
|
| VCID-354x-vwsh-uqgc | Incorrect security UI in Downloads in Google Chrome on Android prior to 92.0.4515.107 allowed a remote attacker to perform domain spoofing via a crafted HTML page. |
CVE-2021-30584
|
| VCID-372d-792n-xbaj | Use after free in UI in Google Chrome on Linux prior to 96.0.4664.93 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. |
CVE-2021-4053
|
| VCID-37t6-rmvs-tkc3 | Heap buffer overflow in Tab Groups in Google Chrome prior to 98.0.4758.102 allowed an attacker who convinced a user to install a malicious extension and engage in specific user interaction to potentially exploit heap corruption via a crafted HTML page. |
CVE-2022-0604
|
| VCID-3864-hq9q-33ak | Use after free in File Manager in Google Chrome prior to 101.0.4951.41 allowed a remote attacker to potentially exploit heap corruption via specific and direct user interaction. |
CVE-2022-1496
|
| VCID-3amg-ebcb-3yfq | Use after free in Side Panel in Google Chrome prior to 119.0.6045.105 allowed a remote attacker who convinced a user to engage in specific UI gestures to potentially exploit heap corruption via a crafted HTML page. (Chromium security severity: Medium) |
CVE-2023-5856
|
| VCID-3csf-8m5y-zkfp | Use after free in DevTools in Google Chrome prior to 92.0.4515.107 allowed an attacker who convinced a user to install a malicious extension to potentially exploit heap corruption via a crafted HTML page. |
CVE-2021-30581
|
| VCID-3fed-jgwq-9kdz | multiple issues |
CVE-2021-37986
|
| VCID-3fz3-nu4a-aqc7 | Insufficient data validation in Updater in Google Chrome prior to 120.0.6099.62 allowed a remote attacker to perform OS-level privilege escalation via a malicious file. (Chromium security severity: High) |
CVE-2024-3173
|
| VCID-3gcv-dpuy-eqf4 | Heap buffer overflow in Window Manager in Google Chrome on Chrome OS, Lacros prior to 105.0.5195.52 allowed a remote attacker who convinced a user to engage in specific UI interactions to potentially exploit heap corruption via crafted UI interactions. |
CVE-2022-3052
|
| VCID-3guj-7v74-hufr | Heap buffer overflow in V8 Internationalization in Google Chrome prior to 101.0.4951.64 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. |
CVE-2022-1638
|
| VCID-3kee-6vdk-7kck | Out of bounds read in ANGLE in Google Chrome prior to 111.0.5563.110 allowed a remote attacker who had compromised the renderer process to potentially exploit heap corruption via a crafted HTML page. (Chromium security severity: High) |
CVE-2023-1534
|
| VCID-3kua-n99z-8ydy | Use after free in GPU in Google Chrome prior to 98.0.4758.102 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. |
CVE-2022-0607
|
| VCID-3m3n-9xzn-bqgr | Use after free in Sharing in Google Chrome prior to 91.0.4472.114 allowed an attacker who convinced a user to install a malicious extension to potentially exploit heap corruption via a crafted HTML page and user gesture. |
CVE-2021-30555
|
| VCID-3mqv-735z-7qch | Use after free in WebRTC in Google Chrome prior to 115.0.5790.170 allowed a remote attacker to potentially exploit heap corruption via a crafted WebRTC session. (Chromium security severity: High) |
CVE-2023-4076
|
| VCID-3nhj-wweg-cfes | Insufficient policy enforcement in developer tools in Google Chrome prior to 100.0.4896.88 allowed a remote attacker to potentially perform a sandbox escape via a crafted HTML page. |
CVE-2022-1309
|
| VCID-3pda-q4un-jyhz | multiple issues |
CVE-2021-30542
|
| VCID-3q8b-417w-tkgh | Use after free in Feedback service on Chrome OS in Google Chrome on Chrome OS prior to 107.0.5304.62 allowed an attacker who convinced a user to install a malicious extension to potentially exploit heap corruption via specific UI interaction. (Chromium security severity: Medium) |
CVE-2022-3658
|
| VCID-3r1b-x8cf-kygg | Inappropriate implementation in Installer in Google Chrome prior to 118.0.5993.70 allowed a local attacker to bypass discretionary access control via a crafted command. (Chromium security severity: Low) |
CVE-2023-5477
|
| VCID-3r2s-cfp8-sqbs | Out of bounds memory access in Service Worker API in Google Chrome prior to 112.0.5615.137 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. (Chromium security severity: High) |
CVE-2023-2133
|
| VCID-3tqs-4mf2-nub4 | Heap buffer overflow in sqlite in Google Chrome prior to 112.0.5615.137 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. (Chromium security severity: Medium) |
CVE-2023-2137
|
| VCID-3v13-8vq7-y3by | Use after free in PhoneHub in Google Chrome on Chrome OS prior to 105.0.5195.52 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. |
CVE-2022-3042
|
| VCID-3wr3-q97d-pbb1 | Heap buffer overflow in Vulkan in Google Chrome prior to 107.0.5304.62 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. (Chromium security severity: High) |
CVE-2022-3653
|
| VCID-3xbp-sef1-d7gj | Inappropriate implementation in in File System API in Google Chrome on Windows prior to 109.0.5414.74 allowed a remote attacker to bypass file system restrictions via a crafted HTML page. (Chromium security severity: Low) |
CVE-2023-0140
|
| VCID-3ywp-3hax-uuht | Insufficient policy enforcement in Cookies in Google Chrome prior to 104.0.5112.79 allowed a remote attacker to leak cross-origin data via a crafted HTML page. |
CVE-2022-2615
|
| VCID-3z6x-ce7a-3bhu | Use after free in Media Capture in Google Chrome prior to 120.0.6099.62 allowed a remote attacker who convinced a user to engage in specific UI interaction to potentially exploit heap corruption via specific UI interaction. (Chromium security severity: Medium) |
CVE-2023-6510
|
| VCID-3ze6-bu2j-e7gg | Heap buffer overflow in extensions in Google Chrome prior to 96.0.4664.93 allowed an attacker who convinced a user to install a malicious extension to potentially exploit heap corruption via a crafted Chrome Extension. |
CVE-2021-4055
|
| VCID-3zmr-ncke-t3dy | multiple issues |
CVE-2021-37999
|
| VCID-3znf-5nrw-dqh4 | Use after free in Layout in Google Chrome prior to 107.0.5304.62 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. (Chromium security severity: High) |
CVE-2022-3654
|
| VCID-419t-qjrh-17c2 | Uninitialized Use in FFmpeg in Google Chrome prior to 108.0.5359.71 allowed a remote attacker to execute arbitrary code inside a sandbox via a crafted HTML page. (Chromium security severity: Medium) |
CVE-2022-4907
|
| VCID-41c6-fu8s-zufk | Inappropriate implementation in Navigation in Google Chrome on iOS prior to 108.0.5359.71 allowed a remote attacker to spoof the contents of the modal dialogue via a crafted HTML page. (Chromium security severity: Medium) |
CVE-2022-4185
|
| VCID-45k5-p3qq-x3h3 | Data race in WebAudio in Google Chrome prior to 92.0.4515.159 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. |
CVE-2021-30603
|
| VCID-45wp-du2g-jyfz | Inappropriate implementation in Push messaging in Google Chrome prior to 97.0.4692.99 allowed a remote attacker who had compromised the renderer process to bypass site isolation via a crafted HTML page. |
CVE-2022-0294
|
| VCID-46we-y7n3-vfdz | Type Confusion in MathML in Google Chrome prior to 105.0.5195.52 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. (Chromium security severity: High) |
CVE-2022-4912
|
| VCID-47gy-qkc1-rye8 | Use after free in Reader Mode in Google Chrome prior to 98.0.4758.80 allowed a remote attacker who had compromised the renderer process to potentially exploit heap corruption via a crafted HTML page. |
CVE-2022-0453
|
| VCID-499j-ezzu-cuhc | Inappropriate implementation in DevTools in Google Chrome prior to 118.0.5993.70 allowed an attacker who convinced a user to install a malicious extension to bypass discretionary access control via a crafted Chrome Extension. (Chromium security severity: Medium) |
CVE-2023-5475
|
| VCID-4b5c-vjeh-ducw | Out of bounds memory access in ANGLE in Google Chrome prior to 93.0.4577.82 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. |
CVE-2021-30626
|
| VCID-4bj6-5zzc-hkdv | multiple issues |
CVE-2021-30515
|
| VCID-4dqw-3tgr-ybg7 | Insufficient validation of untrusted input in Themes in Google Chrome prior to 115.0.5790.98 allowed a remote attacker to potentially serve malicious content to a user via a crafted background URL. (Chromium security severity: Low) |
CVE-2023-3740
|
| VCID-4dvf-b1jq-1bf7 | Use after free in Chrome OS Shell in Google Chrome prior to 104.0.5112.101 allowed a remote attacker who convinced a user to engage in specific UI interactions to potentially exploit heap corruption via specific UI interactions. |
CVE-2022-2859
|
| VCID-4etf-t1qt-9ka8 | Type confusion in V8 in Google Chrome prior to 112.0.5615.121 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. (Chromium security severity: High) |
CVE-2023-2033
|
| VCID-4j69-ejxs-auej | Heap buffer overflow in ANGLE in Google Chrome prior to 116.0.5845.96 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. (Chromium security severity: High) |
CVE-2023-4353
|
| VCID-4j7y-xsu2-8bcu | Use after free in WebCodecs in Google Chrome prior to 107.0.5304.106 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. (Chromium security severity: High) |
CVE-2022-3888
|
| VCID-4jgw-gs57-4qe4 | Use after free in PDF in Google Chrome prior to 105.0.5195.125 allowed a remote attacker to potentially exploit heap corruption via a crafted PDF file. (Chromium security severity: High) |
CVE-2022-3196
|
| VCID-4m4x-xcvx-4qgu | Use after free in Mojo IPC in Google Chrome prior to 108.0.5359.124 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. (Chromium security severity: High) |
CVE-2022-4437
|
| VCID-4pm2-g2qa-y3dr | Type Confusion in V8 in Google Chrome prior to 114.0.5735.90 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. (Chromium security severity: High) |
CVE-2023-2936
|
| VCID-4pps-pfkj-tfeb | Inappropriate implementation in Picture in Picture in Google Chrome prior to 117.0.5938.62 allowed a remote attacker to spoof security UI via a crafted HTML page. (Chromium security severity: Low) |
CVE-2023-4908
|
| VCID-4sry-byam-7kau | Inappropriate implementation in WebApp Provider in Google Chrome prior to 119.0.6045.105 allowed a remote attacker to obfuscate security UI via a crafted HTML page. (Chromium security severity: Low) |
CVE-2023-5858
|
| VCID-4u5a-mbcd-sqbk | Use after free in Base Internals in Google Chrome prior to 101.0.4951.41 allowed a remote attacker to perform arbitrary read/write via a crafted HTML page. (Chromium security severity: High) |
CVE-2022-4919
|
| VCID-4w2c-t6ge-s7cw | Inappropriate implementation in Prompts in Google Chrome prior to 113.0.5672.63 allowed a remote attacker to obfuscate main origin data via a crafted HTML page. (Chromium security severity: Medium) |
CVE-2023-2462
|
| VCID-4wvp-w46m-43b5 | Use after free in Extensions in Google Chrome prior to 117.0.5938.132 allowed an attacker who convinced a user to install a malicious extension to potentially exploit heap corruption via a crafted HTML page. (Chromium security severity: High) |
CVE-2023-5187
|
| VCID-4xnr-6cwy-dfdd | Use after free in Safe Browsing in Google Chrome prior to 106.0.5249.119 allowed an attacker who convinced a user to install a malicious extension to potentially exploit heap corruption via a crafted Chrome Extension. (Chromium security severity: High) |
CVE-2022-3449
|
| VCID-4ybt-42sj-jbbt | Use after free in Blink in Google Chrome prior to 104.0.5112.101 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. |
CVE-2022-2857
|
| VCID-4z7a-upna-s3es | Inappropriate implementation in Payments in Google Chrome prior to 119.0.6045.105 allowed a remote attacker to bypass XSS preventions via a malicious file. (Chromium security severity: High) |
CVE-2023-5480
|
| VCID-51nn-yqpw-93ea | Insufficient validation of untrusted input in Chromad in Google Chrome on ChromeOS prior to 115.0.5790.131 allowed a remote attacker to execute arbitrary code via a crafted shell script. (Chromium security severity: Low) |
CVE-2023-3739
|
| VCID-52cw-ykpn-pfd1 | Insufficient policy enforcement in Background Fetch in Google Chrome prior to 104.0.5112.79 allowed a remote attacker to leak cross-origin data via a crafted HTML page. |
CVE-2022-2610
|
| VCID-532k-8wqx-tucj | Use after free in Scheduling in Google Chrome prior to 97.0.4692.99 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. |
CVE-2022-0298
|
| VCID-5543-485v-nfbk | Use after free in Loader in Google Chrome prior to 91.0.4472.101 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. |
CVE-2021-30548
|
| VCID-56s1-c68s-qfg2 | Type confusion in Data Transfer in Google Chrome prior to 110.0.5481.77 allowed a remote attacker who convinced a user to engage in specific UI interactions to potentially exploit heap corruption via a crafted HTML page. (Chromium security severity: Medium) |
CVE-2023-0702
|
| VCID-5a1a-c9zh-1kbp | Insufficient data validation in DevTools in Google Chrome prior to 106.0.5249.62 allowed a remote attacker to bypass content security policy via a crafted HTML page. (Chromium security severity: Low) |
CVE-2022-4911
|
| VCID-5afq-ymqa-4bhe | Integer overflow in USB in Google Chrome prior to 119.0.6045.105 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. (Chromium security severity: High) |
CVE-2023-5849
|
| VCID-5bdm-fups-skba | Use after free in Forms in Google Chrome prior to 108.0.5359.71 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. (Chromium security severity: High) |
CVE-2022-4181
|
| VCID-5eum-qkxj-sqg2 | Inappropriate implementation in Fullscreen in Google Chrome prior to 118.0.5993.70 allowed an attacker who convinced a user to install a malicious extension to bypass navigation restrictions via a crafted Chrome Extension. (Chromium security severity: Medium) |
CVE-2023-5487
|
| VCID-5rzs-8myb-qbgn | Use after free in Extensions in Google Chrome prior to 91.0.4472.101 allowed an attacker who convinced a user to install a malicious extension to potentially exploit heap corruption via a crafted HTML page. |
CVE-2021-30552
|
| VCID-5u38-ugsf-yyd7 | Out of bounds read in Accessibility in Google Chrome prior to 112.0.5615.49 allowed a remote attacker to perform an out of bounds memory read via a crafted HTML page. (Chromium security severity: Medium) |
CVE-2023-1819
|
| VCID-5u3w-9t6w-17d6 | Use after free in WebRTC in Google Chrome prior to 92.0.4515.159 allowed an attacker who convinced a user to visit a malicious website to potentially exploit heap corruption via a crafted HTML page. |
CVE-2021-30602
|
| VCID-5u5u-he97-yka5 | Use after free in Safe browsing in Google Chrome prior to 97.0.4692.99 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. |
CVE-2022-0289
|
| VCID-5wk7-bqws-4baj | Type Confusion in V8 in Google Chrome prior to 114.0.5735.90 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. (Chromium security severity: High) |
CVE-2023-2935
|
| VCID-5wq1-rxhp-tucr | Inappropriate implementation in Custom Tabs in Google Chrome on Android prior to 106.0.5249.119 allowed a remote attacker to spoof the contents of the Omnibox (URL bar) via a crafted HTML page. (Chromium security severity: High) |
CVE-2022-3447
|
| VCID-5xk4-g7uw-huge | Inappropriate implementation in input in Google Chrome prior to 96.0.4664.45 allowed an attacker who convinced a user to install a malicious extension to bypass navigation restrictions via a crafted Chrome Extension. |
CVE-2021-38015
|
| VCID-5yy4-z5ug-kffz | Incorrect security UI in Downloads in Google Chrome prior to 119.0.6045.105 allowed a remote attacker to obfuscate security UI via a crafted HTML page. (Chromium security severity: Medium) |
CVE-2023-5853
|
| VCID-613m-penq-abeg | Use after free in WebAudio in Google Chrome prior to 91.0.4472.77 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. |
CVE-2021-30522
|
| VCID-615a-wc36-wqeb | Inappropriate implementation in Prompts in Google Chrome on Android prior to 113.0.5672.63 allowed a remote attacker to bypass permissions restrictions via a crafted HTML page. (Chromium security severity: Low) |
CVE-2023-2467
|
| VCID-626g-kd15-ayh2 | multiple issues |
CVE-2021-30517
|
| VCID-63j3-szgj-p3hn | Heap buffer overflow in Blink in Google Chrome prior to 101.0.4951.41 allowed a remote attacker who convinced a user to engage in specific UI gestures to potentially perform a sandbox escape via a crafted HTML page. (Chromium security severity: High) |
CVE-2022-4920
|
| VCID-653f-npd3-8qft | Insufficient policy enforcement in CORS in Google Chrome prior to 96.0.4664.45 allowed a remote attacker to leak cross-origin data via a crafted HTML page. |
CVE-2021-38019
|
| VCID-66jk-jnmj-k7fz | Use after free in Performance Manager in Google Chrome prior to 102.0.5005.61 allowed a remote attacker who convinced a user to engage in specific user interaction to potentially exploit heap corruption via a crafted HTML page. |
CVE-2022-1859
|
| VCID-66u3-kewq-fqgc | Insufficient policy enforcement in Autofill in Google Chrome prior to 108.0.5359.71 allowed a remote attacker to bypass autofill restrictions via a crafted HTML page. (Chromium security severity: Medium) |
CVE-2022-4184
|
| VCID-66vx-w7dr-syar | Insufficient validation of untrusted input in DevTools in Google Chrome on Chrome OS prior to 105.0.5195.125 allowed an attacker who convinced a user to install a malicious extension to bypass navigation restrictions via a crafted HTML page. (Chromium security severity: High) |
CVE-2022-3201
|
| VCID-67n3-ba5m-63a1 | Type confusion in V8 in Google Chrome prior to 96.0.4664.93 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. |
CVE-2021-4078
|
| VCID-67qf-12wk-6kg8 | Inappropriate implementation in Web Share API in Google Chrome on Windows prior to 100.0.4896.60 allowed an attacker on the local network segment to leak cross-origin data via a crafted HTML page. |
CVE-2022-1128
|
| VCID-6b6e-jt1v-8uh9 | Type confusion in DevTools in Google Chrome prior to 110.0.5481.77 allowed a remote attacker who convinced a user to engage in specific UI interactions to potentially exploit heap corruption via UI interactions. (Chromium security severity: Medium) |
CVE-2023-0703
|
| VCID-6bj2-7vhs-2ucn | Insufficient policy enforcement in Resource Timing in Google Chrome prior to 111.0.5563.64 allowed a remote attacker to obtain potentially sensitive information from API via a crafted HTML page. (Chromium security severity: Low) |
CVE-2023-1232
|
| VCID-6ejr-ptnf-e3ds | Use after free in Cast in Google Chrome prior to 118.0.5993.70 allowed a remote attacker who had compromised the renderer process to potentially exploit heap corruption via a crafted HTML page. (Chromium security severity: Low) |
CVE-2023-5473
|
| VCID-6en5-3y46-nbgh | Chromium: CVE-2021-30620 Insufficient policy enforcement in Blink |
CVE-2021-30620
|
| VCID-6gwc-uhhh-7qcz | Insufficient data validation in Trusted Types in Google Chrome prior to 101.0.4951.41 allowed a remote attacker to bypass trusted types policy via a crafted HTML page. |
CVE-2022-1494
|
| VCID-6k78-f46c-8kgm | Use after free in V8 in Google Chrome prior to 94.0.4606.71 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. |
CVE-2021-37975
|
| VCID-6qmr-v794-b7dy | Use after free in Blink in Google Chrome prior to 93.0.4577.82 allowed a remote attacker to perform arbitrary read/write via a crafted HTML page. (Chromium security severity: High) |
CVE-2021-4319
|
| VCID-6qnc-a22e-abed | Use after free in ChromeOS Notifications in Google Chrome on ChromeOS prior to 106.0.5249.62 allowed a remote attacker who convinced a user to reboot Chrome OS to potentially exploit heap corruption via UI interaction. (Chromium security severity: Low) |
CVE-2022-3318
|
| VCID-6t4k-gjkp-5yfb | Chromium: CVE-2021-30613 Use after free in Base internals |
CVE-2021-30613
|
| VCID-6t4x-ms8e-z3gm | Heap buffer overflow in ANGLE in Google Chrome prior to 98.0.4758.80 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. |
CVE-2022-0454
|
| VCID-6v1n-q5fy-8qd7 | Use after free in Nearby Share in Google Chrome on Chrome OS prior to 104.0.5112.79 allowed a remote attacker who convinced a user to engage in specific user interactions to potentially exploit heap corruption via specific UI interactions. |
CVE-2022-2609
|
| VCID-6vfc-p2hb-yygx | Type confusion in V8 in Google Chrome prior to 98.0.4758.80 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. |
CVE-2022-0457
|
| VCID-6z6a-hpfc-m7ba | Insufficient data validation in Installer in Google Chrome on Windows prior to 114.0.5735.90 allowed a local attacker to perform privilege escalation via crafted symbolic link. (Chromium security severity: Medium) |
CVE-2023-2939
|
| VCID-721g-4jpx-bydh | Use after free in storage foundation in Google Chrome prior to 96.0.4664.45 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. |
CVE-2021-38006
|
| VCID-72ce-8r4k-33ew | Insufficient policy enforcement in iframe sandbox in Google Chrome prior to 96.0.4664.45 allowed a remote attacker to bypass navigation restrictions via a crafted HTML page. |
CVE-2021-38017
|
| VCID-72py-pame-sybt | Out of bounds memory access in Service Worker API in Google Chrome prior to 112.0.5615.137 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. (Chromium security severity: High) |
CVE-2023-2134
|
| VCID-732b-s19q-myew | Insufficient policy enforcement in Popup Blocker in Google Chrome prior to 108.0.5359.71 allowed a remote attacker to bypass navigation restrictions via a crafted HTML page. (Chromium security severity: Medium) |
CVE-2022-4183
|
| VCID-73k4-6vp9-s3ag | Inappropriate implementation in Full Screen Mode in Google Chrome on Android prior to 100.0.4896.60 allowed a remote attacker to spoof the contents of the Omnibox (URL bar) via a crafted HTML page. |
CVE-2022-1129
|
