chromium (SUSE:Package Hub 15 SP4) — known CVEs & security advisories

Known CVE vulnerabilities and GitHub Security Advisories affecting the SUSE:Package Hub 15 SP4 package chromium, with affected version ranges, CVSS severity, EPSS exploit prediction, and CISA KEV status.

CVEs (200)

• CVE-2023-1529 — CVSS 9.8 (critical): Out of bounds memory access in WebHID in Google Chrome prior to 111.0.5563.110 allowed a remote attacker to potentially exploit heap…
• CVE-2022-4135 — CVSS 9.6 (critical) — actively exploited: Heap buffer overflow in GPU in Google Chrome prior to 107.0.5304.121 allowed a remote attacker who had compromised the renderer process to…
• CVE-2022-3890 — CVSS 9.6 (critical): Heap buffer overflow in Crashpad in Google Chrome on Android prior to 107.0.5304.106 allowed a remote attacker who had compromised the…
• CVE-2023-6345 — CVSS 9.6 (critical) — actively exploited: Integer overflow in Skia in Google Chrome prior to 119.0.6045.199 allowed a remote attacker who had compromised the renderer process to…
• CVE-2022-1853 — CVSS 9.6 (critical): Use after free in Indexed DB in Google Chrome prior to 102.0.5005.61 allowed a remote attacker to potentially perform a sandbox escape via…
• CVE-2022-3075 — CVSS 9.6 (critical) — actively exploited: Insufficient data validation in Mojo in Google Chrome prior to 105.0.5195.102 allowed a remote attacker who had compromised the renderer…
• CVE-2023-2136 — CVSS 9.6 (critical) — actively exploited: Integer overflow in Skia in Google Chrome prior to 112.0.5615.137 allowed a remote attacker who had compromised the renderer process to…
• CVE-2022-2010 — CVSS 9.3 (critical): Out of bounds read in compositing in Google Chrome prior to 102.0.5005.115 allowed a remote attacker who had compromised the renderer…
• CVE-2022-1863 — CVSS 8.8 (high): Use after free in Tab Groups in Google Chrome prior to 102.0.5005.61 allowed an attacker who convinced a user to install a malicious…
• CVE-2022-1864 — CVSS 8.8 (high): Use after free in WebApp Installs in Google Chrome prior to 102.0.5005.61 allowed an attacker who convinced a user to install a malicious…
• CVE-2022-1865 — CVSS 8.8 (high): Use after free in Bookmarks in Google Chrome prior to 102.0.5005.61 allowed an attacker who convinced a user to install a malicious…
• CVE-2022-1866 — CVSS 8.8 (high): Use after free in Tablet Mode in Google Chrome on Chrome OS prior to 102.0.5005.61 allowed a remote attacker who convinced a user to engage…
• CVE-2022-1870 — CVSS 8.8 (high): Use after free in App Service in Google Chrome prior to 102.0.5005.61 allowed an attacker who convinced a user to install a malicious…
• CVE-2022-1874 — CVSS 8.8 (high): Insufficient policy enforcement in Safe Browsing in Google Chrome on Mac prior to 102.0.5005.61 allowed a remote attacker to bypass…
• CVE-2022-3195 — CVSS 8.8 (high): Out of bounds write in Storage in Google Chrome prior to 105.0.5195.125 allowed a remote attacker to perform an out of bounds memory write…
• CVE-2022-1854 — CVSS 8.8 (high): Use after free in ANGLE in Google Chrome prior to 102.0.5005.61 allowed a remote attacker to potentially exploit heap corruption via a…
• CVE-2022-1855 — CVSS 8.8 (high): Use after free in Messaging in Google Chrome prior to 102.0.5005.61 allowed a remote attacker to potentially exploit heap corruption via a…
• CVE-2022-1856 — CVSS 8.8 (high): Use after free in User Education in Google Chrome prior to 102.0.5005.61 allowed an attacker who convinced a user to install a malicious…
• CVE-2022-1857 — CVSS 8.8 (high): Insufficient policy enforcement in File System API in Google Chrome prior to 102.0.5005.61 allowed a remote attacker to bypass file system…
• CVE-2022-1859 — CVSS 8.8 (high): Use after free in Performance Manager in Google Chrome prior to 102.0.5005.61 allowed a remote attacker who convinced a user to engage in…
• CVE-2022-1860 — CVSS 8.8 (high): Use after free in UI Foundations in Google Chrome on Chrome OS prior to 102.0.5005.61 allowed a remote attacker who convinced a user to…
• CVE-2022-1861 — CVSS 8.8 (high): Use after free in Sharing in Google Chrome on Chrome OS prior to 102.0.5005.61 allowed a remote attacker who convinced a user to enage in…
• CVE-2022-3658 — CVSS 8.8 (high): Use after free in Feedback service on Chrome OS in Google Chrome on Chrome OS prior to 107.0.5304.62 allowed an attacker who convinced a…
