CVE-2019-5797
Double free in DOMStorage in Google Chrome prior to 73.0.3683.75 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page.
- Update to 73.0.3683.75-0ubuntu0.16.04.1
Published Updated
PatchFirst · Latest vulnerabilities
chromium-browser vulnerabilities
Vulnerabilities published for chromium-browser in the last 30 days: 0. Listed in the KEV catalogue: 0.
Vulnerabilities: 1138
CVE-2020-6492
Use after free in ANGLE in Google Chrome prior to 83.0.4103.97 allowed a remote attacker to potentially perform a sandbox escape via a crafted HTML page.
- Update to 84.0.4147.105-0ubuntu0.16.04.1
Published UpdatedCVE-2018-6125
Insufficient policy enforcement in USB in Google Chrome on Windows prior to 67.0.3396.62 allowed a remote attacker to obtain potentially sensitive information via a crafted HTML page.
- Update to 67.0.3396.99-0ubuntu0.16.04.2
Published UpdatedCVE-2018-6122
Type confusion in WebAssembly in Google Chrome prior to 66.0.3359.139 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page.
- Update to 66.0.3359.181-0ubuntu0.16.04.1
Published UpdatedUBUNTU-CVE-2018-6044
Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: CVE-2018-16064. Reason: This candidate is a reservation duplicate of CVE-2018-16064. Notes: All CVE users should reference CVE-2018-16064 instead of this candidate. All references and descriptions in this candidate have been removed to prevent accidental usage
- Update to 68.0.3440.75-0ubuntu0.16.04.1
Published UpdatedCVE-2021-21221
Insufficient validation of untrusted input in Mojo in Google Chrome prior to 90.0.4430.72 allowed a remote attacker who had compromised the renderer process to leak cross-origin data via a crafted HTML page.
- Update to 90.0.4430.72-0ubuntu0.16.04.1
Published UpdatedCVE-2021-21219
Uninitialized data in PDFium in Google Chrome prior to 90.0.4430.72 allowed a remote attacker to obtain potentially sensitive information from process memory via a crafted PDF file.
- Update to 90.0.4430.72-0ubuntu0.16.04.1
Published UpdatedCVE-2021-21218
Uninitialized data in PDFium in Google Chrome prior to 90.0.4430.72 allowed a remote attacker to obtain potentially sensitive information from process memory via a crafted PDF file.
- Update to 90.0.4430.72-0ubuntu0.16.04.1
Published UpdatedCVE-2021-21217
Uninitialized data in PDFium in Google Chrome prior to 90.0.4430.72 allowed a remote attacker to obtain potentially sensitive information from process memory via a crafted PDF file.
- Update to 90.0.4430.72-0ubuntu0.16.04.1
Published UpdatedCVE-2021-21216
Inappropriate implementation in Autofill in Google Chrome prior to 90.0.4430.72 allowed a remote attacker to spoof security UI via a crafted HTML page.
- Update to 90.0.4430.72-0ubuntu0.16.04.1
Published UpdatedCVE-2021-21215
Inappropriate implementation in Autofill in Google Chrome prior to 90.0.4430.72 allowed a remote attacker to spoof security UI via a crafted HTML page.
- Update to 90.0.4430.72-0ubuntu0.16.04.1
Published UpdatedCVE-2021-21214
Use after free in Network API in Google Chrome prior to 90.0.4430.72 allowed a remote attacker to potentially exploit heap corruption via a crafted Chrome Extension.
- Update to 90.0.4430.72-0ubuntu0.16.04.1
Published UpdatedCVE-2021-21213
Use after free in WebMIDI in Google Chrome prior to 90.0.4430.72 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page.
- Update to 90.0.4430.72-0ubuntu0.16.04.1
Published UpdatedCVE-2021-21212
Incorrect security UI in Network Config UI in Google Chrome on ChromeOS prior to 90.0.4430.72 allowed a remote attacker to potentially compromise WiFi connection security via a malicious WAP.
- Update to 90.0.4430.72-0ubuntu0.16.04.1
Published UpdatedCVE-2021-21211
Inappropriate implementation in Navigation in Google Chrome on iOS prior to 90.0.4430.72 allowed a remote attacker to leak cross-origin data via a crafted HTML page.
- Update to 90.0.4430.72-0ubuntu0.16.04.1
Published UpdatedCVE-2021-21210
Inappropriate implementation in Network in Google Chrome prior to 90.0.4430.72 allowed a remote attacker to potentially access local UDP ports via a crafted HTML page.
- Update to 90.0.4430.72-0ubuntu0.16.04.1
Published UpdatedCVE-2021-21209
Inappropriate implementation in storage in Google Chrome prior to 90.0.4430.72 allowed a remote attacker to leak cross-origin data via a crafted HTML page.
- Update to 90.0.4430.72-0ubuntu0.16.04.1
Published UpdatedCVE-2021-21208
Insufficient data validation in QR scanner in Google Chrome on iOS prior to 90.0.4430.72 allowed an attacker displaying a QR code to perform domain spoofing via a crafted QR code.
- Update to 90.0.4430.72-0ubuntu0.16.04.1
Published UpdatedCVE-2021-21207
Use after free in IndexedDB in Google Chrome prior to 90.0.4430.72 allowed an attacker who convinced a user to install a malicious extension to potentially perform a sandbox escape via a crafted Chrome Extension.
- Update to 90.0.4430.72-0ubuntu0.16.04.1
Published UpdatedCVE-2021-21205
Insufficient policy enforcement in navigation in Google Chrome on iOS prior to 90.0.4430.72 allowed a remote attacker to bypass navigation restrictions via a crafted HTML page.
- Update to 90.0.4430.72-0ubuntu0.16.04.1
Published Updated
Check your server
Check your installed stack and versions against the current vulnerability feeds.