4245 matches found
Google Chrome Blink Security Policy Bypass Vulnerability
Google Chrome is a popular web browser. A content security policy bypass vulnerability exists in Google Chrome Blink, which allows remote attackers to exploit the vulnerability to build malicious WEB pages that can be tricked into being parsed by users, which can crash applications or execute...
Google Chrome blink ui forgery vulnerability
Google Chrome is a popular web browser. Google Chrome blink suffers from a ui forgery vulnerability that allows remote attackers to build malicious WEB pages that can be exploited to trick users into parsing, which can deceive them...
Google Chrome Blink Generic Cross-Site Scripting Vulnerability
Google Chrome is a popular web browser. A generic cross-site scripting vulnerability exists in Google Chrome Blink, which allows remote attackers to exploit the vulnerability to build malicious WEB pages that can be parsed by a user and can be used to execute arbitrary code...
Google Chrome Blink Generic Cross-Site Scripting Vulnerability (CNVD-2017-02111)
Google Chrome is a popular web browser. A generic cross-site scripting vulnerability exists in Google Chrome Blink, which allows remote attackers to exploit the vulnerability to build malicious WEB pages that can be parsed by a user and can be used to execute arbitrary code...
CVE-2017-5008
Blink in Google Chrome prior to 56.0.2924.76 for Linux, Windows and Mac, and 56.0.2924.87 for Android, allowed attacker controlled JavaScript to be run during the invocation of a private script method, which allowed a remote attacker to inject arbitrary scripts or HTML UXSS via a crafted HTML pag...
CVE-2017-5010
Blink in Google Chrome prior to 56.0.2924.76 for Linux, Windows and Mac, and 56.0.2924.87 for Android, resolved promises in an inappropriate context, which allowed a remote attacker to inject arbitrary scripts or HTML UXSS via a crafted HTML page...
CVE-2017-5022
Blink in Google Chrome prior to 56.0.2924.76 for Linux, Windows and Mac, and 56.0.2924.87 for Android, failed to properly enforce unsafe-inline content security policy, which allowed a remote attacker to bypass content security policy via a crafted HTML page...
CVE-2017-5016
Blink in Google Chrome prior to 56.0.2924.76 for Linux, Windows and Mac, and 56.0.2924.87 for Android, failed to prevent certain UI elements from being displayed by non-visible pages, which allowed a remote attacker to show certain UI elements on a page they don't control via a crafted HTML page...
Design/Logic Flaw
Blink in Google Chrome prior to 56.0.2924.76 for Linux, Windows and Mac, and 56.0.2924.87 for Android, incorrectly handled object owner relationships, which allowed a remote attacker to inject arbitrary scripts or HTML UXSS via a crafted HTML page...
CVE-2017-5007
Blink in Google Chrome prior to 56.0.2924.76 for Linux, Windows and Mac, and 56.0.2924.87 for Android, incorrectly handled the sequence of events when closing a page, which allowed a remote attacker to inject arbitrary scripts or HTML UXSS via a crafted HTML page...
CVE-2017-5016
Blink in Google Chrome prior to 56.0.2924.76 for Linux, Windows and Mac, and 56.0.2924.87 for Android, failed to prevent certain UI elements from being displayed by non-visible pages, which allowed a remote attacker to show certain UI elements on a page they don't control via a crafted HTML page...
Design/Logic Flaw
Blink in Google Chrome prior to 56.0.2924.76 for Linux, Windows and Mac, and 56.0.2924.87 for Android, failed to prevent certain UI elements from being displayed by non-visible pages, which allowed a remote attacker to show certain UI elements on a page they don't control via a crafted HTML page...
CVE-2017-5006
Blink in Google Chrome prior to 56.0.2924.76 for Linux, Windows and Mac, and 56.0.2924.87 for Android, incorrectly handled object owner relationships, which allowed a remote attacker to inject arbitrary scripts or HTML UXSS via a crafted HTML page...
Design/Logic Flaw
Blink in Google Chrome prior to 56.0.2924.76 for Linux, Windows and Mac, and 56.0.2924.87 for Android, failed to properly enforce unsafe-inline content security policy, which allowed a remote attacker to bypass content security policy via a crafted HTML page...
Design/Logic Flaw
Blink in Google Chrome prior to 56.0.2924.76 for Linux, Windows and Mac, and 56.0.2924.87 for Android, failed to properly enforce unsafe-inline content security policy, which allowed a remote attacker to bypass content security policy via a crafted HTML page...
CVE-2017-5008
CVE-2017-5008 is a Blink-based UXSS vulnerability in Google Chrome (up to 56.0.2924.76 for most platforms; 56.0.2924.87 for Android) where attacker-controlled JavaScript could be run during a private script method invocation, allowing remote injection of scripts/HTML via a crafted page. Connected...
CVE-2017-5008
Removed by vendor...
CVE-2017-5027
CVE-2017-5027: Blink in Google Chrome prior to 56.0.2924.76 (desktop) and 56.0.2924.87 (Android) could bypass unsafe-inline CSP due to improper enforcement, enabling a remote attacker to defeat Content Security Policy via a crafted HTML page. Affected Chrome versions include Linux, Windows, and M...
CVE-2017-5010
CVE-2017-5010 is a use-after-attack surface in Google Chrome/Chromium’s Blink rendering that allowed a remote attacker to inject arbitrary scripts or HTML (UXSS) via a crafted HTML page. According to the initial record, it affected Chrome on Linux, Windows and macOS prior to 56.0.2924.76 (Android...