CVE-2020-15961

Insufficient policy validation in extensions in Google Chrome prior to 85.0.4183.121 allowed an attacker who convinced a user to install a malicious extension to potentially perform a sandbox escape via a crafted Chrome Extension...

CVE-2020-15966

Insufficient policy enforcement in extensions in Google Chrome prior to 85.0.4183.121 allowed an attacker who convinced a user to install a malicious extension to obtain potentially sensitive information via a crafted Chrome Extension...

CVE-2020-6554

Use after free in extensions in Google Chrome prior to 84.0.4147.125 allowed a remote attacker to potentially perform a sandbox escape via a crafted Chrome Extension...

UBUNTU-CVE-2020-6554

Use after free in extensions in Google Chrome prior to 84.0.4147.125 allowed a remote attacker to potentially perform a sandbox escape via a crafted Chrome Extension...

chromium-browser: Use after free in extensions

Use after free in extensions in Google Chrome prior to 84.0.4147.125 allowed a remote attacker to potentially perform a sandbox escape via a crafted Chrome Extension...

The vulnerability of Google Chrome browser developer tools allows a hacker to gain access to confidential data, compromise its integrity, and cause service failures.

The vulnerability of Google Chrome browser developers’ tools is related to the lack of standard permission mechanisms. Exploiting this vulnerability allows a remote attacker to access confidential data, compromise its integrity, and also cause service interruptions through a specially created...

The vulnerability of Google Chrome browser extensions, related to the use of memory areas after they are freed, allows attackers to gain access to confidential data, compromise its integrity, and cause service interruptions.

The vulnerability of Google Chrome browser extensions is related to the use of memory areas after they are freed. Exploiting this vulnerability can allow an attacker to gain access to confidential data, compromise its integrity, and even cause service failures through a specially created extensio...

The vulnerability of Google Chrome browser extensions, related to the disclosure of information, allows attackers to gain access to confidential data.

The vulnerability of Google Chrome browser extensions is related to the disclosure of information. Exploiting this vulnerability can allow a malicious actor to gain access to confidential data through a specially created extension...

chromium-browser: Use after free in extensions

Use after free in extensions in Google Chrome prior to 83.0.4103.116 allowed an attacker who convinced a user to install a malicious extension to potentially perform a sandbox escape via a crafted Chrome Extension...

Google Chrome Developer Tools Sandbox Bypass Vulnerability

Google Chrome is a web browser from Google, and Developer Tools is one of the developer tools components. A security vulnerability exists in Developer Tools in versions of Google Chrome prior to 83.0.4103.97, which stems from the program's failure to fully enforce policies. The vulnerability can ...

CVE-2020-6469

Insufficient policy enforcement in developer tools in Google Chrome prior to 83.0.4103.61 allowed an attacker who convinced a user to install a malicious extension to potentially perform a sandbox escape via a crafted Chrome Extension...

The vulnerability of Google Chrome, related to the lack of protection for service data, allows a perpetrator to gain unauthorized access to information.

The vulnerability of Google Chrome lies in the lack of protection for service data. Exploiting this vulnerability allows a malicious actor, operating remotely, to gain unauthorized access to information through a specially created Chrome extension...

Google Chrome Information Disclosure Vulnerability (CNVD-2020-26221)

Google Chrome is a web browser from Google, an American company. Google Chrome suffers from an information disclosure vulnerability. The vulnerability can be exploited by an attacker to obtain sensitive information from the process memory with the help of a specially crafted Chrome extension...

DEBIAN-CVE-2020-6425

Insufficient policy enforcement in extensions in Google Chrome prior to 80.0.3987.149 allowed an attacker who convinced a user to install a malicious extension to bypass site isolation via a crafted Chrome Extension...

UBUNTU-CVE-2020-6425

Insufficient policy enforcement in extensions in Google Chrome prior to 80.0.3987.149 allowed an attacker who convinced a user to install a malicious extension to bypass site isolation via a crafted Chrome Extension...

CVE-2020-6425

Insufficient policy enforcement in extensions in Google Chrome prior to 80.0.3987.149 allowed an attacker who convinced a user to install a malicious extension to bypass site isolation via a crafted Chrome Extension...

chromium-browser: Insufficient policy enforcement in downloads

Insufficient policy enforcement in downloads in Google Chrome on OS X prior to 80.0.3987.87 allowed an attacker who convinced a user to install a malicious extension to execute arbitrary code via a crafted Chrome Extension...

Google Chrome Input Validation Error Vulnerability (CNVD-2020-10251)

Google Chrome is a web browser from Google, an American company. A security vulnerability exists in Google Chrome versions prior to 80.0.3987.87 for OS X. The vulnerability can be exploited by an attacker to execute arbitrary code with the help of a specially crafted Chrome extension...

The vulnerability of the chrome.downloads.open() function in the Google Chrome browser allows a hacker to escalate their privileges.

The vulnerability of the chrome.downloads.open function in the Google Chrome browser exists due to insufficient validation of input data. Exploiting this vulnerability can allow a malicious actor to enhance their privileges through a specially created Chrome extension...

The vulnerability of Google Chrome’s browser, related to security configuration errors, allows a malicious actor to gain unauthorized access to local files.

The vulnerability of Google Chrome is related to security settings errors. Exploiting this vulnerability can allow a malicious actor, operating remotely, to gain unauthorized access to local files through a specially created Chrome extension...