CVSS: 8.8EPSS: 0%CPEs: 1EXPL: 0CVE-2018-17478 – chromium-browser: Out of bounds memory access in V8
https://notcve.org/view.php?id=CVE-2018-17478
20 Nov 2018 — Incorrect array position calculations in V8 in Google Chrome prior to 70.0.3538.102 allowed a remote attacker to potentially exploit object corruption via a crafted HTML page. Los cálculos incorrectos de la posición de la matriz en V8 en Google Chrome antes de 70.0.3538.102 permitieron a un atacante remoto explotar la corrupción de objetos a través de una página HTML diseñada. Chromium is an open-source web browser, powered by WebKit. This update upgrades Chromium to version 70.0.3538.110. Issues addressed ... • https://chromereleases.googleblog.com/2018/11/stable-channel-update-for-desktop.html • CWE-129: Improper Validation of Array Index •
CVSS: 9.6EPSS: 0%CPEs: 6EXPL: 0CVE-2018-17472 – Gentoo Linux Security Advisory 201811-10
https://notcve.org/view.php?id=CVE-2018-17472
14 Nov 2018 — Incorrect handling of googlechrome:// URL scheme on iOS in Intents in Google Chrome prior to 70.0.3538.67 allowed a remote attacker to escape the