Latest CVE Feed
-
9.6
CRITICALCVE-2022-0466
Inappropriate implementation in Extensions Platform in Google Chrome prior to 98.0.4758.80 allowed an attacker who convinced a user to install a malicious extension to potentially perform a sandbox escape via a crafted HTML page.... Read more
- EPSS Score: %0.19
- Published: Apr. 05, 2022
- Modified: Nov. 21, 2024
-
9.6
CRITICALCVE-2022-0097
Inappropriate implementation in DevTools in Google Chrome prior to 97.0.4692.71 allowed an attacker who convinced a user to install a malicious extension to to potentially allow extension to escape the sandbox via a crafted HTML page.... Read more
- EPSS Score: %0.28
- Published: Feb. 12, 2022
- Modified: Nov. 21, 2024
-
9.6
CRITICALCVE-2021-35222
This vulnerability allows attackers to impersonate users and perform arbitrary actions leading to a Remote Code Execution (RCE) from the Alerts Settings page.... Read more
- EPSS Score: %0.66
- Published: Aug. 31, 2021
- Modified: Nov. 21, 2024
-
9.6
CRITICALCVE-2021-21226
Use after free in navigation in Google Chrome prior to 90.0.4430.85 allowed a remote attacker who had compromised the renderer process to potentially perform a sandbox escape via a crafted HTML page.... Read more
- EPSS Score: %1.35
- Published: Apr. 26, 2021
- Modified: Nov. 21, 2024
-
9.6
CRITICALCVE-2021-21155
Heap buffer overflow in Tab Strip in Google Chrome on Windows prior to 88.0.4324.182 allowed a remote attacker who had compromised the renderer process to potentially perform a sandbox escape via a crafted HTML page.... Read more
- EPSS Score: %0.85
- Published: Feb. 22, 2021
- Modified: Nov. 21, 2024
-
9.6
CRITICALCVE-2021-21150
Use after free in Downloads in Google Chrome on Windows prior to 88.0.4324.182 allowed a remote attacker who had compromised the renderer process to potentially perform a sandbox escape via a crafted HTML page.... Read more
- EPSS Score: %0.78
- Published: Feb. 22, 2021
- Modified: Nov. 21, 2024
-
9.6
CRITICALCVE-2020-6509
Use after free in extensions in Google Chrome prior to 83.0.4103.116 allowed an attacker who convinced a user to install a malicious extension to potentially perform a sandbox escape via a crafted Chrome Extension.... Read more
Affected Products : chrome- EPSS Score: %0.26
- Published: Jul. 22, 2020
- Modified: Nov. 21, 2024
-
9.6
CRITICALCVE-2020-6493
Use after free in WebAuthentication in Google Chrome prior to 83.0.4103.97 allowed a remote attacker who had compromised the renderer process to potentially perform a sandbox escape via a crafted HTML page.... Read more
- EPSS Score: %3.61
- Published: Jun. 03, 2020
- Modified: Nov. 21, 2024
-
9.6
CRITICALCVE-2020-6466
Use after free in media in Google Chrome prior to 83.0.4103.61 allowed a remote attacker who had compromised the renderer process to potentially perform a sandbox escape via a crafted HTML page.... Read more
- EPSS Score: %1.49
- Published: May. 21, 2020
- Modified: Nov. 21, 2024
-
9.6
CRITICALCVE-2020-6462
Use after free in task scheduling in Google Chrome prior to 81.0.4044.129 allowed a remote attacker who had compromised the renderer process to potentially perform a sandbox escape via a crafted HTML page.... Read more
- EPSS Score: %1.09
- Published: May. 21, 2020
- Modified: Nov. 21, 2024
-
9.6
CRITICALCVE-2020-16016
Inappropriate implementation in base in Google Chrome prior to 86.0.4240.193 allowed a remote attacker who had compromised the renderer process to potentially perform a sandbox escape via a crafted HTML page.... Read more
Affected Products : chrome- EPSS Score: %0.39
- Published: Jan. 08, 2021
- Modified: Nov. 21, 2024
-
9.6
CRITICALCVE-2020-16011
Heap buffer overflow in UI in Google Chrome on Windows prior to 86.0.4240.183 allowed a remote attacker who had compromised the renderer process to potentially perform a sandbox escape via a crafted HTML page.... Read more
- EPSS Score: %1.60
- Published: Nov. 03, 2020
- Modified: Nov. 21, 2024
-
9.6
CRITICALCVE-2020-15999
Heap buffer overflow in Freetype in Google Chrome prior to 86.0.4240.111 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page.... Read more
Affected Products : fedora debian_linux ontap_select_deploy_administration_utility chrome backports_sle freetype- Actively Exploited
- EPSS Score: %93.15
- Published: Nov. 03, 2020
- Modified: Feb. 05, 2025
-
9.6
CRITICALCVE-2018-17472
Incorrect handling of googlechrome:// URL scheme on iOS in Intents in Google Chrome prior to 70.0.3538.67 allowed a remote attacker to escape the <iframe> sandbox via a crafted HTML page.... Read more
- EPSS Score: %0.90
- Published: Nov. 14, 2018
- Modified: Nov. 21, 2024
-
9.6
CRITICALCVE-2022-0973
Use after free in Safe Browsing in Google Chrome prior to 99.0.4844.74 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page.... Read more
- EPSS Score: %0.54
- Published: Jul. 21, 2022
- Modified: Nov. 21, 2024
-
9.6
CRITICALCVE-2015-8789
Use-after-free vulnerability in the EbmlMaster::Read function in libEBML before 1.3.3 allows context-dependent attackers to have unspecified impact via a "deeply nested element with infinite size" followed by another element of an upper level in an EBML d... Read more
Affected Products : libebml- EPSS Score: %0.38
- Published: Jan. 29, 2016
- Modified: Apr. 12, 2025
-
9.6
CRITICALCVE-2021-38013
Heap buffer overflow in fingerprint recognition in Google Chrome on ChromeOS prior to 96.0.4664.45 allowed a remote attacker who had compromised a WebUI renderer process to potentially perform a sandbox escape via a crafted HTML page.... Read more
- EPSS Score: %1.33
- Published: Dec. 23, 2021
- Modified: Nov. 21, 2024
-
9.6
CRITICALCVE-2021-37973
Use after free in Portals in Google Chrome prior to 94.0.4606.61 allowed a remote attacker who had compromised the renderer process to potentially perform a sandbox escape via a crafted HTML page.... Read more
- Actively Exploited
- EPSS Score: %19.20
- Published: Oct. 08, 2021
- Modified: Feb. 03, 2025
-
9.6
CRITICALCVE-2021-3694
LedgerSMB does not sufficiently HTML-encode error messages sent to the browser. By sending a specially crafted URL to an authenticated user, this flaw can be abused for remote code execution and information disclosure.... Read more
- EPSS Score: %0.62
- Published: Aug. 23, 2021
- Modified: Nov. 21, 2024
-
9.6
CRITICALCVE-2025-42989
RFC inbound processing�does not perform necessary authorization checks for an authenticated user, resulting in escalation of privileges. On successful exploitation the attacker could critically impact both integrity and availability of the application.... Read more
Affected Products :- Published: Jun. 10, 2025
- Modified: Jun. 12, 2025