Google Chrome for Mac, Windows and Linux PDFium Memory Misreference Vulnerability

Google Chrome for Mac, Windows and Linux is the United States Google Google company developed a Mac, Windows and Linux platform based on the Web browser. PDFium is one of the open source PDF rendering engine. A memory misreference vulnerability exists in PDFium in versions of Google Chrome prior ...

Google Chrome for Mac, Windows and Linux V8 Cross-Site Scripting Vulnerability

Google Chrome for Mac, Windows and Linux is a web browser based on Mac, Windows and Linux platforms developed by Google USA.V8 is one of the open source JavaScript engines. A cross-site scripting vulnerability exists in V8 in versions prior to Google Chrome 63.0.3239.108 for Windows, Mac and...

CVE-2017-5050

An integer overflow in FFmpeg in Google Chrome prior to 57.0.2987.98 for Mac, Windows, and Linux and 57.0.2987.108 for Android allowed a remote attacker to perform an out of bounds memory write via a crafted video file, related to ChunkDemuxer...

CVE-2016-5217

The extensions API in Google Chrome prior to 55.0.2883.75 for Mac, Windows and Linux, and 55.0.2883.84 for Android incorrectly permitted access to privileged plugins, which allowed a remote attacker to bypass site isolation via a crafted HTML page...

CVE-2016-5218

The extensions API in Google Chrome prior to 55.0.2883.75 for Mac, Windows and Linux, and 55.0.2883.84 for Android incorrectly handled navigation within PDFs, which allowed a remote attacker to temporarily spoof the contents of the Omnibox URL bar via a crafted HTML page containing PDF data...

chromium-browser: out of bounds write in pdfium

Heap buffer overflow during TIFF image parsing in PDFium in Google Chrome prior to 55.0.2883.75 for Mac, Windows and Linux, and 55.0.2883.84 for Android allowed a remote attacker to potentially exploit heap corruption via a crafted PDF file...

chromium-browser: use after free in v8

A use after free in V8 in Google Chrome prior to 55.0.2883.75 for Mac, Windows and Linux, and 55.0.2883.84 for Android allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page...