p PatchFirst

PatchFirst · Свежие уязвимости

Уязвимости chromium-browser · Страница 32

За последние 30 дней в chromium-browser опубликовано уязвимостей: 0; в каталоге KEV: 0.

Фильтры уязвимостей
Сбросить фильтры

Уязвимостей: 1499

  1. CVE-2021-30532

    Средний · CVSS 4.3EPSS 1,17%Есть исправление

    CVE-2021-30532

    Insufficient policy enforcement in Content Security Policy in Google Chrome prior to 91.0.4472.77 allowed a remote attacker to bypass content security policy via a crafted HTML page.

    • Обновитесь до 91.0.4472.77-0ubuntu0.18.04.1
  2. CVE-2021-30531

    Средний · CVSS 6.5EPSS 1,74%Есть исправление

    CVE-2021-30531

    Insufficient policy enforcement in Content Security Policy in Google Chrome prior to 91.0.4472.77 allowed a remote attacker to bypass content security policy via a crafted HTML page.

    • Обновитесь до 91.0.4472.77-0ubuntu0.18.04.1
  3. CVE-2021-30530

    Высокий · CVSS 8.8EPSS 1,18%Есть исправление

    CVE-2021-30530

    Out of bounds memory access in WebAudio in Google Chrome prior to 91.0.4472.77 allowed a remote attacker to perform out of bounds memory access via a crafted HTML page.

    • Обновитесь до 91.0.4472.77-0ubuntu0.18.04.1
  4. CVE-2021-30529

    Высокий · CVSS 8.8EPSS 1%Есть исправление

    CVE-2021-30529

    Use after free in Bookmarks in Google Chrome prior to 91.0.4472.77 allowed an attacker who convinced a user to install a malicious extension to potentially exploit heap corruption via a crafted HTML page.

    • Обновитесь до 91.0.4472.77-0ubuntu0.18.04.1
  5. CVE-2021-30527

    Высокий · CVSS 8.8EPSS 0,96%Есть исправление

    CVE-2021-30527

    Use after free in WebUI in Google Chrome prior to 91.0.4472.77 allowed an attacker who convinced a user to install a malicious extension to potentially exploit heap corruption via a crafted HTML page.

    • Обновитесь до 91.0.4472.77-0ubuntu0.18.04.1
  6. CVE-2021-30526

    Высокий · CVSS 8.8EPSS 0,99%Есть исправление

    CVE-2021-30526

    Out of bounds write in TabStrip in Google Chrome prior to 91.0.4472.77 allowed an attacker who convinced a user to install a malicious extension to perform an out of bounds memory write via a crafted HTML page.

    • Обновитесь до 91.0.4472.77-0ubuntu0.18.04.1
  7. CVE-2021-30525

    Высокий · CVSS 8.8EPSS 0,9%Есть исправление

    CVE-2021-30525

    Use after free in TabGroups in Google Chrome prior to 91.0.4472.77 allowed an attacker who convinced a user to install a malicious extension to potentially exploit heap corruption via a crafted HTML page.

    • Обновитесь до 91.0.4472.77-0ubuntu0.18.04.1
  8. CVE-2021-30524

    Высокий · CVSS 8.8EPSS 0,96%Есть исправление

    CVE-2021-30524

    Use after free in TabStrip in Google Chrome prior to 91.0.4472.77 allowed an attacker who convinced a user to install a malicious extension to potentially exploit heap corruption via a crafted HTML page.

    • Обновитесь до 91.0.4472.77-0ubuntu0.18.04.1
  9. CVE-2021-30523

    Высокий · CVSS 8.8EPSS 1,1%Есть исправление

    CVE-2021-30523

    Use after free in WebRTC in Google Chrome prior to 91.0.4472.77 allowed a remote attacker to potentially exploit heap corruption via a crafted SCTP packet.

    • Обновитесь до 91.0.4472.77-0ubuntu0.18.04.1
  10. CVE-2021-30522

    Высокий · CVSS 8.8EPSS 1,43%Есть исправление

    CVE-2021-30522

    Use after free in WebAudio in Google Chrome prior to 91.0.4472.77 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page.

