chromium (SUSE:Package Hub 15 SP3) — known CVEs & security advisories

Known CVE vulnerabilities and GitHub Security Advisories affecting the SUSE:Package Hub 15 SP3 package chromium, with affected version ranges, CVSS severity, EPSS exploit prediction, and CISA KEV status.

CVEs (200)

• CVE-2021-44790 — CVSS 9.8 (critical): A carefully crafted request body can cause a buffer overflow in the mod_lua multipart parser (r:parsebody() called from Lua scripts). The…
• CVE-2021-37981 — CVSS 9.6 (critical): Heap buffer overflow in Skia in Google Chrome prior to 95.0.4638.54 allowed a remote attacker who had compromised the renderer process to…
• CVE-2021-37973 — CVSS 9.6 (critical) — actively exploited: Use after free in Portals in Google Chrome prior to 94.0.4606.61 allowed a remote attacker who had compromised the renderer process to…
• CVE-2022-4135 — CVSS 9.6 (critical) — actively exploited: Heap buffer overflow in GPU in Google Chrome prior to 107.0.5304.121 allowed a remote attacker who had compromised the renderer process to…
• CVE-2022-0452 — CVSS 9.6 (critical): Use after free in Safe Browsing in Google Chrome prior to 98.0.4758.80 allowed a remote attacker to potentially perform a sandbox escape…
• CVE-2022-1853 — CVSS 9.6 (critical): Use after free in Indexed DB in Google Chrome prior to 102.0.5005.61 allowed a remote attacker to potentially perform a sandbox escape via…
• CVE-2022-0977 — CVSS 9.6 (critical): Use after free in Browser UI in Google Chrome on Chrome OS prior to 99.0.4844.74 allowed a remote attacker who convinced a user to engage…
• CVE-2021-30633 — CVSS 9.6 (critical) — actively exploited: Use after free in Indexed DB API in Google Chrome prior to 93.0.4577.82 allowed a remote attacker who had compromised the renderer process…
• CVE-2022-0973 — CVSS 9.6 (critical): Use after free in Safe Browsing in Google Chrome prior to 99.0.4844.74 allowed a remote attacker to potentially exploit heap corruption via…
• CVE-2022-0290 — CVSS 9.6 (critical): Use after free in Site isolation in Google Chrome prior to 97.0.4692.99 allowed a remote attacker to potentially perform a sandbox escape…
• CVE-2022-0097 — CVSS 9.6 (critical): Inappropriate implementation in DevTools in Google Chrome prior to 97.0.4692.71 allowed an attacker who convinced a user to install a…
• CVE-2022-0790 — CVSS 9.6 (critical): Use after free in Cast UI in Google Chrome prior to 99.0.4844.51 allowed a remote attacker who convinced a user to engage in specific user…
• CVE-2021-30571 — CVSS 9.6 (critical): Insufficient policy enforcement in DevTools in Google Chrome prior to 92.0.4515.107 allowed an attacker who convinced a user to install a…
• CVE-2021-38013 — CVSS 9.6 (critical): Heap buffer overflow in fingerprint recognition in Google Chrome on ChromeOS prior to 96.0.4664.45 allowed a remote attacker who had…
• CVE-2021-38002 — CVSS 9.6 (critical): Use after free in Web Transport in Google Chrome prior to 95.0.4638.69 allowed a remote attacker to potentially perform a sandbox escape…
• CVE-2022-0466 — CVSS 9.6 (critical): Inappropriate implementation in Extensions Platform in Google Chrome prior to 98.0.4758.80 allowed an attacker who convinced a user to…
• CVE-2022-3890 — CVSS 9.6 (critical): Heap buffer overflow in Crashpad in Google Chrome on Android prior to 107.0.5304.106 allowed a remote attacker who had compromised the…
• CVE-2022-3075 — CVSS 9.6 (critical) — actively exploited: Insufficient data validation in Mojo in Google Chrome prior to 105.0.5195.102 allowed a remote attacker who had compromised the renderer…
• CVE-2022-2010 — CVSS 9.3 (critical): Out of bounds read in compositing in Google Chrome prior to 102.0.5005.115 allowed a remote attacker who had compromised the renderer…
• CVE-2021-30550 — CVSS 8.8 (high): Use after free in Accessibility in Google Chrome prior to 91.0.4472.101 allowed an attacker who convinced a user to install a malicious…
• CVE-2021-30551 — CVSS 8.8 (high) — actively exploited: Type confusion in V8 in Google Chrome prior to 91.0.4472.101 allowed a remote attacker to potentially exploit heap corruption via a crafted…
• CVE-2021-30552 — CVSS 8.8 (high): Use after free in Extensions in Google Chrome prior to 91.0.4472.101 allowed an attacker who convinced a user to install a malicious…
