CVE-2016-5196

The content renderer client in Google Chrome prior to 54.0.2840.85 for Android insufficiently enforced the Same Origin Policy amongst downloaded files, which allowed a remote attacker to access any downloaded file and interact with sites, including those the user was logged into, via a crafted HT...

CVE-2016-5196

The content renderer client in Google Chrome prior to 54.0.2840.85 for Android insufficiently enforced the Same Origin Policy amongst downloaded files, which allowed a remote attacker to access any downloaded file and interact with sites, including those the user was logged into, via a crafted HT...

CVE-2016-5196

The CVE-2016-5196 entry concerns Google Chrome for Android prior to version 54.0.2840.85. The content renderer client fails to enforce the Same Origin Policy among downloaded files, allowing a remote attacker to access downloaded files and interact with sites the user is logged into via a crafted...

PT-2017-1062

Name of the Vulnerable Software and Affected Versions Google Chrome versions prior to 54.0.2840.85 Description The issue is related to errors in security settings, allowing a remote attacker to compromise the confidentiality, integrity, and availability of protected information using a specially...

PT-2016-6254

Name of the Vulnerable Software and Affected Versions Google Chrome versions prior to 52.0.2743.82 Opera affected versions not specified Description The issue allows remote attackers to spoof the URL display via a crafted web site due to improper restriction of multiple uses of a JavaScript forwa...

CVE-2016-1689: Improper Restriction of Operations within the Bounds of a Memory Buffer

Heap-based buffer overflow in content/renderer/media/canvascapturehandler.cc in Google Chrome before 51.0.2704.63 allows remote attackers to cause a denial of service or possibly have unspecified other impact via a crafted web site...

PT-2016-2149

Name of the Vulnerable Software and Affected Versions Google Chrome versions prior to 51.0.2704.63 Description The issue is a heap-based buffer overflow in the content/renderer/media/canvas capture handler.cc component. This can be exploited by remote attackers via a crafted web site, potentially...

CVE-2015-1272: Undefined Security Weakness

Use-after-free vulnerability in the GPU process implementation in Google Chrome before 44.0.2403.89 allows remote attackers to cause a denial of service or possibly have unspecified other impact by leveraging the continued availability of a GPUChannelHost data structure during Blink shutdown,...

CVE-2015-1260

Multiple use-after-free vulnerabilities in content/renderer/media/usermediaclientimpl.cc in the WebRTC implementation in Google Chrome before 43.0.2357.65 allow remote attackers to cause a denial of service or possibly have unspecified other impact via crafted JavaScript code that executes upon...

UBUNTU-CVE-2015-1260

Multiple use-after-free vulnerabilities in content/renderer/media/usermediaclientimpl.cc in the WebRTC implementation in Google Chrome before 43.0.2357.65 allow remote attackers to cause a denial of service or possibly have unspecified other impact via crafted JavaScript code that executes upon...

CVE-2015-1255: Undefined Security Weakness

Use-after-free vulnerability in content/renderer/media/webaudiocapturersource.cc in the WebAudio implementation in Google Chrome before 43.0.2357.65 allows remote attackers to cause a denial of service heap memory corruption or possibly have unspecified other impact by leveraging improper handlin...

PT-2015-1194

Name of the Vulnerable Software and Affected Versions Google Chrome versions prior to 43.0.2357.65 Description The issue is related to a use-after-free vulnerability in the WebAudio implementation, specifically in the content/renderer/media/webaudio capturer source.cc file. This vulnerability can...

CVE-2015-1237

Use-after-free vulnerability in the RenderFrameImpl::OnMessageReceived function in content/renderer/renderframeimpl.cc in Google Chrome before 42.0.2311.90 allows remote attackers to cause a denial of service or possibly have unspecified other impact via vectors that trigger renderer IPC messages...

CVE-2014-3156

Removed by vendor...

UBUNTU-CVE-2014-1727

Use-after-free vulnerability in content/renderer/rendererwebcolorchooserimpl.h in Google Chrome before 34.0.1847.116 allows remote attackers to cause a denial of service or possibly have unspecified other impact via vectors related to forms...

CVE-2014-1727

Use-after-free vulnerability in content/renderer/rendererwebcolorchooserimpl.h in Google Chrome before 34.0.1847.116 allows remote attackers to cause a denial of service or possibly have unspecified other impact via vectors related to forms...

CVE-2014-1727: Undefined Security Weakness

Use-after-free vulnerability in content/renderer/rendererwebcolorchooserimpl.h in Google Chrome before 34.0.1847.116 allows remote attackers to cause a denial of service or possibly have unspecified other impact via vectors related to forms...

PT-2014-1074

Name of the Vulnerable Software and Affected Versions Google Chrome versions prior to 34.0.1847.116 Description A use-after-free issue in the content/renderer/renderer webcolorchooser impl.h file allows remote attackers to cause a denial of service or possibly have other unspecified impacts via...

PT-2013-2648

Name of the Vulnerable Software and Affected Versions Google Chrome versions prior to 24.0.1312.56 Description The issue is related to the content/renderer/media/webrtc audio renderer.cc component in Google Chrome, which does not handle the 96 kHz sampling rate correctly. This can be exploited by...