PT-2017-14069

Name of the Vulnerable Software and Affected Versions Google Chrome versions prior to 63.0.3239.84 Opera affected versions not specified Description The issue is related to insufficient policy enforcement in the Omnibox feature, allowing a remote attacker to perform domain spoofing via IDN...

PT-2017-14055

Name of the Vulnerable Software and Affected Versions Google Chrome versions prior to 63.0.3239.84 Opera versions prior to 63.0.3239.84 Description The issue is related to an out-of-bounds write in the QUIC networking stack, allowing a remote attacker to gain code execution via a malicious server...

PT-2017-14073

Name of the Vulnerable Software and Affected Versions Google Chrome versions prior to 63.0.3239.84 Opera affected versions not specified Description The issue is related to insufficient data validation in the Chromecast plugin, allowing a remote attacker to inject arbitrary scripts or HTML...

PT-2017-14064

Name of the Vulnerable Software and Affected Versions Google Chrome versions prior to 63.0.3239.84 Opera affected versions not specified Description The issue involves the use of uninitialized memory in Skia, allowing a remote attacker to obtain potentially sensitive information from process memo...

PT-2017-14067

Name of the Vulnerable Software and Affected Versions Google Chrome versions prior to 63.0.3239.84 Opera affected versions not specified Description The issue is related to an inappropriate implementation in BoringSSL SPAKE2, which allows a remote attacker to leak the low-order bits of...

PT-2017-14068

Name of the Vulnerable Software and Affected Versions Google Chrome versions prior to 63.0.3239.84 Opera affected versions not specified Description The issue is related to insufficient policy enforcement in the Omnibox, allowing a remote attacker to perform domain spoofing via IDN homographs in ...

PT-2017-14057

Name of the Vulnerable Software and Affected Versions Google Chrome versions prior to 63.0.3239.84 Opera affected versions not specified Description A heap buffer overflow in Skia allows a remote attacker to potentially exploit heap corruption via a crafted HTML page. This issue affects Google...

PT-2017-14070

Name of the Vulnerable Software and Affected Versions Google Chrome versions prior to 63.0.3239.84 Opera affected versions not specified Description The issue is related to insufficient policy enforcement in the Omnibox feature, allowing a remote attacker to perform domain spoofing via IDN...

PT-2017-14062

Name of the Vulnerable Software and Affected Versions Google Chrome versions prior to 63.0.3239.84 Opera affected versions not specified Description The issue is related to a heap buffer overflow in the Blob API, which can be exploited by a remote attacker using a crafted HTML page, potentially...

PT-2017-14065

Name of the Vulnerable Software and Affected Versions Google Chrome versions prior to 63.0.3239.84 Opera affected versions not specified Description The issue is related to insufficient policy enforcement in the Resource Timing API, allowing a remote attacker to infer browsing history. This can b...

PT-2017-14063

Name of the Vulnerable Software and Affected Versions Google Chrome versions prior to 63.0.3239.84 Opera affected versions not specified Description The issue is related to an inappropriate implementation in Skia canvas composite operations, allowing a remote attacker to leak cross-origin data vi...

PT-2017-14059

Name of the Vulnerable Software and Affected Versions Google Chrome versions prior to 63.0.3239.84 Opera affected versions not specified Description The issue allows a remote attacker to potentially exploit heap corruption via a crafted PDF file. This is due to a use after free in PDFium...

PT-2017-3723

Name of the Vulnerable Software and Affected Versions: Google Chrome versions prior to 64.0.3282.119 Opera affected versions not specified Description: The issue exists due to insufficient data validation in the External Protocol Handler component. A remote attacker can potentially execute...

PT-2018-17336

Name of the Vulnerable Software and Affected Versions Google Chrome versions prior to 65.0.3325.146 Opera versions prior to 65.0.3325.146 Description The issue is related to Type Confusion in the implementation of defineGetter in V8. A remote attacker could potentially exploit heap corruption via...

PT-2018-3799

Name of the Vulnerable Software and Affected Versions Google Chrome versions prior to 65.0.3325.146 Opera versions prior to 65.0.3325.146 Description The issue is related to an integer overflow when computing the required allocation size for a new JavaScript object in V8. This could allow a remot...

PT-2018-17333

Name of the Vulnerable Software and Affected Versions Google Chrome versions prior to 65.0.3325.146 Opera versions prior to 65.0.3325.146 Description A race condition in the handling of SharedArrayBuffers in WebAssembly allowed a remote attacker to potentially exploit heap corruption via a crafte...

PT-2017-14052

Name of the Vulnerable Software and Affected Versions Google Chrome versions prior to 62.0.3202.89 Opera affected versions not specified Description A stack buffer overflow in the QUIC networking stack allowed a remote attacker to gain code execution via a malicious server. This issue enables...

PT-2017-14053

Name of the Vulnerable Software and Affected Versions Google Chrome versions prior to 62.0.3202.89 Opera affected versions not specified Description A use after free in V8 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. Recommendations For Google Chrome...

HackerOne: Reverse Tabnabbing Vulnerability in Outgoing Links

The external links in the reports are not properly handled, using the issue the links can access the openers and replace them with some other page. To Verify the issue, just go to any report which do have any external link and inspect the proceed button. Where the issue lies: rel="noreferrer"...

PT-2017-14054

Name of the Vulnerable Software and Affected Versions Google Chrome versions prior to 62.0.3202.75 Opera versions prior to 62.0.3202.75 is not specified, however since Opera is mentioned as affected, we can say: Opera affected versions not specified Description A stack buffer overflow in V8 allow...