Astra Linux – vulnerability in Chromium

In WebGL on Google Chrome for Android prior to version 153.0.8010.47, out-of-bounds reads allowed remote attackers to read memory outside the sandbox via a specially crafted HTML page. Chromium security severity: Critical...

PT-2022-6431

Name of the Vulnerable Software and Affected Versions Google Chrome for Android versions prior to 111.0.5563.64 Description The issue is related to insufficient policy enforcement in the Autofill function of Google Chrome for Android. This can be exploited by a remote attacker using a specially...

PT-2021-3646

Name of the Vulnerable Software and Affected Versions Google Chrome for Android versions prior to 92.0.4515.107 Description The issue is related to insufficient policy enforcement in Android intents in Google Chrome, allowing a remote attacker to bypass security restrictions and gain unauthorized...

CVE-2018-18353

Failure to dismiss http auth dialogs on navigation in Network Authentication in Google Chrome on Android prior to 71.0.3578.80 allowed a remote attacker to confuse the user about the origin of an auto dialog via a crafted HTML page...

PT-2017-16296

Name of the Vulnerable Software and Affected Versions Google Chrome versions prior to 60.0.3112.78 for Android Description The issue is related to insufficient policy enforcement during navigation between different schemes, allowing a remote attacker to perform cross-origin content download via a...

PT-2017-16291

Name of the Vulnerable Software and Affected Versions Google Chrome versions prior to 59.0.3071.92 for Android Description A local attacker could take screen shots of credit card information via a crafted HTML page due to the failure to utilize available mitigations in credit card autofill...

PT-2017-16286

Name of the Vulnerable Software and Affected Versions Google Chrome versions prior to 57.0.2987.98 Google Chrome for Android versions prior to 57.0.2987.108 Opera affected versions not specified Description The issue is related to an integer overflow in FFmpeg, which allows a remote attacker to...

PT-2017-1061

Name of the Vulnerable Software and Affected Versions Google Chrome versions prior to 54.0.2840.85 for Android Description The issue is related to insufficient validation of intent URLs in the content view client, allowing a remote attacker who has compromised the renderer process to start...

PT-2016-6305

Name of the Vulnerable Software and Affected Versions Google Chrome versions prior to 54.0.2840.85 for Android Description The issue concerns the incorrect handling of rapid transition into and out of full screen mode in Google Chrome for Android. This allowed a remote attacker to spoof the...