CVE-2017-5074

Removed by vendor...

CVE-2017-5073

Removed by vendor...

CVE-2017-5070

Removed by vendor...

CVE-2017-5058

Removed by vendor...

CVE-2017-5117

Removed by vendor...

CVE-2017-5104

Removed by vendor...

CVE-2017-5101

Removed by vendor...

CVE-2017-5094

Removed by vendor...

CVE-2017-5092

Removed by vendor...

CVE-2017-5077

Removed by vendor...

CVE-2017-5068

Removed by vendor...

CVE-2017-5064

Removed by vendor...

CVE-2017-5059

Removed by vendor...

chromium-browser: url spoofing in omnibox

An insufficient watchdog timer in navigation in Google Chrome prior to 62.0.3202.62 allowed a remote attacker to spoof the contents of the Omnibox URL bar via a crafted HTML page...

chromium-browser: null pointer dereference in imagecapture

A use after free in Blink in Google Chrome prior to 62.0.3202.62 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page, aka an ImageCapture NULL pointer dereference...

CVE-2017-15391

Insufficient Policy Enforcement in Extensions in Google Chrome prior to 62.0.3202.62 allowed a remote attacker to access Extension pages without authorisation via a crafted HTML page...

CVE-2017-15389

An insufficient watchdog timer in navigation in Google Chrome prior to 62.0.3202.62 allowed a remote attacker to spoof the contents of the Omnibox URL bar via a crafted HTML page...

CVE-2017-15387

Insufficient enforcement of Content Security Policy in Blink in Google Chrome prior to 62.0.3202.62 allowed a remote attacker to open javascript: URL windows when they should not be allowed to via a crafted HTML page...

CVE-2017-5121

Inappropriate use of JIT optimisation in V8 in Google Chrome prior to 61.0.3163.100 for Linux, Windows, and Mac allowed a remote attacker to execute arbitrary code inside a sandbox via a crafted HTML page, related to the escape analysis phase...

chromium-browser: type confusion in v8

Type confusion in V8 in Google Chrome prior to 61.0.3163.79 for Windows allowed a remote attacker to potentially exploit object corruption via a crafted HTML page...