CVE Vulnerability Advisory Database

Filter vulnerabilities by CVSS severity, active CISA KEV exploitation, and technology stack.

Reset
Showing 1โ€“2 of 2 advisories (Page 1/1)
CVE-2023-70248.8/HIGHEPSS 6.7%CISA KEV
2023-12-21

Google Chrome WebRTC Heap Buffer Overflow Vulnerability (CVE-2023-7024) Security Advisory

[Affected Scope] Google Chrome and Chromium-based browsers prior to version 120.0.6099.129

[Impact] A remote attacker can exploit heap corruption via a crafted HTML page, potentially leading to arbitrary code execution (RCE)

[Mitigation] Immediately update Google Chrome to the latest stable version (120.0.6099.129 or higher)

CVE-2022-22948.8/HIGHEPSS 70.8%CISA KEV
2022-07-28

Google Chrome & WebRTC Heap Buffer Overflow Vulnerability (CVE-2022-2294) Technical Advisory

[Affected Scope] Google Chrome prior to version 103.0.5060.114 and other applications utilizing the WebRTC library

[Impact] A remote attacker can trigger heap corruption and potentially execute arbitrary code or cause a Denial of Service (DoS) via a crafted HTML page

[Mitigation] Immediately update Google Chrome and Chromium-based browsers to version 103.0.5060.114 or later

CVE Vulnerability Advisory Database (CVSS ยท CISA KEV ยท EPSS) | CVE Pulse