rpm package
suse/chromium&distro=SUSE Package Hub 15
pkg:rpm/suse/chromium&distro=SUSE%20Package%20Hub%2015
Vulnerabilities (210)
| CVE | Sev | CVSS | KEV | Affected versions | Fixed in | Published | Description |
|---|---|---|---|---|---|---|---|
| CVE-2019-5797 | — | < 75.0.3770.90-bp150.213.3 | 75.0.3770.90-bp150.213.3 | Sep 29, 2022 | Double free in DOMStorage in Google Chrome prior to 73.0.3683.75 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. | ||
| CVE-2019-5815 | — | < 75.0.3770.90-bp150.213.3 | 75.0.3770.90-bp150.213.3 | Dec 11, 2019 | Type confusion in xsltNumberFormatGetMultipleLevel prior to libxslt 1.1.33 could allow attackers to potentially exploit heap corruption via crafted XML data. | ||
| CVE-2019-13764 | — | < 79.0.3945.79-bp150.252.1 | 79.0.3945.79-bp150.252.1 | Dec 10, 2019 | Type confusion in JavaScript in Google Chrome prior to 79.0.3945.79 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. | ||
| CVE-2019-13763 | — | < 79.0.3945.79-bp150.252.1 | 79.0.3945.79-bp150.252.1 | Dec 10, 2019 | Insufficient policy enforcement in payments in Google Chrome prior to 79.0.3945.79 allowed a remote attacker who had compromised the renderer process to leak cross-origin data via a crafted HTML page. | ||
| CVE-2019-13762 | — | < 79.0.3945.79-bp150.252.1 | 79.0.3945.79-bp150.252.1 | Dec 10, 2019 | Insufficient policy enforcement in downloads in Google Chrome on Windows prior to 79.0.3945.79 allowed a local attacker to spoof downloaded files via local code. | ||
| CVE-2019-13761 | — | < 79.0.3945.79-bp150.252.1 | 79.0.3945.79-bp150.252.1 | Dec 10, 2019 | Incorrect security UI in Omnibox in Google Chrome prior to 79.0.3945.79 allowed a remote attacker to perform domain spoofing via IDN homographs via a crafted domain name. | ||
| CVE-2019-13759 | — | < 79.0.3945.79-bp150.252.1 | 79.0.3945.79-bp150.252.1 | Dec 10, 2019 | Incorrect security UI in interstitials in Google Chrome prior to 79.0.3945.79 allowed a remote attacker to perform domain spoofing via a crafted HTML page. | ||
| CVE-2019-13758 | — | < 79.0.3945.79-bp150.252.1 | 79.0.3945.79-bp150.252.1 | Dec 10, 2019 | Insufficient policy enforcement in navigation in Google Chrome on Android prior to 79.0.3945.79 allowed a remote attacker to bypass navigation restrictions via a crafted HTML page. | ||
| CVE-2019-13757 | — | < 79.0.3945.79-bp150.252.1 | 79.0.3945.79-bp150.252.1 | Dec 10, 2019 | Incorrect security UI in Omnibox in Google Chrome prior to 79.0.3945.79 allowed a remote attacker to perform domain spoofing via IDN homographs via a crafted domain name. | ||
| CVE-2019-13756 | — | < 79.0.3945.79-bp150.252.1 | 79.0.3945.79-bp150.252.1 | Dec 10, 2019 | Incorrect security UI in printing in Google Chrome prior to 79.0.3945.79 allowed a remote attacker to perform domain spoofing via a crafted HTML page. | ||
| CVE-2019-13755 | — | < 79.0.3945.79-bp150.252.1 | 79.0.3945.79-bp150.252.1 | Dec 10, 2019 | Insufficient policy enforcement in extensions in Google Chrome prior to 79.0.3945.79 allowed a remote attacker to disable extensions via a crafted HTML page. | ||
| CVE-2019-13754 | — | < 79.0.3945.79-bp150.252.1 | 79.0.3945.79-bp150.252.1 | Dec 10, 2019 | Insufficient policy enforcement in extensions in Google Chrome prior to 79.0.3945.79 allowed a remote attacker to bypass navigation restrictions via a crafted HTML page. | ||
| CVE-2019-13753 | — | < 79.0.3945.79-bp150.252.1 | 79.0.3945.79-bp150.252.1 | Dec 10, 2019 | Out of bounds read in SQLite in Google Chrome prior to 79.0.3945.79 allowed a remote attacker to obtain potentially sensitive information from process memory via a crafted HTML page. | ||
