Browse CVEs

MEDIUM 6.5 CVE-2020-6483 Insufficient policy enforcement in payments in Google Chrome prior to 83.0.4103.61 allowed a remote attacker to bypass navigation restrictions via a … Chrome 83.0.4103.61+ Fix from $1,6002020-05-21 MEDIUM 6.5 CVE-2020-6484 Insufficient data validation in ChromeDriver in Google Chrome prior to 83.0.4103.61 allowed a remote attacker to bypass navigation restrictions via a… Chrome 83.0.4103.61+ Fix from $1,6002020-05-21 MEDIUM 6.5 CVE-2020-6485 Insufficient data validation in media router in Google Chrome prior to 83.0.4103.61 allowed a remote attacker who had compromised the renderer proces… Chrome 83.0.4103.61+ Fix from $1,6002020-05-21 MEDIUM 6.5 CVE-2020-6486 Insufficient policy enforcement in navigations in Google Chrome prior to 83.0.4103.61 allowed a remote attacker to bypass navigation restrictions via… Chrome 83.0.4103.61+ Fix from $1,6002020-05-21 CRITICAL 9.6 CVE-2020-6471 Insufficient policy enforcement in developer tools in Google Chrome prior to 83.0.4103.61 allowed an attacker who convinced a user to install a malic… Chrome 83.0.4103.61+ Fix from $2,3002020-05-21 HIGH 8.8 CVE-2020-6474 Use after free in Blink in Google Chrome prior to 83.0.4103.61 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML pa… Chrome 83.0.4103.61+ Fix from $1,9502020-05-21 HIGH 7.8 CVE-2020-6477 Inappropriate implementation in installer in Google Chrome on OS X prior to 83.0.4103.61 allowed a local attacker to perform privilege escalation via… Chrome 83.0.4103.61+ Fix from $1,9502020-05-21 MEDIUM 6.5 CVE-2020-6472 Insufficient policy enforcement in developer tools in Google Chrome prior to 83.0.4103.61 allowed an attacker who convinced a user to install a malic… Chrome 83.0.4103.61+ Fix from $1,6002020-05-21 MEDIUM 6.5 CVE-2020-6473 Insufficient policy enforcement in Blink in Google Chrome prior to 83.0.4103.61 allowed a remote attacker to obtain potentially sensitive information… Chrome 83.0.4103.61+ Fix from $1,6002020-05-21 MEDIUM 6.5 CVE-2020-6475 Incorrect implementation in full screen in Google Chrome prior to 83.0.4103.61 allowed a remote attacker to spoof security UI via a crafted HTML page. Chrome 83.0.4103.61+ Fix from $1,6002020-05-21 MEDIUM 6.5 CVE-2020-6476 Insufficient policy enforcement in tab strip in Google Chrome prior to 83.0.4103.61 allowed an attacker who convinced a user to install a malicious e… Chrome 83.0.4103.61+ Fix from $1,6002020-05-21 MEDIUM 6.5 CVE-2020-6478 Inappropriate implementation in full screen in Google Chrome prior to 83.0.4103.61 allowed a remote attacker to spoof security UI via a crafted HTML … Chrome 83.0.4103.61+ Fix from $1,6002020-05-21 CRITICAL 9.6 CVE-2020-6461 Use after free in storage in Google Chrome prior to 81.0.4044.129 allowed a remote attacker who had compromised the renderer process to potentially p… Chrome 81.0.4044.129+ Fix from $2,3002020-05-21 CRITICAL 9.6 CVE-2020-6462 Use after free in task scheduling in Google Chrome prior to 81.0.4044.129 allowed a remote attacker who had compromised the renderer process to poten… Chrome 81.0.4044.129+ Fix from $2,3002020-05-21 CRITICAL 9.6 CVE-2020-6465 Use after free in reader mode in Google Chrome on Android prior to 83.0.4103.61 allowed a remote attacker who had compromised the renderer process to… Chrome 83.0.4103.61+ Fix from $2,3002020-05-21 CRITICAL 9.6 CVE-2020-6466 Use after free in media in Google Chrome prior to 83.0.4103.61 allowed a remote attacker who had compromised the renderer process to potentially perf… Chrome 83.0.4103.61+ Fix from $2,3002020-05-21 CRITICAL 9.6 CVE-2020-6469 Insufficient policy enforcement in developer tools in Google Chrome prior to 83.0.4103.61 allowed an attacker who convinced a user to install a malic… Chrome 83.0.4103.61+ Fix from $2,3002020-05-21 HIGH 8.8 CVE-2020-6463 Use after free in ANGLE in Google Chrome prior to 81.0.4044.122 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML p… Chrome 81.0.4044.122+ Fix from $1,9502020-05-21 HIGH 8.8 CVE-2020-6464 Type confusion in Blink in Google Chrome prior to 81.0.4044.138 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML p… Chrome 81.0.4044.138+ Fix from $1,9502020-05-21 HIGH 8.8 CVE-2020-6467 Use after free in WebRTC in Google Chrome prior to 83.0.4103.61 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML p… Chrome 83.0.4103.61+ Fix from $1,9502020-05-21 HIGH 8.8 CVE-2020-6468EPSS 6% Type confusion in V8 in Google Chrome prior to 83.0.4103.61 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. Chrome 83.0.4103.61+ Fix from $1,9502020-05-21 MEDIUM 6.5 CVE-2020-6460 Insufficient data validation in URL formatting in Google Chrome prior to 81.0.4044.122 allowed a remote attacker to perform domain spoofing via a cra… Chrome 81.0.4044.122+ Fix from $1,6002020-05-21 MEDIUM 6.1 CVE-2020-6470 Insufficient validation of untrusted input in clipboard in Google Chrome prior to 83.0.4103.61 allowed a local attacker to inject arbitrary scripts o… Chrome 83.0.4103.61+ Fix from $1,6002020-05-21 CRITICAL 9.6 CVE-2020-6457 Use after free in speech recognizer in Google Chrome prior to 81.0.4044.113 allowed a remote attacker to potentially perform a sandbox escape via a c… Chrome 81.0.4044.113+ Fix from $2,3002020-05-21 HIGH 8.8 CVE-2020-6458 Out of bounds read and write in PDFium in Google Chrome prior to 81.0.4044.122 allowed a remote attacker to potentially exploit heap corruption via a… Chrome 81.0.4044.122+ Fix from $1,9502020-05-21 HIGH 8.8 CVE-2020-6459 Use after free in payments in Google Chrome prior to 81.0.4044.122 allowed a remote attacker to potentially exploit heap corruption via a crafted HTM… Chrome 81.0.4044.122+ Fix from $1,9502020-05-21 CRITICAL 9.8 CVE-2020-0103 In a2dp_aac_decoder_cleanup of a2dp_aac_decoder.cc, there is a possible invalid free due to memory corruption. This could lead to remote code executi… Android Patch available Fix from $2,3002020-05-14 CRITICAL 9.8 CVE-2020-0221 Airbrush FW's scratch memory allocator is susceptible to numeric overflow. When the overflow occurs, the next allocation could potentially return a p… Android Mitigation only Fix from $2,3002020-05-14 HIGH 7.8 CVE-2020-0097 In various methods of PackageManagerService.java, there is a possible permission bypass due to a missing condition for system apps. This could lead t… Android Patch available Fix from $1,9502020-05-14 HIGH 7.8 CVE-2020-0098 In navigateUpToLocked of ActivityStack.java, there is a possible permission bypass due to a confused deputy. This could lead to local escalation of p… Android Patch available Fix from $1,9502020-05-14