Search vulnerabilities

Results 1,582

CVE-2020-15994

Use after free in V8 in Google Chrome prior to 86.0.4240.99 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page.

CVSS 3.1 · 8.8 High EPSS 12.2% KEV · Not listed
Vendors
Products
CVE-2020-15993

Use after free in printing in Google Chrome prior to 86.0.4240.99 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page.

CVSS 3.1 · 9.8 Critical EPSS 1.1% KEV · Not listed
Vendors
Products
CVE-2020-15992

chromium-browser: Insufficient policy enforcement in networking

Insufficient policy enforcement in networking in Google Chrome prior to 86.0.4240.75 allowed a remote attacker who had compromised the renderer process to bypass same origin policy via a crafted HTML page.

CVSS 3.1 · 8.8 High EPSS 1.4% KEV · Not listed
Vendors
Products
CVE-2020-15991

chromium-browser: Use after free in password manager

Use after free in password manager in Google Chrome prior to 86.0.4240.75 allowed a remote attacker who had compromised the renderer process to potentially perform a sandbox escape via a crafted HTML page.

CVSS 3.1 · 8.8 High EPSS 1.5% KEV · Not listed
Vendors
Products
CVE-2020-15990

chromium-browser: Use after free in autofill

Use after free in autofill in Google Chrome prior to 86.0.4240.75 allowed a remote attacker who had compromised the renderer process to potentially perform a sandbox escape via a crafted HTML page.

CVSS 3.1 · 8.8 High EPSS 1.4% KEV · Not listed
Vendors
Products
CVE-2020-15987

chromium-browser: Use after free in WebRTC

Use after free in WebRTC in Google Chrome prior to 86.0.4240.75 allowed a remote attacker to potentially exploit heap corruption via a crafted WebRTC stream.

CVSS 3.1 · 8.8 High EPSS 1.1% KEV · Not listed
Vendors
Products
CVE-2020-15983

chromium-browser: Insufficient data validation in webUI

Insufficient data validation in webUI in Google Chrome on ChromeOS prior to 86.0.4240.75 allowed a local attacker to bypass content security policy via a crafted HTML page.

CVSS 3.1 · 7.8 High EPSS < 1% KEV · Not listed
Vendors
Products
CVE-2020-15980

chromium-browser: Insufficient policy enforcement in Intents

Insufficient policy enforcement in Intents in Google Chrome on Android prior to 86.0.4240.75 allowed a local attacker to bypass navigation restrictions via crafted Intents.

CVSS 3.1 · 7.8 High EPSS < 1% KEV · Not listed
Vendors
Products
CVE-2020-15979

chromium-browser: Inappropriate implementation in V8

Inappropriate implementation in V8 in Google Chrome prior to 86.0.4240.75 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page.

CVSS 3.1 · 8.8 High EPSS 1.6% KEV · Not listed
Vendors
Products
CVE-2020-15978

chromium-browser: Insufficient data validation in navigation

Insufficient data validation in navigation in Google Chrome on Android prior to 86.0.4240.75 allowed a remote attacker who had compromised the renderer process to bypass navigation restrictions via a crafted HTML page.

CVSS 3.1 · 8.8 High EPSS 1.5% KEV · Not listed
Vendors
Products
CVE-2020-15976

chromium-browser: Use after free in WebXR

Use after free in WebXR in Google Chrome on Android prior to 86.0.4240.75 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page.

CVSS 3.1 · 8.8 High EPSS 1.5% KEV · Not listed
Vendors
Products
CVE-2020-15975

chromium-browser: Integer overflow in SwiftShader

Integer overflow in SwiftShader in Google Chrome prior to 86.0.4240.75 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page.

CVSS 3.1 · 8.8 High EPSS 1.4% KEV · Not listed
Vendors
Products
CVE-2020-15974

chromium-browser: Integer overflow in Blink

Integer overflow in Blink in Google Chrome prior to 86.0.4240.75 allowed a remote attacker to bypass site isolation via a crafted HTML page.

CVSS 3.1 · 8.8 High EPSS 1.5% KEV · Not listed
Vendors
Products
CVE-2020-15972

chromium-browser: Use after free in audio

Use after free in audio in Google Chrome prior to 86.0.4240.75 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page.

CVSS 3.1 · 8.8 High EPSS 2.5% KEV · Not listed
Vendors
Products
CVE-2020-15971

chromium-browser: Use after free in printing

Use after free in printing in Google Chrome prior to 86.0.4240.75 allowed a remote attacker who had compromised the renderer process to potentially perform a sandbox escape via a crafted HTML page.

CVSS 3.1 · 8.8 High EPSS 1.4% KEV · Not listed
Vendors
Products
CVE-2020-15970

chromium-browser: Use after free in NFC

Use after free in NFC in Google Chrome prior to 86.0.4240.75 allowed a remote attacker who had compromised the renderer process to potentially perform a sandbox escape via a crafted HTML page.

CVSS 3.1 · 8.8 High EPSS 1.4% KEV · Not listed
Vendors
Products
CVE-2020-15969

chromium-browser: Use after free in WebRTC

Use after free in WebRTC in Google Chrome prior to 86.0.4240.75 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page.

CVSS 3.1 · 8.8 High EPSS 1.7% KEV · Not listed
Vendors
Products
Ipados Iphone Os Macos and 11 more
CVE-2020-15968

chromium-browser: Use after free in Blink

Use after free in Blink in Google Chrome prior to 86.0.4240.75 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page.

CVSS 3.1 · 8.8 High EPSS 1.5% KEV · Not listed
Vendors
Products
CVE-2020-15967

chromium-browser: Use after free in payments

Use after free in payments in Google Chrome prior to 86.0.4240.75 allowed a remote attacker to potentially perform a sandbox escape via a crafted HTML page.

CVSS 3.1 · 8.8 High EPSS 1.4% KEV · Not listed
Vendors
Products
CVE-2020-15965

chromium-browser: Out of bounds write in V8

Type confusion in V8 in Google Chrome prior to 85.0.4183.121 allowed a remote attacker to potentially perform out of bounds memory access via a crafted HTML page.

CVSS 3.1 · 8.8 High EPSS 2.9% KEV · Not listed
Vendors
Products