3486 matches found
CVE-2017-5011
Removed by vendor...
CVE-2017-5011: Exposure of Sensitive Information to an Unauthorized Actor
Google Chrome prior to 56.0.2924.76 for Windows insufficiently sanitized DevTools URLs, which allowed a remote attacker who convinced a user to install a malicious extension to read filesystem contents via a crafted HTML page...
CVE-2017-5011
Google Chrome prior to 56.0.2924.76 for Windows insufficiently sanitized DevTools URLs, which allowed a remote attacker who convinced a user to install a malicious extension to read filesystem contents via a crafted HTML page...
UBUNTU-CVE-2017-5011
Google Chrome prior to 56.0.2924.76 for Windows insufficiently sanitized DevTools URLs, which allowed a remote attacker who convinced a user to install a malicious extension to read filesystem contents via a crafted HTML page...
chromium-browser: unauthorised file access in devtools
Google Chrome prior to 56.0.2924.76 for Windows insufficiently sanitized DevTools URLs, which allowed a remote attacker who convinced a user to install a malicious extension to read filesystem contents via a crafted HTML page...
The vulnerability of Google Chrome browser allows a perpetrator to trigger a service failure or otherwise affect the system.
The vulnerability of Google Chrome is related to insufficient cleaning of URLs in DevTools. Exploiting this vulnerability can allow a malicious actor to cause service failures or other effects on the system through a specially created HTML page...
PT-2017-1274
Name of the Vulnerable Software and Affected Versions Google Chrome versions prior to 56.0.2924.76 Opera versions prior to 56.0.2924.76 Description The issue is related to insufficient sanitization of DevTools URLs, which allowed a remote attacker who convinced a user to install a malicious...
CVE-2016-5212
Google Chrome prior to 55.0.2883.75 for Mac, Windows and Linux, and 55.0.2883.84 for Android insufficiently sanitized DevTools URLs, which allowed a remote attacker to read local files via a crafted HTML page...
CVE-2016-5212
Google Chrome prior to 55.0.2883.75 for Mac, Windows and Linux, and 55.0.2883.84 for Android insufficiently sanitized DevTools URLs, which allowed a remote attacker to read local files via a crafted HTML page...
CVE-2016-5212
Google Chrome prior to 55.0.2883.75 for Mac, Windows and Linux, and 55.0.2883.84 for Android insufficiently sanitized DevTools URLs, which allowed a remote attacker to read local files via a crafted HTML page...
CVE-2016-5212
CVE-2016-5212 affects Google Chrome/Chromium DevTools URLs that were insufficiently sanitized, enabling a remote attacker to read local files via a crafted HTML page. The issue is in the DevTools component of Chromium/Chrome prior to 55.0.2883.75 (desktop) and 55.0.2883.84 (Android). Impact is lo...
CVE-2016-5212
Google Chrome prior to 55.0.2883.75 for Mac, Windows and Linux, and 55.0.2883.84 for Android insufficiently sanitized DevTools URLs, which allowed a remote attacker to read local files via a crafted HTML page...
CVE-2016-5212
Removed by vendor...
CVE-2016-5212: Exposure of Sensitive Information to an Unauthorized Actor
Google Chrome prior to 55.0.2883.75 for Mac, Windows and Linux, and 55.0.2883.84 for Android insufficiently sanitized DevTools URLs, which allowed a remote attacker to read local files via a crafted HTML page...
CVE-2016-5186
Devtools in Google Chrome prior to 54.0.2840.59 for Windows, Mac, and Linux; 54.0.2840.85 for Android incorrectly handled objects after a tab crash, which allowed a remote attacker to perform an out of bounds memory read via crafted PDF files...
Design/Logic Flaw
Devtools in Google Chrome prior to 54.0.2840.59 for Windows, Mac, and Linux; 54.0.2840.85 for Android incorrectly handled objects after a tab crash, which allowed a remote attacker to perform an out of bounds memory read via crafted PDF files...
CVE-2016-5186
Devtools in Google Chrome prior to 54.0.2840.59 for Windows, Mac, and Linux; 54.0.2840.85 for Android incorrectly handled objects after a tab crash, which allowed a remote attacker to perform an out of bounds memory read via crafted PDF files...
CVE-2016-5186
Devtools in Google Chrome prior to 54.0.2840.59 for Windows, Mac, and Linux; 54.0.2840.85 for Android incorrectly handled objects after a tab crash, which allowed a remote attacker to perform an out of bounds memory read via crafted PDF files...
CVE-2016-5186
CVE-2016-5186: An information disclosure/out-of-bounds read flaw in Chromium DevTools was triggered by crafted PDF files. Affected: Chromium-based browsers with DevTools prior to the upstream fix. Remediation: upgrade to Chromium 55.0.2883.75+ (as referenced in Debian security advisory DSA-3731-1...
CVE-2016-5186
Devtools in Google Chrome prior to 54.0.2840.59 for Windows, Mac, and Linux; 54.0.2840.85 for Android incorrectly handled objects after a tab crash, which allowed a remote attacker to perform an out of bounds memory read via crafted PDF files...