Google Chrome Security Vulnerability

Google Chrome is a web browser from Google, Inc. in the United States. A security vulnerability exists in versions prior to Google Chrome 122.0.6261.111, which stems from memory access overruns in V8...

SUSE CVE-2024-1939

Type Confusion in V8 in Google Chrome prior to 122.0.6261.94 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. Chromium security severity: High...

SUSE CVE-2024-1938

Type Confusion in V8 in Google Chrome prior to 122.0.6261.94 allowed a remote attacker to potentially exploit object corruption via a crafted HTML page. Chromium security severity: High...

Google Chrome Code Execution Vulnerability (CNVD-2024-38808)

Google Chrome is a web browser from Google, an American company. A code execution vulnerability exists in Google Chrome that stems from an out-of-bounds memory access issue in the Blink module. An attacker can exploit this vulnerability to execute arbitrary code on the system...

The vulnerability of the Navigation function in Google Chrome and Microsoft Edge allows attackers to disclose protected information.

The vulnerability of the Navigation function in Google Chrome and Microsoft Edge is related to improperly implemented security checks for standard elements. Exploiting this vulnerability can allow a malicious actor, operating remotely, to disclose sensitive information through a specially created...

The vulnerability of Google Chrome and Microsoft Edge’s Content Security Policy mechanism, which allows attackers to circumvent existing security restrictions

The vulnerability of Google Chrome and Microsoft Edge’s Content Security Policy mechanism is related to improper security checks for standard elements. Exploiting this vulnerability allows a malicious actor to bypass existing security restrictions through a specially created HTML page...

Google Chrome Security Vulnerability

Google Chrome is a web browser from Google, Inc. A security vulnerability previously existed in Google Chrome version 122.0.6261.57, which stemmed from a post-release reuse issue in the Mojo module...

PT-2024-1837 · Google +5 · Google Chrome +5

Name of the Vulnerable Software and Affected Versions: Google Chrome versions prior to 122.0.6261.57 Microsoft Edge affected versions not specified Description: The issue is related to insufficient policy enforcement in the Download component, allowing a remote attacker to bypass existing securit...

PT-2024-2103 · Google +4 · Google Chrome +4

Name of the Vulnerable Software and Affected Versions: Google Chrome versions prior to 122.0.6261.111 Description: The issue is related to an out of bounds memory access in V8, which can be exploited by a remote attacker using a crafted HTML page, potentially allowing the execution of arbitrary...

The vulnerability in the implementation of the WebRTC technology in Google Chrome and Microsoft Edge browsers allows a hacker to execute arbitrary code.

The vulnerability of WebRTC implementations in Google Chrome and Microsoft Edge relates to the use of memory after it is freed. Exploiting this vulnerability allows a remote attacker to execute arbitrary code...

Google Chrome Reading Mode Module Memory Misreference Vulnerability

Google Chrome is a web browser from Google, an American company. A memory misreference vulnerability exists in the Google Chrome Reading Mode module, which originates from a confusion in the instructions responsible for freeing memory in the Reading Mode module. An attacker can exploit this...

SUSE CVE-2024-0809

Inappropriate implementation in Autofill in Google Chrome prior to 121.0.6167.85 allowed a remote attacker to bypass Autofill restrictions via a crafted HTML page. Chromium security severity: Low...

SUSE CVE-2024-0812

Inappropriate implementation in Accessibility in Google Chrome prior to 121.0.6167.85 allowed a remote attacker to potentially exploit object corruption via a crafted HTML page. Chromium security severity: High...

SUSE CVE-2024-0810

Insufficient policy enforcement in DevTools in Google Chrome prior to 121.0.6167.85 allowed an attacker who convinced a user to install a malicious extension to leak cross-origin data via a crafted Chrome Extension. Chromium security severity: Medium...

CVE-2024-0814

Incorrect security UI in Payments in Google Chrome prior to 121.0.6167.85 allowed a remote attacker to potentially spoof security UI via a crafted HTML page. Chromium security severity: Medium...

CVE-2024-0806

Use after free in Passwords in Google Chrome prior to 121.0.6167.85 allowed a remote attacker to potentially exploit heap corruption via specific UI interaction. Chromium security severity: Medium...

PT-2024-1393 · Google +5 · Google Chrome +5

Name of the Vulnerable Software and Affected Versions: Google Chrome versions prior to 121.0.6167.85 Microsoft Edge affected versions not specified Description: The issue is related to a use after free in the Passwords component, which can potentially allow a remote attacker to exploit heap...

Debian dsa-5598 : chromium - security update

The remote Debian 11 / 12 host has packages installed that are affected by a vulnerability as referenced in the dsa-5598 advisory. - Insufficient data validation in Extensions in Google Chrome prior to 120.0.6099.216 allowed an attacker in a privileged network position to install a malicious...

The vulnerability of the MediaStream component in Google Chrome browsers allows a hacker to execute arbitrary code.

The vulnerability of the MediaStream component in Google Chrome browsers is related to the use of memory after it is freed. Exploiting this vulnerability could allow a remote attacker to execute arbitrary code...

Vulnerability fixed in Google Chrome

Google has fixed a vulnerability in Chrome. The vulnerability is located in WebRTC, and a malicious person could exploit it to execute arbitrary code in the context of the browser. Google reports being aware that exploit code is being shared in limited shared. This exploit code is not yet publicl...