• CVE-2022-3659 — CVSS 8.8 (high): Use after free in Accessibility in Google Chrome on Chrome OS prior to 107.0.5304.62 allowed a remote attacker who convinced a user to…
• CVE-2022-3723 — CVSS 8.8 (high) — actively exploited: Type confusion in V8 in Google Chrome prior to 107.0.5304.87 allowed a remote attacker to potentially exploit heap corruption via a crafted…
• CVE-2022-3885 — CVSS 8.8 (high): Use after free in V8 in Google Chrome prior to 107.0.5304.106 allowed a remote attacker to potentially exploit heap corruption via a…
• CVE-2022-3886 — CVSS 8.8 (high): Use after free in Speech Recognition in Google Chrome prior to 107.0.5304.106 allowed a remote attacker to potentially exploit heap…
• CVE-2022-3887 — CVSS 8.8 (high): Use after free in Web Workers in Google Chrome prior to 107.0.5304.106 allowed a remote attacker to potentially exploit heap corruption via…
• CVE-2022-3888 — CVSS 8.8 (high): Use after free in WebCodecs in Google Chrome prior to 107.0.5304.106 allowed a remote attacker to potentially exploit heap corruption via a…
• CVE-2022-3889 — CVSS 8.8 (high): Type confusion in V8 in Google Chrome prior to 107.0.5304.106 allowed a remote attacker to potentially exploit heap corruption via a…
• CVE-2022-4174 — CVSS 8.8 (high): Type confusion in V8 in Google Chrome prior to 108.0.5359.71 allowed a remote attacker to potentially exploit heap corruption via a crafted…
• CVE-2022-4175 — CVSS 8.8 (high): Use after free in Camera Capture in Google Chrome prior to 108.0.5359.71 allowed a remote attacker to potentially exploit heap corruption…
• CVE-2022-4176 — CVSS 8.8 (high): Out of bounds write in Lacros Graphics in Google Chrome on Chrome OS and Lacros prior to 108.0.5359.71 allowed a remote attacker who…
• CVE-2022-4177 — CVSS 8.8 (high): Use after free in Extensions in Google Chrome prior to 108.0.5359.71 allowed an attacker who convinced a user to install an extension to…
• CVE-2022-4178 — CVSS 8.8 (high): Use after free in Mojo in Google Chrome prior to 108.0.5359.71 allowed a remote attacker who had compromised the renderer process to…
• CVE-2022-4179 — CVSS 8.8 (high): Use after free in Audio in Google Chrome prior to 108.0.5359.71 allowed an attacker who convinced a user to install a malicious extension…
• CVE-2022-4180 — CVSS 8.8 (high): Use after free in Mojo in Google Chrome prior to 108.0.5359.71 allowed an attacker who convinced a user to install a malicious extension to…
• CVE-2022-4181 — CVSS 8.8 (high): Use after free in Forms in Google Chrome prior to 108.0.5359.71 allowed a remote attacker to potentially exploit heap corruption via a…
• CVE-2022-4190 — CVSS 8.8 (high): Insufficient data validation in Directory in Google Chrome prior to 108.0.5359.71 allowed a remote attacker to bypass file system…
• CVE-2022-4191 — CVSS 8.8 (high): Use after free in Sign-In in Google Chrome prior to 108.0.5359.71 allowed a remote attacker who convinced a user to engage in specific UI…
• CVE-2022-4192 — CVSS 8.8 (high): Use after free in Live Caption in Google Chrome prior to 108.0.5359.71 allowed a remote attacker who convinced a user to engage in specific…
• CVE-2022-4193 — CVSS 8.8 (high): Insufficient policy enforcement in File System API in Google Chrome prior to 108.0.5359.71 allowed a remote attacker to bypass file system…
• CVE-2022-4194 — CVSS 8.8 (high): Use after free in Accessibility in Google Chrome prior to 108.0.5359.71 allowed a remote attacker to potentially exploit heap corruption…
• CVE-2022-4262 — CVSS 8.8 (high) — actively exploited: Type confusion in V8 in Google Chrome prior to 108.0.5359.94 allowed a remote attacker to potentially exploit heap corruption via a crafted…
• CVE-2022-4436 — CVSS 8.8 (high): Use after free in Blink Media in Google Chrome prior to 108.0.5359.124 allowed a remote attacker to potentially exploit heap corruption via…
• CVE-2022-4437 — CVSS 8.8 (high): Use after free in Mojo IPC in Google Chrome prior to 108.0.5359.124 allowed a remote attacker to potentially exploit heap corruption via a…
• CVE-2022-4438 — CVSS 8.8 (high): Use after free in Blink Frames in Google Chrome prior to 108.0.5359.124 allowed a remote attacker who convinced the user to engage in…
• CVE-2022-4439 — CVSS 8.8 (high): Use after free in Aura in Google Chrome on Windows prior to 108.0.5359.124 allowed a remote attacker who convinced the user to engage in…
