CVE-2023-5476
- EPSS 1%
- Veröffentlicht 11.10.2023 23:15:10
- Zuletzt bearbeitet 01.05.2025 18:15:52
Use after free in Blink History in Google Chrome prior to 118.0.5993.70 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. (Chromium security severity: Medium)
CVE-2023-5477
- EPSS 0.04%
- Veröffentlicht 11.10.2023 23:15:10
- Zuletzt bearbeitet 21.11.2024 08:41:51
Inappropriate implementation in Installer in Google Chrome prior to 118.0.5993.70 allowed a local attacker to bypass discretionary access control via a crafted command. (Chromium security severity: Low)
CVE-2023-5478
- EPSS 0.2%
- Veröffentlicht 11.10.2023 23:15:10
- Zuletzt bearbeitet 21.11.2024 08:41:51
Inappropriate implementation in Autofill in Google Chrome prior to 118.0.5993.70 allowed a remote attacker to leak cross-origin data via a crafted HTML page. (Chromium security severity: Low)
CVE-2023-5479
- EPSS 0.05%
- Veröffentlicht 11.10.2023 23:15:10
- Zuletzt bearbeitet 21.11.2024 08:41:51
Inappropriate implementation in Extensions API in Google Chrome prior to 118.0.5993.70 allowed an attacker who convinced a user to install a malicious extension to bypass an enterprise policy via a crafted HTML page. (Chromium security severity: Medi...
CVE-2023-5481
- EPSS 0.2%
- Veröffentlicht 11.10.2023 23:15:10
- Zuletzt bearbeitet 21.11.2024 08:41:51
Inappropriate implementation in Downloads in Google Chrome prior to 118.0.5993.70 allowed a remote attacker to spoof security UI via a crafted HTML page. (Chromium security severity: Medium)
CVE-2023-5483
- EPSS 0.11%
- Veröffentlicht 11.10.2023 23:15:10
- Zuletzt bearbeitet 21.11.2024 08:41:51
Inappropriate implementation in Intents in Google Chrome prior to 118.0.5993.70 allowed a remote attacker to bypass content security policy via a crafted HTML page. (Chromium security severity: Medium)
CVE-2023-5484
- EPSS 0.16%
- Veröffentlicht 11.10.2023 23:15:10
- Zuletzt bearbeitet 21.11.2024 08:41:52
Inappropriate implementation in Navigation in Google Chrome prior to 118.0.5993.70 allowed a remote attacker to spoof security UI via a crafted HTML page. (Chromium security severity: Medium)
CVE-2023-5346
- EPSS 1.12%
- Veröffentlicht 05.10.2023 18:15:13
- Zuletzt bearbeitet 01.05.2025 20:15:35
Type confusion in V8 in Google Chrome prior to 117.0.5938.149 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. (Chromium security severity: High)
CVE-2023-5186
- EPSS 1.54%
- Veröffentlicht 28.09.2023 16:15:10
- Zuletzt bearbeitet 21.11.2024 08:41:15
Use after free in Passwords in Google Chrome prior to 117.0.5938.132 allowed a remote attacker who convinced a user to engage in specific UI interaction to potentially exploit heap corruption via crafted UI interaction. (Chromium security severity: H...
CVE-2023-5187
- EPSS 0.28%
- Veröffentlicht 28.09.2023 16:15:10
- Zuletzt bearbeitet 21.11.2024 08:41:15
Use after free in Extensions in Google Chrome prior to 117.0.5938.132 allowed an attacker who convinced a user to install a malicious extension to potentially exploit heap corruption via a crafted HTML page. (Chromium security severity: High)