| VCID-7716-krm4-2fer | Use after free in Profiles in Google Chrome prior to 108.0.5359.124 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. (Chromium security severity: Medium) |
CVE-2022-4440
|
| VCID-78re-m8ef-rye8 | Use after free in WebRTC Perf in Google Chrome prior to 100.0.4896.60 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. |
CVE-2022-1133
|
| VCID-7923-pcrn-8bef | Use after free in Performance APIs in Google Chrome prior to 101.0.4951.64 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. |
CVE-2022-1636
|
| VCID-7baq-qacs-qyg2 | Inappropriate implementation in Autofill in Google Chrome prior to 99.0.4844.51 allowed a remote attacker to bypass navigation restrictions via a crafted HTML page. |
CVE-2022-0807
|
| VCID-7cme-vn2a-xud5 | Use after free in window manager in Google Chrome on ChromeOS prior to 96.0.4664.93 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. |
CVE-2021-4067
|
| VCID-7ec9-nqyb-ebhq | Heap buffer overflow in GPU in Google Chrome prior to 107.0.5304.121 allowed a remote attacker who had compromised the renderer process to potentially perform a sandbox escape via a crafted HTML page. (Chromium security severity: High) |
CVE-2022-4135
GHSA-995f-9x5r-2rcj |
| VCID-7hdp-yrba-v3ae | Insufficient policy enforcement in Installer in Google Chrome on Windows prior to 99.0.4844.51 allowed a remote attacker to perform local privilege escalation via a crafted offline installer file. |
CVE-2022-0799
|
| VCID-7hmf-v76y-gqfe | Inappropriate implementation in Custom Tabs in Google Chrome on Android prior to 117.0.5938.62 allowed a remote attacker to obfuscate a permission prompt via a crafted HTML page. (Chromium security severity: Medium) |
CVE-2023-4900
|
| VCID-7jcr-b3r7-g3d6 | multiple issues |
CVE-2021-37956
|
| VCID-7jf5-77em-kfc7 | multiple issues |
CVE-2021-30514
|
| VCID-7kp8-91v3-33hy | Chromium: CVE-2021-30607 Use after free in Permissions |
CVE-2021-30607
|
| VCID-7mg5-ejn5-r3ew | Inappropriate implementation in iframe in Google Chrome prior to 101.0.4951.41 allowed a remote attacker to leak cross-origin data via a crafted HTML page. |
CVE-2022-1501
|
| VCID-7mu4-f7w4-qyh9 | Inappropriate implementation in Navigation in Google Chrome prior to 113.0.5672.63 allowed a remote attacker who convinced a user to engage in specific UI gestures to perform domain spoofing via a crafted HTML page. (Chromium security severity: Low) |
CVE-2023-7282
|
| VCID-7p7c-18ru-ekcz | Heap buffer overflow in Media streams API in Google Chrome prior to 97.0.4692.71 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. |
CVE-2022-0100
|
| VCID-7pb3-dh5b-3fh4 | multiple issues |
CVE-2021-37982
|
| VCID-7pc7-5faw-wke6 | Inappropriate implementation in Prompts in Google Chrome prior to 117.0.5938.62 allowed a remote attacker to potentially spoof security UI via a crafted HTML page. (Chromium security severity: Medium) |
CVE-2023-4901
|
| VCID-7px6-vqr5-13c1 | multiple issues |
CVE-2021-37970
|
| VCID-7r95-zvjh-3yhz | Use after free in Sign-in in Google Chrome prior to 97.0.4692.71 allowed a remote attacker who convinced a user to perform specific user gestures to potentially exploit heap corruption via specific user gesture. |
CVE-2022-0099
|
| VCID-7rzv-33k6-rfd5 | Inappropriate implementation in Navigation in Google Chrome prior to 97.0.4692.71 allowed a remote attacker to leak cross-origin data via a crafted HTML page. |
CVE-2022-0108
|
| VCID-7s85-xnha-fbgr | Use after free in Cart in Google Chrome prior to 109.0.5414.74 allowed an attacker who convinced a user to install a malicious extension to potentially exploit heap corruption via database corruption and a crafted HTML page. (Chromium security severity: Medium) |
CVE-2023-0134
|
| VCID-7sju-e883-vudp | Inappropriate implementation in Extensions in Google Chrome prior to 115.0.5790.170 allowed an attacker who convinced a user to install a malicious extension to inject scripts or HTML into a privileged page via a crafted Chrome Extension. (Chromium security severity: Medium) |
CVE-2023-4078
|
| VCID-7v8r-exex-nua9 | Use after free in Network service in Google Chrome prior to 91.0.4472.101 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. |
CVE-2021-30553
|
| VCID-7wba-8jpc-n7gn | Use after free in Extensions API in Google Chrome prior to 92.0.4515.159 allowed an attacker who convinced a user to install a malicious extension to potentially exploit heap corruption via a crafted HTML page. |
CVE-2021-30601
|
| VCID-7wjg-j5rf-9ka8 | Use after free in Chrome OS Shell in Google Chrome on Chrome OS prior to 103.0.5060.114 allowed a remote attacker who convinced a user to engage in specific user interactions to potentially exploit heap corruption via direct UI interactions. |
CVE-2022-2296
|
| VCID-7zpd-y9yu-aufm | Use after free in Camera Capture in Google Chrome prior to 108.0.5359.71 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. (Chromium security severity: High) |
CVE-2022-4175
|
| VCID-7zs1-qr4z-4ube | Type confusion in V8 in Google Chrome prior to 114.0.5735.110 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. (Chromium security severity: High) |
CVE-2023-3079
|
| VCID-7zvc-w2ef-gfcg | Incorrect security UI in Downloads in Google Chrome on Android prior to 101.0.4951.41 allowed a remote attacker to spoof the APK downloads dialog via a crafted HTML page. |
CVE-2022-1495
|
| VCID-82zp-nhx9-pbgn | Inappropriate implementation in Web Browser UI in Google Chrome prior to 120.0.6099.62 allowed a remote attacker to potentially spoof the contents of an iframe dialog context menu via a crafted HTML page. (Chromium security severity: Low) |
CVE-2023-6512
|
| VCID-85ed-ywt8-cub1 | Use after free in assistant in Google Chrome on ChromeOS prior to 106.0.5249.62 allowed a remote attacker who convinced a user to engage in specific UI gestures to potentially perform a sandbox escape via specific UI gestures. (Chromium security severity: Medium) |
CVE-2022-3309
|
| VCID-85g3-dtm3-fkfj | Use after free in Accessibility in Google Chrome prior to 108.0.5359.71 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. (Chromium security severity: Medium) |
CVE-2022-4194
|
| VCID-85wx-r86r-uyeh | Chromium: CVE-2021-30615 Cross-origin data leak in Navigation |
CVE-2021-30615
|
| VCID-861z-nxjh-abbf | Use after free in Sign-In Flow in Google Chrome prior to 105.0.5195.52 allowed a remote attacker who convinced a user to engage in specific UI interactions to potentially exploit heap corruption via crafted UI interaction. |
CVE-2022-3058
|
| VCID-866u-gt7a-5uem | Use after free in SwiftShader in Google Chrome prior to 97.0.4692.71 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. |
CVE-2022-0103
|
| VCID-878b-pusk-jke2 | Insufficient validation of untrusted input in Sharing in Google Chrome prior to 92.0.4515.107 allowed a remote attacker to bypass navigation restrictions via a crafted click-to-call link. |
CVE-2021-30589
|
| VCID-87tx-rhxd-w7eq | Use after free in V8 in Google Chrome prior to 96.0.4664.110 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. |
CVE-2021-4102
|
| VCID-88s9-4mfy-6yce | multiple issues |
CVE-2021-30512
|
| VCID-89cx-nqe3-47fv | Insufficient policy enforcement in File System API in Google Chrome on Windows prior to 103.0.5060.53 allowed a remote attacker to bypass file system access via a crafted HTML page. |
CVE-2022-2162
|
| VCID-89k6-uwmm-efcb | Use after free in ANGLE in Google Chrome prior to 111.0.5563.110 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. (Chromium security severity: High) |
CVE-2023-1531
|
| VCID-8acc-qbyb-kbde | Use after free in Browser UI in Google Chrome prior to 101.0.4951.64 allowed a remote attacker who had convinced a user to engage in specific UI interaction to potentially exploit heap corruption via specific user interactions. |
CVE-2022-1634
|
| VCID-8bu9-bwxn-2kbc | Use after free in Printing in Google Chrome prior to 119.0.6045.105 allowed a remote attacker who convinced a user to engage in specific UI gestures to potentially exploit heap corruption via specific UI gestures. (Chromium security severity: Medium) |
CVE-2023-5852
|
| VCID-8byr-4mvj-2yh5 | libjpeg-turbo: Out-of-bounds read in 64-bit SSE2 Huffman encoder |
CVE-2021-37972
|
| VCID-8dfw-j938-bff2 | Use after free in BFCache in Google Chrome prior to 91.0.4472.101 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. |
CVE-2021-30544
|
| VCID-8fqu-z5ba-fkcj | multiple issues |
CVE-2021-30519
|
| VCID-8gua-z2vb-x3bn | Incorrect security UI in payments in Google Chrome on Android prior to 91.0.4472.77 allowed a remote attacker to perform domain spoofing via a crafted HTML page. |
CVE-2021-30540
|
| VCID-8h9r-xtb2-vycs | Insufficient data validation in DevTools in Google Chrome prior to 111.0.5563.64 allowed a remote attacker to bypass navigation restrictions via a crafted HTML page. (Chromium security severity: Low) |
CVE-2023-2314
|
| VCID-8kmt-14u1-jkea | Inappropriate implementation in App Launcher in Google Chrome on iOS prior to 116.0.5845.96 allowed a remote attacker to potentially spoof elements of the security UI via a crafted HTML page. (Chromium security severity: Medium) |
CVE-2023-4359
|
| VCID-8meu-jfpq-uqff | Inappropriate implementation in Full Screen Mode in Google Chrome on Android prior to 113.0.5672.63 allowed a remote attacker to hide the contents of the Omnibox (URL bar) via a crafted HTML page. (Chromium security severity: Medium) |
CVE-2023-2463
|
| VCID-8n5x-vwb3-huct | Use after free in Overview Mode in Google Chrome on Chrome OS prior to 104.0.5112.79 allowed a remote attacker who convinced a user to engage in specific user interactions to potentially exploit heap corruption via specific UI interactions. |
CVE-2022-2608
|
| VCID-8n8z-te5n-dyhk | Insufficient policy enforcement in File System API in Google Chrome prior to 102.0.5005.61 allowed a remote attacker to bypass file system restrictions via a crafted HTML page. |
CVE-2022-1857
|
| VCID-8qa6-fsb1-5bem | Use after free in WebRTC in Google Chrome prior to 114.0.5735.133 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. (Chromium security severity: High) |
CVE-2023-3215
|
| VCID-8ra7-sm2v-jbac | Inappropriate implementation in Autofill in Google Chrome on Android prior to 111.0.5563.64 allowed a remote attacker to potentially spoof the contents of the omnibox via a crafted HTML page. (Chromium security severity: Medium) |
CVE-2023-1231
|
| VCID-8rdw-8x3r-yyev | Inappropriate implementation in Picture In Picture in Google Chrome prior to 114.0.5735.90 allowed a remote attacker who had compromised the renderer process to spoof the contents of the Omnibox (URL bar) via a crafted HTML page. (Chromium security severity: Medium) |
CVE-2023-2937
|
| VCID-8rnk-8k87-9ba5 | multiple issues |
CVE-2021-37994
|
| VCID-8rrm-7sq9-63fy | Inappropriate implementation in Gamepad API in Google Chrome prior to 98.0.4758.102 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. |
CVE-2022-0610
|
| VCID-8sgr-vzup-dqcg | Inappropriate implementation in Picture in Picture in Google Chrome prior to 119.0.6045.105 allowed a remote attacker to spoof the contents of the Omnibox (URL bar) via a crafted HTML page. (Chromium security severity: Medium) |
CVE-2023-7011
|
| VCID-8svy-6rsx-rkhq | Inappropriate implementation in navigation in Google Chrome prior to 96.0.4664.45 allowed a remote attacker to perform domain spoofing via a crafted HTML page. |
CVE-2021-38018
|
| VCID-8u2t-9f76-n7af | Heap buffer overflow in Downloads in Google Chrome on Android prior to 104.0.5112.101 allowed a remote attacker who had compromised the renderer process to potentially exploit heap corruption via a crafted HTML page. |
CVE-2022-2853
|
| VCID-8u6c-et6p-bqgp | Insufficient data validation in Directory in Google Chrome prior to 108.0.5359.71 allowed a remote attacker to bypass file system restrictions via a crafted HTML page. (Chromium security severity: Medium) |
CVE-2022-4190
|
| VCID-8u8d-jazb-gqad | multiple issues |
CVE-2021-37977
|
| VCID-8vc1-2kxe-cqa1 | Use after free in Vulkan in Google Chrome prior to 110.0.5481.177 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. (Chromium security severity: High) |
CVE-2023-0929
|
| VCID-8wkv-fpyk-x7d2 | multiple issues |
CVE-2021-30543
|
| VCID-8x6h-x49w-pkev | Type Confusion in V8 in Google Chrome prior to 114.0.5735.198 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. (Chromium security severity: High) |
CVE-2023-3420
|
| VCID-8zdy-1j6r-3bbp | Use after free in dialog box handling in Windows in Google Chrome prior to 92.0.4515.107 allowed an attacker who convinced a user to install a malicious extension to potentially exploit heap corruption via a crafted HTML page. |
CVE-2021-30586
|
| VCID-8zph-w4w7-kqba | Use after free in ANGLE in Google Chrome prior to 102.0.5005.115 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. |
CVE-2022-2011
|
| VCID-8zv9-9ru9-gbc7 | Inappropriate implementation in Download in Google Chrome prior to 110.0.5481.77 allowed a remote attacker to potentially spoof the contents of the Omnibox (URL bar) via a crafted HTML page. (Chromium security severity: Medium) |
CVE-2023-0700
|
| VCID-8zww-6vgy-kff9 | Use after free in Sharing in Google Chrome prior to 101.0.4951.64 allowed a remote attacker who convinced a user to engage in specific UI interactions to potentially exploit heap corruption via a crafted HTML page. |
CVE-2022-1640
|
| VCID-91ec-k7za-akft | multiple issues |
CVE-2021-37988
|
| VCID-91jn-rr36-y7ax | Out of bounds memory access in DOM Bindings in Google Chrome prior to 112.0.5615.49 allowed a remote attacker to perform out of bounds memory access via a crafted HTML page. (Chromium security severity: Medium) |
CVE-2023-1812
|
| VCID-94ch-8htt-bba5 | Use after free in WebAudio in Google Chrome prior to 91.0.4472.114 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. |
CVE-2021-30556
|
| VCID-96cz-tu35-4qdg | Inappropriate implementation in WebAuthentication in Google Chrome prior to 96.0.4664.45 allowed a remote attacker to leak cross-origin data via a crafted HTML page. |
CVE-2021-38022
|
| VCID-96ds-3spe-1uek | Inappropriate implementation in Input in Google Chrome prior to 117.0.5938.62 allowed a remote attacker to spoof security UI via a crafted HTML page. (Chromium security severity: Medium) |
CVE-2023-4902
|
| VCID-96jv-k188-6beh | Type confusion in V8 in Google Chrome prior to 96.0.4664.93 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. |
CVE-2021-4061
|
| VCID-9788-5tjt-6uen | arbitrary code execution |
CVE-2021-37969
|
| VCID-97bd-h1aq-syde | Use after free in Tab Strip in Google Chrome prior to 100.0.4896.60 allowed an attacker who convinced a user to install a malicious extension to potentially exploit heap corruption via specific set of user gestures. |
CVE-2022-1136
|
| VCID-97bm-map8-v3et | Out of bounds read in compositing in Google Chrome prior to 102.0.5005.115 allowed a remote attacker who had compromised the renderer process to potentially perform a sandbox escape via a crafted HTML page. |
CVE-2022-2010
|
| VCID-97wk-q2tq-rfcn | Inappropriate implementation in Background Fetch API in Google Chrome prior to 100.0.4896.60 allowed a remote attacker to leak cross-origin data via a crafted HTML page. |
CVE-2022-1139
|
| VCID-99d6-qb6k-93d6 | Use after free in WebApp Provider in Google Chrome prior to 103.0.5060.53 allowed a remote attacker who convinced the user to engage in specific user interactions to potentially exploit heap corruption via specific UI interactions. |
CVE-2022-2161
|
| VCID-99xr-3y59-4yaa | Use after free in Networks in Google Chrome prior to 116.0.5845.179 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. (Chromium security severity: High) |
CVE-2023-4763
|
| VCID-9b25-5wuv-sfa2 | Inappropriate implementation in Intents in Google Chrome on Android prior to 111.0.5563.64 allowed a remote attacker to perform domain spoofing via a crafted HTML page. (Chromium security severity: Low) |
CVE-2023-1234
|
| VCID-9b3g-u6jp-5bf8 | Type confusion in V8 in Google Chrome prior to 111.0.5563.64 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. (Chromium security severity: High) |
CVE-2023-1214
|
| VCID-9bcs-utd9-t3h6 | Insufficient policy enforcement in PopupBlocker in Google Chrome prior to 91.0.4472.77 allowed a remote attacker to bypass navigation restrictions via a crafted iframe. |
CVE-2021-30533
|
| VCID-9hy5-cm14-d7he | Use after free in sensor handling in Google Chrome on Windows prior to 92.0.4515.107 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. |
CVE-2021-30585
|
| VCID-9jrw-nxdj-pybf | Use after free in Browser Tag in Google Chrome prior to 105.0.5195.52 allowed an attacker who convinced a user to install a malicious extension to potentially exploit heap corruption via a crafted HTML page. |
CVE-2022-3046
|
| VCID-9kse-qfkx-c3cp | Use after free in GuestView in Google Chrome prior to 109.0.5414.119 allowed an attacker who convinced a user to install a malicious extension to potentially exploit heap corruption via a Chrome web app. (Chromium security severity: Medium) |
CVE-2023-0474
|
| VCID-9mxa-puk8-h7d5 | Use after free in WebShare in Google Chrome prior to 99.0.4844.51 allowed a remote attacker who convinced a user to engage in specific user interaction to potentially exploit heap corruption via a crafted HTML page. |
CVE-2022-0794
|
| VCID-9p1b-vdh1-7uem | Heap buffer overflow in ANGLE in Google Chrome prior to 120.0.6099.199 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. (Chromium security severity: High) |
CVE-2024-0223
|
| VCID-9r93-cv9g-6fft | Use after free in WebSQL in Google Chrome prior to 105.0.5195.52 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. |
CVE-2022-3039
|
| VCID-9r9q-g6f7-2qff | Inappropriate implementation in in Permission prompts in Google Chrome on Windows prior to 109.0.5414.74 allowed a remote attacker to force acceptance of a permission prompt via a crafted HTML page. (Chromium security severity: Medium) |
CVE-2023-0132
|
| VCID-9ta8-48f1-ybat | Use after free in UI framework in Google Chrome prior to 92.0.4515.107 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. |
CVE-2021-30579
|
| VCID-9tmf-qtxh-h7cn | Insufficient policy enforcement in Web Payments API in Google Chrome prior to 111.0.5563.64 allowed a remote attacker to bypass navigation restrictions via a crafted HTML page. (Chromium security severity: Medium) |
CVE-2023-1224
|
| VCID-9upg-c3bk-zkc1 | Inappropriate implementation in WebShare in Google Chrome prior to 112.0.5615.49 allowed a remote attacker to potentially hide the contents of the Omnibox (URL bar) via a crafted HTML page. (Chromium security severity: Low) |
CVE-2023-1821
|
| VCID-9xa2-kpym-77dx | Use after free in Chrome OS Shell in Google Chrome on Chrome OS prior to 99.0.4844.51 allowed a remote attacker who convinced a user to engage in a series of user interaction to potentially exploit heap corruption via user interactions. |
CVE-2022-0808
|
| VCID-9xw7-93qn-6qfz | Incorrect security UI in Navigation in Google Chrome on Android prior to 92.0.4515.131 allowed a remote attacker to spoof the contents of the Omnibox (URL bar) via a crafted HTML page. |
CVE-2021-30596
|
| VCID-a1mz-bcd9-wbdn | Type Confusion in V8 in Google Chrome prior to 115.0.5790.170 allowed a remote attacker to perform arbitrary read/write via a crafted HTML page. (Chromium security severity: High) |
CVE-2023-4070
|
| VCID-a1p5-4xat-hqep | Incorrect security UI in full screen in Google Chrome prior to 106.0.5249.62 allowed a remote attacker to spoof security UI via a crafted HTML page. (Chromium security severity: Medium) |
CVE-2022-3313
|
| VCID-a21p-esuc-8kb9 | Inappropriate implementation in cache in Google Chrome prior to 96.0.4664.45 allowed a remote attacker to leak cross-origin data via a crafted HTML page. |
CVE-2021-38009
|
| VCID-a4kn-fuwg-3beg | multiple issues |
CVE-2021-37997
|
| VCID-a516-hq9b-a3aw | Inappropriate implementation in compositing in Google Chrome prior to 100.0.4896.88 allowed a remote attacker to spoof the contents of the Omnibox (URL bar) via a crafted HTML page. |
CVE-2022-1306
|
| VCID-a584-ue5h-vkam | Insufficient policy enforcement in Intents in Google Chrome on Android prior to 109.0.5414.119 allowed a remote attacker to bypass same origin policy via a crafted HTML page. (Chromium security severity: Medium) |
CVE-2022-4926
|
| VCID-a775-kxrm-57fa | Insufficient policy enforcement in Cookies in Google Chrome prior to 104.0.5112.101 allowed a remote attacker to bypass cookie prefix restrictions via a crafted HTML page. |
CVE-2022-2860
|
| VCID-a79u-y7je-qyaj | Use after free in Passwords in Google Chrome prior to 105.0.5195.125 allowed a remote attacker who had compromised the renderer process to potentially exploit heap corruption via a crafted HTML page. (Chromium security severity: High) |
CVE-2022-3842
|
| VCID-a879-81r5-uqav | Use after free in Browser Switcher in Google Chrome prior to 99.0.4844.51 allowed a remote attacker who convinced a user to engage in specific user interaction to potentially exploit heap corruption via user interaction. |
CVE-2022-0805
|
| VCID-a8mt-jp1z-ukgg | multiple issues |
CVE-2021-37980
|
| VCID-a9v5-7h1b-nuh2 | Use after free in import in Google Chrome prior to 106.0.5249.62 allowed a remote attacker who had compromised a WebUI process to potentially perform a sandbox escape via a crafted HTML page. (Chromium security severity: Medium) |
CVE-2022-3311
|
| VCID-ac6p-yzfz-xfgw | Use after free in Offline in Google Chrome on Android prior to 104.0.5112.79 allowed a remote attacker who convinced a user to engage in specific user interactions to potentially exploit heap corruption via specific UI interactions. |
CVE-2022-2623
|
