Google

Chrome

3675 vulnerabilities found.

Hinweis: Diese Liste kann unvollständig sein. Daten werden ohne Gewähr im Ursprungsformat bereitgestellt.
8.8

CVE-2021-37987

  • EPSS 1.41%
  • Published 02.11.2021 22:15:08
  • Last modified 21.11.2024 06:16:12

Use after free in Network APIs in Google Chrome prior to 95.0.4638.54 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page.

8.8

CVE-2021-37988

  • EPSS 1.09%
  • Published 02.11.2021 22:15:08
  • Last modified 21.11.2024 06:16:12

Use after free in Profiles in Google Chrome prior to 95.0.4638.54 allowed a remote attacker who convinced a user to engage in specific gestures to potentially exploit heap corruption via a crafted HTML page.

6.5

CVE-2021-37989

  • EPSS 0.68%
  • Published 02.11.2021 22:15:08
  • Last modified 21.11.2024 06:16:12

Inappropriate implementation in Blink in Google Chrome prior to 95.0.4638.54 allowed a remote attacker to abuse content security policy via a crafted HTML page.

5.5

CVE-2021-37990

  • EPSS 0.34%
  • Published 02.11.2021 22:15:08
  • Last modified 21.11.2024 06:16:12

Inappropriate implementation in WebView in Google Chrome on Android prior to 95.0.4638.54 allowed a remote attacker to leak cross-origin data via a crafted app.

7.5

CVE-2021-37991

  • EPSS 1.17%
  • Published 02.11.2021 22:15:08
  • Last modified 21.11.2024 06:16:12

Race in V8 in Google Chrome prior to 95.0.4638.54 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page.

8.8

CVE-2021-37992

  • EPSS 1%
  • Published 02.11.2021 22:15:08
  • Last modified 21.11.2024 06:16:13

Out of bounds read in WebAudio in Google Chrome prior to 95.0.4638.54 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page.

8.8

CVE-2021-37993

  • EPSS 1.41%
  • Published 02.11.2021 22:15:08
  • Last modified 21.11.2024 06:16:13

Use after free in PDF Accessibility in Google Chrome prior to 95.0.4638.54 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page.

6.5

CVE-2021-37994

  • EPSS 0.34%
  • Published 02.11.2021 22:15:08
  • Last modified 21.11.2024 06:16:13

Inappropriate implementation in iFrame Sandbox in Google Chrome prior to 95.0.4638.54 allowed a remote attacker to bypass navigation restrictions via a crafted HTML page.

6.5

CVE-2021-37995

  • EPSS 0.36%
  • Published 02.11.2021 22:15:08
  • Last modified 21.11.2024 06:16:13

Inappropriate implementation in WebApp Installer in Google Chrome prior to 95.0.4638.54 allowed a remote attacker to potentially overlay and spoof the contents of the Omnibox (URL bar) via a crafted HTML page.

5.5

CVE-2021-37996

  • EPSS 0.16%
  • Published 02.11.2021 22:15:08
  • Last modified 21.11.2024 06:16:13

Insufficient validation of untrusted input Downloads in Google Chrome prior to 95.0.4638.54 allowed a remote attacker to bypass navigation restrictions via a malicious file.