Fedora: Security Advisory for chromium (FEDORA-2021-d9faeff8eb)

The remote host is missing an update for the Copyright C 2021 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free software; you can...

Arbitrary Code Execution

chromium is vulnerable to arbitrary code execution. A heap-based buffer overflow flaw was found in the Blink component allows an attacker to execute arbitrary code on the host OS...

Chromium CVE-2021-21128: Heap buffer overflow in Blink

This CVE was assigned by Chrome. Microsoft Edge Chromium-based ingests Chromium, which addresses this vulnerability. Please see Google Chrome Releases for more information...

Chromium CVE-2021-21122: Use after free in Blink

This CVE was assigned by Chrome. Microsoft Edge Chromium-based ingests Chromium, which addresses this vulnerability. Please see Google Chrome Releases for more information...

Google Chromium Buffer Error Vulnerability

Google Chromium is an open source web browser from Google USA. A buffer error vulnerability previously existed in Google Chromium version 88.0.4324.96, which stemmed from a heap buffer overflow security issue discovered in the Blink component of the program...

Google Chrome post-release reuse vulnerability (CNVD-2021-30147)

Google Chrome is a web browser from Google, an American company. A post-release reuse vulnerability exists in Blink in versions prior to Google Chrome 88.0.4324.96. An attacker can cause heap damage via a crafted HTML page...

Google Chrome 资源管理错误漏洞

Google Chrome is a web browser from Google, an American company. A post-release reuse vulnerability exists in Blink in versions prior to Google Chrome 88.0.4324.96. An attacker can cause heap damage via a crafted HTML page...

[SECURITY] Fedora 33 Update: chromium-87.0.4280.141-1.fc33

Chromium is an open-source web browser, powered by WebKit Blink...

The vulnerability of Google Chrome’s Blink rendering module allows attackers to compromise the confidentiality, integrity, and accessibility of protected information.

The vulnerability of Google Chrome’s Blink rendering module relates to the use of memory after it is freed. Exploiting this vulnerability can allow an attacker to compromise the confidentiality, integrity, and accessibility of the protected information...

Security update for chromium (important)

openSUSE Security Update: Security update for chromium Announcement ID: openSUSE-SU-2021:0048-1 Rating: important References: 1180645 Cross-References: CVE-2020-15995 CVE-2020-16043 CVE-2021-21106 CVE-2021-21107 CVE-2021-21108 CVE-2021-21109 CVE-2021-21110 CVE-2021-21111 CVE-2021-21112...

Security update for chromium (important)

openSUSE Security Update: Security update for chromium Announcement ID: openSUSE-SU-2021:0041-1 Rating: important References: 1180645 Cross-References: CVE-2020-15995 CVE-2020-16043 CVE-2021-21106 CVE-2021-21107 CVE-2021-21108 CVE-2021-21109 CVE-2021-21110 CVE-2021-21111 CVE-2021-21112...

DEBIAN-CVE-2021-21112

Use after free in Blink in Google Chrome prior to 87.0.4280.141 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page...

DEBIAN-CVE-2020-16030

Insufficient data validation in Blink in Google Chrome prior to 87.0.4280.66 allowed a remote attacker to inject arbitrary scripts or HTML UXSS via a crafted HTML page...

CVE-2021-21112

Use after free in Blink in Google Chrome prior to 87.0.4280.141 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page...

UBUNTU-CVE-2020-16030

Insufficient data validation in Blink in Google Chrome prior to 87.0.4280.66 allowed a remote attacker to inject arbitrary scripts or HTML UXSS via a crafted HTML page...

CVE-2021-21112

Use after free in Blink in Google Chrome prior to 87.0.4280.141 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page...

UBUNTU-CVE-2021-21112

Use after free in Blink in Google Chrome prior to 87.0.4280.141 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page...

Design/Logic Flaw

Use after free in Blink in Google Chrome prior to 87.0.4280.141 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page...

CVE-2020-16030

Insufficient data validation in Blink in Google Chrome prior to 87.0.4280.66 allowed a remote attacker to inject arbitrary scripts or HTML UXSS via a crafted HTML page...

CVE-2021-21112

CVE-2021-21112 is a use-after-free in the Blink component of the Chromium-based Chrome stack (before 87.0.4280.141). The vulnerability allows a remote attacker to potentially trigger heap corruption via a crafted HTML page. Impact: partial confidentiality/integrity/availability degradation as des...