Spoofing Attack

chromium is vulnerable to Spoofing Attack. The vulnerability exists because the inappropriate implementation in the Picture In Picture of the library, allowing an attacker to spoof the contents of the Omnibox URL bar via a maliciously crafted HTML page through the renderer process...

Out Of Bounds Memory Access

chromium is vulnerable to Out-of-bound Memory Access. A remote attacker is able to potentially exploit heap corruption via a crafted HTML page, resulting in out of bounds memory access...

Out-of-Bounds Write

chromium is vulnerable to Out-of-Bounds Write. Out of bounds write in Swiftshader allows a remote attacker to potentially exploit heap corruption via a crafted HTML page...

Bypassing Install Dialog

chromium is vulnerable to Bypassing Install Dialog. The vulnerability exists due to the inappropriate implementation in WebApp Installs of the library, which allows an attacker to convince a user to install a malicious web app to bypass the install dialog via a maliciously crafted HTML page...

Use After Free

chromium is vulnerable to Use After Free. The vulnerability exists in the Autofill UI in the library, which allows an attacker to cause heap corruption via a maliciously crafted HTML page...

Use After Free

chromium is vulnerable to Use After Free. The vulnerability exists in the DevTools in the library, which allows an attacker to cause heap corruption via a maliciously crafted HTML page through the renderer process...

Type Confusion

chromium is vulnerable to Type Confusion. The vulnerability exists in the V8 in the library, which allows an attacker to cause heap corruption via a maliciously crafted HTML page through the renderer process...

Use After Free

chromium is vulnerable to Use After Free. The vulnerability exists in the Guest View in the library, which allows an attacker to convince a user to install a malicious extension to potentially exploit heap corruption via a maliciously crafted HTML page...

Use After Free

chromium is vulnerable to Use After Free. The vulnerability exists in the UI of the library, allowing an attacker to perform arbitrary read/write via a maliciously crafted HTML page...

Use After Free

chromium is vulnerable to Use After Free. The vulnerability exists in the Base Internals of the library, allowing an attacker to perform arbitrary read/write via a maliciously crafted HTML page...

Use After Free

chromium is vulnerable to Use After Free. The vulnerability exists in the Accessibility of the library, which allows an attacker to convince a user to engage in specific UI gestures to perform arbitrary read/write via a maliciously crafted HTML page...

Spoofing Attack

chromium is vulnerable to Spoofing Attack. The vulnerability exists due to the inappropriate implementation in Blink of the library, which allows an attacker to perform UI spoofing via a maliciously crafted HTML page...

Use After Free

chromium is vulnerable to Use After Free. The vulnerability exists in the WebRTC of the library, which allows an attacker to perform a sandbox escape via a maliciously crafted HTML page through the renderer process...

Heap Buffer Overflow

chromium is vulnerable to Heap Buffer Overflow. The vulnerability exists in the Blink of the library, which allows an attacker to convince user to engage in specific UI gestures to potentially perform a sandbox escape via a maliciously crafted HTML page...

Arbitrary Code Execution

chromium is vulnerable to Arbitrary Code Execution. The vulnerability exists in FFmpeg in Google Chromewhich allows a remote attacker to execute arbitrary code inside a sandbox via a crafted HTML page...

Information Disclosure

chromium is vulnerable to Information Disclosure. The vulnerability exists due to inappropriate implementation in iFrame Sandbox in Google Chromewhich allows a remote attacker to leak cross-origin data via a crafted HTML page...

Access Restriction Bypass

chromium is vulnerable to Access Restriction Bypass. The vulnerability exists due to inappropriate implementation in XML in Google Chromewhich allows a remote attacker to potentially perform an ASLR bypass via a crafted HTML page...

Improper Input Validation

chromium is vulnerable to Improper Input Validation. The vulnerability exists due to inappropriate implementation in Autofill in Google Chrome which allows a remote attacker to bypass navigation restrictions via a crafted HTML page...

Denial Of Service (DoS)

chromium is vulnerable to Denial of Service DoS. The vulnerability exists due to type confusion in MathML in Google Chrome which allows a remote attacker to potentially exploit heap corruption via a crafted HTML page...

Access Restriction Bypass

chromium is vulnerable to Access Restriction Bypass. The vulnerability exists due to inappropriate implementation in Extensions in Google Chrome which allows a remote attacker who had compromised the renderer process to spoof extension storage via a crafted HTML page...