Vulnerabilities > Google > Chrome > 20.0.1132.30

DATE CVE VULNERABILITY TITLE RISK
2022-07-27 CVE-2022-1870 Use After Free vulnerability in Google Chrome
Use after free in App Service in Google Chrome prior to 102.0.5005.61 allowed an attacker who convinced a user to install a malicious extension to potentially exploit heap corruption via a crafted Chrome Extension.
network
low complexity
google CWE-416
8.8
2022-07-27 CVE-2022-1871 Unspecified vulnerability in Google Chrome
Insufficient policy enforcement in File System API in Google Chrome prior to 102.0.5005.61 allowed an attacker who convinced a user to install a malicious extension to bypass file system policy via a crafted HTML page.
network
low complexity
google
4.3
2022-07-27 CVE-2022-1872 Unspecified vulnerability in Google Chrome
Insufficient policy enforcement in Extensions API in Google Chrome prior to 102.0.5005.61 allowed an attacker who convinced a user to install a malicious extension to bypass downloads policy via a crafted HTML page.
network
low complexity
google
4.3
2022-07-27 CVE-2022-1873 Exposure of Resource to Wrong Sphere vulnerability in Google Chrome
Insufficient policy enforcement in COOP in Google Chrome prior to 102.0.5005.61 allowed a remote attacker to leak cross-origin data via a crafted HTML page.
network
low complexity
google CWE-668
6.5
2022-07-27 CVE-2022-1874 Unspecified vulnerability in Google Chrome
Insufficient policy enforcement in Safe Browsing in Google Chrome on Mac prior to 102.0.5005.61 allowed a remote attacker to bypass downloads protection policy via a crafted HTML page.
network
low complexity
google
8.8
2022-07-27 CVE-2022-1875 Exposure of Resource to Wrong Sphere vulnerability in Google Chrome
Inappropriate implementation in PDF in Google Chrome prior to 102.0.5005.61 allowed a remote attacker to leak cross-origin data via a crafted HTML page.
network
low complexity
google CWE-668
4.3
2022-07-27 CVE-2022-1876 Out-of-bounds Write vulnerability in Google Chrome
Heap buffer overflow in DevTools in Google Chrome prior to 102.0.5005.61 allowed an attacker who convinced a user to install a malicious extension to potentially exploit heap corruption via a crafted HTML page.
network
low complexity
google CWE-787
8.8
2022-07-26 CVE-2022-1482 Out-of-bounds Write vulnerability in Google Chrome
Inappropriate implementation in WebGL in Google Chrome prior to 101.0.4951.41 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page.
network
low complexity
google CWE-787
6.5
2022-07-26 CVE-2022-1495 Authentication Bypass by Spoofing vulnerability in Google Chrome
Incorrect security UI in Downloads in Google Chrome on Android prior to 101.0.4951.41 allowed a remote attacker to spoof the APK downloads dialog via a crafted HTML page.
network
low complexity
google CWE-290
4.3
2022-07-26 CVE-2022-1496 Use After Free vulnerability in Google Chrome
Use after free in File Manager in Google Chrome prior to 101.0.4951.41 allowed a remote attacker to potentially exploit heap corruption via specific and direct user interaction.
network
low complexity
google CWE-416
8.8