chromium-browser vulnerabilities (Ubuntu)
2,086 vulnerabilities.
chromium-browserUbuntubrowser/safe_browsing/srt_field_trial_win.cc in Google Chrome before 51.0.2704.63 does not use...5.3 Mediumchromium-browserUbuntuThe Autofill implementation in Google Chrome before 51.0.2704.63 mishandles the interaction...7.5 Highchromium-browserUbuntuThe renderer implementation in Google Chrome before 51.0.2704.63 does not properly restrict...6.5 Mediumchromium-browserUbuntuThe CPDF_DIBSource::CreateDecoder function in core/fpdfapi/fpdf_render/fpdf_render_loadimage.cpp...6.5 Mediumchromium-browserUbuntucore/fxge/ge/fx_ge_text.cpp in PDFium, as used in Google Chrome before 51.0.2704.63,...6.5 Mediumchromium-browserUbuntuHeap-based buffer overflow in the opj_j2k_read_SPCod_SPCoc function in j2k.c in OpenJPEG, as used...8.8 Highchromium-browserUbuntuextensions/renderer/resources/binding.js in the extension bindings in Google Chrome before 51.0...8.8 Highchromium-browserUbuntuThe extensions subsystem in Google Chrome before 51.0.2704.63 allows remote attackers to bypass...8.8 Highchromium-browserUbuntuThe ModuleSystem::RequireForJsInner function in extensions/renderer/module_system.cc in the...8.8 Highchromium-browserUbuntuMultiple unspecified vulnerabilities in Google Chrome before 51.0.2704.63 allow attackers to...8.8 Highchromium-browserUbuntuWebKit/Source/core/css/StyleSheetContents.cpp in Blink, as used in Google Chrome before 51.0.2704...5.3 Mediumchromium-browserUbuntuSkia, as used in Google Chrome before 51.0.2704.63, mishandles coincidence runs, which allows...7.5 Highchromium-browserUbuntuHeap-based buffer overflow in content/renderer/media/canvas_capture_handler.cc in Google Chrome...6.5 Mediumchromium-browserUbuntuThe regexp (aka regular expression) implementation in Google V8 before 5.0.71.40, as used in...6.5 Mediumchromium-browserUbuntunumbers.c in libxslt before 1.1.29, as used in Google Chrome before 51.0.2704.63, mishandles the...7.5 Highchromium-browserUbuntunumbers.c in libxslt before 1.1.29, as used in Google Chrome before 51.0.2704.63, mishandles...7.5 Highchromium-browserUbuntuThe ServiceWorkerContainer::registerServiceWorkerImpl function in WebKit/Source/modules...6.1 Mediumchromium-browserUbuntuUse-after-free vulnerability in ports/SkFontHost_FreeType.cpp in Skia, as used in Google Chrome...8.8 Highchromium-browserUbuntuThe ToV8Value function in content/child/v8_value_converter_impl.cc in the V8 bindings in Google...8.8 Highchromium-browserUbuntuobjects.cc in Google V8 before 5.0.71.32, as used in Google Chrome before 51.0.2704.63, does not...8.8 Highchromium-browserUbuntuuri.js in Google V8 before 5.1.281.26, as used in Google Chrome before 51.0.2704.63, uses an...6.5 Mediumchromium-browserUbuntuBlink, as used in Google Chrome before 51.0.2704.63, allows remote attackers to bypass the Same...8.8 Highchromium-browserUbuntuBlink, as used in Google Chrome before 51.0.2704.63, allows remote attackers to bypass the Same...8.8 Highchromium-browserUbuntuGoogle Chrome before 50.0.2661.102 on Android mishandles / (slash) and \ (backslash) characters,...8.1 Highchromium-browserUbuntuRace condition in the ResourceDispatcherHostImpl::BeginRequest function in content/browser/loader...5.3 Mediumchromium-browserUbuntuThe Zone::New function in zone.cc in Google V8 before 5.0.71.47, as used in Google Chrome before...8.8 Highchromium-browserUbuntuThe forEachForBinding function in WebKit/Source/bindings/core/v8/Iterable.h in the V8 bindings in...8.8 Highchromium-browserUbuntuThe TreeScope::adoptIfNeeded function in WebKit/Source/core/dom/TreeScope.cpp in the DOM...8.8 Highchromium-browserUbuntuThe HistoryController::UpdateForCommit function in content/renderer/history_controller.cc in...4.3 Mediumchromium-browserUbuntuextensions/renderer/gc_callback.cc in Google Chrome before 50.0.2661.94 does not prevent fallback...9.8 Criticalchromium-browserUbuntuMultiple unspecified vulnerabilities in Google Chrome before 50.0.2661.94 allow attackers to...9.8 Criticalchromium-browserUbuntuThe JSGenericLowering class in compiler/js-generic-lowering.cc in Google V8, as used in Google...6.5 Mediumchromium-browserUbuntuThe SerializedScriptValue::transferArrayBuffers function in WebKit/Source/bindings/core/v8...8.8 Highchromium-browserUbuntuBlink, as used in Google Chrome before 50.0.2661.94, does not ensure that frames satisfy a check...8.0 Highchromium-browserUbuntuBlink, as used in Google Chrome before 50.0.2661.94, mishandles assertions in the WTF::BitArray...8.8 Highchromium-browserUbuntuThe download implementation in Google Chrome before 50.0.2661.75 on Android allows remote...7.5 Highchromium-browserUbuntuMultiple unspecified vulnerabilities in Google Chrome before 50.0.2661.75 allow attackers to...9.8 Criticalchromium-browserUbuntuThe Extensions subsystem in Google Chrome before 50.0.2661.75 incorrectly relies on GetOrigin...4.3 Mediumchromium-browserUbuntuThe WebContentsImpl::FocusLocationBarByDefault function in content/browser/web_contents...4.3 Mediumchromium-browserUbuntuGoogle Chrome before 50.0.2661.75 does not properly consider that frame removal may occur during...8.8 Highchromium-browserUbuntuThe media subsystem in Google Chrome before 50.0.2661.75 does not initialize an unspecified data...6.5 Mediumchromium-browserUbuntuThe LoadBuffer implementation in Google V8, as used in Google Chrome before 50.0.2661.75,...8.8 Highchromium-browserUbuntuCross-site scripting (XSS) vulnerability in the ModuleSystem::RequireForJsInner function in...6.1 Mediumchromium-browserUbuntufxcodec/codec/fx_codec_jpx_opj.cpp in PDFium, as used in Google Chrome before 50.0.2661.75, does...8.1 Highchromium-browserUbuntuMultiple unspecified vulnerabilities in Google V8 before 4.9.385.33, as used in Google Chrome...8.8 Highchromium-browserUbuntuThe PageCaptureSaveAsMHTMLFunction::ReturnFailure function in browser/extensions/api/page_capture...8.8 Highchromium-browserUbuntuThe Program::getUniformInternal function in Program.cpp in libANGLE, as used in Google Chrome...8.8 Highchromium-browserUbuntuUse-after-free vulnerability in the GetLoadTimes function in renderer...8.8 Highchromium-browserUbuntuUse-after-free vulnerability in the RenderWidgetHostImpl::Destroy function in content/browser...8.8 Highchromium-browserUbuntuThe Array.prototype.concat implementation in builtins.cc in Google V8, as used in Google Chrome...8.8 High- Show moreLoading…