Fixed packages 1
| Release | Package | Fixed in |
|---|---|---|
| Debian · 10 | chromium | 90.0.4430.85-1~deb10u1 |
Vulnerabilities 25
-
High 8.8
Type confusion in V8 in Google Chrome prior to 90.0.4430.85 allowed a remote attacker to execute arbitrary code inside …
KEV Nov 3, 2021 -
Unscored —
Use after free in permissions in Google Chrome prior to 90.0.4430.72 allowed a remote attacker who had compromised the …
-
Unscored —
Use after free in extensions in Google Chrome prior to 90.0.4430.72 allowed an attacker who convinced a user to install…
-
Unscored —
Use after free in Blink in Google Chrome prior to 90.0.4430.72 allowed a remote attacker to potentially exploit heap co…
-
Unscored —
Use after free in Blink in Google Chrome on OS X prior to 90.0.4430.72 allowed a remote attacker to potentially exploit…
-
Unscored —
Insufficient policy enforcement in navigation in Google Chrome on iOS prior to 90.0.4430.72 allowed a remote attacker t…
-
Unscored —
Use after free in IndexedDB in Google Chrome prior to 90.0.4430.72 allowed an attacker who convinced a user to install …
-
Unscored —
Insufficient data validation in QR scanner in Google Chrome on iOS prior to 90.0.4430.72 allowed an attacker displaying…
-
Unscored —
Inappropriate implementation in storage in Google Chrome prior to 90.0.4430.72 allowed a remote attacker to leak cross-…
-
Unscored —
Inappropriate implementation in Network in Google Chrome prior to 90.0.4430.72 allowed a remote attacker to potentially…
-
Unscored —
Inappropriate implementation in Navigation in Google Chrome on iOS prior to 90.0.4430.72 allowed a remote attacker to l…
-
Unscored —
Incorrect security UI in Network Config UI in Google Chrome on ChromeOS prior to 90.0.4430.72 allowed a remote attacker…
-
Unscored —
Use after free in WebMIDI in Google Chrome prior to 90.0.4430.72 allowed a remote attacker to potentially exploit heap …
-
Unscored —
Use after free in Network API in Google Chrome prior to 90.0.4430.72 allowed a remote attacker to potentially exploit h…
-
Unscored —CVE-2021-21215 EPSS 34%
Inappropriate implementation in Autofill in Google Chrome prior to 90.0.4430.72 allowed a remote attacker to spoof secu…
-
Unscored —CVE-2021-21216 EPSS 22%
Inappropriate implementation in Autofill in Google Chrome prior to 90.0.4430.72 allowed a remote attacker to spoof secu…
-
Unscored —
Uninitialized data in PDFium in Google Chrome prior to 90.0.4430.72 allowed a remote attacker to obtain potentially sen…
-
Unscored —
Uninitialized data in PDFium in Google Chrome prior to 90.0.4430.72 allowed a remote attacker to obtain potentially sen…
-
Unscored —
Uninitialized data in PDFium in Google Chrome prior to 90.0.4430.72 allowed a remote attacker to obtain potentially sen…
-
Unscored —
Insufficient validation of untrusted input in Mojo in Google Chrome prior to 90.0.4430.72 allowed a remote attacker who…
-
Unscored —
Heap buffer overflow in V8 in Google Chrome prior to 90.0.4430.85 allowed a remote attacker who had compromised the ren…
-
Unscored —
Integer overflow in Mojo in Google Chrome prior to 90.0.4430.85 allowed a remote attacker who had compromised the rende…
-
Unscored —
Out of bounds memory access in V8 in Google Chrome prior to 90.0.4430.85 allowed a remote attacker to potentially explo…
-
Unscored —
Use after free in navigation in Google Chrome prior to 90.0.4430.85 allowed a remote attacker who had compromised the r…
-
Unscored —
Insufficient validation of untrusted input in Extensions in Google Chrome prior to 90.0.4430.72 allowed an attacker who…