CVE-2018-6045

Insufficient policy enforcement in DevTools in Google Chrome prior to 64.0.3282.119 allowed a remote attacker to potentially leak user local file data via a crafted Chrome Extension...

CVE-2018-6046

Insufficient data validation in DevTools in Google Chrome prior to 64.0.3282.119 allowed a remote attacker to potentially leak user cross-origin data via a crafted Chrome Extension...

PT-2018-17312

Name of the Vulnerable Software and Affected Versions Google Chrome versions prior to 64.0.3282.119 Opera affected versions not specified Description The issue is related to insufficient policy enforcement in DevTools, allowing a remote attacker to potentially leak user local file data via a...

PT-2018-17316

Name of the Vulnerable Software and Affected Versions Google Chrome versions prior to 64.0.3282.119 Description The issue is related to insufficient data validation in DevTools, allowing a remote attacker to potentially leak user cross-origin data via a crafted Chrome Extension. This could enable...

PT-2018-17320

Name of the Vulnerable Software and Affected Versions Google Chrome versions prior to 64.0.3282.119 Opera affected versions not specified Description The issue is related to insufficient policy enforcement in DevTools, allowing a remote attacker to potentially leak user local file data via a...

PT-2018-17321

Name of the Vulnerable Software and Affected Versions Google Chrome versions prior to 64.0.3282.119 Description The issue is related to insufficient data validation in DevTools, allowing a remote attacker to potentially leak user cross-origin data via a crafted Chrome Extension. This could enable...

KLA11185 Multiple vulnerabilities in Google Chrome

Multiple serious vulnerabilities have been found in Google Chrome. Malicious users can exploit these vulnerabilities to cause denial of service, execute arbitrary code, bypass security restrictions, spoof user interface, obtain sensitive information and perform cross-site scripting attack. Below ...

PT-2018-2523

Name of the Vulnerable Software and Affected Versions Google Chrome versions prior to 72.0.3626.81 Description The issue is related to the DevTools API in Google Chrome, which does not correctly gate on extension capability. This allows an attacker who convinces a user to install a malicious...

PT-2018-3104

Name of the Vulnerable Software and Affected Versions Google Chrome versions prior to 67.0.3396.62 Description The issue concerns the chrome.debugger API in Google Chrome's DevTools, which allowed an attacker to execute arbitrary code via a crafted Chrome Extension if they convinced a user to...

Debian DSA-4020-1 : chromium-browser - security update

Several vulnerabilities have been discovered in the chromium web browser. In addition, this message serves as an annoucment that security support for chromium in the oldstable release jessie, Debian 8, is now discontinued. Debian 8 chromium users that desire continued security updates are strongl...

openSUSE Security Update : chromium (openSUSE-2017-1221)

This update to Chromium 62.0.3202.75 fixes the following security issues : - CVE-2017-5124: UXSS with MHTML - CVE-2017-5125: Heap overflow in Skia - CVE-2017-5126: Use after free in PDFium - CVE-2017-5127: Use after free in PDFium - CVE-2017-5128: Heap overflow in WebGL - CVE-2017-5129: Use after...

Security update for chromium (important)

This update to Chromium 62.0.3202.75 fixes the following security issues: - CVE-2017-5124: UXSS with MHTML - CVE-2017-5125: Heap overflow in Skia - CVE-2017-5126: Use after free in PDFium - CVE-2017-5127: Use after free in PDFium - CVE-2017-5128: Heap overflow in WebGL - CVE-2017-5129: Use after...

chromium-browser: referrer leak in devtools

Insufficient Policy Enforcement in Devtools remote debugging in Google Chrome prior to 62.0.3202.62 allowed a remote attacker to obtain access to remote debugging functionality via a crafted HTML page, aka a Referer leak...

CVE-2017-15393

Insufficient Policy Enforcement in Devtools remote debugging in Google Chrome prior to 62.0.3202.62 allowed a remote attacker to obtain access to remote debugging functionality via a crafted HTML page, aka a Referer leak...

PT-2017-14048

Name of the Vulnerable Software and Affected Versions Google Chrome versions prior to 62.0.3202.62 Opera affected versions not specified Description The issue is related to Insufficient Policy Enforcement in Devtools remote debugging, allowing a remote attacker to obtain access to remote debuggin...

Mozilla: XUL injection in the style editor in devtools (MFSA 2017-19)

The Developer Tools feature suffers from a XUL injection vulnerability due to improper sanitization of the web page source code. In the worst case, this could allow arbitrary code execution when opening a malicious page with the style editor tool. This vulnerability affects Firefox ESR 52.3 and...

CVE-2017-12581

GitHub Electron before 1.6.8 allows remote command execution because of a nodeIntegration bypass vulnerability. This also affects all applications that bundle Electron code equivalent to 1.6.8 or earlier. Bypassing the Same Origin Policy SOP is a precondition; however, recent Electron versions do...

CVE-2017-12581

GitHub Electron before 1.6.8 allows remote command execution because of a nodeIntegration bypass vulnerability. This also affects all applications that bundle Electron code equivalent to 1.6.8 or earlier. Bypassing the Same Origin Policy SOP is a precondition; however, recent Electron versions do...

CVE-2017-12581: Improper Neutralization of Special Elements used in an OS Command

GitHub Electron before 1.6.8 allows remote command execution because of a nodeIntegration bypass vulnerability. This also affects all applications that bundle Electron code equivalent to 1.6.8 or earlier. Bypassing the Same Origin Policy SOP is a precondition; however, recent Electron versions do...

PT-2017-12586

Name of the Vulnerable Software and Affected Versions Electron versions prior to 1.6.8 Description The issue allows remote command execution due to a nodeIntegration bypass vulnerability. This vulnerability affects not only Electron but also all applications that bundle Electron code equivalent t...