Vulnerabilities > Google > Chrome > 14.0.835.121
| DATE | CVE | VULNERABILITY TITLE | RISK |
|---|---|---|---|
| 2024-11-27 | CVE-2024-9369 | Improper Validation of Specified Quantity in Input vulnerability in Google Chrome Insufficient data validation in Mojo in Google Chrome prior to 129.0.6668.89 allowed a remote attacker who had compromised the renderer process to perform an out of bounds memory write via a crafted HTML page. | 9.6 |
| 2024-11-12 | CVE-2024-11110 | Unspecified vulnerability in Google Chrome Inappropriate implementation in Extensions in Google Chrome prior to 131.0.6778.69 allowed a remote attacker to bypass site isolation via a crafted Chrome Extension. | 6.5 |
| 2024-11-12 | CVE-2024-11111 | Unspecified vulnerability in Google Chrome Inappropriate implementation in Autofill in Google Chrome prior to 131.0.6778.69 allowed a remote attacker who convinced a user to engage in specific UI gestures to perform UI spoofing via a crafted HTML page. | 4.3 |
| 2024-11-12 | CVE-2024-11112 | Use After Free vulnerability in Google Chrome Use after free in Media in Google Chrome on Windows prior to 131.0.6778.69 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. | 8.8 |
| 2024-11-12 | CVE-2024-11113 | Use After Free vulnerability in Google Chrome Use after free in Accessibility in Google Chrome prior to 131.0.6778.69 allowed a remote attacker who had compromised the renderer process to potentially exploit heap corruption via a crafted HTML page. | 8.8 |
| 2024-11-12 | CVE-2024-11114 | Unspecified vulnerability in Google Chrome Inappropriate implementation in Views in Google Chrome on Windows prior to 131.0.6778.69 allowed a remote attacker who had compromised the renderer process to potentially perform a sandbox escape via a crafted HTML page. | 8.3 |
| 2024-11-12 | CVE-2024-11115 | Unspecified vulnerability in Google Chrome Insufficient policy enforcement in Navigation in Google Chrome on iOS prior to 131.0.6778.69 allowed a remote attacker to perform privilege escalation via a series of UI gestures. | 8.8 |
| 2024-11-12 | CVE-2024-11116 | Unspecified vulnerability in Google Chrome Inappropriate implementation in Blink in Google Chrome prior to 131.0.6778.69 allowed a remote attacker who convinced a user to engage in specific UI gestures to perform UI spoofing via a crafted HTML page. | 4.3 |
| 2024-11-12 | CVE-2024-11117 | Unspecified vulnerability in Google Chrome Inappropriate implementation in FileSystem in Google Chrome prior to 131.0.6778.69 allowed a remote attacker to bypass filesystem restrictions via a crafted HTML page. | 4.3 |
| 2024-11-06 | CVE-2024-10826 | Use After Free vulnerability in Google Chrome Use after free in Family Experiences in Google Chrome on Android prior to 130.0.6723.116 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. | 8.8 |