Vulnerabilities

DATE CVE VULNERABILITY TITLE RISK
2024-09-23 CVE-2024-7024 Out-of-bounds Write vulnerability in Google Chrome
Inappropriate implementation in V8 in Google Chrome prior to 126.0.6478.54 allowed a remote attacker to potentially perform a sandbox escape via a crafted HTML page.
network
low complexity
google CWE-787
critical
9.6
2024-09-23 CVE-2018-20072 Unspecified vulnerability in Google Chrome
Insufficient data validation in PDF in Google Chrome prior to 73.0.3683.75 allowed a remote attacker to perform out of bounds memory access via a crafted PDF file.
local
low complexity
google
7.8
2024-09-23 CVE-2021-38023 Use After Free vulnerability in Google Chrome
Use after free in Extensions in Google Chrome prior to 92.0.4515.107 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page.
network
low complexity
google CWE-416
8.8
2024-09-23 CVE-2023-7281 Unspecified vulnerability in Google Chrome
Inappropriate implementation in Compositing in Google Chrome prior to 119.0.6045.105 allowed a remote attacker to perform UI spoofing via a crafted HTML page.
network
low complexity
google
4.3
2024-09-23 CVE-2023-7282 Unspecified vulnerability in Google Chrome
Inappropriate implementation in Navigation in Google Chrome prior to 113.0.5672.63 allowed a remote attacker who convinced a user to engage in specific UI gestures to perform domain spoofing via a crafted HTML page.
network
low complexity
google
4.3
2024-09-23 CVE-2024-7018 Out-of-bounds Write vulnerability in Google Chrome
Heap buffer overflow in PDF in Google Chrome prior to 124.0.6367.78 allowed a remote attacker to potentially exploit heap corruption via a crafted PDF file.
local
low complexity
google CWE-787
7.8
2024-09-23 CVE-2024-7019 Unspecified vulnerability in Google Chrome
Inappropriate implementation in UI in Google Chrome prior to 124.0.6367.60 allowed a remote attacker who convinced a user to engage in specific UI gestures to perform UI spoofing via a crafted HTML page.
network
low complexity
google
4.3
2024-09-23 CVE-2024-7020 Unspecified vulnerability in Google Chrome
Inappropriate implementation in Autofill in Google Chrome prior to 124.0.6367.60 allowed a remote attacker to perform UI spoofing via a crafted HTML page.
network
low complexity
google
4.3
2024-09-23 CVE-2024-7022 Use of Uninitialized Resource vulnerability in Google Chrome
Uninitialized Use in V8 in Google Chrome prior to 123.0.6312.58 allowed a remote attacker to perform out of bounds memory access via a crafted HTML page.
network
low complexity
google CWE-908
4.3
2024-09-23 CVE-2024-42861 Unspecified vulnerability in Linuxptp Project Linuxptp
An issue in IEEE 802.1AS linuxptp v.4.2 and before allowing a remote attacker to cause a denial of service via a crafted Pdelay_Req message to the time synchronization function
network
low complexity
linuxptp-project
7.5