CVE-2023-4907
- EPSS 0.27%
- Veröffentlicht 12.09.2023 21:15:08
- Zuletzt bearbeitet 21.11.2024 08:36:14
Inappropriate implementation in Intents in Google Chrome on Android prior to 117.0.5938.62 allowed a remote attacker to obfuscate security UI via a crafted HTML page. (Chromium security severity: Low)
CVE-2023-4863
- EPSS 94.12%
- Veröffentlicht 12.09.2023 15:15:24
- Zuletzt bearbeitet 24.10.2025 14:07:28
Heap buffer overflow in libwebp in Google Chrome prior to 116.0.5845.187 and libwebp 1.3.2 allowed a remote attacker to perform an out of bounds memory write via a crafted HTML page. (Chromium security severity: Critical)
CVE-2023-4761
- EPSS 0.37%
- Veröffentlicht 05.09.2023 22:15:09
- Zuletzt bearbeitet 21.11.2024 08:35:55
Out of bounds memory access in FedCM in Google Chrome prior to 116.0.5845.179 allowed a remote attacker who had compromised the renderer process to perform an out of bounds memory read via a crafted HTML page. (Chromium security severity: High)
CVE-2023-4762
- EPSS 39.39%
- Veröffentlicht 05.09.2023 22:15:09
- Zuletzt bearbeitet 24.10.2025 14:07:33
Type Confusion in V8 in Google Chrome prior to 116.0.5845.179 allowed a remote attacker to execute arbitrary code via a crafted HTML page. (Chromium security severity: High)
CVE-2023-4763
- EPSS 0.62%
- Veröffentlicht 05.09.2023 22:15:09
- Zuletzt bearbeitet 05.05.2025 16:15:50
Use after free in Networks in Google Chrome prior to 116.0.5845.179 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. (Chromium security severity: High)
CVE-2023-4764
- EPSS 0.15%
- Veröffentlicht 05.09.2023 22:15:09
- Zuletzt bearbeitet 21.11.2024 08:35:56
Incorrect security UI in BFCache in Google Chrome prior to 116.0.5845.179 allowed a remote attacker to spoof the contents of the Omnibox (URL bar) via a crafted HTML page. (Chromium security severity: High)
CVE-2023-4572
- EPSS 0.33%
- Veröffentlicht 29.08.2023 20:15:10
- Zuletzt bearbeitet 21.11.2024 08:35:27
Use after free in MediaStream in Google Chrome prior to 116.0.5845.140 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. (Chromium security severity: High)
CVE-2019-13690
- EPSS 0.26%
- Veröffentlicht 25.08.2023 19:15:08
- Zuletzt bearbeitet 02.05.2025 19:15:47
Inappropriate implementation in OS in Google Chrome on ChromeOS prior to 75.0.3770.80 allowed a remote attacker to perform OS-level privilege escalation via a malicious file. (Chromium security severity: High)
CVE-2019-13689
- EPSS 0.18%
- Veröffentlicht 25.08.2023 19:15:07
- Zuletzt bearbeitet 02.05.2025 19:15:47
Inappropriate implementation in OS in Google Chrome on ChromeOS prior to 75.0.3770.80 allowed a remote attacker to perform arbitrary read/write via a malicious file. (Chromium security severity: Critical)
CVE-2022-4452
- EPSS 0.17%
- Veröffentlicht 25.08.2023 15:15:08
- Zuletzt bearbeitet 21.11.2024 07:35:17
Insufficient data validation in crosvm in Google Chrome prior to 107.0.5304.62 allowed a remote attacker to potentially exploit object corruption via a crafted HTML page. (Chromium security severity: High)