Vulnerabilities > Google > Chrome > 4.1.249.1017

DATE CVE VULNERABILITY TITLE RISK
2022-11-30 CVE-2022-4190 Unspecified vulnerability in Google Chrome
Insufficient data validation in Directory in Google Chrome prior to 108.0.5359.71 allowed a remote attacker to bypass file system restrictions via a crafted HTML page.
network
low complexity
google
8.8
2022-11-30 CVE-2022-4191 Use After Free vulnerability in Google Chrome
Use after free in Sign-In in Google Chrome prior to 108.0.5359.71 allowed a remote attacker who convinced a user to engage in specific UI interaction to potentially exploit heap corruption via profile destruction.
network
low complexity
google CWE-416
8.8
2022-11-30 CVE-2022-4192 Use After Free vulnerability in Google Chrome
Use after free in Live Caption in Google Chrome prior to 108.0.5359.71 allowed a remote attacker who convinced a user to engage in specific UI interaction to potentially exploit heap corruption via UI interaction.
network
low complexity
google CWE-416
8.8
2022-11-30 CVE-2022-4193 Unspecified vulnerability in Google Chrome
Insufficient policy enforcement in File System API in Google Chrome prior to 108.0.5359.71 allowed a remote attacker to bypass file system restrictions via a crafted HTML page.
network
low complexity
google
8.8
2022-11-30 CVE-2022-4194 Use After Free vulnerability in Google Chrome
Use after free in Accessibility in Google Chrome prior to 108.0.5359.71 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page.
network
low complexity
google CWE-416
8.8
2022-11-30 CVE-2022-4195 Unspecified vulnerability in Google Chrome
Insufficient policy enforcement in Safe Browsing in Google Chrome prior to 108.0.5359.71 allowed a remote attacker to bypass Safe Browsing warnings via a malicious file.
network
low complexity
google
4.3
2022-11-25 CVE-2022-4135 Out-of-bounds Write vulnerability in multiple products
Heap buffer overflow in GPU in Google Chrome prior to 107.0.5304.121 allowed a remote attacker who had compromised the renderer process to potentially perform a sandbox escape via a crafted HTML page.
network
low complexity
google microsoft CWE-787
critical
9.6
2022-11-09 CVE-2022-3445 Use After Free vulnerability in Google Chrome
Use after free in Skia in Google Chrome prior to 106.0.5249.119 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page.
network
low complexity
google CWE-416
8.8
2022-11-09 CVE-2022-3446 Out-of-bounds Write vulnerability in Google Chrome
Heap buffer overflow in WebSQL in Google Chrome prior to 106.0.5249.119 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page.
network
low complexity
google CWE-787
8.8
2022-11-09 CVE-2022-3447 Unspecified vulnerability in Google Chrome
Inappropriate implementation in Custom Tabs in Google Chrome on Android prior to 106.0.5249.119 allowed a remote attacker to spoof the contents of the Omnibox (URL bar) via a crafted HTML page.
network
low complexity
google
4.3