| VCID-aemc-ns34-tbhq | Use after free in PDF Accessibility in Google Chrome prior to 97.0.4692.71 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. |
CVE-2022-0105
|
| VCID-af7u-x4fa-ryd5 | Inappropriate implementation in Omnibox in Google Chrome prior to 99.0.4844.51 allowed an attacker in a privileged network position to perform a man-in-the-middle attack via malicious network traffic. (Chromium security severity: Low) |
CVE-2022-4923
|
| VCID-afdu-yjp9-aqas | Use after free in Web Search in Google Chrome prior to 98.0.4758.80 allowed a remote attacker to potentially exploit heap corruption via profile destruction. |
CVE-2022-0456
|
| VCID-afjs-sahn-zbgs | Inappropriate implementation in Autofill in Google Chrome on Android prior to 116.0.5845.96 allowed a remote attacker to bypass Autofill restrictions via a crafted HTML page. (Chromium security severity: Medium) |
CVE-2023-4361
|
| VCID-ag8d-cub5-z3a2 | Use after free in Extensions in Google Chrome prior to 100.0.4896.60 allowed an attacker who convinced a user to install a malicious extension to potentially exploit heap corruption via specific user interaction and profile destruction. |
CVE-2022-1145
|
| VCID-ajcn-k6ya-7yh7 | Inappropriate implementation in service workers in Google Chrome prior to 96.0.4664.45 allowed a remote attacker who had compromised the renderer process to bypass site isolation via a crafted HTML page. |
CVE-2021-38010
|
| VCID-akfe-ssnp-fudf | Use after free in WebUI in Google Chrome prior to 100.0.4896.60 allowed a remote attacker who convinced a user to engage in specific user interaction to potentially exploit heap corruption via specific input into DevTools. |
CVE-2022-1144
|
| VCID-akya-32b4-ykdh | Inappropriate implementation in Full screen mode in Google Chrome on Android prior to 99.0.4844.51 allowed a remote attacker to hide the contents of the Omnibox (URL bar) via a crafted HTML page. |
CVE-2022-0804
|
| VCID-an29-fmw7-4fh4 | Type confusion in V8 in Google Chrome prior to 107.0.5304.87 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. (Chromium security severity: High) |
CVE-2022-3723
|
| VCID-axwd-vqfs-a7by | Use after free in Overview Mode in Google Chrome on Chrome OS prior to 109.0.5414.74 allowed a remote attacker who convinced a user to engage in specific UI interactions to potentially exploit heap corruption via a crafted HTML page. (Chromium security severity: High) |
CVE-2023-0128
|
| VCID-azgg-ajvn-bqfs | Use after free in Vulkan in Google Chrome prior to 101.0.4951.41 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. |
CVE-2022-1477
|
| VCID-azm4-vdfk-7yab | Use after free in Tab Groups in Google Chrome prior to 102.0.5005.61 allowed an attacker who convinced a user to install a malicious extension to potentially exploit heap corruption via a crafted Chrome Extension and specific user interaction. |
CVE-2022-1863
|
| VCID-azs1-fdqx-1fcu | Use after free in logging in Google Chrome prior to 106.0.5249.62 allowed a remote attacker who had compromised a WebUI process to potentially perform a sandbox escape via a crafted HTML page. (Chromium security severity: Medium) |
CVE-2022-3314
|
| VCID-b12h-7az6-k7a1 | Heap buffer overflow in WebUI in Google Chrome prior to 110.0.5481.77 allowed a remote attacker who convinced a user to engage in specific UI interactions to potentially exploit heap corruption via UI interaction . (Chromium security severity: Medium) |
CVE-2023-0701
|
| VCID-b149-4ap7-wkdj | Use after free in Layout in Google Chrome prior to 105.0.5195.52 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. |
CVE-2022-3040
|
| VCID-b3na-ba5m-dkfy | Inappropriate implementation in Autofill in Google Chrome prior to 97.0.4692.71 allowed a remote attacker to obtain potentially sensitive information via a crafted HTML page. |
CVE-2022-0109
|
| VCID-b3v3-se7n-mug7 | Heap buffer overflow in Screen Capture in Google Chrome on Chrome OS prior to 105.0.5195.52 allowed a remote attacker who convinced a user to engage in specific UI interactions to potentially exploit heap corruption via a crafted HTML page. |
CVE-2022-3043
|
| VCID-b6p2-ge7x-gkgq | Out of bounds write in Tab Groups in Google Chrome prior to 92.0.4515.131 allowed an attacker who convinced a user to install a malicious extension to perform an out of bounds memory write via a crafted HTML page. |
CVE-2021-30592
|
| VCID-b6rz-n7wx-xkhu | Use after free in Bookmarks in Google Chrome prior to 97.0.4692.99 allowed a remote attacker who convinced a user to engage in specific user interactions to potentially exploit heap corruption via a crafted HTML page. |
CVE-2022-0304
|
| VCID-b6x3-m2zg-xqcs | Use after free in DevTools in Google Chrome prior to 91.0.4472.77 allowed an attacker who convinced a user to install a malicious extension to execute arbitrary code via a crafted Chrome Extension. (Chromium security severity: Medium) |
CVE-2021-4322
|
| VCID-b947-e5n5-sye2 | Insufficient validation of trust input in WebOTP in Google Chrome on Android prior to 100.0.4896.60 allowed a remote attacker to send arbitrary intents from any app via a malicious app. |
CVE-2022-1130
|
| VCID-b9fy-snxk-n7hb | Use after free in DNS in Google Chrome prior to 116.0.5845.96 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. (Chromium security severity: Medium) |
CVE-2023-4358
|
| VCID-b9p6-pqd9-vuc3 | Inappropriate implementation in Intents in Google Chrome prior to 118.0.5993.70 allowed a remote attacker to bypass content security policy via a crafted HTML page. (Chromium security severity: Medium) |
CVE-2023-5483
|
| VCID-baen-vt1s-vue2 | multiple issues |
CVE-2021-37985
|
| VCID-bbp4-unrb-gkb8 | Chromium: CVE-2021-30617 Policy bypass in Blink |
CVE-2021-30617
|
| VCID-bc3r-7smj-s3da | Use after free in Browser UI in Google Chrome on Chrome prior to 92.0.4515.131 allowed a remote attacker to potentially exploit heap corruption via physical access to the device. |
CVE-2021-30597
|
| VCID-bcf2-f1ef-akf7 | Use after free in Network in Google Chrome prior to 116.0.5845.96 allowed a remote attacker who has elicited a browser shutdown to potentially exploit heap corruption via a crafted HTML page. (Chromium security severity: High) |
CVE-2023-4351
|
| VCID-bczj-6myb-qufd | multiple issues |
CVE-2021-37984
|
| VCID-bdjm-sbns-dbey | Insufficient policy enforcement in Autofill in Google Chrome on Android prior to 111.0.5563.64 allowed a remote attacker to leak cross-origin data via a crafted HTML page. (Chromium security severity: Medium) |
CVE-2023-1223
|
| VCID-bdua-sxcy-8qaq | Use after free in Thumbnail Tab Strip in Google Chrome prior to 98.0.4758.80 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. |
CVE-2022-0458
|
| VCID-be4g-u8rp-p3ds | multiple issues |
CVE-2021-37981
|
| VCID-bf1b-v2t2-5yda | Insufficient data validation in Mojo in Google Chrome prior to 105.0.5195.102 allowed a remote attacker who had compromised the renderer process to potentially perform a sandbox escape via a crafted HTML page. |
CVE-2022-3075
|
| VCID-bfjr-5nfz-wyf9 | Insufficient policy enforcement in File System API in Google Chrome prior to 108.0.5359.71 allowed a remote attacker to bypass file system restrictions via a crafted HTML page. (Chromium security severity: Medium) |
CVE-2022-4193
|
| VCID-bgdq-xaty-a3ax | Use after free in SwiftShader in Google Chrome prior to 110.0.5481.177 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. (Chromium security severity: High) |
CVE-2023-0928
|
| VCID-bha2-etmf-mqgw | Use after free in Cast UI and Toolbar in Google Chrome prior to 103.0.5060.134 allowed an attacker who convinced a user to install a malicious extension to potentially exploit heap corruption via UI interaction. |
CVE-2022-2163
|
| VCID-bm2n-pc2c-1yb7 | multiple issues |
CVE-2021-37971
|
| VCID-bmwz-sfcd-ebf9 | Use after free in Dev Tools in Google Chrome prior to 101.0.4951.41 allowed a remote attacker to potentially exploit heap corruption via specific and direct user interaction. |
CVE-2022-1493
|
| VCID-bnqh-wvje-eydy | Insufficient data validation in Extensions in Google Chrome prior to 107.0.5304.62 allowed a remote attacker who had compromised the renderer process to leak cross-origin data via a crafted Chrome extension. (Chromium security severity: Low) |
CVE-2022-3661
|
| VCID-bnxz-6fzc-vyf4 | Inappropriate implementation in DevTools in Google Chrome prior to 97.0.4692.71 allowed an attacker who convinced a user to install a malicious extension to to potentially allow extension to escape the sandbox via a crafted HTML page. |
CVE-2022-0097
|
| VCID-bp7g-pu2b-nuht | Inappropriate implementation in Extensions in Google Chrome prior to 105.0.5195.52 allowed a remote attacker who had compromised the renderer process to spoof extension storage via a crafted HTML page. (Chromium security severity: High) |
CVE-2022-4913
|
| VCID-bqat-h1ba-7be2 | Inappropriate implementation in WebShare in Google Chrome on Android prior to 116.0.5845.96 allowed a remote attacker to spoof the contents of a dialog URL via a crafted HTML page. (Chromium security severity: Medium) |
CVE-2023-4363
|
| VCID-bqst-gzrj-dqek | Insufficient policy enforcement in DevTools in Google Chrome on Windows prior to 103.0.5060.53 allowed an attacker who convinced a user to install a malicious extension to obtain potentially sensitive information from a user's local files via a crafted HTML page. |
CVE-2022-2160
|
| VCID-br8y-gysb-cbat | Insufficient policy enforcement in Installer in Google Chrome prior to 92.0.4515.107 allowed a remote attacker to perform local privilege escalation via a crafted file. |
CVE-2021-30577
|
| VCID-bra2-8skq-hycd | Use after free in Extensions API in Google Chrome prior to 104.0.5112.79 allowed an attacker who convinced a user to install a malicious extension to potentially exploit heap corruption via specific UI interactions. |
CVE-2022-2617
|
| VCID-brt4-jq7a-8ugz | Inappropriate implementation in WebAuthentication in Google Chrome prior to 101.0.4951.41 allowed a remote attacker to bypass same origin policy via a crafted HTML page. |
CVE-2022-1499
|
| VCID-btdf-s9z4-kfeb | Inappropriate implementation in CORS in Google Chrome prior to 113.0.5672.63 allowed a remote attacker to leak cross-origin data via a crafted HTML page. (Chromium security severity: Medium) |
CVE-2023-2465
|
| VCID-btsg-3kum-4ubs | Insufficient policy enforcement in iFrameSandbox in Google Chrome prior to 91.0.4472.77 allowed a remote attacker to bypass navigation restrictions via a crafted HTML page. |
CVE-2021-30534
|
| VCID-bva9-jyue-mydj | Type confusion in V8 in Google Chrome prior to 96.0.4664.45 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. |
CVE-2021-38007
|
| VCID-bwjn-jc81-hkcy | Insufficient policy enforcement in CORS in Google Chrome prior to 109.0.5414.74 allowed a remote attacker to leak cross-origin data via a crafted HTML page. (Chromium security severity: Low) |
CVE-2023-0141
|
| VCID-bytn-3nvt-eyd1 | Insufficient validation of untrusted input in Settings in Google Chrome prior to 104.0.5112.79 allowed an attacker who convinced a user to install a malicious extension to inject scripts or HTML into a privileged page via a crafted HTML page. |
CVE-2022-2619
|
| VCID-c19t-asan-3ygx | multiple issues |
CVE-2021-30516
|
| VCID-c3gp-gegn-mfb6 | Integer overflow in Skia in Google Chrome prior to 112.0.5615.137 allowed a remote attacker who had compromised the renderer process to potentially perform a sandbox escape via a crafted HTML page. (Chromium security severity: High) |
CVE-2023-2136
|
| VCID-c44r-cndd-dqar | Use after free in File System API in Google Chrome prior to 92.0.4515.131 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. |
CVE-2021-30591
|
| VCID-c4g1-6jfx-yqa7 | Chromium: CVE-2021-30614 Heap buffer overflow in TabStrip |
CVE-2021-30614
|
| VCID-c4wx-xsvb-53dc | Use after free in DevTools in Google Chrome prior to 112.0.5615.137 allowed a remote attacker who convinced a user to enable specific preconditions to potentially exploit heap corruption via a crafted HTML page. (Chromium security severity: High) |
CVE-2023-2135
|
| VCID-c7n1-3yy9-xqae | Use after free in Network Service in Google Chrome prior to 105.0.5195.52 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. |
CVE-2022-3038
|
| VCID-c846-2wry-7yht | Use after free in SwiftShader in Google Chrome prior to 104.0.5112.101 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. |
CVE-2022-2854
|
| VCID-c95a-4px8-nkg8 | Integer overflow in Core in Google Chrome prior to 110.0.5481.77 allowed a remote attacker who had one a race condition to potentially exploit heap corruption via a crafted HTML page. (Chromium security severity: Low) |
CVE-2023-0705
|
| VCID-c9u1-jhke-g7an | Heap buffer overflow in Web Audio API in Google Chrome prior to 111.0.5563.64 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. (Chromium security severity: Medium) |
CVE-2023-1222
|
| VCID-cb4e-rubu-guac | Inappropriate implementation in Full screen mode in Google Chrome on Android prior to 99.0.4844.51 allowed a remote attacker to hide the contents of the Omnibox (URL bar) via a crafted HTML page. |
CVE-2022-0802
|
| VCID-cdc1-6kaz-j7d7 | Inappropriate implementation in Compositing in Google Chrome prior to 119.0.6045.105 allowed a remote attacker to perform UI spoofing via a crafted HTML page. (Chromium security severity: Medium) |
CVE-2023-7281
|
| VCID-cdha-3rv7-nkgg | Use after free in storage foundation in Google Chrome prior to 96.0.4664.45 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. |
CVE-2021-38011
|
| VCID-cds7-r9q7-pff1 | Out of bounds write in V8 in Google Chrome prior to 93.0.4577.82 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. |
CVE-2021-30632
|
| VCID-cfxg-t5vq-gqhd | Inappropriate implementation in Memory in Google Chrome prior to 94.0.4606.71 allowed a remote attacker to obtain potentially sensitive information from process memory via a crafted HTML page. |
CVE-2021-37976
|
| VCID-chb4-371x-f7a2 | Insufficient validation of untrusted input in V8 in Google Chrome prior to 105.0.5195.52 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. |
CVE-2022-3045
|
| VCID-chrd-bvqv-akcj | Inappropriate implementation in iFrame Sandbox in Google Chrome prior to 107.0.5304.62 allowed a remote attacker to leak cross-origin data via a crafted HTML page. (Chromium security severity: Medium) |
CVE-2022-4908
|
| VCID-chvk-ryj6-dkek | multiple issues |
CVE-2021-38002
|
| VCID-cjhm-qxn9-h3e6 | Heap buffer overflow in DevTools in Google Chrome prior to 102.0.5005.61 allowed an attacker who convinced a user to install a malicious extension to potentially exploit heap corruption via a crafted HTML page. |
CVE-2022-1876
|
| VCID-cjyj-32y9-8bax | Use after free in Indexed DB in Google Chrome prior to 102.0.5005.61 allowed a remote attacker to potentially perform a sandbox escape via a crafted HTML page. |
CVE-2022-1853
|
| VCID-cm26-xb73-gbec | multiple issues |
CVE-2021-37993
|
| VCID-cmwu-qugc-d7b6 | Inappropriate implementation in Compositing in Google Chrome prior to 92.0.4515.107 allowed a remote attacker to potentially spoof the contents of the Omnibox (URL bar) via a crafted HTML page. |
CVE-2021-30587
|
| VCID-cp3p-wt3y-2ffm | Out of bounds memory access in V8 in Google Chrome prior to 116.0.5845.96 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. (Chromium security severity: High) |
CVE-2023-4355
|
| VCID-cqfn-7fw4-5bcv | Use after free in Extensions in Google Chrome prior to 98.0.4758.80 allowed a remote attacker to potentially exploit heap corruption via user interaction. |
CVE-2022-0465
|
| VCID-crj2-t3v8-yqbt | Use after free in SwiftShader in Google Chrome prior to 101.0.4951.41 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. |
CVE-2022-1478
|
| VCID-crjx-xpbh-yfdy | Use after free in Portals in Google Chrome prior to 94.0.4606.61 allowed a remote attacker who had compromised the renderer process to potentially perform a sandbox escape via a crafted HTML page. |
CVE-2021-37973
|
| VCID-csr4-hmvw-4bau | Use after free in Site Isolation in Google Chrome prior to 118.0.5993.70 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. (Chromium security severity: Critical) |
CVE-2023-5218
|
| VCID-cwkw-671k-tbbf | Type confusion in V8 in Google Chrome prior to 114.0.5735.133 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. (Chromium security severity: High) |
CVE-2023-3216
|
| VCID-cwzf-ma96-jqfa | Type confusion in V8 in Google Chrome prior to 103.0.5060.114 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. |
CVE-2022-2295
|
| VCID-cxvm-rntx-nugt | Inappropriate implementation in Permission Prompts in Google Chrome prior to 116.0.5845.96 allowed a remote attacker to obfuscate security UI via a crafted HTML page. (Chromium security severity: Medium) |
CVE-2023-4364
|
| VCID-cyhg-rbtr-xybx | Type confusion in V8 in Google Chrome prior to 91.0.4472.101 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. |
CVE-2021-30551
|
| VCID-czdn-2cth-xuh2 | Out of bounds write in SwiftShader in Google Chrome prior to 117.0.5938.62 allowed a remote attacker to perform an out of bounds memory write via a crafted HTML page. (Chromium security severity: High) |
CVE-2024-3176
|
| VCID-d1d3-4aqw-yyfk | Insufficient validation of untrusted input in Intents in Google Chrome on Android prior to 95.0.4638.69 allowed a remote attacker to arbitrarily browser to a malicious URL via a crafted HTML page. |
CVE-2021-38000
|
| VCID-d2ae-p4bc-53at | multiple issues |
CVE-2021-30518
|
| VCID-d2kn-s9u6-87a5 | Use after free in OS Inputs in Google Chrome on ChromeOS prior to 113.0.5672.63 allowed a remote attacker who convinced a user to enage in specific UI interaction to potentially exploit heap corruption via crafted UI interaction. (Chromium security severity: Medium) |
CVE-2023-2461
|
| VCID-d2ms-p7fq-d7ge | Use after free in Guest View in Google Chrome prior to 114.0.5735.198 allowed an attacker who convinced a user to install a malicious extension to potentially exploit heap corruption via a crafted HTML page. (Chromium security severity: High) |
CVE-2023-3422
|
| VCID-d2ns-cx4z-2faj | Heap buffer overflow in Platform Apps in Google Chrome on Chrome OS prior to 109.0.5414.74 allowed an attacker who convinced a user to install a malicious extension to potentially exploit heap corruption via a crafted HTML page. (Chromium security severity: Medium) |
CVE-2023-0137
|
| VCID-d3rg-k465-fqdd | Inappropriate implementation in Blink in Google Chrome prior to 108.0.5359.71 allowed a remote attacker to perform arbitrary read/write via a crafted HTML page. (Chromium security severity: High) |
CVE-2022-4906
|
| VCID-d4eg-zvak-8fch | Use after free in CSS in Google Chrome prior to 106.0.5249.62 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. (Chromium security severity: High) |
CVE-2022-3304
|
| VCID-d5js-xdv1-43bn | Heap buffer overflow in Internals in Google Chrome prior to 105.0.5195.125 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. (Chromium security severity: High) |
CVE-2022-3200
|
| VCID-d6dt-gejz-ffcp | Side-channel information leakage in Keyboard input in Google Chrome prior to 104.0.5112.79 allowed a remote attacker who had compromised the renderer process to obtain potentially sensitive information from process memory via a crafted HTML page. |
CVE-2022-2612
|
| VCID-d7vx-6uuh-cbhv | arbitrary code execution |
CVE-2021-37983
|
| VCID-d7xe-hjpr-77au | Insufficient policy enforcement in Content Security Policy in Google Chrome prior to 105.0.5195.52 allowed a remote attacker to bypass content security policy via a crafted HTML page. |
CVE-2022-3056
|
| VCID-d83r-pvfd-k7bh | Use after free in storage in Google Chrome prior to 100.0.4896.88 allowed an attacker who convinced a user to install a malicious extension to potentially perform a sandbox escape via a crafted Chrome Extension. |
CVE-2022-1312
|
| VCID-d8kz-zqt8-f7fr | Use after free in ANGLE in Google Chrome prior to 101.0.4951.64 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. |
CVE-2022-1639
|
| VCID-d8rx-8rw9-m3d1 | Use after free in Ozone in Google Chrome prior to 101.0.4951.41 allowed a remote attacker to potentially exploit heap corruption via running a Wayland test. |
CVE-2022-1487
|
| VCID-daju-hh1b-5bcm | Use after free in ANGLE in Google Chrome prior to 98.0.4758.102 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. |
CVE-2022-0606
|
| VCID-damf-es69-pqh9 | Insufficient policy enforcement in Extensions API in Google Chrome prior to 105.0.5195.52 allowed an attacker who convinced a user to install a malicious extension to bypass downloads policy via a crafted HTML page. |
CVE-2022-3047
|
| VCID-ddvb-7btx-yqh7 | Use after free in PDF in Google Chrome prior to 111.0.5563.110 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. (Chromium security severity: High) |
CVE-2023-1530
|
| VCID-deq7-racv-muhu | Inappropriate implementation in Service Worker API in Google Chrome prior to 97.0.4692.99 allowed a remote attacker who had compromised the renderer process to bypass site isolation via a crafted HTML page. |
CVE-2022-0305
|
| VCID-dfnq-tdy6-yyhw | Insufficient validation of untrusted input in Extensions in Google Chrome prior to 113.0.5672.63 allowed an attacker who convinced a user to install a malicious extension to bypass file access checks via a crafted HTML page. (Chromium security severity: Medium) |
CVE-2023-2460
|
| VCID-dg5u-7gm2-5yc1 | Out of bounds memory access in Mojo in Google Chrome prior to 115.0.5790.98 allowed a remote attacker who had compromised the renderer process to potentially exploit heap corruption via a crafted HTML page. (Chromium security severity: High) |
CVE-2023-3732
|
