3519 matches found
CVE-2021-4058
Heap buffer overflow in ANGLE in Google Chrome prior to 96.0.4664.93 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page...
Updated chromium-browser-stable packages fix security vulnerabilities
Updated chromium-browser-stable packages fix security vulnerabilities. The chromium-browser-stable package has been updated to 96.0.4664.110 version that fixes multiples security vulnerabilities. One of these CVEs is known to be actively exploited. Insufficient data validation in Mojo...
MGASA-2021-0565 Updated chromium-browser-stable packages fix security vulnerabilities
Updated chromium-browser-stable packages fix security vulnerabilities. The chromium-browser-stable package has been updated to 96.0.4664.110 version that fixes multiples security vulnerabilities. One of these CVEs is known to be actively exploited. Insufficient data validation in Mojo...
Inappropriate Implementation
qt5-qtwebengine is vulnerable to inappropriate implementation. The vulnerability exists due to a security issue that was found in the referrer component of the Chromium browser engine...
Privilege Escalation
qt5-qtwebengine is vulnerable to privilege escalation. The vulnerability exists due to an inappropriate implementation security issue has been found in the input component of the Chromium browser engine...
Denial Of Service (DoS)
qt5-qtwebengine is vulnerable to denial of service. A type confusion security issue has been found in the V8 component of the Chromium browser engine...
Insecure Authentication
qt5-qtwebengine has insecure authentication. An insufficient data validation security issue has been found in the loader component of the Chromium browser engine...
Remote Code Execution (RCE)
qt5-qtwebengine is vulnerable to remote code execution. A use after free security issue has been found in the file API component of the Chromium browser...
[ASA-202112-7] vivaldi: multiple issues
Arch Linux Security Advisory ASA-202112-7 ========================================= Severity: High Date : 2021-12-11 CVE-ID : CVE-2021-4052 CVE-2021-4053 CVE-2021-4054 CVE-2021-4055 CVE-2021-4056 CVE-2021-4057 CVE-2021-4058 CVE-2021-4059 CVE-2021-4061 CVE-2021-4062 CVE-2021-4063 CVE-2021-4064...
MGASA-2021-0555 Updated chromium-browser-stable packages fix security vulnerability
CVE-2021-4052: Use after free in web apps. CVE-2021-4053: Use after free in UI. CVE-2021-4079: Out of bounds write in WebRTC. CVE-2021-4054: Incorrect security UI in autofill. CVE-2021-4078: Type confusion in V8. CVE-2021-4055: Heap buffer overflow in extensions. CVE-2021-4056: Type Confusion in...
Use After Free
chromium-browser is vulnerable to Use after free condition. A remote attacker is able to potentially perform a sandbox escape via a crafted HTML page...
Use After Free
chromium-browser is vulnerable to Use after free condition. A remote attacker is able to potentially exploit heap corruption via a crafted HTML page...
MGASA-2021-0516 Updated chromium-browser-stable packages fix security vulnerability
The chromium-browser-stable package has been updated to 96.0.4664.45 version that fixes multiples security vulnerabilities. For changes from 94.0.4606.71 released on September 30, 2021 to the 96.0.4664.45 version, see referenced advisories...
Restriction Bypass
chromium-browser:bionic is vulnerable to restriction bypass. Inappropriate implementation in iFrame Sandbox in Google Chrome allowed a remote attacker to bypass navigation restrictions via a crafted HTML page...
Information Disclosure
chromium-browser:bionic is vulnerable to information disclosure. Inappropriate implementation in WebView in Google Chrome on Android allowed a remote attacker to leak cross-origin data via a crafted app...
Denial Of Service (DoS)
chromium-browser:bionic is vulnerable to denial of service. Heap buffer overflow in Settings in Google Chrome allowed a remote attacker to engage with Dev Tools to potentially exploit heap corruption via a crafted HTML page...
Denial Of Service (DoS)
chromium-browser:bionic is vulnerable to denial of service. Use after free in Incognito in Google Chrome allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page...
CVE-2021-37987
Use after free in Network APIs in Google Chrome prior to 95.0.4638.54 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page...