Vulnerabilidades do Google Chrome

CVE-2023-0697 Média · 6.5 07/02/2023

Inappropriate implementation in Full screen mode in Google Chrome on Android prior to 110.0.5481...

Inappropriate implementation in Full screen mode in Google Chrome on Android prior to 110.0.5481.77 allowed a remote attacker to spoof the contents of the security UI via a crafted HTML page. (Chromium security severity: High)

CVE-2022-4262 Alta · 8.8 KEV Alta · 62 Exploit público CWE-843 02/12/2022

Google Chromium V8 Type Confusion Vulnerability

Type confusion in V8 in Google Chrome prior to 108.0.5359.94 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. (Chromium security severity: High)

CVE-2022-4135 Crítica · 9.6 KEV Alta · 60 CWE-787 24/11/2022

Estouro de Buffer na Heap da GPU do Google Chromium

Estouro de buffer na heap em GPU no Google Chrome anterior à 107.0.5304.121 permitia que um atacante remoto que tivesse comprometido o processo renderer executasse potencialmente uma fuga do sandbox por meio de uma página HTML elaborada. (Gravidade de segurança do Chromium: Alta)

CVE-2022-3723 Alta · 8.8 KEV Alta · 55 CWE-843 01/11/2022

Google Chromium V8 Type Confusion Vulnerability

Type confusion in V8 in Google Chrome prior to 107.0.5304.87 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. (Chromium security severity: High)

CVE-2022-3075 Crítica · 9.6 KEV Alta · 59 CWE-20 26/09/2022

Google Chromium Mojo Insufficient Data Validation Vulnerability

Insufficient data validation in Mojo in Google Chrome prior to 105.0.5195.102 allowed a remote attacker who had compromised the renderer process to potentially perform a sandbox escape via a crafted HTML page.

CVE-2022-2856 Média · 6.5 KEV Alta · 52 CWE-20 26/09/2022

Google Chromium Intents Insufficient Input Validation Vulnerability

Insufficient validation of untrusted input in Intents in Google Chrome on Android prior to 104.0.5112.101 allowed a remote attacker to arbitrarily browse to a malicious website via a crafted HTML page.

CVE-2022-3038 Alta · 8.8 KEV Alta · 56 CWE-416 26/09/2022

Google Chromium Network Service Use-After-Free Vulnerability

Use after free in Network Service in Google Chrome prior to 105.0.5195.52 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page.

CVE-2022-2294 Alta · 8.8 KEV Alta · 66 Ransomware CWE-787 27/07/2022

WebRTC Heap Buffer Overflow Vulnerability

Heap buffer overflow in WebRTC in Google Chrome prior to 103.0.5060.114 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page.

CVE-2022-1364 Alta · 8.8 KEV Alta · 61 Exploit público CWE-843 26/07/2022

Google Chromium V8 Type Confusion Vulnerability

Type confusion in V8 Turbofan in Google Chrome prior to 100.0.4896.127 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page.

CVE-2022-1096 Alta · 8.8 KEV Alta · 62 Exploit público CWE-843 22/07/2022

Google Chromium V8 Type Confusion Vulnerability

Type confusion in V8 in Google Chrome prior to 99.0.4844.84 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page.

CVE-2022-0609 Alta · 8.8 KEV Alta · 66 CWE-416 04/04/2022

Vulnerabilidade de Use-After-Free no componente Animation do Google Chromium (CVE-2022-0609)

Use after free em Animation no Google Chrome anterior à 98.0.4758.102 permitiu que um invasor remoto potencialmente explorasse corrupção de heap por meio de uma página HTML criada com esse fim.

CVE-2021-4102 Alta · 8.8 KEV Alta · 55 CWE-416 11/02/2022

Google Chromium V8 Use-After-Free Vulnerability

Use after free in V8 in Google Chrome prior to 96.0.4664.110 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page.

