CVE-2018-17471
Incorrect dialog placement in WebContents in Google Chrome prior to 70.0.3538.67 allowed a remote attacker to obscure the full screen warning via a crafted HTML page.
- Обновитесь до 70.0.3538.67-0ubuntu0.16.04.1
Опубликовано Обновлено
PatchFirst · Свежие уязвимости
Уязвимости chromium-browser · Страница 40
За последние 30 дней в chromium-browser опубликовано уязвимостей: 0; в каталоге KEV: 0.
Уязвимостей: 1138
CVE-2018-17469
Incorrect handling of PDF filter chains in PDFium in Google Chrome prior to 70.0.3538.67 allowed a remote attacker to perform an out of bounds memory read via a crafted PDF file.
- Обновитесь до 70.0.3538.67-0ubuntu0.16.04.1
Опубликовано ОбновленоCVE-2018-17468
Incorrect handling of timer information during navigation in Blink in Google Chrome prior to 70.0.3538.67 allowed a remote attacker to obtain cross origin URLs via a crafted HTML page.
- Обновитесь до 70.0.3538.67-0ubuntu0.16.04.1
Опубликовано ОбновленоCVE-2018-17467
Insufficiently quick clearing of stale rendered content in Navigation in Google Chrome prior to 70.0.3538.67 allowed a remote attacker to spoof the contents of the Omnibox (URL bar) via a crafted HTML page.
- Обновитесь до 70.0.3538.67-0ubuntu0.16.04.1
Опубликовано ОбновленоCVE-2018-17466
Incorrect texture handling in Angle in Google Chrome prior to 70.0.3538.67 allowed a remote attacker to perform an out of bounds memory read via a crafted HTML page.
- Обновитесь до 70.0.3538.67-0ubuntu0.16.04.1
Опубликовано ОбновленоCVE-2018-17465
Incorrect implementation of object trimming in V8 in Google Chrome prior to 70.0.3538.67 allowed a remote attacker to potentially exploit object corruption via a crafted HTML page.
- Обновитесь до 70.0.3538.67-0ubuntu0.16.04.1
Опубликовано ОбновленоCVE-2018-17464
Incorrect handling of history on iOS in Navigation in Google Chrome prior to 70.0.3538.67 allowed a remote attacker to spoof the contents of the Omnibox (URL bar) via a crafted HTML page.
- Обновитесь до 70.0.3538.67-0ubuntu0.16.04.1
Опубликовано ОбновленоCVE-2018-17463
Incorrect side effect annotation in V8 in Google Chrome prior to 70.0.3538.64 allowed a remote attacker to execute arbitrary code inside a sandbox via a crafted HTML page.
- Обновитесь до 70.0.3538.67-0ubuntu0.16.04.1
Опубликовано ОбновленоCVE-2018-17462
Incorrect refcounting in AppCache in Google Chrome prior to 70.0.3538.67 allowed a remote attacker to perform a sandbox escape via a crafted HTML page.
- Обновитесь до 70.0.3538.67-0ubuntu0.16.04.1
Опубликовано ОбновленоCVE-2018-6054
Use after free in WebUI in Google Chrome prior to 64.0.3282.119 allowed a remote attacker to potentially exploit heap corruption via a crafted Chrome Extension.
- Обновитесь до 64.0.3282.119-0ubuntu0.16.04.1
Опубликовано ОбновленоCVE-2018-6053
Inappropriate implementation in New Tab Page in Google Chrome prior to 64.0.3282.119 allowed a local attacker to view website thumbnail images after clearing browser data via a crafted HTML page.
- Обновитесь до 64.0.3282.119-0ubuntu0.16.04.1
Опубликовано ОбновленоCVE-2018-6052
Lack of support for a non standard no-referrer policy value in Blink in Google Chrome prior to 64.0.3282.119 allowed a remote attacker to obtain referrer details from a web page that had thought it had opted out of sending referrer data.
- Обновитесь до 64.0.3282.119-0ubuntu0.16.04.1
Опубликовано ОбновленоCVE-2018-6051
XSS Auditor in Google Chrome prior to 64.0.3282.119, did not ensure the reporting URL was in the same origin as the page it was on, which allowed a remote attacker to obtain referrer details via a crafted HTML page.
- Обновитесь до 64.0.3282.119-0ubuntu0.16.04.1
Опубликовано ОбновленоCVE-2018-6050
Incorrect security UI in Omnibox in Google Chrome prior to 64.0.3282.119 allowed a remote attacker to spoof the contents of the Omnibox (URL bar) via a crafted HTML page.
- Обновитесь до 64.0.3282.119-0ubuntu0.16.04.1
Опубликовано ОбновленоCVE-2018-6049
Incorrect security UI in permissions prompt in Google Chrome prior to 64.0.3282.119 allowed a remote attacker to spoof the origin to which permission is granted via a crafted HTML page.
- Обновитесь до 64.0.3282.119-0ubuntu0.16.04.1
Опубликовано ОбновленоCVE-2018-6048
Insufficient policy enforcement in Blink in Google Chrome prior to 64.0.3282.119 allowed a remote attacker to potentially leak referrer information via a crafted HTML page.
- Обновитесь до 64.0.3282.119-0ubuntu0.16.04.1
Опубликовано ОбновленоCVE-2018-6047
Insufficient policy enforcement in WebGL in Google Chrome prior to 64.0.3282.119 allowed a remote attacker to potentially leak user redirect URL via a crafted HTML page.
- Обновитесь до 64.0.3282.119-0ubuntu0.16.04.1
Опубликовано ОбновленоCVE-2018-6046
Insufficient data validation in DevTools in Google Chrome prior to 64.0.3282.119 allowed a remote attacker to potentially leak user cross-origin data via a crafted Chrome Extension.
- Обновитесь до 64.0.3282.119-0ubuntu0.16.04.1
Опубликовано ОбновленоCVE-2018-6045
Insufficient policy enforcement in DevTools in Google Chrome prior to 64.0.3282.119 allowed a remote attacker to potentially leak user local file data via a crafted Chrome Extension.
- Обновитесь до 64.0.3282.119-0ubuntu0.16.04.1
Опубликовано ОбновленоCVE-2018-6043
Insufficient data validation in External Protocol Handler in Google Chrome prior to 64.0.3282.119 allowed a remote attacker to potentially execute arbitrary programs on user machine via a crafted HTML page.
- Обновитесь до 64.0.3282.119-0ubuntu0.16.04.1
Опубликовано Обновлено
Проверьте свой сервер
Сопоставьте установленный стек и версии со свежими базами уязвимостей.