2701 matches found
CVE-2017-5045
XSS Auditor in Google Chrome prior to 57.0.2987.98 for Mac, Windows, and Linux and 57.0.2987.108 for Android allowed detection of a blocked iframe load, which allowed a remote attacker to brute force JavaScript variables via a crafted HTML page...
Chrome Universal XSS via the unload_event module (CVE-2015-6769)
VULNERABILITY DETAILS From /WebKit/Source/core/loader/DocumentLoader.cpp: PassRefPtrWillBeRawPtr DocumentLoader::createWriterForconst Document ownerDocument, const DocumentInit& init, ... LocalFrame frame = init.frame; ASSERT!frame-document || !frame-document-isActive; ASSERTframe-tree.childCount...
Multiple Vulnerabilities in Google Chrome and Chrome OS
Google Chrome and Chrome OS are both products of Google Inc. Google Chrome is a Web browser.Google Chrome OS is a fast, lightweight, open source Web-based operating system. Multiple vulnerabilities exist in Google Chrome versions prior to 57.0.2987.133 and Chrome OS versions prior to 57.0.2987.13...
UBUNTU-CVE-2017-5046
V8 in Google Chrome prior to 57.0.2987.98 for Mac, Windows, and Linux and 57.0.2987.108 for Android had insufficient policy enforcement, which allowed a remote attacker to spoof the location object via a crafted HTML page, related to Blink information disclosure...
UBUNTU-CVE-2017-5033
Blink in Google Chrome prior to 57.0.2987.98 for Mac, Windows, and Linux and 57.0.2987.108 for Android failed to correctly propagate CSP restrictions to local scheme pages, which allowed a remote attacker to bypass content security policy via a crafted HTML page, related to the unsafe-inline...
The vulnerability of Google Chrome browser allows a perpetrator to trigger a service failure.
The vulnerability of the Skia component in Google Chrome browser is caused by buffer overflow. Exploiting this vulnerability can allow an attacker, operating remotely, to cause a service failure through a specially crafted HTML page...
The vulnerability of Google Chrome browser allows a perpetrator to gain access to local files.
The vulnerability of the Histogram component in Google Chrome browser is related to pointer assignment errors. Exploiting this vulnerability can allow a malicious actor to gain access to local files through a specially crafted HTML page...
The vulnerability of Google Chrome browser allows a violator to circumvent content security policies.
The vulnerability of the Blink component in Google Chrome’s browser is related to the inability to enforce necessary content security policies in unsafe-inline. Exploiting this vulnerability allows a malicious actor to bypass content security policies through a specially crafted HTML page...
CVE-2017-5009
WebRTC in Google Chrome prior to 56.0.2924.76 for Linux, Windows and Mac, and 56.0.2924.87 for Android, failed to perform proper bounds checking, which allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page...
UBUNTU-CVE-2017-5015
Google Chrome prior to 56.0.2924.76 for Linux, Windows and Mac, and 56.0.2924.87 for Android, incorrectly handled Unicode glyphs, which allowed a remote attacker to perform domain spoofing via IDN homographs in a crafted domain name...
The vulnerability of Google Chrome browser allows a perpetrator to execute arbitrary code or trigger a service denial.
The vulnerability of the Google Chrome browser’s Blink service is related to improper data processing. Exploiting this vulnerability allows a remote attacker to execute arbitrary code or cause service failures...
The vulnerability of Google Chrome browser allows a perpetrator to trigger a service failure or otherwise affect the system.
The vulnerability of the privateClass extension in Google Chrome’s browser API is related to the lack of protection for service data. Exploiting this vulnerability could allow a malicious actor to remotely cause service failures or otherwise affect the system through a specially created HTML page...
The vulnerability of Google Chrome browser allows a perpetrator to trigger a service failure.
The vulnerability of the V8 component in Google Chrome browsers arises from an operation that occurs outside the buffer in memory. Exploiting this vulnerability can allow a malicious actor, operating remotely, to cause a service failure through a specially created HTML page...
The vulnerability of Google Chrome browser allows a perpetrator to gain access to protected information.
The vulnerability of the Blink component in Google Chrome’s browser is related to poor selection in raster manipulation. Exploiting this vulnerability allows a malicious actor, operating remotely, to gain access to protected information through a specially created HTML page...
The vulnerability of Google Chrome allows a hacker to obtain information about the integration platform and the operating system.
The vulnerability of the Blink component in Google Chrome exists due to the lack of measures taken to protect the structure of web pages. Exploiting this vulnerability can allow a malicious actor, operating remotely, to obtain information about the integration platform and operating system throug...
UBUNTU-CVE-2017-5010
Blink in Google Chrome prior to 56.0.2924.76 for Linux, Windows and Mac, and 56.0.2924.87 for Android, resolved promises in an inappropriate context, which allowed a remote attacker to inject arbitrary scripts or HTML UXSS via a crafted HTML page...
UBUNTU-CVE-2017-5007
Blink in Google Chrome prior to 56.0.2924.76 for Linux, Windows and Mac, and 56.0.2924.87 for Android, incorrectly handled the sequence of events when closing a page, which allowed a remote attacker to inject arbitrary scripts or HTML UXSS via a crafted HTML page...
The vulnerability of Google Chrome browser allows a perpetrator to gain access to protected information.
The vulnerability of the V8 component in Google Chrome browser relates to the use of memory after it is freed. Exploiting this vulnerability can allow a malicious actor, operating remotely, to gain access to protected information through a specially created HTML page...
The vulnerability of Google Chrome browser allows a perpetrator to trigger a service failure or otherwise affect the system.
The vulnerability of the PDFium component in the Google Chrome browser is related to the lack of protection for service data. Exploiting this vulnerability can allow a malicious actor to cause service failures or otherwise affect the system through a specially created PDF file...
The vulnerability of Google Chrome browser allows a violator to compromise the confidentiality of information.
The vulnerability of the Google Chrome browser’s API extension is related to deficiencies in access control. Exploiting this vulnerability can allow a malicious actor, operating remotely, to compromise the confidentiality of information through a specially created HTML page...