11130 matches found
Google Chrome 资源管理错误漏洞
Google Chrome is a web browser from Google, Inc. A resource management error vulnerability exists in versions of Google Chrome prior to 98.0.4758.80. A remote attacker could exploit this vulnerability to potentially exploit heap corruption via a carefully crafted HTML page...
Google Chrome 资源管理错误漏洞
Google Chrome is a web browser from Google, Inc. that is vulnerable to a resource management error. A remote attacker who has compromised the renderer process can exploit this vulnerability to potentially exploit heap corruption via a carefully crafted HTML page...
GLSA-202201-02 : Chromium, Google Chrome: Multiple vulnerabilities
The remote host is affected by the vulnerability described in GLSA-202201-02 Chromium, Google Chrome: Multiple vulnerabilities Multiple vulnerabilities have been discovered in Chromium and Google Chrome. Please review the CVE identifiers referenced below for details. Tenable has extracted the...
Use-After-Free
chromium-browser:bionic is vulnerable to use-after-free vulnerability. A remote unauthenticated attacker is able to exploit heap corruption via a crafted HTML page, resulting in a system hang...
Denial Of Service (DoS)
chromium-browser is vulnerable to denial of service. An attacker can cause an application crash via a crafted HTML page...
Use-after-free
chrome is vulnerable to use-after free. The vulnerability exists due to a heap corruption allowed a remote attacker to potentially crash via a crafted HTML page...
Type Confusion
Google Chrome is vulnerable to type confusion which allows a remote attacker to potentially exploit heap corruption via a crafted HTML page...
Domain Spoofing
chromium is vulnerable to domain spoofing. Inappropriate implementation in networking allows a remote attacker to perform domain spoofing via crafted HTML page...
Use After Free
Chrome is vulnerable to use after free. The vulnerability exists due to a heap corruption via a crafted HTML page...
Design/Logic Flaw
Incorrect download source UI in Downloads in Samsung Internet prior to 16.0.6.23 allows attackers to perform domain spoofing via a crafted HTML page...
The vulnerability of the PDFium PDF-content processor in Google Chrome and Microsoft Edge browsers arises from the use of memory after it is freed, allowing an attacker to circumvent existing security restrictions.
The vulnerability of the PDFium PDF-content processing component in Google Chrome and Microsoft Edge browsers is related to the use of memory after it is freed. Exploiting this vulnerability could allow a malicious actor to bypass existing security restrictions through a specially created HTML pa...
The vulnerability of Google Chrome’s compositing component allows a hacker to manipulate the URL bar’s content using a specially created HTML page.
The vulnerability of Google Chrome’s compositing component is related to a lack of mechanisms for verifying the source of the content. Exploiting this vulnerability could allow an attacker to manipulate the URL input by using a specially created HTML page...
FreeBSD : chromium -- multiple vulnerabilities (9eeccbf3-6e26-11ec-bb10-3065ec8fd3ec)
The version of FreeBSD installed on the remote host is prior to tested version. It is, therefore, affected by multiple vulnerabilities as referenced in the 9eeccbf3-6e26-11ec-bb10-3065ec8fd3ec advisory. - Use after free in File Manager API in Google Chrome on Chrome OS prior to 97.0.4692.71 allow...
PT-2022-6782 · Google +1 · Google Chrome +1
Name of the Vulnerable Software and Affected Versions: Google Chrome versions prior to 97.0.4692.71 Description: The issue is related to a use after free in WebRTC, allowing a remote attacker who has compromised the renderer process to potentially perform a sandbox escape via a crafted HTML page...
Information Disclosure
chromium-browser:bionic is vulnerable to information disclosure. Insufficient policy enforcement in Autofill in Google Chrome allowed a remote attacker to leak cross-origin data via a crafted HTML page...
CVE-2021-4068
Insufficient data validation in new tab page in Google Chrome prior to 96.0.4664.93 allowed a remote attacker to leak cross-origin data via a crafted HTML page...
CVE-2021-4066
Integer underflow in ANGLE in Google Chrome prior to 96.0.4664.93 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page...
CVE-2021-4067
Use after free in window manager in Google Chrome on ChromeOS prior to 96.0.4664.93 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page...