chromium vulnerabilities (SUSE)
1,938 vulnerabilities.
chromiumSUSEInsufficient validation of input in Blink in Google Chrome prior to 66.0.3359.170 allowed a...8.8 HighchromiumSUSEAn integer overflow that could lead to an attacker-controlled heap out-of-bounds write in PDFium...8.8 HighchromiumSUSEA double-eviction in the Incognito mode cache that lead to a user-after-free in cache in Google...8.8 HighchromiumSUSEInappropriate setting of the SEE_MASK_FLAG_NO_UI flag in file downloads in Google Chrome prior to...6.5 MediumchromiumSUSEConfusing settings in Autofill in Google Chrome prior to 66.0.3359.117 allowed a remote attacker...6.5 MediumchromiumSUSEA nullptr dereference in WebAssembly in Google Chrome prior to 66.0.3359.117 allowed a remote...6.5 MediumchromiumSUSEIncorrect enforcement of CSP for <object> tags in Blink in Google Chrome prior to 66.0.3359.117...6.5 MediumchromiumSUSEImproper handling of pending navigation entries in Navigation in Google Chrome on iOS prior to 66...6.5 MediumchromiumSUSEMaking URLs clickable and allowing them to be styled in DevTools in Google Chrome prior to 66.0...4.3 MediumchromiumSUSEAn object lifetime issue in the developer tools network handler in Google Chrome prior to 66.0...8.8 HighchromiumSUSEParsing documents as HTML in Downloads in Google Chrome prior to 66.0.3359.117 allowed a remote...5.4 MediumchromiumSUSEreadAsText() can indefinitely read the file picked by the user, rather than only once at the time...6.5 MediumchromiumSUSEIncorrect handling of confusable characters in URL Formatter in Google Chrome prior to 66.0.3359...6.5 MediumchromiumSUSEIncorrect handling of confusable characters in URL Formatter in Google Chrome prior to 66.0.3359...6.5 MediumchromiumSUSEAn asynchronous generator may return an incorrect state in V8 in Google Chrome prior to 66.0.3359...8.8 HighchromiumSUSEIncorrect handling of confusable characters in Omnibox in Google Chrome prior to 66.0.3359.117...6.5 MediumchromiumSUSEIncorrect handling of confusable characters in URL Formatter in Google Chrome prior to 66.0.3359...6.5 MediumchromiumSUSEA stagnant permission prompt in Prompts in Google Chrome prior to 66.0.3359.117 allowed a remote...6.5 MediumchromiumSUSEMissing confusable characters in Internationalization in Google Chrome prior to 66.0.3359.117...4.3 MediumchromiumSUSEA lack of host validation in DevTools in Google Chrome prior to 66.0.3359.117 allowed a remote...7.5 HighchromiumSUSEIncorrect handling of confusable characters in URL Formatter in Google Chrome on macOS prior to...6.5 MediumchromiumSUSEA lack of CORS checks in Blink in Google Chrome prior to 66.0.3359.117 allowed a remote attacker...6.5 MediumchromiumSUSEIncorrect handling of confusable characters in URL Formatter in Google Chrome prior to 66.0.3359...6.5 MediumchromiumSUSEIncorrect handling of asynchronous methods in Fullscreen in Google Chrome on macOS prior to 66.0...6.5 MediumchromiumSUSEA JavaScript focused window could overlap the fullscreen notification in Fullscreen in Google...6.5 MediumchromiumSUSEInappropriate dismissal of file picker on keyboard events in Blink in Google Chrome prior to 66.0...6.5 MediumchromiumSUSEInline metadata in GarbageCollection in Google Chrome prior to 66.0.3359.117 allowed a remote...8.8 HighchromiumSUSEInsufficient origin checks in Blink in Google Chrome prior to 66.0.3359.117 allowed a remote...6.5 MediumchromiumSUSEAn integer overflow on 32-bit systems in WebAssembly in Google Chrome prior to 66.0.3359.117...8.8 HighchromiumSUSEService Workers can intercept any request made by an <embed> or <object> tag in Fetch API in...6.5 MediumchromiumSUSEAn integer overflow that lead to a heap buffer-overflow in Skia in Google Chrome prior to 66.0...8.8 HighchromiumSUSEA lack of CORS checks, after a Service Worker redirected to a cross-origin PDF, in Service Worker...6.5 MediumchromiumSUSEAn iterator-invalidation bug in PDFium in Google Chrome prior to 66.0.3359.117 allowed a remote...8.8 HighchromiumSUSEA use-after-free in WebAssembly in Google Chrome prior to 66.0.3359.117 allowed a remote attacker...8.8 HighchromiumSUSEA double-eviction in the Incognito mode cache that lead to a user-after-free in Networking Disk...8.8 HighchromiumSUSERe-entry of a destructor in Networking Disk Cache in Google Chrome prior to 66.0.3359.117 allowed...8.8 HighchromiumSUSEFailure to disallow PWA installation from CSP sandboxed pages in AppManifest in Google Chrome...8.8 HighchromiumSUSEIncluding port 22 in the list of allowed FTP ports in Networking in Google Chrome prior to 65.0...4.7 MediumchromiumSUSEXSS vulnerabilities in Interstitials in Google Chrome prior to 65.0.3325.146 allowed an attacker...6.1 MediumchromiumSUSELack of access control checks in Instrumentation in Google Chrome prior to 65.0.3325.146 allowed...6.5 MediumchromiumSUSEInappropriate sharing of TEXTURE_2D_ARRAY/TEXTURE_3D data between tabs in WebGL in Google Chrome...6.5 MediumchromiumSUSEIncorrect handling of confusable characters in Omnibox in Google Chrome prior to 65.0.3325.146...4.3 MediumchromiumSUSEDisplacement map filters being applied to cross-origin images in Blink SVG rendering in Google...6.5 MediumchromiumSUSEInsufficient encoding of URL fragment identifiers in Blink in Google Chrome prior to 65.0.3325...6.1 MediumchromiumSUSEIncorrect handling of specified filenames in file downloads in Google Chrome prior to 65.0.3325...6.5 MediumchromiumSUSEFailure to apply Mark-of-the-Web in Downloads in Google Chrome prior to 65.0.3325.146 allowed a...8.8 HighchromiumSUSEA heap buffer overflow in WebGL in Google Chrome prior to 65.0.3325.146 allowed a remote attacker...8.8 HighchromiumSUSEAn integer overflow leading to use after free in PDFium in Google Chrome prior to 65.0.3325.146...8.8 HighchromiumSUSEAn integer overflow in Skia in Google Chrome prior to 65.0.3325.146 allowed a remote attacker to...8.8 HighchromiumSUSELack of CSP enforcement on WebUI pages in Bink in Google Chrome prior to 65.0.3325.146 allowed an...6.1 Medium- Show moreLoading…