6,157 results · Feed
-
Unscored —
Inappropriate symlink handling and a race condition in the stateful recovery feature implementation could lead to a per…
-
Unscored —
Insufficient data validation in V8 builtins string generator could lead to out of bounds read and write access in V8 in…
-
Unscored —
Using an ID that can be controlled by a compromised renderer which allows any frame to overwrite the page_state of any …
-
Unscored —
Insufficient data validation in crosh could lead to a command injection under chronos privileges in Networking in Googl…
-
Unscored —
An ability to process crash dumps under root privileges and inappropriate symlinks handling could lead to a local privi…
-
Unscored —
A memory corruption bug in WebAssembly could lead to out of bounds read and write through V8 in WebAssembly in Google C…
-
Unscored —
An integer overflow leading to a heap buffer overflow in Blink in Google Chrome prior to 71.0.3578.80 allowed a remote …
-
Unscored —
Incorrect handling of confusable characters in URL Formatter in Google Chrome prior to 71.0.3578.80 allowed a remote at…
-
Unscored —
Incorrect object lifecycle in PDFium in Google Chrome prior to 71.0.3578.80 allowed a remote attacker to potentially ex…
-
Unscored —
Incorrect handling of stylesheets leading to a use after free in Blink in Google Chrome prior to 71.0.3578.80 allowed a…
-
Unscored —
An integer overflow in path handling lead to a use after free in Skia in Google Chrome prior to 71.0.3578.80 allowed a …
-
Unscored —
Incorrect handing of paths leading to a use after free in Skia in Google Chrome prior to 71.0.3578.80 allowed a remote …
-
Unscored —
Service works could inappropriately gain access to cross origin audio in Media in Google Chrome prior to 71.0.3578.80 a…
-
Unscored —
Remote frame navigations was incorrectly permitted to local resources in Blink in Google Chrome prior to 71.0.3578.80 a…
-
Unscored —
Incorrect object lifecycle in MediaRecorder in Google Chrome prior to 71.0.3578.80 allowed a remote attacker to potenti…
-
Unscored —
Lack of proper validation of ancestor frames site when sending lax cookies in Navigation in Google Chrome prior to 71.0…
-
Unscored —
Incorrect handling of CSP enforcement during navigations in Blink in Google Chrome prior to 71.0.3578.80 allowed a remo…
-
Unscored —
Incorrect, thread-unsafe use of SkImage in Canvas in Google Chrome prior to 71.0.3578.80 allowed a remote attacker to p…
-
Unscored —
Incorrect handling of Reflect.construct in V8 in Google Chrome prior to 71.0.3578.80 allowed a remote attacker to perfo…
-
Unscored —
Incorrect handling of blob URLS in Site Isolation in Google Chrome prior to 71.0.3578.80 allowed a remote attacker who …
-
Unscored —
Incorrect handling of failed navigations with invalid URLs in Navigation in Google Chrome prior to 71.0.3578.80 allowed…
-
Unscored —
Incorrect handling of bidirectional domain names with RTL characters in Omnibox in Google Chrome prior to 71.0.3578.80 …
-
Unscored —
Insufficient validate of external protocols in Shell Integration in Google Chrome on Windows prior to 71.0.3578.80 allo…
-
Unscored —
Lack of special casing of localhost in WPAD files in Google Chrome prior to 71.0.3578.80 allowed an attacker on the loc…
-
Unscored —
Failure to dismiss http auth dialogs on navigation in Network Authentication in Google Chrome on Android prior to 71.0.…
-
Unscored —
Heap buffer overflow in Skia in Google Chrome prior to 71.0.3578.80 allowed a remote attacker to potentially exploit he…
-
Unscored —
Incorrect object lifecycle in WebAudio in Google Chrome prior to 71.0.3578.80 allowed a remote attacker to potentially …
-
Unscored —
Execution of user supplied Javascript during object deserialization can update object length leading to an out of bound…
-
Unscored —
Incorrect handling of confusable characters in URL Formatter in Google Chrome prior to 71.0.3578.80 allowed a remote at…
-
Unscored —
Incorrect handling of alert box display in Blink in Google Chrome prior to 71.0.3578.80 allowed a remote attacker to pr…
-
Unscored —
Incorrect object lifecycle handling in PDFium in Google Chrome prior to 71.0.3578.98 allowed a remote attacker to poten…
-
High 8.8
Execution of user supplied Javascript during array deserialization leading to an out of bounds write in V8 in Google Ch…
KEV Jun 8, 2022 -
Unscored —
A double-eviction in the Incognito mode cache that lead to a user-after-free in Networking Disk Cache in Google Chrome …
-
Unscored —CVE-2018-6092 Public exploit
An integer overflow on 32-bit systems in WebAssembly in Google Chrome prior to 66.0.3359.117 allowed a remote attacker …
-
Unscored —
Incorrect handling of confusable characters in URL Formatter in Google Chrome prior to 66.0.3359.117 allowed a remote a…
-
Unscored —
A nullptr dereference in WebAssembly in Google Chrome prior to 66.0.3359.117 allowed a remote attacker to potentially p…
-
Unscored —
Incorrect handling of confusable characters in URL Formatter in Google Chrome prior to 66.0.3359.117 allowed a remote a…
-
Unscored —
An integer overflow that lead to a heap buffer-overflow in Skia in Google Chrome prior to 66.0.3359.117 allowed a remot…
-
Unscored —
Incorrect handling of confusable characters in URL Formatter in Google Chrome prior to 66.0.3359.117 allowed a remote a…
-
Unscored —
A lack of host validation in DevTools in Google Chrome prior to 66.0.3359.117 allowed a remote attacker to execute arbi…