Vulnerabilities > Google > Chrome > 102.0.5005.10

DATE CVE VULNERABILITY TITLE RISK
2022-07-27 CVE-2022-1870 Use After Free vulnerability in Google Chrome
Use after free in App Service in Google Chrome prior to 102.0.5005.61 allowed an attacker who convinced a user to install a malicious extension to potentially exploit heap corruption via a crafted Chrome Extension.
network
low complexity
google CWE-416
8.8
2022-07-27 CVE-2022-1871 Unspecified vulnerability in Google Chrome
Insufficient policy enforcement in File System API in Google Chrome prior to 102.0.5005.61 allowed an attacker who convinced a user to install a malicious extension to bypass file system policy via a crafted HTML page.
network
low complexity
google
4.3
2022-07-27 CVE-2022-1872 Unspecified vulnerability in Google Chrome
Insufficient policy enforcement in Extensions API in Google Chrome prior to 102.0.5005.61 allowed an attacker who convinced a user to install a malicious extension to bypass downloads policy via a crafted HTML page.
network
low complexity
google
4.3
2022-07-27 CVE-2022-1873 Exposure of Resource to Wrong Sphere vulnerability in Google Chrome
Insufficient policy enforcement in COOP in Google Chrome prior to 102.0.5005.61 allowed a remote attacker to leak cross-origin data via a crafted HTML page.
network
low complexity
google CWE-668
6.5
2022-07-27 CVE-2022-1874 Unspecified vulnerability in Google Chrome
Insufficient policy enforcement in Safe Browsing in Google Chrome on Mac prior to 102.0.5005.61 allowed a remote attacker to bypass downloads protection policy via a crafted HTML page.
network
low complexity
google
8.8
2022-07-27 CVE-2022-1875 Exposure of Resource to Wrong Sphere vulnerability in Google Chrome
Inappropriate implementation in PDF in Google Chrome prior to 102.0.5005.61 allowed a remote attacker to leak cross-origin data via a crafted HTML page.
network
low complexity
google CWE-668
4.3
2022-07-27 CVE-2022-1876 Out-of-bounds Write vulnerability in Google Chrome
Heap buffer overflow in DevTools in Google Chrome prior to 102.0.5005.61 allowed an attacker who convinced a user to install a malicious extension to potentially exploit heap corruption via a crafted HTML page.
network
low complexity
google CWE-787
8.8