chromium-browser vulnerabilities (Red Hat)
1,203 vulnerabilities.
chromium-browserRed HatThe ToV8Value function in content/child/v8_value_converter_impl.cc in the V8 bindings in Google...8.8 Highchromium-browserRed Hatobjects.cc in Google V8 before 5.0.71.32, as used in Google Chrome before 51.0.2704.63, does not...8.8 Highchromium-browserRed Haturi.js in Google V8 before 5.1.281.26, as used in Google Chrome before 51.0.2704.63, uses an...6.5 Mediumchromium-browserRed HatBlink, as used in Google Chrome before 51.0.2704.63, allows remote attackers to bypass the Same...8.8 Highchromium-browserRed HatBlink, as used in Google Chrome before 51.0.2704.63, allows remote attackers to bypass the Same...8.8 Highchromium-browserRed HatRace condition in the ResourceDispatcherHostImpl::BeginRequest function in content/browser/loader...5.3 Mediumchromium-browserRed HatThe Zone::New function in zone.cc in Google V8 before 5.0.71.47, as used in Google Chrome before...8.8 Highchromium-browserRed HatThe forEachForBinding function in WebKit/Source/bindings/core/v8/Iterable.h in the V8 bindings in...8.8 Highchromium-browserRed HatThe TreeScope::adoptIfNeeded function in WebKit/Source/core/dom/TreeScope.cpp in the DOM...8.8 Highchromium-browserRed HatThe HistoryController::UpdateForCommit function in content/renderer/history_controller.cc in...4.3 Mediumchromium-browserRed Hatextensions/renderer/gc_callback.cc in Google Chrome before 50.0.2661.94 does not prevent fallback...9.8 Criticalchromium-browserRed HatMultiple unspecified vulnerabilities in Google Chrome before 50.0.2661.94 allow attackers to...9.8 Criticalchromium-browserRed HatThe JSGenericLowering class in compiler/js-generic-lowering.cc in Google V8, as used in Google...6.5 Mediumchromium-browserRed HatThe SerializedScriptValue::transferArrayBuffers function in WebKit/Source/bindings/core/v8...8.8 Highchromium-browserRed HatBlink, as used in Google Chrome before 50.0.2661.94, does not ensure that frames satisfy a check...8.0 Highchromium-browserRed HatBlink, as used in Google Chrome before 50.0.2661.94, mishandles assertions in the WTF::BitArray...8.8 Highchromium-browserRed HatThe download implementation in Google Chrome before 50.0.2661.75 on Android allows remote...7.5 Highchromium-browserRed HatMultiple unspecified vulnerabilities in Google Chrome before 50.0.2661.75 allow attackers to...9.8 Criticalchromium-browserRed HatThe Extensions subsystem in Google Chrome before 50.0.2661.75 incorrectly relies on GetOrigin...4.3 Mediumchromium-browserRed HatThe WebContentsImpl::FocusLocationBarByDefault function in content/browser/web_contents...4.3 Mediumchromium-browserRed HatGoogle Chrome before 50.0.2661.75 does not properly consider that frame removal may occur during...8.8 Highchromium-browserRed HatThe media subsystem in Google Chrome before 50.0.2661.75 does not initialize an unspecified data...6.5 Mediumchromium-browserRed HatThe LoadBuffer implementation in Google V8, as used in Google Chrome before 50.0.2661.75,...8.8 Highchromium-browserRed HatCross-site scripting (XSS) vulnerability in the ModuleSystem::RequireForJsInner function in...6.1 Mediumchromium-browserRed Hatfxcodec/codec/fx_codec_jpx_opj.cpp in PDFium, as used in Google Chrome before 50.0.2661.75, does...8.1 Highchromium-browserRed HatMultiple unspecified vulnerabilities in Google V8 before 4.9.385.33, as used in Google Chrome...8.8 Highchromium-browserRed HatThe PageCaptureSaveAsMHTMLFunction::ReturnFailure function in browser/extensions/api/page_capture...8.8 Highchromium-browserRed HatThe Program::getUniformInternal function in Program.cpp in libANGLE, as used in Google Chrome...8.8 Highchromium-browserRed HatUse-after-free vulnerability in the GetLoadTimes function in renderer...8.8 Highchromium-browserRed HatUse-after-free vulnerability in the RenderWidgetHostImpl::Destroy function in content/browser...8.8 Highchromium-browserRed HatThe Array.prototype.concat implementation in builtins.cc in Google V8, as used in Google Chrome...8.8 Highchromium-browserRed HatMultiple integer signedness errors in the opj_j2k_update_image_data function in j2k.c in OpenJPEG...8.8 Highchromium-browserRed HatWebKit/Source/core/layout/LayoutObject.cpp in Blink, as used in Google Chrome before 49.0.2623.87...8.8 Highchromium-browserRed HatThe ImageInputType::ensurePrimaryContent function in WebKit/Source/core/html/forms/ImageInputType...8.8 Highchromium-browserRed HatThe Content Security Policy (CSP) implementation in Blink, as used in Google Chrome before 49.0...5.3 Mediumchromium-browserRed HatWebKit/Source/core/layout/LayoutBlock.cpp in Blink, as used in Google Chrome before 49.0.2623.75,...8.8 Highchromium-browserRed HatMultiple unspecified vulnerabilities in Google V8 before 4.9.385.26, as used in Google Chrome...9.8 Criticalchromium-browserRed HatMultiple unspecified vulnerabilities in Google Chrome before 49.0.2623.75 allow attackers to...9.8 Criticalchromium-browserRed HatUse-after-free vulnerability in content/browser/web_contents/web_contents_impl.cc in Google...8.8 Highchromium-browserRed HatThe Web Store inline-installer implementation in the Extensions UI in Google Chrome before 49.0...4.3 Mediumchromium-browserRed HatUse-after-free vulnerability in browser/extensions/api/webrtc_audio_private...9.8 Criticalchromium-browserRed Hatextensions/renderer/resources/platform_app.js in the Extensions subsystem in Google Chrome before...6.3 Mediumchromium-browserRed HatThe SkATan2_255 function in effects/gradients/SkSweepGradient.cpp in Skia, as used in Google...6.5 Mediumchromium-browserRed HatThe PendingScript::notifyFinished function in WebKit/Source/core/dom/PendingScript.cpp in Google...9.8 Criticalchromium-browserRed Hatextensions/renderer/render_frame_observer_natives.cc in Google Chrome before 49.0.2623.75 does...9.8 Criticalchromium-browserRed HatUse-after-free vulnerability in the StyleResolver::appendCSSStyleSheet function in WebKit/Source...8.8 Highchromium-browserRed HatUse-after-free vulnerability in Blink, as used in Google Chrome before 49.0.2623.75, allows...9.8 Criticalchromium-browserRed HatThe Extensions subsystem in Google Chrome before 49.0.2623.75 does not properly maintain own...8.8 Highchromium-browserRed HatThe PPB_Flash_MessageLoop_Impl::InternalRun function in content/renderer/pepper...8.8 Highchromium-browserRed HatThe ContainerNode::parserRemoveChild function in WebKit/Source/core/dom/ContainerNode.cpp in...8.8 High- Show moreLoading…