Where
-Infinity
0
Severity
6.5
Input Validation
AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:N

Insufficient policy enforcement in Content Security Policy in Google Chrome prior to 73.0.3683.75 allowed a remote attacker to bypass content security policy via a crafted HTML page.

1 / 2
Source: MITRE
First published (updated )
Severity
6.5
AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:N

Incorrect handling of download origins in Navigation in Google Chrome prior to 73.0.3683.75 allowed a remote attacker to perform domain spoofing via a crafted HTML page.

1 / 2
Source: MITRE
First published (updated )
Severity
7.8
AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

crypto: algifaead - Revert to operating out-of-place

1 / 7
Source: Microsoft
First published (updated )
Severity
6.5
Input Validation
AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:N

Insufficient policy enforcement in Blink in Google Chrome prior to 73.0.3683.75 allowed a remote attacker to bypass content security policy via a crafted HTML page.

1 / 2
Source: MITRE
First published (updated )
Severity
6.5
Input Validation
AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:N

Incorrect inheritance of a new document's policy in Content Security Policy in Google Chrome prior to 73.0.3683.75 allowed a remote attacker to bypass content security policy via a crafted HTML page.

1 / 2
Source: MITRE
First published (updated )
Severity
6.5
AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N

An out of bounds read flaw was found in the Skia component of the Chromium browser.

Upstream bug(s):

https://code.google.com/p/chromium/issues/detail?id=883596

External References:

https://chromereleases.googleblog.com/2019/03/stable-channel-update-for-desktop12.html

1 / 4
Source: Red Hat
First published (updated )
Severity
7.5
Race Condition
AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H

A race condition flaw was found in the Extensions component of the Chromium browser.

Upstream bug(s):

https://code.google.com/p/chromium/issues/detail?id=918861

External References:

https://chromereleases.googleblog.com/2019/03/stable-channel-update-for-desktop12.html

1 / 2
Source: Red Hat
First published (updated )
Severity
8.8
Integer Overflow
AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

An integer overflow flaw was found in the PDFium component of the Chromium browser.

Upstream bug(s):

https://code.google.com/p/chromium/issues/detail?id=919643

External References:

https://chromereleases.googleblog.com/2019/03/stable-channel-update-for-desktop12.html

1 / 2
Source: Red Hat
First published (updated )
Severity
6.5
AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:N

Incorrect handling of cancelled requests in Navigation in Google Chrome prior to 73.0.3683.75 allowed a remote attacker to perform domain spoofing via a crafted HTML page.

1 / 2
Source: MITRE
First published (updated )
Severity
6.5
Input Validation
AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:N

An excessive permissions for private api flaw was found in the Extensions component of the Chromium browser.

Upstream bug(s):

https://code.google.com/p/chromium/issues/detail?id=937487

External References:

https://chromereleases.googleblog.com/2019/03/stable-channel-update-for-desktop12.html

1 / 2
Source: Red Hat
First published (updated )
Severity
8.8
Integer Overflow
AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

An integer overflow flaw was found in the PDFium component of the Chromium browser.

Upstream bug(s):

https://code.google.com/p/chromium/issues/detail?id=914983

External References:

https://chromereleases.googleblog.com/2019/03/stable-channel-update-for-desktop12.html

1 / 2
Source: Red Hat
First published (updated )
Severity
8.8
AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

A type confusion flaw was found in the V8 component of the Chromium browser.

Upstream bug(s):

https://code.google.com/p/chromium/issues/detail?id=926651

External References:

https://chromereleases.googleblog.com/2019/03/stable-channel-update-for-desktop12.html

1 / 2
Source: Red Hat
First published (updated )
Severity
8.8
Buffer Overflow, Integer Overflow
AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

A heap buffer overflow flaw was found in the V8 component of the Chromium browser.

Upstream bug(s):

https://code.google.com/p/chromium/issues/detail?id=914736

External References:

https://chromereleases.googleblog.com/2019/03/stable-channel-update-for-desktop12.html

1 / 2
Source: Red Hat
First published (updated )
Severity
8.8
Use After Free, Integer Overflow
AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

An integer overflow that leads to a use-after-free in WebMIDI in Google Chrome on Windows prior to 73.0.3683.75 allowed a remote attacker who had compromised the renderer process to execute arbitrary code via a crafted HTML page.

1 / 2
Source: MITRE
First published (updated )
Severity
8.8
Use After Free, Integer Overflow
AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

An integer overflow that leads to a use-after-free in Blink Storage in Google Chrome on Linux prior to 73.0.3683.75 allowed a remote attacker who had compromised the renderer process to execute arbitrary code via a crafted HTML page.

1 / 2
Source: MITRE
First published (updated )
Severity
8.8
Use After Free
AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

An use after free flaw was found in the Canvas component of the Chromium browser.

Upstream bug(s):

https://code.google.com/p/chromium/issues/detail?id=913964

External References:

https://chromereleases.googleblog.com/2019/03/stable-channel-update-for-desktop12.html

1 / 2
Source: Red Hat
First published (updated )
Severity
8.8
AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

Chrome could allow a remote attacker to bypass security restrictions, caused by a parameter passing error in media player. By persuading a victim to visit a specially-crafted Web site, an attacker could exploit this vulnerability to gain unauthorized access to the system.

