Page 181 of 2778 results (0.007 seconds)

CVSS: 8.8EPSS: 1%CPEs: 5EXPL: 0

CVE-2017-15410 – chromium-browser: use after free in pdfium

https://notcve.org/view.php?id=CVE-2017-15410

07 Dec 2017 — Use after free in PDFium in Google Chrome prior to 63.0.3239.84 allowed a remote attacker to potentially exploit heap corruption via a crafted PDF file. Uso de memoria previamente liberada en PDFium en Google Chrome en versiones anteriores a la 63.0.3239.84 permitía que un atacante remoto pudiese explotar una corrupción de memoria dinámica (heap) mediante un archivo PDF manipulado. Chromium is an open-source web browser, powered by WebKit. This update upgrades Chromium to version 63.0.3239.84. Security Fix:... • https://access.redhat.com/errata/RHSA-2017:3401 • CWE-416: Use After Free •

CVSS: 8.8EPSS: 1%CPEs: 5EXPL: 0

CVE-2017-15411 – chromium-browser: use after free in pdfium

https://notcve.org/view.php?id=CVE-2017-15411

07 Dec 2017 — Use after free in PDFium in Google Chrome prior to 63.0.3239.84 allowed a remote attacker to potentially exploit heap corruption via a crafted PDF file. Uso de memoria previamente liberada en PDFium en Google Chrome en versiones anteriores a la 63.0.3239.84 permitía que un atacante remoto pudiese explotar una corrupción de memoria dinámica (heap) mediante un archivo PDF manipulado. Chromium is an open-source web browser, powered by WebKit. This update upgrades Chromium to version 63.0.3239.84. Security Fix:... • https://access.redhat.com/errata/RHSA-2017:3401 • CWE-416: Use After Free •

CVSS: 8.8EPSS: 2%CPEs: 8EXPL: 0

CVE-2017-15412 – libxml2: Use after free in xmlXPathCompOpEvalPositionalPredicate() function in xpath.c

https://notcve.org/view.php?id=CVE-2017-15412

07 Dec 2017 — Use after free in libxml2 before 2.9.5, as used in Google Chrome prior to 63.0.3239.84 and other products, allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. Uso de memoria previamente liberada en libxml2 en versiones anteriores a la 2.9.5, tal y como se emplea en Google Chrome en versiones anteriores a la 63.0.3239.84 y otros productos, permitía que un atacante remoto pudiese explotar una corrupción de memoria dinámica (heap) mediante una página HTML manipulada. A use... • http://www.securitytracker.com/id/1040348 • CWE-416: Use After Free •

CVSS: 8.8EPSS: 0%CPEs: 5EXPL: 0

CVE-2017-15413 – chromium-browser: type confusion in webassembly

https://notcve.org/view.php?id=CVE-2017-15413

07 Dec 2017 — Type confusion in WebAssembly in V8 in Google Chrome prior to 63.0.3239.84 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. Confusión de tipos en WebAssembly en V8 en Google Chrome en versiones anteriores a la 63.0.3239.84 permitía que un atacante remoto pudiese explotar una corrupción de memoria dinámica (heap) mediante una página HTML manipulada. Chromium is an open-source web browser, powered by WebKit. This update upgrades Chromium to version 63.0.3239.84. Securi... • https://access.redhat.com/errata/RHSA-2017:3401 • CWE-704: Incorrect Type Conversion or Cast •

CVSS: 6.5EPSS: 0%CPEs: 5EXPL: 0

CVE-2017-15415 – chromium-browser: pointer information disclosure in ipc call

https://notcve.org/view.php?id=CVE-2017-15415

07 Dec 2017 — Incorrect serialization in IPC in Google Chrome prior to 63.0.3239.84 allowed a remote attacker to leak the value of a pointer via a crafted HTML page. Serialización incorrecta en IPC en Google Chrome en versiones anteriores a la 63.0.3239.84 permitía que un atacante remoto filtrase el valor de un puntero mediante una página HTML manipulada. Chromium is an open-source web browser, powered by WebKit. This update upgrades Chromium to version 63.0.3239.84. Security Fix: Multiple flaws were found in the process... • https://access.redhat.com/errata/RHSA-2017:3401 • CWE-119: Improper Restriction of Operations within the Bounds of a Memory Buffer •

