Lucene search
K

755 matches found

OSV
OSV
added 2018/12/11 4:29 p.m.4 views

CVE-2018-18339

Incorrect object lifecycle in WebAudio in Google Chrome prior to 71.0.3578.80 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page...

8.8CVSS8.6AI score
Exploits0References6
CVE
CVE
added 2018/12/11 3:0 p.m.140 views

CVE-2018-18339

CVE-2018-18339 affects Chromium/Google Chrome where a use-after-free in the WebAudio implementation (before 71.0.3578.80) can lead to remote code execution via crafted HTML pages. Arch Linux notes the fix is in Chromium 71.0.3578.80-1 (upgrade recommended). Other sources corroborate the vulnerabi...

8.8CVSS8.4AI score0.01424EPSS
Exploits0References6Affected Software1
Cvelist
Cvelist
added 2018/12/11 3:0 p.m.17 views

CVE-2018-18339

Incorrect object lifecycle in WebAudio in Google Chrome prior to 71.0.3578.80 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page...

8.5AI score0.01424EPSS
Exploits0References6
Debian CVE
Debian CVE
added 2018/12/11 3:0 p.m.20 views

CVE-2018-18339

Incorrect object lifecycle in WebAudio in Google Chrome prior to 71.0.3578.80 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page...

8.8CVSS8.8AI score0.01424EPSS
Exploits0
RedHat Linux
RedHat Linux
added 2018/12/10 10:34 a.m.4 views

chromium-browser: Use after free in WebAudio

Incorrect object lifecycle in WebAudio in Google Chrome prior to 71.0.3578.80 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page...

8.8CVSS7.4AI score0.01424EPSS
Exploits0References5
RedHat Linux
RedHat Linux
added 2018/12/10 10:34 a.m.120 views

Important: Red Hat Security Advisory: chromium-browser security update

An update for chromium-browser is now available for Red Hat Enterprise Linux 6 Supplementary. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for ea...

8.8CVSS6.9AI score0.34292EPSS
Exploits1References28
Tenable Nessus
Tenable Nessus
added 2018/12/10 12:0 a.m.30 views

openSUSE Security Update : Chromium (openSUSE-2018-1521)

This update to Chromium version 71.0.3578.80 fixes security issues and bugs. Security issues fixed boo1118529 : - CVE-2018-17480: Out of bounds write in V8 - CVE-2018-17481: Use after frees in PDFium - CVE-2018-18335: Heap buffer overflow in Skia - CVE-2018-18336: Use after free in PDFium -...

8.8CVSS7.5AI score0.34292EPSS
Exploits1References28
ArchLinux
ArchLinux
added 2018/12/08 12:0 a.m.40 views

[ASA-201812-2] chromium: multiple issues

Arch Linux Security Advisory ASA-201812-2 ========================================= Severity: Critical Date : 2018-12-08 CVE-ID : CVE-2018-17480 CVE-2018-17481 CVE-2018-18335 CVE-2018-18336 CVE-2018-18337 CVE-2018-18338 CVE-2018-18339 CVE-2018-18340 CVE-2018-18341 CVE-2018-18342 CVE-2018-18343...

8.8CVSS1.2AI score0.34292EPSS
Exploits1References56
CNVD
CNVD
added 2018/12/06 12:0 a.m.1 views

Google Chrome WebAudio Buffer Overflow Vulnerability

Google Chrome is the United States Google Google company developed a Web browser. WebAudio is one of the audio player plug-ins. A buffer overflow vulnerability exists in WebAudio in versions of Google Chrome prior to 71.0.3578.80. A remote attacker can exploit this vulnerability to cause heap...

8.8CVSS9.2AI score0.01424EPSS
Exploits0References1
RedhatCVE
RedhatCVE
added 2018/12/05 6:57 p.m.17 views

CVE-2018-18339

Incorrect object lifecycle in WebAudio in Google Chrome prior to 71.0.3578.80 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page...

8.8CVSS2.8AI score0.01424EPSS
Exploits0References2
Kaspersky
Kaspersky
added 2018/12/04 12:0 a.m.84 views

KLA11379 Multiple vulnerabilities in Google Chrome

Multiple serious vulnerabilities were found in Google Chrome. Malicious users can exploit these vulnerabilities to execute arbitrary code, obtain sensitive information, cause denial of service. Below is a complete list of vulnerabilities: 1. An out-of-bounds read in V8 can be exploited remotely t...

8.8CVSS9.3AI score0.34292EPSS
Exploits1References4
Google Chrome Security Advisories
Google Chrome Security Advisories
added 2018/12/04 12:0 a.m.42 views

Stable Channel Update for Desktop

The Chrome team is delighted to announce the promotion of Chrome 71 to the stable channel for Windows, Mac and Linux. This will roll out over the coming days/weeks. Chrome 71.0.3578.80 contains a number of fixes and improvements -- a list of changes is available in the log. Watch out for upcoming...

8.8CVSS9AI score0.34292EPSS
Exploits1Affected Software1
FreeBSD
FreeBSD
added 2018/12/04 12:0 a.m.46 views

chromium -- multiple vulnerabilities

Google Chrome Releases reports: 43 security fixes in this release, including: High CVE-2018-17480: Out of bounds write in V8 High CVE-2018-17481: Use after free in PDFium High CVE-2018-18335: Heap buffer overflow in Skia High CVE-2018-18336: Use after free in PDFium High CVE-2018-18337: Use after...

8.8CVSS1.9AI score0.34292EPSS
Exploits1References1
NVD
NVD
added 2018/11/14 3:29 p.m.15 views

CVE-2018-6060

Use after free in WebAudio in Google Chrome prior to 65.0.3325.146 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page...

8.8CVSS8.9AI score0.01989EPSS
Exploits0References5
UbuntuCve
UbuntuCve
added 2018/11/14 3:29 p.m.18 views

CVE-2018-6060

Use after free in WebAudio in Google Chrome prior to 65.0.3325.146 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page...

8.8CVSS7.3AI score0.01989EPSS
Exploits0References2
Prion
Prion
added 2018/11/14 3:29 p.m.19 views

Design/Logic Flaw

Use after free in WebAudio in Google Chrome prior to 65.0.3325.146 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page...

6.8CVSS8.8AI score0.01989EPSS
Exploits0References5Affected Software5
CVE
CVE
added 2018/11/14 3:0 p.m.118 views

CVE-2018-6060

CVE-2018-6060 describes a use-after-free in Chrome/Chromium’s Blink/WebKit (WebAudio) prior to version 65.0.3325.146. The issue allows a remote attacker to potentially cause heap corruption via a crafted HTML page. The Debian advisories and Chromium security updates indicate fixes in Chromium/Chr...

8.8CVSS8.8AI score0.01989EPSS
Exploits0References5Affected Software1
Cvelist
Cvelist
added 2018/11/14 3:0 p.m.22 views

CVE-2018-6060

Use after free in WebAudio in Google Chrome prior to 65.0.3325.146 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page...

8.9AI score0.01989EPSS
Exploits0References5
Debian CVE
Debian CVE
added 2018/11/14 3:0 p.m.20 views

CVE-2018-6060

Removed by vendor...

8.8CVSS9.3AI score0.01989EPSS
Exploits0
RedHat Linux
RedHat Linux
added 2018/09/10 9:31 p.m.3 views

chromium-browser: Out of bounds read in WebAudio

A use after free in WebAudio in Google Chrome prior to 69.0.3497.81 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page...

6.5CVSS7.4AI score0.01408EPSS
Exploits0References5
Rows per page
Query Builder