p PatchFirst

PatchFirst · Vulnerabilidades recientes

Vulnerabilidades de chromium-browser · Página 6

Vulnerabilidades publicadas para chromium-browser en los últimos 30 días: 0. Incluidas en el catálogo KEV: 0.

Filtrar vulnerabilidades
Borrar filtros

Vulnerabilidades: 1499

  1. CVE-2022-4180

    Alta · CVSS 8.8EPSS 0,5%Corrección disponible

    CVE-2022-4180

    Use after free in Mojo in Google Chrome prior to 108.0.5359.71 allowed an attacker who convinced a user to install a malicious extension to potentially exploit heap corruption via a crafted Chrome Extension. (Chromium security severity: High)

    • Actualiza a 108.0.5359.71-0ubuntu0.18.04.5
    Publicación Actualización
  2. CVE-2022-4179

    Alta · CVSS 8.8EPSS 0,51%Corrección disponible

    CVE-2022-4179

    Use after free in Audio in Google Chrome prior to 108.0.5359.71 allowed an attacker who convinced a user to install a malicious extension to potentially exploit heap corruption via a crafted Chrome Extension. (Chromium security severity: High)

    • Actualiza a 108.0.5359.71-0ubuntu0.18.04.5
    Publicación Actualización
  3. CVE-2022-4178

    Alta · CVSS 8.8EPSS 23,92%Corrección disponible

    CVE-2022-4178

    Use after free in Mojo in Google Chrome prior to 108.0.5359.71 allowed a remote attacker who had compromised the renderer process to potentially exploit heap corruption via a crafted HTML page. (Chromium security severity: High)

    • Actualiza a 108.0.5359.71-0ubuntu0.18.04.5
    Publicación Actualización
  4. CVE-2022-4177

    Alta · CVSS 8.8EPSS 0,5%Corrección disponible

    CVE-2022-4177

    Use after free in Extensions in Google Chrome prior to 108.0.5359.71 allowed an attacker who convinced a user to install an extension to potentially exploit heap corruption via a crafted Chrome Extension and UI interaction. (Chromium security severity: High)

    • Actualiza a 108.0.5359.71-0ubuntu0.18.04.5
    Publicación Actualización
  5. CVE-2022-4176

    Alta · CVSS 8.8EPSS 0,65%Corrección disponible

    CVE-2022-4176

    Out of bounds write in Lacros Graphics in Google Chrome on Chrome OS and Lacros prior to 108.0.5359.71 allowed a remote attacker who convinced a user to engage in specific UI interactions to potentially exploit heap corruption via UI interactions. (Chromium security severity: High)

    • Actualiza a 108.0.5359.71-0ubuntu0.18.04.5
    Publicación Actualización
  6. CVE-2022-4135

    Crítica · CVSS 9.6EPSS 31,86%En el catálogo KEVCorrección disponible

    CVE-2022-4135

    Heap buffer overflow in GPU in Google Chrome prior to 107.0.5304.121 allowed a remote attacker who had compromised the renderer process to potentially perform a sandbox escape via a crafted HTML page. (Chromium security severity: High)

    • Actualiza a 108.0.5359.71-0ubuntu0.18.04.5
    Publicación Actualización
  7. CVE-2022-3890

    Crítica · CVSS 9.6EPSS 0,9%Corrección disponible

    CVE-2022-3890

    Heap buffer overflow in Crashpad in Google Chrome on Android prior to 107.0.5304.106 allowed a remote attacker who had compromised the renderer process to potentially perform a sandbox escape via a crafted HTML page. (Chromium security severity: High)

    • Actualiza a 108.0.5359.71-0ubuntu0.18.04.5
    Publicación Actualización
  8. CVE-2022-3449

    Alta · CVSS 8.8EPSS 0,45%Corrección disponible

    CVE-2022-3449

    Use after free in Safe Browsing in Google Chrome prior to 106.0.5249.119 allowed an attacker who convinced a user to install a malicious extension to potentially exploit heap corruption via a crafted Chrome Extension. (Chromium security severity: High)

    • Actualiza a 107.0.5304.87-0ubuntu11.18.04.1
    Publicación Actualización
  9. CVE-2022-3448

    Alta · CVSS 8.8EPSS 0,71%Corrección disponible

    CVE-2022-3448

    Use after free in Permissions API in Google Chrome prior to 106.0.5249.119 allowed a remote attacker who convinced a user to engage in specific UI gestures to potentially exploit heap corruption via a crafted HTML page. (Chromium security severity: High)

    • Actualiza a 107.0.5304.87-0ubuntu11.18.04.1
    Publicación Actualización
  10. CVE-2022-3447

    Media · CVSS 4.3EPSS 0,7%Corrección disponible

    CVE-2022-3447

    Inappropriate implementation in Custom Tabs in Google Chrome on Android prior to 106.0.5249.119 allowed a remote attacker to spoof the contents of the Omnibox (URL bar) via a crafted HTML page. (Chromium security severity: High)

    • Actualiza a 107.0.5304.87-0ubuntu11.18.04.1
    Publicación Actualización

Comprueba tu servidor

Compara tu pila y las versiones instaladas con las bases actuales de vulnerabilidades.

Comprueba tu servidor →