Page 178 of 2746 results (0.018 seconds)

CVSS: 6.5EPSS: 0%CPEs: 6EXPL: 0

CVE-2018-6049 – chromium-browser: ui spoof in permissions

https://notcve.org/view.php?id=CVE-2018-6049

01 Feb 2018 — Incorrect security UI in permissions prompt in Google Chrome prior to 64.0.3282.119 allowed a remote attacker to spoof the origin to which permission is granted via a crafted HTML page. Interfaz de usuario de seguridad incorrecta en el mensaje de permisos en Google Chrome en versiones anteriores a la 64.0.3282.119 permitía que un atacante remoto suplantase el origen al que se le otorgan los permisos mediante una página HTML manipulada. Chromium is an open-source web browser, powered by WebKit. This update u... • http://www.securityfocus.com/bid/102797 •

CVSS: 8.8EPSS: 1%CPEs: 6EXPL: 0

CVE-2018-6043 – chromium-browser: insufficient escaping with external url handlers

https://notcve.org/view.php?id=CVE-2018-6043

01 Feb 2018 — Insufficient data validation in External Protocol Handler in Google Chrome prior to 64.0.3282.119 allowed a remote attacker to potentially execute arbitrary programs on user machine via a crafted HTML page. Validación de datos insuficiente en External Protocol Handler en Google Chrome en versiones anteriores a la 64.0.3282.119 permitía que un atacante remoto ejecute programas arbitrarios en la máquina del usuario mediante una página HTML manipulada. Chromium is an open-source web browser, powered by WebKit.... • http://www.securityfocus.com/bid/102797 • CWE-20: Improper Input Validation •

CVSS: 6.5EPSS: 0%CPEs: 6EXPL: 0

CVE-2018-6047 – chromium-browser: cross origin url leak in webgl

https://notcve.org/view.php?id=CVE-2018-6047

01 Feb 2018 — Insufficient policy enforcement in WebGL in Google Chrome prior to 64.0.3282.119 allowed a remote attacker to potentially leak user redirect URL via a crafted HTML page. Aplicación de políticas insuficiente en WebGL en Google Chrome en versiones anteriores a la 64.0.3282.119 permitía que un atacante remoto filtrase URL de redirección del usuario mediante una página HTML manipulada. Chromium is an open-source web browser, powered by WebKit. This update upgrades Chromium to version 64.0.3282.119. Security Fix... • http://www.securityfocus.com/bid/102797 • CWE-20: Improper Input Validation •

CVSS: 6.5EPSS: 0%CPEs: 6EXPL: 0

CVE-2018-6040 – chromium-browser: content security policy bypass

https://notcve.org/view.php?id=CVE-2018-6040

01 Feb 2018 — Insufficient policy enforcement in Blink in Google Chrome prior to 64.0.3282.119 allowed a remote attacker to potentially bypass content security policy via a crafted HTML page. Aplicación de políticas insuficiente en Blink en Google Chrome en versiones anteriores a la 64.0.3282.119 permitía que un atacante remoto omitiese las políticas de seguridad del contenido mediante una página HTML manipulada. Chromium is an open-source web browser, powered by WebKit. This update upgrades Chromium to version 64.0.3282... • http://www.securityfocus.com/bid/102797 • CWE-732: Incorrect Permission Assignment for Critical Resource •

CVSS: 6.5EPSS: 0%CPEs: 6EXPL: 0

CVE-2018-6036 – chromium-browser: integer underflow in webassembly

https://notcve.org/view.php?id=CVE-2018-6036

01 Feb 2018 — Insufficient data validation in V8 in Google Chrome prior to 64.0.3282.119 allowed a remote attacker to potentially leak user data via a crafted HTML page. Validación de datos insuficiente en V8 en Google Chrome en versiones anteriores a la 64.0.3282.119 permitía que un atacante remoto filtrase datos de archivos locales de un usuario mediante una página HTML manipulada. Chromium is an open-source web browser, powered by WebKit. This update upgrades Chromium to version 64.0.3282.119. Security Fix: Multiple f... • http://www.securityfocus.com/bid/102797 • CWE-20: Improper Input Validation •

