Inappropriate Implementation

Google Chrome is vulnerable to Inappropriate Implementation. The vulnerability exists in the iframe Sandbox in the library, which allows an attacker to bypass file download restrictions via a crafted HTML page...

Denial Of Service (DoS)

Google Chrome is vulnerable to Denial Of Service DoS. The vulnerability exists due to the heap buffer overflow in libphonenumber, which allows an attacker to potentially exploit heap corruption via a crafted HTML page, leading to an application crash...

Denial Of Service (DoS)

Google Chrome is vulnerable to Denial Of Service DoS. The vulnerability exists due to the heap buffer overflow in the Platform Apps, which allows an attacker to convince a user to install a malicious extension to potentially exploit heap corruption via a crafted HTML page, leading to an applicati...

Insufficient Validation

Google Chrome is vulnerable to Insufficient Validation. The vulnerability exists when untrusted input in Downloads, which allows an attacker to bypass download restrictions via a crafted HTML page...

Information Disclosure

Google Chrome is vulnerable to Information Disclosure. The vulnerability exists due to the insufficient policy enforcement in CORS, which allows an attacker to leak cross-origin data via a crafted HTML page...

Authentication Bypass

Google Chrome is vulnerable to Authentication Bypass. The vulnerability exists due to the inappropriate implementation in in File System API, which allows an attacker to bypass file system restrictions via a crafted HTML page...

Denial Of Service (DoS)

Google Chrome is vulnerable to Denial Of Service DoS. The vulnerability exists due to the use after free in the Overview Mode, which allows an attacker to convince an user to engage in specific UI interactions to potentially exploit heap corruption via a crafted HTML page, leading to an applicati...

Denial Of Service (DoS)

Google Chrome is vulnerable to Denial Of Service DoS. The vulnerability exists due to the integer overflow in Core, which allows an attacker to potentially exploit heap corruption via a crafted HTML page via race condition, leading to an application crash...

Spoofing Attack

Google Chrome is vulnerable to Spoofing Attack. The vulnerability exists in the Download, which allows an attacker to potentially spoof the contents of the Omnibox URL bar via a crafted HTML page...

Spoofing Attacks

Google Chrome is vulnerable to Spoofing Attacks. The vulnerability exists due to the inappropriate implementation in Full-screen mode, which allows an attacker to spoof the contents of the security UI via a crafted HTML page...

Denial Of Service (DoS)

Google Chrome is vulnerable to Denial Of Service DoS. The vulnerability exists due to the type confusion in V8, which allows an attacker to potentially exploit heap corruption via a crafted HTML page, leading to an application crash...

Denial Of Service (DoS)

Google Chrome is vulnerable to Denial Of Service DoS. The vulnerability exists due to the use after free in GPU, which allows an attacker to potentially exploit heap corruption via a crafted HTML page and browser shutdown, leading to an application crash...

Denial Of Service (DoS)

Google Chrome is vulnerable to Denial Of Service DoS. The vulnerability exists due to the heap buffer overflow in the video, allowing an attacker to exploit heap corruption via a crafted HTML page, leading to an application crash...

Denial Of Service (DoS)

Google Chrome is vulnerable to Denial Of Service DoS. The vulnerability exists due to the use after free in the Vulkan, which allows an attacker to potentially exploit heap corruption via a crafted HTML page, leading to an application crash...

Denial Of Service (DoS)

Google Chrome is vulnerable to Denial Of Service DoS. The vulnerability exists due to the use after free in the SwiftShader, which allows an attacker to potentially exploit heap corruption via a crafted HTML page, leading to an application crash...

Denial Of Service (DoS)

Google Chrome is vulnerable to Denial Of Service DoS. The vulnerability exists due to the use after free in the Prompts, which allows an attacker to potentially exploit heap corruption via a crafted HTML page, leading to an application crash...

Debian DSA-5371-1 : chromium - security update

The remote Debian 11 host has packages installed that are affected by multiple vulnerabilities as referenced in the dsa-5371 advisory. Multiple security issues were discovered in Chromium, which could result in the execution of arbitrary code, denial of service or information disclosure. For the...

SUSE CVE-2023-1216

Use after free in DevTools in Google Chrome prior to 111.0.5563.64 allowed a remote attacker who had convienced the user to engage in direct UI interaction to potentially exploit heap corruption via a crafted HTML page. Chromium security severity: High...

SUSE CVE-2023-1224

Insufficient policy enforcement in Web Payments API in Google Chrome prior to 111.0.5563.64 allowed a remote attacker to bypass navigation restrictions via a crafted HTML page. Chromium security severity: Medium...

SUSE CVE-2023-1223

Insufficient policy enforcement in Autofill in Google Chrome on Android prior to 111.0.5563.64 allowed a remote attacker to leak cross-origin data via a crafted HTML page. Chromium security severity: Medium...