CVE-2020-16043

CVE-2020-16043 affects Chromium-based browsers (e.g., Chrome) before version 87.0.4280.141 . The issue is an insufficient data validation in networking that could allow a remote attacker to bypass discretionary access control via malicious network traffic. Impact per sources: remote code/impact r...

CVE-2020-16043

Insufficient data validation in networking in Google Chrome prior to 87.0.4280.141 allowed a remote attacker to bypass discretionary access control via malicious network traffic...

CVE-2020-16043

Insufficient data validation in networking in Google Chrome prior to 87.0.4280.141 allowed a remote attacker to bypass discretionary access control via malicious network traffic...

CVE-2020-16040

CVE-2020-16040 affects Google Chrome/Chromium before 87.0.4280.88 due to insufficient data validation in V8 , which could allow a remote attacker to trigger heap corruption and potentially execute arbitrary code. The vulnerability is mitigated by upgrading to 87.0.4280.88 (fixed upstream; Debian/...

CVE-2020-16040

Insufficient data validation in V8 in Google Chrome prior to 87.0.4280.88 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page...

CVE-2020-16040

Insufficient data validation in V8 in Google Chrome prior to 87.0.4280.88 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page...

CVE-2020-16035

CVE-2020-16035 affects the cros-disks component in Chromium/ChromeOS before 87.0.4280.66, due to insufficient data validation. This could allow a compromised browser process to bypass noexec restrictions via a malicious file, enabling potential local or remote implications as described in multipl...

CVE-2020-16035

Insufficient data validation in cros-disks in Google Chrome on ChromeOS prior to 87.0.4280.66 allowed a remote attacker who had compromised the browser process to bypass noexec restrictions via a malicious file...

CVE-2020-16035

Insufficient data validation in cros-disks in Google Chrome on ChromeOS prior to 87.0.4280.66 allowed a remote attacker who had compromised the browser process to bypass noexec restrictions via a malicious file...

CVE-2020-16031

CVE-2020-16031 is a vulnerability in Chromium/Chrome related to the tab-Preview UI. Multiple connected sources (e.g., Arch Linux security advisory ASA-202011-11) describe it as a content spoofing issue in the tab preview component caused by an incorrect security UI, allowing a remote attacker to ...

CVE-2020-16031

Insufficient data validation in UI in Google Chrome prior to 87.0.4280.66 allowed a remote attacker to spoof the contents of the Omnibox URL bar via a crafted HTML page...

CVE-2020-16032

Insufficient data validation in sharing in Google Chrome prior to 87.0.4280.66 allowed a remote attacker to spoof the contents of the Omnibox URL bar via a crafted HTML page...

CVE-2020-16030

Insufficient data validation in Blink in Google Chrome prior to 87.0.4280.66 allowed a remote attacker to inject arbitrary scripts or HTML UXSS via a crafted HTML page...

CVE-2020-16030

CVE-2020-16030 affects the Blink component in Chromium/Google Chrome prior to 87.0.4280.66. The issue is insufficient data validation in Blink, enabling a remote attacker to inject arbitrary scripts or HTML (UXSS) via a crafted HTML page. Publicly cited sources in the provided documents confirm C...

CVE-2020-16032

CVE-2020-16032 affects Chromium/Google Chrome prior to 87.0.4280.66 in the sharing UI. The vulnerability is described as content spoofing in the sharing component, i.e., an incorrect security UI could misrepresent content shown to users. Affected products include Chromium/Chrome, with multiple up...

CVE-2020-16031

Insufficient data validation in UI in Google Chrome prior to 87.0.4280.66 allowed a remote attacker to spoof the contents of the Omnibox URL bar via a crafted HTML page...

CVE-2020-16032

Insufficient data validation in sharing in Google Chrome prior to 87.0.4280.66 allowed a remote attacker to spoof the contents of the Omnibox URL bar via a crafted HTML page...

CVE-2020-16030

Insufficient data validation in Blink in Google Chrome prior to 87.0.4280.66 allowed a remote attacker to inject arbitrary scripts or HTML UXSS via a crafted HTML page...

CVE-2020-16015

Insufficient data validation in WASM in Google Chrome prior to 87.0.4280.66 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page...

CVE-2020-16015

CVE-2020-16015 affects Google Chrome/Chromium, specifically the WASM component. The issue is described as insufficient data validation in WASM prior to 87.0.4280.66, which could allow a remote attacker to trigger heap corruption via a crafted HTML page. Multiple connected sources corroborate that...