CVE-2023-4431
- EPSS 0.15%
- Veröffentlicht 23.08.2023 00:15:09
- Zuletzt bearbeitet 21.11.2024 08:35:08
Out of bounds memory access in Fonts in Google Chrome prior to 116.0.5845.110 allowed a remote attacker to perform an out of bounds memory read via a crafted HTML page. (Chromium security severity: Medium)
CVE-2023-4362
- EPSS 32.4%
- Veröffentlicht 15.08.2023 18:15:13
- Zuletzt bearbeitet 21.11.2024 08:34:56
Heap buffer overflow in Mojom IDL in Google Chrome prior to 116.0.5845.96 allowed a remote attacker who had compromised the renderer process and gained control of a WebUI process to potentially exploit heap corruption via a crafted HTML page. (Chromi...
CVE-2023-4363
- EPSS 0.37%
- Veröffentlicht 15.08.2023 18:15:13
- Zuletzt bearbeitet 21.11.2024 08:34:56
Inappropriate implementation in WebShare in Google Chrome on Android prior to 116.0.5845.96 allowed a remote attacker to spoof the contents of a dialog URL via a crafted HTML page. (Chromium security severity: Medium)
CVE-2023-4364
- EPSS 0.5%
- Veröffentlicht 15.08.2023 18:15:13
- Zuletzt bearbeitet 21.11.2024 08:34:56
Inappropriate implementation in Permission Prompts in Google Chrome prior to 116.0.5845.96 allowed a remote attacker to obfuscate security UI via a crafted HTML page. (Chromium security severity: Medium)
CVE-2023-4365
- EPSS 0.5%
- Veröffentlicht 15.08.2023 18:15:13
- Zuletzt bearbeitet 21.11.2024 08:34:56
Inappropriate implementation in Fullscreen in Google Chrome prior to 116.0.5845.96 allowed a remote attacker to obfuscate security UI via a crafted HTML page. (Chromium security severity: Medium)
CVE-2023-4366
- EPSS 0.22%
- Veröffentlicht 15.08.2023 18:15:13
- Zuletzt bearbeitet 21.11.2024 08:34:56
Use after free in Extensions in Google Chrome prior to 116.0.5845.96 allowed an attacker who convinced a user to install a malicious extension to potentially exploit heap corruption via a crafted HTML page. (Chromium security severity: Medium)
CVE-2023-4367
- EPSS 0.09%
- Veröffentlicht 15.08.2023 18:15:13
- Zuletzt bearbeitet 21.11.2024 08:34:56
Insufficient policy enforcement in Extensions API in Google Chrome prior to 116.0.5845.96 allowed an attacker who convinced a user to install a malicious extension to bypass an enterprise policy via a crafted HTML page. (Chromium security severity: M...
CVE-2023-4368
- EPSS 0.07%
- Veröffentlicht 15.08.2023 18:15:13
- Zuletzt bearbeitet 21.11.2024 08:34:56
Insufficient policy enforcement in Extensions API in Google Chrome prior to 116.0.5845.96 allowed an attacker who convinced a user to install a malicious extension to bypass an enterprise policy via a crafted HTML page. (Chromium security severity: M...
CVE-2023-4369
- EPSS 0.08%
- Veröffentlicht 15.08.2023 18:15:13
- Zuletzt bearbeitet 05.05.2025 16:15:50
Insufficient data validation in Systems Extensions in Google Chrome on ChromeOS prior to 116.0.5845.120 allowed an attacker who convinced a user to install a malicious extension to bypass file restrictions via a crafted HTML page. (Chromium security ...
CVE-2023-4356
- EPSS 1.73%
- Veröffentlicht 15.08.2023 18:15:12
- Zuletzt bearbeitet 21.11.2024 08:34:55
Use after free in Audio in Google Chrome prior to 116.0.5845.96 allowed a remote attacker who has convinced a user to engage in specific UI interaction to potentially exploit heap corruption via a crafted HTML page. (Chromium security severity: Mediu...