Vulnerabilities > Google > Chrome > 37.0.2062.35

DATE CVE VULNERABILITY TITLE RISK
2024-10-15 CVE-2024-9954 Use After Free vulnerability in Google Chrome
Use after free in AI in Google Chrome prior to 130.0.6723.58 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page.
network
low complexity
google CWE-416
8.8
2024-10-15 CVE-2024-9955 Use After Free vulnerability in Google Chrome
Use after free in WebAuthentication in Google Chrome prior to 130.0.6723.58 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page.
network
low complexity
google CWE-416
8.8
2024-10-15 CVE-2024-9956 Unspecified vulnerability in Google Chrome
Inappropriate implementation in WebAuthentication in Google Chrome on Android prior to 130.0.6723.58 allowed a local attacker to perform privilege escalation via a crafted HTML page.
local
low complexity
google
7.8
2024-10-15 CVE-2024-9957 Use After Free vulnerability in Google Chrome
Use after free in UI in Google Chrome on iOS prior to 130.0.6723.58 allowed a remote attacker who convinced a user to engage in specific UI gestures to potentially exploit heap corruption via a crafted HTML page.
network
low complexity
google CWE-416
8.8
2024-10-15 CVE-2024-9958 Unspecified vulnerability in Google Chrome
Inappropriate implementation in PictureInPicture in Google Chrome prior to 130.0.6723.58 allowed a remote attacker to perform UI spoofing via a crafted HTML page.
network
low complexity
google
4.3
2024-10-15 CVE-2024-9959 Use After Free vulnerability in Google Chrome
Use after free in DevTools in Google Chrome prior to 130.0.6723.58 allowed a remote attacker who had compromised the renderer process to potentially exploit heap corruption via a crafted Chrome Extension.
network
low complexity
google CWE-416
8.8
2024-10-15 CVE-2024-9960 Use After Free vulnerability in Google Chrome
Use after free in Dawn in Google Chrome prior to 130.0.6723.58 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page.
network
high complexity
google CWE-416
7.5
2024-10-15 CVE-2024-9961 Use After Free vulnerability in Google Chrome
Use after free in ParcelTracking in Google Chrome on iOS prior to 130.0.6723.58 allowed a remote attacker who convinced a user to engage in specific UI gestures to potentially exploit heap corruption via a crafted HTML page.
network
low complexity
google CWE-416
8.8
2024-10-15 CVE-2024-9962 Unspecified vulnerability in Google Chrome
Inappropriate implementation in Permissions in Google Chrome prior to 130.0.6723.58 allowed a remote attacker who convinced a user to engage in specific UI gestures to perform UI spoofing via a crafted HTML page.
network
low complexity
google
4.3
2024-10-15 CVE-2024-9963 Unspecified vulnerability in Google Chrome
Insufficient data validation in Downloads in Google Chrome prior to 130.0.6723.58 allowed a remote attacker who convinced a user to engage in specific UI gestures to perform UI spoofing via a crafted HTML page.
network
low complexity
google
4.3