• CVE-2021-30553 — CVSS 8.8 (high): Use after free in Network service in Google Chrome prior to 91.0.4472.101 allowed a remote attacker to potentially exploit heap corruption…
• CVE-2021-30554 — CVSS 8.8 (high) — actively exploited: Use after free in WebGL in Google Chrome prior to 91.0.4472.114 allowed a remote attacker to potentially exploit heap corruption via a…
• CVE-2021-30555 — CVSS 8.8 (high): Use after free in Sharing in Google Chrome prior to 91.0.4472.114 allowed an attacker who convinced a user to install a malicious extension…
• CVE-2021-30556 — CVSS 8.8 (high): Use after free in WebAudio in Google Chrome prior to 91.0.4472.114 allowed a remote attacker to potentially exploit heap corruption via a…
• CVE-2021-30557 — CVSS 8.8 (high): Use after free in TabGroups in Google Chrome prior to 91.0.4472.114 allowed an attacker who convinced a user to install a malicious…
• CVE-2021-30559 — CVSS 8.8 (high): Out of bounds write in ANGLE in Google Chrome prior to 91.0.4472.164 allowed a remote attacker to potentially exploit heap corruption via a…
• CVE-2021-30560 — CVSS 8.8 (high): Use after free in Blink XSLT in Google Chrome prior to 91.0.4472.164 allowed a remote attacker to potentially exploit heap corruption via a…
• CVE-2021-30561 — CVSS 8.8 (high): Type Confusion in V8 in Google Chrome prior to 91.0.4472.164 allowed a remote attacker to potentially exploit heap corruption via a crafted…
• CVE-2021-30562 — CVSS 8.8 (high): Use after free in WebSerial in Google Chrome prior to 91.0.4472.164 allowed a remote attacker to potentially exploit heap corruption via a…
• CVE-2021-30563 — CVSS 8.8 (high) — actively exploited: Type Confusion in V8 in Google Chrome prior to 91.0.4472.164 allowed a remote attacker to potentially exploit heap corruption via a crafted…
• CVE-2021-30564 — CVSS 8.8 (high): Heap buffer overflow in WebXR in Google Chrome prior to 91.0.4472.164 allowed a remote attacker to potentially exploit heap corruption via…
• CVE-2021-30565 — CVSS 8.8 (high): Out of bounds write in Tab Groups in Google Chrome on Linux and ChromeOS prior to 92.0.4515.107 allowed an attacker who convinced a user to…
• CVE-2021-30566 — CVSS 8.8 (high): Stack buffer overflow in Printing in Google Chrome prior to 92.0.4515.107 allowed a remote attacker who had compromised the renderer…
• CVE-2021-30567 — CVSS 8.8 (high): Use after free in DevTools in Google Chrome prior to 92.0.4515.107 allowed an attacker who convinced a user to open DevTools to potentially…
• CVE-2021-30568 — CVSS 8.8 (high): Heap buffer overflow in WebGL in Google Chrome prior to 92.0.4515.107 allowed a remote attacker to potentially exploit heap corruption via…
• CVE-2021-30569 — CVSS 8.8 (high): Use after free in sqlite in Google Chrome prior to 92.0.4515.107 allowed a remote attacker to potentially exploit heap corruption via a…
• CVE-2021-30572 — CVSS 8.8 (high): Use after free in Autofill in Google Chrome prior to 92.0.4515.107 allowed a remote attacker to potentially exploit heap corruption via a…
• CVE-2021-30573 — CVSS 8.8 (high): Use after free in GPU in Google Chrome prior to 92.0.4515.107 allowed a remote attacker to potentially exploit heap corruption via a…
• CVE-2021-30574 — CVSS 8.8 (high): Use after free in protocol handling in Google Chrome prior to 92.0.4515.107 allowed a remote attacker to potentially exploit heap…
• CVE-2021-30575 — CVSS 8.8 (high): Out of bounds write in Autofill in Google Chrome prior to 92.0.4515.107 allowed a remote attacker who had compromised the renderer process…
• CVE-2021-30576 — CVSS 8.8 (high): Use after free in DevTools in Google Chrome prior to 92.0.4515.107 allowed an attacker who convinced a user to install a malicious…
• CVE-2021-30578 — CVSS 8.8 (high): Uninitialized use in Media in Google Chrome prior to 92.0.4515.107 allowed a remote attacker to perform out of bounds memory access via a…
• CVE-2021-30579 — CVSS 8.8 (high): Use after free in UI framework in Google Chrome prior to 92.0.4515.107 allowed a remote attacker to potentially exploit heap corruption via…
• CVE-2021-30581 — CVSS 8.8 (high): Use after free in DevTools in Google Chrome prior to 92.0.4515.107 allowed an attacker who convinced a user to install a malicious…
• CVE-2021-30585 — CVSS 8.8 (high): Use after free in sensor handling in Google Chrome on Windows prior to 92.0.4515.107 allowed a remote attacker to potentially exploit heap…
