CVE-2018-6144

Off-by-one error in PDFium in Google Chrome prior to 67.0.3396.62 allowed a remote attacker to perform an out of bounds memory write via a crafted PDF file...

PT-2018-3256

Name of the Vulnerable Software and Affected Versions Google Chrome versions prior to 67.0.3396.62 Description The issue is related to an off-by-one error in the PDFium component of Google Chrome, which could allow a remote attacker to perform an out-of-bounds memory write using a specially craft...

chromium -- multiple vulnerabilities

Google Chrome Releases reports: 34 security fixes in this release, including: 835639 High CVE-2018-6123: Use after free in Blink. Reported by Looben Yang on 2018-04-22 840320 High CVE-2018-6124: Type confusion in Blink. Reported by Guang Gong of Alpha Team, Qihoo 360 on 2018-05-07 818592 High...

Google Chrome PDFium heap buffer overflow vulnerability (CNVD-2018-11353)

Google Chrome is the United States Google Google company developed a Web browser. PDFium is one of the open source PDF rendering engine. A heap buffer overflow vulnerability exists in PDFium in versions prior to Google Chrome 66.0.3359.170, which stems from the program's failure to perform proper...

chromium-browser: Heap buffer overflow in PDFium

An integer overflow that could lead to an attacker-controlled heap out-of-bounds write in PDFium in Google Chrome prior to 66.0.3359.170 allowed a remote attacker to execute arbitrary code inside a sandbox via a crafted PDF file...

FreeBSD : chromium -- multiple vulnerabilities (e457978b-5484-11e8-9b85-54ee754af08e)

Google Chrome Releases reports : 4 security fixes in this release : - 835887 Critical: Chain leading to sandbox escape. Reported by Anonymous on 2018-04-23 - 836858 High CVE-2018-6121: Privilege Escalation in extensions - 836141 High CVE-2018-6122: Type confusion in V8 - 833721 High CVE-2018-6120...

Security update for Chromium (important)

This update for Chromium to version 66.0.3359.170 fixes the following issues: Security issues fixed boo1092923: - CVE-2018-6121: Privilege Escalation in extensions - CVE-2018-6122: Type confusion in V8 - CVE-2018-6120: Heap buffer overflow in PDFium - Various fixes from internal audits, fuzzing a...

CVE-2018-6120

An integer overflow that could lead to an attacker-controlled heap out-of-bounds write in PDFium in Google Chrome prior to 66.0.3359.170 allowed a remote attacker to execute arbitrary code inside a sandbox via a crafted PDF file...

Google Chrome Security Updates (stable-channel-update-for-desktop-2018-05) - Linux

Google Chrome is prone to multiple vulnerabilities. SPDX-FileCopyrightText: 2018 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE = "cpe:/a:google:chrome"; ifdescription...

PT-2018-3228

Name of the Vulnerable Software and Affected Versions Google Chrome versions prior to 66.0.3359.170 Opera versions prior to 66.0.3359.170 Description The issue is related to an integer overflow in PDFium, a PDF content handler in Google Chrome and Opera, which could lead to a heap out-of-bounds...

KLA11249 Multiple vulnerabilities in Google Chrome

Multiple serious vulnerabilities have been found in Google Chrome. Malicious users can exploit these vulnerabilities to execute arbitrary code, cause denial of service and gain privileges. Below is a complete list of vulnerabilities: 1. A chain leading to sandbox escape can be exploited remotely ...

Stable Channel Update for Desktop

The stable channel has been updated to 66.0.3359.170 for Windows, Mac, and Linux, which will roll out over the coming days/weeks. A list of all changes is available in the log. Interested in switching release channels? Find out how. If you find a new issue, please let us know by filing a bug. The...

FreeBSD : chromium -- vulnerability (36ff7a74-47b1-11e8-a7d6-54e1ad544088)

Google Chrome Releases reports : 62 security fixes in this release : - 826626 Critical CVE-2018-6085: Use after free in Disk Cache. Reported by Ned Williamson on 2018-03-28 - 827492 Critical CVE-2018-6086: Use after free in Disk Cache. Reported by Ned Williamson on 2018-03-30 - 813876 High...

chromium-browser: Use after free in PDFium

An iterator-invalidation bug in PDFium in Google Chrome prior to 66.0.3359.117 allowed a remote attacker to execute arbitrary code inside a sandbox via a crafted PDF file...

openSUSE: Security Advisory for chromium (openSUSE-SU-2018:1042-1)

The remote host is missing an update for the Copyright C 2018 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free software; you can...

CVE-2018-6088

An iterator-invalidation bug in PDFium in Google Chrome prior to 66.0.3359.117 allowed a remote attacker to execute arbitrary code inside a sandbox via a crafted PDF file...

PT-2018-17358

Name of the Vulnerable Software and Affected Versions Google Chrome versions prior to 66.0.3359.117 Opera versions prior to 66.0.3359.117 Description The issue is related to an iterator-invalidation bug in PDFium, which allows a remote attacker to execute arbitrary code inside a sandbox via a...

Stable Channel Update for Desktop

The Chrome team is delighted to announce the promotion of Chrome 66 to the stable channel for Windows, Mac and Linux. This will roll out over the coming days/weeks. Chrome 66.0.3359.117 contains a number of fixes and improvements -- a list of changes is available in the log. Watch out for upcomin...

chromium -- multiple vulnerabilities

Google Chrome Releases reports: 4 security fixes in this release: 835887 Critical: Chain leading to sandbox escape. Reported by Anonymous on 2018-04-23 836858 High CVE-2018-6121: Privilege Escalation in extensions 836141 High CVE-2018-6122: Type confusion in V8 833721 High CVE-2018-6120: Heap...

Google Chrome PDFium integer overflow vulnerability (CNVD-2018-08955)

Google Chrome is the United States Google Google company developed a Web browser. PDFium is one of the open source PDF rendering engine. An integer overflow vulnerability exists in PDFium in versions prior to Google Chrome 65.0.3325.146. A remote attacker could exploit this vulnerability by...