CVE-2017-15411
Use after free in PDFium in Google Chrome prior to 63.0.3239.84 allowed a remote attacker to potentially exploit heap corruption via a crafted PDF file.
- Обновитесь до 63.0.3239.84-0ubuntu1
Опубликовано Обновлено
PatchFirst · Свежие уязвимости
Уязвимости chromium-browser · Страница 74
За последние 30 дней в chromium-browser опубликовано уязвимостей: 0; в каталоге KEV: 0.
Уязвимостей: 1499
CVE-2017-15410
Use after free in PDFium in Google Chrome prior to 63.0.3239.84 allowed a remote attacker to potentially exploit heap corruption via a crafted PDF file.
- Обновитесь до 63.0.3239.84-0ubuntu1
Опубликовано ОбновленоCVE-2017-15409
Heap buffer overflow in Skia in Google Chrome prior to 63.0.3239.84 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page.
- Обновитесь до 63.0.3239.84-0ubuntu1
Опубликовано ОбновленоCVE-2017-15408
Heap buffer overflow in Omnibox in Google Chrome prior to 63.0.3239.84 allowed a remote attacker to potentially exploit heap corruption via a crafted PDF file that is mishandled by PDFium.
- Обновитесь до 63.0.3239.84-0ubuntu1
Опубликовано ОбновленоCVE-2017-15407
Out-of-bounds Write in the QUIC networking stack in Google Chrome prior to 63.0.3239.84 allowed a remote attacker to gain code execution via a malicious server.
- Обновитесь до 63.0.3239.84-0ubuntu1
Опубликовано ОбновленоCVE-2018-4117
An issue was discovered in certain Apple products. iOS before 11.3 is affected. Safari before 11.1 is affected. iCloud before 7.4 on Windows is affected. iTunes before 12.7.4 on Windows is affected. watchOS before 4.3 is affected. The issue involves the fetch API in the "WebKit" component. It allows remote attackers to bypass the Same Origin Policy and obtain sensitive information via a crafted web site.
- Обновитесь до 68.0.3440.75-0ubuntu0.18.04.1
Опубликовано ОбновленоCVE-2017-7000
An issue was discovered in certain Apple products. iOS before 10.3.2 is affected. macOS before 10.12.5 is affected. The issue involves the "SQLite" component. It allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption and application crash) via a crafted web site.
- Обновитесь до 61.0.3163.100-0ubuntu1.1378
Опубликовано ОбновленоCVE-2017-5133
Off-by-one read/write on the heap in Blink in Google Chrome prior to 62.0.3202.62 allowed a remote attacker to corrupt memory and possibly leak information and potentially execute code via a crafted PDF file.
- Обновитесь до 62.0.3202.62-0ubuntu0.17.10.1380
Опубликовано ОбновленоCVE-2017-5132
Inappropriate implementation in V8 in Google Chrome prior to 62.0.3202.62 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page, aka incorrect WebAssembly stack manipulation.
- Обновитесь до 62.0.3202.62-0ubuntu0.17.10.1380
Опубликовано ОбновленоCVE-2017-5131
An integer overflow in Skia in Google Chrome prior to 62.0.3202.62 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page, aka an out-of-bounds write.
- Обновитесь до 62.0.3202.62-0ubuntu0.17.10.1380
Опубликовано ОбновленоCVE-2017-5130
An integer overflow in xmlmemory.c in libxml2 before 2.9.5, as used in Google Chrome prior to 62.0.3202.62 and other products, allowed a remote attacker to potentially exploit heap corruption via a crafted XML file.
- Обновитесь до 62.0.3202.62-0ubuntu0.17.10.1380
Опубликовано ОбновленоCVE-2017-5129
A use after free in WebAudio in Blink in Google Chrome prior to 62.0.3202.62 allowed a remote attacker to perform an out of bounds memory read via a crafted HTML page.
- Обновитесь до 62.0.3202.62-0ubuntu0.17.10.1380
Опубликовано ОбновленоCVE-2017-5128
Heap buffer overflow in Blink in Google Chrome prior to 62.0.3202.62 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page, related to WebGL.
- Обновитесь до 62.0.3202.62-0ubuntu0.17.10.1380
Опубликовано ОбновленоCVE-2017-5127
Use after free in PDFium in Google Chrome prior to 62.0.3202.62 allowed a remote attacker to potentially exploit heap corruption via a crafted PDF file.
- Обновитесь до 62.0.3202.62-0ubuntu0.17.10.1380
Опубликовано ОбновленоCVE-2017-5126
A use after free in PDFium in Google Chrome prior to 62.0.3202.62 allowed a remote attacker to potentially exploit heap corruption via a crafted PDF file.
- Обновитесь до 62.0.3202.62-0ubuntu0.17.10.1380
Опубликовано ОбновленоCVE-2017-5125
Heap buffer overflow in Skia in Google Chrome prior to 62.0.3202.62 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page.
- Обновитесь до 62.0.3202.62-0ubuntu0.17.10.1380
Опубликовано ОбновленоCVE-2017-5124
Incorrect application of sandboxing in Blink in Google Chrome prior to 62.0.3202.62 allowed a remote attacker to inject arbitrary scripts or HTML (UXSS) via a crafted MHTML page.
- Обновитесь до 62.0.3202.62-0ubuntu0.17.10.1380
Опубликовано ОбновленоCVE-2017-15395
A use after free in Blink in Google Chrome prior to 62.0.3202.62 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page, aka an ImageCapture NULL pointer dereference.
- Обновитесь до 62.0.3202.62-0ubuntu0.17.10.1380
Опубликовано ОбновленоCVE-2017-15394
Insufficient Policy Enforcement in Extensions in Google Chrome prior to 62.0.3202.62 allowed a remote attacker to perform domain spoofing in permission dialogs via IDN homographs in a crafted Chrome Extension.
- Обновитесь до 62.0.3202.62-0ubuntu0.17.10.1380
Опубликовано ОбновленоCVE-2017-15393
Insufficient Policy Enforcement in Devtools remote debugging in Google Chrome prior to 62.0.3202.62 allowed a remote attacker to obtain access to remote debugging functionality via a crafted HTML page, aka a Referer leak.
- Обновитесь до 62.0.3202.62-0ubuntu0.17.10.1380
Опубликовано Обновлено
Проверьте свой сервер
Сопоставьте установленный стек и версии со свежими базами уязвимостей.