Page 187 of 2778 results (0.011 seconds)

CVSS: 6.5EPSS: 1%CPEs: 8EXPL: 0

CVE-2017-5103 – chromium-browser: uninitialized use in skia

https://notcve.org/view.php?id=CVE-2017-5103

31 Jul 2017 — Use of an uninitialized value in Skia in Google Chrome prior to 60.0.3112.78 for Linux, Windows, and Mac allowed a remote attacker to obtain potentially sensitive information from process memory via a crafted HTML page. El uso de un valor no inicializado en Skia en Google Chrome, en versiones anteriores a la 60.0.3112.78 para Linux, Windows y Mac, permitía que un atacante remoto obtuviese información sensible de la memoria de procesos mediante una página HTML manipulada. Chromium is an open-source web brows... • http://www.debian.org/security/2017/dsa-3926 • CWE-908: Use of Uninitialized Resource •

CVSS: 8.8EPSS: 2%CPEs: 6EXPL: 0

CVE-2017-5100 – chromium-browser: use after free in chrome apps

https://notcve.org/view.php?id=CVE-2017-5100

31 Jul 2017 — A use after free in Apps in Google Chrome prior to 60.0.3112.78 for Windows allowed a remote attacker to perform an out of bounds memory read via a crafted HTML page. Un uso de memoria previamente liberada en Apps en Google Chrome, en versiones anteriores a la 60.0.3112.78 para Windows, permitía que un atacante remoto realizase una lectura de memoria fuera de límites mediante una página HTML manipulada. Chromium is an open-source web browser, powered by WebKit. This update upgrades Chromium to version 60.0.... • http://www.debian.org/security/2017/dsa-3926 • CWE-416: Use After Free •

CVSS: 6.5EPSS: 0%CPEs: 9EXPL: 0

CVE-2017-5106 – chromium-browser: url spoofing in omnibox

https://notcve.org/view.php?id=CVE-2017-5106

31 Jul 2017 — Insufficient Policy Enforcement in Omnibox in Google Chrome prior to 60.0.3112.78 for Mac, Windows, Linux, and Android allowed a remote attacker to perform domain spoofing via IDN homographs in a crafted domain name. La falta de mecanismos suficientes para el cumplimiento de políticas en Omnibox en Google Chrome, en versiones anteriores a la 60.0.3112.78 para Mac, Windows, Linux y Android, permitía que un atacante remoto realizase una suplantación de dominio mediante homografías de IDN en un nombre de domin... • http://www.debian.org/security/2017/dsa-3926 • CWE-20: Improper Input Validation •

CVSS: 8.8EPSS: 1%CPEs: 3EXPL: 0

CVE-2017-5099 – chromium-browser: out-of-bounds write in ppapi

https://notcve.org/view.php?id=CVE-2017-5099

31 Jul 2017 — Insufficient validation of untrusted input in PPAPI Plugins in Google Chrome prior to 60.0.3112.78 for Mac allowed a remote attacker to potentially gain privilege elevation via a crafted HTML page. Validación insuficiente de entradas no fiables en PPAPI Plugins en Google Chrome en versiones anteriores a la 60.0.3112.78 para Mac permitía que un atacante remoto pudiese obtener una elevación de privilegios mediante una página HTML manipulada. Chromium is an open-source web browser, powered by WebKit. This upda... • http://www.debian.org/security/2017/dsa-3926 • CWE-20: Improper Input Validation CWE-787: Out-of-bounds Write •

CVSS: 8.8EPSS: 1%CPEs: 3EXPL: 0

CVE-2017-5092 – chromium-browser: use after free in ppapi

https://notcve.org/view.php?id=CVE-2017-5092

31 Jul 2017 — Insufficient validation of untrusted input in PPAPI Plugins in Google Chrome prior to 60.0.3112.78 for Windows allowed a remote attacker to potentially perform a sandbox escape via a crafted HTML page. Validación insuficiente de entradas no fiables en PPAPI Plugins en Google Chrome, en versiones anteriores a la 60.0.3112.78 para Windows, permitía que un atacante remoto pudiese realizar un escape de espacio aislado o sandbox mediante una página HTML manipulada. Chromium is an open-source web browser, powered... • http://www.debian.org/security/2017/dsa-3926 • CWE-20: Improper Input Validation CWE-416: Use After Free •

