Sandbox Escape

chromium, sid is vulnerable to sandbox escape. It is due to a use after free in autofill in Google Chrome which allowed a remote attacker who had compromised the renderer process to potentially perform a sandbox escape via a crafted HTML page...

Privilege Escalation

chromium is vulnerable to privilege escalation. Insufficient data validation in navigation allows a remote attacker who has compromised the renderer process to bypass navigation restrictions via a malicious HTML page...

Arbitrary Code Execution

chromium is vulnerable to arbitrary code execution. The vulnerability exists through a use after free in NFC that allows a remote attacker who had compromised the renderer process to potentially perform a sandbox escape via a crafted HTML page...

Use After Free

chromium, sid is vulnerable to Use after free in printing in Google Chrome. It allowed a remote attacker who had compromised the renderer process to potentially perform a sandbox escape via a crafted HTML page...

Privilege Escalation

chromium is vulnerable to privilege escalation. A use-after-free in video allows an attacker who has compromised the renderer process to perform a sandbox escape via a malicious Chrome Extension...

Sandbox Escape

chromium, sid is vulnerable to sandbox escape. Race in Mojo in Google Chrome allowed a remote attacker who had compromised the renderer process to potentially perform a sandbox escape via a crafted HTML page...

Integer Overflow In WebUSB

chromium, sid is vulnerable to integer overflow in WebUSB in Google Chrome. It allowed a remote attacker who had compromised the renderer process to potentially exploit heap corruption via a crafted HTML page...

Heap Buffer Overflow

chromium:sid is vulnerable to heap buffer overflow. It allowed a remote attacker who had compromised the renderer process to potentially exploit heap corruption via a crafted HTML page...

Cross-Site Scripting (XSS)

chromium is vulnerable to cross-site scripting. Insufficient data validation in WebUI allows a remote attacker, who has compromised the renderer process, to inject scripts or HTML into a privileged page via a malicious HTML page...

Arbitrary Code Execution

chromium is vulnerable to arbitrary code execution. An integer overflow that leads to a use-after-free in WebMIDI allows a remote attacker who has compromised the renderer process to execute arbitrary code via a malicious HTML page...

Same-Origin Policy Bypass

chromium is vulnerable to same-origin policy bypass. A remote attacker with access to the renderer process is able to bypass the same origin policy via a malicious HTML page...

Use After Free

Use after free in site isolation in Google Chrome prior to 86.0.4240.198 allowed a remote attacker who had compromised the renderer process to potentially perform a sandbox escape via a crafted HTML page...

PT-2020-5724

Name of the Vulnerable Software and Affected Versions: Google Chrome versions prior to 87.0.4280.88 Description: The issue is an out of bounds read in the networking component, allowing a remote attacker who has compromised the renderer process to obtain potentially sensitive information from...

Google Chrome versions before 87.0.4280.88 integer overflow during SimplfiedLowering phase

This module exploits an issue in Google Chrome versions before 87.0.4280.88 64 bit. The exploit makes use of an integer overflow in the SimplifiedLowering phase in turbofan. It is used along with a type hardening bypass using ArrayPrototypeShift to create a JSArray with a length of -1. This is...

CVE-2020-16018

Use after free in payments in Google Chrome prior to 87.0.4280.66 allowed a remote attacker who had compromised the renderer process to potentially perform a sandbox escape via a crafted HTML page...

PT-2020-5034

Name of the Vulnerable Software and Affected Versions Google Chrome versions prior to 87.0.4280.66 Description The issue is related to a use after free in the payments component of Google Chrome, which could allow a remote attacker who has compromised the renderer process to potentially perform a...

PT-2020-5028

Name of the Vulnerable Software and Affected Versions Google Chrome versions prior to 87.0.4280.66 Description The issue is related to a heap buffer overflow in the clipboard of Google Chrome, which could allow a remote attacker who has compromised the renderer process to potentially perform a...

CVE-2020-16017

Use after free in site isolation in Google Chrome prior to 86.0.4240.198 allowed a remote attacker who had compromised the renderer process to potentially perform a sandbox escape via a crafted HTML page...

Google Chrome Resource Management Error Vulnerability (CNVD-2020-62475)

Google Chrome is a Web browser from Google, a U.S. company. Blink is a browser layout engine rendering engine jointly developed by Google and Norway's OperaSoftware. A security vulnerability exists in versions of Google Chrome prior to 86.0.4240.99, which allows an attacker to compromise the...

PT-2020-5041

Name of the Vulnerable Software and Affected Versions Google Chrome versions prior to 86.0.4240.193 Description The issue is related to an inappropriate implementation in the base component of Google Chrome, which can lead to a sandbox escape. This could potentially allow a remote attacker who ha...