27 matches found
CVE-2018-17471
Removed by vendor...
CVE-2018-17471: Undefined Security Weakness
Incorrect dialog placement in WebContents in Google Chrome prior to 70.0.3538.67 allowed a remote attacker to obscure the full screen warning via a crafted HTML page...
Google Chrome WebContents Input Validation Vulnerability
Google Chrome is a web browser developed by Google, Inc. WebContents is a component of Google Chrome that provides rendering and control of web pages. An input validation vulnerability exists in WebContents in versions of Google Chrome prior to 70.0.3538.67. A remote attacker can exploit this...
CVE-2018-17471
Incorrect dialog placement in WebContents in Google Chrome prior to 70.0.3538.67 allowed a remote attacker to obscure the full screen warning via a crafted HTML page...
PT-2018-3215
Name of the Vulnerable Software and Affected Versions Google Chrome versions prior to 70.0.3538.67 Description The issue exists due to insufficient input validation in Google Chrome, allowing a remote attacker to hide the full screen warning using a specially crafted HTML page. This can be achiev...
Oxide Memory Misreference Vulnerability
Oxide is a WEB browsing engine. A memory misreference vulnerability exists in Oxide's handling of the deletion of all WebContents when a RenderProcessHost instance exists, which allows an attacker to exploit the vulnerability to crash the application or execute arbitrary code...
CVE-2015-1317: Undefined Security Weakness
Use-after-free vulnerability in Oxide before 1.5.6 and 1.6.x before 1.6.1 allows remote attackers to cause a denial of service crash or possibly execute arbitrary code by deleting all WebContents while a RenderProcessHost instance still exists...