CVE-2024-10488
- EPSS 0.38%
- Veröffentlicht 29.10.2024 22:15:03
- Zuletzt bearbeitet 02.01.2025 18:08:10
Use after free in WebRTC in Google Chrome prior to 130.0.6723.92 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. (Chromium security severity: High)
CVE-2024-10231
- EPSS 0.16%
- Veröffentlicht 22.10.2024 22:15:04
- Zuletzt bearbeitet 25.10.2024 17:01:55
Type Confusion in V8 in Google Chrome prior to 130.0.6723.69 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. (Chromium security severity: High)
CVE-2024-10229
- EPSS 0.06%
- Veröffentlicht 22.10.2024 22:15:03
- Zuletzt bearbeitet 25.10.2024 17:04:54
Inappropriate implementation in Extensions in Google Chrome prior to 130.0.6723.69 allowed a remote attacker to bypass site isolation via a crafted Chrome Extension. (Chromium security severity: High)
CVE-2024-10230
- EPSS 0.19%
- Veröffentlicht 22.10.2024 22:15:03
- Zuletzt bearbeitet 31.10.2024 08:35:03
Type Confusion in V8 in Google Chrome prior to 130.0.6723.69 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. (Chromium security severity: High)
CVE-2024-9954
- EPSS 4.41%
- Veröffentlicht 15.10.2024 21:15:12
- Zuletzt bearbeitet 22.10.2024 20:35:17
Use after free in AI in Google Chrome prior to 130.0.6723.58 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. (Chromium security severity: High)
CVE-2024-9955
- EPSS 20.42%
- Veröffentlicht 15.10.2024 21:15:12
- Zuletzt bearbeitet 02.01.2025 16:01:37
Use after free in WebAuthentication in Google Chrome prior to 130.0.6723.58 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. (Chromium security severity: Medium)
CVE-2024-9956
- EPSS 0.02%
- Veröffentlicht 15.10.2024 21:15:12
- Zuletzt bearbeitet 03.11.2025 21:18:48
Inappropriate implementation in WebAuthentication in Google Chrome on Android prior to 130.0.6723.58 allowed a local attacker to perform privilege escalation via a crafted HTML page. (Chromium security severity: Medium)
CVE-2024-9957
- EPSS 0.23%
- Veröffentlicht 15.10.2024 21:15:12
- Zuletzt bearbeitet 02.01.2025 16:02:27
Use after free in UI in Google Chrome on iOS prior to 130.0.6723.58 allowed a remote attacker who convinced a user to engage in specific UI gestures to potentially exploit heap corruption via a crafted HTML page. (Chromium security severity: Medium)
CVE-2024-9958
- EPSS 0.08%
- Veröffentlicht 15.10.2024 21:15:12
- Zuletzt bearbeitet 25.03.2025 17:16:16
Inappropriate implementation in PictureInPicture in Google Chrome prior to 130.0.6723.58 allowed a remote attacker to perform UI spoofing via a crafted HTML page. (Chromium security severity: Medium)
CVE-2024-9959
- EPSS 0.3%
- Veröffentlicht 15.10.2024 21:15:12
- Zuletzt bearbeitet 02.01.2025 16:02:49
Use after free in DevTools in Google Chrome prior to 130.0.6723.58 allowed a remote attacker who had compromised the renderer process to potentially exploit heap corruption via a crafted Chrome Extension. (Chromium security severity: Medium)