CVSS: 6.5EPSS: 0%CPEs: 6EXPL: 0

CVE-2018-6039 – chromium-browser: xss in devtools

https://notcve.org/view.php?id=CVE-2018-6039

01 Feb 2018 — Insufficient data validation in DevTools in Google Chrome prior to 64.0.3282.119 allowed a remote attacker to potentially leak user cross-origin data via a crafted Chrome Extension. Validación de datos insuficiente en DevTools en Google Chrome en versiones anteriores a la 64.0.3282.119 permitía que un atacante remoto filtrase datos cross-origin de un usuario mediante una extensión de Chrome manipulada. Chromium is an open-source web browser, powered by WebKit. This update upgrades Chromium to version 64.0.3... • http://www.securityfocus.com/bid/102797 • CWE-20: Improper Input Validation •

CVSS: 4.3EPSS: 0%CPEs: 6EXPL: 0

CVE-2018-6052 – chromium-browser: incomplete no-referrer policy implementation

https://notcve.org/view.php?id=CVE-2018-6052

01 Feb 2018 — Lack of support for a non standard no-referrer policy value in Blink in Google Chrome prior to 64.0.3282.119 allowed a remote attacker to obtain referrer details from a web page that had thought it had opted out of sending referrer data. La falta de soporte para un valor de política no-referrer no estándar, no-referrer en Blink en Google Chrome en versiones anteriores a la 64.0.3282.119 permitía que un atacante remoto obtuviese detalles de referrer de una página web que pensaba que había rechazado el envío ... • http://www.securityfocus.com/bid/102797 • CWE-200: Exposure of Sensitive Information to an Unauthorized Actor •

CVSS: 8.8EPSS: 0%CPEs: 6EXPL: 0

CVE-2018-6032 – chromium-browser: same origin bypass in shared worker

https://notcve.org/view.php?id=CVE-2018-6032

01 Feb 2018 — Insufficient policy enforcement in Blink in Google Chrome prior to 64.0.3282.119 allowed a remote attacker to potentially leak user cross-origin data via a crafted HTML page. Aplicación de políticas insuficiente en Blink en Google Chrome en versiones anteriores a la 64.0.3282.119 permitía que un atacante remoto filtrase los datos cross-origin del usuario mediante una página HTML manipulada. Chromium is an open-source web browser, powered by WebKit. This update upgrades Chromium to version 64.0.3282.119. Sec... • http://www.securityfocus.com/bid/102797 • CWE-20: Improper Input Validation •

CVSS: 8.1EPSS: 1%CPEs: 6EXPL: 0

CVE-2018-6034 – chromium-browser: integer overflow in blink

https://notcve.org/view.php?id=CVE-2018-6034

01 Feb 2018 — Insufficient data validation in WebGL in Google Chrome prior to 64.0.3282.119 allowed a remote attacker to perform an out of bounds memory read via a crafted HTML page. Validación de datos insuficiente en WebGL en Google Chrome en versiones anteriores a la 64.0.3282.119 permitía que un atacante remoto pudiese realizar una lectura de memoria fuera de límites mediante una página HTML manipulada. Chromium is an open-source web browser, powered by WebKit. This update upgrades Chromium to version 64.0.3282.119. ... • http://www.securityfocus.com/bid/102797 • CWE-125: Out-of-bounds Read •

CVSS: 8.8EPSS: 1%CPEs: 6EXPL: 0

CVE-2018-6031 – chromium-browser: use after free in pdfium

https://notcve.org/view.php?id=CVE-2018-6031

01 Feb 2018 — Use after free in PDFium in Google Chrome prior to 64.0.3282.119 allowed a remote attacker to potentially exploit heap corruption via a crafted PDF file. Uso de memoria previamente liberada en PDFium en Google Chrome en versiones anteriores a la 64.0.3282.119 permitía que un atacante remoto pudiese explotar una corrupción de memoria dinámica (heap) mediante un archivo PDF manipulado. Chromium is an open-source web browser, powered by WebKit. This update upgrades Chromium to version 64.0.3282.119. Security F... • http://www.securityfocus.com/bid/102797 • CWE-416: Use After Free •