Latest CVE Feed
-
6.5
MEDIUMCVE-2022-0807
Inappropriate implementation in Autofill in Google Chrome prior to 99.0.4844.51 allowed a remote attacker to bypass navigation restrictions via a crafted HTML page.... Read more
- Published: Apr. 05, 2022
- Modified: Nov. 21, 2024
-
6.5
MEDIUMCVE-2022-0806
Data leak in Canvas in Google Chrome prior to 99.0.4844.51 allowed a remote attacker who convinced a user to engage in screen sharing to potentially leak cross-origin data via a crafted HTML page.... Read more
- Published: Apr. 05, 2022
- Modified: Nov. 21, 2024
-
8.8
HIGHCVE-2022-0805
Use after free in Browser Switcher in Google Chrome prior to 99.0.4844.51 allowed a remote attacker who convinced a user to engage in specific user interaction to potentially exploit heap corruption via user interaction.... Read more
- Published: Apr. 05, 2022
- Modified: Nov. 21, 2024
-
6.5
MEDIUMCVE-2022-0804
Inappropriate implementation in Full screen mode in Google Chrome on Android prior to 99.0.4844.51 allowed a remote attacker to hide the contents of the Omnibox (URL bar) via a crafted HTML page.... Read more
- Published: Apr. 05, 2022
- Modified: Nov. 21, 2024
-
6.5
MEDIUMCVE-2022-0803
Inappropriate implementation in Permissions in Google Chrome prior to 99.0.4844.51 allowed a remote attacker to tamper with the contents of the Omnibox (URL bar) via a crafted HTML page.... Read more
- Published: Apr. 05, 2022
- Modified: Nov. 21, 2024
-
6.5
MEDIUMCVE-2022-0802
Inappropriate implementation in Full screen mode in Google Chrome on Android prior to 99.0.4844.51 allowed a remote attacker to hide the contents of the Omnibox (URL bar) via a crafted HTML page.... Read more
- Published: Apr. 05, 2022
- Modified: Nov. 21, 2024
-
6.1
MEDIUMCVE-2022-0801
Inappropriate implementation in HTML parser in Google Chrome prior to 99.0.4844.51 allowed a remote attacker to bypass XSS preventions via a crafted HTML page. (Chrome security severity: Medium)... Read more
- Published: Jan. 02, 2023
- Modified: Nov. 21, 2024
-
8.8
HIGHCVE-2022-0800
Heap buffer overflow in Cast UI in Google Chrome prior to 99.0.4844.51 allowed a remote attacker who convinced a user to engage in specific user interaction to potentially exploit heap corruption via a crafted HTML page.... Read more
- Published: Apr. 05, 2022
- Modified: Nov. 21, 2024
-
8.8
HIGHCVE-2022-0799
Insufficient policy enforcement in Installer in Google Chrome on Windows prior to 99.0.4844.51 allowed a remote attacker to perform local privilege escalation via a crafted offline installer file.... Read more
- Published: Apr. 05, 2022
- Modified: Nov. 21, 2024
-
8.8
HIGHCVE-2022-0798
Use after free in MediaStream in Google Chrome prior to 99.0.4844.51 allowed an attacker who convinced a user to install a malicious extension to potentially exploit heap corruption via a crafted Chrome Extension.... Read more
- Published: Apr. 05, 2022
- Modified: Nov. 21, 2024
-
8.8
HIGHCVE-2022-0797
Out of bounds memory access in Mojo in Google Chrome prior to 99.0.4844.51 allowed a remote attacker to perform an out of bounds memory write via a crafted HTML page.... Read more
- Published: Apr. 05, 2022
- Modified: Nov. 21, 2024
-
8.8
HIGHCVE-2022-0796
Use after free in Media in Google Chrome prior to 99.0.4844.51 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page.... Read more
- Published: Apr. 05, 2022
- Modified: Nov. 21, 2024
-
8.8
HIGHCVE-2022-0795
Type confusion in Blink Layout in Google Chrome prior to 99.0.4844.51 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page.... Read more
- Published: Apr. 05, 2022
- Modified: Nov. 21, 2024
-
8.8
HIGHCVE-2022-0794
Use after free in WebShare in Google Chrome prior to 99.0.4844.51 allowed a remote attacker who convinced a user to engage in specific user interaction to potentially exploit heap corruption via a crafted HTML page.... Read more
- Published: Apr. 05, 2022
- Modified: Nov. 21, 2024
-
8.8
HIGHCVE-2022-0793
Use after free in Cast in Google Chrome prior to 99.0.4844.51 allowed an attacker who convinced a user to install a malicious extension and engage in specific user interaction to potentially exploit heap corruption via a crafted Chrome Extension.... Read more
- Published: Apr. 05, 2022
- Modified: Nov. 21, 2024
-
6.5
MEDIUMCVE-2022-0792
Out of bounds read in ANGLE in Google Chrome prior to 99.0.4844.51 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page.... Read more
- Published: Apr. 05, 2022
- Modified: Nov. 21, 2024
-
8.8
HIGHCVE-2022-0791
Use after free in Omnibox in Google Chrome prior to 99.0.4844.51 allowed a remote attacker who convinced a user to engage in specific user interactions to potentially exploit heap corruption via user interactions.... Read more
- Published: Apr. 05, 2022
- Modified: Nov. 21, 2024
-
9.6
CRITICALCVE-2022-0790
Use after free in Cast UI in Google Chrome prior to 99.0.4844.51 allowed a remote attacker who convinced a user to engage in specific user interaction to potentially perform a sandbox escape via a crafted HTML page.... Read more
- Published: Apr. 05, 2022
- Modified: Nov. 21, 2024
-
8.8
HIGHCVE-2022-0789
Heap buffer overflow in ANGLE in Google Chrome prior to 99.0.4844.51 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page.... Read more
- Published: Apr. 05, 2022
- Modified: Nov. 21, 2024
-
9.8
CRITICALCVE-2022-0787
The Limit Login Attempts (Spam Protection) WordPress plugin before 5.1 does not sanitise and escape some parameters before using them in SQL statements via AJAX actions (available to unauthenticated users), leading to SQL Injections... Read more
Affected Products : limit_login_attempts- Published: Mar. 28, 2022
- Modified: Nov. 21, 2024