Search vulnerabilities

Use the Query Builder to create your own search query, or check out the documentation to learn the search syntax.

Results 8,163

Export CSV
CVE-2020-16032

chromium-browser: Incorrect security UI in sharing

Insufficient data validation in sharing in Google Chrome prior to 87.0.4280.66 allowed a remote attacker to spoof the contents of the Omnibox (URL bar) via a crafted HTML page.

CVSS 3.1 · 4.3 Medium EPSS < 1% KEV · Not listed
Vendors
Google
Products
Chrome
CVE-2020-16031

chromium-browser: Incorrect security UI in tab preview

Insufficient data validation in UI in Google Chrome prior to 87.0.4280.66 allowed a remote attacker to spoof the contents of the Omnibox (URL bar) via a crafted HTML page.

CVSS 3.1 · 4.3 Medium EPSS < 1% KEV · Not listed
Vendors
Google
Products
Chrome
CVE-2020-16030

chromium-browser: Insufficient data validation in Blink

Insufficient data validation in Blink in Google Chrome prior to 87.0.4280.66 allowed a remote attacker to inject arbitrary scripts or HTML (UXSS) via a crafted HTML page.

CVSS 3.1 · 6.1 Medium EPSS < 1% KEV · Not listed
Vendors
Google
Products
Chrome
CVE-2020-16029

chromium-browser: Inappropriate implementation in PDFium

Inappropriate implementation in PDFium in Google Chrome prior to 87.0.4280.66 allowed a remote attacker to bypass navigation restrictions via a crafted PDF file.

CVSS 3.1 · 8.8 High EPSS 1.1% KEV · Not listed
Vendors
Google
Products
Chrome
CVE-2020-16028

chromium-browser: Heap buffer overflow in WebRTC

Heap buffer overflow in WebRTC in Google Chrome prior to 87.0.4280.66 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page.

CVSS 3.1 · 8.8 High EPSS < 1% KEV · Not listed
Vendors
Google
Products
Chrome
CVE-2020-16027

chromium-browser: Insufficient policy enforcement in developer tools

Insufficient policy enforcement in developer tools in Google Chrome prior to 87.0.4280.66 allowed an attacker who convinced a user to install a malicious extension to obtain potentially sensitive information from the user's disk via a crafted Chrome Extension.

CVSS 3.1 · 6.5 Medium EPSS < 1% KEV · Not listed
Vendors
Google
Products
Chrome
CVE-2020-16026

chromium-browser: Use after free in WebRTC

Use after free in WebRTC in Google Chrome prior to 87.0.4280.66 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page.

CVSS 3.1 · 8.8 High EPSS 1.1% KEV · Not listed
Vendors
Google
Products
Chrome
CVE-2020-16025

chromium-browser: Heap buffer overflow in clipboard

Heap buffer overflow in clipboard in Google Chrome prior to 87.0.4280.66 allowed a remote attacker who had compromised the renderer process to potentially perform a sandbox escape via a crafted HTML page.

CVSS 3.1 · 9.6 Critical EPSS 2.3% KEV · Not listed
Vendors
Google
Products
Chrome
CVE-2020-16024

chromium-browser: Heap buffer overflow in UI

Heap buffer overflow in UI in Google Chrome prior to 87.0.4280.66 allowed a remote attacker who had compromised the renderer process to potentially perform a sandbox escape via a crafted HTML page.

CVSS 3.1 · 9.6 Critical EPSS 1.9% KEV · Not listed
Vendors
Google
Products
Chrome Chrome Os
CVE-2020-16023

chromium-browser: Use after free in WebCodecs

Use after free in WebCodecs in Google Chrome prior to 87.0.4280.66 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page.

CVSS 3.1 · 8.8 High EPSS 1.0% KEV · Not listed
Vendors
Google
Products
Chrome
CVE-2020-16022

chromium-browser: Insufficient policy enforcement in networking

Insufficient policy enforcement in networking in Google Chrome prior to 87.0.4280.66 allowed a remote attacker to potentially bypass firewall controls via a crafted HTML page.

