openSUSE 15 Security Update : chromium (openSUSE-SU-2023:0082-1)

The remote openSUSE 15 host has packages installed that are affected by multiple vulnerabilities as referenced in the openSUSE-SU-2023:0082-1 advisory. - Use after free in Passwords in Google Chrome prior to 111.0.5563.110 allowed a remote attacker who had compromised the renderer process to...

Google Chrome Web Payments API Component Code Issue Vulnerability

Google Chrome is a web browser from Google, an American company. A code issue vulnerability exists in versions prior to Google Chrome 111.0.5563.64, which stems from a weak policy enforcement issue in the Web Payments API component. A remote attacker could exploit the vulnerability to bypass...

Google Chrome Autofill component code issue vulnerability

Google Chrome is a web browser from Google, Inc. A code issue vulnerability exists in versions prior to Google Chrome 111.0.5563.64, which stems from a weak policy enforcement issue in the Autofill component. A remote attacker could exploit the vulnerability to disclose cross-domain data via...

UBUNTU-CVE-2023-1232

Insufficient policy enforcement in Resource Timing in Google Chrome prior to 111.0.5563.64 allowed a remote attacker to obtain potentially sensitive information from API via a crafted HTML page. Chromium security severity: Low...

Google Chrome 安全漏洞

Google Chrome is a web browser from Google, Inc USA. A security vulnerability exists in Google Chrome versions prior to 111.0.5563.64, which stems from inadequate enforcement of timing policies. An attacker exploits the vulnerability to obtain potentially sensitive information from the API via...

Google Chrome 安全漏洞

Google Chrome is a web browser from Google, Inc. in the United States. A security vulnerability exists in Google Chrome versions prior to 111.0.5563.64, which stems from improper privilege prompting. An attacker exploited the vulnerability to bypass navigation restrictions via specially crafted...

DEBIAN-CVE-2023-0941

Use after free in Prompts in Google Chrome prior to 110.0.5481.177 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. Chromium security severity: Critical...

Google Chrome 缓冲区错误漏洞

Google Chrome is a web browser from the American company Google Google. A security vulnerability exists in versions prior to Google Chrome 110.0.5481.177. An attacker exploits the vulnerability to cause heap corruption via specially crafted HTML pages...

SUSE CVE-2016-5187

Google Chrome prior to 54.0.2840.85 for Android incorrectly handled rapid transition into and out of full screen mode, which allowed a remote attacker to spoof the contents of the Omnibox URL bar via crafted HTML pages...

SUSE CVE-2016-5185

Blink in Google Chrome prior to 54.0.2840.59 for Windows, Mac, and Linux; 54.0.2840.85 for Android incorrectly allowed reentrance of FrameView::updateLifecyclePhasesInternal, which allowed a remote attacker to perform an out of bounds memory read via crafted HTML pages...

SUSE CVE-2016-5192

Blink in Google Chrome prior to 54.0.2840.59 for Windows missed a CORS check on redirect in TextTrackLoader, which allowed a remote attacker to bypass cross-origin restrictions via crafted HTML pages...

Google Chrome V8 Type Obfuscation Vulnerability (CNVD-2023-12021)

Google Chrome is a web browser from Google, an American company. A type obfuscation vulnerability exists in versions prior to Google Chrome 110.0.5481.77, which stems from the presence of type obfuscation in V8. An attacker could exploit this vulnerability to cause heap corruption via specially...

Google Chrome 资源管理错误漏洞

Google Chrome is a web browser from Google, Inc. in the United States. A security vulnerability exists in versions prior to Google Chrome 110.0.5481.77 that originates from reuse after release in the GPU. An attacker exploits the vulnerability to cause heap corruption via specially crafted HTML...

Google Chrome 安全漏洞

Google Chrome is a web browser from Google, an American company. A type obfuscation vulnerability exists in versions prior to Google Chrome 110.0.5481.77, which stems from the presence of type obfuscation in V8. An attacker could exploit this vulnerability to cause heap corruption via specially...

Google Chrome 安全漏洞

Google Chrome is a web browser from Google, Inc.V8 is a set of open source JavaScript engines. A security vulnerability exists in Google Chrome on Android versions prior to 110.0.5481.77. An attacker exploits the vulnerability to spoof the security UI via specially crafted HTML pages...

Google Chrome Information Disclosure Vulnerability (CNVD-2023-12025)

Google Chrome is a web browser from Google, an American company. Google Chrome suffers from an information disclosure vulnerability that stems from insufficient enforcement of CORS policies, which can be exploited by remote attackers to disclose cross-domain data via a crafted HTML page...

Google Chrome Buffer Overflow Vulnerability (CNVD-2023-12026)

Google Chrome is a web browser from Google, an American company. Google Chrome suffers from a security vulnerability that originates from a boundary error in the platform application for untrusted inputs, which can be exploited by a remote attacker to convince users to install malicious extension...

Google Chrome 资源管理错误漏洞

Google Chrome is a web browser from Google, Inc. in the United States. Google Chrome has a security vulnerability that stems from the use of free in the shopping cart allows an attacker to convince users to install malicious extensions, an attacker can exploit the vulnerability by exploiting heap...

Google Chrome 资源管理错误漏洞

Google Chrome is a web browser from Google, Inc. in the United States. Google Chrome has a security vulnerability that stems from the use of free in the shopping cart allows an attacker to convince users to install malicious extensions, an attacker can exploit the vulnerability by exploiting heap...

Google Chrome Security Special Issue Vulnerability

Google Chrome is a web browser from Google, an American company. A vulnerability exists in Google Chrome prior to version 91.0.4472.77 due to a security specialization issue that stems from insufficient enforcement of content security policies. An attacker could exploit this vulnerability to bypa...