Vulnerabilities > Google > Chrome > 126.0.6478.182

DATE CVE VULNERABILITY TITLE RISK
2024-09-17 CVE-2024-8904 Type Confusion vulnerability in Google Chrome
Type Confusion in V8 in Google Chrome prior to 129.0.6668.58 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page.
network
low complexity
google CWE-843
8.8
2024-09-17 CVE-2024-8905 Out-of-bounds Write vulnerability in Google Chrome
Inappropriate implementation in V8 in Google Chrome prior to 129.0.6668.58 allowed a remote attacker to potentially exploit stack corruption via a crafted HTML page.
network
low complexity
google CWE-787
8.8
2024-09-17 CVE-2024-8906 Unspecified vulnerability in Google Chrome
Incorrect security UI in Downloads in Google Chrome prior to 129.0.6668.58 allowed a remote attacker who convinced a user to engage in specific UI gestures to perform UI spoofing via a crafted HTML page.
network
low complexity
google
4.3
2024-09-17 CVE-2024-8908 Unspecified vulnerability in Google Chrome
Inappropriate implementation in Autofill in Google Chrome prior to 129.0.6668.58 allowed a remote attacker to perform UI spoofing via a crafted HTML page.
network
low complexity
google
4.3
2024-09-17 CVE-2024-8909 Unspecified vulnerability in Google Chrome
Inappropriate implementation in UI in Google Chrome on iOS prior to 129.0.6668.58 allowed a remote attacker to perform UI spoofing via a crafted HTML page.
network
low complexity
google
4.3
2024-09-03 CVE-2024-7970 Out-of-bounds Write vulnerability in Google Chrome
Out of bounds write in V8 in Google Chrome prior to 128.0.6613.119 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page.
network
low complexity
google CWE-787
8.8
2024-09-03 CVE-2024-8362 Use After Free vulnerability in Google Chrome
Use after free in WebAudio in Google Chrome prior to 128.0.6613.119 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page.
network
low complexity
google CWE-416
8.8
2024-08-21 CVE-2024-7971 Type Confusion vulnerability in multiple products
Type confusion in V8 in Google Chrome prior to 128.0.6613.84 allowed a remote attacker to exploit heap corruption via a crafted HTML page.
network
low complexity
google microsoft CWE-843
critical
9.6
2024-08-21 CVE-2024-7974 Unspecified vulnerability in Google Chrome
Insufficient data validation in V8 API in Google Chrome prior to 128.0.6613.84 allowed a remote attacker to potentially exploit heap corruption via a crafted Chrome Extension.
network
low complexity
google
8.8
2024-08-21 CVE-2024-7975 Unspecified vulnerability in Google Chrome
Inappropriate implementation in Permissions in Google Chrome prior to 128.0.6613.84 allowed a remote attacker to perform UI spoofing via a crafted HTML page.
network
low complexity
google
4.3