4134 matches found
chromium-browser: Local file access in Blink
Insufficient file type enforcement in Blink in Google Chrome prior to 69.0.3497.81 allowed a remote attacker to obtain local file data via a crafted HTML page...
Google Chrome BoringSSL Information Disclosure Vulnerability
Google Chrome is a web browser developed by Google, Inc. BoringSSL is a fork of the OpenSSL library used to implement encryption and TLS functionality in Google products. A security vulnerability exists in the SPAKE2 implementation of BoringSSL in versions of Google Chrome prior to 63.0.3239.84. ...
UBUNTU-CVE-2017-15406
A stack buffer overflow in V8 in Google Chrome prior to 62.0.3202.75 allowed a remote attacker to perform an out of bounds memory read via a crafted HTML page...
CVE-2017-15430
Insufficient data validation in Chromecast plugin in Google Chrome prior to 63.0.3239.84 allowed a remote attacker to inject arbitrary scripts or HTML UXSS via a crafted HTML page...
UBUNTU-CVE-2017-15419
Insufficient policy enforcement in Resource Timing API in Google Chrome prior to 63.0.3239.84 allowed a remote attacker to infer browsing history by triggering a leaked cross-origin URL via a crafted HTML page...
Google Chrome < 64.0.3282.168 RCE
Binary data 700354.pasl...
Google Chrome Same Origin Policy Bypass Vulnerability (CNVD-2018-17051)
Google Chrome is a web browser developed by the American company Google Google. A same-origin policy bypass vulnerability exists in ServiceWorker in Google Chrome. An attacker can exploit the vulnerability to bypass security restrictions and perform unauthorized operations...
Google Chrome integer overflow vulnerability (CNVD-2018-17186)
Google Chrome is the United States Google Google company developed a Web browser. SwiftShader is one of the open source 3D rendering tool. An integer overflow vulnerability exists in SwiftShader in versions of Google Chrome prior to 68.0.3440.75. A remote attacker can exploit this vulnerability t...
Skia: Heap buffer overflow rasterizing paths in SVG
A precision error in Skia in Google Chrome prior to 67.0.3396.62 allowed a remote attacker to perform an out of bounds memory write via a crafted HTML page...
Skia: Heap buffer overflow rasterizing paths in SVG
A precision error in Skia in Google Chrome prior to 67.0.3396.62 allowed a remote attacker to perform an out of bounds memory write via a crafted HTML page...
Google Chrome V8 Type Obfuscation Vulnerability (CNVD-2018-11352)
Google Chrome is the United States Google Google company developed a Web browser. v8 is one of the open source JavaScript engine. A type confusion vulnerability exists in V8 in versions of Google Chrome prior to 66.0.3359.170. A remote attacker can exploit this vulnerability by tricking a user in...
chromium-browser: UI spoof in Permissions
A stagnant permission prompt in Prompts in Google Chrome prior to 66.0.3359.117 allowed a remote attacker to bypass permission policy via a crafted HTML page...
chromium-browser: Exploit hardening regression in Oilpan
Inline metadata in GarbageCollection in Google Chrome prior to 66.0.3359.117 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page...
chromium-browser: URL spoof in Omnibox
Incorrect handling of confusable characters in URL Formatter in Google Chrome prior to 66.0.3359.117 allowed a remote attacker to perform domain spoofing via IDN homographs via a crafted domain name...
chromium-browser: URL spoof in Omnibox
Incorrect handling of confusable characters in URL Formatter in Google Chrome prior to 66.0.3359.117 allowed a remote attacker to perform domain spoofing via IDN homographs via a crafted HTML page...
chromium-browser: Fullscreen UI spoof
Incorrect handling of asynchronous methods in Fullscreen in Google Chrome on macOS prior to 66.0.3359.117 allowed a remote attacker to enter full screen without showing a warning via a crafted HTML page...
Google Chrome Denial of Service Vulnerability (CNVD-2018-08819)
Google Chrome is a web browser developed by the American company Google Google. A security vulnerability exists in versions prior to Google Chrome 65.0.3325.146. An attacker can exploit this vulnerability to conduct timing attacks, execute code, or cause a denial of service application crash...
CVE-2017-5132
Inappropriate implementation in V8 in Google Chrome prior to 62.0.3202.62 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page, aka incorrect WebAssembly stack manipulation...