| VCID-dgnz-1u9n-pkfr | Use after free in Frames in Google Chrome prior to 112.0.5615.49 allowed a remote attacker who convinced a user to engage in specific UI interaction to potentially exploit heap corruption via a crafted HTML page. (Chromium security severity: High) |
CVE-2023-1811
|
| VCID-dhav-rq3b-s3a8 | Use after free in WebRTC in Google Chrome on Windows prior to 110.0.5481.177 allowed a remote attacker who convinced the user to engage in specific UI interactions to potentially exploit heap corruption via a crafted HTML page. (Chromium security severity: High) |
CVE-2023-0932
|
| VCID-dhbm-r334-hqd9 | Heap buffer overflow in DevTools in Google Chrome prior to 97.0.4692.99 allowed an attacker who convinced a user to install a malicious extension to potentially exploit heap corruption via a crafted HTML page. |
CVE-2022-0301
|
| VCID-dmh5-g5s3-9yfs | Insufficient policy enforcement in File System API in Google Chrome prior to 102.0.5005.61 allowed an attacker who convinced a user to install a malicious extension to bypass file system policy via a crafted HTML page. |
CVE-2022-1871
|
| VCID-dn29-32my-g7gq | Chromium: CVE-2021-30616 Use after free in Media |
CVE-2021-30616
|
| VCID-dqfd-8tgz-6ycg | Use after free in libavif in Google Chrome prior to 119.0.6045.199 allowed a remote attacker to potentially exploit heap corruption via a crafted avif file. (Chromium security severity: High) |
CVE-2023-6350
|
| VCID-dqh4-mc3t-c7em | Use after free in DevTools in Google Chrome prior to 92.0.4515.107 allowed an attacker who convinced a user to install a malicious extension to potentially exploit heap corruption via a crafted HTML page. |
CVE-2021-30576
|
| VCID-drf7-6cn7-vudd | Heap buffer overflow in Visuals in Google Chrome prior to 115.0.5790.170 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. (Chromium security severity: High) |
CVE-2023-4071
|
| VCID-dseg-dq9x-y7e5 | Inappropriate implementation in Web API Permission Prompts in Google Chrome prior to 115.0.5790.98 allowed a remote attacker to obfuscate security UI via a crafted HTML page. (Chromium security severity: Medium) |
CVE-2023-3735
|
| VCID-dwad-34y2-9ug2 | Use after free in WebXR in Google Chrome prior to 114.0.5735.133 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. (Chromium security severity: High) |
CVE-2023-3217
|
| VCID-dwcd-9d4t-5bbu | Heap buffer overflow in Browser History in Google Chrome prior to 112.0.5615.49 allowed a remote attacker who convinced a user to engage in specific UI interaction to potentially exploit heap corruption via a crafted HTML page. (Chromium security severity: Medium) |
CVE-2023-1820
|
| VCID-dxuy-691k-gfb3 | Use after free in Accessibility in Google Chrome on Chrome OS prior to 107.0.5304.62 allowed a remote attacker who convinced a user to engage in specific UI interactions to potentially exploit heap corruption via specific UI interactions. (Chromium security severity: Medium) |
CVE-2022-3659
|
| VCID-dz6g-q9rt-g7db | Use after free in Reading Mode in Google Chrome prior to 119.0.6045.105 allowed a remote attacker who convinced a user to engage in specific UI gestures to potentially exploit heap corruption via specific UI gestures. (Chromium security severity: Medium) |
CVE-2023-5855
|
| VCID-e3gs-wzkr-4bak | Inappropriate implementation in XML in Google Chrome prior to 107.0.5304.62 allowed a remote attacker to potentially perform an ASLR bypass via a crafted HTML page. (Chromium security severity: Low) |
CVE-2022-4909
|
| VCID-e3my-6yeb-1yhm | Type confusion in Blink layout in Google Chrome prior to 93.0.4577.82 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. |
CVE-2021-30627
|
| VCID-e56g-nz4j-qucu | Insufficient policy enforcement in File System API in Google Chrome prior to 112.0.5615.49 allowed a remote attacker to bypass filesystem restrictions via a crafted HTML page. (Chromium security severity: Medium) |
CVE-2023-2311
|
| VCID-e6v7-tpcv-mbhn | Use after free in Swiftshader in Google Chrome prior to 111.0.5563.64 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. (Chromium security severity: High) |
CVE-2023-1213
|
| VCID-e8cr-m11c-4fhf | Use after free in Guest View in Google Chrome prior to 113.0.5672.126 allowed an attacker who convinced a user to install a malicious extension to potentially exploit heap corruption via a crafted HTML page. (Chromium security severity: High) |
CVE-2023-2725
|
| VCID-efve-qx6h-8qha | Insufficient data validation in new tab page in Google Chrome prior to 96.0.4664.93 allowed a remote attacker to leak cross-origin data via a crafted HTML page. |
CVE-2021-4068
|
| VCID-eg9d-v2cx-efcr | Inappropriate implementation in Scroll in Google Chrome prior to 98.0.4758.80 allowed a remote attacker to leak cross-origin data via a crafted HTML page. |
CVE-2022-0462
|
| VCID-egaj-nsgs-p3hw | Insufficient policy enforcement in Safe Browsing in Google Chrome prior to 108.0.5359.71 allowed a remote attacker to bypass Safe Browsing warnings via a malicious file. (Chromium security severity: Medium) |
CVE-2022-4195
|
| VCID-egty-fhcb-eqam | Inappropriate implementation in Autofill in Google Chrome prior to 118.0.5993.70 allowed a remote attacker to leak cross-origin data via a crafted HTML page. (Chromium security severity: Low) |
CVE-2023-5478
|
| VCID-eh4f-k8r7-6yek | Use after free in ANGLE in Google Chrome prior to 120.0.6099.199 allowed a remote attacker who had compromised the renderer process to potentially exploit heap corruption via a crafted HTML page. (Chromium security severity: High) |
CVE-2024-0222
|
| VCID-ehde-vt8k-sbas | Chromium: CVE-2021-30621 UI Spoofing in Autofill |
CVE-2021-30621
|
| VCID-ehvd-erfj-gyfb | Use after free in MediaStream in Google Chrome prior to 116.0.5845.140 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. (Chromium security severity: High) |
CVE-2023-4572
|
| VCID-ek2j-tw7c-fqhf | Use after free in WebRTC in Google Chrome prior to 115.0.5790.98 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. (Chromium security severity: High) |
CVE-2023-3728
|
| VCID-endy-31yq-77a9 | Use after free in Vulkan in Google Chrome prior to 112.0.5615.49 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. (Chromium security severity: Medium) |
CVE-2023-1818
|
| VCID-eq3k-2whf-nbeu | Use after free in Blink in Google Chrome prior to 92.0.4515.107 allowed a remote attacker who had compromised the renderer process to perform arbitrary read/write via a crafted HTML page. (Chromium security severity: High) |
CVE-2021-4320
|
| VCID-eq7c-51mb-e7dv | Use after free in SplitScreen in Google Chrome on Chrome OS, Lacros prior to 105.0.5195.52 allowed a remote attacker who convinced a user to engage in specific UI interactions to potentially exploit heap corruption via a crafted HTML page. |
CVE-2022-3049
|
| VCID-eqxh-8bfg-a7gh | Use after free in Autofill UI in Google Chrome on Android prior to 113.0.5672.126 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. (Chromium security severity: High) |
CVE-2023-2722
|
| VCID-eqy5-3tp4-4ba2 | Inappropriate implementation in Full screen mode in Google Chrome on Android prior to 110.0.5481.77 allowed a remote attacker to spoof the contents of the security UI via a crafted HTML page. (Chromium security severity: High) |
CVE-2023-0697
|
| VCID-eshs-6x4b-dqft | Use after free in BFCache in Google Chrome prior to 100.0.4896.88 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. |
CVE-2022-1308
|
| VCID-esjm-braq-ebb9 | Use after free in Permissions in Google Chrome prior to 93.0.4577.82 allowed a remote attacker who had compromised the renderer process to potentially exploit heap corruption via a crafted HTML page. |
CVE-2021-30629
|
| VCID-etvq-kxdx-qffd | Heap buffer overflow in BFCache in Google Chrome prior to 96.0.4664.93 allowed a remote attacker who had compromised the renderer process to potentially exploit heap corruption via a crafted HTML page. |
CVE-2021-4062
|
| VCID-eu8t-jkcb-7qax | Use after free in Tab Strip in Google Chrome on Chrome OS prior to 104.0.5112.79 allowed a remote attacker who convinced a user to engage in specific user interactions to potentially exploit heap corruption via specific UI interactions. |
CVE-2022-2607
|
| VCID-eweg-kd3z-uyd9 | Use after free in Garbage Collection in Google Chrome prior to 119.0.6045.159 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. (Chromium security severity: High) |
CVE-2023-5997
|
| VCID-eyfp-u6w4-zuaz | Use after free in Loader in Google Chrome prior to 116.0.5845.110 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. (Chromium security severity: High) |
CVE-2023-4429
|
| VCID-eyx7-mfxx-q3du | Use after free in File Manager in Google Chrome prior to 100.0.4896.60 allowed a remote attacker who convinced a user to engage in specific user interaction to potentially exploit heap corruption via specific user gesture. |
CVE-2022-1141
|
| VCID-f1s9-wm7f-s3cm | Chromium: CVE-2021-30606 Use after free in Blink |
CVE-2021-30606
|
| VCID-f1yj-aayp-8ueu | Out of bounds read in DevTools in Google Chrome prior to 102.0.5005.61 allowed a remote attacker to perform an out of bounds memory read via specific user interaction. |
CVE-2022-1858
|
| VCID-f2yu-61mr-nfde | Use after free in WebRTC in Google Chrome prior to 97.0.4692.71 allowed a remote attacker who had compromised the renderer process to potentially perform a sandbox escape via a crafted HTML page. (Chromium security severity: High) |
CVE-2022-4924
|
| VCID-f45s-rjy3-ckgq | Use after free in Printing in Google Chrome prior to 92.0.4515.159 allowed a remote attacker who had compromised the renderer process to potentially exploit heap corruption via a crafted HTML page. |
CVE-2021-30600
|
| VCID-f4xt-5agg-vyb4 | Use after free in developer tools in Google Chrome prior to 96.0.4664.93 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. |
CVE-2021-4063
|
| VCID-f5m3-fres-q3ds | Use after free in UI Foundations in Google Chrome on Chrome OS prior to 102.0.5005.61 allowed a remote attacker who convinced a user to engage in specific user interaction to potentially exploit heap corruption via specific user interactions. |
CVE-2022-1860
|
| VCID-f7wp-sz9p-87hc | Use after free in Safe Browsing in Google Chrome prior to 98.0.4758.80 allowed a remote attacker to potentially perform a sandbox escape via a crafted HTML page. |
CVE-2022-0452
|
| VCID-f7y9-6rkx-9uck | Use after free in Data Transfer in Google Chrome on Chrome OS prior to 97.0.4692.99 allowed a remote attacker who convinced a user to engage in specific user interaction to potentially exploit heap corruption via a crafted HTML page. |
CVE-2022-0308
|
| VCID-f8xt-vca3-6kam | Use after free in ANGLE in Google Chrome prior to 99.0.4844.74 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. |
CVE-2022-0975
|
| VCID-fb8e-g6e3-13ac | Use after free in WebAudio in Google Chrome prior to 120.0.6099.199 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. (Chromium security severity: High) |
CVE-2024-0224
|
| VCID-fcbe-5rcn-h3dz | Use after free in Accessibility in Google Chrome prior to 98.0.4758.80 allowed a remote attacker who convinced a user to engage in specific user interaction to potentially exploit heap corruption via user interaction. |
CVE-2022-0464
|
| VCID-fcsm-hee2-p7ae | Type confusion in V8 Turbofan in Google Chrome prior to 100.0.4896.127 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. |
CVE-2022-1364
|
| VCID-fdz4-fxz3-c7d5 | Heap buffer overflow in Skia in Google Chrome prior to 116.0.5845.96 allowed a remote attacker who had compromised the renderer process to potentially exploit heap corruption via a crafted HTML page. (Chromium security severity: High) |
CVE-2023-4354
|
| VCID-ff5w-dq6k-u7cm | Out of bounds read and write in WebGL in Google Chrome prior to 115.0.5790.170 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. (Chromium security severity: High) |
CVE-2023-4072
|
| VCID-fgan-qnvq-t7cq | Type confusion in V8 in Google Chrome prior to 92.0.4515.159 allowed a remote attacker to execute arbitrary code inside a sandbox via a crafted HTML page. |
CVE-2021-30598
|
| VCID-fgv3-ebzy-8beh | Policy bypass in COOP in Google Chrome prior to 98.0.4758.80 allowed a remote attacker to bypass iframe sandbox via a crafted HTML page. |
CVE-2022-0461
|
| VCID-fkdm-3p4q-nfem | Use after free in Cart in Google Chrome prior to 109.0.5414.74 allowed an attacker who convinced a user to install a malicious extension to potentially exploit heap corruption via database corruption and a crafted HTML page. (Chromium security severity: Medium) |
CVE-2023-0135
|
| VCID-fkwa-zqgr-fbd7 | Inappropriate implementation in WebApp Installs in Google Chrome prior to 115.0.5790.98 allowed a remote attacker to potentially spoof the contents of the Omnibox (URL bar) via a crafted HTML page. (Chromium security severity: Medium) |
CVE-2023-3733
|
| VCID-fnt1-sr8q-3kha | Use after free in Sharing in Google Chrome on Mac prior to 101.0.4951.41 allowed a remote attacker who convinced a user to engage in specific user interaction to potentially exploit heap corruption via a crafted HTML page. |
CVE-2022-1481
|
| VCID-fqev-t45f-ykfc | Use after free in Accessibility in Google Chrome prior to 99.0.4844.51 allowed a remote attacker who convinced a user to engage in specific UI gestures to perform arbitrary read/write via a crafted HTML page. (Chromium security severity: Low) |
CVE-2022-4921
|
| VCID-fr92-vcw1-37c3 | Uninitialized use in Media in Google Chrome prior to 92.0.4515.107 allowed a remote attacker to perform out of bounds memory access via a crafted HTML page. |
CVE-2021-30578
|
| VCID-frnc-89nu-qqd6 | Use after free in Blink in Google Chrome prior to 120.0.6099.109 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. (Chromium security severity: High) |
CVE-2023-6703
|
| VCID-fu6v-tra3-ruf1 | Insufficient validation of untrusted input in QUIC in Google Chrome prior to 97.0.4692.71 allowed a remote attacker to perform header splitting via malicious network traffic. (Chromium security severity: Low) |
CVE-2022-4925
|
| VCID-fwxq-st1y-p3f2 | Integer underflow in ANGLE in Google Chrome prior to 96.0.4664.93 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. |
CVE-2021-4066
|
| VCID-fxgu-ragu-r7cw | Type Confusion in V8 in Google Chrome prior to 91.0.4472.164 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. |
CVE-2021-30563
|
| VCID-g24x-czar-x3fw | Insufficient data validation in File System API in Google Chrome prior to 106.0.5249.62 allowed a remote attacker to bypass File System restrictions via a crafted HTML page and malicious file. (Chromium security severity: Low) |
CVE-2022-3444
|
| VCID-g5m4-naf3-ffbx | Use after free in Custom Elements in Google Chrome prior to 106.0.5249.91 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. (Chromium security severity: High) |
CVE-2022-3370
|
| VCID-g7hc-4pvt-mbbf | Use after free in ANGLE in Google Chrome prior to 102.0.5005.61 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. |
CVE-2022-1854
|
| VCID-g9sj-jnjd-yfch | Use after free in Blink Media in Google Chrome prior to 108.0.5359.124 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. (Chromium security severity: High) |
CVE-2022-4436
|
| VCID-g9u8-bzb2-hba2 | Use after free in DevTools in Google Chrome prior to 113.0.5672.126 allowed a remote attacker who had compromised the renderer process to potentially exploit heap corruption via a crafted HTML page. (Chromium security severity: High) |
CVE-2023-2723
|
| VCID-gb2z-ng41-d7du | Use after free in WebAuthentication in Google Chrome on Android prior to 91.0.4472.77 allowed a remote attacker who had compromised the renderer process of a user who had saved a credit card in their Google account to potentially exploit heap corruption via a crafted HTML page. |
CVE-2021-30528
|
| VCID-gbqg-294r-afcm | Out of bounds memory access in ANGLE in Google Chrome on Mac prior to 115.0.5790.170 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. (Chromium security severity: High) |
CVE-2023-4073
|
| VCID-gcfu-xu3t-vbbg | Stack buffer overflow in Crash reporting in Google Chrome on Windows prior to 111.0.5563.64 allowed a remote attacker who had compromised the renderer process to obtain potentially sensitive information from process memory via a crafted HTML page. (Chromium security severity: High) |
CVE-2023-1217
|
| VCID-gd4x-g71n-8yg3 | Use after free in shell in Google Chrome on ChromeOS prior to 100.0.4896.88 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. |
CVE-2022-1311
|
| VCID-gg3u-6umq-jbeb | Heap buffer overflow in GPU in Google Chrome prior to 99.0.4844.74 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. |
CVE-2022-0976
|
| VCID-gg6x-m2wd-nqcn | Heap buffer overflow in Cast UI in Google Chrome prior to 99.0.4844.51 allowed a remote attacker who convinced a user to engage in specific user interaction to potentially exploit heap corruption via a crafted HTML page. |
CVE-2022-0800
|
| VCID-gh9e-94h2-zqha | Use after free in Bookmarks in Google Chrome prior to 101.0.4951.41 allowed a remote attacker to potentially exploit heap corruption via specific and direct user interaction. |
CVE-2022-1491
|
| VCID-gj77-wrzw-dbe3 | Use after free in Frames in Google Chrome prior to 105.0.5195.125 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. (Chromium security severity: High) |
CVE-2022-3199
|
| VCID-gjxs-hztk-dqha | Use after free in WebProtect in Google Chrome prior to 111.0.5563.110 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. (Chromium security severity: High) |
CVE-2023-1533
|
| VCID-gk3w-t4zn-8yc6 | Inappropriate implementation in Notifications in Google Chrome prior to 115.0.5790.98 allowed a remote attacker to spoof the contents of media notifications via a crafted HTML page. (Chromium security severity: Medium) |
CVE-2023-3737
|
| VCID-gkhh-2vxg-9udd | Insufficient data validation in Extensions in Google Chrome prior to 120.0.6099.216 allowed an attacker in a privileged network position to install a malicious extension via a crafted HTML page. (Chromium security severity: High) |
CVE-2024-0333
|
| VCID-gn3z-4htu-6ybm | Inappropriate implementation in V8 in Google Chrome prior to 95.0.4638.69 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. |
CVE-2021-38003
|
| VCID-gqhg-zw6u-yyax | Out of bounds memory access in Mojo in Google Chrome prior to 114.0.5735.90 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. (Chromium security severity: High) |
CVE-2023-2934
|
| VCID-gqva-ugy6-xka2 | Insufficient policy enforcement in Extensions API in Google Chrome prior to 111.0.5563.64 allowed an attacker who convinced a user to install a malicious extension to bypass navigation restrictions via a crafted Chrome Extension. (Chromium security severity: Medium) |
CVE-2023-1221
|
| VCID-gtax-78py-dkf9 | Heap buffer overflow in WebSQL in Google Chrome prior to 106.0.5249.119 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. (Chromium security severity: High) |
CVE-2022-3446
|
| VCID-guga-1ddk-6fdg | Out of bounds read in WebRTC in Google Chrome prior to 110.0.5481.77 allowed a remote attacker to perform an out of bounds memory read via a crafted HTML page. (Chromium security severity: High) |
CVE-2023-0698
|
| VCID-guzd-h35a-ykfw | Use after free in ANGLE in Google Chrome prior to 96.0.4664.93 allowed a remote attacker to perform arbitrary read/write via a crafted HTML page. (Chromium security severity: High) |
CVE-2021-4317
|
| VCID-gx2k-ymf8-3fdr | Insufficient policy enforcement in Autofill in Google Chrome prior to 117.0.5938.62 allowed a remote attacker to bypass Autofill restrictions via a crafted HTML page. (Chromium security severity: Low) |
CVE-2023-4906
|
| VCID-gx5w-pfjw-s7aw | Out of bounds memory access in Blink Serial API in Google Chrome prior to 97.0.4692.71 allowed a remote attacker to perform an out of bounds memory read via a crafted HTML page and virtual serial port driver. |
CVE-2022-0114
|
| VCID-gywh-84j5-rqd7 | Use after free in WebRTC in Google Chrome prior to 91.0.4472.77 allowed a remote attacker to potentially exploit heap corruption via a crafted SCTP packet. |
CVE-2021-30523
|
| VCID-gzp5-htqr-3bhc | Use after free in Printing in Google Chrome prior to 97.0.4692.99 allowed a remote attacker who convinced the user to engage is specific user interactions to potentially exploit heap corruption via a crafted HTML page. |
CVE-2022-0296
|
| VCID-h1qd-enzf-jka7 | Use after free in WebGL in Google Chrome prior to 91.0.4472.114 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. |
CVE-2021-30554
|
| VCID-h21z-yg8k-hkf4 | Insufficient policy enforcement in contacts picker in Google Chrome on Android prior to 96.0.4664.45 allowed a remote attacker to spoof the contents of the Omnibox (URL bar) via a crafted HTML page. |
CVE-2021-38020
|
| VCID-h658-rd7t-c7cv | multiple issues |
CVE-2021-37967
|
| VCID-h929-zv1c-x3c3 | Use after free in Extensions in Google Chrome prior to 107.0.5304.62 allowed an attacker who convinced a user to install a malicious extension to potentially exploit heap corruption via a crafted Chrome Extension. (Chromium security severity: Medium) |
CVE-2022-3657
|
| VCID-h9y1-h6jh-dkef | multiple issues |
CVE-2021-37990
|
| VCID-hbeq-f721-1qh9 | multiple issues |
CVE-2021-30511
|
| VCID-hdkn-h754-5ya2 | Heap buffer overflow in Exosphere in Google Chrome on Chrome OS, Lacros prior to 105.0.5195.52 allowed a remote attacker who convinced a user to engage in specific UI interactions to potentially exploit heap corruption via crafted UI interactions. |
CVE-2022-3051
|
| VCID-hf67-y6tb-jkc5 | Type confusion in V8 in Google Chrome prior to 100.0.4896.75 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. |
CVE-2022-1232
|