CVSS 3.1 · 8.8 High EPSS < 1% KEV · Not listed
Vendors
Apple Google Linux and 1 more
Products
Macos Android Chrome and 4 more
CVE-2020-16021

chromium-browser: Race in ImageBurner

Race in image burner in Google Chrome on ChromeOS prior to 87.0.4280.66 allowed a remote attacker who had compromised the browser process to perform OS-level privilege escalation via a malicious file.

CVSS 3.1 · 7.5 High EPSS < 1% KEV · Not listed
Vendors
Google
Products
Chrome Chrome Os
CVE-2020-16020

chromium-browser: Inappropriate implementation in cryptohome

Inappropriate implementation in cryptohome in Google Chrome on ChromeOS prior to 87.0.4280.66 allowed a remote attacker who had compromised the browser process to bypass discretionary access control via a malicious file.

CVSS 3.1 · 8.8 High EPSS < 1% KEV · Not listed
Vendors
Google
Products
Chrome Chrome Os
CVE-2020-16019

chromium-browser: Inappropriate implementation in filesystem

Inappropriate implementation in filesystem in Google Chrome on ChromeOS prior to 87.0.4280.66 allowed a remote attacker who had compromised the browser process to bypass noexec restrictions via a malicious file.

CVSS 3.1 · 8.8 High EPSS < 1% KEV · Not listed
Vendors
Google
Products
Chrome Chrome Os
CVE-2020-16018

chromium-browser: Use after free in payments

Use after free in payments in Google Chrome prior to 87.0.4280.66 allowed a remote attacker who had compromised the renderer process to potentially perform a sandbox escape via a crafted HTML page.

CVSS 3.1 · 9.6 Critical EPSS 1.1% KEV · Not listed
Vendors
Google
Products
Chrome
CVE-2020-16016

chromium-browser: Inappropriate implementation in base

Inappropriate implementation in base in Google Chrome prior to 86.0.4240.193 allowed a remote attacker who had compromised the renderer process to potentially perform a sandbox escape via a crafted HTML page.

CVSS 3.1 · 9.6 Critical EPSS < 1% KEV · Not listed
Vendors
Google Redhat
Products
Chrome Rhel Extras
CVE-2020-16015

chromium-browser: Insufficient data validation in WASM

Insufficient data validation in WASM in Google Chrome prior to 87.0.4280.66 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page.

CVSS 3.1 · 8.8 High EPSS 1.1% KEV · Not listed
Vendors
Google
Products
Chrome
CVE-2020-16014

chromium-browser: Use after free in PPAPI

Use after free in PPAPI in Google Chrome prior to 87.0.4280.66 allowed a remote attacker who had compromised the renderer process to potentially perform a sandbox escape via a crafted HTML page.

CVSS 3.1 · 9.6 Critical EPSS 1.1% KEV · Not listed
Vendors
Google
Products
Chrome
CVE-2020-16012

Mozilla: Variable time processing of cross-origin images during drawImage calls

Side-channel information leakage in graphics in Google Chrome prior to 87.0.4280.66 allowed a remote attacker to leak cross-origin data via a crafted HTML page.

CVSS 3.1 · 4.3 Medium EPSS 2.6% KEV · Not listed
Vendors
Google Mozilla Redhat
Products
Chrome Firefox Enterprise Linux and 2 more
CVE-2020-16011

chromium-browser: Heap buffer overflow in UI on Windows

Heap buffer overflow in UI in Google Chrome on Windows prior to 86.0.4240.183 allowed a remote attacker who had compromised the renderer process to potentially perform a sandbox escape via a crafted HTML page.

CVSS 3.1 · 9.6 Critical EPSS 2.4% KEV · Not listed
Vendors
Debian Google Microsoft and 1 more
Products
Debian Linux Chrome Windows and 2 more