Chrome

chrome

Vendor: Google • 5,450 CVEs

CVEs (5,450)

CVE VENDORS PRODUCTS UPDATED PUBLISHED CVSS
CVE-2017-5048 1Google 1Chrome May 13, 2026 Apr 25, 2017 N/A· v4 8.8 HIGH· v3 6.8 MEDIUM· v2 An integer overflow in FFmpeg in Google Chrome prior to 57.0.2987.98 for Mac, Windows, and Linux and 57.0.2987.108 for Android allowed a remote attacker to perform an out of bounds memory write via a crafted video file,...Show more An integer overflow in FFmpeg in Google Chrome prior to 57.0.2987.98 for Mac, Windows, and Linux and 57.0.2987.108 for Android allowed a remote attacker to perform an out of bounds memory write via a crafted video file, related to ChunkDemuxer.Show less
CVE-2017-5047 1Google 1Chrome May 13, 2026 Apr 25, 2017 N/A· v4 8.8 HIGH· v3 6.8 MEDIUM· v2 An integer overflow in FFmpeg in Google Chrome prior to 57.0.2987.98 for Mac, Windows, and Linux and 57.0.2987.108 for Android allowed a remote attacker to perform an out of bounds memory write via a crafted video file,...Show more An integer overflow in FFmpeg in Google Chrome prior to 57.0.2987.98 for Mac, Windows, and Linux and 57.0.2987.108 for Android allowed a remote attacker to perform an out of bounds memory write via a crafted video file, related to ChunkDemuxer.Show less
CVE-2017-5046 3Debian GoogleRedhat 5Chrome Debian LinuxEnterprise Linux Desktop+2 more May 13, 2026 Apr 24, 2017 N/A· v4 4.3 MEDIUM· v3 4.3 MEDIUM· v2 V8 in Google Chrome prior to 57.0.2987.98 for Mac, Windows, and Linux and 57.0.2987.108 for Android had insufficient policy enforcement, which allowed a remote attacker to spoof the location object via a crafted HTML pag...Show more V8 in Google Chrome prior to 57.0.2987.98 for Mac, Windows, and Linux and 57.0.2987.108 for Android had insufficient policy enforcement, which allowed a remote attacker to spoof the location object via a crafted HTML page, related to Blink information disclosure.Show less
CVE-2017-5045 3Debian GoogleRedhat 5Chrome Debian LinuxEnterprise Linux Desktop+2 more May 13, 2026 Apr 24, 2017 N/A· v4 6.1 MEDIUM· v3 4.3 MEDIUM· v2 XSS Auditor in Google Chrome prior to 57.0.2987.98 for Mac, Windows, and Linux and 57.0.2987.108 for Android allowed detection of a blocked iframe load, which allowed a remote attacker to brute force JavaScript variables...Show more XSS Auditor in Google Chrome prior to 57.0.2987.98 for Mac, Windows, and Linux and 57.0.2987.108 for Android allowed detection of a blocked iframe load, which allowed a remote attacker to brute force JavaScript variables via a crafted HTML page.Show less
CVE-2017-5044 3Debian GoogleRedhat 5Chrome Debian LinuxEnterprise Linux Desktop+2 more May 13, 2026 Apr 24, 2017 N/A· v4 6.3 MEDIUM· v3 6.8 MEDIUM· v2 Heap buffer overflow in filter processing in Skia in Google Chrome prior to 57.0.2987.98 for Mac, Windows, and Linux and 57.0.2987.108 for Android allowed a remote attacker to perform an out of bounds memory read via a c...Show more Heap buffer overflow in filter processing in Skia in Google Chrome prior to 57.0.2987.98 for Mac, Windows, and Linux and 57.0.2987.108 for Android allowed a remote attacker to perform an out of bounds memory read via a crafted HTML page.Show less