| VCID-hf8g-pw96-3yfv | Inappropriate implementation in Animation in Google Chrome prior to 92.0.4515.107 allowed a remote attacker to leak cross-origin data via a crafted HTML page. |
CVE-2021-30582
|
| VCID-hfaw-1hqz-kyaf | Use after free in Side Panel Search in Google Chrome prior to 120.0.6099.62 allowed a remote attacker who convinced a user to engage in specific UI interaction to potentially exploit heap corruption via specific UI interaction. (Chromium security severity: High) |
CVE-2023-6509
|
| VCID-hg8n-syt1-9bae | Chromium: CVE-2021-30609 Use after free in Sign-In |
CVE-2021-30609
|
| VCID-hgxr-9g62-pycr | Type confusion in V8 in Google Chrome prior to 97.0.4692.71 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. |
CVE-2022-0102
|
| VCID-hj7m-nzrm-9kee | Insufficient validation of untrusted input in File in Google Chrome on Android prior to 103.0.5060.134 allowed an attacker who convinced a user to install a malicious app to obtain potentially sensitive information from internal file directories via a crafted HTML page. |
CVE-2022-2479
|
| VCID-hj8d-teap-b7d3 | Inappropriate implementation in PictureInPicture in Google Chrome prior to 113.0.5672.63 allowed an attacker who convinced a user to install a malicious extension to perform an origin spoof in the security UI via a crafted HTML page. (Chromium security severity: Medium) |
CVE-2023-2464
|
| VCID-hkr3-khtq-3ubg | multiple issues |
CVE-2021-4101
|
| VCID-hms3-6cn2-r7hc | Insufficient policy enforcement in cookies in Google Chrome prior to 91.0.4472.77 allowed a remote attacker to bypass cookie policy via a crafted HTML page. |
CVE-2021-30537
|
| VCID-hpu3-yuya-j7dj | Out of bounds memory access in V8 in Google Chrome prior to 120.0.6099.224 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. (Chromium security severity: High) |
CVE-2024-0519
|
| VCID-hw7f-zdz6-dyc3 | Incorrect security UI in Autofill in Google Chrome prior to 97.0.4692.71 allowed a remote attacker to spoof the contents of the Omnibox (URL bar) via a crafted HTML page. |
CVE-2022-0110
|
| VCID-hxw7-aaqh-ryax | Type confusion in V8 in Google Chrome prior to 103.0.5060.53 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. |
CVE-2022-2158
|
| VCID-hxwk-jgxj-eqep | Insufficient validation of untrusted input in Downloads in Google Chrome on Windows prior to 109.0.5414.74 allowed a remote attacker to bypass download restrictions via a crafted HTML page. (Chromium security severity: Low) |
CVE-2023-0139
|
| VCID-hyuw-9hyk-1fhc | Inappropriate implementation in Fullscreen in Google Chrome on Android prior to 116.0.5845.96 allowed a remote attacker to potentially spoof the contents of the Omnibox (URL bar) via a crafted HTML page. (Chromium security severity: High) |
CVE-2023-4350
|
| VCID-j1xd-62k9-pyb5 | Insufficient policy enforcement in DevTools in Google Chrome prior to 105.0.5195.52 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. |
CVE-2022-3054
|
| VCID-j5dw-fn11-byf8 | Heap buffer overflow in WebUI in Google Chrome on Chrome OS prior to 105.0.5195.52 allowed a remote attacker who convinced a user to engage in specific UI interactions to potentially exploit heap corruption via crafted UI interactions. |
CVE-2022-3050
|
| VCID-j77p-x3ba-gkak | Insufficient policy enforcement in developer tools in Google Chrome prior to 106.0.5249.62 allowed a remote attacker to potentially perform a sandbox escape via a crafted HTML page. (Chromium security severity: Medium) |
CVE-2022-3308
|
| VCID-j7m3-baw4-vyeu | Use after free in Passwords in Google Chrome prior to 111.0.5563.110 allowed a remote attacker who had compromised the renderer process to potentially exploit heap corruption via a crafted HTML page. (Chromium security severity: High) |
CVE-2023-1528
|
| VCID-j7qm-n3yk-p3f6 | Inappropriate implementation in Extensions in Google Chrome prior to 102.0.5005.61 allowed an attacker who convinced a user to install a malicious extension to bypass profile restrictions via a crafted HTML page. |
CVE-2022-1862
|
| VCID-j88y-gfap-fqbn | Heap buffer overflow in Crashpad in Google Chrome on Android prior to 107.0.5304.106 allowed a remote attacker who had compromised the renderer process to potentially perform a sandbox escape via a crafted HTML page. (Chromium security severity: High) |
CVE-2022-3890
|
| VCID-j8d7-spvx-u7d8 | Type confusion in Blink in Google Chrome prior to 106.0.5249.62 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. (Chromium security severity: Low) |
CVE-2022-3315
|
| VCID-j8v6-td95-1yfu | Use after free in Selection API in Google Chrome prior to 93.0.4577.82 allowed a remote attacker who convinced the user the visit a malicious website to potentially exploit heap corruption via a crafted HTML page. |
CVE-2021-30625
|
| VCID-j8ye-u9mx-cqen | Type confusion in CSS in Google Chrome prior to 111.0.5563.64 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. (Chromium security severity: High) |
CVE-2023-1215
|
| VCID-j94y-vggf-4ff6 | Use after free in Web Payments API in Google Chrome on Android prior to 110.0.5481.177 allowed a remote attacker who had compromised the renderer process to potentially exploit heap corruption via a crafted HTML page. (Chromium security severity: High) |
CVE-2023-0927
|
| VCID-je55-h24j-gqan | Inappropriate implementation in WebShare in Google Chrome prior to 97.0.4692.71 allowed a remote attacker to potentially hide the contents of the Omnibox (URL bar) via a crafted HTML page. |
CVE-2022-0118
|
| VCID-jj1q-43kn-73ap | Inappropriate implementation in Web Contents in Google Chrome prior to 101.0.4951.64 allowed a remote attacker to leak cross-origin data via a crafted HTML page. |
CVE-2022-1637
|
| VCID-jm3x-1b3n-tbh2 | Use after free in WebUI in Google Chrome on Chrome OS prior to 104.0.5112.79 allowed a remote attacker who convinced a user to engage in specific user interactions to potentially exploit heap corruption via specific UI interactions. |
CVE-2022-2620
|
| VCID-jn5b-5sjt-xff5 | Use after free in File Manager in Google Chrome on Chrome OS prior to 98.0.4758.102 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. |
CVE-2022-0603
|
| VCID-jr8k-4342-cke1 | Type Confusion in V8 in Google Chrome prior to 116.0.5845.179 allowed a remote attacker to execute arbitrary code via a crafted HTML page. (Chromium security severity: High) |
CVE-2023-4762
|
| VCID-jrfu-h6au-bke8 | Inappropriate implementation in Downloads in Google Chrome prior to 114.0.5735.90 allowed an attacker who convinced a user to install a malicious extension to bypass file access restrictions via a crafted HTML page. (Chromium security severity: Medium) |
CVE-2023-2940
|
| VCID-jrsu-vs1y-k7ad | Insufficient data validation in Permission Prompts in Google Chrome prior to 117.0.5938.62 allowed an attacker who convinced a user to install a malicious app to potentially perform a sandbox escape via a malicious file. (Chromium security severity: Medium) |
CVE-2023-7012
|
| VCID-jvzc-5juf-xycg | Use after free in Managed devices API in Google Chrome prior to 104.0.5112.79 allowed a remote attacker who convinced a user to enable a specific Enterprise policy to potentially exploit heap corruption via a crafted HTML page. |
CVE-2022-2606
|
| VCID-jye6-cu16-zuaa | Insufficient data validation in USB in Google Chrome prior to 119.0.6045.105 allowed a remote attacker to perform out of bounds memory access via a crafted HTML page. (Chromium security severity: High) |
CVE-2023-5482
|
| VCID-jzd7-8msn-ruem | Insufficient policy enforcement in Android intents in Google Chrome prior to 92.0.4515.107 allowed an attacker who convinced a user to install a malicious application to obtain potentially sensitive information via a crafted HTML page. |
CVE-2021-30580
|
| VCID-jzss-rngk-tbge | Type confusion in V8 in Google Chrome prior to 100.0.4896.60 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. |
CVE-2022-1134
|
| VCID-k15v-4s6b-byf9 | Use after free in autofill in Google Chrome prior to 96.0.4664.93 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. |
CVE-2021-4065
|
| VCID-k59j-6zze-uqcu | multiple issues |
CVE-2021-37963
|
| VCID-k6b6-h11p-aycv | Insufficient policy enforcement in DevTools in Google Chrome prior to 110.0.5481.77 allowed a remote attacker to bypass same origin policy and proxy settings via a crafted HTML page. (Chromium security severity: Low) |
CVE-2023-0704
|
| VCID-k72c-q67k-jyf7 | Use after free in Browser Creation in Google Chrome prior to 104.0.5112.101 allowed a remote attacker who had convinced a user to engage in a specific UI interaction to potentially exploit heap corruption via a crafted HTML page. |
CVE-2022-2998
|
| VCID-k8nj-zfvu-3qek | Use after free in Skia in Google Chrome prior to 106.0.5249.119 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. (Chromium security severity: High) |
CVE-2022-3445
|
| VCID-k91g-sfe4-xbeh | Use after free in PDF in Google Chrome prior to 114.0.5735.90 allowed a remote attacker to potentially exploit heap corruption via a crafted PDF file. (Chromium security severity: High) |
CVE-2023-2933
|
| VCID-k9kz-8z7a-bqg7 | Use after free in App Service in Google Chrome prior to 102.0.5005.61 allowed an attacker who convinced a user to install a malicious extension to potentially exploit heap corruption via a crafted Chrome Extension. |
CVE-2022-1870
|
| VCID-k9nc-9qj9-t3am | Out of bounds memory access in FedCM in Google Chrome prior to 116.0.5845.179 allowed a remote attacker who had compromised the renderer process to perform an out of bounds memory read via a crafted HTML page. (Chromium security severity: High) |
CVE-2023-4761
|
| VCID-k9pt-htf4-yyg3 | Use after free in Omnibox in Google Chrome prior to 97.0.4692.99 allowed an attacker who convinced a user to engage in specific user interactions to potentially exploit heap corruption via a crafted HTML page. |
CVE-2022-0302
|
| VCID-ka5y-r4nf-7qfd | Insufficient validation of untrusted input in Intents in Google Chrome on Android prior to 104.0.5112.101 allowed a remote attacker to arbitrarily browse to a malicious website via a crafted HTML page. |
CVE-2022-2856
|
| VCID-ka9q-zqus-cybj | Inappropriate implementation in Fenced Frames in Google Chrome prior to 108.0.5359.71 allowed a remote attacker to bypass fenced frame restrictions via a crafted HTML page. (Chromium security severity: Medium) |
CVE-2022-4182
|
| VCID-kaf3-cqgd-tqgj | Inappropriate implementation in HTML parser in Google Chrome prior to 99.0.4844.51 allowed a remote attacker to bypass XSS preventions via a crafted HTML page. (Chrome security severity: Medium) |
CVE-2022-0801
|
| VCID-kbs2-yqgu-dubm | Use after free in WebGPU in Google Chrome prior to 100.0.4896.88 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. |
CVE-2022-2399
|
| VCID-kc2r-aesw-7qg9 | Integer overflow in Window Manager in Google Chrome on Chrome OS and Lacros prior to 104.0.5112.79 allowed a remote attacker who convinced a user to engage in specific UI interactions to perform an out of bounds memory write via crafted UI interactions. (Chrome security severity: High) |
CVE-2022-2743
|
| VCID-kc7q-gv91-pfa8 | Heap buffer overflow in WebGL in Google Chrome prior to 92.0.4515.107 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. |
CVE-2021-30568
|
| VCID-kh3s-nnpj-wugd | Type Confusion in Spellcheck in Google Chrome prior to 119.0.6045.199 allowed a remote attacker who had compromised the renderer process to potentially exploit heap corruption via a crafted HTML page. (Chromium security severity: High) |
CVE-2023-6348
|
| VCID-khds-5r2m-x7bx | Uninitialized use in File API in Google Chrome prior to 97.0.4692.71 allowed a remote attacker to potentially perform out of bounds memory access via a crafted HTML page. |
CVE-2022-0115
|
| VCID-knqg-53gw-6ubg | Insufficient data validation in Extensions in Google Chrome prior to 120.0.6099.62 allowed a remote attacker to perform privilege escalation via a crafted Chrome Extension. (Chromium security severity: Low) |
CVE-2024-3175
|
| VCID-kntc-azyg-abhv | Stack buffer overflow in Printing in Google Chrome prior to 92.0.4515.107 allowed a remote attacker who had compromised the renderer process to potentially exploit stack corruption via a crafted HTML page. |
CVE-2021-30566
|
| VCID-kq6k-uf65-67hs | Chromium: CVE-2021-30612 Use after free in WebRTC |
CVE-2021-30612
|
| VCID-kqy3-rbta-z3a6 | Inappropriate implementation in Prompts in Google Chrome prior to 113.0.5672.63 allowed a remote attacker to spoof the contents of the security UI via a crafted HTML page. (Chromium security severity: Low) |
CVE-2023-2466
|
| VCID-ksq8-xhkb-kbbu | Type confusion in V8 in Google Chrome prior to 107.0.5304.62 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. (Chromium security severity: High) |
CVE-2022-3652
|
| VCID-kvrz-mrff-6bff | Inappropriate implementation in Web Cursor in Google Chrome prior to 100.0.4896.60 allowed a remote attacker who had compromised the renderer process to obscure the contents of the Omnibox (URL bar) via a crafted HTML page. |
CVE-2022-1138
|
| VCID-kvz2-4zcq-g7c7 | Type confusion in V8 in Google Chrome prior to 100.0.4896.88 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. |
CVE-2022-1314
|
| VCID-kw7c-xf48-8bdw | Incorrect security UI in Picture In Picture in Google Chrome prior to 119.0.6045.105 allowed a remote attacker to perform domain spoofing via a crafted local HTML page. (Chromium security severity: Low) |
CVE-2023-5859
|
| VCID-ky96-jap7-h3ab | Out of bounds write in Tab Groups in Google Chrome on Linux and ChromeOS prior to 92.0.4515.107 allowed an attacker who convinced a user to install a malicious extension to perform an out of bounds memory write via a crafted HTML page. |
CVE-2021-30565
|
| VCID-kyd7-g1rr-53gu | Inappropriate implementation in Paint in Google Chrome prior to 98.0.4758.80 allowed a remote attacker to leak cross-origin data outside an iframe via a crafted HTML page. (Chrome security severity: Low) |
CVE-2022-4025
|
| VCID-kyy3-zyrp-2ueg | Inappropriate implementation in Extensions API in Google Chrome prior to 103.0.5060.53 allowed an attacker who convinced a user to install a malicious extension to bypass discretionary access control via a crafted HTML page. |
CVE-2022-2164
|
| VCID-kzte-2heg-p7ew | multiple issues |
CVE-2021-30509
|
| VCID-m2m2-eqf7-k3df | Use after free in TabStrip in Google Chrome prior to 91.0.4472.77 allowed an attacker who convinced a user to install a malicious extension to potentially exploit heap corruption via a crafted HTML page. |
CVE-2021-30524
|
| VCID-m3j8-d8wa-1qcz | Use after free in WebGPU in Google Chrome prior to 102.0.5005.115 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. |
CVE-2022-2007
|
| VCID-m83r-5d9h-9uhg | Data leak in Canvas in Google Chrome prior to 99.0.4844.51 allowed a remote attacker who convinced a user to engage in screen sharing to potentially leak cross-origin data via a crafted HTML page. |
CVE-2022-0806
|
| VCID-m84q-4hb5-c7ap | Heap buffer overflow in ANGLE in Google Chrome prior to 96.0.4664.93 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. |
CVE-2021-4058
|
| VCID-m8dx-npvg-fug9 | Use after free in Service Worker API in Google Chrome prior to 103.0.5060.134 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. |
CVE-2022-2480
|
| VCID-mb9m-md9z-1qe8 | multiple issues |
CVE-2021-38001
|
| VCID-mdeg-wnf7-73a6 | Inappropriate implementation in Downloads in Google Chrome prior to 119.0.6045.105 allowed a remote attacker to potentially execute arbitrary code via a malicious file. (Chromium security severity: Medium) |
CVE-2023-5857
|
| VCID-mj9e-cjx1-rqah | Type confusion in V8 in Google Chrome prior to 108.0.5359.94 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. (Chromium security severity: High) |
CVE-2022-4262
|
| VCID-mk59-h995-d7d6 | Policy bypass in Blink in Google Chrome prior to 91.0.4472.77 allowed a remote attacker to bypass content security policy via a crafted HTML page. (Chromium security severity: Low) |
CVE-2021-4321
|
| VCID-mm39-9dwp-jkfu | Use after free in PDF in Google Chrome prior to 103.0.5060.134 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. |
CVE-2022-2478
|
| VCID-mqjf-4xg4-u3bv | Policy bypass in Blink in Google Chrome prior to 97.0.4692.71 allowed a remote attacker to leak cross-origin data via a crafted HTML page. |
CVE-2022-0117
|
| VCID-mqjn-cmwt-5bht | Use after free in Sharing in Google Chrome on Chrome OS prior to 102.0.5005.61 allowed a remote attacker who convinced a user to enage in specific user interactions to potentially exploit heap corruption via specific user interaction. |
CVE-2022-1861
|
| VCID-mr6f-eenj-bbea | Integer overflow in Skia in Google Chrome prior to 119.0.6045.199 allowed a remote attacker who had compromised the renderer process to potentially perform a sandbox escape via a malicious file. (Chromium security severity: High) |
CVE-2023-6345
|
| VCID-muny-v969-1kdd | Inappropriate implementation in Blink in Google Chrome prior to 93.0.4577.82 allowed a remote attacker who had compromised the renderer process to leak cross-origin data via a crafted HTML page. |
CVE-2021-30630
|
| VCID-mvew-x9jx-tbcj | multiple issues |
CVE-2021-38004
|
| VCID-mwxj-fny2-tkd3 | Use after free in WebAudio in Google Chrome prior to 119.0.6045.123 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. (Chromium security severity: High) |
CVE-2023-5996
|
| VCID-mygg-7sm2-dyfb | Inappropriate implementation in Blink in Google Chrome prior to 99.0.4844.51 allowed a remote attacker to perform UI spoofing via a crafted HTML page. (Chromium security severity: Medium) |
CVE-2022-4922
|
| VCID-myrv-rgn7-5fdy | Insufficient validation of untrusted input in Downloads in Google Chrome prior to 108.0.5359.71 allowed an attacker who convinced a user to install a malicious extension to bypass Downloads restrictions via a crafted HTML page. (Chromium security severity: Medium) |
CVE-2022-4186
|
| VCID-n28e-wk3b-ekfx | Heap buffer overflow in WebRTC in Google Chrome prior to 120.0.6099.129 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. (Chromium security severity: High) |
CVE-2023-7024
|
| VCID-n5hy-aj1a-qybj | Double free in WebGL in Google Chrome prior to 102.0.5005.115 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. |
CVE-2022-2008
|
| VCID-n6z1-mmt5-5qaj | Insufficient policy enforcement in Downloads in Google Chrome prior to 117.0.5938.62 allowed a remote attacker to bypass Enterprise policy restrictions via a crafted download. (Chromium security severity: Medium) |
CVE-2023-4904
|
| VCID-n71r-mq4z-dugv | Use after free in Messaging in Google Chrome prior to 102.0.5005.61 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. |
CVE-2022-1855
|
| VCID-n7er-gmws-3udn | Use after free in Autofill payments in Google Chrome prior to 114.0.5735.133 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. (Chromium security severity: Critical) |
CVE-2023-3214
|
| VCID-n7vu-va8v-qycr | Inappropriate implementation in Fenced Frames in Google Chrome prior to 97.0.4692.99 allowed a remote attacker who had compromised the renderer process to bypass navigation restrictions via a crafted HTML page. |
CVE-2022-0292
|
| VCID-n9cg-eb2w-pqbz | Use after free in Input in Google Chrome on Chrome OS prior to 104.0.5112.79 allowed a remote attacker who convinced a user to enage in specific user interactions to potentially exploit heap corruption via specific UI interactions. |
CVE-2022-2613
|
| VCID-n9qv-321c-zyft | Inappropriate implementation in Extensions API in Google Chrome prior to 101.0.4951.41 allowed an attacker who convinced a user to install a malicious extension to leak cross-origin data via a crafted Chrome Extension. |
CVE-2022-1488
|
| VCID-ncrb-d6nv-ekcf | Inappropriate implementation in full screen in Google Chrome on Android prior to 100.0.4896.88 allowed a remote attacker to spoof the contents of the Omnibox (URL bar) via a crafted HTML page. |
CVE-2022-1307
|
| VCID-nk86-xkfz-s7gj | Use after free in Indexed DB API in Google Chrome prior to 93.0.4577.82 allowed a remote attacker who had compromised the renderer process to potentially perform a sandbox escape via a crafted HTML page. |
CVE-2021-30633
|
| VCID-npca-8vdx-pfcj | Use after free in media in Google Chrome prior to 96.0.4664.45 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. |
CVE-2021-38008
|
| VCID-nphk-y8wd-gyfp | Use after free in Web UI Diagnostics in Google Chrome on Chrome OS prior to 101.0.4951.64 allowed a remote attacker who convinced a user to engage in specific UI interactions to potentially exploit heap corruption via specific user interaction. |
CVE-2022-1641
|
| VCID-nrc5-eujj-1fgg | Insufficient policy enforcement in Intents in Google Chrome on Android prior to 112.0.5615.49 allowed a remote attacker to bypass navigation restrictions via a crafted HTML page. (Chromium security severity: Medium) |
CVE-2023-1817
|
| VCID-nrhk-ygby-tyfd | Out of bounds memory access in CSS in Google Chrome prior to 116.0.5845.110 allowed a remote attacker to perform an out of bounds memory read via a crafted HTML page. (Chromium security severity: High) |
CVE-2023-4428
|
| VCID-nrz6-61ez-bkh5 | Type confusion in Blink Layout in Google Chrome prior to 99.0.4844.51 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. |
CVE-2022-0795
|
| VCID-nsg5-3rnw-aqfm | Inappropriate implementation in Navigation in Google Chrome prior to 118.0.5993.70 allowed a remote attacker to spoof security UI via a crafted HTML page. (Chromium security severity: Medium) |
CVE-2023-5484
|
| VCID-nues-94fz-jqay | Use after free in Page Info UI in Google Chrome prior to 92.0.4515.131 allowed a remote attacker to potentially exploit heap corruption via physical access to the device. |