• CVE-2021-30588 — CVSS 8.8 (high): Type confusion in V8 in Google Chrome prior to 92.0.4515.107 allowed a remote attacker to potentially exploit heap corruption via a crafted…
• CVE-2021-30590 — CVSS 8.8 (high): Heap buffer overflow in Bookmarks in Google Chrome prior to 92.0.4515.131 allowed a remote attacker to potentially exploit heap corruption…
• CVE-2021-30591 — CVSS 8.8 (high): Use after free in File System API in Google Chrome prior to 92.0.4515.131 allowed a remote attacker to potentially exploit heap corruption…
• CVE-2021-30592 — CVSS 8.8 (high): Out of bounds write in Tab Groups in Google Chrome prior to 92.0.4515.131 allowed an attacker who convinced a user to install a malicious…
• CVE-2021-30598 — CVSS 8.8 (high): Type confusion in V8 in Google Chrome prior to 92.0.4515.159 allowed a remote attacker to execute arbitrary code inside a sandbox via a…
• CVE-2021-30599 — CVSS 8.8 (high): Type confusion in V8 in Google Chrome prior to 92.0.4515.159 allowed a remote attacker to execute arbitrary code inside a sandbox via a…
• CVE-2021-30600 — CVSS 8.8 (high): Use after free in Printing in Google Chrome prior to 92.0.4515.159 allowed a remote attacker who had compromised the renderer process to…
• CVE-2021-30601 — CVSS 8.8 (high): Use after free in Extensions API in Google Chrome prior to 92.0.4515.159 allowed an attacker who convinced a user to install a malicious…
• CVE-2021-30602 — CVSS 8.8 (high): Use after free in WebRTC in Google Chrome prior to 92.0.4515.159 allowed an attacker who convinced a user to visit a malicious website to…
• CVE-2021-30604 — CVSS 8.8 (high): Use after free in ANGLE in Google Chrome prior to 92.0.4515.159 allowed a remote attacker to potentially exploit heap corruption via a…
• CVE-2021-30606 — CVSS 8.8 (high): Chromium: CVE-2021-30606 Use after free in Blink
• CVE-2021-30607 — CVSS 8.8 (high): Chromium: CVE-2021-30607 Use after free in Permissions
• CVE-2021-30608 — CVSS 8.8 (high): Chromium: CVE-2021-30608 Use after free in Web Share
• CVE-2021-30609 — CVSS 8.8 (high): Chromium: CVE-2021-30609 Use after free in Sign-In
• CVE-2021-30610 — CVSS 8.8 (high): Chromium: CVE-2021-30610 Use after free in Extensions API
• CVE-2021-30611 — CVSS 8.8 (high): Chromium: CVE-2021-30611 Use after free in WebRTC
• CVE-2021-30612 — CVSS 8.8 (high): Chromium: CVE-2021-30612 Use after free in WebRTC
• CVE-2021-30613 — CVSS 8.8 (high): Chromium: CVE-2021-30613 Use after free in Base internals
• CVE-2021-30614 — CVSS 8.8 (high): Chromium: CVE-2021-30614 Heap buffer overflow in TabStrip
• CVE-2022-2607 — CVSS 8.8 (high): Use after free in Tab Strip in Google Chrome on Chrome OS prior to 104.0.5112.79 allowed a remote attacker who convinced a user to engage…
• CVE-2021-30521 — CVSS 8.8 (high): Heap buffer overflow in Autofill in Google Chrome on Android prior to 91.0.4472.77 allowed a remote attacker to perform out of bounds…
• CVE-2021-30522 — CVSS 8.8 (high): Use after free in WebAudio in Google Chrome prior to 91.0.4472.77 allowed a remote attacker to potentially exploit heap corruption via a…
• CVE-2021-30523 — CVSS 8.8 (high): Use after free in WebRTC in Google Chrome prior to 91.0.4472.77 allowed a remote attacker to potentially exploit heap corruption via a…
• CVE-2021-30524 — CVSS 8.8 (high): Use after free in TabStrip in Google Chrome prior to 91.0.4472.77 allowed an attacker who convinced a user to install a malicious extension…
• CVE-2021-30525 — CVSS 8.8 (high): Use after free in TabGroups in Google Chrome prior to 91.0.4472.77 allowed an attacker who convinced a user to install a malicious…
• CVE-2021-30526 — CVSS 8.8 (high): Out of bounds write in TabStrip in Google Chrome prior to 91.0.4472.77 allowed an attacker who convinced a user to install a malicious…
• CVE-2021-30527 — CVSS 8.8 (high): Use after free in WebUI in Google Chrome prior to 91.0.4472.77 allowed an attacker who convinced a user to install a malicious extension to…
• CVE-2021-30528 — CVSS 8.8 (high): Use after free in WebAuthentication in Google Chrome on Android prior to 91.0.4472.77 allowed a remote attacker who had compromised the…
• CVE-2021-30529 — CVSS 8.8 (high): Use after free in Bookmarks in Google Chrome prior to 91.0.4472.77 allowed an attacker who convinced a user to install a malicious…
