Search vulnerabilities

Use the Query Builder to create your own search query, or check out the documentation to learn the search syntax.

Results 426

Export CSV
CVE-2019-13767

chromium-browser: Use after free in media picker

Use after free in media picker in Google Chrome prior to 79.0.3945.88 allowed a remote attacker who had compromised the renderer process to potentially exploit heap corruption via a crafted HTML page.

CVSS 3.1 · 8.8 High EPSS 15.5% KEV · Not listed
Vendors
Debian Fedoraproject Google and 2 more
Products
Debian Linux Fedora Chrome and 2 more
CVE-2019-13764

chromium-browser: Type Confusion in V8

Type confusion in JavaScript in Google Chrome prior to 79.0.3945.79 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page.

CVSS 3.1 · 8.8 High EPSS 6.4% KEV · Not listed
Vendors
Debian Fedoraproject Google and 3 more
Products
Debian Linux Fedora Chrome and 7 more
CVE-2019-13745

chromium-browser: Insufficient policy enforcement in audio

Insufficient policy enforcement in audio in Google Chrome prior to 79.0.3945.79 allowed a remote attacker to leak cross-origin data via a crafted HTML page.

CVSS 3.1 · 6.5 Medium EPSS 1.5% KEV · Not listed
Vendors
Debian Fedoraproject Google and 3 more
Products
Debian Linux Fedora Chrome and 7 more
CVE-2019-13734

sqlite: fts3: improve shadow table corruption detection

Out of bounds write in SQLite in Google Chrome prior to 79.0.3945.79 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page.

CVSS 3.1 · 8.8 High EPSS 3.9% KEV · Not listed
Vendors
Canonical Debian Fedoraproject and 5 more
Products
Ubuntu Linux Debian Linux Fedora and 17 more
CVE-2019-13730

chromium-browser: Type Confusion in V8

Type confusion in JavaScript in Google Chrome prior to 79.0.3945.79 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page.

CVSS 3.1 · 8.8 High EPSS 1.9% KEV · Not listed
Vendors
Debian Fedoraproject Google and 3 more
Products
Debian Linux Fedora Chrome and 7 more
CVE-2019-13723

chromium-browser: use-after-free in bluetooth

Use after free in WebBluetooth in Google Chrome prior to 78.0.3904.108 allowed a remote attacker who had compromised the renderer process to potentially exploit heap corruption via a crafted HTML page.

CVSS 3.1 · 8.8 High EPSS 1.5% KEV · Not listed
Vendors
Fedoraproject Google Opensuse and 1 more
Products
Fedora Chrome Backports and 4 more
CVE-2019-13718

chromium-browser: IDN spoof

Insufficient data validation in Omnibox in Google Chrome prior to 78.0.3904.70 allowed a remote attacker to perform domain spoofing via IDN homographs via a crafted domain name.

CVSS 3.1 · 4.3 Medium EPSS < 1% KEV · Not listed
Vendors
Google Opensuse Redhat
Products
Chrome Backports Sle Rhel Extras
CVE-2019-13716

chromium-browser: Service worker state error

Insufficient policy enforcement in service workers in Google Chrome prior to 78.0.3904.70 allowed a remote attacker to bypass navigation restrictions via a crafted HTML page.

CVSS 3.1 · 4.3 Medium EPSS < 1% KEV · Not listed
Vendors
Google Opensuse Redhat
Products
Chrome Backports Sle Rhel Extras
CVE-2019-13715

chromium-browser: Address bar spoofing

Insufficient validation of untrusted input in Omnibox in Google Chrome prior to 78.0.3904.70 allowed a remote attacker to perform domain spoofing via IDN homographs via a crafted domain name.

CVSS 3.1 · 4.3 Medium EPSS < 1% KEV · Not listed
Vendors
Google Opensuse Redhat
Products
Chrome Backports Sle Rhel Extras
CVE-2019-13714

chromium-browser: CSS injection

Insufficient validation of untrusted input in Color Enhancer extension in Google Chrome prior to 78.0.3904.70 allowed a remote attacker to inject CSS into an HTML page via a crafted URL.

CVSS 3.1 · 6.1 Medium EPSS < 1% KEV · Not listed
Vendors
Google Opensuse Redhat
Products
Chrome Backports Sle Rhel Extras
CVE-2019-13713

chromium-browser: Cross-origin data leak

Insufficient policy enforcement in JavaScript in Google Chrome prior to 78.0.3904.70 allowed a remote attacker to leak cross-origin data via a crafted HTML page.

CVSS 3.1 · 6.5 Medium EPSS 1.1% KEV · Not listed
Vendors
Google Opensuse Redhat
Products
Chrome Backports Rhel Extras
CVE-2019-13711

chromium-browser: Cross-context information leak

Insufficient policy enforcement in JavaScript in Google Chrome prior to 78.0.3904.70 allowed a remote attacker to leak cross-origin data via a crafted HTML page.

CVSS 3.1 · 5.3 Medium EPSS 1.2% KEV · Not listed
Vendors
Google Opensuse Redhat
Products
Chrome Backports Rhel Extras
CVE-2019-13710

chromium-browser: File download protection bypass

Insufficient validation of untrusted input in downloads in Google Chrome prior to 78.0.3904.70 allowed a remote attacker to bypass download restrictions via a crafted HTML page.

CVSS 3.1 · 4.3 Medium EPSS < 1% KEV · Not listed
Vendors
Google Opensuse Redhat
Products
Chrome Backports Sle Rhel Extras
CVE-2019-13709

chromium-browser: File download protection bypass

Insufficient policy enforcement in downloads in Google Chrome prior to 78.0.3904.70 allowed a remote attacker to bypass download restrictions via a crafted HTML page.

CVSS 3.1 · 6.5 Medium EPSS < 1% KEV · Not listed
Vendors
Google Opensuse Redhat
Products
Chrome Backports Sle Rhel Extras
CVE-2019-13708

chromium-browser: HTTP authentication spoof

Inappropriate implementation in navigation in Google Chrome on iOS prior to 78.0.3904.70 allowed a remote attacker to spoof the contents of the Omnibox (URL bar) via a crafted HTML page.

CVSS 3.1 · 4.3 Medium EPSS < 1% KEV · Not listed
Vendors
Google Opensuse Redhat
Products
Chrome Backports Sle Rhel Extras
CVE-2019-13707

chromium-browser: File storage disclosure

Insufficient validation of untrusted input in intents in Google Chrome on Android prior to 78.0.3904.70 allowed a local attacker to leak files via a crafted application.

CVSS 3.1 · 5.5 Medium EPSS < 1% KEV · Not listed
Vendors
Google Opensuse Redhat
Products
Chrome Backports Rhel Extras
CVE-2019-13706

chromium-browser: Out-of-bounds read in PDFium

Out of bounds memory access in PDFium in Google Chrome prior to 78.0.3904.70 allowed a remote attacker to potentially exploit heap corruption via a crafted PDF file.

CVSS 3.1 · 7.8 High EPSS < 1% KEV · Not listed
Vendors
Google Opensuse Redhat
Products
Chrome Backports Sle Rhel Extras
CVE-2019-13705

chromium-browser: Extension permission bypass

Insufficient policy enforcement in extensions in Google Chrome prior to 78.0.3904.70 allowed an attacker who convinced a user to install a malicious extension to leak cross-origin data via a crafted Chrome Extension.

CVSS 3.1 · 4.3 Medium EPSS < 1% KEV · Not listed
Vendors
Google Opensuse Redhat
Products
Chrome Backports Rhel Extras