chromium-browser vulnerabilities (Ubuntu)
2,086 vulnerabilities.
chromium-browserUbuntuMultiple integer signedness errors in the opj_j2k_update_image_data function in j2k.c in OpenJPEG...8.8 Highchromium-browserUbuntuWebKit/Source/core/layout/LayoutObject.cpp in Blink, as used in Google Chrome before 49.0.2623.87...8.8 Highchromium-browserUbuntuThe ImageInputType::ensurePrimaryContent function in WebKit/Source/core/html/forms/ImageInputType...8.8 Highchromium-browserUbuntuThe Content Security Policy (CSP) implementation in Blink, as used in Google Chrome before 49.0...5.3 Mediumchromium-browserUbuntuWebKit/Source/core/layout/LayoutBlock.cpp in Blink, as used in Google Chrome before 49.0.2623.75,...8.8 Highchromium-browserUbuntuMultiple unspecified vulnerabilities in Google V8 before 4.9.385.26, as used in Google Chrome...9.8 Criticalchromium-browserUbuntuMultiple unspecified vulnerabilities in Google Chrome before 49.0.2623.75 allow attackers to...9.8 Criticalchromium-browserUbuntuUse-after-free vulnerability in content/browser/web_contents/web_contents_impl.cc in Google...8.8 Highchromium-browserUbuntuThe Web Store inline-installer implementation in the Extensions UI in Google Chrome before 49.0...4.3 Mediumchromium-browserUbuntuUse-after-free vulnerability in browser/extensions/api/webrtc_audio_private...9.8 Criticalchromium-browserUbuntuextensions/renderer/resources/platform_app.js in the Extensions subsystem in Google Chrome before...6.3 Mediumchromium-browserUbuntuThe SkATan2_255 function in effects/gradients/SkSweepGradient.cpp in Skia, as used in Google...6.5 Mediumchromium-browserUbuntuThe PendingScript::notifyFinished function in WebKit/Source/core/dom/PendingScript.cpp in Google...9.8 Criticalchromium-browserUbuntuextensions/renderer/render_frame_observer_natives.cc in Google Chrome before 49.0.2623.75 does...9.8 Criticalchromium-browserUbuntuUse-after-free vulnerability in the StyleResolver::appendCSSStyleSheet function in WebKit/Source...8.8 Highchromium-browserUbuntuUse-after-free vulnerability in Blink, as used in Google Chrome before 49.0.2623.75, allows...9.8 Criticalchromium-browserUbuntuThe Extensions subsystem in Google Chrome before 49.0.2623.75 does not properly maintain own...8.8 Highchromium-browserUbuntuThe PPB_Flash_MessageLoop_Impl::InternalRun function in content/renderer/pepper...8.8 Highchromium-browserUbuntuThe ContainerNode::parserRemoveChild function in WebKit/Source/core/dom/ContainerNode.cpp in...8.8 Highchromium-browserUbuntuGoogle Chrome before 48.0.2564.116 allows remote attackers to bypass the Blink Same Origin Policy...9.8 Criticalchromium-browserUbuntupi.c in OpenJPEG, as used in PDFium in Google Chrome before 48.0.2564.109, does not validate a...6.3 Mediumchromium-browserUbuntuThe Developer Tools (aka DevTools) subsystem in Google Chrome before 48.0.2564.109 does not...8.8 Highchromium-browserUbuntuThe opj_pi_update_decode_poc function in pi.c in OpenJPEG, as used in PDFium in Google Chrome...4.3 Mediumchromium-browserUbuntuThe Chrome Instant feature in Google Chrome before 48.0.2564.109 does not ensure that a New Tab...4.3 Mediumchromium-browserUbuntuThe Extensions subsystem in Google Chrome before 48.0.2564.109 does not prevent use of the Object...8.8 Highchromium-browserUbuntuInteger underflow in the ProcessCommandsInternal function in dec/decode.c in Brotli, as used in...8.8 Highchromium-browserUbuntuThe DOM implementation in Google Chrome before 48.0.2564.109 does not properly restrict frame...8.8 Highchromium-browserUbuntuMultiple integer overflows in the (1) sycc422_to_rgb and (2) sycc444_to_rgb functions in fxcodec...7.6 Highchromium-browserUbuntuThe CustomButton::AcceleratorPressed function in ui/views/controls/button/custom_button.cc in...4.3 Mediumchromium-browserUbuntuThe Omnibox implementation in Google Chrome before 48.0.2564.82 allows remote attackers to spoof...6.5 Mediumchromium-browserUbuntuMultiple use-after-free vulnerabilities in the formfiller implementation in PDFium, as used in...7.6 Highchromium-browserUbuntuMultiple unspecified vulnerabilities in HarfBuzz before 1.0.6, as used in Google Chrome before 48...7.6 Highchromium-browserUbuntuMultiple unspecified vulnerabilities in Google V8 before 4.8.271.17, as used in Google Chrome...9.8 Criticalchromium-browserUbuntuMultiple unspecified vulnerabilities in Google Chrome before 48.0.2564.82 allow attackers to...8.8 Highchromium-browserUbuntuBlink, as used in Google Chrome before 48.0.2564.82, does not ensure that a proper...6.5 Mediumchromium-browserUbuntuThe CSPSource::schemeMatches function in WebKit/Source/core/frame/csp/CSPSource.cpp in the...4.3 Mediumchromium-browserUbuntuThe UnacceleratedImageBufferSurface class in WebKit/Source/platform/graphics...4.3 Mediumchromium-browserUbuntuThe LoadIC::UpdateCaches function in ic/ic.cc in Google V8, as used in Google Chrome before 48.0...7.6 Highchromium-browserUbuntuInteger overflow in the WebCursor::Deserialize function in content/common/cursors/webcursor.cc in...8.8 Highchromium-browserUbuntuThe MIDI subsystem in Google Chrome before 47.0.2526.106 does not properly handle the sending of...9.8 Criticalchromium-browserUbuntuMultiple unspecified vulnerabilities in Google V8 before 4.7.80.23, as used in Google Chrome...10.0 Highchromium-browserUbuntuMultiple unspecified vulnerabilities in Google Chrome before 47.0.2526.80 allow attackers to...10.0 Highchromium-browserUbuntuThe WebPageSerializerImpl::openTagToString function in WebKit/Source/web/WebPageSerializerImpl...4.3 Mediumchromium-browserUbuntuRace condition in the MutationObserver implementation in Blink, as used in Google Chrome before...9.3 Highchromium-browserUbuntuThe ObjectBackedNativeHandler class in extensions/renderer/object_backed_native_handler.cc in the...10.0 Highchromium-browserUbuntuThe VideoFramePool::PoolImpl::CreateFrame function in media/base/video_frame_pool.cc in Google...10.0 Highchromium-browserUbuntuUse-after-free vulnerability in the AudioOutputDevice::OnDeviceAuthorized function in media/audio...7.5 Highchromium-browserUbuntuThe FindStartOffsetOfFileInZipFile function in crazy_linker_zip.cpp in crazy_linker (aka Crazy...4.3 Mediumchromium-browserUbuntuInteger overflow in the FontData::Bound function in data/font_data.cc in Google sfntly, as used...7.5 Highchromium-browserUbuntuUse-after-free vulnerability in the Infobars implementation in Google Chrome before 47.0.2526.73...6.8 Medium- Show moreLoading…