    • Обновитесь до 91.0.4472.77-0ubuntu0.18.04.1
  11. CVE-2021-30521

    Высокий · CVSS 8.8EPSS 1,33%Есть исправление

    CVE-2021-30521

    Heap buffer overflow in Autofill in Google Chrome on Android prior to 91.0.4472.77 allowed a remote attacker to perform out of bounds memory access via a crafted HTML page.

    • Обновитесь до 91.0.4472.77-0ubuntu0.18.04.1
  12. CVE-2021-30528

    Высокий · CVSS 8.8EPSS 1,35%Есть исправление

    CVE-2021-30528

    Use after free in WebAuthentication in Google Chrome on Android prior to 91.0.4472.77 allowed a remote attacker who had compromised the renderer process of a user who had saved a credit card in their Google account to potentially exploit heap corruption via a crafted HTML page.

    • Обновитесь до 91.0.4472.77-0ubuntu0.18.04.1
  13. CVE-2021-30520

    Высокий · CVSS 8.8EPSS 0,88%Есть исправление

    CVE-2021-30520

    Use after free in Tab Strip in Google Chrome prior to 90.0.4430.212 allowed an attacker who convinced a user to install a malicious extension to potentially exploit heap corruption via a crafted HTML page.

    • Обновитесь до 91.0.4472.77-0ubuntu0.18.04.1
  14. CVE-2021-30519

    Высокий · CVSS 8.8EPSS 0,92%Есть исправление

    CVE-2021-30519

    Use after free in Payments in Google Chrome prior to 90.0.4430.212 allowed an attacker who convinced a user to install a malicious payments app to potentially exploit heap corruption via a crafted HTML page.

    • Обновитесь до 91.0.4472.77-0ubuntu0.18.04.1
  15. CVE-2021-30518

    Высокий · CVSS 8.8EPSS 1,34%Есть исправление

    CVE-2021-30518

    Heap buffer overflow in Reader Mode in Google Chrome prior to 90.0.4430.212 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page.

    • Обновитесь до 91.0.4472.77-0ubuntu0.18.04.1
  16. CVE-2021-30517

    Высокий · CVSS 8.8EPSS 2,52%Есть исправление

    CVE-2021-30517

    Type confusion in V8 in Google Chrome prior to 90.0.4430.212 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page.

    • Обновитесь до 91.0.4472.77-0ubuntu0.18.04.1
  17. CVE-2021-30516

    Высокий · CVSS 8.8EPSS 1,34%Есть исправление

    CVE-2021-30516

    Heap buffer overflow in History in Google Chrome prior to 90.0.4430.212 allowed a remote attacker who had compromised the renderer process to potentially exploit heap corruption via a crafted HTML page.

    • Обновитесь до 91.0.4472.77-0ubuntu0.18.04.1
  18. CVE-2021-30515

    Высокий · CVSS 8.8EPSS 1,2%Есть исправление

    CVE-2021-30515

    Use after free in File API in Google Chrome prior to 90.0.4430.212 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page.

    • Обновитесь до 91.0.4472.77-0ubuntu0.18.04.1
  19. CVE-2021-30514

    Высокий · CVSS 8.8EPSS 1,11%Есть исправление

    CVE-2021-30514

    Use after free in Autofill in Google Chrome prior to 90.0.4430.212 allowed a remote attacker who had compromised the renderer process to potentially exploit heap corruption via a crafted HTML page.

    • Обновитесь до 91.0.4472.77-0ubuntu0.18.04.1
  20. CVE-2021-30513

    Высокий · CVSS 8.8EPSS 2%Есть исправление

    CVE-2021-30513

    Type confusion in V8 in Google Chrome prior to 90.0.4430.212 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page.

    • Обновитесь до 91.0.4472.77-0ubuntu0.18.04.1

Проверьте свой сервер

Сопоставьте установленный стек и версии со свежими базами уязвимостей.

Проверьте свой сервер →