GHSA-v7pf-gv4p-63p2

GHSA-v7pf-gv4p-63p2 PUBLISHED CVSS 9.300000190734863 CRITICAL

Record from GitHub Advisory Database · Published May 24, 2022

Heap buffer overflow in history in Google Chrome prior to 84.0.4147.89 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page.

Risk scores

CVSS 4.0

9.300000190734863

CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N

Timeline

May 24, 2022 CVE Published
Apr 30, 2026 Security Advisory (3 in total, the first dated here)
Apr 30, 2026 Distribution Patch

Query this with the API

The same record, from the CLI:

vulnetix vdb vuln GHSA-v7pf-gv4p-63p2
vulnetix vdb fixes GHSA-v7pf-gv4p-63p2

Or with curl, using the org id and key from your account page:

curl -s -H "Authorization: ApiKey ${VULNETIX_ORG_ID}:${VULNETIX_API_KEY}" \
  "https://api.vdb.vulnetix.com/v2/vuln/GHSA-v7pf-gv4p-63p2/fixes/registry"

The Community plan is free and allows 50 queries a day. Get a free API key · API quickstart

References

https://nvd.nist.gov/vuln/detail/CVE-2020-6517 advisory
https://crbug.com/1095560 url
https://chromereleases.googleblog.com/2020/07/stable-channel-update-for-desktop.html url
https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/MTRPPTKZ2RKVH2XGQCWNFZ7FOGQ5LLCA url
https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/MYIDWCHG24ZTFD4P42D4A4WWPPA74BCG url
http://lists.opensuse.org/opensuse-security-announce/2020-08/msg00007.html url
http://lists.opensuse.org/opensuse-security-announce/2020-09/msg00041.html url
http://lists.opensuse.org/opensuse-security-announce/2020-07/msg00069.html url
http://lists.opensuse.org/opensuse-security-announce/2020-08/msg00018.html url
https://security.gentoo.org/glsa/202007-08 advisory
https://www.debian.org/security/2021/dsa-4824 advisory

Look up in the Resolve Platform →