CVE-2021-30594
|
| VCID-nuj7-2w3y-yfd4 | Incorrect security UI in Browser UI in Google Chrome prior to 97.0.4692.71 allowed a remote attacker to display missing URL or incorrect URL via a crafted URL. |
CVE-2022-0112
|
| VCID-nv7z-7dw1-hffm | Use after free in WebSQL in Google Chrome prior to 105.0.5195.52 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. |
CVE-2022-3041
|
| VCID-nxj8-8ryz-1bb4 | Insufficient policy enforcement in content security policy in Google Chrome prior to 91.0.4472.77 allowed a remote attacker to bypass content security policy via a crafted HTML page. (Chrome security severity: Medium) |
CVE-2021-30558
|
| VCID-nyvj-tn5u-mfb8 | Use after free in Mojo in Google Chrome prior to 108.0.5359.71 allowed a remote attacker who had compromised the renderer process to potentially exploit heap corruption via a crafted HTML page. (Chromium security severity: High) |
CVE-2022-4178
|
| VCID-nzmk-mxpy-kfbm | multiple issues |
CVE-2021-37966
|
| VCID-p1r3-1mtv-f3c5 | Use after free in Optimization Guide in Google Chrome prior to 97.0.4692.99 allowed a remote attacker who convinced a user to engage in specific user interaction to potentially exploit heap corruption via a crafted HTML page. |
CVE-2022-0307
|
| VCID-p2ds-krcu-dfat | Use after free in Core in Google Chrome prior to 103.0.5060.53 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. |
CVE-2022-2156
|
| VCID-p2x5-bcxe-3fcp | multiple issues |
CVE-2021-4099
|
| VCID-p4mh-6p4f-vyc2 | Use after free in Window Dialogue in Google Chrome prior to 98.0.4758.80 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. |
CVE-2022-0460
|
| VCID-p6x3-jkhq-tyby | Inappropriate implementation in Autofill in Google Chrome prior to 118.0.5993.70 allowed a remote attacker to bypass autofill restrictions via a crafted HTML page. (Chromium security severity: Low) |
CVE-2023-5485
|
| VCID-p7rt-tg5t-63c7 | Type confusion in V8 in Google Chrome prior to 120.0.6099.109 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. (Chromium security severity: High) |
CVE-2023-6702
|
| VCID-p8e4-whbg-fyh5 | Use after free in Networking APIs in Google Chrome prior to 112.0.5615.49 allowed a remote attacker who convinced a user to engage in specific UI interaction to potentially exploit heap corruption via a crafted HTML page. (Chromium security severity: Medium) |
CVE-2023-1815
|
| VCID-pa34-fm7s-wych | Use after free in Text Input Method Editor in Google Chrome on Android prior to 97.0.4692.99 allowed a remote attacker who convinced a user to engage in specific user interactions to potentially exploit heap corruption via a crafted HTML page. |
CVE-2022-0300
|
| VCID-pb4r-14md-ckbn | Heap buffer overflow in Media Galleries in Google Chrome prior to 107.0.5304.62 allowed an attacker who convinced a user to install a malicious extension to potentially exploit heap corruption via a crafted HTML page. (Chromium security severity: Medium) |
CVE-2022-3655
|
| VCID-pbxn-63nn-pke5 | Heap buffer overflow in WebUI in Google Chrome prior to 100.0.4896.60 allowed a remote attacker who convinced a user to engage in specific user interaction to potentially exploit heap corruption via specific input into DevTools. |
CVE-2022-1143
|
| VCID-pc6n-u52r-83b2 | Type confusion in V8 in Google Chrome prior to 120.0.6099.224 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. (Chromium security severity: High) |
CVE-2024-0518
|
| VCID-pd7y-9a77-pfck | Use after free in Accessibility in Google Chrome prior to 91.0.4472.101 allowed an attacker who convinced a user to install a malicious extension to potentially exploit heap corruption via a crafted HTML page. |
CVE-2021-30550
|
| VCID-pddx-dpsv-1uhq | multiple issues |
CVE-2021-4100
|
| VCID-pe8x-79nr-3qg4 | Opening a malicious WebP image could lead to a heap buffer overflow in the content process. We are aware of this issue being exploited in other products in the wild. *Note: This advisory was previously also tracked as CVE-2023-5129.* |
CVE-2023-4863
GHSA-j7hp-h8jx-5ppr |
| VCID-pejb-qsnk-6kgh | Heap buffer overflow in libphonenumber in Google Chrome prior to 109.0.5414.74 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. (Chromium security severity: Low) |
CVE-2023-0138
|
| VCID-peys-net6-xbc9 | Type confusion in V8 in Google Chrome prior to 92.0.4515.107 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. |
CVE-2021-30588
|
| VCID-pgpd-5ggr-uyhm | Heap buffer overflow in UMA in Google Chrome prior to 111.0.5563.64 allowed a remote attacker who had compromised the renderer process to potentially exploit heap corruption via a crafted HTML page. (Chromium security severity: High) |
CVE-2023-1220
|
| VCID-phvm-58dp-8fdp | Out of bounds write in ANGLE in Google Chrome prior to 91.0.4472.164 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. |
CVE-2021-30559
|
| VCID-phvx-r748-x7e5 | Type confusion in V8 in Google Chrome prior to 99.0.4844.84 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. |
CVE-2022-1096
|
| VCID-pmuu-w2mm-eycq | Use after free in Offline in Google Chrome on Android prior to 116.0.5845.96 allowed a remote attacker who had compromised the renderer process to potentially exploit heap corruption via a crafted HTML page. (Chromium security severity: High) |
CVE-2023-2312
|
| VCID-pna5-n56p-rqcw | Inappropriate implementation in Site Isolation in Google Chrome prior to 105.0.5195.52 allowed a remote attacker who had compromised the renderer process to bypass site isolation via a crafted HTML page. |
CVE-2022-3044
|
| VCID-pp6d-u598-gfc9 | Inappropriate implementation in Permissions in Google Chrome prior to 99.0.4844.51 allowed a remote attacker to tamper with the contents of the Omnibox (URL bar) via a crafted HTML page. |
CVE-2022-0803
|
| VCID-pp8j-8mnu-kqay | Inappropriate implementation in Extensions API in Google Chrome prior to 118.0.5993.70 allowed an attacker who convinced a user to install a malicious extension to bypass an enterprise policy via a crafted HTML page. (Chromium security severity: Medium) |
CVE-2023-5479
|
| VCID-ppda-j3vw-bfaq | Inappropriate implementation in Full screen mode in Google Chrome on Android prior to 107.0.5304.62 allowed a remote attacker to hide the contents of the Omnibox (URL bar) via a crafted HTML page. (Chromium security severity: Medium) |
CVE-2022-3660
|
| VCID-pv8x-nc3k-5udd | Chromium: CVE-2021-30623 Use after free in Bookmarks |
CVE-2021-30623
|
| VCID-pvbs-6enr-zbbd | Inappropriate implementation in URL Formatting in Google Chrome prior to 103.0.5060.134 allowed a remote attacker to perform domain spoofing via a crafted HTML page. (Chromium security severity: Medium) |
CVE-2022-4915
|
| VCID-pvp2-v2xd-1fh7 | Type confusion in V8 in Google Chrome prior to 117.0.5938.149 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. (Chromium security severity: High) |
CVE-2023-5346
|
| VCID-pwqz-hchv-rfd9 | multiple issues |
CVE-2021-4098
|
| VCID-px5x-69sd-z3dx | multiple issues |
CVE-2021-37996
|
| VCID-pykn-25wt-7kev | Heap buffer overflow in Web UI Settings in Google Chrome prior to 101.0.4951.41 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. |
CVE-2022-1484
|
| VCID-q4hz-169b-qkeh | Type confusion in V8 in Google Chrome prior to 116.0.5845.96 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. (Chromium security severity: High) |
CVE-2023-4352
|
| VCID-q4mu-hg2k-mkd9 | Inappropriate implementation in WebApp Installs in Google Chrome prior to 113.0.5672.126 allowed an attacker who convinced a user to install a malicious web app to bypass install dialog via a crafted HTML page. (Chromium security severity: Medium) |
CVE-2023-2726
|
| VCID-q5rz-7hmw-tbfz | Use after free in Views in Google Chrome prior to 103.0.5060.134 allowed a remote attacker who convinced a user to engage in specific user interactions to potentially exploit heap corruption via UI interaction. |
CVE-2022-2481
|
| VCID-q65c-82ke-6fac | Use after free in Safe Browsing in Google Chrome prior to 104.0.5112.79 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. |
CVE-2022-2604
|
| VCID-q6xj-3wxc-m3gn | Inappropriate implementation in Downloads in Google Chrome prior to 118.0.5993.70 allowed a remote attacker to spoof security UI via a crafted HTML page. (Chromium security severity: Medium) |
CVE-2023-5481
|
| VCID-qamr-47gs-ufa9 | Use after free in Aura in Google Chrome on Windows prior to 108.0.5359.124 allowed a remote attacker who convinced the user to engage in specific UI interactions to potentially exploit heap corruption via specific UI interactions. (Chromium security severity: High) |
CVE-2022-4439
|
| VCID-qc7p-y9tn-v7gu | Use after free in PDF in Google Chrome prior to 114.0.5735.90 allowed a remote attacker to potentially exploit heap corruption via a crafted PDF file. (Chromium security severity: High) |
CVE-2023-2931
|
| VCID-qekv-m7zq-f7c2 | Heap buffer overflow in Mojom IDL in Google Chrome prior to 116.0.5845.96 allowed a remote attacker who had compromised the renderer process and gained control of a WebUI process to potentially exploit heap corruption via a crafted HTML page. (Chromium security severity: Medium) |
CVE-2023-4362
|
| VCID-qktq-976c-m3h9 | Inappropriate implementation in WebGL in Google Chrome prior to 101.0.4951.41 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. |
CVE-2022-1482
|
| VCID-qmgb-vb2p-quda | Use after free in V8 in Google Chrome prior to 91.0.4472.164 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. |
CVE-2021-30541
|
| VCID-qq4y-61vn-pfdq | Specific handling of an attacker-controlled VP8 media stream could lead to a heap buffer overflow in the content process. We are aware of this issue being exploited in other products in the wild. |
CVE-2023-5217
GHSA-qqvq-6xgj-jw8g |
| VCID-qq5f-57ux-u3gx | Insufficient policy enforcement in Content Security Policy in Google Chrome prior to 91.0.4472.77 allowed a remote attacker to bypass content security policy via a crafted HTML page. |
CVE-2021-30531
|
| VCID-qry9-pp2s-rqbv | Use after free in Interest groups in Google Chrome prior to 103.0.5060.53 allowed a remote attacker who had compromised the renderer process to potentially exploit heap corruption via a crafted HTML page. |
CVE-2022-2157
|
| VCID-qvfd-7u4y-yuax | Use after free in UI in Google Chrome prior to 102.0.5005.61 allowed a remote attacker to perform arbitrary read/write via a crafted HTML page. (Chromium security severity: Medium) |
CVE-2022-4918
|
| VCID-qyau-v8mr-yyhh | Insufficient policy enforcement in background fetch in Google Chrome prior to 96.0.4664.45 allowed a remote attacker to bypass same origin policy via a crafted HTML page. |
CVE-2021-38016
|
| VCID-qyb5-m89e-zbcs | Out of bounds write in Swiftshader in Google Chrome prior to 96.0.4664.45 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. |
CVE-2021-38014
|
| VCID-qyf8-d96h-x7fp | Use after free in Blink Task Scheduling in Google Chrome prior to 115.0.5790.170 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. (Chromium security severity: High) |
CVE-2023-4074
|
| VCID-qyt8-ude9-vfcn | Inappropriate implementation in Custom Mobile Tabs in Google Chrome on Android prior to 117.0.5938.62 allowed a remote attacker to spoof security UI via a crafted HTML page. (Chromium security severity: Medium) |
CVE-2023-4903
|
| VCID-r145-45vd-1bdu | Inappropriate implementation in Passwords in Google Chrome prior to 97.0.4692.71 allowed a remote attacker to potentially leak cross-origin data via a malicious website. |
CVE-2022-0120
|
| VCID-r1k7-6zby-ufa6 | Insufficient policy enforcement in Intents in Google Chrome on Android prior to 111.0.5563.64 allowed a remote attacker to bypass navigation restrictions via a crafted HTML page. (Chromium security severity: Medium) |
CVE-2023-1228
|
| VCID-r29c-f9pk-uuh5 | Use after free in File Manager API in Google Chrome on Chrome OS prior to 97.0.4692.71 allowed an attacker who convinced a user to install a malicious extension to potentially exploit heap corruption via a crafted HTML page. |
CVE-2022-0107
|
| VCID-r311-txp7-53en | Type Confusion in V8 in Google Chrome prior to 115.0.5790.170 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. (Chromium security severity: High) |
CVE-2023-4069
|
| VCID-r41j-v9bh-bkey | Use after free in TabGroups in Google Chrome prior to 91.0.4472.77 allowed an attacker who convinced a user to install a malicious extension to potentially exploit heap corruption via a crafted HTML page. |
CVE-2021-30525
|
| VCID-r7vq-m2s6-hkf9 | Out of bounds memory access in WebHID in Google Chrome prior to 111.0.5563.110 allowed a remote attacker to potentially exploit heap corruption via a malicious HID device. (Chromium security severity: High) |
CVE-2023-1529
|
| VCID-r8gp-4cns-eycb | Inappropriate implementation in Extensions in Google Chrome prior to 100.0.4896.60 allowed an attacker who convinced a user to install a malicious extension to leak potentially sensitive information via a crafted HTML page. |
CVE-2022-1137
|
| VCID-r8vu-q4cs-tudf | Out of bounds memory access in V8 in Google Chrome prior to 98.0.4758.80 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. |
CVE-2022-0470
|
| VCID-r9g2-3bkn-2kfu | Out of bounds write in Autofill in Google Chrome prior to 92.0.4515.107 allowed a remote attacker who had compromised the renderer process to potentially exploit heap corruption via a crafted HTML page. |
CVE-2021-30575
|
| VCID-rbhk-xjcg-sbhh | Heap buffer overflow in Autofill in Google Chrome on Android prior to 91.0.4472.77 allowed a remote attacker to perform out of bounds memory access via a crafted HTML page. |
CVE-2021-30521
|
| VCID-rbmd-6m97-dqh9 | Insufficient data validation in Blink Editing in Google Chrome prior to 101.0.4951.41 allowed a remote attacker to inject arbitrary scripts or HTML via a crafted HTML page. |
CVE-2022-1492
|
| VCID-rcuu-68e3-1bgq | Update packaged libxml2 (2.9.12 → 2.9.13) and libxslt (1.1.34 → 1.1.35) ## Summary Nokogiri v1.13.2 upgrades two of its packaged dependencies: * vendored libxml2 from v2.9.12 to v2.9.13 * vendored libxslt from v1.1.34 to v1.1.35 Those library versions address the following upstream CVEs: * libxslt: CVE-2021-30560 (CVSS 8.8, High severity) * libxml2: CVE-2022-23308 (Unspecified severity, see more information below) Those library versions also address numerous other issues including performance improvements, regression fixes, and bug fixes, as well as memory leaks and other use-after-free issues that were not assigned CVEs. Please note that this advisory only applies to the CRuby implementation of Nokogiri < 1.13.2, and only if the packaged libraries are being used. If you've overridden defaults at installation time to use system libraries instead of packaged libraries, you should instead pay attention to your distro's `libxml2` and `libxslt` release announcements. ## Mitigation Upgrade to Nokogiri >= 1.13.2. Users who are unable to upgrade Nokogiri may also choose a more complicated mitigation: compile and link an older version Nokogiri against external libraries libxml2 >= 2.9.13 and libxslt >= 1.1.35, which will also address these same CVEs. ## Impact * libxslt CVE-2021-30560 * CVSS3 score: 8.8 (High) Fixed by https://gitlab.gnome.org/GNOME/libxslt/-/commit/50f9c9c All versions of libxslt prior to v1.1.35 are affected. Applications using untrusted XSL stylesheets to transform XML are vulnerable to a denial-of-service attack and should be upgraded immediately. libxml2 CVE-2022-23308 * As of the time this security advisory was published, there is no officially published information available about this CVE's severity. The above NIST link does not yet have a published record, and the libxml2 maintainer has declined to provide a severity score. * Fixed by https://gitlab.gnome.org/GNOME/libxml2/-/commit/652dd12 * Further explanation is at https://mail.gnome.org/archives/xml/2022-February/msg00015.html The upstream commit and the explanation linked above indicate that an application may be vulnerable to a denial of service, memory disclosure, or code execution if it parses an untrusted document with parse options `DTDVALID` set to true, and `NOENT` set to false. An analysis of these parse options: * While `NOENT` is off by default for Document, DocumentFragment, Reader, and Schema parsing, it is on by default for XSLT (stylesheet) parsing in Nokogiri v1.12.0 and later. * `DTDVALID` is an option that Nokogiri does not set for any operations, and so this CVE applies only to applications setting this option explicitly. It seems reasonable to assume that any application explicitly setting the parse option `DTDVALID` when parsing untrusted documents is vulnerable and should be upgraded immediately. |
CVE-2021-30560
GHSA-59gp-qqm7-cw4j GHSA-fq42-c5rg-92c2 GMS-2022-163 |
| VCID-rdy1-qbvz-2ye6 | Inappropriate implementation in Extensions API in Google Chrome prior to 114.0.5735.90 allowed an attacker who convinced a user to install a malicious extension to spoof the contents of the UI via a crafted Chrome Extension. (Chromium security severity: Low) |
CVE-2023-2941
|
| VCID-reue-bgtq-kkf5 | Use after free in Safe Browsing in Google Chrome on Android prior to 99.0.4844.74 allowed a remote attacker who convinced a user to engage in specific user interaction to potentially exploit heap corruption via a crafted HTML page. |
CVE-2022-0979
|
| VCID-rffh-5tdz-4ubj | Inappropriate implementation in Extensions in Google Chrome prior to 112.0.5615.49 allowed an attacker who convinced a user to install a malicious extension to bypass file access restrictions via a crafted HTML page. (Chromium security severity: Medium) |
CVE-2023-1813
|
| VCID-rfz8-fbqr-wud9 | Inappropriate implementation in WebApp Installs in Google Chrome on Android prior to 111.0.5563.64 allowed an attacker who convinced a user to install a malicious WebApp to spoof the contents of the PWA installer via a crafted HTML page. (Chromium security severity: Medium) |
CVE-2023-1230
|
| VCID-rgvj-5tcc-jucq | Use after free in Omnibox in Google Chrome prior to 97.0.4692.99 allowed a remote attacker who convinced the user to engage is specific user interactions to potentially exploit heap corruption via a crafted HTML page. |
CVE-2022-0295
|
| VCID-rh69-pvkp-xubh | Insufficient data validation in File System in Google Chrome prior to 107.0.5304.62 allowed a remote attacker to bypass file system restrictions via a crafted HTML page. (Chromium security severity: Medium) |
CVE-2022-3656
|
| VCID-rj7c-v37x-ffe6 | multiple issues |
CVE-2021-37978
|
| VCID-rjaa-1uyv-wuaj | Use after free in PDF in Google Chrome prior to 105.0.5195.125 allowed a remote attacker to potentially exploit heap corruption via a crafted PDF file. (Chromium security severity: High) |
CVE-2022-3198
|
| VCID-rk86-xvhb-j7gv | Insufficient policy enforcement in Extensions API in Google Chrome prior to 116.0.5845.96 allowed an attacker who convinced a user to install a malicious extension to bypass an enterprise policy via a crafted HTML page. (Chromium security severity: Medium) |
CVE-2023-4367
|
| VCID-rnx8-y7qj-5fgz | Use after free in New Tab Page in Google Chrome prior to 99.0.4844.74 allowed an attacker who convinced a user to install a malicious extension to potentially exploit heap corruption via specific user interactions. |
CVE-2022-0980
|
| VCID-rp19-xtbp-b7au | Inappropriate implementation in Compositing in Google Chrome prior to 119.0.6045.105 allowed a remote attacker to potentially spoof security UI via a crafted HTML page. (Chromium security severity: Medium) |
CVE-2023-7013
|
| VCID-rpha-wpqf-n3cx | Out of bounds read in V8 in Google Chrome prior to 91.0.4472.77 allowed a remote attacker to potentially exploit stack corruption via a crafted HTML page. |
CVE-2021-30536
|
| VCID-rpy2-kgag-9ydw | Insufficient validation of untrusted input in Intents in Google Chrome on Android prior to 106.0.5249.62 allowed a remote attacker to bypass navigation restrictions via a crafted HTML page. (Chromium security severity: Low) |
CVE-2022-3317
|
| VCID-rqkv-wyen-hka8 | Use after free in CSS in Google Chrome prior to 120.0.6099.109 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. (Chromium security severity: Medium) |
CVE-2023-6707
|
| VCID-rs7c-nu4s-87ex | Chromium: CVE-2021-30619 UI Spoofing in Autofill |
CVE-2021-30619
|
| VCID-rtxm-z7ez-47gy | Inappropriate implementation in in Fullscreen API in Google Chrome on Android prior to 109.0.5414.74 allowed a remote attacker to execute incorrect security UI via a crafted HTML page. (Chromium security severity: Medium) |
CVE-2023-0136
|
| VCID-ru4u-4z1w-mkdp | Inappropriate implementation in V8 in Google Chrome prior to 119.0.6045.105 allowed a remote attacker to potentially exploit object corruption via a crafted HTML page. (Chromium security severity: High) |
CVE-2024-3174
|
| VCID-rw2f-ps8s-u7bg | Incorrect security UI in Downloads in Google Chrome prior to 119.0.6045.105 allowed a remote attacker to perform domain spoofing via a crafted domain name. (Chromium security severity: Medium) |
CVE-2023-5850
|
| VCID-rxym-gz61-qfgm | Use after free in ANGLE in Google Chrome prior to 104.0.5112.101 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. |
CVE-2022-2855
|
| VCID-s15w-39gc-4uaa | Use after free in screen capture in Google Chrome on ChromeOS prior to 96.0.4664.93 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. |
CVE-2021-4064
|
| VCID-s1de-kmed-3yf4 | Insufficient validation of untrusted input in CORS in Google Chrome on Android prior to 108.0.5359.71 allowed a remote attacker to bypass same origin policy via a crafted HTML page. (Chromium security severity: Medium) |
CVE-2022-4188
|
