Lucene search
K

755 matches found

NVD
NVD
added 2019/01/09 7:29 p.m.17 views

CVE-2018-17457

An object lifecycle issue in Blink could lead to a use after free in WebAudio in Google Chrome prior to 69.0.3497.81 allowed a remote attacker to execute arbitrary code inside a sandbox via a crafted HTML page...

8.8CVSS8.8AI score0.01759EPSS
Exploits0References2
OSV
OSV
added 2019/01/09 7:29 p.m.2 views

CVE-2018-16067

A use after free in WebAudio in Google Chrome prior to 69.0.3497.81 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page...

6.5CVSS5.8AI score0.01408EPSS
Exploits0References6
NVD
NVD
added 2019/01/09 7:29 p.m.11 views

CVE-2018-16067

A use after free in WebAudio in Google Chrome prior to 69.0.3497.81 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page...

6.5CVSS7.5AI score0.01408EPSS
Exploits0References6
Prion
Prion
added 2019/01/09 7:29 p.m.16 views

Design/Logic Flaw

A use after free in WebAudio in Google Chrome prior to 69.0.3497.81 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page...

4.3CVSS7.4AI score0.01408EPSS
Exploits0References6Affected Software5
Prion
Prion
added 2019/01/09 7:29 p.m.15 views

Design/Logic Flaw

An object lifecycle issue in Blink could lead to a use after free in WebAudio in Google Chrome prior to 69.0.3497.81 allowed a remote attacker to execute arbitrary code inside a sandbox via a crafted HTML page...

6.8CVSS9AI score0.01759EPSS
Exploits0References2Affected Software1
OSV
OSV
added 2019/01/09 7:29 p.m.0 views

UBUNTU-CVE-2018-17457

An object lifecycle issue in Blink could lead to a use after free in WebAudio in Google Chrome prior to 69.0.3497.81 allowed a remote attacker to execute arbitrary code inside a sandbox via a crafted HTML page...

8.8CVSS7.7AI score0.01759EPSS
Exploits0References4
OSV
OSV
added 2019/01/09 7:29 p.m.1 views

UBUNTU-CVE-2018-16067

A use after free in WebAudio in Google Chrome prior to 69.0.3497.81 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page...

6.5CVSS7AI score0.01408EPSS
Exploits0References3
Cvelist
Cvelist
added 2019/01/09 7:0 p.m.20 views

CVE-2018-17457

An object lifecycle issue in Blink could lead to a use after free in WebAudio in Google Chrome prior to 69.0.3497.81 allowed a remote attacker to execute arbitrary code inside a sandbox via a crafted HTML page...

9.1AI score0.01759EPSS
Exploits0References2
CVE
CVE
added 2019/01/09 7:0 p.m.102 views

CVE-2018-17457

The CVE-2018-17457 issue is a Blink WebAudio object lifecycle use-after-free in Google Chrome before 69.0.3497.81. The vulnerability stems from an object lifecycle mismanagement in Blink that could allow a remote attacker to execute arbitrary code inside the Chrome sandbox via a crafted HTML page...

8.8CVSS9AI score0.01759EPSS
Exploits0References2Affected Software1
CVE
CVE
added 2019/01/09 7:0 p.m.127 views

CVE-2018-16067

CVE-2018-16067 describes a use-after-free in WebAudio in Google Chrome/Chromium prior to 69.0.3497.81, enabling a remote attacker to potentially cause heap corruption via a crafted HTML page. Connected sources document remediation via upgrading to Chromium/Chrome version 69.0.3497.81 or newer (e....

6.5CVSS7.3AI score0.01408EPSS
Exploits0References6Affected Software1
Cvelist
Cvelist
added 2019/01/09 7:0 p.m.22 views

CVE-2018-16067

A use after free in WebAudio in Google Chrome prior to 69.0.3497.81 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page...

7.4AI score0.01408EPSS
Exploits0References6
Debian CVE
Debian CVE
added 2019/01/09 7:0 p.m.23 views

CVE-2018-17457

Removed by vendor...

8.8CVSS9.3AI score0.01759EPSS
Exploits0
Debian CVE
Debian CVE
added 2019/01/09 7:0 p.m.28 views

CVE-2018-16067

Removed by vendor...

6.5CVSS8AI score0.01408EPSS
Exploits0
Tenable Nessus
Tenable Nessus
added 2019/01/07 12:0 a.m.51 views

FreeBSD : chromium -- multiple vulnerabilities (546d4dd4-10ea-11e9-b407-080027ef1a23)

Google Chrome Releases reports : 43 security fixes in this release, including : - High CVE-2018-17480: Out of bounds write in V8 - High CVE-2018-17481: Use after free in PDFium - High CVE-2018-18335: Heap buffer overflow in Skia - High CVE-2018-18336: Use after free in PDFium - High CVE-2018-1833...

8.8CVSS7.5AI score0.34292EPSS
Exploits1References29
OPENSUSE Linux
OPENSUSE Linux
added 2018/12/15 3:8 p.m.161 views

Security update for Chromium (important)

This update to Chromium 71.0.3578.98 fixes the following issues: Security issues fixed boo1118529: - CVE-2018-17480: Out of bounds write in V8 - CVE-2018-17481: Use after frees in PDFium - CVE-2018-18335: Heap buffer overflow in Skia - CVE-2018-18336: Use after free in PDFium - CVE-2018-18337: Us...

6.8CVSS1.2AI score0.34292EPSS
Exploits1References2
Kaspersky
Kaspersky
added 2018/12/12 12:0 a.m.39 views

KLA11734 Multiple vulnerabilities in Opera

Multiple vulnerabilities were found in Opera. Malicious users can exploit these vulnerabilities to cause denial of service, bypass security restrictions, execute arbitrary code, spoof user interface, obtain sensitive information. Below is a complete list of vulnerabilities: 1. Use after free...

8.8CVSS9.9AI score0.34292EPSS
Exploits1References5
UbuntuCve
UbuntuCve
added 2018/12/11 4:29 p.m.23 views

CVE-2018-18339

Incorrect object lifecycle in WebAudio in Google Chrome prior to 71.0.3578.80 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page...

8.8CVSS7.2AI score0.01424EPSS
Exploits0References1
OSV
OSV
added 2018/12/11 4:29 p.m.0 views

UBUNTU-CVE-2018-18339

Incorrect object lifecycle in WebAudio in Google Chrome prior to 71.0.3578.80 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page...

8.8CVSS7.3AI score0.01424EPSS
Exploits0References2
Prion
Prion
added 2018/12/11 4:29 p.m.12 views

Design/Logic Flaw

Incorrect object lifecycle in WebAudio in Google Chrome prior to 71.0.3578.80 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page...

6.8CVSS8.4AI score0.01424EPSS
Exploits0References6Affected Software5
NVD
NVD
added 2018/12/11 4:29 p.m.15 views

CVE-2018-18339

Incorrect object lifecycle in WebAudio in Google Chrome prior to 71.0.3578.80 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page...

8.8CVSS8.5AI score0.01424EPSS
Exploits0References6
Rows per page
Query Builder