Google

Chrome

5395 Schwachstellen gefunden.

Hinweis: Diese Liste kann unvollständig sein. Daten werden ohne Gewähr im Ursprungsformat bereitgestellt.
8.8

CVE-2024-1939

Exploit
  • EPSS 2.58%
  • Veröffentlicht 29.02.2024 01:43:57
  • Zuletzt bearbeitet 19.12.2024 20:20:25

Type Confusion in V8 in Google Chrome prior to 122.0.6261.94 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. (Chromium security severity: High)

8.8

CVE-2024-1669

Exploit
  • EPSS 0.95%
  • Veröffentlicht 21.02.2024 04:15:08
  • Zuletzt bearbeitet 19.12.2024 17:32:13

Out of bounds memory access in Blink in Google Chrome prior to 122.0.6261.57 allowed a remote attacker to perform out of bounds memory access via a crafted HTML page. (Chromium security severity: High)

8.8

CVE-2024-1670

Exploit
  • EPSS 8.99%
  • Veröffentlicht 21.02.2024 04:15:08
  • Zuletzt bearbeitet 19.12.2024 17:33:44

Use after free in Mojo in Google Chrome prior to 122.0.6261.57 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. (Chromium security severity: High)

6.5

CVE-2024-1671

  • EPSS 0.74%
  • Veröffentlicht 21.02.2024 04:15:08
  • Zuletzt bearbeitet 27.03.2025 20:15:21

Inappropriate implementation in Site Isolation in Google Chrome prior to 122.0.6261.57 allowed a remote attacker to bypass content security policy via a crafted HTML page. (Chromium security severity: Medium)

5.4

CVE-2024-1672

Exploit
  • EPSS 0.88%
  • Veröffentlicht 21.02.2024 04:15:08
  • Zuletzt bearbeitet 19.12.2024 17:53:20

Inappropriate implementation in Content Security Policy in Google Chrome prior to 122.0.6261.57 allowed a remote attacker to bypass content security policy via a crafted HTML page. (Chromium security severity: Medium)

8.8

CVE-2024-1673

Exploit
  • EPSS 0.8%
  • Veröffentlicht 21.02.2024 04:15:08
  • Zuletzt bearbeitet 19.12.2024 17:54:58

Use after free in Accessibility in Google Chrome prior to 122.0.6261.57 allowed a remote attacker who had compromised the renderer process to potentially exploit heap corruption via specific UI gestures. (Chromium security severity: Medium)

8.8

CVE-2024-1674

  • EPSS 0.79%
  • Veröffentlicht 21.02.2024 04:15:08
  • Zuletzt bearbeitet 04.12.2024 21:15:21

Inappropriate implementation in Navigation in Google Chrome prior to 122.0.6261.57 allowed a remote attacker to bypass navigation restrictions via a crafted HTML page. (Chromium security severity: Medium)

8.8

CVE-2024-1675

Exploit
  • EPSS 10.42%
  • Veröffentlicht 21.02.2024 04:15:08
  • Zuletzt bearbeitet 14.03.2025 17:15:41

Insufficient policy enforcement in Download in Google Chrome prior to 122.0.6261.57 allowed a remote attacker to bypass filesystem restrictions via a crafted HTML page. (Chromium security severity: Medium)

5.4

CVE-2024-1676

Exploit
  • EPSS 18.55%
  • Veröffentlicht 21.02.2024 04:15:08
  • Zuletzt bearbeitet 19.12.2024 17:58:37

Inappropriate implementation in Navigation in Google Chrome prior to 122.0.6261.57 allowed a remote attacker to spoof security UI via a crafted HTML page. (Chromium security severity: Low)

9.8

CVE-2024-1283

  • EPSS 1.52%
  • Veröffentlicht 07.02.2024 00:15:56
  • Zuletzt bearbeitet 17.06.2025 15:15:38

Heap buffer overflow in Skia in Google Chrome prior to 121.0.6167.160 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. (Chromium security severity: High)