Vulnerabilities > Google > Chrome > High

DATE CVE VULNERABILITY TITLE RISK
2022-11-30 CVE-2022-4180 Use After Free vulnerability in Google Chrome
Use after free in Mojo in Google Chrome prior to 108.0.5359.71 allowed an attacker who convinced a user to install a malicious extension to potentially exploit heap corruption via a crafted Chrome Extension.
network
low complexity
google CWE-416
8.8
2022-11-30 CVE-2022-4181 Use After Free vulnerability in Google Chrome
Use after free in Forms in Google Chrome prior to 108.0.5359.71 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page.
network
low complexity
google CWE-416
8.8
2022-11-30 CVE-2022-4190 Unspecified vulnerability in Google Chrome
Insufficient data validation in Directory in Google Chrome prior to 108.0.5359.71 allowed a remote attacker to bypass file system restrictions via a crafted HTML page.
network
low complexity
google
8.8
2022-11-30 CVE-2022-4191 Use After Free vulnerability in Google Chrome
Use after free in Sign-In in Google Chrome prior to 108.0.5359.71 allowed a remote attacker who convinced a user to engage in specific UI interaction to potentially exploit heap corruption via profile destruction.
network
low complexity
google CWE-416
8.8
2022-11-30 CVE-2022-4192 Use After Free vulnerability in Google Chrome
Use after free in Live Caption in Google Chrome prior to 108.0.5359.71 allowed a remote attacker who convinced a user to engage in specific UI interaction to potentially exploit heap corruption via UI interaction.
network
low complexity
google CWE-416
8.8
2022-11-30 CVE-2022-4193 Unspecified vulnerability in Google Chrome
Insufficient policy enforcement in File System API in Google Chrome prior to 108.0.5359.71 allowed a remote attacker to bypass file system restrictions via a crafted HTML page.
network
low complexity
google
8.8
2022-11-30 CVE-2022-4194 Use After Free vulnerability in Google Chrome
Use after free in Accessibility in Google Chrome prior to 108.0.5359.71 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page.
network
low complexity
google CWE-416
8.8
2022-11-09 CVE-2022-3445 Use After Free vulnerability in Google Chrome
Use after free in Skia in Google Chrome prior to 106.0.5249.119 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page.
network
low complexity
google CWE-416
8.8
2022-11-09 CVE-2022-3446 Out-of-bounds Write vulnerability in Google Chrome
Heap buffer overflow in WebSQL in Google Chrome prior to 106.0.5249.119 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page.
network
low complexity
google CWE-787
8.8
2022-11-09 CVE-2022-3448 Use After Free vulnerability in Google Chrome
Use after free in Permissions API in Google Chrome prior to 106.0.5249.119 allowed a remote attacker who convinced a user to engage in specific UI gestures to potentially exploit heap corruption via a crafted HTML page.
network
low complexity
google CWE-416
8.8