| VCID-s3nb-ubyd-uqds | Inappropriate implementation in Full Screen Mode in Google Chrome on Android prior to 98.0.4758.80 allowed a remote attacker to spoof the contents of the Omnibox (URL bar) via a crafted HTML page. |
CVE-2022-0455
|
| VCID-s42z-mzrd-5ufk | Use after free in Bookmarks in Google Chrome prior to 102.0.5005.61 allowed an attacker who convinced a user to install a malicious extension to potentially exploit heap corruption via a crafted Chrome Extension and specific user interaction. |
CVE-2022-1865
|
| VCID-s5cb-ps6w-uyfc | Inappropriate implementation in referrer in Google Chrome prior to 96.0.4664.45 allowed a remote attacker to bypass navigation restrictions via a crafted HTML page. |
CVE-2021-38021
|
| VCID-s5nz-v8vc-rfbf | Out of bounds memory access in WebAudio in Google Chrome prior to 91.0.4472.77 allowed a remote attacker to perform out of bounds memory access via a crafted HTML page. |
CVE-2021-30530
|
| VCID-s6bj-29x2-w7eu | Use after free in Sign-In in Google Chrome prior to 108.0.5359.71 allowed a remote attacker who convinced a user to engage in specific UI interaction to potentially exploit heap corruption via profile destruction. (Chromium security severity: Medium) |
CVE-2022-4191
|
| VCID-s8d6-ysae-37an | multiple issues |
CVE-2021-37974
|
| VCID-saeg-k943-6ub1 | Use after free in GPU in Google Chrome prior to 110.0.5481.77 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page and browser shutdown. (Chromium security severity: Medium) |
CVE-2023-0699
|
| VCID-savd-2ca3-kqey | Use after free in Video in Google Chrome prior to 110.0.5481.177 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. (Chromium security severity: High) |
CVE-2023-0931
|
| VCID-sbjs-3r17-h7ad | Heap buffer overflow in PDFium in Google Chrome prior to 97.0.4692.99 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. |
CVE-2022-0306
|
| VCID-sctp-cme9-zqht | Use after free in WebRTC in Google Chrome prior to 117.0.5938.62 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. (Chromium security severity: High) |
CVE-2023-7010
|
| VCID-sd3f-fza6-2qbn | Use after free in file API in Google Chrome prior to 96.0.4664.93 allowed a remote attacker who had compromised the renderer process to potentially exploit heap corruption via a crafted HTML page. |
CVE-2021-4057
|
| VCID-se1p-9jwf-tyc9 | Inappropriate implementation in Prompts in Google Chrome prior to 117.0.5938.62 allowed a remote attacker to spoof security UI via a crafted HTML page. (Chromium security severity: Medium) |
CVE-2023-4905
|
| VCID-sfnh-z1yn-2kaq | Use after free in Vulkan in Google Chrome prior to 97.0.4692.99 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. |
CVE-2022-0297
|
| VCID-sfyd-yfr4-uyaz | Inappropriate implementation in in Permission prompts in Google Chrome on Android prior to 109.0.5414.74 allowed a remote attacker to bypass main origin permission delegation via a crafted HTML page. (Chromium security severity: Medium) |
CVE-2023-0133
|
| VCID-shb8-7xf8-qbbw | Out of bounds read in GPU Video in Google Chrome prior to 111.0.5563.110 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. (Chromium security severity: High) |
CVE-2023-1532
|
| VCID-shxx-9k9z-4bea | Inappropriate implementation in Extensions API in Google Chrome prior to 104.0.5112.79 allowed an attacker who convinced a user to install a malicious extension to spoof the contents of the Omnibox (URL bar) via a crafted Chrome Extension. |
CVE-2022-2616
|
| VCID-shy3-ecdc-2ff9 | Use after free in Extensions in Google Chrome prior to 104.0.5112.79 allowed an attacker who convinced a user to install a malicious extension to potentially exploit heap corruption via specific UI interactions. |
CVE-2022-2621
|
| VCID-sj3h-87k2-zya1 | Type confusion in V8 in Google Chrome prior to 110.0.5481.77 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. (Chromium security severity: High) |
CVE-2023-0696
|
| VCID-sm9h-ug5p-6qb8 | Insufficient data validation in Dev Tools in Google Chrome prior to 101.0.4951.41 allowed a remote attacker to bypass content security policy via a crafted HTML page. |
CVE-2022-1500
|
| VCID-smsf-x2hk-vyf9 | Use after free in web apps in Google Chrome prior to 96.0.4664.93 allowed an attacker who convinced a user to install a malicious extension to potentially exploit heap corruption via a crafted Chrome Extension. |
CVE-2021-4052
|
| VCID-snca-qppr-rycg | Use after free in Browser History in Google Chrome prior to 100.0.4896.75 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. (Chrome security severity: High) |
CVE-2022-3863
|
| VCID-sphp-e634-fbd3 | Use after free in Sign-In Flow in Google Chrome prior to 104.0.5112.101 allowed a remote attacker to potentially exploit heap corruption via specific UI interaction. |
CVE-2022-2858
|
| VCID-sq62-q751-2uc8 | Inappropriate implementation in Extensions Platform in Google Chrome prior to 98.0.4758.80 allowed an attacker who convinced a user to install a malicious extension to potentially perform a sandbox escape via a crafted HTML page. |
CVE-2022-0466
|
| VCID-srgm-ufr6-vuav | Inappropriate implementation in Picture In Picture in Google Chrome prior to 115.0.5790.98 allowed a remote attacker to potentially spoof the contents of the Omnibox (URL bar) via a crafted HTML page. (Chromium security severity: Medium) |
CVE-2023-3734
|
| VCID-srtt-fems-7kcw | Use after free in Permission Prompts in Google Chrome prior to 101.0.4951.64 allowed a remote attacker who convinced a user to engage in specific UI interactions to potentially exploit heap corruption via specific user interactions. |
CVE-2022-1635
|
| VCID-sukw-7jdc-67b4 | Inappropriate implementation in Chrome OS lockscreen in Google Chrome on Chrome OS prior to 105.0.5195.52 allowed a local attacker to bypass lockscreen navigation restrictions via physical access to the device. |
CVE-2022-3048
|
| VCID-svad-4pu4-4fhh | Inappropriate implementation in Virtual Keyboard in Google Chrome on Chrome OS prior to 100.0.4896.60 allowed a local attacker to bypass navigation restrictions via physical access to the device. |
CVE-2022-1132
|
| VCID-sw2a-zs26-bug9 | Use after free in Web packaging in Google Chrome prior to 97.0.4692.99 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. |
CVE-2022-0293
|
| VCID-syjn-y2vt-27cy | Inappropriate implementation in Autofill in Google Chrome prior to 115.0.5790.98 allowed a remote attacker to obfuscate security UI via a crafted HTML page. (Chromium security severity: Medium) |
CVE-2023-3738
|
| VCID-szbc-q7mc-d7ag | Insufficient validation of untrusted input in Safe Browsing in Google Chrome on Windows prior to 104.0.5112.79 allowed a remote attacker to bypass download restrictions via a crafted file. |
CVE-2022-2622
|
| VCID-t1f9-dbbp-v3ar | Use after free in WebGPU in Google Chrome prior to 120.0.6099.199 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. (Chromium security severity: High) |
CVE-2024-0225
|
| VCID-t276-mugz-2yha | Inappropriate implementation in Extensions API in Google Chrome prior to 104.0.5112.101 allowed an attacker who convinced a user to install a malicious extension to inject arbitrary scripts into WebUI via a crafted HTML page. |
CVE-2022-2861
|
| VCID-t2g5-4f8x-83fj | Inappropriate implementation in Prompts in Google Chrome prior to 113.0.5672.63 allowed a remote attacker to bypass permission restrictions via a crafted HTML page. (Chromium security severity: Medium) |
CVE-2023-2459
|
| VCID-t3bz-1bxp-2ycw | Out of bounds memory access in Mojo in Google Chrome prior to 99.0.4844.51 allowed a remote attacker to perform an out of bounds memory write via a crafted HTML page. |
CVE-2022-0797
|
| VCID-t6p8-17jf-pygy | Use after free in Cast UI in Google Chrome prior to 99.0.4844.51 allowed a remote attacker who convinced a user to engage in specific user interaction to potentially perform a sandbox escape via a crafted HTML page. |
CVE-2022-0790
|
| VCID-t74w-f8mu-bfda | Use after free in Extensions in Google Chrome prior to 91.0.4472.101 allowed a remote attacker who had compromised the renderer process to potentially exploit heap corruption via a crafted HTML page. |
CVE-2021-30545
|
| VCID-t84p-mcuv-mygx | Use after free in Autofill in Google Chrome prior to 91.0.4472.101 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. |
CVE-2021-30546
|
| VCID-t858-drg1-xfdc | Out of bounds read in ANGLE in Google Chrome prior to 99.0.4844.51 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. |
CVE-2022-0792
|
| VCID-t971-n9fv-37ev | Chromium: CVE-2021-30608 Use after free in Web Share |
CVE-2021-30608
|
| VCID-tcv7-3hxc-kugb | Use after free in loader in Google Chrome prior to 96.0.4664.45 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. |
CVE-2021-38005
|
| VCID-tdza-57jf-qbfk | Heap buffer overflow in Video in Google Chrome prior to 110.0.5481.177 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. (Chromium security severity: High) |
CVE-2023-0930
|
| VCID-tean-9qxf-33fh | Use after free in Extensions in Google Chrome prior to 114.0.5735.90 allowed an attacker who convinced a user to install a malicious extension to potentially exploit heap corruption via a crafted HTML page. (Chromium security severity: High) |
CVE-2023-2930
|
| VCID-tezb-1wz9-1khw | Inappropriate implementation in FedCM in Google Chrome prior to 112.0.5615.49 allowed a remote attacker to bypass navigation restrictions via a crafted HTML page. (Chromium security severity: Low) |
CVE-2023-1823
|
| VCID-tfb3-9uph-u3a4 | Heap buffer overflow in Bookmarks in Google Chrome prior to 97.0.4692.71 allowed a remote attacker who convinced a user to perform specific user gesture to potentially exploit heap corruption via specific user gesture. |
CVE-2022-0101
|
| VCID-tffj-q438-c3dd | Use after free in ANGLE in Google Chrome prior to 92.0.4515.159 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. |
CVE-2021-30604
|
| VCID-tgub-zhav-qqa9 | Out of bounds read in Dawn in Google Chrome prior to 104.0.5112.79 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. |
CVE-2022-2605
|
| VCID-tjef-eezz-fyfs | Inappropriate implementation in Input in Google Chrome prior to 101.0.4951.41 allowed a remote attacker to spoof the contents of cross-origin websites via a crafted HTML page. |
CVE-2022-1497
|
| VCID-tjkr-jark-vudk | Use after free in WebSerial in Google Chrome prior to 91.0.4472.164 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. |
CVE-2021-30562
|
| VCID-tm9a-frs2-2ybh | Use after free in ANGLE in Google Chrome prior to 99.0.4844.74 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. |
CVE-2022-0978
|
| VCID-tmb4-vqv3-eqev | Use after free in Sign-In Flow in Google Chrome prior to 104.0.5112.79 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. |
CVE-2022-2614
|
| VCID-tp1u-ays2-f3hv | Stack buffer overflow in ANGLE in Google Chrome prior to 93.0.4577.82 allowed a remote attacker to potentially exploit stack corruption via a crafted HTML page. |
CVE-2021-30628
|
| VCID-tqgb-yzx8-7qe6 | Type confusion in loader in Google Chrome prior to 96.0.4664.93 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. |
CVE-2021-4056
|
| VCID-tufy-jn1m-jqh9 | Use after free in Extensions in Google Chrome prior to 116.0.5845.96 allowed an attacker who convinced a user to install a malicious extension to potentially exploit heap corruption via a crafted HTML page. (Chromium security severity: Medium) |
CVE-2023-4366
|
| VCID-tvt3-rkh7-27fj | Insufficient policy enforcement in COOP in Google Chrome prior to 102.0.5005.61 allowed a remote attacker to leak cross-origin data via a crafted HTML page. |
CVE-2022-1873
|
| VCID-tvxy-wjgn-cyf2 | Inappropriate implementation in Interstitials in Google Chrome prior to 117.0.5938.62 allowed a remote attacker to obfuscate security UI via a crafted HTML page. (Chromium security severity: Low) |
CVE-2023-4909
|
| VCID-tw4t-ewqx-w3dk | Use after free in Bookmarks in Google Chrome prior to 91.0.4472.77 allowed an attacker who convinced a user to install a malicious extension to potentially exploit heap corruption via a crafted HTML page. |
CVE-2021-30529
|
| VCID-tzqf-vem2-37cx | Type confusion in V8 in Google Chrome prior to 101.0.4951.41 allowed a remote attacker to obtain potentially sensitive information from process memory via a crafted HTML page. |
CVE-2022-1486
|
| VCID-u1w4-8bqn-fbd3 | Insufficient policy enforcement in Web Payments API in Google Chrome prior to 111.0.5563.64 allowed a remote attacker to bypass content security policy via a crafted HTML page. (Chromium security severity: Medium) |
CVE-2023-1226
|
| VCID-u5qj-he3e-2bf1 | Type Confusion in V8 in Google Chrome prior to 91.0.4472.164 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. |
CVE-2021-30561
|
| VCID-u67m-jwzr-v3bq | multiple issues |
CVE-2021-37979
|
| VCID-uar3-22n2-d3b8 | Use after free in File System API in Google Chrome prior to 101.0.4951.41 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. |
CVE-2022-1485
|
| VCID-ubcs-ucuj-aydy | Inappropriate implementation in HTML Parser in Google Chrome prior to 101.0.4951.41 allowed a remote attacker to leak cross-origin data via a crafted HTML page. |
CVE-2022-1498
|
| VCID-ubpw-zgm4-mqg2 | Insufficient policy enforcement in Content Security Policy in Google Chrome prior to 91.0.4472.77 allowed a remote attacker to bypass content security policy via a crafted HTML page. |
CVE-2021-30532
|
| VCID-ucmq-48xx-hyg1 | Inappropriate implementation in Color in Google Chrome prior to 116.0.5845.96 allowed a remote attacker to obfuscate security UI via a crafted HTML page. (Chromium security severity: Medium) |
CVE-2023-4360
|
| VCID-udsv-e1bs-1yc1 | multiple issues |
CVE-2021-37992
|
| VCID-uf52-dsba-2qhs | Use after free in Profiles in Google Chrome prior to 119.0.6045.105 allowed a remote attacker who convinced a user to engage in specific UI gestures to potentially exploit heap corruption via specific UI gestures. (Chromium security severity: Medium) |
CVE-2023-5854
|
| VCID-uf5j-gx5z-sygb | Insufficient policy enforcement in DevTools in Google Chrome prior to 92.0.4515.107 allowed an attacker who convinced a user to install a malicious extension to potentially perform a sandbox escape via a crafted HTML page. |
CVE-2021-30571
|
| VCID-ufx1-t1kx-qycg | Out of bounds memory access in Fonts in Google Chrome prior to 116.0.5845.110 allowed a remote attacker to perform an out of bounds memory read via a crafted HTML page. (Chromium security severity: Medium) |
CVE-2023-4431
|
| VCID-ugax-vn8t-fkgg | Use after free in Media in Google Chrome prior to 99.0.4844.51 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. |
CVE-2022-0796
|
| VCID-uh43-xjpa-2uhd | Inappropriate implementation in in Fullscreen API in Google Chrome on Android prior to 109.0.5414.74 allowed a remote attacker to spoof the contents of the Omnibox (URL bar) via a crafted HTML page. (Chromium security severity: Medium) |
CVE-2023-0130
|
| VCID-uksb-ntsr-1yg9 | Heap buffer overflow in WebGL in Google Chrome prior to 103.0.5060.53 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. |
CVE-2022-2415
|
| VCID-ukxc-g8uk-dffx | Insufficient data validation in File System API in Google Chrome prior to 106.0.5249.62 allowed a remote attacker to bypass File System restrictions via a crafted HTML page. (Chromium security severity: Low) |
CVE-2022-3443
|
| VCID-unwk-e92k-2uhq | Use after free in Blink Frames in Google Chrome prior to 108.0.5359.124 allowed a remote attacker who convinced the user to engage in specific UI interactions to potentially exploit heap corruption via a crafted HTML page. (Chromium security severity: High) |
CVE-2022-4438
|
| VCID-uqa6-fwam-zydu | Inappropriate implementation in Storage in Google Chrome prior to 97.0.4692.99 allowed a remote attacker who had compromised the renderer process to bypass site isolation via a crafted HTML page. |
CVE-2022-0291
|
| VCID-urkf-4yds-xkaq | Use after free in tab groups in Google Chrome prior to 100.0.4896.88 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. |
CVE-2022-1313
|
| VCID-ut2u-tnjb-gye8 | Inappropriate implementation in Permission prompts in Google Chrome prior to 111.0.5563.64 allowed a remote attacker to bypass navigation restrictions via a crafted HTML page. (Chromium security severity: Medium) |
CVE-2023-1229
|
| VCID-uuxh-876b-7fcz | Use after free in Autofill in Google Chrome prior to 92.0.4515.107 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. |
CVE-2021-30572
|
| VCID-uvuh-4aay-cfcy | Use after free in Audio in Google Chrome prior to 108.0.5359.71 allowed an attacker who convinced a user to install a malicious extension to potentially exploit heap corruption via a crafted Chrome Extension. (Chromium security severity: High) |
CVE-2022-4179
|
| VCID-ux3j-3xbz-mfew | Use after free in User Education in Google Chrome prior to 102.0.5005.61 allowed an attacker who convinced a user to install a malicious extension to potentially exploit heap corruption via a crafted Chrome Extension or specific user interaction. |
CVE-2022-1856
|
| VCID-ux3z-mj76-qkhs | Use after free in protocol handling in Google Chrome prior to 92.0.4515.107 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. |
CVE-2021-30574
|
| VCID-uy12-gspd-4yap | multiple issues |
CVE-2021-37959
|
| VCID-uy89-utzf-7fem | multiple issues |
CVE-2021-30520
|
| VCID-v1x7-8fw5-g7ca | Insufficient validation of untrusted input in XML in Google Chrome prior to 116.0.5845.96 allowed a remote attacker to bypass file access restrictions via a crafted HTML page. (Chromium security severity: Medium) |
CVE-2023-4357
|
| VCID-v36q-qtwm-cygv | Use after free in WebRTC in Google Chrome prior to 120.0.6099.109 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. (Chromium security severity: High) |
CVE-2023-6705
|
| VCID-v3ry-d3sx-13c2 | Use after free in Permissions API in Google Chrome prior to 106.0.5249.119 allowed a remote attacker who convinced a user to engage in specific UI gestures to potentially exploit heap corruption via a crafted HTML page. (Chromium security severity: High) |
CVE-2022-3448
|
| VCID-v66t-cqn7-mfck | Use after free in Tab Strip in Google Chrome on Chrome OS, Lacros prior to 105.0.5195.52 allowed a remote attacker who convinced a user to engage in specific UI interactions to potentially exploit heap corruption via crafted UI interaction. |
CVE-2022-3071
|
| VCID-v6xs-944d-rfh3 | Insufficient data validation in URL formatting in Google Chrome prior to 103.0.5060.53 allowed a remote attacker to perform domain spoofing via IDN homographs via a crafted domain name. |
CVE-2022-2165
|
| VCID-v9sa-bk14-3qhu | multiple issues |
CVE-2021-37998
|
| VCID-vahs-tf4q-2fhm | multiple issues |
CVE-2021-37989
|
| VCID-vau9-2uqe-dbfh | Use after free in Storage in Google Chrome prior to 97.0.4692.71 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. |
CVE-2022-0096
|
| VCID-vbs6-96ag-pfap | Type Confusion in V8 in Google Chrome prior to 102.0.5005.61 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. |
CVE-2022-1869
|
| VCID-vexb-xtn3-kyfx | multiple issues |
CVE-2021-37987
|
| VCID-vfn6-eanw-ebc8 | Use after free in FedCM in Google Chrome prior to 104.0.5112.101 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. |
CVE-2022-2852
|
| VCID-vgcs-b8cy-nqhz | Heap buffer overflow in Network Service in Google Chrome prior to 109.0.5414.74 allowed an attacker who convinced a user to install a malicious extension to potentially exploit heap corruption via a crafted HTML page and specific interactions. (Chromium security severity: High) |
CVE-2023-0129
|
| VCID-vjez-dk6s-sffg | Inappropriate implementation in Autofill in Google Chrome prior to 97.0.4692.99 allowed a remote attacker to bypass navigation restrictions via a crafted HTML page. |
CVE-2022-0309
|
| VCID-vnrh-f16h-zyed | Incorrect security UI in Navigation in Google Chrome prior to 112.0.5615.49 allowed a remote attacker to perform domain spoofing via a crafted HTML page. (Chromium security severity: Low) |
CVE-2023-1822
|
| VCID-vqtf-5ust-bqe9 | Chromium: CVE-2021-30611 Use after free in WebRTC |
CVE-2021-30611
|
| VCID-vrag-u6dr-9ygf | Use after free in Passwords in Google Chrome prior to 117.0.5938.132 allowed a remote attacker who convinced a user to engage in specific UI interaction to potentially exploit heap corruption via crafted UI interaction. (Chromium security severity: High) |
CVE-2023-5186
|
| VCID-vstk-ge13-gfhs | Use after free in Webstore API in Google Chrome prior to 98.0.4758.102 allowed an attacker who convinced a user to install a malicious extension and convinced a user to enage in specific user interaction to potentially exploit heap corruption via a crafted HTML page. |
CVE-2022-0605
|
| VCID-vt7e-81au-uudy | multiple issues |
CVE-2021-30510
|
| VCID-vuk9-h8ta-e7bu | Inappropriate implementation in Blink in Google Chrome prior to 97.0.4692.71 allowed a remote attacker to leak cross-origin data via a crafted HTML page. |
CVE-2022-0113
|
| VCID-vvz8-yj64-e7de | Use after free in Omnibox in Google Chrome prior to 99.0.4844.51 allowed a remote attacker who convinced a user to engage in specific user interactions to potentially exploit heap corruption via user interactions. |
CVE-2022-0791
|
| VCID-vywb-hjxs-wqbz | Heap buffer overflow in ANGLE in Google Chrome prior to 97.0.4692.71 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. |
CVE-2022-0104
|
| VCID-w1hk-8m8m-zqgx | Type confusion in V8 in Google Chrome prior to 92.0.4515.159 allowed a remote attacker to execute arbitrary code inside a sandbox via a crafted HTML page. |
CVE-2021-30599
|
| VCID-w2ye-4nva-qucb | Object corruption in Blink in Google Chrome prior to 94.0.4606.54 allowed a remote attacker to potentially exploit object corruption via a crafted HTML page. (Chromium security severity: High) |
