Vulnerabilities > Google > Chrome > 6.0.416.1

DATE CVE VULNERABILITY TITLE RISK
2023-05-30 CVE-2023-2930 Use After Free vulnerability in Google Chrome
Use after free in Extensions in Google Chrome prior to 114.0.5735.90 allowed an attacker who convinced a user to install a malicious extension to potentially exploit heap corruption via a crafted HTML page.
network
low complexity
google CWE-416
8.8
2023-05-30 CVE-2023-2931 Use After Free vulnerability in Google Chrome
Use after free in PDF in Google Chrome prior to 114.0.5735.90 allowed a remote attacker to potentially exploit heap corruption via a crafted PDF file.
network
low complexity
google CWE-416
8.8
2023-05-30 CVE-2023-2932 Use After Free vulnerability in Google Chrome
Use after free in PDF in Google Chrome prior to 114.0.5735.90 allowed a remote attacker to potentially exploit heap corruption via a crafted PDF file.
network
low complexity
google CWE-416
8.8
2023-05-30 CVE-2023-2933 Use After Free vulnerability in Google Chrome
Use after free in PDF in Google Chrome prior to 114.0.5735.90 allowed a remote attacker to potentially exploit heap corruption via a crafted PDF file.
network
low complexity
google CWE-416
8.8
2023-05-30 CVE-2023-2934 Out-of-bounds Write vulnerability in Google Chrome
Out of bounds memory access in Mojo in Google Chrome prior to 114.0.5735.90 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page.
network
low complexity
google CWE-787
8.8
2023-05-30 CVE-2023-2935 Type Confusion vulnerability in Google Chrome
Type Confusion in V8 in Google Chrome prior to 114.0.5735.90 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page.
network
low complexity
google CWE-843
8.8
2023-05-30 CVE-2023-2936 Type Confusion vulnerability in Google Chrome
Type Confusion in V8 in Google Chrome prior to 114.0.5735.90 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page.
network
low complexity
google CWE-843
8.8
2023-05-30 CVE-2023-2937 Unspecified vulnerability in Google Chrome
Inappropriate implementation in Picture In Picture in Google Chrome prior to 114.0.5735.90 allowed a remote attacker who had compromised the renderer process to spoof the contents of the Omnibox (URL bar) via a crafted HTML page.
network
low complexity
google
4.3
2023-05-30 CVE-2023-2938 Unspecified vulnerability in Google Chrome
Inappropriate implementation in Picture In Picture in Google Chrome prior to 114.0.5735.90 allowed a remote attacker who had compromised the renderer process to spoof the contents of the Omnibox (URL bar) via a crafted HTML page.
network
low complexity
google
4.3
2023-05-30 CVE-2023-2939 Link Following vulnerability in Google Chrome
Insufficient data validation in Installer in Google Chrome on Windows prior to 114.0.5735.90 allowed a local attacker to perform privilege escalation via crafted symbolic link.
local
low complexity
google CWE-59
7.8