chromium-browser vulnerabilities (Ubuntu)
2,086 vulnerabilities.
chromium-browserUbuntuParsing documents as HTML in Downloads in Google Chrome prior to 66.0.3359.117 allowed a remote...5.4 Mediumchromium-browserUbuntureadAsText() can indefinitely read the file picked by the user, rather than only once at the time...6.5 Mediumchromium-browserUbuntuIncorrect handling of confusable characters in URL Formatter in Google Chrome prior to 66.0.3359...6.5 Mediumchromium-browserUbuntuIncorrect handling of confusable characters in URL Formatter in Google Chrome prior to 66.0.3359...6.5 Mediumchromium-browserUbuntuAn asynchronous generator may return an incorrect state in V8 in Google Chrome prior to 66.0.3359...8.8 Highchromium-browserUbuntuIncorrect handling of confusable characters in Omnibox in Google Chrome prior to 66.0.3359.117...6.5 Mediumchromium-browserUbuntuIncorrect handling of confusable characters in URL Formatter in Google Chrome prior to 66.0.3359...6.5 Mediumchromium-browserUbuntuA stagnant permission prompt in Prompts in Google Chrome prior to 66.0.3359.117 allowed a remote...6.5 Mediumchromium-browserUbuntuMissing confusable characters in Internationalization in Google Chrome prior to 66.0.3359.117...4.3 Mediumchromium-browserUbuntuA lack of host validation in DevTools in Google Chrome prior to 66.0.3359.117 allowed a remote...7.5 Highchromium-browserUbuntuIncorrect handling of confusable characters in URL Formatter in Google Chrome on macOS prior to...6.5 Mediumchromium-browserUbuntuA lack of CORS checks in Blink in Google Chrome prior to 66.0.3359.117 allowed a remote attacker...6.5 Mediumchromium-browserUbuntuIncorrect handling of confusable characters in URL Formatter in Google Chrome prior to 66.0.3359...6.5 Mediumchromium-browserUbuntuIncorrect handling of asynchronous methods in Fullscreen in Google Chrome on macOS prior to 66.0...6.5 Mediumchromium-browserUbuntuA JavaScript focused window could overlap the fullscreen notification in Fullscreen in Google...6.5 Mediumchromium-browserUbuntuInappropriate dismissal of file picker on keyboard events in Blink in Google Chrome prior to 66.0...6.5 Mediumchromium-browserUbuntuInline metadata in GarbageCollection in Google Chrome prior to 66.0.3359.117 allowed a remote...8.8 Highchromium-browserUbuntuInsufficient origin checks in Blink in Google Chrome prior to 66.0.3359.117 allowed a remote...6.5 Mediumchromium-browserUbuntuAn integer overflow on 32-bit systems in WebAssembly in Google Chrome prior to 66.0.3359.117...8.8 Highchromium-browserUbuntuService Workers can intercept any request made by an <embed> or <object> tag in Fetch API in...6.5 Mediumchromium-browserUbuntuAn integer overflow that lead to a heap buffer-overflow in Skia in Google Chrome prior to 66.0...8.8 Highchromium-browserUbuntuA lack of CORS checks, after a Service Worker redirected to a cross-origin PDF, in Service Worker...6.5 Mediumchromium-browserUbuntuAn iterator-invalidation bug in PDFium in Google Chrome prior to 66.0.3359.117 allowed a remote...8.8 Highchromium-browserUbuntuA use-after-free in WebAssembly in Google Chrome prior to 66.0.3359.117 allowed a remote attacker...8.8 Highchromium-browserUbuntuA double-eviction in the Incognito mode cache that lead to a user-after-free in Networking Disk...8.8 Highchromium-browserUbuntuRe-entry of a destructor in Networking Disk Cache in Google Chrome prior to 66.0.3359.117 allowed...8.8 Highchromium-browserUbuntuFailure to disallow PWA installation from CSP sandboxed pages in AppManifest in Google Chrome...8.8 Highchromium-browserUbuntuIncluding port 22 in the list of allowed FTP ports in Networking in Google Chrome prior to 65.0...4.7 Mediumchromium-browserUbuntuXSS vulnerabilities in Interstitials in Google Chrome prior to 65.0.3325.146 allowed an attacker...6.1 Mediumchromium-browserUbuntuLack of access control checks in Instrumentation in Google Chrome prior to 65.0.3325.146 allowed...6.5 Mediumchromium-browserUbuntuInappropriate sharing of TEXTURE_2D_ARRAY/TEXTURE_3D data between tabs in WebGL in Google Chrome...6.5 Mediumchromium-browserUbuntuIncorrect handling of confusable characters in Omnibox in Google Chrome prior to 65.0.3325.146...4.3 Mediumchromium-browserUbuntuDisplacement map filters being applied to cross-origin images in Blink SVG rendering in Google...6.5 Mediumchromium-browserUbuntuInsufficient encoding of URL fragment identifiers in Blink in Google Chrome prior to 65.0.3325...6.1 Mediumchromium-browserUbuntuIncorrect handling of specified filenames in file downloads in Google Chrome prior to 65.0.3325...6.5 Mediumchromium-browserUbuntuFailure to apply Mark-of-the-Web in Downloads in Google Chrome prior to 65.0.3325.146 allowed a...8.8 Highchromium-browserUbuntuA heap buffer overflow in WebGL in Google Chrome prior to 65.0.3325.146 allowed a remote attacker...8.8 Highchromium-browserUbuntuAn integer overflow leading to use after free in PDFium in Google Chrome prior to 65.0.3325.146...8.8 Highchromium-browserUbuntuAn integer overflow in Skia in Google Chrome prior to 65.0.3325.146 allowed a remote attacker to...8.8 Highchromium-browserUbuntuLack of CSP enforcement on WebUI pages in Bink in Google Chrome prior to 65.0.3325.146 allowed an...6.1 Mediumchromium-browserUbuntuStack buffer overflow in Skia in Google Chrome prior to 65.0.3325.146 allowed a remote attacker...6.5 Mediumchromium-browserUbuntuObject lifecycle issue in Chrome Custom Tab in Google Chrome prior to 65.0.3325.146 allowed a...4.3 Mediumchromium-browserUbuntuIncorrect IPC serialization in Skia in Google Chrome prior to 65.0.3325.146 allowed a remote...8.8 Highchromium-browserUbuntuLack of CORS checking by ResourceFetcher/ResourceLoader in Blink in Google Chrome prior to 65.0...6.5 Mediumchromium-browserUbuntuInteger overflow in computing the required allocation size when instantiating a new javascript...8.8 Highchromium-browserUbuntuType Confusion in the implementation of __defineGetter__ in V8 in Google Chrome prior to 65.0...8.8 Highchromium-browserUbuntuIncorrect use of mojo::WrapSharedMemoryHandle in Mojo in Google Chrome prior to 65.0.3325.146...8.8 Highchromium-browserUbuntuHeap overflow write in Skia in Google Chrome prior to 65.0.3325.146 allowed a remote attacker to...8.8 Highchromium-browserUbuntuA race in the handling of SharedArrayBuffers in WebAssembly in Google Chrome prior to 65.0.3325...7.5 Highchromium-browserUbuntuUse after free in WebAudio in Google Chrome prior to 65.0.3325.146 allowed a remote attacker to...8.8 High- Show moreLoading…