CVE-2018-6114

Incorrect enforcement of CSP for tags in Blink in Google Chrome prior to 66.0.3359.117 allowed a remote attacker to bypass content security policy via a crafted HTML page...

UBUNTU-CVE-2018-6124

Type confusion in ReadableStreams in Blink in Google Chrome prior to 67.0.3396.62 allowed a remote attacker to potentially exploit object corruption via a crafted HTML page...

UBUNTU-CVE-2018-6114

Incorrect enforcement of CSP for tags in Blink in Google Chrome prior to 66.0.3359.117 allowed a remote attacker to bypass content security policy via a crafted HTML page...

UBUNTU-CVE-2018-6164

Insufficient origin checks for CSS content in Blink in Google Chrome prior to 68.0.3440.75 allowed a remote attacker to leak cross-origin data via a crafted HTML page...

Type confusion

Type confusion in ReadableStreams in Blink in Google Chrome prior to 67.0.3396.62 allowed a remote attacker to potentially exploit object corruption via a crafted HTML page...

UBUNTU-CVE-2018-17457

An object lifecycle issue in Blink could lead to a use after free in WebAudio in Google Chrome prior to 69.0.3497.81 allowed a remote attacker to execute arbitrary code inside a sandbox via a crafted HTML page...

CVE-2018-16072

A missing origin check related to HLS manifests in Blink in Google Chrome prior to 69.0.3497.81 allowed a remote attacker to bypass same origin policy via a crafted HTML page...

CVE-2018-17457

An object lifecycle issue in Blink could lead to a use after free in WebAudio in Google Chrome prior to 69.0.3497.81 allowed a remote attacker to execute arbitrary code inside a sandbox via a crafted HTML page...

CVE-2018-6164

Insufficient origin checks for CSS content in Blink in Google Chrome prior to 68.0.3440.75 allowed a remote attacker to leak cross-origin data via a crafted HTML page...

CVE-2018-16072

CVE-2018-16072 relates to Chrome/Blink where a missing origin check in HLS manifests could bypass the same-origin policy via a crafted HTML page. Affected software is Google Chrome (Blink engine); vulnerable builds are prior to Chrome/Chromium version 69.0.3497.81. The underlying issue is a failu...

CVE-2018-17457

The CVE-2018-17457 issue is a Blink WebAudio object lifecycle use-after-free in Google Chrome before 69.0.3497.81. The vulnerability stems from an object lifecycle mismanagement in Blink that could allow a remote attacker to execute arbitrary code inside the Chrome sandbox via a crafted HTML page...

CVE-2018-6124

Type confusion in ReadableStreams in Blink in Google Chrome prior to 67.0.3396.62 allowed a remote attacker to potentially exploit object corruption via a crafted HTML page...

CVE-2018-6123

CVE-2018-6123 is a use-after-free in Blink of Google Chrome prior to 67.0.3396.62, enabling a remote attacker to potentially corrupt the heap via a crafted HTML page. CNVD catalogs this Chrome/Blink memory misuse; Debian advisories note fixes in Chrome 67.0.3396.87 and later. Remediation: upgrade...

CVE-2018-16066

CVE-2018-16066 describes a use-after-free in Blink that affects Google Chrome prior to 69.0.3497.81, enabling potential heap corruption via a crafted HTML page. The connected documents confirm Chrome/Chromium updates (e.g., Chromium 69.0.3497.81) as the remediation, with multiple advisories notin...

CVE-2018-17457

Removed by vendor...

CVE-2018-6137

Removed by vendor...

CVE-2018-6114

Removed by vendor...

CVE-2018-6093

CVE-2018-6093 affects Google Chrome/Chromium Blink: a vulnerability in origin checks that could allow a remote attacker to bypass same-origin protections and leak cross-origin data via crafted HTML. The issue is listed as a Same Origin Policy bypass in Service Worker/Blink components. Debian and ...

CVE-2018-17457

An object lifecycle issue in Blink could lead to a use after free in WebAudio in Google Chrome prior to 69.0.3497.81 allowed a remote attacker to execute arbitrary code inside a sandbox via a crafted HTML page...

CVE-2018-6114

CVE-2018-6114: A vulnerability in Chromium/Blink allowed bypass of Content Security Policy via CSP enforcement failure for tags. Affected products include Google Chrome and Chromium (Blink engine). Root cause is CSP bypass in the rendering pipeline, enabling remote HTML crafted pages to bypass C...