Use-After-Free

chromium is vulnerable to use-after-free. A remote attacker who is able to convince a user to install a malicious extension has the potential to perform a sandbox escape on via the crafted Chrome Extension...

The vulnerability of the QR Code Generator browser extensions for Google Chrome and Microsoft Edge allows a hacker to compromise the confidentiality, integrity, and accessibility of the protected information.

The vulnerability of the QR Code Generator browser extensions for Google Chrome and Microsoft Edge is related to the use of memory after it is freed. Exploiting this vulnerability could allow an attacker to compromise the confidentiality, integrity, and accessibility of the protected information...

The vulnerability of the Extensions component in Google Chrome and Microsoft Edge browsers allows a perpetrator to gain unauthorized access to protected information.

The vulnerability of the Extensions component in Google Chrome and Microsoft Edge relates to the use of memory after it is freed. Exploiting this vulnerability can allow an attacker, operating remotely, to gain unauthorized access to protected information through a specially created web page...

CVE-2022-0793

Use after free in Cast in Google Chrome prior to 99.0.4844.51 allowed an attacker who convinced a user to install a malicious extension and engage in specific user interaction to potentially exploit heap corruption via a crafted Chrome Extension...

CVE-2022-0798

Use after free in MediaStream in Google Chrome prior to 99.0.4844.51 allowed an attacker who convinced a user to install a malicious extension to potentially exploit heap corruption via a crafted Chrome Extension...

Design/Logic Flaw

Use after free in MediaStream in Google Chrome prior to 99.0.4844.51 allowed an attacker who convinced a user to install a malicious extension to potentially exploit heap corruption via a crafted Chrome Extension...

CVE-2022-0798

Use after free in MediaStream in Google Chrome prior to 99.0.4844.51 allowed an attacker who convinced a user to install a malicious extension to potentially exploit heap corruption via a crafted Chrome Extension...

CVE-2022-0793

Use after free in Cast in Google Chrome prior to 99.0.4844.51 allowed an attacker who convinced a user to install a malicious extension and engage in specific user interaction to potentially exploit heap corruption via a crafted Chrome Extension...

CVE-2022-0798

Use after free in MediaStream in Google Chrome prior to 99.0.4844.51 allowed an attacker who convinced a user to install a malicious extension to potentially exploit heap corruption via a crafted Chrome Extension...

The vulnerability of the Skype Extension for Chrome, a messaging application, stems from deficiencies in the system’s controlled area segmentation. This allows attackers to gain unauthorized access to protected information.

The vulnerability of the Skype Extension for Chrome is related to deficiencies in the system’s controlled zone segmentation. Exploiting this vulnerability could allow an attacker, operating remotely, to gain unauthorized access to protected information...

CVE-2022-24522

Skype Extension for Chrome Information Disclosure Vulnerability...

CVE-2022-24522 Skype Extension for Chrome Information Disclosure Vulnerability

...

Microsoft Skype Extension for Chrome 信息泄露漏洞

Microsoft Skype Extension for Chrome is an extension from Microsoft Corporation USA. Allows you to share your favorite pages with your contacts using Share on Skype and launch Skype for Web with one click directly from your Chrome browser. An information disclosure vulnerability exists in Microso...

Buffer Overflow

chrome is vulnerable to buffer overflow. An attacker is able to corrupt the heap via a maliciously crafted Chrome extension...

CVE-2021-4055

Heap buffer overflow in extensions in Google Chrome prior to 96.0.4664.93 allowed an attacker who convinced a user to install a malicious extension to potentially exploit heap corruption via a crafted Chrome Extension...

DEBIAN-CVE-2021-38015

Inappropriate implementation in input in Google Chrome prior to 96.0.4664.45 allowed an attacker who convinced a user to install a malicious extension to bypass navigation restrictions via a crafted Chrome Extension...

CVE-2021-38015

Inappropriate implementation in input in Google Chrome prior to 96.0.4664.45 allowed an attacker who convinced a user to install a malicious extension to bypass navigation restrictions via a crafted Chrome Extension...

FreeBSD : chromium -- multiple vulnerabilities (18ac074c-579f-11ec-aac7-3065ec8fd3ec)

The version of FreeBSD installed on the remote host is prior to tested version. It is, therefore, affected by multiple vulnerabilities as referenced in the 18ac074c-579f-11ec-aac7-3065ec8fd3ec advisory. - Use after free in window manager in Google Chrome on ChromeOS prior to 96.0.4664.93 allowed ...

Microsoft Edge (Chromium) < 96.0.1054.53 Multiple Vulnerabilities

The version of Microsoft Edge installed on the remote Windows host is prior to 96.0.1054.53. It is, therefore, affected by multiple vulnerabilities as referenced in the December 10, 2021 advisory. - Use after free in window manager in Google Chrome on ChromeOS prior to 96.0.4664.93 allowed a remo...

Google Chrome < 96.0.4664.93 Multiple Vulnerabilities

The version of Google Chrome installed on the remote macOS host is prior to 96.0.4664.93. It is, therefore, affected by multiple vulnerabilities as referenced in the 202112stable-channel-update-for-desktop advisory. - Out of bounds write in WebRTC in Google Chrome prior to 96.0.4664.93 allowed a...