4138 matches found
sqlite: fts3: improve shadow table corruption detection
Out of bounds read in SQLite in Google Chrome prior to 79.0.3945.79 allowed a remote attacker to obtain potentially sensitive information from process memory via a crafted HTML page...
DEBIAN-CVE-2019-13752
Out of bounds read in SQLite in Google Chrome prior to 79.0.3945.79 allowed a remote attacker to obtain potentially sensitive information from process memory via a crafted HTML page...
DEBIAN-CVE-2019-13750
Insufficient data validation in SQLite in Google Chrome prior to 79.0.3945.79 allowed a remote attacker to bypass defense-in-depth measures via a crafted HTML page...
CVE-2019-13747
Uninitialized data in rendering in Google Chrome on Android prior to 79.0.3945.79 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page...
DEBIAN-CVE-2019-13725
Use-after-free in Bluetooth in Google Chrome prior to 79.0.3945.79 allowed a remote attacker to execute arbitrary code via a crafted HTML page...
UBUNTU-CVE-2019-13739
Insufficient policy enforcement in Omnibox in Google Chrome prior to 79.0.3945.79 allowed a remote attacker to perform domain spoofing via IDN homographs via a crafted domain name...
UBUNTU-CVE-2019-13746
Insufficient policy enforcement in Omnibox in Google Chrome prior to 79.0.3945.79 allowed a remote attacker to spoof the contents of the Omnibox URL bar via a crafted HTML page...
UBUNTU-CVE-2019-13755
Insufficient policy enforcement in extensions in Google Chrome prior to 79.0.3945.79 allowed a remote attacker to disable extensions via a crafted HTML page...
DEBIAN-CVE-2019-13672
Incorrect security UI in Omnibox in Google Chrome prior to 77.0.3865.75 allowed a remote attacker to potentially spoof the contents of the Omnibox URL bar via a crafted HTML page on iOS...
The vulnerability in the implementation of the Page.downloadBehavior backend of the Google Chrome browser allows a hacker to persuade users to install a malicious extension.
The vulnerability of the PagedownloadBehavior implementation in Google Chrome’s browser lies in the lack of restrictions on file downloads. Exploiting this vulnerability can allow a malicious actor to persuade a user to install a malicious extension through a specially created HTML page...
The vulnerability of Google Chrome browser, which arises due to insufficient validation of input data, allows attackers to circumvent navigation restrictions.
The vulnerability of Google Chrome exists due to insufficient validation of input data. Exploiting this vulnerability allows a malicious actor to circumvent navigation restrictions using a specially created extension...
The vulnerability of Blink’s web page display mechanism in Google Chrome browser allows a hacker to gain unauthorized access to protected information.
The vulnerability of Blink’s web page rendering mechanism in Google Chrome browsers is related to the lack of protection for service data. Exploiting this vulnerability can allow a malicious actor, operating remotely, to gain unauthorized access to protected information through a specially create...
The vulnerability of Google Chrome arises from insufficient validation of input data, allowing a hacker to conceal a notification indicating a transition to full-screen mode.
The vulnerability of Google Chrome exists due to insufficient validation of input data. Exploiting this vulnerability allows a malicious actor to conceal a notification indicating that the system has switched to full-screen mode using a specially created HTML page...
The vulnerability of Google Chrome’s CustomHandlers component, which allows a hacker to execute cross-site scripting attacks
The vulnerability of Google Chrome’s CustomHandlers component relates to the ability to bypass the user’s confirmation dialog. Exploiting this vulnerability allows a malicious actor to perform cross-site scripting attacks using a specially created HTML page...
The vulnerability of Google Chrome’s browser, which arises due to insufficient validation of input data, allows a hacker to replace the content of the Omnibox component (URL).
The vulnerability of Google Chrome exists due to insufficient validation of input data. Exploiting this vulnerability allows a malicious actor to replace the content of the Omnibox component URL using a specially created HTML page...
The vulnerability of Google Chrome, related to the lack of checking for pop-up windows in full-screen mode, allows a hacker to replace the content of the Omnibox component (URL).
The vulnerability of Google Chrome lies in the lack of protection when processing pop-up windows in full-screen mode. Exploiting this vulnerability allows a remote attacker to replace the content of the Omnibox component URL using a specially created HTML page...
Google Chrome memory misreference vulnerability (CNVD-2019-42589)
Google Chrome is the United States Google Google company's a Web browser. PDFium is one of the open source PDF rendering engine. Google Chrome 76.0.3809.100 previous version of a security vulnerability. Remote attackers can exploit the vulnerability through specially crafted PDF files to cause he...
Kaspersky Protection extension for Google Chrome unauthorized access vulnerability
Kaspersky Protection extension for Google Chrome is a security extension for Google Chrome from the Russian laboratory Kaspersky Kaspersky. An unauthorized access vulnerability exists in Kaspersky Protection extension for Google Chrome. An attacker could exploit this vulnerability to remove other...
DEBIAN-CVE-2019-5871
Heap buffer overflow in Skia in Google Chrome prior to 77.0.3865.75 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page...
DEBIAN-CVE-2019-5862
Insufficient data validation in AppCache in Google Chrome prior to 76.0.3809.87 allowed a remote attacker who had compromised the renderer process to bypass site isolation via a crafted HTML page...