| CVE-2019-13752 | — | < 79.0.3945.79-bp150.252.1 | 79.0.3945.79-bp150.252.1 | Dec 10, 2019 | Out of bounds read in SQLite in Google Chrome prior to 79.0.3945.79 allowed a remote attacker to obtain potentially sensitive information from process memory via a crafted HTML page. | ||
| CVE-2019-13751 | — | < 79.0.3945.79-bp150.252.1 | 79.0.3945.79-bp150.252.1 | Dec 10, 2019 | Uninitialized data in SQLite in Google Chrome prior to 79.0.3945.79 allowed a remote attacker to obtain potentially sensitive information from process memory via a crafted HTML page. | ||
| CVE-2019-13750 | — | < 79.0.3945.79-bp150.252.1 | 79.0.3945.79-bp150.252.1 | Dec 10, 2019 | Insufficient data validation in SQLite in Google Chrome prior to 79.0.3945.79 allowed a remote attacker to bypass defense-in-depth measures via a crafted HTML page. | ||
| CVE-2019-13749 | — | < 79.0.3945.79-bp150.252.1 | 79.0.3945.79-bp150.252.1 | Dec 10, 2019 | Incorrect security UI in Omnibox in Google Chrome on iOS prior to 79.0.3945.79 allowed a remote attacker to spoof the contents of the Omnibox (URL bar) via a crafted HTML page. | ||
| CVE-2019-13748 | — | < 79.0.3945.79-bp150.252.1 | 79.0.3945.79-bp150.252.1 | Dec 10, 2019 | Insufficient policy enforcement in developer tools in Google Chrome prior to 79.0.3945.79 allowed a local attacker to obtain potentially sensitive information from process memory via a crafted HTML page. | ||
| CVE-2019-13747 | — | < 79.0.3945.79-bp150.252.1 | 79.0.3945.79-bp150.252.1 | Dec 10, 2019 | Uninitialized data in rendering in Google Chrome on Android prior to 79.0.3945.79 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. | ||
| CVE-2019-13746 | — | < 79.0.3945.79-bp150.252.1 | 79.0.3945.79-bp150.252.1 | Dec 10, 2019 | Insufficient policy enforcement in Omnibox in Google Chrome prior to 79.0.3945.79 allowed a remote attacker to spoof the contents of the Omnibox (URL bar) via a crafted HTML page. |
- CVE-2019-5797Sep 29, 2022affected < 75.0.3770.90-bp150.213.3fixed 75.0.3770.90-bp150.213.3
Double free in DOMStorage in Google Chrome prior to 73.0.3683.75 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page.
- CVE-2019-5815Dec 11, 2019affected < 75.0.3770.90-bp150.213.3fixed 75.0.3770.90-bp150.213.3
Type confusion in xsltNumberFormatGetMultipleLevel prior to libxslt 1.1.33 could allow attackers to potentially exploit heap corruption via crafted XML data.
- CVE-2019-13764Dec 10, 2019affected < 79.0.3945.79-bp150.252.1fixed 79.0.3945.79-bp150.252.1
Type confusion in JavaScript in Google Chrome prior to 79.0.3945.79 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page.
- CVE-2019-13763Dec 10, 2019affected < 79.0.3945.79-bp150.252.1fixed 79.0.3945.79-bp150.252.1
Insufficient policy enforcement in payments in Google Chrome prior to 79.0.3945.79 allowed a remote attacker who had compromised the renderer process to leak cross-origin data via a crafted HTML page.
- CVE-2019-13762Dec 10, 2019affected < 79.0.3945.79-bp150.252.1fixed 79.0.3945.79-bp150.252.1
Insufficient policy enforcement in downloads in Google Chrome on Windows prior to 79.0.3945.79 allowed a local attacker to spoof downloaded files via local code.
- CVE-2019-13761Dec 10, 2019affected < 79.0.3945.79-bp150.252.1fixed 79.0.3945.79-bp150.252.1
Incorrect security UI in Omnibox in Google Chrome prior to 79.0.3945.79 allowed a remote attacker to perform domain spoofing via IDN homographs via a crafted domain name.
