Sandbox Escape

chromium, sid is vulnerable to sandbox escape. Race in Mojo in Google Chrome allowed a remote attacker who had compromised the renderer process to potentially perform a sandbox escape via a crafted HTML page...

Integer Overflow In WebUSB

chromium, sid is vulnerable to integer overflow in WebUSB in Google Chrome. It allowed a remote attacker who had compromised the renderer process to potentially exploit heap corruption via a crafted HTML page...

Heap Buffer Overflow

chromium:sid is vulnerable to heap buffer overflow. It allowed a remote attacker who had compromised the renderer process to potentially exploit heap corruption via a crafted HTML page...

Cross-Site Scripting (XSS)

chromium is vulnerable to cross-site scripting. Insufficient data validation in WebUI allows a remote attacker, who has compromised the renderer process, to inject scripts or HTML into a privileged page via a malicious HTML page...

Arbitrary Code Execution

chromium is vulnerable to arbitrary code execution. An integer overflow that leads to a use-after-free in WebMIDI allows a remote attacker who has compromised the renderer process to execute arbitrary code via a malicious HTML page...

Same-Origin Policy Bypass

chromium is vulnerable to same-origin policy bypass. A remote attacker with access to the renderer process is able to bypass the same origin policy via a malicious HTML page...

Use After Free

Use after free in site isolation in Google Chrome prior to 86.0.4240.198 allowed a remote attacker who had compromised the renderer process to potentially perform a sandbox escape via a crafted HTML page...

Google Chrome versions before 87.0.4280.88 integer overflow during SimplfiedLowering phase

This module exploits an issue in Google Chrome versions before 87.0.4280.88 64 bit. The exploit makes use of an integer overflow in the SimplifiedLowering phase in turbofan. It is used along with a type hardening bypass using ArrayPrototypeShift to create a JSArray with a length of -1. This is...

CVE-2020-16018

Use after free in payments in Google Chrome prior to 87.0.4280.66 allowed a remote attacker who had compromised the renderer process to potentially perform a sandbox escape via a crafted HTML page...

CVE-2020-16017

Use after free in site isolation in Google Chrome prior to 86.0.4240.198 allowed a remote attacker who had compromised the renderer process to potentially perform a sandbox escape via a crafted HTML page...

Google Chrome Resource Management Error Vulnerability (CNVD-2020-62476)

Google Chrome is the United States Google Google company a Web browser. Mojo is one of the Mojo Maven plain Old Java Object plug-ins. A security vulnerability in versions of Google Chrome prior to 86.0.4240.99 allows an attacker to affect the renderer process by performing sandbox escaping throug...

Google Chrome Resource Management Error Vulnerability (CNVD-2020-62475)

Google Chrome is a Web browser from Google, a U.S. company. Blink is a browser layout engine rendering engine jointly developed by Google and Norway's OperaSoftware. A security vulnerability exists in versions of Google Chrome prior to 86.0.4240.99, which allows an attacker to compromise the...

Google Chrome for Android Buffer Overflow Vulnerability

Google Chrome is a web browser from Google, an American company. A buffer overflow vulnerability exists in Google Chrome for Android prior to 86.0.4240.185, which stems from a heap buffer overflow in the UI interface, which can be exploited by an attacker to compromise the renderer process by...

CVE-2020-15997

Use after free in Mojo in Google Chrome prior to 86.0.4240.99 allowed a remote attacker who had compromised the renderer process to potentially perform a sandbox escape via a crafted HTML page...

CVE-2020-15992

Insufficient policy enforcement in networking in Google Chrome prior to 86.0.4240.75 allowed a remote attacker who had compromised the renderer process to bypass same origin policy via a crafted HTML page...

CVE-2020-15998

Use after free in USB in Google Chrome prior to 86.0.4240.99 allowed a remote attacker who had compromised the renderer process to potentially perform a sandbox escape via a crafted HTML page...

CVE-2020-15971

Use after free in printing in Google Chrome prior to 86.0.4240.75 allowed a remote attacker who had compromised the renderer process to potentially perform a sandbox escape via a crafted HTML page...

CVE-2020-15971

Use after free in printing in Google Chrome prior to 86.0.4240.75 allowed a remote attacker who had compromised the renderer process to potentially perform a sandbox escape via a crafted HTML page...

DEBIAN-CVE-2020-15971

Use after free in printing in Google Chrome prior to 86.0.4240.75 allowed a remote attacker who had compromised the renderer process to potentially perform a sandbox escape via a crafted HTML page...

Design/Logic Flaw

Use after free in password manager in Google Chrome prior to 86.0.4240.75 allowed a remote attacker who had compromised the renderer process to potentially perform a sandbox escape via a crafted HTML page...