The vulnerability of the XML component of the Google Chrome browser allows a hacker to bypass the ASLR protection mechanism.

The vulnerability of the Google Chrome XML browser component is related to deficiencies in access control. Exploiting this vulnerability could allow a malicious actor to bypass the ASLR protection mechanism by using a specially created HTML page...

The vulnerability of Google Chrome’s URL formatting mechanism, which allows attackers to carry out spoofing attacks

The vulnerability of Google Chrome’s URL formatting mechanism is related to errors in information representation by the user interface. Exploiting this vulnerability allows a malicious actor to carry out spoofing attacks using a specially crafted HTML page...

The vulnerability of Blink’s web page display mechanism in Google Chrome browser allows attackers to circumvent existing security restrictions.

The vulnerability of Blink’s web page rendering mechanism in Google Chrome browsers is related to the execution of operations beyond the buffer in memory. Exploiting this vulnerability allows a remote attacker to circumvent existing security restrictions by using a specially crafted HTML page...

The vulnerability of the Extensions component of the Google Chrome browser allows a hacker to manipulate the extension storage.

The vulnerability of the Google Chrome browser’s Extensions component is related to lack of access control. Exploiting this vulnerability could allow a malicious actor to forge extension repositories using a specially crafted HTML page...

Authorization Bypass

chromium is vulnerable to Authorization Bypass. The vulnerability exists due to the inappropriate implementation in the prompts in the library, which allows an attacker to bypass permission restrictions via a crafted HTML page...

Information Disclosure

chromium is vulnerable to Information Disclosure. The vulnerability exists due to inappropriate implementation in iFrame Sandbox in Google Chromewhich allows a remote attacker to leak cross-origin data via a crafted HTML page...

Access Restriction Bypass

chromium is vulnerable to Access Restriction Bypass. The vulnerability exists due to inappropriate implementation in XML in Google Chromewhich allows a remote attacker to potentially perform an ASLR bypass via a crafted HTML page...

Improper Input Validation

chromium is vulnerable to Improper Input Validation. The vulnerability exists due to inappropriate implementation in Autofill in Google Chrome which allows a remote attacker to bypass navigation restrictions via a crafted HTML page...

Denial Of Service (DoS)

chromium is vulnerable to Denial of Service DoS. The vulnerability exists due to type confusion in MathML in Google Chrome which allows a remote attacker to potentially exploit heap corruption via a crafted HTML page...

Access Restriction Bypass

chromium is vulnerable to Access Restriction Bypass. The vulnerability exists due to inappropriate implementation in Extensions in Google Chrome which allows a remote attacker who had compromised the renderer process to spoof extension storage via a crafted HTML page...

Spoofing Attacks

firefox is vulnerable to Spoofing Attacks. The vulnerability exists due to the heap buffer overflow in the Visuals in the library, which allows an attacker to exploit heap corruption via a crafted HTML page...

Denial Of Service (DoS)

chromium is vulnerable to Denial Of Service DoS. The vulnerability exists due to the heap buffer overflow in the Visuals in the library, which allows an attacker to exploit heap corruption via a crafted HTML page...

Out Of Bounds Read And Write

chromium is vulnerable to Out Of Bounds Read And Write. A remote attacker is able to potentially exploit heap corruption via a crafted HTML page...

CVE-2022-4955

Inappropriate implementation in DevTools in Google Chrome prior to 108.0.5359.71 allowed an attacker who convinced a user to install a malicious extension to bypass file access restrictions via a crafted HTML page. Chromium security severity: Medium...

SUSE CVE-2023-4075

Use after free in Cast in Google Chrome prior to 115.0.5790.170 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. Chromium security severity: High...

CVE-2023-4070

Type Confusion in V8 in Google Chrome prior to 115.0.5790.170 allowed a remote attacker to perform arbitrary read/write via a crafted HTML page. Chromium security severity: High...

CVE-2023-4072

Out of bounds read and write in WebGL in Google Chrome prior to 115.0.5790.170 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. Chromium security severity: High...

CVE-2023-4073

Out of bounds memory access in ANGLE in Google Chrome on Mac prior to 115.0.5790.170 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. Chromium security severity: High...

CVE-2023-4075

Use after free in Cast in Google Chrome prior to 115.0.5790.170 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. Chromium security severity: High...

CVE-2023-4073

Out of bounds memory access in ANGLE in Google Chrome on Mac prior to 115.0.5790.170 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. Chromium security severity: High...