CVE-2021-38003 Alta · 8.8 KEV Alta · 62 Exploit público CWE-755 23/11/2021

Google Chromium V8 Memory Corruption Vulnerability

Inappropriate implementation in V8 in Google Chrome prior to 95.0.4638.69 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page.

CVE-2021-38000 Média · 6.1 KEV Alta · 52 CWE-601 23/11/2021

Google Chromium Intents Improper Input Validation Vulnerability

Insufficient validation of untrusted input in Intents in Google Chrome on Android prior to 95.0.4638.69 allowed a remote attacker to arbitrarily browser to a malicious URL via a crafted HTML page.

CVE-2021-37975 Alta · 8.8 KEV Alta · 62 Exploit público CWE-416 08/10/2021

Google Chromium V8 Use-After-Free Vulnerability

Use after free in V8 in Google Chrome prior to 94.0.4606.71 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page.

CVE-2021-37973 Crítica · 9.6 KEV Alta · 59 CWE-416 08/10/2021

Google Chromium Portals Use-After-Free Vulnerability

Use after free in Portals in Google Chrome prior to 94.0.4606.61 allowed a remote attacker who had compromised the renderer process to potentially perform a sandbox escape via a crafted HTML page.

CVE-2021-37976 Média · 6.5 KEV Alta · 53 CWE-862 08/10/2021

Google Chromium Information Disclosure Vulnerability

Inappropriate implementation in Memory in Google Chrome prior to 94.0.4606.71 allowed a remote attacker to obtain potentially sensitive information from process memory via a crafted HTML page.

CVE-2021-30633 Crítica · 9.6 KEV Alta · 60 CWE-416 08/10/2021

Google Chromium Indexed DB API Use-After-Free Vulnerability

Use after free in Indexed DB API in Google Chrome prior to 93.0.4577.82 allowed a remote attacker who had compromised the renderer process to potentially perform a sandbox escape via a crafted HTML page.

CVE-2021-30632 Alta · 8.8 KEV Alta · 62 Exploit público CWE-787 08/10/2021

Google Chromium V8 Out-of-Bounds Write Vulnerability

Out of bounds write in V8 in Google Chrome prior to 93.0.4577.82 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page.

CVE-2021-30563 Alta · 8.8 KEV Alta · 55 CWE-843 03/08/2021

Google Chromium V8 Type Confusion Vulnerability

Type Confusion in V8 in Google Chrome prior to 91.0.4472.164 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page.

CVE-2021-30554 Alta · 8.8 KEV Alta · 55 CWE-416 02/07/2021

Google Chromium WebGL Use-After-Free Vulnerability

Use after free in WebGL in Google Chrome prior to 91.0.4472.114 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page.

CVE-2021-30551 Alta · 8.8 KEV Alta · 62 Exploit público CWE-843 15/06/2021

Google Chromium V8 Type Confusion Vulnerability

Type confusion in V8 in Google Chrome prior to 91.0.4472.101 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page.

CVE-2021-30533 Média · 6.5 KEV Alta · 53 CWE-863 07/06/2021

Google Chromium PopupBlocker Security Bypass Vulnerability

Insufficient policy enforcement in PopupBlocker in Google Chrome prior to 91.0.4472.77 allowed a remote attacker to bypass navigation restrictions via a crafted iframe.

CVE-2021-21220 Alta · 8.8 KEV Urgente · 74 Exploit público CWE-787 26/04/2021

Google Chromium V8 Improper Input Validation Vulnerability

Insufficient validation of untrusted input in V8 in Google Chrome prior to 89.0.4389.128 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page.

CVE-2021-21224 Alta · 8.8 KEV Alta · 56 CWE-843 26/04/2021

Google Chromium V8 Type Confusion Vulnerability

Type confusion in V8 in Google Chrome prior to 90.0.4430.85 allowed a remote attacker to execute arbitrary code inside a sandbox via a crafted HTML page.