CVE-2017-5043 3Debian GoogleRedhat 5Chrome Debian LinuxEnterprise Linux Desktop+2 more May 13, 2026 Apr 24, 2017 N/A· v4 8.8 HIGH· v3 6.8 MEDIUM· v2 Chrome Apps in Google Chrome prior to 57.0.2987.98 for Linux, Windows, and Mac had a use after free bug in GuestView, which allowed a remote attacker to perform an out of bounds memory read via a crafted Chrome extension...Show more Chrome Apps in Google Chrome prior to 57.0.2987.98 for Linux, Windows, and Mac had a use after free bug in GuestView, which allowed a remote attacker to perform an out of bounds memory read via a crafted Chrome extension.Show less
CVE-2017-5042 3Debian GoogleRedhat 5Chrome Debian LinuxEnterprise Linux Desktop+2 more May 13, 2026 Apr 24, 2017 N/A· v4 5.7 MEDIUM· v3 3.3 LOW· v2 Cast in Google Chrome prior to 57.0.2987.98 for Mac, Windows, and Linux and 57.0.2987.108 for Android sent cookies to sites discovered via SSDP, which allowed an attacker on the local network segment to initiate connecti...Show more Cast in Google Chrome prior to 57.0.2987.98 for Mac, Windows, and Linux and 57.0.2987.108 for Android sent cookies to sites discovered via SSDP, which allowed an attacker on the local network segment to initiate connections to arbitrary URLs and observe any plaintext cookies sent.Show less
CVE-2017-5041 1Google 1Chrome May 13, 2026 Apr 24, 2017 N/A· v4 4.3 MEDIUM· v3 4.3 MEDIUM· v2 Google Chrome prior to 57.0.2987.100 incorrectly handled back-forward navigation, which allowed a remote attacker to display incorrect information for a site via a crafted HTML page.
CVE-2017-5040 3Debian GoogleRedhat 5Chrome Debian LinuxEnterprise Linux Desktop+2 more May 13, 2026 Apr 24, 2017 N/A· v4 4.3 MEDIUM· v3 4.3 MEDIUM· v2 V8 in Google Chrome prior to 57.0.2987.98 for Mac, Windows, and Linux and 57.0.2987.108 for Android was missing a neutering check, which allowed a remote attacker to read values in memory via a crafted HTML page.
CVE-2017-5039 3Debian GoogleRedhat 5Chrome Debian LinuxEnterprise Linux Desktop+2 more May 13, 2026 Apr 24, 2017 N/A· v4 7.8 HIGH· v3 6.8 MEDIUM· v2 A use after free in PDFium in Google Chrome prior to 57.0.2987.98 for Mac, Windows, and Linux and 57.0.2987.108 for Android allowed a remote attacker to potentially exploit heap corruption via a crafted PDF file.
CVE-2017-5038 3Debian GoogleRedhat 5Chrome Debian LinuxEnterprise Linux Desktop+2 more May 13, 2026 Apr 24, 2017 N/A· v4 6.3 MEDIUM· v3 6.8 MEDIUM· v2 Chrome Apps in Google Chrome prior to 57.0.2987.98 for Linux, Windows, and Mac had a use after free bug in GuestView, which allowed a remote attacker to perform an out of bounds memory read via a crafted Chrome extension...Show more Chrome Apps in Google Chrome prior to 57.0.2987.98 for Linux, Windows, and Mac had a use after free bug in GuestView, which allowed a remote attacker to perform an out of bounds memory read via a crafted Chrome extension.Show less
CVE-2017-5037 3Debian GoogleRedhat 5Chrome Debian LinuxEnterprise Linux Desktop+2 more May 13, 2026 Apr 24, 2017 N/A· v4 7.8 HIGH· v3 6.8 MEDIUM· v2 An integer overflow in FFmpeg in Google Chrome prior to 57.0.2987.98 for Mac, Windows, and Linux and 57.0.2987.108 for Android allowed a remote attacker to perform an out of bounds memory write via a crafted video file,...Show more An integer overflow in FFmpeg in Google Chrome prior to 57.0.2987.98 for Mac, Windows, and Linux and 57.0.2987.108 for Android allowed a remote attacker to perform an out of bounds memory write via a crafted video file, related to ChunkDemuxer.Show less
