Medium

DATE	CVE	VULNERABILITY TITLE	RISK
2024-01-24	CVE-2024-0811	Inappropriate implementation in Extensions API in Google Chrome prior to 121.0.6167.85 allowed an attacker who convinced a user to install a malicious extension to leak cross-origin data via a crafted Chrome Extension. network low complexity google fedoraproject	4.3
2024-01-24	CVE-2024-0814	Origin Validation Error vulnerability in multiple products Incorrect security UI in Payments in Google Chrome prior to 121.0.6167.85 allowed a remote attacker to potentially spoof security UI via a crafted HTML page. network low complexity google fedoraproject CWE-346	6.5
2024-01-10	CVE-2024-0333	Insufficient data validation in Extensions in Google Chrome prior to 120.0.6099.216 allowed an attacker in a privileged network position to install a malicious extension via a crafted HTML page. network high complexity google fedoraproject	5.3
2023-12-20	CVE-2023-3742	Unspecified vulnerability in Google Chrome Insufficient policy enforcement in ADB in Google Chrome on ChromeOS prior to 114.0.5735.90 allowed a local attacker to bypass device policy restrictions via physical access to the device. low complexity google	6.8
2023-12-06	CVE-2023-6511	Inappropriate implementation in Autofill in Google Chrome prior to 120.0.6099.62 allowed a remote attacker to bypass Autofill restrictions via a crafted HTML page. network low complexity debian fedoraproject google	4.3
2023-12-06	CVE-2023-6512	Inappropriate implementation in Web Browser UI in Google Chrome prior to 120.0.6099.62 allowed a remote attacker to potentially spoof the contents of an iframe dialog context menu via a crafted HTML page. network low complexity debian fedoraproject google	6.5
2023-11-01	CVE-2023-5480	Cross-site Scripting vulnerability in multiple products Inappropriate implementation in Payments in Google Chrome prior to 119.0.6045.105 allowed a remote attacker to bypass XSS preventions via a malicious file. network low complexity google debian fedoraproject CWE-79	6.1
2023-11-01	CVE-2023-5850	Incorrect security UI in Downloads in Google Chrome prior to 119.0.6045.105 allowed a remote attacker to perform domain spoofing via a crafted domain name. network low complexity google debian fedoraproject	4.3
2023-11-01	CVE-2023-5851	Origin Validation Error vulnerability in multiple products Inappropriate implementation in Downloads in Google Chrome prior to 119.0.6045.105 allowed a remote attacker to obfuscate security UI via a crafted HTML page. network low complexity google debian fedoraproject CWE-346	4.3
2023-11-01	CVE-2023-5853	Origin Validation Error vulnerability in multiple products Incorrect security UI in Downloads in Google Chrome prior to 119.0.6045.105 allowed a remote attacker to obfuscate security UI via a crafted HTML page. network low complexity google debian fedoraproject CWE-346	4.3