CVE-2020-16017

Use after free in site isolation in Google Chrome prior to 86.0.4240.198 allowed a remote attacker who had compromised the renderer process to potentially perform a sandbox escape via a crafted HTML page...

CVE-2020-16016

Inappropriate implementation in base in Google Chrome prior to 86.0.4240.193 allowed a remote attacker who had compromised the renderer process to potentially perform a sandbox escape via a crafted HTML page...

CVE-2020-16014

Use after free in PPAPI in Google Chrome prior to 87.0.4280.66 allowed a remote attacker who had compromised the renderer process to potentially perform a sandbox escape via a crafted HTML page...

Sandbox Escape

chromium, sid is vulnerable to sandbox escape. It is due to a use after free in autofill in Google Chrome which allowed a remote attacker who had compromised the renderer process to potentially perform a sandbox escape via a crafted HTML page...

Privilege Escalation

chromium is vulnerable to privilege escalation. Insufficient data validation in navigation allows a remote attacker who has compromised the renderer process to bypass navigation restrictions via a malicious HTML page...

Arbitrary Code Execution

chromium is vulnerable to arbitrary code execution. The vulnerability exists through a use after free in NFC that allows a remote attacker who had compromised the renderer process to potentially perform a sandbox escape via a crafted HTML page...

Use After Free

chromium, sid is vulnerable to Use after free in printing in Google Chrome. It allowed a remote attacker who had compromised the renderer process to potentially perform a sandbox escape via a crafted HTML page...

Privilege Escalation

chromium is vulnerable to privilege escalation. A use-after-free in video allows an attacker who has compromised the renderer process to perform a sandbox escape via a malicious Chrome Extension...

Sandbox Escape

chromium, sid is vulnerable to sandbox escape. Race in Mojo in Google Chrome allowed a remote attacker who had compromised the renderer process to potentially perform a sandbox escape via a crafted HTML page...

Integer Overflow In WebUSB

chromium, sid is vulnerable to integer overflow in WebUSB in Google Chrome. It allowed a remote attacker who had compromised the renderer process to potentially exploit heap corruption via a crafted HTML page...

Heap Buffer Overflow

chromium:sid is vulnerable to heap buffer overflow. It allowed a remote attacker who had compromised the renderer process to potentially exploit heap corruption via a crafted HTML page...

Cross-Site Scripting (XSS)

chromium is vulnerable to cross-site scripting. Insufficient data validation in WebUI allows a remote attacker, who has compromised the renderer process, to inject scripts or HTML into a privileged page via a malicious HTML page...

Arbitrary Code Execution

chromium is vulnerable to arbitrary code execution. An integer overflow that leads to a use-after-free in WebMIDI allows a remote attacker who has compromised the renderer process to execute arbitrary code via a malicious HTML page...

Same-Origin Policy Bypass

chromium is vulnerable to same-origin policy bypass. A remote attacker with access to the renderer process is able to bypass the same origin policy via a malicious HTML page...

Use After Free

Use after free in site isolation in Google Chrome prior to 86.0.4240.198 allowed a remote attacker who had compromised the renderer process to potentially perform a sandbox escape via a crafted HTML page...

Google Chrome versions before 87.0.4280.88 integer overflow during SimplfiedLowering phase

This module exploits an issue in Google Chrome versions before 87.0.4280.88 64 bit. The exploit makes use of an integer overflow in the SimplifiedLowering phase in turbofan. It is used along with a type hardening bypass using ArrayPrototypeShift to create a JSArray with a length of -1. This is...

CVE-2020-16018

Use after free in payments in Google Chrome prior to 87.0.4280.66 allowed a remote attacker who had compromised the renderer process to potentially perform a sandbox escape via a crafted HTML page...

CVE-2020-16017

Use after free in site isolation in Google Chrome prior to 86.0.4240.198 allowed a remote attacker who had compromised the renderer process to potentially perform a sandbox escape via a crafted HTML page...

Google Chrome Resource Management Error Vulnerability (CNVD-2020-62476)

Google Chrome is the United States Google Google company a Web browser. Mojo is one of the Mojo Maven plain Old Java Object plug-ins. A security vulnerability in versions of Google Chrome prior to 86.0.4240.99 allows an attacker to affect the renderer process by performing sandbox escaping throug...

Google Chrome Resource Management Error Vulnerability (CNVD-2020-62475)

Google Chrome is a Web browser from Google, a U.S. company. Blink is a browser layout engine rendering engine jointly developed by Google and Norway's OperaSoftware. A security vulnerability exists in versions of Google Chrome prior to 86.0.4240.99, which allows an attacker to compromise the...