chromium-browser: Use after free in site isolation

Use after free in site isolation in Google Chrome prior to 86.0.4240.198 allowed a remote attacker who had compromised the renderer process to potentially perform a sandbox escape via a crafted HTML page...

Google Chrome versions before 87.0.4280.88 integer overflow during SimplfiedLowering phase

This module exploits an issue in Google Chrome versions before 87.0.4280.88 64 bit. The exploit makes use of an integer overflow in the SimplifiedLowering phase in turbofan. It is used along with a type hardening bypass using ArrayPrototypeShift to create a JSArray with a length of -1. This is...

CVE-2020-16018

Use after free in payments in Google Chrome prior to 87.0.4280.66 allowed a remote attacker who had compromised the renderer process to potentially perform a sandbox escape via a crafted HTML page...

CVE-2020-16017

Use after free in site isolation in Google Chrome prior to 86.0.4240.198 allowed a remote attacker who had compromised the renderer process to potentially perform a sandbox escape via a crafted HTML page...

GNOME security, bug fix, and enhancement update

dleyna-renderer 0.6.0-3 - Add a manual Resolves: 1612579 frei0r-plugins 1.6.1-7 - Rebuild with newer annobin to fix rpmdiff problems - Fix the build with a newer opencv - Resolves: rhbz1703994 gdm 3.28.3-34 - Fix file descriptor leak Resolves: 1877853 3.28.3-33 - Fix problem with Xorg fallback...

Cross-Site Scripting in scratch-svg-renderer

Overview This affects the package scratch-svg-renderer before 0.2.0-prerelease.20201019174008. The loadString function does not escape SVG properly, which can be used to inject arbitrary elements into the DOM via the transformMeasurements function. Recommendation Upgrade to version...

scratch-paint (>=0.2.0-prerelease.20180531225024, <=0.2.0-prerelease.20180607153112), scratch-render (>=0.1.0-prerelease.20180531210700, <=0.1.0-prerelease.20180605145739) potentially affected by CVE-2020-7750 via scratch-svg-renderer (>=0.1.0-prerelease.20180524210316, <=0.1.0-prerelease.20180605140533)

scratch-svg-renderer NPM version =0.1.0-prerelease.20180524210316, =0.2.0-prerelease.20180531225024, =0.1.0-prerelease.20180531210700, =0.1.0-prerelease.20180605145739 Source cves: CVE-2020-7750 Source advisory: OSV:GHSA-J977-G5VJ-J27G...

GHSA-J977-G5VJ-J27G Cross-Site Scripting in scratch-svg-renderer

This affects the package scratch-svg-renderer before 0.2.0-prerelease.20201019174008. The loadString function does not escape SVG properly, which can be used to inject arbitrary elements into the DOM via the transformMeasurements function...

Cross-Site Scripting in scratch-svg-renderer

This affects the package scratch-svg-renderer before 0.2.0-prerelease.20201019174008. The loadString function does not escape SVG properly, which can be used to inject arbitrary elements into the DOM via the transformMeasurements function...

Google Chrome Resource Management Error Vulnerability (CNVD-2020-62476)

Google Chrome is the United States Google Google company a Web browser. Mojo is one of the Mojo Maven plain Old Java Object plug-ins. A security vulnerability in versions of Google Chrome prior to 86.0.4240.99 allows an attacker to affect the renderer process by performing sandbox escaping throug...

Google Chrome Resource Management Error Vulnerability (CNVD-2020-62477)

Google Chrome is a web browser from Google, an American company. A security vulnerability in versions of Google Chrome prior to 86.0.4240.99 allows an attacker to perform sandbox escaping to affect the renderer process via a carefully crafted HTML page after using a password in the browser...

Google Chrome Resource Management Error Vulnerability (CNVD-2020-62475)

Google Chrome is a Web browser from Google, a U.S. company. Blink is a browser layout engine rendering engine jointly developed by Google and Norway's OperaSoftware. A security vulnerability exists in versions of Google Chrome prior to 86.0.4240.99, which allows an attacker to compromise the...

VulnCheck KEV: CVE-2020-16017

Google Chrome contains a use-after-free vulnerability that allows a remote attacker, who has compromised the renderer process, to potentially perform a sandbox escape via a crafted HTML page...

Google Chrome for Android Buffer Overflow Vulnerability

Google Chrome is a web browser from Google, an American company. A buffer overflow vulnerability exists in Google Chrome for Android prior to 86.0.4240.185, which stems from a heap buffer overflow in the UI interface, which can be exploited by an attacker to compromise the renderer process by...

CVE-2020-16010

Heap buffer overflow in UI in Google Chrome on Android prior to 86.0.4240.185 allowed a remote attacker who had compromised the renderer process to potentially perform a sandbox escape via a crafted HTML page...

CVE-2020-15992

Insufficient policy enforcement in networking in Google Chrome prior to 86.0.4240.75 allowed a remote attacker who had compromised the renderer process to bypass same origin policy via a crafted HTML page...

CVE-2020-15997

Use after free in Mojo in Google Chrome prior to 86.0.4240.99 allowed a remote attacker who had compromised the renderer process to potentially perform a sandbox escape via a crafted HTML page...

CVE-2020-15998

Use after free in USB in Google Chrome prior to 86.0.4240.99 allowed a remote attacker who had compromised the renderer process to potentially perform a sandbox escape via a crafted HTML page...

CVE-2020-15996

Use after free in passwords in Google Chrome prior to 86.0.4240.99 allowed a remote attacker who had compromised the renderer process to potentially perform a sandbox escape via a crafted HTML page...

DEBIAN-CVE-2020-15992

Insufficient policy enforcement in networking in Google Chrome prior to 86.0.4240.75 allowed a remote attacker who had compromised the renderer process to bypass same origin policy via a crafted HTML page...