• CVE-2021-30530 — CVSS 8.8 (high): Out of bounds memory access in WebAudio in Google Chrome prior to 91.0.4472.77 allowed a remote attacker to perform out of bounds memory…
• CVE-2021-30535 — CVSS 8.8 (high): Double free in ICU in Google Chrome prior to 91.0.4472.77 allowed a remote attacker to potentially exploit heap corruption via a crafted…
• CVE-2021-30541 — CVSS 8.8 (high): Use after free in V8 in Google Chrome prior to 91.0.4472.164 allowed a remote attacker to potentially exploit heap corruption via a crafted…
• CVE-2021-30544 — CVSS 8.8 (high): Use after free in BFCache in Google Chrome prior to 91.0.4472.101 allowed a remote attacker to potentially exploit heap corruption via a…
• CVE-2021-30545 — CVSS 8.8 (high): Use after free in Extensions in Google Chrome prior to 91.0.4472.101 allowed a remote attacker who had compromised the renderer process to…
• CVE-2021-30546 — CVSS 8.8 (high): Use after free in Autofill in Google Chrome prior to 91.0.4472.101 allowed a remote attacker to potentially exploit heap corruption via a…
• CVE-2021-30547 — CVSS 8.8 (high): Out of bounds write in ANGLE in Google Chrome prior to 91.0.4472.101 allowed a remote attacker to potentially perform out of bounds memory…
• CVE-2021-30548 — CVSS 8.8 (high): Use after free in Loader in Google Chrome prior to 91.0.4472.101 allowed a remote attacker to potentially exploit heap corruption via a…
• CVE-2021-30549 — CVSS 8.8 (high): Use after free in Spell check in Google Chrome prior to 91.0.4472.101 allowed an attacker who convinced a user to install a malicious…
• CVE-2022-0789 — CVSS 8.8 (high): Heap buffer overflow in ANGLE in Google Chrome prior to 99.0.4844.51 allowed a remote attacker to potentially exploit heap corruption via a…
• CVE-2022-0791 — CVSS 8.8 (high): Use after free in Omnibox in Google Chrome prior to 99.0.4844.51 allowed a remote attacker who convinced a user to engage in specific user…
• CVE-2022-0793 — CVSS 8.8 (high): Use after free in Cast in Google Chrome prior to 99.0.4844.51 allowed an attacker who convinced a user to install a malicious extension and…
• CVE-2022-0794 — CVSS 8.8 (high): Use after free in WebShare in Google Chrome prior to 99.0.4844.51 allowed a remote attacker who convinced a user to engage in specific user…
• CVE-2022-0795 — CVSS 8.8 (high): Type confusion in Blink Layout in Google Chrome prior to 99.0.4844.51 allowed a remote attacker to potentially exploit heap corruption via…
• CVE-2022-0796 — CVSS 8.8 (high): Use after free in Media in Google Chrome prior to 99.0.4844.51 allowed a remote attacker to potentially exploit heap corruption via a…
• CVE-2022-0797 — CVSS 8.8 (high): Out of bounds memory access in Mojo in Google Chrome prior to 99.0.4844.51 allowed a remote attacker to perform an out of bounds memory…
• CVE-2022-0798 — CVSS 8.8 (high): Use after free in MediaStream in Google Chrome prior to 99.0.4844.51 allowed an attacker who convinced a user to install a malicious…
• CVE-2022-0799 — CVSS 8.8 (high): Insufficient policy enforcement in Installer in Google Chrome on Windows prior to 99.0.4844.51 allowed a remote attacker to perform local…
• CVE-2022-0800 — CVSS 8.8 (high): Heap buffer overflow in Cast UI in Google Chrome prior to 99.0.4844.51 allowed a remote attacker who convinced a user to engage in specific…
• CVE-2022-0805 — CVSS 8.8 (high): Use after free in Browser Switcher in Google Chrome prior to 99.0.4844.51 allowed a remote attacker who convinced a user to engage in…
• CVE-2022-0808 — CVSS 8.8 (high): Use after free in Chrome OS Shell in Google Chrome on Chrome OS prior to 99.0.4844.51 allowed a remote attacker who convinced a user to…
• CVE-2022-0809 — CVSS 8.8 (high): Out of bounds memory access in WebXR in Google Chrome prior to 99.0.4844.51 allowed a remote attacker to potentially exploit heap…
• CVE-2022-0971 — CVSS 8.8 (high): Use after free in Blink Layout in Google Chrome on Android prior to 99.0.4844.74 allowed a remote attacker who had compromised the renderer…
• CVE-2022-0972 — CVSS 8.8 (high): Use after free in Extensions in Google Chrome prior to 99.0.4844.74 allowed an attacker who convinced a user to install a malicious…
• CVE-2022-0974 — CVSS 8.8 (high): Use after free in Splitscreen in Google Chrome on Chrome OS prior to 99.0.4844.74 allowed a remote attacker who convinced a user to engage…
