4169 matches found
Google Chrome Security Restriction Bypass Vulnerability
Google Chrome is a web browsing tool developed by Google. A security vulnerability exists in Google Chrome versions prior to 48.0.2564.116. A remote attacker can exploit this vulnerability to bypass the Blink same-origin policy and the sandbox protection mechanism...
UBUNTU-CVE-2016-1629
Google Chrome before 48.0.2564.116 allows remote attackers to bypass the Blink Same Origin Policy and a sandbox protection mechanism via unspecified vectors...
CVE-2016-1623
The DOM implementation in Google Chrome before 48.0.2564.109 does not properly restrict frame-attach operations from occurring during or after frame-detach operations, which allows remote attackers to bypass the Same Origin Policy via a crafted web site, related to FrameLoader.cpp,...
Google Chrome URL Forgery Vulnerability
Google Chrome is a web browser developed by the American company Google Google. A security vulnerability exists in the 'CustomButton::AcceleratorPressed' function in the ui/views/controls/button/custombutton.cc file in Google Chrome versions prior to 48.0.2564.82. ' function in the...
CVE-2016-1616
The CustomButton::AcceleratorPressed function in ui/views/controls/button/custombutton.cc in Google Chrome before 48.0.2564.82 allows remote attackers to spoof URLs via vectors involving an unfocused custom button...
UBUNTU-CVE-2016-1615
The Omnibox implementation in Google Chrome before 48.0.2564.82 allows remote attackers to spoof a document's origin via unspecified vectors...
UBUNTU-CVE-2016-1616
The CustomButton::AcceleratorPressed function in ui/views/controls/button/custombutton.cc in Google Chrome before 48.0.2564.82 allows remote attackers to spoof URLs via vectors involving an unfocused custom button...
CVE-2016-1615
CVE-2016-1615 affects Google Chrome’s Omnibox prior to 48.0.2564.82. An attacker could spoof a document’s origin via unspecified vectors, enabling origin confusion. Root cause relates to Omnibox handling in Chromium/Blink; multiple vendors reference the same CVE across advisories. The primary rem...
UBUNTU-CVE-2016-2051
Multiple unspecified vulnerabilities in Google V8 before 4.8.271.17, as used in Google Chrome before 48.0.2564.82, allow attackers to cause a denial of service or possibly have other impact via unknown vectors...
The vulnerability of Google Chrome browser allows a perpetrator to trigger a service failure or cause other effects.
The vulnerability of the The ObjectBackedNativeHandler class extensions/renderer/objectbackednativehandler.cc in the Google Chrome browser extension framework is related to errors in the implementation of the handler functions. Exploiting this vulnerability may allow an attacker to cause service...
Google Chrome MIDI Subsystem Application Crash Vulnerability
Google Chrome is a web browsing tool developed by Google. In versions of Google Chrome prior to 47.0.2526.106, the MIDI subsystem does not properly handle data sending. A remote attacker could cause a denial of service or execute arbitrary code by exploiting this vulnerability...
Google Chrome integer overflow vulnerability (CNVD-2015-08480)
Google Chrome is a web browser developed by the American company Google Google. An integer overflow vulnerability exists in the 'WebCursor::Deserialize' function in the file content/common/cursors/webcursor.cc in Google Chrome versions prior to 47.0.2526.106. A remote attacker could exploit this...
Google Chrome Denial of Service Vulnerability (CNVD-2015-08299)
Google Chrome is a web browser developed by Google Inc. A security vulnerability exists in Google Chrome versions prior to 47.0.2526.73 and Google V8 versions prior to 4.7.80.23, which can be exploited by attackers to cause a denial of service...
Google Chrome Infobars Memory Misreference Vulnerability
Google Chrome is a web browser developed by the American company Google Google. A memory misreference vulnerability exists in the Infobars implementation of Google Chrome versions prior to 47.0.2526.73. A remote attacker can exploit this vulnerability to cause a denial of service with the help of...
Google Chrome HTML Injection Vulnerability
Google Chrome is a web browser developed by the American company Google Google. A security vulnerability exists in the page serializer of Google Chrome versions prior to 47.0.2526.73, which stems from the program's failure to properly handle Mark of the Web MOTW annotations for URLs containing th...
UBUNTU-CVE-2015-6778
The CJBig2SymbolDict class in fxcodec/jbig2/JBig2SymbolDict.cpp in PDFium, as used in Google Chrome before 47.0.2526.73, allows remote attackers to cause a denial of service out-of-bounds memory access or possibly have unspecified other impact via a PDF document containing crafted data with JBIG2...
UBUNTU-CVE-2015-8479
Use-after-free vulnerability in the AudioOutputDevice::OnDeviceAuthorized function in media/audio/audiooutputdevice.cc in Google Chrome before 47.0.2526.73 allows attackers to cause a denial of service heap memory corruption or possibly have unspecified other impact by triggering access to an...
UBUNTU-CVE-2015-6767
Use-after-free vulnerability in content/browser/appcache/appcachedispatcherhost.cc in the AppCache implementation in Google Chrome before 47.0.2526.73 allows remote attackers to cause a denial of service or possibly have unspecified other impact by leveraging incorrect pointer maintenance...
The vulnerability of Google Chrome browser allows a perpetrator to trigger a service failure.
The vulnerability of the CPDFSDKPageView component of the PDFium browser’s implementation is related to the use of memory after it is freed. Exploiting this vulnerability could allow a malicious actor to cause a service failure using a specially crafted PDF file...
The vulnerability of Google Chrome browser allows a perpetrator to trigger a service failure.
The vulnerability of the libANGLE component in the Google Chrome browser is related to errors in the code. Exploiting this vulnerability can allow a remote attacker to cause service interruptions...