chromium-browser vulnerabilities (Red Hat)
1,203 vulnerabilities.
chromium-browserRed HatA lack of CORS checks in Blink in Google Chrome prior to 66.0.3359.117 allowed a remote attacker...6.5 Mediumchromium-browserRed HatIncorrect handling of confusable characters in URL Formatter in Google Chrome prior to 66.0.3359...6.5 Mediumchromium-browserRed HatIncorrect handling of asynchronous methods in Fullscreen in Google Chrome on macOS prior to 66.0...6.5 Mediumchromium-browserRed HatA JavaScript focused window could overlap the fullscreen notification in Fullscreen in Google...6.5 Mediumchromium-browserRed HatInappropriate dismissal of file picker on keyboard events in Blink in Google Chrome prior to 66.0...6.5 Mediumchromium-browserRed HatInline metadata in GarbageCollection in Google Chrome prior to 66.0.3359.117 allowed a remote...8.8 Highchromium-browserRed HatInsufficient origin checks in Blink in Google Chrome prior to 66.0.3359.117 allowed a remote...6.5 Mediumchromium-browserRed HatAn integer overflow on 32-bit systems in WebAssembly in Google Chrome prior to 66.0.3359.117...8.8 Highchromium-browserRed HatService Workers can intercept any request made by an <embed> or <object> tag in Fetch API in...6.5 Mediumchromium-browserRed HatAn integer overflow that lead to a heap buffer-overflow in Skia in Google Chrome prior to 66.0...8.8 Highchromium-browserRed HatA lack of CORS checks, after a Service Worker redirected to a cross-origin PDF, in Service Worker...6.5 Mediumchromium-browserRed HatAn iterator-invalidation bug in PDFium in Google Chrome prior to 66.0.3359.117 allowed a remote...8.8 Highchromium-browserRed HatA use-after-free in WebAssembly in Google Chrome prior to 66.0.3359.117 allowed a remote attacker...8.8 Highchromium-browserRed HatA double-eviction in the Incognito mode cache that lead to a user-after-free in Networking Disk...8.8 Highchromium-browserRed HatRe-entry of a destructor in Networking Disk Cache in Google Chrome prior to 66.0.3359.117 allowed...8.8 Highchromium-browserRed HatFailure to disallow PWA installation from CSP sandboxed pages in AppManifest in Google Chrome...8.8 Highchromium-browserRed HatIncluding port 22 in the list of allowed FTP ports in Networking in Google Chrome prior to 65.0...4.7 Mediumchromium-browserRed HatXSS vulnerabilities in Interstitials in Google Chrome prior to 65.0.3325.146 allowed an attacker...6.1 Mediumchromium-browserRed HatLack of access control checks in Instrumentation in Google Chrome prior to 65.0.3325.146 allowed...6.5 Mediumchromium-browserRed HatInappropriate sharing of TEXTURE_2D_ARRAY/TEXTURE_3D data between tabs in WebGL in Google Chrome...6.5 Mediumchromium-browserRed HatIncorrect handling of confusable characters in Omnibox in Google Chrome prior to 65.0.3325.146...4.3 Mediumchromium-browserRed HatDisplacement map filters being applied to cross-origin images in Blink SVG rendering in Google...6.5 Mediumchromium-browserRed HatInsufficient encoding of URL fragment identifiers in Blink in Google Chrome prior to 65.0.3325...6.1 Mediumchromium-browserRed HatIncorrect handling of specified filenames in file downloads in Google Chrome prior to 65.0.3325...6.5 Mediumchromium-browserRed HatFailure to apply Mark-of-the-Web in Downloads in Google Chrome prior to 65.0.3325.146 allowed a...8.8 Highchromium-browserRed HatA heap buffer overflow in WebGL in Google Chrome prior to 65.0.3325.146 allowed a remote attacker...8.8 Highchromium-browserRed HatAn integer overflow leading to use after free in PDFium in Google Chrome prior to 65.0.3325.146...8.8 Highchromium-browserRed HatAn integer overflow in Skia in Google Chrome prior to 65.0.3325.146 allowed a remote attacker to...8.8 Highchromium-browserRed HatLack of CSP enforcement on WebUI pages in Bink in Google Chrome prior to 65.0.3325.146 allowed an...6.1 Mediumchromium-browserRed HatStack buffer overflow in Skia in Google Chrome prior to 65.0.3325.146 allowed a remote attacker...6.5 Mediumchromium-browserRed HatIncorrect IPC serialization in Skia in Google Chrome prior to 65.0.3325.146 allowed a remote...8.8 Highchromium-browserRed HatLack of CORS checking by ResourceFetcher/ResourceLoader in Blink in Google Chrome prior to 65.0...6.5 Mediumchromium-browserRed HatInteger overflow in computing the required allocation size when instantiating a new javascript...8.8 Highchromium-browserRed HatType Confusion in the implementation of __defineGetter__ in V8 in Google Chrome prior to 65.0...8.8 Highchromium-browserRed HatIncorrect use of mojo::WrapSharedMemoryHandle in Mojo in Google Chrome prior to 65.0.3325.146...8.8 Highchromium-browserRed HatHeap overflow write in Skia in Google Chrome prior to 65.0.3325.146 allowed a remote attacker to...8.8 Highchromium-browserRed HatA race in the handling of SharedArrayBuffers in WebAssembly in Google Chrome prior to 65.0.3325...7.5 Highchromium-browserRed HatUse after free in WebAudio in Google Chrome prior to 65.0.3325.146 allowed a remote attacker to...8.8 Highchromium-browserRed HatLack of special casing of Android ashmem in Google Chrome prior to 65.0.3325.146 allowed a remote...8.8 Highchromium-browserRed HatAn issue was discovered in certain Apple products. iOS before 11.3 is affected. Safari before 11...6.5 Mediumchromium-browserRed HatType confusion could lead to a heap out-of-bounds write in V8 in Google Chrome prior to 64.0.3282...8.8 Highchromium-browserRed HatIncorrect security UI in Omnibox in Google Chrome prior to 64.0.3282.119 allowed a remote...6.5 Mediumchromium-browserRed HatInsufficient policy enforcement in Catalog Service in Google Chrome prior to 64.0.3282.119...8.8 Highchromium-browserRed HatUse after free in WebUI in Google Chrome prior to 64.0.3282.119 allowed a remote attacker to...8.8 Highchromium-browserRed HatInappropriate implementation in New Tab Page in Google Chrome prior to 64.0.3282.119 allowed a...3.3 Lowchromium-browserRed HatLack of support for a non standard no-referrer policy value in Blink in Google Chrome prior to 64...4.3 Mediumchromium-browserRed HatXSS Auditor in Google Chrome prior to 64.0.3282.119, did not ensure the reporting URL was in the...4.3 Mediumchromium-browserRed HatIncorrect security UI in Omnibox in Google Chrome prior to 64.0.3282.119 allowed a remote...6.5 Mediumchromium-browserRed HatIncorrect security UI in permissions prompt in Google Chrome prior to 64.0.3282.119 allowed a...6.5 Mediumchromium-browserRed HatInsufficient policy enforcement in Blink in Google Chrome prior to 64.0.3282.119 allowed a remote...4.3 Medium- Show moreLoading…