• CVE-2022-0975 — CVSS 8.8 (high): Use after free in ANGLE in Google Chrome prior to 99.0.4844.74 allowed a remote attacker to potentially exploit heap corruption via a…
• CVE-2022-0976 — CVSS 8.8 (high): Heap buffer overflow in GPU in Google Chrome prior to 99.0.4844.74 allowed a remote attacker to potentially exploit heap corruption via a…
• CVE-2022-0978 — CVSS 8.8 (high): Use after free in ANGLE in Google Chrome prior to 99.0.4844.74 allowed a remote attacker to potentially exploit heap corruption via a…
• CVE-2022-0979 — CVSS 8.8 (high): Use after free in Safe Browsing in Google Chrome on Android prior to 99.0.4844.74 allowed a remote attacker who convinced a user to engage…
• CVE-2022-0980 — CVSS 8.8 (high): Use after free in New Tab Page in Google Chrome prior to 99.0.4844.74 allowed an attacker who convinced a user to install a malicious…
• CVE-2022-1364 — CVSS 8.8 (high) — actively exploited: Type confusion in V8 Turbofan in Google Chrome prior to 100.0.4896.127 allowed a remote attacker to potentially exploit heap corruption via…
• CVE-2022-1477 — CVSS 8.8 (high): Use after free in Vulkan in Google Chrome prior to 101.0.4951.41 allowed a remote attacker to potentially exploit heap corruption via a…
• CVE-2022-1478 — CVSS 8.8 (high): Use after free in SwiftShader in Google Chrome prior to 101.0.4951.41 allowed a remote attacker to potentially exploit heap corruption via…
• CVE-2022-1479 — CVSS 8.8 (high): Use after free in ANGLE in Google Chrome prior to 101.0.4951.41 allowed a remote attacker to potentially exploit heap corruption via a…
• CVE-2022-1481 — CVSS 8.8 (high): Use after free in Sharing in Google Chrome on Mac prior to 101.0.4951.41 allowed a remote attacker who convinced a user to engage in…
• CVE-2022-1483 — CVSS 8.8 (high): Heap buffer overflow in WebGPU in Google Chrome prior to 101.0.4951.41 allowed a remote attacker who had compromised the renderer process…
• CVE-2022-1484 — CVSS 8.8 (high): Heap buffer overflow in Web UI Settings in Google Chrome prior to 101.0.4951.41 allowed a remote attacker to potentially exploit heap…
• CVE-2022-1486 — CVSS 8.8 (high): Type confusion in V8 in Google Chrome prior to 101.0.4951.41 allowed a remote attacker to obtain potentially sensitive information from…
• CVE-2022-1489 — CVSS 8.8 (high): Out of bounds memory access in UI Shelf in Google Chrome on Chrome OS, Lacros prior to 101.0.4951.41 allowed a remote attacker to…
• CVE-2022-1490 — CVSS 8.8 (high): Use after free in Browser Switcher in Google Chrome prior to 101.0.4951.41 allowed a remote attacker who convinced a user to engage in…
• CVE-2022-1491 — CVSS 8.8 (high): Use after free in Bookmarks in Google Chrome prior to 101.0.4951.41 allowed a remote attacker to potentially exploit heap corruption via…
• CVE-2022-1493 — CVSS 8.8 (high): Use after free in Dev Tools in Google Chrome prior to 101.0.4951.41 allowed a remote attacker to potentially exploit heap corruption via…
• CVE-2022-1496 — CVSS 8.8 (high): Use after free in File Manager in Google Chrome prior to 101.0.4951.41 allowed a remote attacker to potentially exploit heap corruption via…
• CVE-2022-1633 — CVSS 8.8 (high): Use after free in Sharesheet in Google Chrome on Chrome OS prior to 101.0.4951.64 allowed a remote attacker who convinced a user to engage…
• CVE-2022-1634 — CVSS 8.8 (high): Use after free in Browser UI in Google Chrome prior to 101.0.4951.64 allowed a remote attacker who had convinced a user to engage in…
• CVE-2022-1635 — CVSS 8.8 (high): Use after free in Permission Prompts in Google Chrome prior to 101.0.4951.64 allowed a remote attacker who convinced a user to engage in…
• CVE-2022-1636 — CVSS 8.8 (high): Use after free in Performance APIs in Google Chrome prior to 101.0.4951.64 allowed a remote attacker to potentially exploit heap corruption…
• CVE-2022-1638 — CVSS 8.8 (high): Heap buffer overflow in V8 Internationalization in Google Chrome prior to 101.0.4951.64 allowed a remote attacker to potentially exploit…
• CVE-2022-1639 — CVSS 8.8 (high): Use after free in ANGLE in Google Chrome prior to 101.0.4951.64 allowed a remote attacker to potentially exploit heap corruption via a…
