Astra Linux – Vulnerability in Chromium

Insufficient policy enforcement in the WebUI of Google Chrome prior to version 87.0.4280.141 allowed an attacker who convinced a user to install a malicious extension to potentially perform a sandbox escape through a crafted Chrome Extension...

SUSE CVE-2021-21106

Use after free in autofill in Google Chrome prior to 87.0.4280.141 allowed a remote attacker who had compromised the renderer process to potentially perform a sandbox escape via a crafted HTML page...

openSUSE Security Update : chromium (openSUSE-2021-40)

This update for chromium fixes the following issues : - Update to 87.0.4280.141 boo1180645 - CVE-2021-21106: Use after free in autofill - CVE-2021-21107: Use after free in drag and drop - CVE-2021-21108: Use after free in media - CVE-2021-21109: Use after free in payments - CVE-2021-21110: Use...

DEBIAN-CVE-2021-21114

Use after free in audio in Google Chrome prior to 87.0.4280.141 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page...

DEBIAN-CVE-2021-21116

Heap buffer overflow in audio in Google Chrome prior to 87.0.4280.141 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page...

DEBIAN-CVE-2021-21112

Use after free in Blink in Google Chrome prior to 87.0.4280.141 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page...

DEBIAN-CVE-2021-21107

Use after free in drag and drop in Google Chrome on Linux prior to 87.0.4280.141 allowed a remote attacker who had compromised the renderer process to potentially perform a sandbox escape via a crafted HTML page...

Google Chrome 资源管理错误漏洞

Google Chrome is a web browser from Google, an American company. A security vulnerability exists in "Media" in Google Chrome versions prior to 87.0.4280.141. A remote attacker can exploit the vulnerability to perform sandbox escaping via specially crafted HTML pages...

Google Chrome 访问控制错误漏洞

Google Chrome is a web browser from Google, an American company. A policy enforcement deficiency vulnerability exists in the WebUI in versions prior to Google Chrome 87.0.4280.141. An attacker can exploit the vulnerability to perform sandbox escaping via a specially crafted Chrome extension...

Google Chrome memory misreference vulnerability (CNVD-2021-04419)

Google Chrome is a web browser from Google, an American company. A security vulnerability exists in "Media" in Google Chrome versions prior to 87.0.4280.141. A remote attacker can exploit the vulnerability to perform sandbox escaping via specially crafted HTML pages...

Google Chrome memory misreference vulnerability (CNVD-2021-04420)

Google Chrome is a web browser from Google, an American company. A memory misreference vulnerability exists in "Drag and Drop" in Google Chrome prior to version 87.0.4280.141. A remote attacker can exploit the vulnerability to perform sandbox escaping via specially crafted HTML pages...

Google Chrome 资源管理错误漏洞

Google Chrome is a web browser from Google, an American company. A security vulnerability exists in "Safe Browsing" in Google Chrome versions prior to 87.0.4280.141. A remote attacker can exploit the vulnerability to perform sandbox escaping via specially crafted HTML pages...

Google Chrome 资源管理错误漏洞

Google Chrome is a web browser from Google, an American company. A security vulnerability exists in Google Chrome versions prior to 87.0.4280.141 in "Payments". A remote attacker can exploit the vulnerability to perform sandbox escaping via specially crafted HTML pages...

Google Chrome Security Updates (stable-channel-update-for-desktop-2021-01) - Linux

Google Chrome is prone to multiple vulnerabilities. SPDX-FileCopyrightText: 2021 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE = "cpe:/a:google:chrome"; ifdescription...

Google Chrome Security Updates (stable-channel-update-for-desktop-2021-01) - Mac OS X

Google Chrome is prone to multiple vulnerabilities. SPDX-FileCopyrightText: 2021 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE = "cpe:/a:google:chrome"; ifdescription...

Google Chrome Security Updates (stable-channel-update-for-desktop-2021-01) - Windows

Google Chrome is prone to multiple vulnerabilities. SPDX-FileCopyrightText: 2021 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE = "cpe:/a:google:chrome"; ifdescription...

Google Chrome Insufficient Data Validation Vulnerability

Google Chrome is a web browser from Google, an American company. A data validation insufficiency vulnerability exists in networking in versions prior to Google Chrome 87.0.4280.141. No detailed vulnerability details are provided at this time...

Google Chrome 资源管理错误漏洞

Chrome is a simple and efficiently designed web browsing tool developed by Google that is characterized by its simplicity and speed. A resource management error vulnerability exists in versions prior to Google Chrome 87.0.4280.141, which can be exploited by an attacker to execute arbitrary code...

Google Chrome memory misreference vulnerability (CNVD-2021-04417)

Google Chrome is a web browser from Google, an American company. A security vulnerability exists in "Safe Browsing" in Google Chrome versions prior to 87.0.4280.141. A remote attacker can exploit the vulnerability to perform sandbox escaping via specially crafted HTML pages...

Stable Channel Update for Desktop

The Stable channel has been updated to 87.0.4280.141 for Windows, Mac and Linux which will roll out over the coming days/weeks. A full list of changes in this build is available in the log. Interested in switching release channels? Find out how here. If you find a new issue, please let us know by...