CVSS: 6.5EPSS: 0%CPEs: 5EXPL: 0

CVE-2017-15416 – chromium-browser: out of bounds read in blink

https://notcve.org/view.php?id=CVE-2017-15416

07 Dec 2017 — Heap buffer overflow in Blob API in Google Chrome prior to 63.0.3239.84 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page, aka a Blink out-of-bounds read. Desbordamiento de búfer basado en memoria dinámica (heap) en Blob API en Google Chrome en versiones anteriores a la 63.0.3239.84 permitía que un atacante remoto pudiese explotar una corrupción de memoria dinámica (heap) mediante una página HTML manipulada. Esto también se conoce como lectura Blink fuera de límites. C... • https://access.redhat.com/errata/RHSA-2017:3401 • CWE-119: Improper Restriction of Operations within the Bounds of a Memory Buffer •

CVSS: 6.5EPSS: 0%CPEs: 5EXPL: 0

CVE-2017-15417 – chromium-browser: cross origin information disclosure in skia

https://notcve.org/view.php?id=CVE-2017-15417

07 Dec 2017 — Inappropriate implementation in Skia canvas composite operations in Google Chrome prior to 63.0.3239.84 allowed a remote attacker to leak cross-origin data via a crafted HTML page. Una implementación inapropiada en las operaciones composite de canvas de Skia en Google Chrome, en versiones anteriores a la 63.0.3239.84, permitía que un atacante remoto filtrase datos cross-origin mediante una página HTML manipulada. Chromium is an open-source web browser, powered by WebKit. This update upgrades Chromium to ver... • https://access.redhat.com/errata/RHSA-2017:3401 • CWE-119: Improper Restriction of Operations within the Bounds of a Memory Buffer •

CVSS: 6.5EPSS: 0%CPEs: 5EXPL: 0

CVE-2017-15418 – chromium-browser: use of uninitialized value in skia

https://notcve.org/view.php?id=CVE-2017-15418

07 Dec 2017 — Use of uninitialized memory in Skia in Google Chrome prior to 63.0.3239.84 allowed a remote attacker to obtain potentially sensitive information from process memory via a crafted HTML page. Uso de memoria no inicializada en Skia en Google Chrome en versiones anteriores a la 63.0.3239.84 permitía que un atacante remoto pudiese obtener información potencialmente sensible del la memoria del proceso mediante una página HTML manipulada. Chromium is an open-source web browser, powered by WebKit. This update upgra... • https://access.redhat.com/errata/RHSA-2017:3401 • CWE-119: Improper Restriction of Operations within the Bounds of a Memory Buffer •

CVSS: 6.5EPSS: 0%CPEs: 5EXPL: 0

CVE-2017-15419 – chromium-browser: cross origin leak of redirect url in blink

https://notcve.org/view.php?id=CVE-2017-15419

07 Dec 2017 — Insufficient policy enforcement in Resource Timing API in Google Chrome prior to 63.0.3239.84 allowed a remote attacker to infer browsing history by triggering a leaked cross-origin URL via a crafted HTML page. Aplicación de políticas insuficiente en Resource Timing API in Google Chrome en versiones anteriores a la 63.0.3239.84 permitía que un atacante remoto dedujese el historial de navegación desencadenando una URL cross-origin filtrada mediante una página HTML manipulada. Chromium is an open-source web b... • https://access.redhat.com/errata/RHSA-2017:3401 • CWE-601: URL Redirection to Untrusted Site ('Open Redirect') •

CVSS: 6.5EPSS: 0%CPEs: 6EXPL: 0

CVE-2017-15420 – chromium-browser: url spoofing in omnibox

https://notcve.org/view.php?id=CVE-2017-15420

07 Dec 2017 — Incorrect handling of back navigations in error pages in Navigation in Google Chrome prior to 63.0.3239.84 allowed a remote attacker to spoof the contents of the Omnibox (URL bar) via a crafted HTML page. La gestión incorrecta de la navegación hacia atrás en las páginas de error en Navigation en Google Chrome, en versiones anteriores a la 63.0.3239.84, permitía que un atacante remoto suplantase el contenido de Omnibox mediante una página HTML manipulada. Chromium is an open-source web browser, powered by We... • http://www.securitytracker.com/id/1040282 • CWE-20: Improper Input Validation •