CVE-2021-21165
Data race in audio in Google Chrome prior to 89.0.4389.72 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page.
- Mettez à jour vers 89.0.4389.82-0ubuntu0.16.04.1
Publication Mise à jour
PatchFirst · Vulnérabilités récentes
Vulnérabilités de chromium-browser · Page n° 4
Vulnérabilité publiée pour chromium-browser au cours des 30 derniers jours : 0. Dans le catalogue KEV : 0.
Vulnérabilités : 1138
CVE-2021-21164
Insufficient data validation in Chrome on iOS in Google Chrome on iOS prior to 89.0.4389.72 allowed a remote attacker to leak cross-origin data via a crafted HTML page.
- Mettez à jour vers 89.0.4389.82-0ubuntu0.16.04.1
Publication Mise à jourCVE-2021-21163
Insufficient data validation in Reader Mode in Google Chrome on iOS prior to 89.0.4389.72 allowed a remote attacker to leak cross-origin data via a crafted HTML page and a malicious server.
- Mettez à jour vers 89.0.4389.82-0ubuntu0.16.04.1
Publication Mise à jourCVE-2021-21162
Use after free in WebRTC in Google Chrome prior to 89.0.4389.72 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page.
- Mettez à jour vers 89.0.4389.82-0ubuntu0.16.04.1
Publication Mise à jourCVE-2021-21161
Heap buffer overflow in TabStrip in Google Chrome prior to 89.0.4389.72 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page.
- Mettez à jour vers 89.0.4389.82-0ubuntu0.16.04.1
Publication Mise à jourCVE-2021-21160
Heap buffer overflow in WebAudio in Google Chrome prior to 89.0.4389.72 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page.
- Mettez à jour vers 89.0.4389.82-0ubuntu0.16.04.1
Publication Mise à jourCVE-2021-21159
Heap buffer overflow in TabStrip in Google Chrome prior to 89.0.4389.72 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page.
- Mettez à jour vers 89.0.4389.82-0ubuntu0.16.04.1
Publication Mise à jourCVE-2021-21157
Use after free in Web Sockets in Google Chrome on Linux prior to 88.0.4324.182 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page.
- Mettez à jour vers 89.0.4389.82-0ubuntu0.16.04.1
Publication Mise à jourCVE-2021-21156
Heap buffer overflow in V8 in Google Chrome prior to 88.0.4324.182 allowed a remote attacker to potentially exploit heap corruption via a crafted script.
- Mettez à jour vers 89.0.4389.82-0ubuntu0.16.04.1
Publication Mise à jourCVE-2021-21155
Heap buffer overflow in Tab Strip in Google Chrome on Windows prior to 88.0.4324.182 allowed a remote attacker who had compromised the renderer process to potentially perform a sandbox escape via a crafted HTML page.
- Mettez à jour vers 89.0.4389.82-0ubuntu0.16.04.1
Publication Mise à jourCVE-2021-21154
Heap buffer overflow in Tab Strip in Google Chrome prior to 88.0.4324.182 allowed a remote attacker who had compromised the renderer process to potentially perform a sandbox escape via a crafted HTML page.
- Mettez à jour vers 89.0.4389.82-0ubuntu0.16.04.1
Publication Mise à jourCVE-2021-21153
Stack buffer overflow in GPU Process in Google Chrome on Linux prior to 88.0.4324.182 allowed a remote attacker to potentially perform out of bounds memory access via a crafted HTML page.
- Mettez à jour vers 89.0.4389.82-0ubuntu0.16.04.1
Publication Mise à jourCVE-2021-21152
Heap buffer overflow in Media in Google Chrome on Linux prior to 88.0.4324.182 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page.
- Mettez à jour vers 89.0.4389.82-0ubuntu0.16.04.1
Publication Mise à jourCVE-2021-21151
Use after free in Payments in Google Chrome prior to 88.0.4324.182 allowed a remote attacker to potentially perform a sandbox escape via a crafted HTML page.
- Mettez à jour vers 89.0.4389.82-0ubuntu0.16.04.1
Publication Mise à jourCVE-2021-21150
Use after free in Downloads in Google Chrome on Windows prior to 88.0.4324.182 allowed a remote attacker who had compromised the renderer process to potentially perform a sandbox escape via a crafted HTML page.
- Mettez à jour vers 89.0.4389.82-0ubuntu0.16.04.1
Publication Mise à jourCVE-2021-21149
Stack buffer overflow in Data Transfer in Google Chrome on Linux prior to 88.0.4324.182 allowed a remote attacker to perform out of bounds memory access via a crafted HTML page.
- Mettez à jour vers 89.0.4389.82-0ubuntu0.16.04.1
Publication Mise à jourCVE-2021-21148
Heap buffer overflow in V8 in Google Chrome prior to 88.0.4324.150 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page.
- Mettez à jour vers 89.0.4389.82-0ubuntu0.16.04.1
Publication Mise à jourCVE-2021-21147
Inappropriate implementation in Skia in Google Chrome prior to 88.0.4324.146 allowed a local attacker to spoof the contents of the Omnibox (URL bar) via a crafted HTML page.
- Mettez à jour vers 89.0.4389.82-0ubuntu0.16.04.1
Publication Mise à jourCVE-2021-21146
Use after free in Navigation in Google Chrome prior to 88.0.4324.146 allowed a remote attacker who had compromised the renderer process to potentially perform a sandbox escape via a crafted HTML page.
- Mettez à jour vers 89.0.4389.82-0ubuntu0.16.04.1
Publication Mise à jourCVE-2021-21145
Use after free in Fonts in Google Chrome prior to 88.0.4324.146 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page.
- Mettez à jour vers 89.0.4389.82-0ubuntu0.16.04.1
Publication Mise à jour
Vérifiez votre serveur
Comparez votre pile et les versions installées aux bases de vulnérabilités actuelles.