• CVE-2022-4440 — CVSS 8.8 (high): Use after free in Profiles in Google Chrome prior to 108.0.5359.124 allowed a remote attacker to potentially exploit heap corruption via a…
• CVE-2023-0128 — CVSS 8.8 (high): Use after free in Overview Mode in Google Chrome on Chrome OS prior to 109.0.5414.74 allowed a remote attacker who convinced a user to…
• CVE-2023-0129 — CVSS 8.8 (high): Heap buffer overflow in Network Service in Google Chrome prior to 109.0.5414.74 allowed an attacker who convinced a user to install a…
• CVE-2023-0134 — CVSS 8.8 (high): Use after free in Cart in Google Chrome prior to 109.0.5414.74 allowed an attacker who convinced a user to install a malicious extension to…
• CVE-2023-0136 — CVSS 8.8 (high): Inappropriate implementation in in Fullscreen API in Google Chrome on Android prior to 109.0.5414.74 allowed a remote attacker to execute…
• CVE-2023-0137 — CVSS 8.8 (high): Heap buffer overflow in Platform Apps in Google Chrome on Chrome OS prior to 109.0.5414.74 allowed an attacker who convinced a user to…
• CVE-2023-0138 — CVSS 8.8 (high): Heap buffer overflow in libphonenumber in Google Chrome prior to 109.0.5414.74 allowed a remote attacker to potentially exploit heap…
• CVE-2023-0471 — CVSS 8.8 (high): Use after free in WebTransport in Google Chrome prior to 109.0.5414.119 allowed a remote attacker to potentially exploit heap corruption…
• CVE-2023-0472 — CVSS 8.8 (high): Use after free in WebRTC in Google Chrome prior to 109.0.5414.119 allowed a remote attacker to potentially exploit heap corruption via a…
• CVE-2023-0473 — CVSS 8.8 (high): Type Confusion in ServiceWorker API in Google Chrome prior to 109.0.5414.119 allowed a remote attacker to potentially exploit heap…
• CVE-2023-0474 — CVSS 8.8 (high): Use after free in GuestView in Google Chrome prior to 109.0.5414.119 allowed an attacker who convinced a user to install a malicious…
• CVE-2023-0696 — CVSS 8.8 (high): Type confusion in V8 in Google Chrome prior to 110.0.5481.77 allowed a remote attacker to potentially exploit heap corruption via a crafted…
• CVE-2023-0698 — CVSS 8.8 (high): Out of bounds read in WebRTC in Google Chrome prior to 110.0.5481.77 allowed a remote attacker to perform an out of bounds memory read via…
• CVE-2023-0699 — CVSS 8.8 (high): Use after free in GPU in Google Chrome prior to 110.0.5481.77 allowed a remote attacker to potentially exploit heap corruption via a…
• CVE-2023-0701 — CVSS 8.8 (high): Heap buffer overflow in WebUI in Google Chrome prior to 110.0.5481.77 allowed a remote attacker who convinced a user to engage in specific…
• CVE-2023-0702 — CVSS 8.8 (high): Type confusion in Data Transfer in Google Chrome prior to 110.0.5481.77 allowed a remote attacker who convinced a user to engage in…
• CVE-2023-0703 — CVSS 8.8 (high): Type confusion in DevTools in Google Chrome prior to 110.0.5481.77 allowed a remote attacker who convinced a user to engage in specific UI…
• CVE-2023-0927 — CVSS 8.8 (high): Use after free in Web Payments API in Google Chrome on Android prior to 110.0.5481.177 allowed a remote attacker who had compromised the…
• CVE-2023-0928 — CVSS 8.8 (high): Use after free in SwiftShader in Google Chrome prior to 110.0.5481.177 allowed a remote attacker to potentially exploit heap corruption via…
• CVE-2023-0929 — CVSS 8.8 (high): Use after free in Vulkan in Google Chrome prior to 110.0.5481.177 allowed a remote attacker to potentially exploit heap corruption via a…
• CVE-2023-0930 — CVSS 8.8 (high): Heap buffer overflow in Video in Google Chrome prior to 110.0.5481.177 allowed a remote attacker to potentially exploit heap corruption via…
• CVE-2023-0931 — CVSS 8.8 (high): Use after free in Video in Google Chrome prior to 110.0.5481.177 allowed a remote attacker to potentially exploit heap corruption via a…
• CVE-2023-0932 — CVSS 8.8 (high): Use after free in WebRTC in Google Chrome on Windows prior to 110.0.5481.177 allowed a remote attacker who convinced the user to engage in…
• CVE-2023-0933 — CVSS 8.8 (high): Integer overflow in PDF in Google Chrome prior to 110.0.5481.177 allowed a remote attacker to potentially exploit heap corruption via a…
• CVE-2023-0941 — CVSS 8.8 (high): Use after free in Prompts in Google Chrome prior to 110.0.5481.177 allowed a remote attacker to potentially exploit heap corruption via a…
• CVE-2023-1213 — CVSS 8.8 (high): Use after free in Swiftshader in Google Chrome prior to 111.0.5563.64 allowed a remote attacker to potentially exploit heap corruption via…
