Google Chrome heap buffer overflow vulnerability (CNVD-2020-68851)

Chrome is a simple and efficiently designed web browsing tool developed by Google that is characterized by its simplicity and speed. A heap buffer overflow vulnerability exists in the clipboard in versions prior to Google Chrome 87.0.4280.66. No detailed vulnerability details are provided at this...

The vulnerability in the V8 engine of Google Chrome browser allows a perpetrator to compromise the confidentiality, integrity, and accessibility of protected information.

The vulnerability of the V8 engine implementation in Google Chrome browsers is related to writing beyond the buffer boundaries of memory. Exploiting this vulnerability allows a malicious actor to compromise the confidentiality, integrity, and accessibility of the protected information through a...

The vulnerability in the V8 engine of Google Chrome browser allows a perpetrator to compromise the confidentiality, integrity, and accessibility of protected information.

The vulnerability of the V8 engine implementation in Google Chrome browser is related to writing beyond the buffer boundaries of memory. Exploiting this vulnerability allows a malicious actor to compromise the confidentiality, integrity, and accessibility of the protected information through a...

DEBIAN-CVE-2020-15991

Use after free in password manager in Google Chrome prior to 86.0.4240.75 allowed a remote attacker who had compromised the renderer process to potentially perform a sandbox escape via a crafted HTML page...

UBUNTU-CVE-2020-6557

Inappropriate implementation in networking in Google Chrome prior to 86.0.4240.75 allowed a remote attacker to perform domain spoofing via a crafted HTML page...

Google Patches Actively-Exploited Zero-Day Bug in Chrome Browser

Google released an update to its Chrome browser that patches a zero-day vulnerability in the software’s FreeType font rendering library that was actively being exploited in the wild. Security researcher Sergei Glazunov of Google Project Zero discovered the bug which is classified as a type of...

The vulnerability of Google Chrome’s user interface allows a perpetrator to compromise the integrity of the protected information.

The vulnerability of the Google Chrome browser user interface is related to insufficient validation of entered data. Exploiting this vulnerability can allow a malicious actor to compromise the integrity of the protected information...

chromium-browser: Insufficient policy enforcement in downloads

Insufficient policy enforcement in downloads in Google Chrome on Windows prior to 86.0.4240.75 allowed a remote attacker who convinced the user to open files to execute arbitrary code via a crafted HTML page...

DEBIAN-CVE-2020-6568

Insufficient policy enforcement in intent handling in Google Chrome on Android prior to 85.0.4183.83 allowed a remote attacker to bypass navigation restrictions via a crafted HTML page...

DEBIAN-CVE-2020-15965

Type confusion in V8 in Google Chrome prior to 85.0.4183.121 allowed a remote attacker to potentially perform out of bounds memory access via a crafted HTML page...

DEBIAN-CVE-2020-6548

Heap buffer overflow in Skia in Google Chrome prior to 84.0.4147.125 allowed a remote attacker who had compromised the renderer process to potentially exploit heap corruption via a crafted HTML page...

DEBIAN-CVE-2020-6547

Incorrect security UI in media in Google Chrome prior to 84.0.4147.125 allowed a remote attacker to potentially obtain sensitive information via a crafted HTML page...

UBUNTU-CVE-2020-6567

Insufficient validation of untrusted input in command line handling in Google Chrome on Windows prior to 85.0.4183.83 allowed a remote attacker to bypass navigation restrictions via a crafted HTML page...

UBUNTU-CVE-2020-6566

Insufficient policy enforcement in media in Google Chrome prior to 85.0.4183.83 allowed a remote attacker to leak cross-origin data via a crafted HTML page...

The vulnerability of the ChromeDriver component of the Google Chrome browser allows a perpetrator to compromise data integrity.

The vulnerability of the ChromeDriver component of the Google Chrome browser is related to a lack of standard permission mechanisms. Exploiting this vulnerability can allow an attacker to compromise data integrity through a specially crafted request...

The vulnerability of the Google Chrome browser’s media router component allows a hacker to compromise data integrity.

The vulnerability of the Google Chrome browser’s media router component is related to the lack of a mechanism for verifying input data. Exploiting this vulnerability allows an attacker to manipulate data integrity through a specially created HTML page...

The vulnerability of Google Chrome’s browser loading policies, related to the lack of standard permission mechanisms, allows attackers to compromise data integrity.

The vulnerability of Google Chrome’s browser loading policy is related to the lack of standard permission mechanisms. Exploiting this vulnerability allows a malicious actor to influence data integrity through a specially created HTML page...

The vulnerability of the WebSQL module in Google Chrome browser allows attackers to access confidential data, compromise its integrity, and cause service interruptions.

The vulnerability of Google Chrome’s WebSQL module relates to reading data beyond the allowed buffer size. Exploiting this vulnerability can allow an attacker to access confidential data, compromise its integrity, and even cause service failures through a specially created HTML page...

The vulnerability of Google Chrome’s WebAudio component allows attackers to gain unauthorized access to information and compromise its integrity and accessibility.

The vulnerability of the WebAudio component in Google Chrome browsers relates to the use of memory after it is freed. Exploiting this vulnerability could allow a remote attacker to gain unauthorized access to information through a specially created HTML page...

Google Chrome Code Execution Vulnerability (CNVD-2020-49886)

Google Chrome is a web browser from Google, Inc.SCTP is one of the Stream Control Transmission Protocols SCTP. A security vulnerability exists in SCTP in versions prior to Google Chrome 84.0.4147.105. An attacker can exploit the vulnerability to execute arbitrary code with the help of specially...