• CVE-2022-1640 — CVSS 8.8 (high): Use after free in Sharing in Google Chrome prior to 101.0.4951.64 allowed a remote attacker who convinced a user to engage in specific UI…
• CVE-2022-1641 — CVSS 8.8 (high): Use after free in Web UI Diagnostics in Google Chrome on Chrome OS prior to 101.0.4951.64 allowed a remote attacker who convinced a user to…
• CVE-2022-1854 — CVSS 8.8 (high): Use after free in ANGLE in Google Chrome prior to 102.0.5005.61 allowed a remote attacker to potentially exploit heap corruption via a…
• CVE-2022-1855 — CVSS 8.8 (high): Use after free in Messaging in Google Chrome prior to 102.0.5005.61 allowed a remote attacker to potentially exploit heap corruption via a…
• CVE-2022-1856 — CVSS 8.8 (high): Use after free in User Education in Google Chrome prior to 102.0.5005.61 allowed an attacker who convinced a user to install a malicious…
• CVE-2022-1857 — CVSS 8.8 (high): Insufficient policy enforcement in File System API in Google Chrome prior to 102.0.5005.61 allowed a remote attacker to bypass file system…
• CVE-2022-1859 — CVSS 8.8 (high): Use after free in Performance Manager in Google Chrome prior to 102.0.5005.61 allowed a remote attacker who convinced a user to engage in…
• CVE-2022-1860 — CVSS 8.8 (high): Use after free in UI Foundations in Google Chrome on Chrome OS prior to 102.0.5005.61 allowed a remote attacker who convinced a user to…
• CVE-2022-1861 — CVSS 8.8 (high): Use after free in Sharing in Google Chrome on Chrome OS prior to 102.0.5005.61 allowed a remote attacker who convinced a user to enage in…
• CVE-2022-1863 — CVSS 8.8 (high): Use after free in Tab Groups in Google Chrome prior to 102.0.5005.61 allowed an attacker who convinced a user to install a malicious…
• CVE-2022-1864 — CVSS 8.8 (high): Use after free in WebApp Installs in Google Chrome prior to 102.0.5005.61 allowed an attacker who convinced a user to install a malicious…
• CVE-2022-1865 — CVSS 8.8 (high): Use after free in Bookmarks in Google Chrome prior to 102.0.5005.61 allowed an attacker who convinced a user to install a malicious…
• CVE-2022-1866 — CVSS 8.8 (high): Use after free in Tablet Mode in Google Chrome on Chrome OS prior to 102.0.5005.61 allowed a remote attacker who convinced a user to engage…
• CVE-2022-1870 — CVSS 8.8 (high): Use after free in App Service in Google Chrome prior to 102.0.5005.61 allowed an attacker who convinced a user to install a malicious…
• CVE-2022-1874 — CVSS 8.8 (high): Insufficient policy enforcement in Safe Browsing in Google Chrome on Mac prior to 102.0.5005.61 allowed a remote attacker to bypass…
• CVE-2022-1876 — CVSS 8.8 (high): Heap buffer overflow in DevTools in Google Chrome prior to 102.0.5005.61 allowed an attacker who convinced a user to install a malicious…
• CVE-2022-2007 — CVSS 8.8 (high): Use after free in WebGPU in Google Chrome prior to 102.0.5005.115 allowed a remote attacker to potentially exploit heap corruption via a…
• CVE-2022-2008 — CVSS 8.8 (high): Double free in WebGL in Google Chrome prior to 102.0.5005.115 allowed a remote attacker to potentially exploit heap corruption via a…
• CVE-2022-2011 — CVSS 8.8 (high): Use after free in ANGLE in Google Chrome prior to 102.0.5005.115 allowed a remote attacker to potentially exploit heap corruption via a…
• CVE-2022-2156 — CVSS 8.8 (high): Use after free in Core in Google Chrome prior to 103.0.5060.53 allowed a remote attacker to potentially exploit heap corruption via a…
• CVE-2022-2157 — CVSS 8.8 (high): Use after free in Interest groups in Google Chrome prior to 103.0.5060.53 allowed a remote attacker who had compromised the renderer…
• CVE-2022-2158 — CVSS 8.8 (high): Type confusion in V8 in Google Chrome prior to 103.0.5060.53 allowed a remote attacker to potentially exploit heap corruption via a crafted…
• CVE-2022-2161 — CVSS 8.8 (high): Use after free in WebApp Provider in Google Chrome prior to 103.0.5060.53 allowed a remote attacker who convinced the user to engage in…
• CVE-2022-2162 — CVSS 8.8 (high): Insufficient policy enforcement in File System API in Google Chrome on Windows prior to 103.0.5060.53 allowed a remote attacker to bypass…
• CVE-2022-2163 — CVSS 8.8 (high): Use after free in Cast UI and Toolbar in Google Chrome prior to 103.0.5060.134 allowed an attacker who convinced a user to install a…
