Browse CVEs

HIGH 8.8 CVE-2024-5830 Type Confusion in V8 in Google Chrome prior to 126.0.6478.54 allowed a remote attacker to perform an out of bounds memory write via a crafted HTML pa… Chrome 126.0.6478.54+ Fix from $1,9502024-06-11 HIGH 8.8 CVE-2024-5831 Use after free in Dawn in Google Chrome prior to 126.0.6478.54 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML pa… Chrome 126.0.6478.54+ Fix from $1,9502024-06-11 HIGH 8.8 CVE-2024-5832 Use after free in Dawn in Google Chrome prior to 126.0.6478.54 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML pa… Chrome 126.0.6478.54+ Fix from $1,9502024-06-11 HIGH 8.8 CVE-2024-5833 Type Confusion in V8 in Google Chrome prior to 126.0.6478.54 allowed a remote attacker to potentially perform out of bounds memory access via a craft… Chrome 126.0.6478.54+ Fix from $1,9502024-06-11 HIGH 8.8 CVE-2024-5834 Inappropriate implementation in Dawn in Google Chrome prior to 126.0.6478.54 allowed a remote attacker to execute arbitrary code via a crafted HTML p… Chrome 126.0.6478.54+ Fix from $1,9502024-06-11 HIGH 8.8 CVE-2024-5835 Heap buffer overflow in Tab Groups in Google Chrome prior to 126.0.6478.54 allowed a remote attacker who convinced a user to engage in specific UI ge… Chrome 126.0.6478.54+ Fix from $1,9502024-06-11 HIGH 8.8 CVE-2024-5836 Inappropriate Implementation in DevTools in Google Chrome prior to 126.0.6478.54 allowed an attacker who convinced a user to install a malicious exte… Chrome 126.0.6478.54+ Fix from $1,9502024-06-11 HIGH 8.8 CVE-2024-5837 Type Confusion in V8 in Google Chrome prior to 126.0.6478.54 allowed a remote attacker to potentially perform out of bounds memory access via a craft… Chrome 126.0.6478.54+ Fix from $1,9502024-06-11 HIGH 8.8 CVE-2024-5838 Type Confusion in V8 in Google Chrome prior to 126.0.6478.54 allowed a remote attacker to perform out of bounds memory access via a crafted HTML page… Chrome 126.0.6478.54+ Fix from $1,9502024-06-11 MEDIUM 6.5 CVE-2024-5839 Inappropriate Implementation in Memory Allocator in Google Chrome prior to 126.0.6478.54 allowed a remote attacker to potentially exploit heap corrup… Chrome 126.0.6478.54+ Fix from $1,6002024-06-11 MEDIUM 6.5 CVE-2024-5840 Policy bypass in CORS in Google Chrome prior to 126.0.6478.54 allowed a remote attacker to bypass discretionary access control via a crafted HTML pag… Chrome 126.0.6478.54+ Fix from $1,6002024-06-11 HIGH 7.8 CVE-2023-7261 Inappropriate implementation in Google Updator prior to 1.3.36.351 in Google Chrome allowed a local attacker to perform privilege escalation via a ma… Updater 1.3.36.351+ Fix from $1,9502024-06-07 HIGH 7.8 CVE-2024-1694 Inappropriate implementation in Google Updator prior to 1.3.36.351 in Google Chrome allowed a local attacker to bypass discretionary access control v… Updater 1.3.36.351+ Fix from $1,9502024-06-07 MEDIUM 6.7 CVE-2024-20075 In eemgpu, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege with System execut… Android Mitigation only Fix from $1,6002024-06-03 MEDIUM 6.6 CVE-2024-20074 In dmc, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege with System execution… Android Mitigation only Fix from $1,6002024-06-03 HIGH 8.8 CVE-2024-5493 Heap buffer overflow in WebRTC in Google Chrome