chromium-browser: use after free in blink

A use after free in Blink in Google Chrome prior to 57.0.2987.133 for Linux, Windows, and Mac, and 57.0.2987.132 for Android, allowed a remote attacker to perform an out of bounds memory read via a crafted HTML page...

Google Chrome < 57.0.2987.133 Multiple Vulnerabilities

The version of Google Chrome installed on the remote macOS host is prior to 57.0.2987.133. It is, therefore, affected by multiple vulnerabilities as referenced in the 201703stable-channel-update-for-desktop29 advisory. - An out-of-bounds read in V8 in Google Chrome prior to 57.0.2987.133 for Linu...

FreeBSD : chromium -- multiple vulnerabilities (7cf058d8-158d-11e7-ba2c-e8e0b747a45a)

Google Chrome Releases reports : 5 security fixes in this release, including : - 698622 Critical CVE-2017-5055: Use after free in printing. Credit to Wadih Matar - 699166 High CVE-2017-5054: Heap buffer overflow in V8. Credit to Nicolas Trippar of Zimperium zLabs - 662767 High CVE-2017-5052: Bad...

Google Chrome Security Updates (stable-channel-update-for-desktop_29-2017-03) - Windows

Google Chrome is prone to multiple vulnerabilities. SPDX-FileCopyrightText: 2017 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE = "cpe:/a:google:chrome"; ifdescription...

Chrome for Android Update

Chrome for Android has been updated to version 57.0.2987.132; the update will be available in Google Play over the next few days. A list of all Chromium changes in this build can be found here. We apologize for shipping another update so soon after the previous one, but this new version addresses...

Stable Channel Update for Desktop

The stable channel has been updated to 57.0.2987.133 for Windows, Mac, and Linux. This will roll out over the coming days/weeks. Security Fixes and Rewards Note: Access to bug details and links may be kept restricted until a majority of users are updated with a fix. We will also retain restrictio...

Stable Channel Updates for Chrome OS

The Stable channel has been updated to 57.0.2987.137 Platform version: 9202.60.0 for all Chrome OS devices except AOpen Chromebase Mini, AOpen Chromebox Mini, Google Chromebook Pixel 2015, ASUS Chromebook Flip C100PA, Samsung Chromebook Plus. This build contains a number of bug fixes, security...

chromium-browser: information disclosure in blink

V8 in Google Chrome prior to 57.0.2987.98 for Mac, Windows, and Linux and 57.0.2987.108 for Android had insufficient policy enforcement, which allowed a remote attacker to spoof the location object via a crafted HTML page, related to Blink information disclosure...

Google Chrome Blink Information Disclosure Vulnerability (CNVD-2017-03627)

Google Chrome is a web browser developed by the American company Google Google. Google Chrome Blink suffers from an information disclosure vulnerability that can be exploited by attackers to obtain sensitive information...

[ASA-201703-4] chromium: multiple issues

Arch Linux Security Advisory ASA-201703-4 ========================================= Severity: Critical Date : 2017-03-11 CVE-ID : CVE-2017-5029 CVE-2017-5030 CVE-2017-5031 CVE-2017-5032 CVE-2017-5033 CVE-2017-5034 CVE-2017-5035 CVE-2017-5036 CVE-2017-5037 CVE-2017-5038 CVE-2017-5039 CVE-2017-5040...

UBUNTU-CVE-2017-5046

V8 in Google Chrome prior to 57.0.2987.98 for Mac, Windows, and Linux and 57.0.2987.108 for Android had insufficient policy enforcement, which allowed a remote attacker to spoof the location object via a crafted HTML page, related to Blink information disclosure...

The vulnerability of Google Chrome browser allows a hacker to inject arbitrary scripts.

The vulnerability of the Blink component in Google Chrome exists due to improper handling of events when closing a page. Exploiting this vulnerability allows a malicious actor to inject arbitrary scripts or HTML UXSS through a specially crafted HTML page...

The vulnerability of Google Chrome browser allows a hacker to access certain elements of the user interface.

The vulnerability of the Blink component in Google Chrome relates to the inability to prevent certain user interface elements from being displayed on invisible pages. Exploiting this vulnerability allows a malicious actor to view certain unregulated user interface elements using a specially craft...

The vulnerability of Google Chrome browser allows a hacker to inject arbitrary scripts.

The vulnerability of the Blink component in Google Chrome exists due to the lack of measures taken to protect the structure of web pages. Exploiting this vulnerability allows a malicious actor to inject arbitrary scripts or HTML UXSS using a specially crafted HTML page...

The vulnerability of the Blink component in Google Chrome’s browser allows a hacker to inject any script they desire.

The vulnerability of the Blink component in Google Chrome relates to an incorrect definition of relationships between objects. Exploiting this vulnerability allows a malicious actor to inject arbitrary scripts or HTML code through a specially crafted HTML page...

The vulnerability of Google Chrome browser allows a violator to circumvent content security policies.

The vulnerability of the Blink component in Google Chrome’s browser is related to the inability to enforce necessary content security policies in unsafe-inline. Exploiting this vulnerability allows a malicious actor to bypass content security policies through a specially crafted HTML page...

The vulnerability of Google Chrome browser allows a hacker to inject arbitrary scripts.

The vulnerability of the Blink component in Google Chrome allows for control over JavaScript during the execution of a method that initiates a custom script. Exploiting this vulnerability enables a malicious actor to inject any desired script or HTML code through a specially crafted HTML page...

The vulnerability of Google Chrome browser allows a violator to circumvent content security policies.

The vulnerability of the Blink component in Google Chrome’s browser is related to the inability to enforce necessary content security policies in unsafe-inline. Exploiting this vulnerability allows a malicious actor to bypass content security policies through a specially crafted HTML page...

Google Chrome Blink Security Bypass Vulnerability (CNVD-2017-02229)

Google Chrome is a Web browser developed by Google, Inc. Blink is a browser layout engine rendering engine jointly developed by Google, Inc. and Norway's OperaSoftware. A security vulnerability exists in Blink in Google Chrome, which arises from the program's failure to enforce the unsafe-inline...

Google Chrome Blink Generic Cross-Site Scripting Vulnerability (CNVD-2017-02109)

Google Chrome is a popular web browser. A generic cross-site scripting vulnerability exists in Google Chrome Blink, which allows remote attackers to exploit the vulnerability to build malicious WEB pages that can be parsed by users and can be executed with arbitrary code...