Export limit exceeded: 18405 CVEs match your query. Please refine your search to export 10,000 CVEs or fewer.

Search vulnerabilities

Use the Query Builder to create your own search query, or check out the documentation to learn the search syntax.

Results 18,405

Export CSV
CVE-2019-13718

chromium-browser: IDN spoof

Insufficient data validation in Omnibox in Google Chrome prior to 78.0.3904.70 allowed a remote attacker to perform domain spoofing via IDN homographs via a crafted domain name.

CVSS 3.1 · 4.3 Medium EPSS < 1% KEV · Not listed
Vendors
Google Opensuse Redhat
Products
Chrome Backports Sle Rhel Extras
CVE-2019-13716

chromium-browser: Service worker state error

Insufficient policy enforcement in service workers in Google Chrome prior to 78.0.3904.70 allowed a remote attacker to bypass navigation restrictions via a crafted HTML page.

CVSS 3.1 · 4.3 Medium EPSS < 1% KEV · Not listed
Vendors
Google Opensuse Redhat
Products
Chrome Backports Sle Rhel Extras
CVE-2019-13715

chromium-browser: Address bar spoofing

Insufficient validation of untrusted input in Omnibox in Google Chrome prior to 78.0.3904.70 allowed a remote attacker to perform domain spoofing via IDN homographs via a crafted domain name.

CVSS 3.1 · 4.3 Medium EPSS < 1% KEV · Not listed
Vendors
Google Opensuse Redhat
Products
Chrome Backports Sle Rhel Extras
CVE-2019-13714

chromium-browser: CSS injection

Insufficient validation of untrusted input in Color Enhancer extension in Google Chrome prior to 78.0.3904.70 allowed a remote attacker to inject CSS into an HTML page via a crafted URL.

CVSS 3.1 · 6.1 Medium EPSS < 1% KEV · Not listed
Vendors
Google Opensuse Redhat
Products
Chrome Backports Sle Rhel Extras
CVE-2019-13713

chromium-browser: Cross-origin data leak

Insufficient policy enforcement in JavaScript in Google Chrome prior to 78.0.3904.70 allowed a remote attacker to leak cross-origin data via a crafted HTML page.

CVSS 3.1 · 6.5 Medium EPSS 1.1% KEV · Not listed
Vendors
Google Opensuse Redhat
Products
Chrome Backports Rhel Extras
CVE-2019-13711

chromium-browser: Cross-context information leak

Insufficient policy enforcement in JavaScript in Google Chrome prior to 78.0.3904.70 allowed a remote attacker to leak cross-origin data via a crafted HTML page.

CVSS 3.1 · 5.3 Medium EPSS 1.2% KEV · Not listed
Vendors
Google Opensuse Redhat
Products
Chrome Backports Rhel Extras
CVE-2019-13710

chromium-browser: File download protection bypass

Insufficient validation of untrusted input in downloads in Google Chrome prior to 78.0.3904.70 allowed a remote attacker to bypass download restrictions via a crafted HTML page.

CVSS 3.1 · 4.3 Medium EPSS < 1% KEV · Not listed
Vendors
Google Opensuse Redhat
Products
Chrome Backports Sle Rhel Extras
CVE-2019-13709

chromium-browser: File download protection bypass

Insufficient policy enforcement in downloads in Google Chrome prior to 78.0.3904.70 allowed a remote attacker to bypass download restrictions via a crafted HTML page.

CVSS 3.1 · 6.5 Medium EPSS < 1% KEV · Not listed
Vendors
Google Opensuse Redhat
Products
Chrome Backports Sle Rhel Extras
CVE-2019-13708

chromium-browser: HTTP authentication spoof

Inappropriate implementation in navigation in Google Chrome on iOS prior to 78.0.3904.70 allowed a remote attacker to spoof the contents of the Omnibox (URL bar) via a crafted HTML page.

CVSS 3.1 · 4.3 Medium EPSS < 1% KEV · Not listed
Vendors
Google Opensuse Redhat
Products
Chrome Backports Sle Rhel Extras
CVE-2019-13707

chromium-browser: File storage disclosure

Insufficient validation of untrusted input in intents in Google Chrome on Android prior to 78.0.3904.70 allowed a local attacker to leak files via a crafted application.

CVSS 3.1 · 5.5 Medium EPSS < 1% KEV · Not listed
Vendors
Google Opensuse Redhat
Products
Chrome Backports Rhel Extras
CVE-2019-13706

chromium-browser: Out-of-bounds read in PDFium

Out of bounds memory access in PDFium in Google Chrome prior to 78.0.3904.70 allowed a remote attacker to potentially exploit heap corruption via a crafted PDF file.

CVSS 3.1 · 7.8 High EPSS < 1% KEV · Not listed
Vendors
Google Opensuse Redhat
Products
Chrome Backports Sle Rhel Extras
CVE-2019-13705

chromium-browser: Extension permission bypass

Insufficient policy enforcement in extensions in Google Chrome prior to 78.0.3904.70 allowed an attacker who convinced a user to install a malicious extension to leak cross-origin data via a crafted Chrome Extension.

CVSS 3.1 · 4.3 Medium EPSS < 1% KEV · Not listed
Vendors
Google Opensuse Redhat
Products
Chrome Backports Rhel Extras
CVE-2019-13703

chromium-browser: URL bar spoofing

Insufficient policy enforcement in the Omnibox in Google Chrome on Android prior to 78.0.3904.70 allowed a remote attacker to spoof the contents of the Omnibox (URL bar) via a crafted HTML page.

CVSS 3.1 · 4.3 Medium EPSS < 1% KEV · Not listed
Vendors
Google Opensuse Redhat
Products
Chrome Backports Sle Rhel Extras
CVE-2019-13702

chromium-browser: Privilege elevation in Installer

Inappropriate implementation in installer in Google Chrome on Windows prior to 78.0.3904.70 allowed a local attacker to perform privilege escalation via a crafted executable.

CVSS 3.1 · 7.8 High EPSS < 1% KEV · Not listed
Vendors
Google Opensuse Redhat
Products
Chrome Backports Sle Rhel Extras
CVE-2019-13701

chromium-browser: URL spoof in navigation

Incorrect implementation in navigation in Google Chrome prior to 78.0.3904.70 allowed a remote attacker to spoof the contents of the Omnibox (URL bar) via a crafted HTML page.

CVSS 3.1 · 4.3 Medium EPSS < 1% KEV · Not listed
Vendors
Google Opensuse Redhat
Products
Chrome Backports Sle Rhel Extras
CVE-2019-13700

chromium-browser: Buffer overrun in Blink

Out of bounds memory access in the gamepad API in Google Chrome prior to 78.0.3904.70 allowed a remote attacker who had compromised the renderer process to potentially exploit heap corruption via a crafted HTML page.

CVSS 3.1 · 8.8 High EPSS 1.2% KEV · Not listed
Vendors
Google Opensuse Redhat
Products
Chrome Backports Sle Rhel Extras
CVE-2019-13699

chromium-browser: Use-after-free in media

Use after free in media in Google Chrome prior to 78.0.3904.70 allowed a remote attacker who had compromised the renderer process to potentially exploit heap corruption via a crafted HTML page.

CVSS 3.1 · 8.8 High EPSS 1.1% KEV · Not listed
Vendors
Google Opensuse Redhat
Products
Chrome Backports Sle Rhel Extras