PT-2018-17385

Name of the Vulnerable Software and Affected Versions Google Chrome versions prior to 66.0.3359.117 Opera versions prior to 66.0.3359.117 Description The issue is related to the inappropriate setting of the SEE MASK FLAG NO UI flag in file downloads, which could allow a remote attacker to...

PT-2018-17379

Name of the Vulnerable Software and Affected Versions Google Chrome versions prior to 66.0.3359.117 Opera affected versions not specified Description The issue allows a remote attacker to access data on the user's file system without explicit consent via a crafted HTML page. This is due to the...

PT-2018-17383

Name of the Vulnerable Software and Affected Versions Google Chrome versions prior to 66.0.3359.117 Opera versions prior to 66.0.3359.117 Description The issue is related to the improper handling of pending navigation entries in Navigation, allowing a remote attacker to perform domain spoofing vi...

PT-2018-17356

Name of the Vulnerable Software and Affected Versions Google Chrome versions prior to 66.0.3359.117 Opera affected versions not specified Description A double-eviction in the Incognito mode cache led to a user-after-free in the Networking Disk Cache, allowing a remote attacker to execute arbitrar...

PT-2018-17371

Name of the Vulnerable Software and Affected Versions Google Chrome versions prior to 66.0.3359.117 Opera affected versions not specified Description A lack of host validation in DevTools allowed a remote attacker to execute arbitrary code via a crafted HTML page, if the user is running a remote...

PT-2018-17382

Name of the Vulnerable Software and Affected Versions Google Chrome versions prior to 66.0.3359.117 Opera versions prior to 66.0.3359.117 Description The issue allowed a remote attacker to bypass navigation restrictions via a crafted HTML page by making URLs clickable and allowing them to be styl...

PT-2018-17375

Name of the Vulnerable Software and Affected Versions Google Chrome versions prior to 66.0.3359.117 Opera affected versions not specified Description The issue involves incorrect handling of confusable characters in the Omnibox, allowing a remote attacker to perform domain spoofing via IDN...

PT-2018-17380

Name of the Vulnerable Software and Affected Versions Google Chrome versions prior to 66.0.3359.117 Opera affected versions not specified Description The issue allowed a remote attacker to cause the browser to execute scripts via a local non-HTML page by parsing documents as HTML in the Downloads...

PT-2018-17387

Name of the Vulnerable Software and Affected Versions Google Chrome versions prior to 66.0.3359.117 Opera affected versions not specified Description The issue is related to confusing settings in Autofill, which allowed a remote attacker to obtain potentially sensitive information from process...

PT-2018-17355

Name of the Vulnerable Software and Affected Versions Google Chrome versions prior to 66.0.3359.117 Opera affected versions not specified Description The issue allows a remote attacker to execute arbitrary code via a crafted HTML page due to the re-entry of a destructor in the Networking Disk...

PT-2018-17362

Name of the Vulnerable Software and Affected Versions Google Chrome versions prior to 66.0.3359.117 Opera versions prior to 66.0.3359.117 Description An integer overflow on 32-bit systems in WebAssembly allowed a remote attacker to execute arbitrary code inside a sandbox via a crafted HTML page...

PT-2018-17358

Name of the Vulnerable Software and Affected Versions Google Chrome versions prior to 66.0.3359.117 Opera versions prior to 66.0.3359.117 Description The issue is related to an iterator-invalidation bug in PDFium, which allows a remote attacker to execute arbitrary code inside a sandbox via a...

PT-2018-17369

Name of the Vulnerable Software and Affected Versions Google Chrome versions prior to 66.0.3359.117 Opera affected versions not specified Description A lack of CORS checks in Blink allowed a remote attacker to leak limited cross-origin data via a crafted HTML page. Recommendations For Google Chro...

PT-2018-17359

Name of the Vulnerable Software and Affected Versions Google Chrome versions prior to 66.0.3359.117 Opera affected versions not specified Description The issue is related to a lack of CORS checks after a Service Worker redirects to a cross-origin PDF. This allows a remote attacker to leak limited...

PT-2018-17378

Name of the Vulnerable Software and Affected Versions Google Chrome versions prior to 66.0.3359.117 Opera affected versions not specified Description The issue concerns incorrect handling of confusable characters in the URL Formatter, allowing a remote attacker to perform domain spoofing via IDN...

PT-2018-17364

Name of the Vulnerable Software and Affected Versions Google Chrome versions prior to 66.0.3359.117 Opera affected versions not specified Description The issue allows a remote attacker to potentially exploit heap corruption via a crafted HTML page. This is due to inline metadata in...

PT-2018-17386

Name of the Vulnerable Software and Affected Versions Google Chrome versions prior to 66.0.3359.117 Opera versions prior to 66.0.3359.117 Description A nullptr dereference in WebAssembly allowed a remote attacker to potentially perform out of bounds memory access via a crafted HTML page...

PT-2018-4299

Name of the Vulnerable Software and Affected Versions Unify OpenStage SIP and OpenScape Desk Phone IP V3 devices versions prior to R3.32.0 Description The issue allows remote attackers to gain super-user privileges by leveraging SSH access and incorrect ownership of various scripts in the /Opera...

Opera WebRTC Component Information Disclosure Vulnerability

Opera is a Norwegian Web browser developed by Opera Software, which supports multi-window browsing, customizable user interfaces, etc. The WebRTC component is one of the Web real-time communication components. A security vulnerability exists in the WebRTC component in Opera version 51.0.2830.55. ...

CVE-2018-6608

In the WebRTC component in Opera 51.0.2830.55, after visiting a web site that attempts to gather complete client information such as https://ip.voidsec.com, the browser can disclose a private IP address in a STUN request...