• CVE-2023-1214 — CVSS 8.8 (high): Type confusion in V8 in Google Chrome prior to 111.0.5563.64 allowed a remote attacker to potentially exploit heap corruption via a crafted…
• CVE-2023-1215 — CVSS 8.8 (high): Type confusion in CSS in Google Chrome prior to 111.0.5563.64 allowed a remote attacker to potentially exploit heap corruption via a…
• CVE-2023-1216 — CVSS 8.8 (high): Use after free in DevTools in Google Chrome prior to 111.0.5563.64 allowed a remote attacker who had convienced the user to engage in…
• CVE-2023-1218 — CVSS 8.8 (high): Use after free in WebRTC in Google Chrome prior to 111.0.5563.64 allowed a remote attacker to potentially exploit heap corruption via a…
• CVE-2023-1219 — CVSS 8.8 (high): Heap buffer overflow in Metrics in Google Chrome prior to 111.0.5563.64 allowed a remote attacker who had compromised the renderer process…
• CVE-2023-1220 — CVSS 8.8 (high): Heap buffer overflow in UMA in Google Chrome prior to 111.0.5563.64 allowed a remote attacker who had compromised the renderer process to…
• CVE-2023-1222 — CVSS 8.8 (high): Heap buffer overflow in Web Audio API in Google Chrome prior to 111.0.5563.64 allowed a remote attacker to potentially exploit heap…
• CVE-2023-1227 — CVSS 8.8 (high): Use after free in Core in Google Chrome on Lacros prior to 111.0.5563.64 allowed a remote attacker who convinced a user to engage in…
• CVE-2023-1528 — CVSS 8.8 (high): Use after free in Passwords in Google Chrome prior to 111.0.5563.110 allowed a remote attacker who had compromised the renderer process to…
• CVE-2023-1530 — CVSS 8.8 (high): Use after free in PDF in Google Chrome prior to 111.0.5563.110 allowed a remote attacker to potentially exploit heap corruption via a…
• CVE-2023-1531 — CVSS 8.8 (high): Use after free in ANGLE in Google Chrome prior to 111.0.5563.110 allowed a remote attacker to potentially exploit heap corruption via a…
• CVE-2023-1532 — CVSS 8.8 (high): Out of bounds read in GPU Video in Google Chrome prior to 111.0.5563.110 allowed a remote attacker to potentially exploit heap corruption…
• CVE-2023-1533 — CVSS 8.8 (high): Use after free in WebProtect in Google Chrome prior to 111.0.5563.110 allowed a remote attacker to potentially exploit heap corruption via…
• CVE-2023-1534 — CVSS 8.8 (high): Out of bounds read in ANGLE in Google Chrome prior to 111.0.5563.110 allowed a remote attacker who had compromised the renderer process to…
• CVE-2023-1810 — CVSS 8.8 (high): Heap buffer overflow in Visuals in Google Chrome prior to 112.0.5615.49 allowed a remote attacker who had compromised the renderer process…
• CVE-2023-1811 — CVSS 8.8 (high): Use after free in Frames in Google Chrome prior to 112.0.5615.49 allowed a remote attacker who convinced a user to engage in specific UI…
• CVE-2023-1812 — CVSS 8.8 (high): Out of bounds memory access in DOM Bindings in Google Chrome prior to 112.0.5615.49 allowed a remote attacker to perform out of bounds…
• CVE-2023-1815 — CVSS 8.8 (high): Use after free in Networking APIs in Google Chrome prior to 112.0.5615.49 allowed a remote attacker who convinced a user to engage in…
• CVE-2023-1818 — CVSS 8.8 (high): Use after free in Vulkan in Google Chrome prior to 112.0.5615.49 allowed a remote attacker to potentially exploit heap corruption via a…
• CVE-2023-1820 — CVSS 8.8 (high): Heap buffer overflow in Browser History in Google Chrome prior to 112.0.5615.49 allowed a remote attacker who convinced a user to engage in…
• CVE-2023-2033 — CVSS 8.8 (high) — actively exploited: Type confusion in V8 in Google Chrome prior to 112.0.5615.121 allowed a remote attacker to potentially exploit heap corruption via a…
• CVE-2023-2133 — CVSS 8.8 (high): Out of bounds memory access in Service Worker API in Google Chrome prior to 112.0.5615.137 allowed a remote attacker to potentially exploit…
• CVE-2023-2134 — CVSS 8.8 (high): Out of bounds memory access in Service Worker API in Google Chrome prior to 112.0.5615.137 allowed a remote attacker to potentially exploit…
• CVE-2023-2137 — CVSS 8.8 (high): Heap buffer overflow in sqlite in Google Chrome prior to 112.0.5615.137 allowed a remote attacker to potentially exploit heap corruption…
• CVE-2023-2312 — CVSS 8.8 (high): Use after free in Offline in Google Chrome on Android prior to 116.0.5845.96 allowed a remote attacker who had compromised the renderer…
