CVSS: 10.0EPSS: 0%CPEs: 2EXPL: 0CVE-2022-2855 – Gentoo Linux Security Advisory 202208-35
https://notcve.org/view.php?id=CVE-2022-2855
22 Aug 2022 — Use after free in ANGLE in Google Chrome prior to 104.0.5112.101 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. Un uso de memoria previamente liberada en ANGLE en Google Chrome versiones anteriores a 104.0.5112.101, permitía a un atacante remoto explotar potencialmente una corrupción de pila por medio de una página HTML diseñada. Multiple vulnerabilities have been found in Chromium and its derivatives, the worst of which could result in remote code execution. Versi... • https://chromereleases.googleblog.com/2022/08/stable-channel-update-for-desktop_16.html • CWE-416: Use After Free •
CVSS: 10.0EPSS: 0%CPEs: 2EXPL: 0CVE-2022-2857 – Gentoo Linux Security Advisory 202208-35
https://notcve.org/view.php?id=CVE-2022-2857
22 Aug 2022 — Use after free in Blink in Google Chrome prior to 104.0.5112.101 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. Un uso de memoria previamente liberada en Blink en Google Chrome versiones anteriores a 104.0.5112.101, permitía a un atacante remoto explotar potencialmente una corrupción de pila por medio de una página HTML diseñada. Multiple vulnerabilities have been found in Chromium and its derivatives, the worst of which could result in remote code execution. Versi... • https://chromereleases.googleblog.com/2022/08/stable-channel-update-for-desktop_16.html • CWE-362: Concurrent Execution using Shared Resource with Improper Synchronization ('Race Condition') •
CVSS: 10.0EPSS: 0%CPEs: 2EXPL: 0CVE-2022-2858 – Gentoo Linux Security Advisory 202208-35
https://notcve.org/view.php?id=CVE-2022-2858
22 Aug 2022 — Use after free in Sign-In Flow in Google Chrome prior to 104.0.5112.101 allowed a remote attacker to potentially exploit heap corruption via specific UI interaction. Un uso de memoria previamente liberada en Sign-In Flow en Google Chrome versiones anteriores a 104.0.5112.101, permitía a un atacante remoto explotar potencialmente una corrupción de pila por medio de una interacción específica de la Interfaz de Usuario. Multiple vulnerabilities have been found in Chromium and its derivatives, the worst of whic... • https://chromereleases.googleblog.com/2022/08/stable-channel-update-for-desktop_16.html • CWE-416: Use After Free •
CVSS: 10.0EPSS: 0%CPEs: 2EXPL: 0CVE-2022-2859 – Gentoo Linux Security Advisory 202208-35
https://notcve.org/view.php?id=CVE-2022-2859
22 Aug 2022 — Use after free in Chrome OS Shell in Google Chrome prior to 104.0.5112.101 allowed a remote attacker who convinced a user to engage in specific UI interactions to potentially exploit heap corruption via specific UI interactions. Un uso de memoria previamente liberada en Chrome OS Shell en Google Chrome versiones anteriores a 104.0.5112.101, permitía que un atacante remoto que convenciera a un usuario de participar en interacciones específicas de la Interfaz de Usuario pudiera explotar la corrupción de la pi... • https://chromereleases.googleblog.com/2022/08/stable-channel-update-for-desktop_16.html • CWE-416: Use After Free •
CVSS: 6.8EPSS: 0%CPEs: 2EXPL: 0CVE-2022-2860 – Gentoo Linux Security Advisory 202208-35
https://notcve.org/view.php?id=CVE-2022-2860
22 Aug 2022 — Insufficient policy enforcement in Cookies in Google Chrome prior to 104.0.5112.101 allowed a remote attacker to bypass cookie prefix restrictions via a crafted HTML page. Una aplicación insuficiente de políticas en Cookies en Google Chrome versiones anteriores a 104.0.5112.101, permitía a un atacante remoto omitir las restricciones de prefijo de cookies por medio de una página HTML diseñada. Multiple vulnerabilities have been found in Chromium and its derivatives, the worst of which could result in remote ... • https://chromereleases.googleblog.com/2022/08/stable-channel-update-for-desktop_16.html •
CVSS: 6.8EPSS: 0%CPEs: 2EXPL: 0CVE-2022-2861 – Gentoo Linux Security Advisory 202208-35
