chromium-browser vulnerabilities (Debian)
858 vulnerabilities.
chromium-browserDebianIncorrect handling of confusable characters in URL Formatter in Google Chrome prior to 66.0.3359...6.5 Mediumchromium-browserDebianAn asynchronous generator may return an incorrect state in V8 in Google Chrome prior to 66.0.3359...8.8 Highchromium-browserDebianIncorrect handling of confusable characters in Omnibox in Google Chrome prior to 66.0.3359.117...6.5 Mediumchromium-browserDebianIncorrect handling of confusable characters in URL Formatter in Google Chrome prior to 66.0.3359...6.5 Mediumchromium-browserDebianA stagnant permission prompt in Prompts in Google Chrome prior to 66.0.3359.117 allowed a remote...6.5 Mediumchromium-browserDebianMissing confusable characters in Internationalization in Google Chrome prior to 66.0.3359.117...4.3 Mediumchromium-browserDebianA lack of host validation in DevTools in Google Chrome prior to 66.0.3359.117 allowed a remote...7.5 Highchromium-browserDebianIncorrect handling of confusable characters in URL Formatter in Google Chrome on macOS prior to...6.5 Mediumchromium-browserDebianA lack of CORS checks in Blink in Google Chrome prior to 66.0.3359.117 allowed a remote attacker...6.5 Mediumchromium-browserDebianIncorrect handling of confusable characters in URL Formatter in Google Chrome prior to 66.0.3359...6.5 Mediumchromium-browserDebianIncorrect handling of asynchronous methods in Fullscreen in Google Chrome on macOS prior to 66.0...6.5 Mediumchromium-browserDebianA JavaScript focused window could overlap the fullscreen notification in Fullscreen in Google...6.5 Mediumchromium-browserDebianInappropriate dismissal of file picker on keyboard events in Blink in Google Chrome prior to 66.0...6.5 Mediumchromium-browserDebianInline metadata in GarbageCollection in Google Chrome prior to 66.0.3359.117 allowed a remote...8.8 Highchromium-browserDebianInsufficient origin checks in Blink in Google Chrome prior to 66.0.3359.117 allowed a remote...6.5 Mediumchromium-browserDebianAn integer overflow on 32-bit systems in WebAssembly in Google Chrome prior to 66.0.3359.117...8.8 Highchromium-browserDebianService Workers can intercept any request made by an <embed> or <object> tag in Fetch API in...6.5 Mediumchromium-browserDebianAn integer overflow that lead to a heap buffer-overflow in Skia in Google Chrome prior to 66.0...8.8 Highchromium-browserDebianA lack of CORS checks, after a Service Worker redirected to a cross-origin PDF, in Service Worker...6.5 Mediumchromium-browserDebianAn iterator-invalidation bug in PDFium in Google Chrome prior to 66.0.3359.117 allowed a remote...8.8 Highchromium-browserDebianA use-after-free in WebAssembly in Google Chrome prior to 66.0.3359.117 allowed a remote attacker...8.8 Highchromium-browserDebianA double-eviction in the Incognito mode cache that lead to a user-after-free in Networking Disk...8.8 Highchromium-browserDebianRe-entry of a destructor in Networking Disk Cache in Google Chrome prior to 66.0.3359.117 allowed...8.8 Highchromium-browserDebianFailure to disallow PWA installation from CSP sandboxed pages in AppManifest in Google Chrome...8.8 Highchromium-browserDebianIncluding port 22 in the list of allowed FTP ports in Networking in Google Chrome prior to 65.0...4.7 Mediumchromium-browserDebianXSS vulnerabilities in Interstitials in Google Chrome prior to 65.0.3325.146 allowed an attacker...6.1 Mediumchromium-browserDebianLack of access control checks in Instrumentation in Google Chrome prior to 65.0.3325.146 allowed...6.5 Mediumchromium-browserDebianInappropriate sharing of TEXTURE_2D_ARRAY/TEXTURE_3D data between tabs in WebGL in Google Chrome...6.5 Mediumchromium-browserDebianIncorrect handling of confusable characters in Omnibox in Google Chrome prior to 65.0.3325.146...4.3 Mediumchromium-browserDebianDisplacement map filters being applied to cross-origin images in Blink SVG rendering in Google...6.5 Mediumchromium-browserDebianInsufficient encoding of URL fragment identifiers in Blink in Google Chrome prior to 65.0.3325...6.1 Mediumchromium-browserDebianIncorrect handling of specified filenames in file downloads in Google Chrome prior to 65.0.3325...6.5 Mediumchromium-browserDebianFailure to apply Mark-of-the-Web in Downloads in Google Chrome prior to 65.0.3325.146 allowed a...8.8 Highchromium-browserDebianA heap buffer overflow in WebGL in Google Chrome prior to 65.0.3325.146 allowed a remote attacker...8.8 Highchromium-browserDebianAn integer overflow leading to use after free in PDFium in Google Chrome prior to 65.0.3325.146...8.8 Highchromium-browserDebianAn integer overflow in Skia in Google Chrome prior to 65.0.3325.146 allowed a remote attacker to...8.8 Highchromium-browserDebianLack of CSP enforcement on WebUI pages in Bink in Google Chrome prior to 65.0.3325.146 allowed an...6.1 Mediumchromium-browserDebianStack buffer overflow in Skia in Google Chrome prior to 65.0.3325.146 allowed a remote attacker...6.5 Mediumchromium-browserDebianObject lifecycle issue in Chrome Custom Tab in Google Chrome prior to 65.0.3325.146 allowed a...4.3 Mediumchromium-browserDebianIncorrect IPC serialization in Skia in Google Chrome prior to 65.0.3325.146 allowed a remote...8.8 Highchromium-browserDebianLack of CORS checking by ResourceFetcher/ResourceLoader in Blink in Google Chrome prior to 65.0...6.5 Mediumchromium-browserDebianInteger overflow in computing the required allocation size when instantiating a new javascript...8.8 Highchromium-browserDebianType Confusion in the implementation of __defineGetter__ in V8 in Google Chrome prior to 65.0...8.8 Highchromium-browserDebianIncorrect use of mojo::WrapSharedMemoryHandle in Mojo in Google Chrome prior to 65.0.3325.146...8.8 Highchromium-browserDebianHeap overflow write in Skia in Google Chrome prior to 65.0.3325.146 allowed a remote attacker to...8.8 Highchromium-browserDebianA race in the handling of SharedArrayBuffers in WebAssembly in Google Chrome prior to 65.0.3325...7.5 Highchromium-browserDebianUse after free in WebAudio in Google Chrome prior to 65.0.3325.146 allowed a remote attacker to...8.8 Highchromium-browserDebianLack of special casing of Android ashmem in Google Chrome prior to 65.0.3325.146 allowed a remote...8.8 Highchromium-browserDebianAn issue was discovered in certain Apple products. iOS before 11.3 is affected. Safari before 11...6.5 Mediumchromium-browserDebianType confusion could lead to a heap out-of-bounds write in V8 in Google Chrome prior to 64.0.3282...8.8 High- Show moreLoading…