• CVE-2023-2461 — CVSS 8.8 (high): Use after free in OS Inputs in Google Chrome on ChromeOS prior to 113.0.5672.63 allowed a remote attacker who convinced a user to enage in…
• CVE-2023-2721 — CVSS 8.8 (high): Use after free in Navigation in Google Chrome prior to 113.0.5672.126 allowed a remote attacker to potentially exploit heap corruption via…
• CVE-2023-2722 — CVSS 8.8 (high): Use after free in Autofill UI in Google Chrome on Android prior to 113.0.5672.126 allowed a remote attacker to potentially exploit heap…
• CVE-2023-2723 — CVSS 8.8 (high): Use after free in DevTools in Google Chrome prior to 113.0.5672.126 allowed a remote attacker who had compromised the renderer process to…
• CVE-2023-2724 — CVSS 8.8 (high): Type confusion in V8 in Google Chrome prior to 113.0.5672.126 allowed a remote attacker to potentially exploit heap corruption via a…
• CVE-2023-2725 — CVSS 8.8 (high): Use after free in Guest View in Google Chrome prior to 113.0.5672.126 allowed an attacker who convinced a user to install a malicious…
• CVE-2023-2726 — CVSS 8.8 (high): Inappropriate implementation in WebApp Installs in Google Chrome prior to 113.0.5672.126 allowed an attacker who convinced a user to…
• CVE-2023-2929 — CVSS 8.8 (high): Out of bounds write in Swiftshader in Google Chrome prior to 114.0.5735.90 allowed a remote attacker to potentially exploit heap corruption…
• CVE-2023-2930 — CVSS 8.8 (high): Use after free in Extensions in Google Chrome prior to 114.0.5735.90 allowed an attacker who convinced a user to install a malicious…
• CVE-2023-2931 — CVSS 8.8 (high): Use after free in PDF in Google Chrome prior to 114.0.5735.90 allowed a remote attacker to potentially exploit heap corruption via a…
• CVE-2023-2932 — CVSS 8.8 (high): Use after free in PDF in Google Chrome prior to 114.0.5735.90 allowed a remote attacker to potentially exploit heap corruption via a…
• CVE-2023-2933 — CVSS 8.8 (high): Use after free in PDF in Google Chrome prior to 114.0.5735.90 allowed a remote attacker to potentially exploit heap corruption via a…
• CVE-2023-2934 — CVSS 8.8 (high): Out of bounds memory access in Mojo in Google Chrome prior to 114.0.5735.90 allowed a remote attacker to potentially exploit heap…
• CVE-2023-2935 — CVSS 8.8 (high): Type Confusion in V8 in Google Chrome prior to 114.0.5735.90 allowed a remote attacker to potentially exploit heap corruption via a crafted…
• CVE-2023-2936 — CVSS 8.8 (high): Type Confusion in V8 in Google Chrome prior to 114.0.5735.90 allowed a remote attacker to potentially exploit heap corruption via a crafted…
• CVE-2023-3079 — CVSS 8.8 (high) — actively exploited: Type confusion in V8 in Google Chrome prior to 114.0.5735.110 allowed a remote attacker to potentially exploit heap corruption via a…
• CVE-2023-3214 — CVSS 8.8 (high): Use after free in Autofill payments in Google Chrome prior to 114.0.5735.133 allowed a remote attacker to potentially exploit heap…
• CVE-2023-3215 — CVSS 8.8 (high): Use after free in WebRTC in Google Chrome prior to 114.0.5735.133 allowed a remote attacker to potentially exploit heap corruption via a…
• CVE-2023-3216 — CVSS 8.8 (high): Type confusion in V8 in Google Chrome prior to 114.0.5735.133 allowed a remote attacker to potentially exploit heap corruption via a…
• CVE-2023-3217 — CVSS 8.8 (high): Use after free in WebXR in Google Chrome prior to 114.0.5735.133 allowed a remote attacker to potentially exploit heap corruption via a…
• CVE-2023-3420 — CVSS 8.8 (high): Type Confusion in V8 in Google Chrome prior to 114.0.5735.198 allowed a remote attacker to potentially exploit heap corruption via a…
• CVE-2023-3421 — CVSS 8.8 (high): Use after free in Media in Google Chrome prior to 114.0.5735.198 allowed a remote attacker to potentially exploit heap corruption via a…
• CVE-2023-3422 — CVSS 8.8 (high): Use after free in Guest View in Google Chrome prior to 114.0.5735.198 allowed an attacker who convinced a user to install a malicious…
• CVE-2023-3727 — CVSS 8.8 (high): Use after free in WebRTC in Google Chrome prior to 115.0.5790.98 allowed a remote attacker to potentially exploit heap corruption via a…
• CVE-2023-3728 — CVSS 8.8 (high): Use after free in WebRTC in Google Chrome prior to 115.0.5790.98 allowed a remote attacker to potentially exploit heap corruption via a…