CVE-2017-5036 3Debian GoogleRedhat 5Chrome Debian LinuxEnterprise Linux Desktop+2 more May 13, 2026 Apr 24, 2017 N/A· v4 7.8 HIGH· v3 6.8 MEDIUM· v2 A use after free in PDFium in Google Chrome prior to 57.0.2987.98 for Mac, Windows, and Linux and 57.0.2987.108 for Android allowed a remote attacker to have an unspecified impact via a crafted PDF file.
CVE-2017-5035 3Debian GoogleRedhat 5Chrome Debian LinuxEnterprise Linux Desktop+2 more May 13, 2026 Apr 24, 2017 N/A· v4 8.1 HIGH· v3 6.8 MEDIUM· v2 Google Chrome prior to 57.0.2987.98 for Windows and Mac had a race condition, which could cause Chrome to display incorrect certificate information for a site.
CVE-2017-5034 1Google 1Chrome May 13, 2026 Apr 24, 2017 N/A· v4 8.8 HIGH· v3 6.8 MEDIUM· v2 A use after free in PDFium in Google Chrome prior to 57.0.2987.98 for Linux and Windows allowed a remote attacker to perform an out of bounds memory read via a crafted PDF file.
CVE-2017-5033 3Debian GoogleRedhat 5Chrome Debian LinuxEnterprise Linux Desktop+2 more May 13, 2026 Apr 24, 2017 N/A· v4 4.3 MEDIUM· v3 4.3 MEDIUM· v2 Blink in Google Chrome prior to 57.0.2987.98 for Mac, Windows, and Linux and 57.0.2987.108 for Android failed to correctly propagate CSP restrictions to local scheme pages, which allowed a remote attacker to bypass conte...Show more Blink in Google Chrome prior to 57.0.2987.98 for Mac, Windows, and Linux and 57.0.2987.108 for Android failed to correctly propagate CSP restrictions to local scheme pages, which allowed a remote attacker to bypass content security policy via a crafted HTML page, related to the unsafe-inline keyword.Show less
CVE-2017-5032 1Google 1Chrome May 13, 2026 Apr 24, 2017 N/A· v4 8.8 HIGH· v3 6.8 MEDIUM· v2 PDFium in Google Chrome prior to 57.0.2987.98 for Windows could be made to increment off the end of a buffer, which allowed a remote attacker to potentially exploit heap corruption via a crafted PDF file.
CVE-2017-5031 1Google 1Chrome May 13, 2026 Apr 24, 2017 N/A· v4 8.8 HIGH· v3 6.8 MEDIUM· v2 A use after free in ANGLE in Google Chrome prior to 57.0.2987.98 for Windows allowed a remote attacker to perform an out of bounds memory read via a crafted HTML page.
CVE-2017-5030 3Debian GoogleRedhat 5Chrome Debian LinuxEnterprise Linux Desktop+2 more Apr 21, 2026 Apr 24, 2017 N/A· v4 8.8 HIGH· v3 6.8 MEDIUM· v2 Incorrect handling of complex species in V8 in Google Chrome prior to 57.0.2987.98 for Linux, Windows, and Mac and 57.0.2987.108 for Android allowed a remote attacker to execute arbitrary code via a crafted HTML page.
CVE-2017-5029 4Debian GoogleRedhat+1 more 6Chrome Debian LinuxEnterprise Linux Desktop+3 more May 13, 2026 Apr 24, 2017 N/A· v4 8.8 HIGH· v3 6.8 MEDIUM· v2 The xsltAddTextString function in transform.c in libxslt 1.1.29, as used in Blink in Google Chrome prior to 57.0.2987.98 for Mac, Windows, and Linux and 57.0.2987.108 for Android, lacked a check for integer overflow duri...Show more The xsltAddTextString function in transform.c in libxslt 1.1.29, as used in Blink in Google Chrome prior to 57.0.2987.98 for Mac, Windows, and Linux and 57.0.2987.108 for Android, lacked a check for integer overflow during a size calculation, which allowed a remote attacker to perform an out of bounds memory write via a crafted HTML page.Show less

Previous 1...200201202...273 Next