Design/Logic Flaw

The Automox Agent before 40 on Windows incorrectly sets permissions on key files...

Error Accessing Citrix Environment Using StoreFront 2.x and HTML5 Receiver 1.3 on Chrome v40 and Later

This article is intended for Citrix administrators and technical teams only. Non-admin users must contact their company’s Help Desk/IT support team and can refer to CTX297149 for more information. Users get error when accessing Citrix environment using StoreFront 2.x and HTML5 Receiver 1.3 on...

Stable Channel Update

The stable channel has been updated to 40.0.2214.111 for Windows, Mac and Linux. A full list of changes is available in the log. Security Fixes and Rewards Note: Access to bug details and links may be kept restricted until a majority of users are updated with a fix. We will also retain restrictio...

chromium-browser: use-after-free in DOM

Use-after-free vulnerability in core/events/TreeScopeEventContext.cpp in the DOM implementation in Blink, as used in Google Chrome before 40.0.2214.91, allows remote attackers to cause a denial of service or possibly have unspecified other impact via crafted JavaScript code that triggers improper...

chromium-browser: memory corruption in V8

The SimplifiedLowering::DoLoadBuffer function in compiler/simplified-lowering.cc in Google V8, as used in Google Chrome before 40.0.2214.91, does not properly choose an integer data type, which allows remote attackers to cause a denial of service memory corruption or possibly have unspecified oth...

Google Chrome Denial of Service Vulnerability (CNVD-2015-00672)

Google Chrome is a web browser developed by Google, Inc.International Components for Unicode ICU is a Unicode-supported, software internationalization, globalization C/C++ and Java library. A security vulnerability exists in the Regular Expressions package in versions of ICU 52 SVN revision 29294...

Google Chrome Denial of Service Vulnerability (CNVD-2015-00669)

Google Chrome is a web browser developed by Google, Inc.International Components for Unicode ICU is a Unicode-supported, software internationalization, globalization C/C++ and Java library. A security vulnerability exists in the Regular Expressions package in versions of ICU 52 SVN revision 29294...

UBUNTU-CVE-2014-7923

The Regular Expressions package in International Components for Unicode ICU 52 before SVN revision 292944, as used in Google Chrome before 40.0.2214.91, allows remote attackers to cause a denial of service memory corruption or possibly have unspecified other impact via vectors related to a...