CVE Vulnerability Advisory Database

Filter vulnerabilities by CVSS severity, active CISA KEV exploitation, and technology stack.

Showing 1–3 of 3 advisories (Page 1/1)

CVE-2021-212068.8/HIGHEPSS 9.3%CISA KEV

2021-04-26

Google Chrome Blink Engine Use-After-Free Vulnerability (CVE-2021-21206) Analysis and Mitigation Guide

[Affected Scope] Google Chrome browser versions prior to 89.0.4389.128

[Impact] A remote attacker can exploit heap corruption via a crafted HTML page, potentially leading to arbitrary code execution (RCE)

[Mitigation] Immediately update Google Chrome to the latest stable version (89.0.4389.128 or higher)

CVE-2021-211938.8/HIGHEPSS 10.0%CISA KEV

2021-03-16

[Affected Scope] Google Chrome and Chromium-based browsers prior to version 89.0.4389.90

[Impact] Remote attackers can trigger heap corruption and potentially execute arbitrary code via a crafted HTML page

[Mitigation] Immediately update Google Chrome and related packages to the latest stable version (89.0.4389.90 or higher)

CVE-2019-57866.5/MEDIUMEPSS 61.1%CISA KEV

2019-06-27

[Affected Scope] Google Chrome versions prior to 72.0.3626.121

[Impact] Remote attackers can potentially execute arbitrary code or cause a denial of service (DoS) via a crafted HTML page

[Mitigation] Immediately update Google Chrome to the latest stable version (72.0.3626.121 or higher)