chromium-browser: Insufficient validation of untrusted input in Blink

Insufficient validation of untrusted input in Blink in Google Chrome prior to 80.0.3987.87 allowed a local attacker to bypass content security policy via a crafted HTML page...

Google Chrome streams out-of-bounds memory access vulnerability

Google Chrome is a web browser developed by Google Inc. Google Chrome versions prior to 80.0.3987.87 contain an out-of-bounds memory access security vulnerability in the implementation of streams, which can be exploited by attackers to cause heap damage via a constructed HTML page...

chromium-browser: Incorrect security UI in sharing

Incorrect security UI in sharing in Google Chrome prior to 79.0.3945.79 allowed a remote attacker to perform domain spoofing via a crafted HTML page...

chromium-browser: Insufficient policy enforcement in payments

Insufficient policy enforcement in payments in Google Chrome prior to 79.0.3945.79 allowed a remote attacker who had compromised the renderer process to leak cross-origin data via a crafted HTML page...

The vulnerability in the Google Chrome browser’s user interface allows a hacker to conceal the secure user interface.

The vulnerability of the user interface in full-screen mode of the Google Chrome browser is related to deficiencies in data storage. Exploiting this vulnerability allows a malicious actor to conceal the secure user interface using a specially crafted HTML page...

The vulnerability of Google Chrome’s WebGL component for the Mass OS operating system allows attackers to compromise the confidentiality, integrity, and accessibility of protected information.

The vulnerability of Google Chrome’s WebGL component for macOS operating systems relates to the restoration of unreliable data in memory. Exploiting this vulnerability allows a malicious actor to compromise the confidentiality, integrity, and accessibility of protected information through the...

The vulnerability of the Google Chrome browser arises from its inability to handle sequences of characters CRLF, which allows attackers to circumvent navigation restrictions.

The vulnerability of the Google Chrome browser exists due to the failure to address the issue of eliminating CRLF sequences. Exploiting this vulnerability allows a remote attacker to circumvent navigation restrictions by using a specially created HTML page...

The vulnerability of Google Chrome browser, which exists due to the lack of measures taken to protect the structure of web pages, allows attackers to compromise the confidentiality and integrity of protected information.

The vulnerability of Google Chrome exists due to the lack of measures taken to protect the structure of web pages. Exploiting this vulnerability allows a malicious actor to compromise the confidentiality and integrity of protected information through a specially created HTML page...

A vulnerability in the functionality of website isolation occurs during the restoration of tabs and the Google Chrome browser, allowing a intruder to gain unauthorized access to protected information.

The vulnerability in the isolation function of websites, which occurs during the restoration of tabs and the Google Chrome browser, is related to authentication errors. Exploiting this vulnerability can allow an attacker, operating remotely, to gain unauthorized access to protected information...

The vulnerability of the Mojo messaging library in Google Chrome allows a hacker to elevate their privileges and escape from the isolated software environment.

The vulnerability of the Mojo messaging library in Google Chrome exists due to insufficient validation of input data. Exploiting this vulnerability can allow a malicious actor to enhance their privileges and escape from an isolated software environment using a specially created HTML page...

The vulnerability of Blink’s web page display mechanism in Google Chrome browser allows attackers to obtain URLs of cross-origin origins.

The vulnerability of Blink’s web page rendering mechanism in Google Chrome browsers is related to the lack of protection for service data. Exploiting this vulnerability could allow a malicious actor, operating remotely, to obtain cross-origin URLs through a specially created HTML page...

DEBIAN-CVE-2019-13676

Insufficient policy enforcement in Chromium in Google Chrome prior to 77.0.3865.75 allowed a remote attacker to perform domain spoofing via a crafted HTML page...

UBUNTU-CVE-2019-13678

Incorrect data validation in downloads in Google Chrome prior to 77.0.3865.75 allowed a remote attacker to perform domain spoofing via a crafted HTML page...

UBUNTU-CVE-2019-13667

Inappropriate implementation in Omnibox in Google Chrome on iOS prior to 77.0.3865.75 allowed a remote attacker to spoof the contents of the Omnibox URL bar via a crafted HTML page...

chromium-browser: Google URI shown for certificate warning

Insufficient policy enforcement in Chromium in Google Chrome prior to 77.0.3865.75 allowed a remote attacker to perform domain spoofing via a crafted HTML page...

chromium-browser: Use-after-free in IndexedDB

Use after free in IndexedDB in Google Chrome prior to 77.0.3865.120 allowed a remote attacker who had compromised the renderer process to execute arbitrary code via a crafted HTML page...

The vulnerability in the Google Chrome web browser, related to memory usage after deallocation, allows a malicious actor to execute arbitrary code in the context of the current user or to cause a denial-of-service attack.

The vulnerability in the Google Chrome web browser relates to the use of memory after deallocation. Exploiting this vulnerability could allow a malicious actor to execute arbitrary code in the context of the current user, or to cause a denial-of-service attack through a specially created HTML pag...

DEBIAN-CVE-2019-13075

Tor Browser through 8.5.3 has an information exposure vulnerability. It allows remote attackers to detect the browser's language via vectors involving an IFRAME element, because text in that language is included in the title attribute of a LINK element for a non-HTML page. This is related to a...

CVE-2018-6148

Incorrect implementation in Content Security Policy in Google Chrome prior to 67.0.3396.79 allowed a remote attacker to bypass navigation restrictions via a crafted HTML page...

The vulnerability of Google Chrome’s browser, related to access control errors, allows a violator to circumvent existing CORS policy restrictions.

The vulnerability in Google Chrome relates to access control errors. Exploiting this vulnerability allows a remote attacker to bypass CORS policies for audio content by using a specially created HTML page...