Google Chrome V8 Array.prototype.concat Denial of Service Vulnerability

Google Chrome is a web browsing tool developed by Google. Google Chrome versions prior to 49.0.2623.108, V8/builtins.cc/Array.prototype.concat implementation does not properly consider element data types, which can be exploited by remote attackers to cause a denial of service via constructed...

The vulnerability of Google Chrome browser allows a perpetrator to trigger a service failure or cause other effects.

The vulnerability of the StyleResolver::appendCSSStyleSheet function WebKit/Source/core/css/resolver/StyleResolver.cpp in the Blink engine of Google Chrome browser is related to the use of memory after its release. Exploiting this vulnerability could allow a malicious actor to cause service...

The vulnerability of Google Chrome browser allows a violator to circumvent existing access restrictions.

The vulnerability of the Extensions subsystem’s extensions/renderer/resources/platformapp.js function in Google Chrome relates to the lack of restrictions on the use of Web APIs. Exploiting this vulnerability could allow a malicious actor to circumvent existing access restrictions through a...

The vulnerability of Google Chrome browser allows a violator to circumvent existing access restrictions policies.

The vulnerability of the Google Chrome browser’s Extensions subsystem is related to deficiencies in access control for certain functions. Exploiting this vulnerability allows a malicious actor to circumvent existing access restrictions by using specially crafted JavaScript code...

Google Chrome Extensions UI Design Vulnerability

Google Chrome is a web browser developed by the American company Google Google. A security vulnerability exists in the implementation of the Web Store inline-installer in the Extensions UI of Google Chrome prior to version 49.0.2623.75, which stems from the program's failure to limit the...

CVE-2016-1639

Use-after-free vulnerability in browser/extensions/api/webrtcaudioprivate/webrtcaudioprivateapi.cc in the WebRTC Audio Private API implementation in Google Chrome before 49.0.2623.75 allows remote attackers to cause a denial of service or possibly have unspecified other impact by leveraging...

UBUNTU-CVE-2016-2843

Multiple unspecified vulnerabilities in Google V8 before 4.9.385.26, as used in Google Chrome before 49.0.2623.75, allow attackers to cause a denial of service or possibly have other impact via unknown vectors...

UBUNTU-CVE-2016-2845

The Content Security Policy CSP implementation in Blink, as used in Google Chrome before 49.0.2623.75, does not ignore a URL's path component in the case of a ServiceWorker fetch, which allows remote attackers to obtain sensitive information about visited web pages by reading CSP violation report...

Mazar Bot Actively Targeting Android Devices

Nearly three months after it was spotted for sale in a Russian hacker forum, the Mazar bot has been put to use in active attacks targeting Android devices. Researchers at Heimdal Security said on Friday the bot is being sent to Android users via SMS and MMS messages and if the victim executes the...

Google Chrome HarfBuzz Denial of Service Vulnerability

Google Chrome is a web browser developed by Google Inc. HarfBuzz is one of the open source text opentype layout engine. A security vulnerability exists in HarfBuzz versions prior to 1.0.6 used in Google Chrome versions prior to 48.0.2564.82. An attacker could exploit this vulnerability to cause a...

CVE-2016-2051

Multiple unspecified vulnerabilities in Google V8 before 4.8.271.17, as used in Google Chrome before 48.0.2564.82, allow attackers to cause a denial of service or possibly have other impact via unknown vectors...

The vulnerability of Google Chrome browser allows a perpetrator to trigger a service failure or cause other effects.

The vulnerability of the Google Chrome browser exists due to insufficient checking of the status of resources when they can be used concurrently. Exploiting this vulnerability could allow a malicious actor to cause service failures or potentially other unspecified effects due to the use of an...

UBUNTU-CVE-2015-8548

Multiple unspecified vulnerabilities in Google V8 before 4.7.80.23, as used in Google Chrome before 47.0.2526.80, allow attackers to cause a denial of service or possibly have other impact via unknown vectors, a different issue than CVE-2015-8478...

UBUNTU-CVE-2015-8478

Multiple unspecified vulnerabilities in Google V8 before 4.7.80.23, as used in Google Chrome before 47.0.2526.73, allow attackers to cause a denial of service or possibly have other impact via unknown vectors...

chromium-browser: Use-after-free in AppCache

Use-after-free vulnerability in content/browser/appcache/appcacheupdatejob.cc in Google Chrome before 47.0.2526.73 allows remote attackers to execute arbitrary code or cause a denial of service by leveraging the mishandling of AppCache update jobs...

Chrome 0day so that millions of Android devices suffer from a remote threat-vulnerability warning-the black bar safety net

! From China qihoo 3 6 0 security researcher Guang Gong in the latest version of the Android platform, Chrome browser found a serious 0day vulnerability, which allows attacker to obtain the victim's cell phone the full administrator access, and the vulnerability of the use of the code to be able ...

The vulnerability of Google Chrome browser allows a violator to circumvent existing access restrictions policies.

The vulnerability of the ContainerNode::parserInsertBefore function in Google Chrome is related to deficiencies in access control for certain functions. Exploiting this vulnerability allows a malicious actor to circumvent existing access control policies by using specially crafted JavaScript code...

Google Chrome Blink Same-Origin Policy Bypass Vulnerability (CNVD-2015-06764)

Google Chrome is an open source WEB browser. Google uses Blink in the Cascading Style Sheets CSS implementation of the core/css/CSSFontFaceSrcValue.cpp file in the 'CSSFontFaceSrcValue::fetch ' function in the core/css/css/CSSFontFaceSrcValue.cpp file contains a security vulnerability that can be...

Google Chrome DOM Cross-Origin Bypass Vulnerability

Google Chrome is an open source WEB browser. A cross-origin security control bypass vulnerability exists in the Google Chrome DOM, which allows remote attackers to exploit the vulnerability to bypass security restrictions...

Google Chrome Blink Memory Misreference Vulnerability (CNVD-2015-05856)

Google Chrome is a WEB-based browser. A memory misreference vulnerability in the shared-timer implementation in Google Chrome Blink allows remote attackers to construct a malicious WEB page and trick users into parsing it, which could crash the application or execute arbitrary code...