Google Chrome Security Bypass Vulnerability (CNVD-2018-08953)

Google Chrome is a web browser developed by the American company Google Google. A security vulnerability exists in versions prior to Google Chrome 65.0.3325.146. A remote attacker can exploit this vulnerability to bypass Mark-of-the-Web by tricking users into visiting a specially crafted website...

chromium-browser: incorrect permissions on shared memory

Lack of special casing of Android ashmem in Google Chrome prior to 65.0.3325.146 allowed a remote attacker who had compromised the renderer process to bypass inter-process read only guarantees via a crafted HTML page...

CVE-2017-5128

Heap buffer overflow in Blink in Google Chrome prior to 62.0.3202.62 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page, related to WebGL...

CVE-2017-15389

An insufficient watchdog timer in navigation in Google Chrome prior to 62.0.3202.62 allowed a remote attacker to spoof the contents of the Omnibox URL bar via a crafted HTML page...

Google Chrome for Mac, Windows and Linux New Tab Page Information Disclosure Vulnerability

Google Chrome for Mac, Windows and Linux is a web browser developed by Google for the Mac, Windows and Linux platforms.New Tab Page is one of the modules used to create new tab pages. A security vulnerability exists in New Tab Page in versions of Google Chrome prior to 64.0.3282.119 for Windows,...

Google Chrome for Mac, Windows and Linux Security Bypass Vulnerability (CNVD-2018-03794)

Google Chrome for Mac, Windows and Linux is a web browser developed by Google, Inc. for the Mac, Windows and Linux platforms. A security vulnerability exists in versions of Google Chrome prior to 64.0.3282.119 for Windows, Mac and Linux platforms. A remote attacker can exploit the vulnerability t...

Google Awards Record $112,500 Bounty for Android Exploit Chain

Prolific bug hunter Guang Gong has earned the highest-ever payout for a vulnerability in the history of Google’s Android Security Rewards program, which began in 2015. He earned a combined $112,500 for the disclosure of an Android exploit chain impacting Google’s Pixel handset that could allow an...

The vulnerability in the JavaScript V8 engine of Google Chrome’s browser allows a hacker to execute arbitrary code in an isolated environment.

The vulnerability of Google Chrome’s JavaScript V8 engine is related to a type conversion error. Exploiting this vulnerability allows an attacker to execute arbitrary code in a isolated environment using a specially crafted HTML page...

The vulnerability of the Apps Bluetooth component of Google Chrome browser allows a hacker to read data beyond the memory limit.

The vulnerability of the Google Chrome browser’s Bluetooth component relates to the use of memory after it is freed. Exploiting this vulnerability could allow an attacker to read data beyond the memory limit, using a specially crafted HTML page...

The vulnerability in the Omnibox browser implementation of Google Chrome allows a hacker to perform domain substitution attacks.

The vulnerability of the Omnibox browser implementation by Google Chrome exists due to insufficient validation of input data. Exploiting this vulnerability allows a malicious actor to perform domain name substitution remotely, using a specially crafted domain name that includes IDN...

The vulnerability of Google Chrome’s browser auto-filling mechanism, which allows a hacker to perform reading beyond the memory limit

The vulnerability of the browser-based credit card data filling mechanism in Google Chrome is related to the use of memory after it is freed. Exploiting this vulnerability allows a malicious actor to read data beyond the memory limit, using a specially crafted HTML page...

The vulnerability of Google Chrome’s Blink rendering module allows a hacker to display a custom interface in a tab that is not controlled by the hacker.

The vulnerability of Google Chrome’s Blink rendering module is related to insufficient validation of input data. Exploiting this vulnerability allows a malicious actor to display a user interface in a tab that the attacker does not control, using a specially crafted HTML page...

The vulnerability in the PPAPI implementation of the Google Chrome browser allows a hacker to escape from an isolated environment.

The vulnerability of the PPAPI implementation in Google Chrome exists due to insufficient input validation in PPAPI modules. Exploiting this vulnerability allows a malicious actor to escape from an isolated environment using a specially crafted HTML page...

chromium-browser: uxss in v8

Inappropriate implementation in V8 WebAssembly JS bindings in Google Chrome prior to 63.0.3239.108 allowed a remote attacker to inject arbitrary scripts or HTML UXSS via a crafted HTML page...

Google Chrome Information Disclosure Vulnerability (CNVD-2017-33593)

Google Chrome for Linux, Windows, Mac is an American Google Google company developed a Web browser based on Linux, Windows, Mac and Android platforms. An information disclosure vulnerability exists in Google Chrome for Mac, Windows, and Linux platforms. A remote attacker can extract pixel values...

CVE-2017-5112

Heap buffer overflow in WebGL in Google Chrome prior to 61.0.3163.79 for Windows allowed a remote attacker to execute arbitrary code inside a sandbox via a crafted HTML page...

CVE-2017-5077

Insufficient validation of untrusted input in Skia in Google Chrome prior to 59.0.3071.86 for Linux, Windows, and Mac, and 59.0.3071.92 for Android, allowed a remote attacker to perform an out of bounds memory read via a crafted HTML page...

CVE-2017-5079

Inappropriate implementation in Blink in Google Chrome prior to 59.0.3071.86 for Mac, Windows, and Linux, and 59.0.3071.92 for Android, allowed a remote attacker to display UI on a non attacker controlled tab via a crafted HTML page...

CVE-2017-5083

Inappropriate implementation in Blink in Google Chrome prior to 59.0.3071.86 for Mac, Windows, and Linux, and 59.0.3071.92 for Android, allowed a remote attacker to display UI on a non attacker controlled tab via a crafted HTML page...

UBUNTU-CVE-2017-5120

Inappropriate use of www mismatch redirects in browser navigation in Google Chrome prior to 61.0.3163.79 for Mac, Windows, and Linux, and 61.0.3163.81 for Android, allowed a remote attacker to potentially downgrade HTTPS requests to HTTP via a crafted HTML page. In other words, Chrome could...