The vulnerability of Google Chrome browser allows a malicious actor to compromise the confidentiality, integrity, and accessibility of protected information.

The vulnerability exists in Google Chrome due to improper interaction between extensions, IPC, sync APIs, and Google V8. Exploiting this vulnerability allows malicious actors to execute arbitrary code remotely...

The vulnerability of Google Chrome browser allows a malicious actor to compromise the accessibility of protected information.

The vulnerability exists in the module/webaudio/BiquadDSPKernel.cpp of the Web Audio API implementation in Blink for Google Chrome. It stems from improper handling of parallel streams when attempting to update the coefficients of the biquad filter. Exploiting this vulnerability allows malicious...

The vulnerability of Google Chrome browser allows a malicious actor to compromise the confidentiality and integrity of protected information.

The vulnerability exists in the API extension for Debugger in the browser/extensions/api/debugger/debuggerapi.cc module in Google Chrome, due to the lack of checking for the URL scheme of the tab before attaching. Exploiting this vulnerability allows malicious actors to circumvent access...

The vulnerability of Google Chrome’s browser allows a malicious actor to circumvent access restrictions.

The Google Chrome browser contains a vulnerability related to improper handling of internationalization metadata. Exploiting this vulnerability allows malicious actors to bypass access restrictions by using “type mixing” and viewing property information. The vulnerability is associated with the...

The vulnerability of Google Chrome browser allows a malicious actor to trigger a service failure.

The Google Chrome browser contains a vulnerability related to the incorrect implementation of deferred optimization. Exploiting this vulnerability allows malicious actors, operating remotely, to cause a service failure a memory-related error or otherwise affect the system by using specially craft...

The vulnerability of Google Chrome’s browser allows a malicious actor to circumvent access restrictions.

The Google Chrome browser contains a vulnerability related to improper handling of internationalization metadata. Exploiting this vulnerability allows malicious actors to bypass access restrictions by using “type mixing” and viewing property information. The vulnerability is associated with the...

The vulnerability of Google Chrome allows a malicious actor to circumvent domain restriction rules.

The Google Chrome browser contains a vulnerability related to the implementation of drag-and-drop functionality. This vulnerability allows malicious actors to circumvent domain restrictions and replace local file paths by accessing resources through rendering. To exploit this vulnerability, activ...

The vulnerability of Google Chrome browser allows a malicious individual to inject any web script or HTML code they desire.

The Google Chrome browser contains a vulnerability related to cross-site scripting XSS in the DocumentLoader::maybeCreateArchive function in core/loader/DocumentLoader.cpp of Blink. Exploiting this vulnerability allows malicious actors to inject any web script or HTML code, using specially crafte...

The vulnerability of Google Chrome browser allows a malicious actor to trigger a service failure.

Google Chrome browser contains a vulnerability related to integer overflow in the SoftwareFrameManager::SwapToNewFrame function within the content/browser/rendererhost/softwareframemanager.cc file of the software composer. Exploiting this vulnerability allows malicious actors to cause system...

The vulnerability of Google Chrome allows a perpetrator to bypass the CSP security mechanism.

The vulnerability of the ServiceWorkerContainer::registerServiceWorkerImpl function WebKit/Source/modules/serviceworkers/ServiceWorkerContainer.cpp in the Google Chrome browser’s Blink component is related to access control deficiencies. Exploiting this vulnerability could allow a malicious actor...

The vulnerability of Google Chrome browser allows a violator to circumvent existing access restrictions policies.

The vulnerability of the Blink component in Google Chrome browser is related to errors in the code. Exploiting this vulnerability can allow a malicious actor to bypass existing access restrictions policies...

The vulnerability of Google Chrome browser allows a perpetrator to trigger a service failure or cause other effects.

The vulnerability of the ports/SkFontHostFreeType.cpp file of the Google Chrome browser’s Skia component is related to the use of memory after it is freed. Exploiting this vulnerability could allow a remote attacker to cause a service failure or other adverse effects memory corruption...

The vulnerability of the V8 browser engine and the Google Chrome browser, which allows a perpetrator to trigger a service failure or cause other effects.

The vulnerability of the Zone::New function in the zone.cc browser engine V8 and Google Chrome browser is caused by buffer overflow. Exploiting this vulnerability can allow a malicious actor to cause service interruptions or potentially have other effects, by using specially crafted JavaScript co...

CVE-2016-1698

The createCustomType function in extensions/renderer/resources/binding.js in the extension bindings in Google Chrome before 51.0.2704.79 does not validate module types, which might allow attackers to load arbitrary modules or obtain sensitive information by leveraging a poisoned definition...

UBUNTU-CVE-2016-1681

Heap-based buffer overflow in the opjj2kreadSPCodSPCoc function in j2k.c in OpenJPEG, as used in PDFium in Google Chrome before 51.0.2704.63, allows remote attackers to cause a denial of service or possibly have unspecified other impact via a crafted PDF document...

Google Chrome Information Disclosure Vulnerability (CNVD-2016-03814)

Google Chrome is a popular web browser. An information disclosure vulnerability exists in the Google Chrome extension, which allows remote attackers to exploit the vulnerability to build malicious WEB pages that can be parsed by users and can be used to obtain sensitive information...

Google Chrome V8 Buffer Overflow Vulnerability

Google Chrome is the United States Google Google company developed a Web browser. Google V8 is one of the open source JavaScript engine. A buffer overflow vulnerability exists in Google Chrome v8 prior to 51.0.2704.63. A remote attacker could exploit this vulnerability to cause type confusion,...

Google Chrome Blink Same-Origin Policy Bypass Vulnerability (CNVD-2016-03780)

Blink is the United States Google Google Inc. and Norway Opens Opera Software company jointly developed a set of browser layout engine rendering engine. An ink same-origin policy bypass vulnerability exists in Blink in versions of Google Chrome prior to 51.0.2704.63. A remote attacker can exploit...

chromium-browser: hpkp pins removed on cache clearance

browser/browsingdata/browsingdataremover.cc in Google Chrome before 51.0.2704.63 deletes HPKP pins during cache clearing, which makes it easier for remote attackers to spoof web sites via a valid certificate from an arbitrary recognized Certification Authority...

UBUNTU-CVE-2016-1682

The ServiceWorkerContainer::registerServiceWorkerImpl function in WebKit/Source/modules/serviceworkers/ServiceWorkerContainer.cpp in Blink, as used in Google Chrome before 51.0.2704.63, allows remote attackers to bypass the Content Security Policy CSP protection mechanism via a ServiceWorker...