• CVE-2022-2294 — CVSS 8.8 (high) — actively exploited: Heap buffer overflow in WebRTC in Google Chrome prior to 103.0.5060.114 allowed a remote attacker to potentially exploit heap corruption…
• CVE-2022-2295 — CVSS 8.8 (high): Type confusion in V8 in Google Chrome prior to 103.0.5060.114 allowed a remote attacker to potentially exploit heap corruption via a…
• CVE-2022-2296 — CVSS 8.8 (high): Use after free in Chrome OS Shell in Google Chrome on Chrome OS prior to 103.0.5060.114 allowed a remote attacker who convinced a user to…
• CVE-2022-2477 — CVSS 8.8 (high): Use after free in Guest View in Google Chrome prior to 103.0.5060.134 allowed an attacker who convinced a user to install a malicious…
• CVE-2022-2478 — CVSS 8.8 (high): Use after free in PDF in Google Chrome prior to 103.0.5060.134 allowed a remote attacker to potentially exploit heap corruption via a…
• CVE-2022-2480 — CVSS 8.8 (high): Use after free in Service Worker API in Google Chrome prior to 103.0.5060.134 allowed a remote attacker to potentially exploit heap…
• CVE-2022-2481 — CVSS 8.8 (high): Use after free in Views in Google Chrome prior to 103.0.5060.134 allowed a remote attacker who convinced a user to engage in specific user…
• CVE-2022-2603 — CVSS 8.8 (high): Use after free in Omnibox in Google Chrome prior to 104.0.5112.79 allowed a remote attacker to potentially exploit heap corruption via a…
• CVE-2022-2604 — CVSS 8.8 (high): Use after free in Safe Browsing in Google Chrome prior to 104.0.5112.79 allowed a remote attacker to potentially exploit heap corruption…
• CVE-2022-2606 — CVSS 8.8 (high): Use after free in Managed devices API in Google Chrome prior to 104.0.5112.79 allowed a remote attacker who convinced a user to enable a…
• CVE-2022-2608 — CVSS 8.8 (high): Use after free in Overview Mode in Google Chrome on Chrome OS prior to 104.0.5112.79 allowed a remote attacker who convinced a user to…
• CVE-2022-2609 — CVSS 8.8 (high): Use after free in Nearby Share in Google Chrome on Chrome OS prior to 104.0.5112.79 allowed a remote attacker who convinced a user to…
• CVE-2022-2613 — CVSS 8.8 (high): Use after free in Input in Google Chrome on Chrome OS prior to 104.0.5112.79 allowed a remote attacker who convinced a user to enage in…
• CVE-2022-2614 — CVSS 8.8 (high): Use after free in Sign-In Flow in Google Chrome prior to 104.0.5112.79 allowed a remote attacker to potentially exploit heap corruption via…
• CVE-2022-2617 — CVSS 8.8 (high): Use after free in Extensions API in Google Chrome prior to 104.0.5112.79 allowed an attacker who convinced a user to install a malicious…
• CVE-2022-2620 — CVSS 8.8 (high): Use after free in WebUI in Google Chrome on Chrome OS prior to 104.0.5112.79 allowed a remote attacker who convinced a user to engage in…
• CVE-2022-2621 — CVSS 8.8 (high): Use after free in Extensions in Google Chrome prior to 104.0.5112.79 allowed an attacker who convinced a user to install a malicious…
• CVE-2022-2623 — CVSS 8.8 (high): Use after free in Offline in Google Chrome on Android prior to 104.0.5112.79 allowed a remote attacker who convinced a user to engage in…
• CVE-2022-2624 — CVSS 8.8 (high): Heap buffer overflow in PDF in Google Chrome prior to 104.0.5112.79 allowed a remote attacker who convinced a user to engage in specific…
• CVE-2022-2852 — CVSS 8.8 (high): Use after free in FedCM in Google Chrome prior to 104.0.5112.101 allowed a remote attacker to potentially exploit heap corruption via a…
• CVE-2022-2853 — CVSS 8.8 (high): Heap buffer overflow in Downloads in Google Chrome on Android prior to 104.0.5112.101 allowed a remote attacker who had compromised the…
• CVE-2022-2854 — CVSS 8.8 (high): Use after free in SwiftShader in Google Chrome prior to 104.0.5112.101 allowed a remote attacker to potentially exploit heap corruption via…
• CVE-2022-2855 — CVSS 8.8 (high): Use after free in ANGLE in Google Chrome prior to 104.0.5112.101 allowed a remote attacker to potentially exploit heap corruption via a…
• CVE-2022-2857 — CVSS 8.8 (high): Use after free in Blink in Google Chrome prior to 104.0.5112.101 allowed a remote attacker to potentially exploit heap corruption via a…
• CVE-2022-2858 — CVSS 8.8 (high): Use after free in Sign-In Flow in Google Chrome prior to 104.0.5112.101 allowed a remote attacker to potentially exploit heap corruption…