• CVE-2023-3730 — CVSS 8.8 (high): Use after free in Tab Groups in Google Chrome prior to 115.0.5790.98 allowed a remote attacker who convinced a user to engage in specific…
• CVE-2023-3732 — CVSS 8.8 (high): Out of bounds memory access in Mojo in Google Chrome prior to 115.0.5790.98 allowed a remote attacker who had compromised the renderer…
• CVE-2023-4069 — CVSS 8.8 (high): Type Confusion in V8 in Google Chrome prior to 115.0.5790.170 allowed a remote attacker to potentially exploit heap corruption via a…
• CVE-2023-4071 — CVSS 8.8 (high): Heap buffer overflow in Visuals in Google Chrome prior to 115.0.5790.170 allowed a remote attacker to potentially exploit heap corruption…
• CVE-2023-4072 — CVSS 8.8 (high): Out of bounds read and write in WebGL in Google Chrome prior to 115.0.5790.170 allowed a remote attacker to potentially exploit heap…
• CVE-2023-4073 — CVSS 8.8 (high): Out of bounds memory access in ANGLE in Google Chrome on Mac prior to 115.0.5790.170 allowed a remote attacker to potentially exploit heap…
• CVE-2023-4074 — CVSS 8.8 (high): Use after free in Blink Task Scheduling in Google Chrome prior to 115.0.5790.170 allowed a remote attacker to potentially exploit heap…
• CVE-2023-4075 — CVSS 8.8 (high): Use after free in Cast in Google Chrome prior to 115.0.5790.170 allowed a remote attacker to potentially exploit heap corruption via a…
• CVE-2023-4076 — CVSS 8.8 (high): Use after free in WebRTC in Google Chrome prior to 115.0.5790.170 allowed a remote attacker to potentially exploit heap corruption via a…
• CVE-2023-4077 — CVSS 8.8 (high): Insufficient data validation in Extensions in Google Chrome prior to 115.0.5790.170 allowed an attacker who convinced a user to install a…
• CVE-2023-4078 — CVSS 8.8 (high): Inappropriate implementation in Extensions in Google Chrome prior to 115.0.5790.170 allowed an attacker who convinced a user to install a…
• CVE-2023-4349 — CVSS 8.8 (high): Use after free in Device Trust Connectors in Google Chrome prior to 116.0.5845.96 allowed a remote attacker to potentially exploit heap…
• CVE-2023-4351 — CVSS 8.8 (high): Use after free in Network in Google Chrome prior to 116.0.5845.96 allowed a remote attacker who has elicited a browser shutdown to…
• CVE-2023-4352 — CVSS 8.8 (high): Type confusion in V8 in Google Chrome prior to 116.0.5845.96 allowed a remote attacker to potentially exploit heap corruption via a crafted…
• CVE-2023-4353 — CVSS 8.8 (high): Heap buffer overflow in ANGLE in Google Chrome prior to 116.0.5845.96 allowed a remote attacker to potentially exploit heap corruption via…
• CVE-2023-4354 — CVSS 8.8 (high): Heap buffer overflow in Skia in Google Chrome prior to 116.0.5845.96 allowed a remote attacker who had compromised the renderer process to…
• CVE-2023-4355 — CVSS 8.8 (high): Out of bounds memory access in V8 in Google Chrome prior to 116.0.5845.96 allowed a remote attacker to potentially exploit heap corruption…
• CVE-2023-4356 — CVSS 8.8 (high): Use after free in Audio in Google Chrome prior to 116.0.5845.96 allowed a remote attacker who has convinced a user to engage in specific UI…
• CVE-2023-4357 — CVSS 8.8 (high): Insufficient validation of untrusted input in XML in Google Chrome prior to 116.0.5845.96 allowed a remote attacker to bypass file access…
• CVE-2023-4358 — CVSS 8.8 (high): Use after free in DNS in Google Chrome prior to 116.0.5845.96 allowed a remote attacker to potentially exploit heap corruption via a…
• CVE-2023-4362 — CVSS 8.8 (high): Heap buffer overflow in Mojom IDL in Google Chrome prior to 116.0.5845.96 allowed a remote attacker who had compromised the renderer…
• CVE-2023-4366 — CVSS 8.8 (high): Use after free in Extensions in Google Chrome prior to 116.0.5845.96 allowed an attacker who convinced a user to install a malicious…
• CVE-2023-4368 — CVSS 8.8 (high): Insufficient policy enforcement in Extensions API in Google Chrome prior to 116.0.5845.96 allowed an attacker who convinced a user to…
• CVE-2023-4429 — CVSS 8.8 (high): Use after free in Loader in Google Chrome prior to 116.0.5845.110 allowed a remote attacker to potentially exploit heap corruption via a…
• CVE-2023-4430 — CVSS 8.8 (high): Use after free in Vulkan in Google Chrome prior to 116.0.5845.110 allowed a remote attacker to potentially exploit heap corruption via a…
• CVE-2023-4572 — CVSS 8.8 (high): Use after free in MediaStream in Google Chrome prior to 116.0.5845.140 allowed a remote attacker to potentially exploit heap corruption via…