https://notcve.org/view.php?id=CVE-2022-2861
22 Aug 2022 — Inappropriate implementation in Extensions API in Google Chrome prior to 104.0.5112.101 allowed an attacker who convinced a user to install a malicious extension to inject arbitrary scripts into WebUI via a crafted HTML page. Una implementación inapropiada de Extensions API en Google Chrome versiones anteriores a 104.0.5112.101, permitía a un atacante que convenciera a un usuario de instalar una extensión maliciosa inyectar scripts arbitrarios en la Interfaz de Usuario Web por medio de una página HTML manip... • https://chromereleases.googleblog.com/2022/08/stable-channel-update-for-desktop_16.html • CWE-79: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') •
CVSS: 8.8EPSS: 0%CPEs: 2EXPL: 0CVE-2022-2624 – Gentoo Linux Security Advisory 202208-35
https://notcve.org/view.php?id=CVE-2022-2624
12 Aug 2022 — Heap buffer overflow in PDF in Google Chrome prior to 104.0.5112.79 allowed a remote attacker who convinced a user to engage in specific user interactions to potentially exploit heap corruption via a crafted PDF file. Un desbordamiento del búfer de la pila en PDF en Google Chrome versiones anteriores a 104.0.5112.79, permitía que un atacante remoto que convenciera a un usuario de realizar determinadas interacciones con él pudiera aprovechar la corrupción de la pila por medio de un archivo PDF diseñado. Mult... • https://chromereleases.googleblog.com/2022/08/stable-channel-update-for-desktop.html • CWE-787: Out-of-bounds Write •
CVSS: 10.0EPSS: 0%CPEs: 3EXPL: 0CVE-2022-2623 – Gentoo Linux Security Advisory 202208-35
https://notcve.org/view.php?id=CVE-2022-2623
12 Aug 2022 — Use after free in Offline in Google Chrome on Android prior to 104.0.5112.79 allowed a remote attacker who convinced a user to engage in specific user interactions to potentially exploit heap corruption via specific UI interactions. Un uso de la memoria previamente liberada en Offline en Google Chrome en Android versiones anteriores a 104.0.5112.79, permitía a un atacante remoto que convencía a un usuario de participar en interacciones de usuario específicas para explotar potencialmente la corrupción de la ... • https://chromereleases.googleblog.com/2022/08/stable-channel-update-for-desktop.html • CWE-362: Concurrent Execution using Shared Resource with Improper Synchronization ('Race Condition') •
CVSS: 6.8EPSS: 0%CPEs: 3EXPL: 0CVE-2022-2622 – Gentoo Linux Security Advisory 202208-35
https://notcve.org/view.php?id=CVE-2022-2622
12 Aug 2022 — Insufficient validation of untrusted input in Safe Browsing in Google Chrome on Windows prior to 104.0.5112.79 allowed a remote attacker to bypass download restrictions via a crafted file. Una comprobación insuficiente de entradas no confiables en Safe Browsing de Google Chrome en Windows versiones anteriores a 104.0.5112.79, permitía a un atacante remoto omitir las restricciones de descarga por medio de un archivo diseñado. Multiple vulnerabilities have been found in Chromium and its derivatives, the worst... • https://chromereleases.googleblog.com/2022/08/stable-channel-update-for-desktop.html •
CVSS: 10.0EPSS: 0%CPEs: 2EXPL: 1CVE-2022-2621 – Gentoo Linux Security Advisory 202208-35
https://notcve.org/view.php?id=CVE-2022-2621
12 Aug 2022 — Use after free in Extensions in Google Chrome prior to 104.0.5112.79 allowed an attacker who convinced a user to install a malicious extension to potentially exploit heap corruption via specific UI interactions. Un uso de la memoria previamente liberada en Extensions en Google Chrome versiones anteriores a 104.0.5112.79, permitía a un atacante que convenciera a un usuario de instalar una extensión maliciosa explotar potencialmente la corrupción de la pila por medio de interacciones de Interfaz de Usuario es... • https://chromereleases.googleblog.com/2022/08/stable-channel-update-for-desktop.html • CWE-416: Use After Free •