• CVE-2022-2859 — CVSS 8.8 (high): Use after free in Chrome OS Shell in Google Chrome prior to 104.0.5112.101 allowed a remote attacker who convinced a user to engage in…
• CVE-2022-3038 — CVSS 8.8 (high) — actively exploited: Use after free in Network Service in Google Chrome prior to 105.0.5195.52 allowed a remote attacker to potentially exploit heap corruption…
• CVE-2022-3039 — CVSS 8.8 (high): Use after free in WebSQL in Google Chrome prior to 105.0.5195.52 allowed a remote attacker to potentially exploit heap corruption via a…
• CVE-2022-3040 — CVSS 8.8 (high): Use after free in Layout in Google Chrome prior to 105.0.5195.52 allowed a remote attacker to potentially exploit heap corruption via a…
• CVE-2022-3041 — CVSS 8.8 (high): Use after free in WebSQL in Google Chrome prior to 105.0.5195.52 allowed a remote attacker to potentially exploit heap corruption via a…
• CVE-2022-3042 — CVSS 8.8 (high): Use after free in PhoneHub in Google Chrome on Chrome OS prior to 105.0.5195.52 allowed a remote attacker to potentially exploit heap…
• CVE-2022-3043 — CVSS 8.8 (high): Heap buffer overflow in Screen Capture in Google Chrome on Chrome OS prior to 105.0.5195.52 allowed a remote attacker who convinced a user…
• CVE-2022-3045 — CVSS 8.8 (high): Insufficient validation of untrusted input in V8 in Google Chrome prior to 105.0.5195.52 allowed a remote attacker to potentially exploit…
• CVE-2022-3046 — CVSS 8.8 (high): Use after free in Browser Tag in Google Chrome prior to 105.0.5195.52 allowed an attacker who convinced a user to install a malicious…
• CVE-2022-3049 — CVSS 8.8 (high): Use after free in SplitScreen in Google Chrome on Chrome OS, Lacros prior to 105.0.5195.52 allowed a remote attacker who convinced a user…
• CVE-2022-3050 — CVSS 8.8 (high): Heap buffer overflow in WebUI in Google Chrome on Chrome OS prior to 105.0.5195.52 allowed a remote attacker who convinced a user to engage…
• CVE-2022-3051 — CVSS 8.8 (high): Heap buffer overflow in Exosphere in Google Chrome on Chrome OS, Lacros prior to 105.0.5195.52 allowed a remote attacker who convinced a…
• CVE-2022-3052 — CVSS 8.8 (high): Heap buffer overflow in Window Manager in Google Chrome on Chrome OS, Lacros prior to 105.0.5195.52 allowed a remote attacker who convinced…
• CVE-2022-3055 — CVSS 8.8 (high): Use after free in Passwords in Google Chrome prior to 105.0.5195.52 allowed a remote attacker who convinced a user to engage in specific UI…
• CVE-2022-3058 — CVSS 8.8 (high): Use after free in Sign-In Flow in Google Chrome prior to 105.0.5195.52 allowed a remote attacker who convinced a user to engage in specific…
• CVE-2022-3071 — CVSS 8.8 (high): Use after free in Tab Strip in Google Chrome on Chrome OS, Lacros prior to 105.0.5195.52 allowed a remote attacker who convinced a user to…
• CVE-2022-3195 — CVSS 8.8 (high): Out of bounds write in Storage in Google Chrome prior to 105.0.5195.125 allowed a remote attacker to perform an out of bounds memory write…
• CVE-2022-3196 — CVSS 8.8 (high): Use after free in PDF in Google Chrome prior to 105.0.5195.125 allowed a remote attacker to potentially exploit heap corruption via a…
• CVE-2022-3197 — CVSS 8.8 (high): Use after free in PDF in Google Chrome prior to 105.0.5195.125 allowed a remote attacker to potentially exploit heap corruption via a…
• CVE-2022-3198 — CVSS 8.8 (high): Use after free in PDF in Google Chrome prior to 105.0.5195.125 allowed a remote attacker to potentially exploit heap corruption via a…
• CVE-2022-3199 — CVSS 8.8 (high): Use after free in Frames in Google Chrome prior to 105.0.5195.125 allowed a remote attacker to potentially exploit heap corruption via a…
• CVE-2022-3200 — CVSS 8.8 (high): Heap buffer overflow in Internals in Google Chrome prior to 105.0.5195.125 allowed a remote attacker to potentially exploit heap corruption…
• CVE-2022-3304 — CVSS 8.8 (high): Use after free in CSS in Google Chrome prior to 106.0.5249.62 allowed a remote attacker to potentially exploit heap corruption via a…
• CVE-2022-3305 — CVSS 8.8 (high): Use after free in survey in Google Chrome on ChromeOS prior to 106.0.5249.62 allowed a remote attacker to potentially exploit heap…
• CVE-2022-3306 — CVSS 8.8 (high): Use after free in survey in Google Chrome on ChromeOS prior to 106.0.5249.62 allowed a remote attacker to potentially exploit heap…