prior to 125.0.6422.141 allowed a remote attacker to potentially exploit heap corruption via a crafte… Chrome 125.0.6422.141+ Fix from $1,9502024-05-30 HIGH 8.8 CVE-2024-5494 Use after free in Dawn in Google Chrome prior to 125.0.6422.141 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML p… Chrome 125.0.6422.141+ Fix from $1,9502024-05-30 HIGH 8.8 CVE-2024-5495 Use after free in Dawn in Google Chrome prior to 125.0.6422.141 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML p… Chrome 125.0.6422.141+ Fix from $1,9502024-05-30 HIGH 8.8 CVE-2024-5496 Use after free in Media Session in Google Chrome prior to 125.0.6422.141 allowed a remote attacker to execute arbitrary code inside a sandbox via a c… Chrome 125.0.6422.141+ Fix from $1,9502024-05-30 HIGH 8.8 CVE-2024-5497 Out of bounds memory access in Browser UI in Google Chrome prior to 125.0.6422.141 allowed a remote attacker who convinced a user to engage in specif… Chrome 125.0.6422.141+ Fix from $1,9502024-05-30 HIGH 8.8 CVE-2024-5498 Use after free in Presentation API in Google Chrome prior to 125.0.6422.141 allowed a remote attacker to potentially exploit heap corruption via a cr… Chrome 125.0.6422.141+ Fix from $1,9502024-05-30 HIGH 8.8 CVE-2024-5499 Out of bounds write in Streams API in Google Chrome prior to 125.0.6422.141 allowed a remote attacker to execute arbitrary code inside a sandbox via … Chrome 125.0.6422.141+ Fix from $1,9502024-05-30 CRITICAL 9.6 CVE-2024-5274 KEVEPSS 7% Type Confusion in V8 in Google Chrome prior to 125.0.6422.112 allowed a remote attacker to execute arbitrary code inside a sandbox via a crafted HTML… Chrome 125.0.6422.112+ Fix from $2,3002024-05-28 MEDIUM 6.5 CVE-2024-5166 An Insecure Direct Object Reference in Google Cloud's Looker allowed metadata exposure across authenticated Looker users sharing the same LookML mode… Looker Mitigation only Fix from $1,6002024-05-22 HIGH 8.8 CVE-2024-5159 Heap buffer overflow in ANGLE in Google Chrome prior to 125.0.6422.76 allowed a remote attacker to perform an out of bounds memory read via a crafted… Chrome 125.0.6422.76+ Fix from $1,9502024-05-22 HIGH 8.8 CVE-2024-5160 Heap buffer overflow in Dawn in Google Chrome prior to 125.0.6422.76 allowed a remote attacker to perform an out of bounds memory write via a crafted… Chrome 125.0.6422.76+ Fix from $1,9502024-05-22 HIGH 8.8 CVE-2024-5157 Use after free in Scheduling in Google Chrome prior to 125.0.6422.76 allowed a remote attacker to execute arbitrary code inside a sandbox via a craft… Chrome 125.0.6422.76+ Fix from $1,9502024-05-22 HIGH 8.1 CVE-2024-5158 Type Confusion in V8 in Google Chrome prior to 125.0.6422.76 allowed a remote attacker to potentially perform arbitrary read/write via a crafted HTML… Chrome 125.0.6422.76+ Fix from $1,9502024-05-22 HIGH 7.5 CVE-2024-4420 There exists a Denial of service vulnerability in Tink-cc in versions prior to 2.1.3.  * An adversary can crash binaries using the crypto::tink::Js… Tink C\+\+ 2.1.3+ Fix from $1,9502024-05-21 CRITICAL 9.6 CVE-2024-4947 KEVEPSS 15% Type Confusion in V8 in Google Chrome prior to 125.0.6422.60 allowed a remote attacker to execute arbitrary code inside a sandbox via a crafted HTML … Chrome 125.0.6422.60+ Fix from $2,3002024-05-15