• CVE-2023-4762 — CVSS 8.8 (high) — actively exploited: Type Confusion in V8 in Google Chrome prior to 116.0.5845.179 allowed a remote attacker to execute arbitrary code via a crafted HTML page…
• CVE-2023-4763 — CVSS 8.8 (high): Use after free in Networks in Google Chrome prior to 116.0.5845.179 allowed a remote attacker to potentially exploit heap corruption via a…
• CVE-2023-4863 — CVSS 8.8 (high) — actively exploited: Heap buffer overflow in libwebp in Google Chrome prior to 116.0.5845.187 and libwebp 1.3.2 allowed a remote attacker to perform an out of…
• CVE-2023-5186 — CVSS 8.8 (high): Use after free in Passwords in Google Chrome prior to 117.0.5938.132 allowed a remote attacker who convinced a user to engage in specific…
• CVE-2023-5187 — CVSS 8.8 (high): Use after free in Extensions in Google Chrome prior to 117.0.5938.132 allowed an attacker who convinced a user to install a malicious…
• CVE-2023-5217 — CVSS 8.8 (high) — actively exploited: Heap buffer overflow in vp8 encoding in libvpx in Google Chrome prior to 117.0.5938.132 and libvpx 1.13.1 allowed a remote attacker to…
• CVE-2023-5218 — CVSS 8.8 (high): Use after free in Site Isolation in Google Chrome prior to 118.0.5993.70 allowed a remote attacker to potentially exploit heap corruption…
• CVE-2023-5472 — CVSS 8.8 (high): Use after free in Profiles in Google Chrome prior to 118.0.5993.117 allowed a remote attacker to potentially exploit heap corruption via a…
• CVE-2023-5474 — CVSS 8.8 (high): Heap buffer overflow in PDF in Google Chrome prior to 118.0.5993.70 allowed a remote attacker who convinced a user to engage in specific…
• CVE-2023-5476 — CVSS 8.8 (high): Use after free in Blink History in Google Chrome prior to 118.0.5993.70 allowed a remote attacker to potentially exploit heap corruption…
• CVE-2023-5482 — CVSS 8.8 (high): Insufficient data validation in USB in Google Chrome prior to 119.0.6045.105 allowed a remote attacker to perform out of bounds memory…
• CVE-2023-5849 — CVSS 8.8 (high): Integer overflow in USB in Google Chrome prior to 119.0.6045.105 allowed a remote attacker to potentially exploit heap corruption via a…
• CVE-2023-5852 — CVSS 8.8 (high): Use after free in Printing in Google Chrome prior to 119.0.6045.105 allowed a remote attacker who convinced a user to engage in specific UI…
• CVE-2023-5854 — CVSS 8.8 (high): Use after free in Profiles in Google Chrome prior to 119.0.6045.105 allowed a remote attacker who convinced a user to engage in specific UI…
• CVE-2023-5855 — CVSS 8.8 (high): Use after free in Reading Mode in Google Chrome prior to 119.0.6045.105 allowed a remote attacker who convinced a user to engage in…
• CVE-2023-5856 — CVSS 8.8 (high): Use after free in Side Panel in Google Chrome prior to 119.0.6045.105 allowed a remote attacker who convinced a user to engage in specific…
• CVE-2023-5857 — CVSS 8.8 (high): Inappropriate implementation in Downloads in Google Chrome prior to 119.0.6045.105 allowed a remote attacker to potentially execute…
• CVE-2023-5996 — CVSS 8.8 (high): Use after free in WebAudio in Google Chrome prior to 119.0.6045.123 allowed a remote attacker to potentially exploit heap corruption via a…
• CVE-2023-5997 — CVSS 8.8 (high): Use after free in Garbage Collection in Google Chrome prior to 119.0.6045.159 allowed a remote attacker to potentially exploit heap…
• CVE-2023-6112 — CVSS 8.8 (high): Use after free in Navigation in Google Chrome prior to 119.0.6045.159 allowed a remote attacker to potentially exploit heap corruption via…
• CVE-2023-6346 — CVSS 8.8 (high): Use after free in WebAudio in Google Chrome prior to 119.0.6045.199 allowed a remote attacker to potentially exploit heap corruption via a…
• CVE-2023-6347 — CVSS 8.8 (high): Use after free in Mojo in Google Chrome prior to 119.0.6045.199 allowed a remote attacker to potentially exploit heap corruption via a…
• CVE-2023-6348 — CVSS 8.8 (high): Type Confusion in Spellcheck in Google Chrome prior to 119.0.6045.199 allowed a remote attacker who had compromised the renderer process to…
• CVE-2023-6350 — CVSS 8.8 (high): Use after free in libavif in Google Chrome prior to 119.0.6045.199 allowed a remote attacker to potentially exploit heap corruption via a…
• CVE-2023-6351 — CVSS 8.8 (high): Use after free in libavif in Google Chrome prior to 119.0.6045.199 allowed a remote attacker to potentially exploit heap corruption via a…
