4134 matches found
UBUNTU-CVE-2018-16070
Integer overflows in Skia in Google Chrome prior to 69.0.3497.81 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page...
chromium-browser: Overly permissive tab access in Extensions
Insufficient policy enforcement in extensions API in Google Chrome prior to 75.0.3770.80 allowed an attacker who convinced a user to install a malicious extension to bypass restrictions on file URIs via a crafted Chrome Extension...
Google Chrome Security Bypass Vulnerability (CNVD-2019-17515)
Google Chrome is a web browser from Google, an American company. A security vulnerability exists in Google Chrome versions prior to 75.0.3770.80. An attacker can exploit this vulnerability to bypass security restrictions and gain unauthorized access to the system...
DEBIAN-CVE-2019-5799
Incorrect inheritance of a new document's policy in Content Security Policy in Google Chrome prior to 73.0.3683.75 allowed a remote attacker to bypass content security policy via a crafted HTML page...
UBUNTU-CVE-2019-5799
Incorrect inheritance of a new document's policy in Content Security Policy in Google Chrome prior to 73.0.3683.75 allowed a remote attacker to bypass content security policy via a crafted HTML page...
UBUNTU-CVE-2019-5800
Insufficient policy enforcement in Blink in Google Chrome prior to 73.0.3683.75 allowed a remote attacker to bypass content security policy via a crafted HTML page...
UBUNTU-CVE-2019-5790
An integer overflow leading to an incorrect capacity of a buffer in JavaScript in Google Chrome prior to 73.0.3683.75 allowed a remote attacker to execute arbitrary code inside a sandbox via a crafted HTML page...
DEBIAN-CVE-2019-5791
Inappropriate optimization in V8 in Google Chrome prior to 73.0.3683.75 allowed a remote attacker to perform an out of bounds memory read via a crafted HTML page...
Google Chrome Security Bypass Vulnerability (CNVD-2019-26392)
Google Chrome is a web browser from Google, an American company. A security vulnerability exists in Google Chrome versions prior to 74.0.3729.108. An attacker can exploit this vulnerability by tricking a user into visiting a specially crafted web site to bypass security restrictions and gain...
The vulnerability of Google Chrome, related to improper input data validation, allows a hacker to execute arbitrary code.
The vulnerability of Google Chrome is related to an incorrect optimization assumption in the V8 module. Exploiting this vulnerability allows a remote attacker to execute arbitrary code in a isolated software environment, using a specially created HTML page...
chromium-browser: Type confusion in V8
Inappropriate optimization in V8 in Google Chrome prior to 73.0.3683.75 allowed a remote attacker to perform an out of bounds memory read via a crafted HTML page...
The vulnerability of Google Chrome’s browser, related to security elements, allows a hacker to bypass the site’s isolation protection by using a specially created HTML page.
The vulnerability of Google Chrome relates to errors in processing URL addresses for blob objects during page isolation. Exploiting this vulnerability allows a malicious actor, operating remotely, to circumvent page isolation protection by using a specially created HTML page...
The vulnerability of Google Chrome, related to errors in managing permissions, privileges, and access control, allows a perpetrator to gain access to files in the local file system using a specially created extension.
The vulnerability of Google Chrome relates to errors in the frame navigation function of Blink. Exploiting this vulnerability can allow an attacker to gain access to files on the local file system using a specially created extension...
The vulnerability of Google Chrome, related to incorrect input validation, allows a hacker to manipulate the content of the Omnibox (address bar) through a specially created domain name.
The vulnerability of Google Chrome relates to errors in processing two-way domain names containing RTL symbols in the Omnibox. Exploiting this vulnerability allows a malicious actor to manipulate the content of the Omnibox address bar using a specially created domain name...
The vulnerability of Google Chrome’s browser, related to improper input validation, allows a malicious actor to execute JavaScript code from an arbitrary source.
The vulnerability of Google Chrome relates to errors in handling redirects for URLs that are not allowed. Exploiting this vulnerability allows a malicious actor to execute JavaScript code from an arbitrary source, using a specially created HTML page...
The vulnerability of Google Chrome browser, related to insufficient validation of input data, allows a hacker to circumvent the Cookie SameSite policy.
The vulnerability of Google Chrome lies in the lack of proper validation of cookie-related frames during the sending of cookies. Exploiting this vulnerability allows a remote attacker to circumvent the Cookie SameSite policy by using a specially created HTML page...
A vulnerability in the Google Chrome browser, related to a bug in network authentication implementation, allows attackers to compromise the integrity of protected information.
The vulnerability in Google Chrome relates to a implementation error in network authentication. Exploiting this vulnerability allows an attacker to compromise the integrity of protected information through a specially created HTML page...
The vulnerability of Google Chrome’s browser, related to access control errors, allows a violator to circumvent existing CORS policy restrictions.
The vulnerability in Google Chrome relates to access control errors. Exploiting this vulnerability allows a remote attacker to bypass CORS policies for audio content by using a specially created HTML page...
mozilla: Use after free in Skia
An integer overflow in path handling lead to a use after free in Skia in Google Chrome prior to 71.0.3578.80 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page...
