Fedora 33 : chromium (2021-48866282e5)

The remote Fedora 33 host has a package installed that is affected by multiple vulnerabilities as referenced in the FEDORA-2021-48866282e5 advisory. - Use after free in WebRTC in Google Chrome prior to 88.0.4324.96 allowed a remote attacker to potentially exploit heap corruption via a crafted SCT...

Google Chrome 访问控制错误漏洞

Chrome is a simple and efficiently designed web browsing tool developed by Google that is characterized by its simplicity and speed. A WebView Policy Enforcement Insufficiency vulnerability exists in versions of Google Chrome prior to 88.0.4324.96. An attacker can exploit this vulnerability to le...

Google Chrome 访问控制错误漏洞

Chrome is a simple and efficiently designed web browsing tool developed by Google that is characterized by its simplicity and speed. A Performance API improperly implemented vulnerability exists in versions of Google Chrome prior to 88.0.4324.96. An attacker can exploit the vulnerability to leak...

Google Chrome WebView Policy Enforcement Deficiency Vulnerability

Chrome is a simple and efficiently designed web browsing tool developed by Google that is characterized by its simplicity and speed. A WebView Policy Enforcement Insufficiency vulnerability exists in versions of Google Chrome prior to 88.0.4324.96. An attacker can exploit this vulnerability to le...

Google Chrome Performance API Improperly Implemented Vulnerability

Chrome is a simple and efficiently designed web browsing tool developed by Google that is characterized by its simplicity and speed. A Performance API improperly implemented vulnerability exists in versions of Google Chrome prior to 88.0.4324.96. An attacker can exploit the vulnerability to leak...

CVE-2020-16012

Side-channel information leakage in graphics in Google Chrome prior to 87.0.4280.66 allowed a remote attacker to leak cross-origin data via a crafted HTML page...

DEBIAN-CVE-2020-16012

Side-channel information leakage in graphics in Google Chrome prior to 87.0.4280.66 allowed a remote attacker to leak cross-origin data via a crafted HTML page...

CVE-2020-16012

Side-channel information leakage in graphics in Google Chrome prior to 87.0.4280.66 allowed a remote attacker to leak cross-origin data via a crafted HTML page...

CVE-2020-16012

CVE-2020-16012 is a timing side-channel vulnerability involving cross-origin data leakage via drawImage in graphics code. Connected advisories confirm multiple Mozilla products are affected (notably Firefox/Thunderbird) and that the issue arises from variable-time processing of cross-origin image...

CVE-2020-16012

Side-channel information leakage in graphics in Google Chrome prior to 87.0.4280.66 allowed a remote attacker to leak cross-origin data via a crafted HTML page...

CVE-2020-16012

Side-channel information leakage in graphics in Google Chrome prior to 87.0.4280.66 allowed a remote attacker to leak cross-origin data via a crafted HTML page...

PT-2024-10821 · Google · Google Chrome

Name of the Vulnerable Software and Affected Versions: Google Chrome versions prior to 85.0.4183.83 Description: The issue is related to insufficient policy enforcement in Navigation, allowing a remote attacker to leak cross-origin data via a crafted HTML page. This could potentially affect a...

Information Disclosure

chromium is vulnerable to information disclosure. Inappropriate implementation in Content Security Policy allows a remote attacker to leak cross-origin data via a malicious HTML page...

Information Disclosure

chromium is vulnerable to information disclosure. Insufficient policy enforcement in autofill allows a remote attacker to leak cross-origin data via a malicious HTML page...

Information Leak

chromium, sid is vulnerable to information leak in content security policy in Google Chrome. It allowed a remote attacker to leak cross-origin data via a crafted HTML page...

Information Disclosure

chromium is vulnerable to information disclosure. The vulnerability exists through policy bypass in CORS that allows a remote attacker to leak cross-origin data via a crafted HTML page...

Information Disclosure

chromium is vulnerable to information disclosure. Inappropriate implementation in WebView allows a remote attacker to leak cross-origin data via a malicious HTML page...

Information Disclosure

Google Chrome is vulnerable to information disclosure. An attacker is able to leak cross-origin data via a crafted HTML page...

Mozilla: Variable time processing of cross-origin images during drawImage calls

Side-channel information leakage in graphics in Google Chrome prior to 87.0.4280.66 allowed a remote attacker to leak cross-origin data via a crafted HTML page...

Mozilla: Variable time processing of cross-origin images during drawImage calls

Side-channel information leakage in graphics in Google Chrome prior to 87.0.4280.66 allowed a remote attacker to leak cross-origin data via a crafted HTML page...