chromium-browser vulnerabilities (Red Hat)
1,203 vulnerabilities.
chromium-browserRed HatThe implementation of the Page.downloadBehavior backend unconditionally marked downloaded files...9.6 Criticalchromium-browserRed HatBad cast in DevTools in Google Chrome on Win, Linux, Mac, Chrome OS prior to 66.0.3359.117...8.8 Highchromium-browserRed HatIncorrect handling of CORS in ServiceWorker in Google Chrome prior to 66.0.3359.117 allowed a...6.5 Mediumchromium-browserRed HatInsufficient data validation in Extensions API in Google Chrome prior to 68.0.3440.75 allowed an...6.5 Mediumchromium-browserRed HatType confusion in JavaScript in Google Chrome prior to 67.0.3396.87 allowed a remote attacker to...8.8 Highchromium-browserRed HatIncorrect implementation in Content Security Policy in Google Chrome prior to 67.0.3396.79...6.5 Mediumchromium-browserRed HatInsufficient policy enforcement in USB in Google Chrome on Windows prior to 67.0.3396.62 allowed...6.5 Mediumchromium-browserRed HatLack of secure text entry mode in Browser UI in Google Chrome on Mac prior to 67.0.3396.62...5.5 Mediumchromium-browserRed HatInsufficient data validation in HTML parser in Google Chrome prior to 67.0.3396.62 allowed a...6.1 Mediumchromium-browserRed HatOff-by-one error in PDFium in Google Chrome prior to 67.0.3396.62 allowed a remote attacker to...8.8 Highchromium-browserRed HatInsufficient validation in V8 in Google Chrome prior to 67.0.3396.62 allowed a remote attacker to...6.5 Mediumchromium-browserRed HatArray bounds check failure in V8 in Google Chrome prior to 67.0.3396.62 allowed a remote attacker...6.5 Mediumchromium-browserRed HatInsufficient validation of an image filter in Skia in Google Chrome prior to 67.0.3396.62 allowed...8.8 Highchromium-browserRed HatAllowing the chrome.debugger API to attach to Web UI pages in DevTools in Google Chrome prior to...8.8 Highchromium-browserRed HatInsufficient target checks on the chrome.debugger API in DevTools in Google Chrome prior to 67.0...8.8 Highchromium-browserRed HatInsufficient policy enforcement in Extensions API in Google Chrome prior to 67.0.3396.62 allowed...8.1 Highchromium-browserRed HatCSS Paint API in Blink in Google Chrome prior to 67.0.3396.62 allowed a remote attacker to leak...6.5 Mediumchromium-browserRed HatMissing type check in V8 in Google Chrome prior to 67.0.3396.62 allowed a remote attacker to...6.5 Mediumchromium-browserRed HatLack of clearing the previous site before loading alerts from a new one in Blink in Google Chrome...6.5 Mediumchromium-browserRed HatInformation leak in Blink in Google Chrome prior to 67.0.3396.62 allowed a remote attacker to...6.5 Mediumchromium-browserRed HatIncorrect handling of confusable characters in URL Formatter in Google Chrome prior to 67.0.3396...6.5 Mediumchromium-browserRed HatUninitialized data in WebRTC in Google Chrome prior to 67.0.3396.62 allowed a remote attacker to...4.3 Mediumchromium-browserRed HatObject lifecycle issue in WebAssembly in Google Chrome prior to 67.0.3396.62 allowed a remote...8.8 Highchromium-browserRed HatIncorrect handling of object lifetimes in WebRTC in Google Chrome prior to 67.0.3396.62 allowed a...6.5 Mediumchromium-browserRed HatOut of bounds array access in WebRTC in Google Chrome prior to 67.0.3396.62 allowed a remote...6.5 Mediumchromium-browserRed HatEarly free of object in use in IndexDB in Google Chrome prior to 67.0.3396.62 allowed a remote...9.6 Criticalchromium-browserRed HatType confusion in ReadableStreams in Blink in Google Chrome prior to 67.0.3396.62 allowed a...8.8 Highchromium-browserRed HatA use after free in Blink in Google Chrome prior to 67.0.3396.62 allowed a remote attacker to...6.5 Mediumchromium-browserRed HatA precision error in Skia in Google Chrome prior to 67.0.3396.62 allowed a remote attacker to...8.8 Highchromium-browserRed HatType confusion in WebAssembly in Google Chrome prior to 66.0.3359.139 allowed a remote attacker...8.8 Highchromium-browserRed HatInsufficient validation of input in Blink in Google Chrome prior to 66.0.3359.170 allowed a...8.8 Highchromium-browserRed HatAn integer overflow that could lead to an attacker-controlled heap out-of-bounds write in PDFium...8.8 Highchromium-browserRed HatA double-eviction in the Incognito mode cache that lead to a user-after-free in cache in Google...8.8 Highchromium-browserRed HatConfusing settings in Autofill in Google Chrome prior to 66.0.3359.117 allowed a remote attacker...6.5 Mediumchromium-browserRed HatA nullptr dereference in WebAssembly in Google Chrome prior to 66.0.3359.117 allowed a remote...6.5 Mediumchromium-browserRed HatIncorrect enforcement of CSP for <object> tags in Blink in Google Chrome prior to 66.0.3359.117...6.5 Mediumchromium-browserRed HatImproper handling of pending navigation entries in Navigation in Google Chrome on iOS prior to 66...6.5 Mediumchromium-browserRed HatMaking URLs clickable and allowing them to be styled in DevTools in Google Chrome prior to 66.0...4.3 Mediumchromium-browserRed HatAn object lifetime issue in the developer tools network handler in Google Chrome prior to 66.0...8.8 Highchromium-browserRed HatParsing documents as HTML in Downloads in Google Chrome prior to 66.0.3359.117 allowed a remote...5.4 Mediumchromium-browserRed HatreadAsText() can indefinitely read the file picked by the user, rather than only once at the time...6.5 Mediumchromium-browserRed HatIncorrect handling of confusable characters in URL Formatter in Google Chrome prior to 66.0.3359...6.5 Mediumchromium-browserRed HatIncorrect handling of confusable characters in URL Formatter in Google Chrome prior to 66.0.3359...6.5 Mediumchromium-browserRed HatAn asynchronous generator may return an incorrect state in V8 in Google Chrome prior to 66.0.3359...8.8 Highchromium-browserRed HatIncorrect handling of confusable characters in Omnibox in Google Chrome prior to 66.0.3359.117...6.5 Mediumchromium-browserRed HatIncorrect handling of confusable characters in URL Formatter in Google Chrome prior to 66.0.3359...6.5 Mediumchromium-browserRed HatA stagnant permission prompt in Prompts in Google Chrome prior to 66.0.3359.117 allowed a remote...6.5 Mediumchromium-browserRed HatMissing confusable characters in Internationalization in Google Chrome prior to 66.0.3359.117...4.3 Mediumchromium-browserRed HatA lack of host validation in DevTools in Google Chrome prior to 66.0.3359.117 allowed a remote...7.5 Highchromium-browserRed HatIncorrect handling of confusable characters in URL Formatter in Google Chrome on macOS prior to...6.5 Medium- Show moreLoading…