chromium-browser vulnerabilities (Red Hat)
1,203 vulnerabilities.
chromium-browserRed HatUse-after-free vulnerability in the AppCache implementation in Google Chrome before 47.0.2526.73...7.5 Highchromium-browserRed HatUse-after-free vulnerability in content/browser/appcache/appcache_update_job.cc in Google Chrome...10.0 Highchromium-browserRed HatThe PDF viewer in Google Chrome before 46.0.2490.86 does not properly restrict scripting messages...7.5 Highchromium-browserRed HatThe Image11::map function in renderer/d3d/d3d11/Image11.cpp in libANGLE, as used in Google Chrome...7.5 Highchromium-browserRed HatThe CPDF_Document::GetPage function in fpdfapi/fpdf_parser/fpdf_parser_document.cpp in PDFium, as...6.8 Mediumchromium-browserRed HatUse-after-free vulnerability in the CPDFSDK_PageView implementation in fpdfsdk/src/fsdk_mgr.cpp...6.8 Mediumchromium-browserRed HatMultiple unspecified vulnerabilities in Google Chrome before 46.0.2490.71 allow attackers to...7.5 Highchromium-browserRed HatThe CSSFontFaceSrcValue::fetch function in core/css/CSSFontFaceSrcValue.cpp in the Cascading...7.5 Highchromium-browserRed HatThe update_dimensions function in libavcodec/vp8.c in FFmpeg through 2.8.1, as used in Google...6.8 Mediumchromium-browserRed HatThe shouldTreatAsUniqueOrigin function in platform/weborigin/SecurityOrigin.cpp in Blink, as used...5.0 Mediumchromium-browserRed HatUse-after-free vulnerability in content/browser/service_worker/embedded_worker_instance.cc in the...7.5 Highchromium-browserRed HatThe ContainerNode::parserInsertBefore function in core/dom/ContainerNode.cpp in Blink, as used in...7.5 Highchromium-browserRed Hatobject-observe.js in Google V8, as used in Google Chrome before 45.0.2454.101, does not properly...7.5 Highchromium-browserRed Hatbindings/core/v8/V8DOMWrapper.h in Blink, as used in Google Chrome before 45.0.2454.101, does not...7.5 Highchromium-browserRed HatThe RuntimeEventRouter::OnExtensionUninstalled function in extensions/browser/api/runtime...4.3 Mediumchromium-browserRed HatThe WebRequest API implementation in extensions/browser/api/web_request/web_request_api.cc in...7.5 Highchromium-browserRed HatThe UnescapeURLWithAdjustmentsImpl implementation in net/base/escape.cc in Google Chrome before...5.0 Mediumchromium-browserRed HatMultiple use-after-free vulnerabilities in the PrintWebViewHelper class in components/printing...7.5 Highchromium-browserRed HatMultiple unspecified vulnerabilities in Google Chrome before 45.0.2454.85 allow attackers to...7.5 Highchromium-browserRed HatThe FrameFetchContext::updateTimingInfoForIFrameNavigation function in core/loader...5.0 Mediumchromium-browserRed HatUse-after-free vulnerability in the shared-timer implementation in Blink, as used in Google...7.5 Highchromium-browserRed HatUse-after-free vulnerability in the SkMatrix::invertNonIdentity function in core/SkMatrix.cpp in...7.5 Highchromium-browserRed HatThe DOM implementation in Blink, as used in Google Chrome before 45.0.2454.85, allows remote...7.5 Highchromium-browserRed HatThe NavigatorServiceWorker::serviceWorker function in modules/serviceworkers...5.0 Mediumchromium-browserRed HatThe ContainerNode::parserRemoveChild function in core/dom/ContainerNode.cpp in Blink, as used in...6.4 Mediumchromium-browserRed HatThe Spellcheck API implementation in Google Chrome before 44.0.2403.89 does not use an HTTPS...6.8 Mediumchromium-browserRed HatCross-site scripting (XSS) vulnerability in the V8ContextNativeHandler::GetModuleSystem function...4.3 Mediumchromium-browserRed HatMultiple use-after-free vulnerabilities in fpdfsdk/src/javascript/Document.cpp in PDFium, as used...6.8 Mediumchromium-browserRed HatInteger overflow in the CJBig2_Image::expand function in fxcodec/jbig2/JBig2_Image.cpp in PDFium,...7.5 Highchromium-browserRed Hatcontent/browser/web_contents/web_contents_impl.cc in Google Chrome before 44.0.2403.89 does not...4.3 Mediumchromium-browserRed HatGoogle Chrome before 44.0.2403.89 does not ensure that the auto-open list omits all dangerous...6.8 Mediumchromium-browserRed HatHeap-based buffer overflow in j2k.c in OpenJPEG before r3002, as used in PDFium in Google Chrome...6.8 Mediumchromium-browserRed HatPDFium, as used in Google Chrome before 44.0.2403.89, does not properly handle certain out-of...6.8 Mediumchromium-browserRed HatThe regular-expression implementation in Google V8, as used in Google Chrome before 44.0.2403.89,...5.0 Mediumchromium-browserRed HatMultiple unspecified vulnerabilities in Google Chrome before 44.0.2403.89 allow attackers to...7.5 Highchromium-browserRed HatBlink, as used in Google Chrome before 44.0.2403.89, enables a quirks-mode exception that limits...4.3 Mediumchromium-browserRed HatThe XSSAuditor::canonicalize function in core/html/parser/XSSAuditor.cpp in the XSS auditor in...5.0 Mediumchromium-browserRed HatThe LocalFrame::isURLAllowed function in core/frame/LocalFrame.cpp in Blink, as used in Google...7.5 Highchromium-browserRed HatMultiple integer overflows in the XML_GetBuffer function in Expat through 2.1.0, as used in...6.8 Mediumchromium-browserRed Hatcore/loader/ImageLoader.cpp in Blink, as used in Google Chrome before 44.0.2403.89, does not...4.3 Mediumchromium-browserRed HatSkPictureShader.cpp in Skia, as used in Google Chrome before 44.0.2403.89, allows remote...7.5 Highchromium-browserRed HatUse-after-free vulnerability in the accessibility implementation in Google Chrome before 44.0...7.5 Highchromium-browserRed HatUse-after-free vulnerability in content/browser/indexed_db/indexed_db_backing_store.cc in the...9.8 Criticalchromium-browserRed HatUse-after-free vulnerability in the GPU process implementation in Google Chrome before 44.0.2403...7.5 Highchromium-browserRed HatThe ucnv_io_getConverterName function in common/ucnv_io.cpp in International Components for...6.8 Mediumchromium-browserRed HatThe DecodeHSTSPreloadRaw function in net/http/transport_security_state.cc in Google Chrome before...4.3 Mediumchromium-browserRed Hatbindings/scripts/v8_types.py in Blink, as used in Google Chrome before 43.0.2357.130, does not...5.0 Mediumchromium-browserRed HatBlink, as used in Google Chrome before 43.0.2357.130, does not properly restrict the creation...5.0 Mediumchromium-browserRed Hatcontent/browser/webui/content_web_ui_controller_factory.cc in Google Chrome before 43.0.2357.130...5.0 Mediumchromium-browserRed HatCross-site scripting (XSS) vulnerability in Google Chrome before 43.0.2357.65 allows user...4.3 Medium- Show moreLoading…