UBUNTU-CVE-2020-6506

Insufficient policy enforcement in WebView in Google Chrome on Android prior to 83.0.4103.106 allowed a remote attacker to bypass site isolation via a crafted HTML page...

The vulnerability of the Google Chrome browser’s media subsystem, which allows a hacker to circumvent content security policies

The vulnerability of the Google Chrome browser’s media subsystem exists due to insufficient validation of input data. Exploiting this vulnerability allows a malicious actor to bypass content security policies by using a specially crafted HTML page...

Google Yanks 106 ‘Malicious’ Chrome Extensions

Google removed 106 Chrome browser extensions Thursday from its Chrome Web Store in response to a report that they were being used to siphon sensitive user data. In the research, also published Thursday, Awake Security alleged millions of Chrome users have been targeted by threat actors. The...

chromium-browser: Type Confusion in V8

Type confusion in V8 in Google Chrome prior to 83.0.4103.61 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page...

Google Chrome Resource Management Error Vulnerability (CNVD-2020-32321)

Google Chrome is a web browser from Google, an American company. A security vulnerability exists in Google Chrome versions prior to 83.0.4103.97 MacOS. A remote attacker can exploit this vulnerability with specially crafted HTML to cause a sandbox escape...

Google Chrome V8 Buffer Overflow Vulnerability (CNVD-2020-32316)

Google Chrome is a web browser of Google Google, U.S. V8 is one of the open source JavaScript engine. A buffer overflow vulnerability exists in V8 in versions of Google Chrome prior to 81.0.4044.92. A remote attacker can exploit this vulnerability to cause heap corruption with the help of special...

DEBIAN-CVE-2020-6453

Inappropriate implementation in V8 in Google Chrome prior to 80.0.3987.162 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page...

DEBIAN-CVE-2020-6470

Insufficient validation of untrusted input in clipboard in Google Chrome prior to 83.0.4103.61 allowed a local attacker to inject arbitrary scripts or HTML UXSS via crafted clipboard contents...

UBUNTU-CVE-2020-6472

Insufficient policy enforcement in developer tools in Google Chrome prior to 83.0.4103.61 allowed an attacker who convinced a user to install a malicious extension to obtain potentially sensitive information from process memory or disk via a crafted Chrome Extension...

UBUNTU-CVE-2020-6457

Use after free in speech recognizer in Google Chrome prior to 81.0.4044.113 allowed a remote attacker to potentially perform a sandbox escape via a crafted HTML page...

UBUNTU-CVE-2020-6473

Insufficient policy enforcement in Blink in Google Chrome prior to 83.0.4103.61 allowed a remote attacker to obtain potentially sensitive information from process memory via a crafted HTML page...

UBUNTU-CVE-2020-6491

Insufficient data validation in site information in Google Chrome prior to 83.0.4103.61 allowed a remote attacker to spoof security UI via a crafted domain name...

Google Chrome Blink Code Execution Vulnerability (CNVD-2020-29304)

Google Chrome is a web browser from Google, an American company. A security vulnerability exists in Blink in versions of Google Chrome prior to 83.0.4103.61, which stems from the program's failure to fully enforce policies. The vulnerability can be exploited by an attacker to execute arbitrary co...

Google Chrome Blink Type Obfuscation Vulnerability (CNVD-2020-29314)

Google Chrome is a web browser from Google Inc. and Opera Software of Norway.Blink is a browser layout engine rendering engine from Google Inc. and Opera Software of Norway. A type confusion vulnerability exists in Blink in versions of Google Chrome prior to 81.0.4044.138. A remote attacker could...

The vulnerability of the Omnibox address bar in Google Chrome’s browser, related to bypassing authentication through spamming, allows attackers to compromise data integrity.

The vulnerability of the Omnibox address bar in Google Chrome relates to the bypassing of authentication processes through spamming. Exploiting this vulnerability allows a malicious actor to compromise data integrity by using a specially created HTML page...

The vulnerability of Google Chrome’s browser, related to bypassing authentication through spoofing, allows attackers to compromise data integrity.

The vulnerability of Google Chrome relates to bypassing authentication through spamming. Exploiting this vulnerability allows a malicious actor, operating remotely, to compromise data integrity by using a specially created HTML page...

The vulnerability of Google Chrome’s browser, related to the disclosure of information, allows a perpetrator to gain unauthorized access to protected information.

The vulnerability of Google Chrome relates to the disclosure of information. Exploiting this vulnerability could allow a malicious actor, operating remotely, to gain unauthorized access to protected information...

The vulnerability of the dialog box detection component in Google Chrome’s web browser allows a perpetrator to compromise data integrity.

The vulnerability of the dialog area component in Google Chrome’s web browser is related to the lack of a mechanism for controlling permissions. Exploiting this vulnerability allows an attacker to affect data integrity through a specially created HTML page...

The vulnerability of Google Chrome browser developer tools allows a hacker to compromise data integrity.

The vulnerability of Google Chrome browser developer tools is related to improper control over access to critical resources. Exploiting this vulnerability allows a malicious actor to compromise data integrity through a specially created HTML page...

The vulnerability of Google Chrome browsers, related to memory usage after deallocation, allows attackers to gain unauthorized access to information and compromise its integrity and accessibility.

The vulnerability of Google Chrome relates to the use of memory after deallocation. Exploiting this vulnerability can allow a remote attacker to gain unauthorized access to information and compromise its integrity and accessibility through a specially created HTML page...