• CVE-2022-1876 — CVSS 8.8 (high): Heap buffer overflow in DevTools in Google Chrome prior to 102.0.5005.61 allowed an attacker who convinced a user to install a malicious…
• CVE-2022-2007 — CVSS 8.8 (high): Use after free in WebGPU in Google Chrome prior to 102.0.5005.115 allowed a remote attacker to potentially exploit heap corruption via a…
• CVE-2022-2008 — CVSS 8.8 (high): Double free in WebGL in Google Chrome prior to 102.0.5005.115 allowed a remote attacker to potentially exploit heap corruption via a…
• CVE-2022-2011 — CVSS 8.8 (high): Use after free in ANGLE in Google Chrome prior to 102.0.5005.115 allowed a remote attacker to potentially exploit heap corruption via a…
• CVE-2022-2156 — CVSS 8.8 (high): Use after free in Core in Google Chrome prior to 103.0.5060.53 allowed a remote attacker to potentially exploit heap corruption via a…
• CVE-2022-2157 — CVSS 8.8 (high): Use after free in Interest groups in Google Chrome prior to 103.0.5060.53 allowed a remote attacker who had compromised the renderer…
• CVE-2022-2158 — CVSS 8.8 (high): Type confusion in V8 in Google Chrome prior to 103.0.5060.53 allowed a remote attacker to potentially exploit heap corruption via a crafted…
• CVE-2022-2161 — CVSS 8.8 (high): Use after free in WebApp Provider in Google Chrome prior to 103.0.5060.53 allowed a remote attacker who convinced the user to engage in…
• CVE-2022-2162 — CVSS 8.8 (high): Insufficient policy enforcement in File System API in Google Chrome on Windows prior to 103.0.5060.53 allowed a remote attacker to bypass…
• CVE-2022-2163 — CVSS 8.8 (high): Use after free in Cast UI and Toolbar in Google Chrome prior to 103.0.5060.134 allowed an attacker who convinced a user to install a…
• CVE-2022-2294 — CVSS 8.8 (high) — actively exploited: Heap buffer overflow in WebRTC in Google Chrome prior to 103.0.5060.114 allowed a remote attacker to potentially exploit heap corruption…
• CVE-2022-2295 — CVSS 8.8 (high): Type confusion in V8 in Google Chrome prior to 103.0.5060.114 allowed a remote attacker to potentially exploit heap corruption via a…
• CVE-2022-2296 — CVSS 8.8 (high): Use after free in Chrome OS Shell in Google Chrome on Chrome OS prior to 103.0.5060.114 allowed a remote attacker who convinced a user to…
• CVE-2022-2477 — CVSS 8.8 (high): Use after free in Guest View in Google Chrome prior to 103.0.5060.134 allowed an attacker who convinced a user to install a malicious…
• CVE-2022-2478 — CVSS 8.8 (high): Use after free in PDF in Google Chrome prior to 103.0.5060.134 allowed a remote attacker to potentially exploit heap corruption via a…
• CVE-2022-2480 — CVSS 8.8 (high): Use after free in Service Worker API in Google Chrome prior to 103.0.5060.134 allowed a remote attacker to potentially exploit heap…
• CVE-2022-2481 — CVSS 8.8 (high): Use after free in Views in Google Chrome prior to 103.0.5060.134 allowed a remote attacker who convinced a user to engage in specific user…
• CVE-2022-2603 — CVSS 8.8 (high): Use after free in Omnibox in Google Chrome prior to 104.0.5112.79 allowed a remote attacker to potentially exploit heap corruption via a…
• CVE-2022-2604 — CVSS 8.8 (high): Use after free in Safe Browsing in Google Chrome prior to 104.0.5112.79 allowed a remote attacker to potentially exploit heap corruption…
• CVE-2022-2606 — CVSS 8.8 (high): Use after free in Managed devices API in Google Chrome prior to 104.0.5112.79 allowed a remote attacker who convinced a user to enable a…
• CVE-2022-2607 — CVSS 8.8 (high): Use after free in Tab Strip in Google Chrome on Chrome OS prior to 104.0.5112.79 allowed a remote attacker who convinced a user to engage…
• CVE-2022-2608 — CVSS 8.8 (high): Use after free in Overview Mode in Google Chrome on Chrome OS prior to 104.0.5112.79 allowed a remote attacker who convinced a user to…
• CVE-2022-2609 — CVSS 8.8 (high): Use after free in Nearby Share in Google Chrome on Chrome OS prior to 104.0.5112.79 allowed a remote attacker who convinced a user to…
• CVE-2022-2613 — CVSS 8.8 (high): Use after free in Input in Google Chrome on Chrome OS prior to 104.0.5112.79 allowed a remote attacker who convinced a user to enage in…
• CVE-2022-2614 — CVSS 8.8 (high): Use after free in Sign-In Flow in Google Chrome prior to 104.0.5112.79 allowed a remote attacker to potentially exploit heap corruption via…