The vulnerability of Google Chrome browser allows a perpetrator to trigger a service failure or cause other effects.

The vulnerability of the ports/SkFontHostFreeType.cpp file of the Google Chrome browser’s Skia component is related to the use of memory after it is freed. Exploiting this vulnerability could allow a remote attacker to cause a service failure or other adverse effects memory corruption...

The vulnerability of the V8 browser engine and the Google Chrome browser, which allows a perpetrator to trigger a service failure or cause other effects.

The vulnerability of the Zone::New function in the zone.cc browser engine V8 and Google Chrome browser is caused by buffer overflow. Exploiting this vulnerability can allow a malicious actor to cause service interruptions or potentially have other effects, by using specially crafted JavaScript co...

CVE-2016-1698

The createCustomType function in extensions/renderer/resources/binding.js in the extension bindings in Google Chrome before 51.0.2704.79 does not validate module types, which might allow attackers to load arbitrary modules or obtain sensitive information by leveraging a poisoned definition...

UBUNTU-CVE-2016-1681

Heap-based buffer overflow in the opjj2kreadSPCodSPCoc function in j2k.c in OpenJPEG, as used in PDFium in Google Chrome before 51.0.2704.63, allows remote attackers to cause a denial of service or possibly have unspecified other impact via a crafted PDF document...

Google Chrome Information Disclosure Vulnerability (CNVD-2016-03814)

Google Chrome is a popular web browser. An information disclosure vulnerability exists in the Google Chrome extension, which allows remote attackers to exploit the vulnerability to build malicious WEB pages that can be parsed by users and can be used to obtain sensitive information...

Google Chrome V8 Buffer Overflow Vulnerability

Google Chrome is the United States Google Google company developed a Web browser. Google V8 is one of the open source JavaScript engine. A buffer overflow vulnerability exists in Google Chrome v8 prior to 51.0.2704.63. A remote attacker could exploit this vulnerability to cause type confusion,...

Google Chrome Blink Same-Origin Policy Bypass Vulnerability (CNVD-2016-03780)

Blink is the United States Google Google Inc. and Norway Opens Opera Software company jointly developed a set of browser layout engine rendering engine. An ink same-origin policy bypass vulnerability exists in Blink in versions of Google Chrome prior to 51.0.2704.63. A remote attacker can exploit...

chromium-browser: hpkp pins removed on cache clearance

browser/browsingdata/browsingdataremover.cc in Google Chrome before 51.0.2704.63 deletes HPKP pins during cache clearing, which makes it easier for remote attackers to spoof web sites via a valid certificate from an arbitrary recognized Certification Authority...

UBUNTU-CVE-2016-1682

The ServiceWorkerContainer::registerServiceWorkerImpl function in WebKit/Source/modules/serviceworkers/ServiceWorkerContainer.cpp in Blink, as used in Google Chrome before 51.0.2704.63, allows remote attackers to bypass the Content Security Policy CSP protection mechanism via a ServiceWorker...

UBUNTU-CVE-2016-1691

Skia, as used in Google Chrome before 51.0.2704.63, mishandles coincidence runs, which allows remote attackers to cause a denial of service heap-based buffer overflow or possibly have unspecified other impact via crafted curves, related to SkOpCoincidence.cpp and SkPathOpsCommon.cpp...

UBUNTU-CVE-2016-1683

numbers.c in libxslt before 1.1.29, as used in Google Chrome before 51.0.2704.63, mishandles namespace nodes, which allows remote attackers to cause a denial of service out-of-bounds heap memory access or possibly have unspecified other impact via a crafted document...

UBUNTU-CVE-2016-1680

Use-after-free vulnerability in ports/SkFontHostFreeType.cpp in Skia, as used in Google Chrome before 51.0.2704.63, allows remote attackers to cause a denial of service heap memory corruption or possibly have unspecified other impact via unknown vectors...

Researcher Pockets $30,000 in Chrome Bounties

Security researcher Mariusz Mlynski is having a good month. Having cashed in earlier in May to the tune of $15,500, Mlynski pocketed another $30,000 courtesy of Google’s bug bounty program after four high-severity vulnerabilities were patched in the Chrome browser, each worth $7,500 to the...

CVE-2016-1665

The JSGenericLowering class in compiler/js-generic-lowering.cc in Google V8, as used in Google Chrome before 50.0.2661.94, mishandles comparison operators, which allows remote attackers to obtain sensitive information via crafted JavaScript code...

5 Vulnerabilities Fixed In Chrome Browser, Google Pays $20K to Bug Hunters

Google is urging Windows, Mac and Linux users to update their Chrome browser to fix five security holes – two which rate as high severity. Google warned users of the vulnerabilities Wednesday as it released a new version, 50.0.2661.102, of the browser. The Chrome security holes were found by four...

Google Chrome V8 Information Disclosure Vulnerability (CNVD-2016-02824)

Google Chrome is a popular web browser. Google Chrome V8 suffers from an information disclosure vulnerability that allows remote attackers to exploit the vulnerability to build malicious WEB pages that can be parsed by users and can be used to obtain sensitive information...

The vulnerability of Google Chrome browser allows a perpetrator to trigger a service failure.

The vulnerability of the Google Chrome browser’s media subsystem is related to errors during the initialization of undefined data structures. Exploiting this vulnerability can allow a malicious actor to cause service failures remotely...

Google Patches 9 Security Flaws in New Chrome Browser Build

Google updated its browser Thursday patching nine security bugs, labeling four as “high” and two as a “medium” risk to computer users. The update was tied to a new Chrome browser build 50.0.2661.94 that fixes the flaws. Google also shelled out $14,000 tied to bug bounty payouts addressed in this...

UBUNTU-CVE-2016-1654

The media subsystem in Google Chrome before 50.0.2661.75 does not initialize an unspecified data structure, which allows remote attackers to cause a denial of service invalid read operation via unknown vectors...

The vulnerability of Google Chrome browser allows a perpetrator to trigger a service failure or cause other effects.

The vulnerability of the RenderWidgetHostImpl::Destroy function located in the content/browser/rendererhost/renderwidgethostimpl.cc file of the Google Chrome browser’s Navigation implementation is related to the use of memory after it is released. Exploiting this vulnerability could allow a remot...