- CVE-2019-13759Dec 10, 2019affected < 79.0.3945.79-bp150.252.1fixed 79.0.3945.79-bp150.252.1
Incorrect security UI in interstitials in Google Chrome prior to 79.0.3945.79 allowed a remote attacker to perform domain spoofing via a crafted HTML page.
- CVE-2019-13758Dec 10, 2019affected < 79.0.3945.79-bp150.252.1fixed 79.0.3945.79-bp150.252.1
Insufficient policy enforcement in navigation in Google Chrome on Android prior to 79.0.3945.79 allowed a remote attacker to bypass navigation restrictions via a crafted HTML page.
- CVE-2019-13757Dec 10, 2019affected < 79.0.3945.79-bp150.252.1fixed 79.0.3945.79-bp150.252.1
Incorrect security UI in Omnibox in Google Chrome prior to 79.0.3945.79 allowed a remote attacker to perform domain spoofing via IDN homographs via a crafted domain name.
- CVE-2019-13756Dec 10, 2019affected < 79.0.3945.79-bp150.252.1fixed 79.0.3945.79-bp150.252.1
Incorrect security UI in printing in Google Chrome prior to 79.0.3945.79 allowed a remote attacker to perform domain spoofing via a crafted HTML page.
- CVE-2019-13755Dec 10, 2019affected < 79.0.3945.79-bp150.252.1fixed 79.0.3945.79-bp150.252.1
Insufficient policy enforcement in extensions in Google Chrome prior to 79.0.3945.79 allowed a remote attacker to disable extensions via a crafted HTML page.
- CVE-2019-13754Dec 10, 2019affected < 79.0.3945.79-bp150.252.1fixed 79.0.3945.79-bp150.252.1
Insufficient policy enforcement in extensions in Google Chrome prior to 79.0.3945.79 allowed a remote attacker to bypass navigation restrictions via a crafted HTML page.
- CVE-2019-13753Dec 10, 2019affected < 79.0.3945.79-bp150.252.1fixed 79.0.3945.79-bp150.252.1
Out of bounds read in SQLite in Google Chrome prior to 79.0.3945.79 allowed a remote attacker to obtain potentially sensitive information from process memory via a crafted HTML page.
- CVE-2019-13752Dec 10, 2019affected < 79.0.3945.79-bp150.252.1fixed 79.0.3945.79-bp150.252.1
Out of bounds read in SQLite in Google Chrome prior to 79.0.3945.79 allowed a remote attacker to obtain potentially sensitive information from process memory via a crafted HTML page.
- CVE-2019-13751Dec 10, 2019affected < 79.0.3945.79-bp150.252.1fixed 79.0.3945.79-bp150.252.1
Uninitialized data in SQLite in Google Chrome prior to 79.0.3945.79 allowed a remote attacker to obtain potentially sensitive information from process memory via a crafted HTML page.
- CVE-2019-13750Dec 10, 2019affected < 79.0.3945.79-bp150.252.1fixed 79.0.3945.79-bp150.252.1
Insufficient data validation in SQLite in Google Chrome prior to 79.0.3945.79 allowed a remote attacker to bypass defense-in-depth measures via a crafted HTML page.
- CVE-2019-13749Dec 10, 2019affected < 79.0.3945.79-bp150.252.1fixed 79.0.3945.79-bp150.252.1
Incorrect security UI in Omnibox in Google Chrome on iOS prior to 79.0.3945.79 allowed a remote attacker to spoof the contents of the Omnibox (URL bar) via a crafted HTML page.
- CVE-2019-13748Dec 10, 2019affected < 79.0.3945.79-bp150.252.1fixed 79.0.3945.79-bp150.252.1
Insufficient policy enforcement in developer tools in Google Chrome prior to 79.0.3945.79 allowed a local attacker to obtain potentially sensitive information from process memory via a crafted HTML page.
- CVE-2019-13747Dec 10, 2019affected < 79.0.3945.79-bp150.252.1fixed 79.0.3945.79-bp150.252.1
Uninitialized data in rendering in Google Chrome on Android prior to 79.0.3945.79 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page.
- CVE-2019-13746Dec 10, 2019affected < 79.0.3945.79-bp150.252.1fixed 79.0.3945.79-bp150.252.1
Insufficient policy enforcement in Omnibox in Google Chrome prior to 79.0.3945.79 allowed a remote attacker to spoof the contents of the Omnibox (URL bar) via a crafted HTML page.
Page 1 of 11