CVE-2021-4318
|
| VCID-w5sj-cs5u-ebgr | Use after free in Browser Switcher in Google Chrome prior to 101.0.4951.41 allowed a remote attacker who convinced a user to engage in specific user interaction to potentially exploit heap corruption via a crafted HTML page. |
CVE-2022-1490
|
| VCID-w67y-x73y-y7dy | Use after free in ANGLE in Google Chrome prior to 101.0.4951.41 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. |
CVE-2022-1479
|
| VCID-w81n-dp17-8qc6 | Use after free in media in Google Chrome prior to 106.0.5249.62 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. (Chromium security severity: High) |
CVE-2022-3307
|
| VCID-w839-6ebe-8kbz | Inappropriate implementation in DevTools in Google Chrome prior to 108.0.5359.71 allowed an attacker who convinced a user to install a malicious extension to bypass file access restrictions via a crafted HTML page. (Chromium security severity: Medium) |
CVE-2022-4955
|
| VCID-wa4b-sb8n-fqap | Out of bounds memory access in WebXR in Google Chrome prior to 99.0.4844.51 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. |
CVE-2022-0809
|
| VCID-watn-de7p-8ka6 | Insufficient policy enforcement in Extensions API in Google Chrome prior to 102.0.5005.61 allowed an attacker who convinced a user to install a malicious extension to bypass downloads policy via a crafted HTML page. |
CVE-2022-1872
|
| VCID-wb6c-yj96-dkgc | Type confusion in DevTools in Google Chrome prior to 111.0.5563.64 allowed a remote attacker who had compromised the renderer process to potentially exploit heap corruption via a crafted UI interaction. (Chromium security severity: Low) |
CVE-2023-1235
|
| VCID-wbqr-tmkx-a7dk | Insufficient policy enforcement in Resource Timing in Google Chrome prior to 111.0.5563.64 allowed an attacker who convinced a user to install a malicious extension to obtain potentially sensitive information from API via a crafted Chrome Extension. (Chromium security severity: Low) |
CVE-2023-1233
|
| VCID-wc6s-tnz1-j3gh | Use after free in Web Workers in Google Chrome prior to 107.0.5304.106 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. (Chromium security severity: High) |
CVE-2022-3887
|
| VCID-we69-yyjs-ufdg | Use after free in Tablet Mode in Google Chrome on Chrome OS prior to 102.0.5005.61 allowed a remote attacker who convinced a user to engage in specific user interactions to potentially exploit heap corruption via specific user interactions. |
CVE-2022-1866
|
| VCID-weam-ays1-v7cy | Inappropriate implementation in Input in Google Chrome prior to 118.0.5993.70 allowed a remote attacker to spoof security UI via a crafted HTML page. (Chromium security severity: Low) |
CVE-2023-5486
|
| VCID-wfgu-qy68-v7g8 | Use after free in PDF in Google Chrome prior to 114.0.5735.90 allowed a remote attacker to potentially exploit heap corruption via a crafted PDF file. (Chromium security severity: High) |
CVE-2023-2932
|
| VCID-wfpg-421g-rkch | Use after free in Navigation in Google Chrome prior to 113.0.5672.126 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. (Chromium security severity: Critical) |
CVE-2023-2721
|
| VCID-wggh-jej7-zbfq | Use after free in regular expressions in Google Chrome prior to 100.0.4896.88 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. |
CVE-2022-1310
|
| VCID-wkqs-w89y-jqaf | Inappropriate implementation in Fullscreen in Google Chrome prior to 116.0.5845.96 allowed a remote attacker to obfuscate security UI via a crafted HTML page. (Chromium security severity: Medium) |
CVE-2023-4365
|
| VCID-wnjy-1txy-2fgu | multiple issues |
CVE-2021-30508
|
| VCID-wppz-t9um-hyef | Insufficient policy enforcement in DevTools in Google Chrome prior to 108.0.5359.71 allowed an attacker who convinced a user to install a malicious extension to bypass navigation restrictions via a crafted Chrome Extension. (Chromium security severity: Medium) |
CVE-2022-4189
|
| VCID-wrgz-4hge-suha | Incorrect security UI in Notifications in Google Chrome on Android prior to 103.0.5060.53 allowed a remote attacker to obscure the full screen notification via a crafted HTML page. (Chromium security severity: Low) |
CVE-2022-4917
|
| VCID-wrrq-f9xt-5fcg | Use after free in storage in Google Chrome prior to 100.0.4896.88 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. |
CVE-2022-1305
|
| VCID-ws23-vsug-p3dn | Inappropriate implementation in Pointer Lock in Google Chrome on Mac prior to 105.0.5195.52 allowed a remote attacker to restrict user navigation via a crafted HTML page. |
CVE-2022-3053
|
| VCID-wtvc-a92m-2kfb | Use after free in Portals in Google Chrome prior to 100.0.4896.60 allowed a remote attacker who convinced a user to engage in specific user interaction to potentially exploit heap corruption via user interaction. |
CVE-2022-1125
|
| VCID-wug9-hncn-2ueh | multiple issues |
CVE-2021-37968
|
| VCID-wuub-1u43-jqhf | Inappropriate implementation in Compositing in Google Chrome prior to 97.0.4692.71 allowed a remote attacker to spoof the contents of the Omnibox (URL bar) via a crafted HTML page. |
CVE-2022-0116
|
| VCID-wvka-dtnq-qucp | Use after free in DevTools in Google Chrome prior to 111.0.5563.64 allowed a remote attacker who had convienced the user to engage in direct UI interaction to potentially exploit heap corruption via a crafted HTML page. (Chromium security severity: High) |
CVE-2023-1216
|
| VCID-wvp8-9e2g-3bb6 | Use after free in Site isolation in Google Chrome prior to 97.0.4692.99 allowed a remote attacker to potentially perform a sandbox escape via a crafted HTML page. |
CVE-2022-0290
|
| VCID-ww53-exqp-1fee | Insufficient policy enforcement in content security policy in Google Chrome prior to 91.0.4472.77 allowed a remote attacker to bypass content security policy via a crafted HTML page. |
CVE-2021-30538
|
| VCID-wyv1-t78e-mfcr | Integer overflow in PDF in Google Chrome prior to 110.0.5481.177 allowed a remote attacker to potentially exploit heap corruption via a crafted PDF file. (Chromium security severity: Medium) |
CVE-2023-0933
|
| VCID-x4s1-8b9c-gkdz | Use after free in Passwords in Google Chrome prior to 105.0.5195.52 allowed a remote attacker who convinced a user to engage in specific UI interactions to potentially exploit heap corruption via a crafted HTML page. |
CVE-2022-3055
|
| VCID-x67q-hken-53bq | multiple issues |
CVE-2021-37958
|
| VCID-x83s-39ba-vbc9 | Use after free in Splitscreen in Google Chrome on Chrome OS prior to 99.0.4844.74 allowed a remote attacker who convinced a user to engage in specific user interaction to potentially exploit heap corruption via a crafted HTML page. |
CVE-2022-0974
|
| VCID-x8b6-xkt4-mqd9 | Heap buffer overflow in fingerprint recognition in Google Chrome on ChromeOS prior to 96.0.4664.45 allowed a remote attacker who had compromised a WebUI renderer process to potentially perform a sandbox escape via a crafted HTML page. |
CVE-2021-38013
|
| VCID-x952-yart-zbc6 | Use after free in Guest View in Google Chrome prior to 103.0.5060.134 allowed an attacker who convinced a user to install a malicious extension to potentially exploit heap corruption via a crafted HTML page. |
CVE-2022-2477
|
| VCID-x9f5-h84m-3ybq | Out of bounds write in Storage in Google Chrome prior to 105.0.5195.125 allowed a remote attacker to perform an out of bounds memory write via a crafted HTML page. (Chromium security severity: High) |
CVE-2022-3195
|
| VCID-xa26-5tg6-53c6 | Inappropriate implementation in Picture In Picture in Google Chrome prior to 114.0.5735.90 allowed a remote attacker who had compromised the renderer process to spoof the contents of the Omnibox (URL bar) via a crafted HTML page. (Chromium security severity: Medium) |
CVE-2023-2938
|
| VCID-xbjn-vrp1-kfgh | multiple issues |
CVE-2021-30507
|
| VCID-xcrv-m81w-97ge | Inappropriate implementation in PictureInPicture in Google Chrome prior to 113.0.5672.63 allowed a remote attacker who had compromised the renderer process to obfuscate the security UI via a crafted HTML page. (Chromium security severity: Low) |
CVE-2023-2468
|
| VCID-xdvs-vn1v-x3er | Use after free in WebTransport in Google Chrome prior to 109.0.5414.119 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. (Chromium security severity: High) |
CVE-2023-0471
|
| VCID-xgps-7dfk-4qh6 | Chromium: CVE-2021-30610 Use after free in Extensions API |
CVE-2021-30610
|
| VCID-xj36-3g2h-6fas | Use after free in Spell check in Google Chrome prior to 91.0.4472.101 allowed an attacker who convinced a user to install a malicious extension to potentially exploit heap corruption via a crafted HTML page. |
CVE-2021-30549
|
| VCID-xk1f-7pzy-cbh8 | Use after free in TabGroups in Google Chrome prior to 91.0.4472.114 allowed an attacker who convinced a user to install a malicious extension to potentially exploit heap corruption via a crafted HTML page. |
CVE-2021-30557
|
| VCID-xk9x-bhgs-pyfw | Type confusion in V8 in Google Chrome prior to 108.0.5359.71 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. (Chromium security severity: High) |
CVE-2022-4174
|
| VCID-xky9-se43-rufc | Inappropriate implementation in Navigation in Google Chrome prior to 97.0.4692.71 allowed a remote attacker to incorrectly set origin via a crafted HTML page. |
CVE-2022-0111
|
| VCID-xmj4-9spz-zuc9 | Heap buffer overflow in WebXR in Google Chrome prior to 91.0.4472.164 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. |
CVE-2021-30564
|
| VCID-xndc-mdsc-xbba | Use after free in Navigation in Google Chrome prior to 119.0.6045.159 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. (Chromium security severity: High) |
CVE-2023-6112
|
| VCID-xw28-8bse-jycp | Use after free in Extensions in Google Chrome prior to 99.0.4844.74 allowed an attacker who convinced a user to install a malicious extension to potentially exploit heap corruption via a crafted HTML page. |
CVE-2022-0972
|
| VCID-xwwu-m3gc-hbef | Incorrect security UI in autofill in Google Chrome prior to 96.0.4664.93 allowed a remote attacker to perform domain spoofing via a crafted HTML page. |
CVE-2021-4054
|
| VCID-xwxr-d3r8-87cd | Use after free in PDF in Google Chrome prior to 105.0.5195.125 allowed a remote attacker to potentially exploit heap corruption via a crafted PDF file. (Chromium security severity: High) |
CVE-2022-3197
|
| VCID-xz5t-xysm-tub1 | Heap buffer overflow in PDF in Google Chrome prior to 118.0.5993.70 allowed a remote attacker who convinced a user to engage in specific user interactions to potentially exploit heap corruption via a crafted PDF file. (Chromium security severity: Medium) |
CVE-2023-5474
|
| VCID-y1h2-x5x9-4qef | Use after free in libavif in Google Chrome prior to 119.0.6045.199 allowed a remote attacker to potentially exploit heap corruption via a crafted avif file. (Chromium security severity: High) |
CVE-2023-6351
|
| VCID-y2qf-hx5a-6fat | Use after free in sqlite in Google Chrome prior to 92.0.4515.107 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. |
CVE-2021-30569
|
| VCID-y3mb-exk9-ekbk | Heap buffer overflow in WebGPU in Google Chrome prior to 101.0.4951.41 allowed a remote attacker who had compromised the renderer process to potentially exploit heap corruption via a crafted HTML page. |
CVE-2022-1483
|
| VCID-y3rn-jwek-ebas | Insufficient policy enforcement in image handling in iOS in Google Chrome on iOS prior to 92.0.4515.107 allowed a remote attacker to leak cross-origin data via a crafted HTML page. |
CVE-2021-30583
|
| VCID-y3y3-5xjh-kkd4 | Use after free in survey in Google Chrome on ChromeOS prior to 106.0.5249.62 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. (Chromium security severity: High) |
CVE-2022-3306
|
| VCID-y6rv-88jb-8ues | multiple issues |
CVE-2021-30513
|
| VCID-yab9-3vzj-4fh6 | multiple issues |
CVE-2021-30506
|
| VCID-ydw9-bqe9-syf9 | Use after free in Cast in Google Chrome prior to 115.0.5790.170 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. (Chromium security severity: High) |
CVE-2023-4075
|
| VCID-yfg8-peea-8qd9 | Use after free in Omnibox in Google Chrome prior to 104.0.5112.79 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. |
CVE-2022-2603
|
| VCID-yfsn-gawy-gfac | Use after free in WebApp Installs in Google Chrome prior to 102.0.5005.61 allowed an attacker who convinced a user to install a malicious extension to potentially exploit heap corruption via a crafted Chrome Extension and specific user interaction. |
CVE-2022-1864
|
| VCID-ygqr-83ms-aqda | Use after free in Media in Google Chrome prior to 114.0.5735.198 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. (Chromium security severity: High) |
CVE-2023-3421
|
| VCID-yj2q-55zu-nufs | Use after free in Prompts in Google Chrome prior to 110.0.5481.177 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. (Chromium security severity: Critical) |
CVE-2023-0941
|
| VCID-yn15-4t8h-cfb1 | Use after free in WebRTC in Google Chrome prior to 109.0.5414.119 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. (Chromium security severity: High) |
CVE-2023-0472
|
| VCID-ypfz-nh8w-rbf9 | Use after free in Device Trust Connectors in Google Chrome prior to 116.0.5845.96 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. (Chromium security severity: High) |
CVE-2023-4349
|
| VCID-yqeu-w9x5-s3ht | Type Confusion in V8 in Google Chrome prior to 115.0.5790.170 allowed a remote attacker to perform arbitrary read/write via a crafted HTML page. (Chromium security severity: High) |
CVE-2023-4068
|
| VCID-yqxj-vva7-c3e4 | Inappropriate implementation in Internals in Google Chrome prior to 111.0.5563.64 allowed a remote attacker to spoof the origin of an iframe via a crafted HTML page. (Chromium security severity: Low) |
CVE-2023-1236
|
| VCID-yrfm-dk7d-7fhv | Inappropriate implementation in iframe Sandbox in Google Chrome prior to 105.0.5195.52 allowed a remote attacker to leak cross-origin data via a crafted HTML page. |
CVE-2022-3057
|
| VCID-ys3n-4q56-wkgk | Insufficient policy enforcement in Safe Browsing in Google Chrome on Mac prior to 102.0.5005.61 allowed a remote attacker to bypass downloads protection policy via a crafted HTML page. |
CVE-2022-1874
|
| VCID-yupg-mndq-67hs | Type confusion in V8 in Google Chrome prior to 96.0.4664.45 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. |
CVE-2021-38012
|
| VCID-ywue-2x5u-z7h2 | arbitrary code execution |
CVE-2021-37964
|
| VCID-yxtk-z76x-9qc2 | Double free in ICU in Google Chrome prior to 91.0.4472.77 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. |
CVE-2021-30535
|
| VCID-yy56-deuy-eke1 | Use after free in Exosphere in Google Chrome on Chrome OS and Lacros prior to 104.0.5112.79 allowed a remote attacker who convinced a user to engage in specific UI interactions to potentially exploit heap corruption via crafted UI interactions. (Chrome security severity: High) |
CVE-2022-2742
|
| VCID-z1bn-c62a-kkfv | Use after free in Vulkan in Google Chrome prior to 116.0.5845.110 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. (Chromium security severity: High) |
CVE-2023-4430
|
| VCID-z282-m57w-z3bc | Use after free in survey in Google Chrome on ChromeOS prior to 106.0.5249.62 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. (Chromium security severity: High) |
CVE-2022-3305
|
| VCID-z2d1-fayt-auaq | Insufficient policy enforcement in Extensions API in Google Chrome prior to 116.0.5845.96 allowed an attacker who convinced a user to install a malicious extension to bypass an enterprise policy via a crafted HTML page. (Chromium security severity: Medium) |
CVE-2023-4368
|
| VCID-z2yq-cmw3-7yec | Chromium: CVE-2021-30618 Inappropriate implementation in DevTools |
CVE-2021-30618
|
| VCID-z5y9-krw5-2qdr | Use after free in Extensions in Google Chrome prior to 92.0.4515.107 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. (Chromium security severity: High) |
CVE-2021-38023
|
| VCID-z6rn-hbuq-vub9 | Inappropriate implementation in Pointer Lock in Google Chrome on Windows prior to 98.0.4758.80 allowed a remote attacker to bypass navigation restrictions via a crafted HTML page. |
CVE-2022-0467
|
| VCID-z77d-3wut-huej | Out of bounds memory access in V8 in Google Chrome prior to 116.0.5845.110 allowed a remote attacker to perform an out of bounds memory read via a crafted HTML page. (Chromium security severity: High) |
CVE-2023-4427
|
| VCID-z7te-ac69-4fbq | Use after free in QR Code Generator in Google Chrome prior to 100.0.4896.60 allowed a remote attacker who convinced a user to engage in specific user interaction to potentially exploit heap corruption via user interaction. |
CVE-2022-1127
|
| VCID-z8ka-b3ck-sya6 | Use after free in GPU in Google Chrome prior to 92.0.4515.107 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. |
CVE-2021-30573
|
| VCID-z8vb-hqza-duc4 | Inappropriate implementation in Autofill in Google Chrome prior to 107.0.5304.62 allowed a remote attacker to bypass navigation restrictions via a crafted HTML page. (Chromium security severity: Medium) |
CVE-2022-4910
|
| VCID-z8xh-rwzh-akcg | Inappropriate implementation in PDF in Google Chrome prior to 102.0.5005.61 allowed a remote attacker to leak cross-origin data via a crafted HTML page. |
CVE-2022-1875
|
| VCID-za4c-w3gm-1bex | multiple issues |
CVE-2021-37957
|
| VCID-zatn-adrw-cfen | Out of bounds write in WebRTC in Google Chrome prior to 96.0.4664.93 allowed a remote attacker to potentially exploit heap corruption via crafted WebRTC packets. |
CVE-2021-4079
|
| VCID-zcbq-x9s8-kbf2 | Out of bounds write in V8 in Google Chrome prior to 106.0.5249.91 allowed a remote attacker to perform an out of bounds memory write via a crafted HTML page. (Chromium security severity: High) |
CVE-2022-3373
|
| VCID-zdwd-ftpy-ykff | Inappropriate implementation in Cast UI in Google Chrome prior to 96.0.4664.45 allowed a remote attacker to spoof browser UI via a crafted HTML page. (Chromium security severity: Low) |
CVE-2021-4316
|
| VCID-ze21-nbh4-duax | Use after free in WebRTC in Google Chrome prior to 115.0.5790.98 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. (Chromium security severity: High) |
CVE-2023-3727
|
| VCID-zf97-ejwq-qbgm | Use after free in Peer Connection in Google Chrome prior to 106.0.5249.119 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. (Chromium security severity: High) |
CVE-2022-3450
|
| VCID-zfwg-sfrw-9bf5 | Use after free in Mojo in Google Chrome prior to 108.0.5359.71 allowed an attacker who convinced a user to install a malicious extension to potentially exploit heap corruption via a crafted Chrome Extension. (Chromium security severity: High) |
CVE-2022-4180
|
| VCID-zj3u-1uu7-1ua8 | Chromium: CVE-2021-30622 Use after free in WebApp Installs |
CVE-2021-30622
|
| VCID-znh8-ebd9-jqbj | Out of bounds read in Tab Strip in Google Chrome prior to 92.0.4515.131 allowed an attacker who convinced a user to install a malicious extension to perform an out of bounds memory read via a crafted HTML page. |
CVE-2021-30593
|
| VCID-zp6h-jqua-2yh3 | Use after free in Payments in Google Chrome prior to 98.0.4758.80 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. |
CVE-2022-0468
|
| VCID-zpjw-qcc3-dbds | Inappropriate implementation in Fullscreen API in Google Chrome on Android prior to 104.0.5112.79 allowed a remote attacker to spoof the contents of the Omnibox (URL bar) via a crafted HTML page. |
CVE-2022-2611
|
| VCID-ztnr-jged-s7g5 | Insufficient validation of untrusted input in Safe Browsing in Google Chrome prior to 112.0.5615.49 allowed a remote attacker to bypass download checking via a crafted HTML page. (Chromium security severity: Medium) |
CVE-2023-1814
|
| VCID-ztty-ecjj-nyd2 | Integer overflow in Mojo in Google Chrome prior to 98.0.4758.102 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. |
CVE-2022-0608
|
| VCID-ztzk-7km2-ukd4 | Use after free in libavif in Google Chrome prior to 120.0.6099.109 allowed a remote attacker to potentially exploit heap corruption via a crafted image file. (Chromium security severity: High) |
CVE-2023-6704
|
| VCID-zv23-js23-17as | Heap buffer overflow in Bookmarks in Google Chrome prior to 92.0.4515.131 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. |
CVE-2021-30590
|
| VCID-zxwx-czpt-1ubq | Use after free in Cast in Google Chrome prior to 99.0.4844.51 allowed an attacker who convinced a user to install a malicious extension and engage in specific user interaction to potentially exploit heap corruption via a crafted Chrome Extension. |
CVE-2022-0793
|
| VCID-zy7r-ah8a-yqby | Use after free in Media Stream in Google Chrome prior to 120.0.6099.62 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. (Chromium security severity: High) |
CVE-2023-6508
|
| VCID-zyau-uaeq-77cf | Insufficient validation of untrusted input in VPN in Google Chrome on ChromeOS prior to 106.0.5249.62 allowed a local attacker to bypass managed device restrictions via physical access to the device. (Chromium security severity: Medium) |
CVE-2022-3312
|
| VCID-zyhc-vdgh-hkc6 | Inappropriate implementation in Downloads in Google Chrome prior to 119.0.6045.105 allowed a remote attacker to obfuscate security UI via a crafted HTML page. (Chromium security severity: Medium) |
CVE-2023-5851
|
| VCID-zyre-6srh-mqfy | Incorrect security UI in Picture In Picture in Google Chrome prior to 112.0.5615.49 allowed a remote attacker to potentially perform navigation spoofing via a crafted HTML page. (Chromium security severity: Medium) |
CVE-2023-1816
|
| VCID-zzq3-5myu-kqd1 | Use after free in Accessibility in Google Chrome prior to 98.0.4758.80 allowed a remote attacker who convinced a user to engage in specific user interaction to potentially exploit heap corruption via user interaction. |
CVE-2022-0463
|