External References: https://exchange.xforce.ibmcloud.com/vulnerabilities/160323

1 / 2
Source: Red Hat
First published (updated )
Severity
8.8
Buffer Overflow
AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

A buffer overflow vulnerability in the Skia library can occur with Canvas 2D acceleration on macOS. This issue was addressed by disabling Canvas 2D acceleration in Firefox ESR. Note: this does not affect other versions and platforms where Canvas 2D acceleration is already disabled by default.

1 / 3
Source: Mozilla
First published (updated )
Severity
6.5
Infoleak
AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N

A type confusion flaw was found in the V8 component of the Chromium browser.

Upstream bug(s):

https://code.google.com/p/chromium/issues/detail?id=602970

External References:

http://googlechromereleases.blogspot.com/2016/05/stable-channel-update25.html

1 / 2
Source: Red Hat
First published (updated )
Severity
8.8
AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

A cross-origin bypass flaw was found in the extensions component of the Chromium browser.

Upstream bug(s):

https://code.google.com/p/chromium/issues/detail?id=598165

External References:

http://googlechromereleases.blogspot.com/2016/05/stable-channel-update25.html

1 / 2
Source: Red Hat
First published (updated )
Severity
7.5
Buffer Overflow
AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H

An out-of-bounds access flaw was found in the libxslt component of the Chromium browser.

Upstream bug(s):

https://code.google.com/p/chromium/issues/detail?id=583156

External References:

http://googlechromereleases.blogspot.com/2016/05/stable-channel-update25.html

1 / 2
Source: Red Hat
First published (updated )
Severity
6.1
AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N

The following flaw was identified in the Chromium browser: csp bypass for serviceworker.

Upstream bug(s):

https://code.google.com/p/chromium/issues/detail?id=579801

External References:

http://googlechromereleases.blogspot.com/2016/05/stable-channel-update25.html

1 / 2
Source: Red Hat
First published (updated )
Severity
8.8
Buffer Overflow
AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

A heap overflow flaw was found in the PDFium component of the Chromium browser.

Upstream bug(s):

https://code.google.com/p/chromium/issues/detail?id=613160

External References:

http://googlechromereleases.blogspot.com/2016/05/stable-channel-update25.html

1 / 2
Source: Red Hat
First published (updated )
Severity
6.5
Buffer Overflow
AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H

An out-of-bounds read flaw was found in the V8 component of the Chromium browser.

Upstream bug(s):

https://code.google.com/p/chromium/issues/detail?id=604897

External References:

http://googlechromereleases.blogspot.com/2016/05/stable-channel-update25.html

1 / 2
Source: Red Hat
First published (updated )
Severity
8.8
Buffer Overflow, Use After Free
AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

A heap use-after-free flaw was found in the Skia component of the Chromium browser.

Upstream bug(s):

https://code.google.com/p/chromium/issues/detail?id=589848

External References:

http://googlechromereleases.blogspot.com/2016/05/stable-channel-update25.html

1 / 2
Source: Red Hat
First published (updated )
Severity
8.8
Use After Free
AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

A heap use-after-free flaw was found in the V8 bindings component of the Chromium browser.

Upstream bug(s):

https://code.google.com/p/chromium/issues/detail?id=606390

External References:

http://googlechromereleases.blogspot.com/2016/05/stable-channel-update25.html

1 / 2
Source: Red Hat
First published (updated )
Severity
6.5
Infoleak
AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N

An information leak flaw was found in the extensions component of the Chromium browser.

Upstream bug(s):

https://code.google.com/p/chromium/issues/detail?id=603748

External References:

http://googlechromereleases.blogspot.com/2016/05/stable-channel-update25.html

1 / 2
Source: Red Hat
First published (updated )
Severity
6.5
Buffer Overflow
AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H

An out-of-bounds read flaw was found in the PDFium component of the Chromium browser.

Upstream bug(s):

https://code.google.com/p/chromium/issues/detail?id=603518

External References:

http://googlechromereleases.blogspot.com/2016/05/stable-channel-update25.html

1 / 2
Source: Red Hat
First published (updated )
Severity
6.5
Buffer Overflow
AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H

An out-of-bounds read flaw was found in the PDFium component of the Chromium browser.

Upstream bug(s):

https://code.google.com/p/chromium/issues/detail?id=601362

External References:

http://googlechromereleases.blogspot.com/2016/05/stable-channel-update25.html

1 / 2
Source: Red Hat
First published (updated )
Severity
8.8
AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

A cross-origin bypass flaw was found in the extension bindings component of the Chromium browser.

Upstream bug(s):

https://code.google.com/p/chromium/issues/detail?id=590118

External References:

http://googlechromereleases.blogspot.com/2016/05/stable-channel-update25.html

1 / 2
Source: Red Hat
First published (updated )

Contact

SecAlerts Pty Ltd.
132 Wickham Terrace
Fortitude Valley,
QLD 4006, Australia
info@secalerts.co
By using SecAlerts services, you agree to our services end-user license agreement. This website is safeguarded by reCAPTCHA and governed by the Google Privacy Policy and Terms of Service. All names, logos, and brands of products are owned by their respective owners, and any usage of these names, logos, and brands for identification purposes only does not imply endorsement. If you possess any content that requires removal, please get in touch with us.
© 2026 SecAlerts Pty Ltd.
ABN: 70 645 966 203, ACN: 645 966 203