Google

Chrome

3675 vulnerabilities found.

Hinweis: Diese Liste kann unvollständig sein. Daten werden ohne Gewähr im Ursprungsformat bereitgestellt.
8.8

CVE-2024-7972

  • EPSS 0.39%
  • Published 21.08.2024 21:15:09
  • Last modified 26.08.2024 15:11:35

Inappropriate implementation in V8 in Google Chrome prior to 128.0.6613.84 allowed a remote attacker to potentially perform out of bounds memory access via a crafted HTML page. (Chromium security severity: Medium)

8.8

CVE-2024-7973

  • EPSS 0.26%
  • Published 21.08.2024 21:15:09
  • Last modified 24.10.2024 20:35:14

Heap buffer overflow in PDFium in Google Chrome prior to 128.0.6613.84 allowed a remote attacker to perform an out of bounds memory read via a crafted PDF file. (Chromium security severity: Medium)

8.8

CVE-2024-7974

  • EPSS 0.46%
  • Published 21.08.2024 21:15:09
  • Last modified 19.03.2025 17:15:41

Insufficient data validation in V8 API in Google Chrome prior to 128.0.6613.84 allowed a remote attacker to potentially exploit heap corruption via a crafted Chrome Extension. (Chromium security severity: Medium)

4.3

CVE-2024-7975

  • EPSS 0.21%
  • Published 21.08.2024 21:15:09
  • Last modified 25.03.2025 17:16:13

Inappropriate implementation in Permissions in Google Chrome prior to 128.0.6613.84 allowed a remote attacker to perform UI spoofing via a crafted HTML page. (Chromium security severity: Medium)

4.3

CVE-2024-7976

  • EPSS 0.2%
  • Published 21.08.2024 21:15:09
  • Last modified 24.03.2025 18:15:21

Inappropriate implementation in FedCM in Google Chrome prior to 128.0.6613.84 allowed a remote attacker to perform UI spoofing via a crafted HTML page. (Chromium security severity: Medium)

7.8

CVE-2024-7977

  • EPSS 0.02%
  • Published 21.08.2024 21:15:09
  • Last modified 22.08.2024 20:35:28

Insufficient data validation in Installer in Google Chrome on Windows prior to 128.0.6613.84 allowed a local attacker to perform privilege escalation via a malicious file. (Chromium security severity: Medium)

4.3

CVE-2024-7978

  • EPSS 0.14%
  • Published 21.08.2024 21:15:09
  • Last modified 29.10.2024 20:35:44

Insufficient policy enforcement in Data Transfer in Google Chrome prior to 128.0.6613.84 allowed a remote attacker who convinced a user to engage in specific UI gestures to leak cross-origin data via a crafted HTML page. (Chromium security severity: ...

7.8

CVE-2024-7979

  • EPSS 0.02%
  • Published 21.08.2024 21:15:09
  • Last modified 26.08.2024 15:13:19

Insufficient data validation in Installer in Google Chrome on Windows prior to 128.0.6613.84 allowed a local attacker to perform privilege escalation via a crafted symbolic link. (Chromium security severity: Medium)

7.8

CVE-2024-7980

  • EPSS 0.02%
  • Published 21.08.2024 21:15:09
  • Last modified 26.08.2024 15:14:10

Insufficient data validation in Installer in Google Chrome on Windows prior to 128.0.6613.84 allowed a local attacker to perform privilege escalation via a crafted symbolic link. (Chromium security severity: Medium)

4.3

CVE-2024-7981

  • EPSS 0.3%
  • Published 21.08.2024 21:15:09
  • Last modified 20.03.2025 21:15:22

Inappropriate implementation in Views in Google Chrome prior to 128.0.6613.84 allowed a remote attacker to perform UI spoofing via a crafted HTML page. (Chromium security severity: Low)