CVE-2018-17476
Incorrect dialog placement in Cast UI in Google Chrome prior to 70.0.3538.67 allowed a remote attacker to obscure the full screen warning via a crafted HTML page.
- Обновитесь до 70.0.3538.67-0ubuntu0.18.04.1
Опубликовано Обновлено
PatchFirst · Свежие уязвимости
Уязвимости chromium-browser · Страница 71
За последние 30 дней в chromium-browser опубликовано уязвимостей: 0; в каталоге KEV: 0.
Уязвимостей: 1499
CVE-2018-17475
Incorrect handling of history on iOS in Navigation in Google Chrome prior to 70.0.3538.67 allowed a remote attacker to spoof the contents of the Omnibox (URL bar) via a crafted HTML page.
- Обновитесь до 70.0.3538.67-0ubuntu0.18.04.1
Опубликовано ОбновленоCVE-2018-17474
Use after free in HTMLImportsController in Blink in Google Chrome prior to 70.0.3538.67 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page.
- Обновитесь до 70.0.3538.67-0ubuntu0.18.04.1
Опубликовано ОбновленоCVE-2018-17473
Incorrect handling of confusable characters in Omnibox in Google Chrome prior to 70.0.3538.67 allowed a remote attacker to spoof the contents of the Omnibox (URL bar) via a crafted domain name.
- Обновитесь до 70.0.3538.67-0ubuntu0.18.04.1
Опубликовано ОбновленоCVE-2018-17472
Incorrect handling of googlechrome:// URL scheme on iOS in Intents in Google Chrome prior to 70.0.3538.67 allowed a remote attacker to escape the <iframe> sandbox via a crafted HTML page.
- Обновитесь до 70.0.3538.67-0ubuntu0.18.04.1
Опубликовано ОбновленоCVE-2018-17471
Incorrect dialog placement in WebContents in Google Chrome prior to 70.0.3538.67 allowed a remote attacker to obscure the full screen warning via a crafted HTML page.
- Обновитесь до 70.0.3538.67-0ubuntu0.18.04.1
Опубликовано ОбновленоCVE-2018-17469
Incorrect handling of PDF filter chains in PDFium in Google Chrome prior to 70.0.3538.67 allowed a remote attacker to perform an out of bounds memory read via a crafted PDF file.
- Обновитесь до 70.0.3538.67-0ubuntu0.18.04.1
Опубликовано ОбновленоCVE-2018-17468
Incorrect handling of timer information during navigation in Blink in Google Chrome prior to 70.0.3538.67 allowed a remote attacker to obtain cross origin URLs via a crafted HTML page.
- Обновитесь до 70.0.3538.67-0ubuntu0.18.04.1
Опубликовано ОбновленоCVE-2018-17467
Insufficiently quick clearing of stale rendered content in Navigation in Google Chrome prior to 70.0.3538.67 allowed a remote attacker to spoof the contents of the Omnibox (URL bar) via a crafted HTML page.
- Обновитесь до 70.0.3538.67-0ubuntu0.18.04.1
Опубликовано ОбновленоCVE-2018-17466
Incorrect texture handling in Angle in Google Chrome prior to 70.0.3538.67 allowed a remote attacker to perform an out of bounds memory read via a crafted HTML page.
- Обновитесь до 70.0.3538.67-0ubuntu0.18.04.1
Опубликовано ОбновленоCVE-2018-17465
Incorrect implementation of object trimming in V8 in Google Chrome prior to 70.0.3538.67 allowed a remote attacker to potentially exploit object corruption via a crafted HTML page.
- Обновитесь до 70.0.3538.67-0ubuntu0.18.04.1
Опубликовано ОбновленоCVE-2018-17464
Incorrect handling of history on iOS in Navigation in Google Chrome prior to 70.0.3538.67 allowed a remote attacker to spoof the contents of the Omnibox (URL bar) via a crafted HTML page.
- Обновитесь до 70.0.3538.67-0ubuntu0.18.04.1
Опубликовано ОбновленоCVE-2018-17463
Incorrect side effect annotation in V8 in Google Chrome prior to 70.0.3538.64 allowed a remote attacker to execute arbitrary code inside a sandbox via a crafted HTML page.
- Обновитесь до 70.0.3538.67-0ubuntu0.18.04.1
Опубликовано ОбновленоCVE-2018-17462
Incorrect refcounting in AppCache in Google Chrome prior to 70.0.3538.67 allowed a remote attacker to perform a sandbox escape via a crafted HTML page.
- Обновитесь до 70.0.3538.67-0ubuntu0.18.04.1
Опубликовано ОбновленоCVE-2018-6119
Incorrect security UI in Omnibox in Google Chrome prior to 64.0.3282.119 allowed a remote attacker to spoof the contents of the Omnibox (URL bar) via a crafted HTML page.
- Обновитесь до 64.0.3282.119-0ubuntu1
Опубликовано ОбновленоCVE-2018-6055
Insufficient policy enforcement in Catalog Service in Google Chrome prior to 64.0.3282.119 allowed a remote attacker to potentially run arbitrary code outside sandbox via a crafted HTML page.
- Обновитесь до 64.0.3282.119-0ubuntu1
Опубликовано ОбновленоCVE-2018-6054
Use after free in WebUI in Google Chrome prior to 64.0.3282.119 allowed a remote attacker to potentially exploit heap corruption via a crafted Chrome Extension.
- Обновитесь до 64.0.3282.119-0ubuntu1
Опубликовано ОбновленоCVE-2018-6053
Inappropriate implementation in New Tab Page in Google Chrome prior to 64.0.3282.119 allowed a local attacker to view website thumbnail images after clearing browser data via a crafted HTML page.
- Обновитесь до 64.0.3282.119-0ubuntu1
Опубликовано ОбновленоCVE-2018-6052
Lack of support for a non standard no-referrer policy value in Blink in Google Chrome prior to 64.0.3282.119 allowed a remote attacker to obtain referrer details from a web page that had thought it had opted out of sending referrer data.
- Обновитесь до 64.0.3282.119-0ubuntu1
Опубликовано ОбновленоCVE-2018-6051
XSS Auditor in Google Chrome prior to 64.0.3282.119, did not ensure the reporting URL was in the same origin as the page it was on, which allowed a remote attacker to obtain referrer details via a crafted HTML page.
- Обновитесь до 64.0.3282.119-0ubuntu1
Опубликовано Обновлено
Проверьте свой сервер
Сопоставьте установленный стек и версии со свежими базами уязвимостей.