chromium-browser vulnerabilities (Red Hat)
1,203 vulnerabilities.
chromium-browserRed HatThe SkBitmap::ReadRawPixels function in core/SkBitmap.cpp in the filters implementation in Skia,...7.5 Highchromium-browserRed HatMultiple unspecified vulnerabilities in Google Chrome before 40.0.2214.111 on Windows, OS X, and...7.5 Highchromium-browserRed HatThe OriginCanAccessServiceWorkers function in content/browser/service_worker...7.5 Highchromium-browserRed HatThe V8ThrowException::createDOMException function in bindings/core/v8/V8ThrowException.cpp in the...5.0 Mediumchromium-browserRed HatUse-after-free vulnerability in the VisibleSelection::nonBoundaryShadowTreeRootNode function in...7.5 Highchromium-browserRed HatThe Regular Expressions package in International Components for Unicode (ICU) for C/C++ before...9.8 Criticalchromium-browserRed HatOpenJPEG before r2944, as used in PDFium in Google Chrome before 40.0.2214.91, allows remote...5.0 Mediumchromium-browserRed HatOpenJPEG before r2908, as used in PDFium in Google Chrome before 40.0.2214.91, allows remote...5.0 Mediumchromium-browserRed HatThe sycc422_to_rgb function in fxcodec/codec/fx_codec_jpx_opj.cpp in PDFium, as used in Google...5.0 Mediumchromium-browserRed HatThe SelectionOwner::ProcessTarget function in ui/base/x/selection_owner.cc in the UI...5.0 Mediumchromium-browserRed HatGoogle Chrome before 40.0.2214.91, when the Harmony proxy in Google V8 is enabled, allows remote...4.3 Mediumchromium-browserRed HatUse-after-free vulnerability in the ZoomBubbleView::Close function in browser/ui/views...6.8 Mediumchromium-browserRed HatUse-after-free vulnerability in browser/speech/tts_message_filter.cc in the Speech implementation...7.5 Highchromium-browserRed HatMultiple unspecified vulnerabilities in Google V8 before 3.30.33.15, as used in Google Chrome...7.5 Highchromium-browserRed HatMultiple unspecified vulnerabilities in Google Chrome before 40.0.2214.91 allow attackers to...7.5 Highchromium-browserRed HatThe AppCacheUpdateJob::URLFetcher::OnResponseStarted function in content/browser/appcache...4.3 Mediumchromium-browserRed HatThe RenderTable::simplifiedNormalFlowLayout function in core/rendering/RenderTable.cpp in Blink,...5.0 Mediumchromium-browserRed HatSkia, as used in Google Chrome before 40.0.2214.91, allows remote attackers to cause a denial of...5.0 Mediumchromium-browserRed HatThe Fonts implementation in Google Chrome before 40.0.2214.91 does not initialize memory for a...7.5 Highchromium-browserRed HatThe collator implementation in i18n/ucol.cpp in International Components for Unicode (ICU) 52...7.5 Highchromium-browserRed HatThe Fonts implementation in Google Chrome before 40.0.2214.91 allows remote attackers to cause a...7.5 Highchromium-browserRed HatMultiple off-by-one errors in libavcodec/vorbisdec.c in FFmpeg before 2.4.2, as used in Google...7.5 Highchromium-browserRed HatUse-after-free vulnerability in the DOM implementation in Blink, as used in Google Chrome before...7.5 Highchromium-browserRed HatUse-after-free vulnerability in the matroska_read_seek function in libavformat/matroskadec.c in...7.5 Highchromium-browserRed HatUse-after-free vulnerability in the Element::detach function in core/dom/Element.cpp in the DOM...7.5 Highchromium-browserRed Hatfactory.cc in Google V8, as used in Google Chrome before 40.0.2214.91, allows remote attackers to...7.5 Highchromium-browserRed HatUse-after-free vulnerability in core/events/TreeScopeEventContext.cpp in the DOM implementation...7.5 Highchromium-browserRed HatUse-after-free vulnerability in the HTMLScriptElement::didMoveToNewDocument function in core/html...7.5 Highchromium-browserRed Hathydrogen.cc in Google V8, as used Google Chrome before 40.0.2214.91, does not properly handle...7.5 Highchromium-browserRed HatThe SimplifiedLowering::DoLoadBuffer function in compiler/simplified-lowering.cc in Google V8, as...7.5 Highchromium-browserRed HatThe Regular Expressions package in International Components for Unicode (ICU) 52 before SVN...7.5 Highchromium-browserRed HatUse-after-free vulnerability in the WebAudio implementation in Blink, as used in Google Chrome...7.5 Highchromium-browserRed HatUse-after-free vulnerability in the IndexedDB implementation in Google Chrome before 40.0.2214.91...5.0 Mediumchromium-browserRed HatThe Regular Expressions package in International Components for Unicode (ICU) 52 before SVN...7.5 Highchromium-browserRed HatUse-after-free vulnerability in the Pepper plugins in Google Chrome before 39.0.2171.65 allows...7.5 Highchromium-browserRed HatGoogle Chrome before 38.0.2125.101 allows remote attackers to spoof the address bar by placing a...5.0 Mediumchromium-browserRed HatMultiple unspecified vulnerabilities in Google Chrome before 39.0.2171.65 allow attackers to...7.5 Highchromium-browserRed Hateffects/SkDashPathEffect.cpp in Skia, as used in Google Chrome before 39.0.2171.65, computes a...5.0 Mediumchromium-browserRed HatMultiple integer overflows in the CheckMov function in media/base/container_names.cc in Google...7.5 Highchromium-browserRed HatMultiple use-after-free vulnerabilities in modules/screen_orientation/ScreenOrientationController...7.5 Highchromium-browserRed HatBuffer overflow in Skia, as used in Google Chrome before 39.0.2171.65, allows remote attackers to...7.5 Highchromium-browserRed HatThe Instance::HandleInputEvent function in pdf/instance.cc in the PDFium component in Google...5.0 Mediumchromium-browserRed HatThe SessionService::GetLastSession function in browser/sessions/session_service.cc in Google...7.5 Highchromium-browserRed HatThe chrome_pdf::CopyImage function in pdf/draw_utils.cc in the PDFium component in Google Chrome...7.5 Highchromium-browserRed HatMultiple unspecified vulnerabilities in Google Chrome before 38.0.2125.101 allow attackers to...7.5 Highchromium-browserRed HatThe wrap function in bindings/core/v8/custom/V8EventCustom.cpp in the V8 bindings in Blink, as...5.0 Mediumchromium-browserRed HatThe NavigationScheduler::schedulePageBlock function in core/loader/NavigationScheduler.cpp in...5.0 Mediumchromium-browserRed HatGoogle V8, as used in Google Chrome before 38.0.2125.101, does not properly track JavaScript heap...5.0 Mediumchromium-browserRed HatUse-after-free vulnerability in the Web Workers implementation in Google Chrome before 38.0.2125...7.5 Highchromium-browserRed HatUse-after-free vulnerability in the ProcessingInstruction::setXSLStyleSheet function in core/dom...7.5 High- Show moreLoading…