chromium-browser: Insufficient policy enforcement in Blink

Insufficient policy enforcement in Blink in Google Chrome prior to 80.0.3987.87 allowed a remote attacker to bypass content security policy via a crafted HTML page...

Google Chrome Blink Input Validation Error Vulnerability

Google Chrome is a Web browser from Google, a U.S. company. Blink is a browser layout engine rendering engine jointly developed by Google and Norway's OperaSoftware. An input validation error vulnerability exists in Google Chrome Blink. An attacker could exploit this vulnerability to bypass the...

Google Chrome Blink Resource Management Error Vulnerability (CNVD-2019-44527)

Google Chrome is a Web browser from Google, a U.S. company. Blink is a browser layout engine rendering engine jointly developed by Google and Norway's OperaSoftware. A resource management error vulnerability exists in the 'WebCore::CSSSelector' function of Blink in Google Chrome prior to version...

Google Chrome Blink Resource Management Error Vulnerability (CNVD-2019-44525)

Google Chrome is a Web browser from Google, a U.S. company. Blink is a browser layout engine rendering engine jointly developed by Google and Norway's OperaSoftware. A resource management error vulnerability exists in the thirdparty/WebKit/Source/WebCore/svg/animation/SVGSMILElement.h file for...

Google Chrome Blink Code Issue Vulnerability

Google Chrome is a Web browser from Google, a U.S. company. Blink is a browser layout engine rendering engine jointly developed by Google and Norway's OperaSoftware. A code issue vulnerability exists in versions of Blink prior to m11 in Google Chrome. The vulnerability arises from a design or...

The vulnerability of the HTMLImportsController function in the Blink web page rendering mechanism of Google Chrome allows a hacker to execute arbitrary code.

The vulnerability of the HTMLImportsController function in the Blink web page rendering mechanism of Google Chrome relates to the use of memory after it is released. Exploiting this vulnerability could allow a remote attacker to execute arbitrary code using a specially created HTML page...

chromium-browser: Dialog box fails to show origin

UI spoofing in Blink in Google Chrome prior to 77.0.3865.75 allowed a remote attacker to spoof security UI via a crafted HTML page...

Google Chrome Blink Buffer Overflow Vulnerability (CNVD-2019-38247)

Google Chrome is a Web browser from Google, a U.S. company. Blink is a browser layout engine rendering engine jointly developed by Google and Norway's OperaSoftware. A buffer overflow vulnerability exists in the Blink component of Google Chrome versions prior to 78.0.3904.70. A remote attacker...

Google Chrome Blink Security Bypass Vulnerability (CNVD-2019-17513)

Google Chrome is a Web browser from Google, a U.S. company. Blink is a browser layout engine rendering engine jointly developed by Google and Norway's OperaSoftware. A security vulnerability exists in Blink in versions of Google Chrome prior to 75.0.3770.80, which stems from the program's failure...

Google Chrome Blink Buffer Overflow Vulnerability (CNVD-2019-13775)

Google Chrome is a Web browser from Google, a U.S. company. Blink is a browser layout engine rendering engine jointly developed by Google and Norway's OperaSoftware. A heap buffer overflow vulnerability exists in Blink in versions prior to Google Chrome 74.0.3729.108, which can be exploited by an...

Google Chrome Blink System Unauthorized Access Vulnerability (CNVD-2019-23115)

Google Chrome is a Web browser from Google, a U.S. company. Blink is a browser layout engine rendering engine jointly developed by Google and Norway's OperaSoftware. An unauthorized access vulnerability exists in Blink in versions of Google Chrome prior to 74.0.3729.108. An attacker can exploit...

Google Chrome Blink CORS Bypass Vulnerability

Google Chrome is a Web browser from Google, a U.S. company. Blink is a browser layout engine rendering engine jointly developed by Google and Norway's OperaSoftware. A security vulnerability exists in Blink in versions of Google Chrome prior to 74.0.3729.108. The vulnerability can be exploited by...

The vulnerability of Google Chrome, related to errors in managing permissions, privileges, and access control, allows a perpetrator to gain access to files in the local file system using a specially created extension.

The vulnerability of Google Chrome relates to errors in the frame navigation function of Blink. Exploiting this vulnerability can allow an attacker to gain access to files on the local file system using a specially created extension...

Google Chrome Input Validation Error Vulnerability

Chrome is a simple and efficiently designed web browsing tool developed by Google that is characterized by its simplicity and speed. An input validation vulnerability exists in Blink in versions of Google Chrome prior to 72.0.3626.81. An attacker can exploit this vulnerability to execute arbitrar...

Google Chrome Blink Security Bypass Vulnerability (CNVD-2019-03542)

Google Chrome is a web browser developed by Google Inc. Blink is a browser layout engine rendering engine jointly developed by Google Inc. and Opera Software of Norway. A security vulnerability exists in Blink in versions of Google Chrome prior to 66.0.3359.117, which stems from the program's...

Google Chrome Blink Security Bypass Vulnerability (CNVD-2019-03550)

Google Chrome is a web browser developed by Google Inc. Blink is a browser layout engine rendering engine jointly developed by Google Inc. and Opera Software of Norway. A security vulnerability exists in Blink in versions of Google Chrome prior to 66.0.3359.117, which stems from the program's...

CVE-2018-6114

Incorrect enforcement of CSP for tags in Blink in Google Chrome prior to 66.0.3359.117 allowed a remote attacker to bypass content security policy via a crafted HTML page...

DEBIAN-CVE-2018-18350

Incorrect handling of CSP enforcement during navigations in Blink in Google Chrome prior to 71.0.3578.80 allowed a remote attacker to bypass content security policy via a crafted HTML page...

UBUNTU-CVE-2018-18350

Incorrect handling of CSP enforcement during navigations in Blink in Google Chrome prior to 71.0.3578.80 allowed a remote attacker to bypass content security policy via a crafted HTML page...

chromium-browser: Incorrect security UI in Blink

Incorrect handling of alert box display in Blink in Google Chrome prior to 71.0.3578.80 allowed a remote attacker to present confusing browser UI via a crafted HTML page...