CVSS: 8.8EPSS: 2%CPEs: 9EXPL: 0

CVE-2017-5091 – chromium-browser: use after free in indexeddb

https://notcve.org/view.php?id=CVE-2017-5091

31 Jul 2017 — A use after free in IndexedDB in Google Chrome prior to 60.0.3112.78 for Linux, Android, Windows, and Mac allowed a remote attacker to perform an out of bounds memory read via a crafted HTML page. Un uso de memoria previamente liberada en IndexedDB en Google Chrome, en versiones anteriores a la 60.0.3112.78 para Linux, Android, Windows y Mac, permitía que un atacante remoto realizase una lectura de memoria fuera de límites mediante una página HTML manipulada. Chromium is an open-source web browser, powered ... • http://www.debian.org/security/2017/dsa-3926 • CWE-416: Use After Free •

CVSS: 6.5EPSS: 0%CPEs: 6EXPL: 0

CVE-2017-5104 – chromium-browser: ui spoofing in browser

https://notcve.org/view.php?id=CVE-2017-5104

31 Jul 2017 — Inappropriate implementation in interstitials in Google Chrome prior to 60.0.3112.78 for Mac allowed a remote attacker to spoof the contents of the omnibox via a crafted HTML page. Una implementación incorrecta en interstitials en Google Chrome, en versiones anteriores a la 60.0.3112.78 para Mac, permitía que un atacante remoto suplantase el contenido de Omnibox mediante una página HTML manipulada. Chromium is an open-source web browser, powered by WebKit. This update upgrades Chromium to version 60.0.3112.... • http://www.debian.org/security/2017/dsa-3926 • CWE-20: Improper Input Validation •

CVSS: 8.8EPSS: 2%CPEs: 9EXPL: 0

CVE-2017-5098 – chromium-browser: use after free in v8

https://notcve.org/view.php?id=CVE-2017-5098

31 Jul 2017 — A use after free in V8 in Google Chrome prior to 60.0.3112.78 for Mac, Windows, Linux, and Android allowed a remote attacker to perform an out of bounds memory read via a crafted HTML page. Un uso de memoria previamente liberada en V8 en Google Chrome, en versiones anteriores a la 60.0.3112.78 para Mac, Windows, Linux y Android, permitía que un atacante remoto realizase una lectura de memoria fuera de límites mediante una página HTML manipulada. Chromium is an open-source web browser, powered by WebKit. Thi... • http://www.debian.org/security/2017/dsa-3926 • CWE-416: Use After Free •

CVSS: 6.5EPSS: 0%CPEs: 9EXPL: 0

CVE-2017-5110 – chromium-browser: ui spoofing in payments dialog

https://notcve.org/view.php?id=CVE-2017-5110

31 Jul 2017 — Inappropriate implementation of the web payments API on blob: and data: schemes in Web Payments in Google Chrome prior to 60.0.3112.78 for Mac, Windows, Linux, and Android allowed a remote attacker to spoof the contents of the Omnibox via a crafted HTML page. Una implementación incorrecta de la API de pagos web en las combinaciones blob: y data: en Web Payments en Google Chrome, en versiones anteriores a la 60.0.3112.78 para Mac, Windows, Linux y Android, permitía que un atacante remoto suplantase el conten... • http://www.debian.org/security/2017/dsa-3926 • CWE-20: Improper Input Validation •

CVSS: 4.3EPSS: 0%CPEs: 8EXPL: 0

CVE-2017-5109 – chromium-browser: ui spoofing in browser

https://notcve.org/view.php?id=CVE-2017-5109

31 Jul 2017 — Inappropriate implementation of unload handler handling in permission prompts in Google Chrome prior to 60.0.3112.78 for Linux, Windows, and Mac allowed a remote attacker to display UI on a non attacker controlled tab via a crafted HTML page. Una implementación incorrecta de la gestión del manipulador de descargas en solicitudes de permisos en Google Chrome, en versiones anteriores a la 60.0.3112.78 para Linux, Windows y Mac, permitía que un atacante remoto mostrase la interfaz de usuario en una pestaña no ... • http://www.debian.org/security/2017/dsa-3926 • CWE-20: Improper Input Validation •