CVE-2020-6394
- EPSS 1.07%
- Veröffentlicht 11.02.2020 15:15:12
- Zuletzt bearbeitet 21.11.2024 05:35:38
Insufficient policy enforcement in Blink in Google Chrome prior to 80.0.3987.87 allowed a remote attacker to bypass content security policy via a crafted HTML page.
CVE-2020-6395
- EPSS 1.48%
- Veröffentlicht 11.02.2020 15:15:12
- Zuletzt bearbeitet 21.11.2024 05:35:38
Out of bounds read in JavaScript in Google Chrome prior to 80.0.3987.87 allowed a remote attacker to obtain potentially sensitive information from process memory via a crafted HTML page.
CVE-2020-6378
- EPSS 0.65%
- Veröffentlicht 11.02.2020 15:15:11
- Zuletzt bearbeitet 21.11.2024 05:35:36
Use after free in speech in Google Chrome prior to 79.0.3945.130 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page.
CVE-2020-6379
- EPSS 0.65%
- Veröffentlicht 11.02.2020 15:15:11
- Zuletzt bearbeitet 21.11.2024 05:35:36
Use after free in V8 in Google Chrome prior to 79.0.3945.130 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page.
CVE-2010-3917
- EPSS 0.47%
- Veröffentlicht 06.02.2020 13:15:10
- Zuletzt bearbeitet 21.11.2024 01:19:53
Google Chrome before 3.0 does not properly handle XML documents, which allows remote attackers to obtain sensitive information via a crafted web site.
CVE-2019-13722
- EPSS 0.36%
- Veröffentlicht 14.01.2020 19:15:13
- Zuletzt bearbeitet 21.11.2024 04:25:34
Inappropriate implementation in WebRTC in Google Chrome prior to 79.0.3945.79 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page.
CVE-2020-6377
- EPSS 2.9%
- Veröffentlicht 10.01.2020 22:15:12
- Zuletzt bearbeitet 21.11.2024 05:35:36
Use after free in audio in Google Chrome prior to 79.0.3945.117 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page.
CVE-2019-13767
- EPSS 7.42%
- Veröffentlicht 10.01.2020 22:15:11
- Zuletzt bearbeitet 21.11.2024 04:25:41
Use after free in media picker in Google Chrome prior to 79.0.3945.88 allowed a remote attacker who had compromised the renderer process to potentially exploit heap corruption via a crafted HTML page.
CVE-2019-13765
- EPSS 0.43%
- Veröffentlicht 03.01.2020 23:15:12
- Zuletzt bearbeitet 21.11.2024 04:25:40
Use-after-free in content delivery manager in Google Chrome prior to 78.0.3904.70 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page.
CVE-2019-13766
- EPSS 0.46%
- Veröffentlicht 03.01.2020 23:15:12
- Zuletzt bearbeitet 21.11.2024 04:25:41
Use-after-free in accessibility in Google Chrome prior to 77.0.3865.75 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page.