Lucene search
+L

4249 matches found

BDU FSTEC
BDU FSTEC
added 2017/12/21 12:00 a.m.13 views

The vulnerability of Google Chrome’s Blink rendering module allows a hacker to display a custom interface in a tab that is not controlled by the hacker.

The vulnerability of Google Chrome’s Blink rendering module is related to insufficient validation of input data. Exploiting this vulnerability allows a malicious actor to display a user interface in a tab that the attacker does not control, using a specially crafted HTML page...

6.1CVSS7.7AI score0.01122EPSS
SaveExploits0References7Affected Software1
BDU FSTEC
BDU FSTEC
added 2017/12/21 12:00 a.m.16 views

The vulnerability of Google Chrome’s Blink rendering module allows a hacker to display a custom interface in a tab that is not controlled by the hacker.

The vulnerability of Google Chrome’s Blink rendering module is related to insufficient validation of input data. Exploiting this vulnerability allows a malicious actor to display a user interface in a tab that the attacker does not control, using a specially crafted HTML page...

4.3CVSS7.7AI score0.01353EPSS
SaveExploits0References7Affected Software1
Tenable Nessus
Tenable Nessus
added 2017/12/14 12:00 a.m.41 views

openSUSE Security Update : chromium (openSUSE-2017-1349)

This update to Chromium 63.0.3239.84 fixes the following security issues : - CVE-2017-15408: Heap buffer overflow in PDFium - CVE-2017-15409: Out of bounds write in Skia - CVE-2017-15410: Use after free in PDFium - CVE-2017-15411: Use after free in PDFium - CVE-2017-15412: Use after free in libXM...

8.8CVSS6.8AI score0.02938EPSS
SaveExploits1References19
OPENSUSE Linux
OPENSUSE Linux
added 2017/12/08 12:15 p.m.349 views

Security update for chromium (important)

This update to Chromium 63.0.3239.84 fixes the following security issues: - CVE-2017-5124: UXSS with MHTML - CVE-2017-5125: Heap overflow in Skia - CVE-2017-5126: Use after free in PDFium - CVE-2017-5127: Use after free in PDFium - CVE-2017-5128: Heap overflow in WebGL - CVE-2017-5129: Use after...

8.8AI score0.05147EPSS
SaveExploits7References5
OPENSUSE Linux
OPENSUSE Linux
added 2017/12/08 12:15 p.m.95 views

Security update for chromium (important)

This update to Chromium 63.0.3239.84 fixes the following security issues: - CVE-2017-15408: Heap buffer overflow in PDFium - CVE-2017-15409: Out of bounds write in Skia - CVE-2017-15410: Use after free in PDFium - CVE-2017-15411: Use after free in PDFium - CVE-2017-15412: Use after free in libXML...

0.4AI score0.02938EPSS
SaveExploits1References1
RedHat Linux
RedHat Linux
added 2017/12/07 7:30 p.m.10 views

chromium-browser: out of bounds read in blink

Heap buffer overflow in Blob API in Google Chrome prior to 63.0.3239.84 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page, aka a Blink out-of-bounds read...

6.5CVSS7.6AI score0.01508EPSS
SaveExploits0References5
RedhatCVE
RedhatCVE
added 2017/12/07 10:22 a.m.37 views

CVE-2017-15416

Heap buffer overflow in Blob API in Google Chrome prior to 63.0.3239.84 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page, aka a Blink out-of-bounds read...

6.5CVSS3AI score0.01508EPSS
SaveExploits0References2
Google Chrome Security Advisories
Google Chrome Security Advisories
added 2017/12/06 12:00 a.m.73 views

Stable Channel Update for Desktop

The Chrome team is delighted to announce the promotion of Chrome 63 to the stable channel for Windows, Mac and Linux. This will roll out over the coming days/weeks. Chrome 63.0.3239.84 contains a number of fixes and improvements -- a list of changes is available in the log. Watch out for upcoming...

8.8CVSS9AI score0.02938EPSS
SaveExploits1Affected Software1
CNVD
CNVD
added 2017/11/08 12:00 a.m.11 views

UI spoofing vulnerability in chromium-browser Blink component

chromium-browser is an open source web browser project started by Google to provide source code for the proprietary Google Chrome browser. A UI spoofing vulnerability exists in the chromium-browser Blink component. An attacker can exploit this vulnerability to display spoofed information in the...

6.5CVSS6.7AI score0.01524EPSS
SaveExploits0References1
CNVD
CNVD
added 2017/10/30 12:00 a.m.10 views

Google Chrome Full Screen Warning Vulnerability

Google Chrome for Linux, Windows, Mac and Android is a web browser based on Linux, Windows, Mac and Android platforms developed by Google, Inc.Blink is a set of browser layout engine rendering engine developed by Google, Inc. and Opera Software, Inc. Blink is a set of browser layout engine...

6.5CVSS6.6AI score0.01433EPSS
SaveExploits0References1
Tenable Nessus
Tenable Nessus
added 2017/10/30 12:00 a.m.42 views

openSUSE Security Update : chromium (openSUSE-2017-1221)

This update to Chromium 62.0.3202.75 fixes the following security issues : - CVE-2017-5124: UXSS with MHTML - CVE-2017-5125: Heap overflow in Skia - CVE-2017-5126: Use after free in PDFium - CVE-2017-5127: Use after free in PDFium - CVE-2017-5128: Heap overflow in WebGL - CVE-2017-5129: Use after...

8.8CVSS6.6AI score0.05147EPSS
SaveExploits6References23
OpenVAS
OpenVAS
added 2017/10/30 12:00 a.m.60 views

openSUSE: Security Advisory for chromium (openSUSE-SU-2017:2902-1)

The remote host is missing an update for the Copyright C 2017 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free software; you can...

8.8CVSS7.4AI score0.05147EPSS
SaveExploits6References1
OPENSUSE Linux
OPENSUSE Linux
added 2017/10/29 12:09 a.m.436 views

Security update for chromium (important)

This update to Chromium 62.0.3202.75 fixes the following security issues: - CVE-2017-5124: UXSS with MHTML - CVE-2017-5125: Heap overflow in Skia - CVE-2017-5126: Use after free in PDFium - CVE-2017-5127: Use after free in PDFium - CVE-2017-5128: Heap overflow in WebGL - CVE-2017-5129: Use after...

8.2AI score0.05147EPSS
SaveExploits6References2
NVD
NVD
added 2017/10/27 5:29 a.m.13 views

CVE-2017-5118

Blink in Google Chrome prior to 61.0.3163.79 for Mac, Windows, and Linux, and 61.0.3163.81 for Android, failed to correctly propagate CSP restrictions to javascript scheme pages, which allowed a remote attacker to bypass content security policy via a crafted HTML page...

4.3CVSS4.6AI score0.01133EPSS
SaveExploits0References7
OSV
OSV
added 2017/10/27 5:29 a.m.6 views

CVE-2017-5075

Inappropriate implementation in CSP reporting in Blink in Google Chrome prior to 59.0.3071.86 for Linux, Windows, and Mac, and 59.0.3071.92 for Android, allowed a remote attacker to obtain the value of url fragments via a crafted HTML page...

4.3CVSS7.3AI score0.01167EPSS
SaveExploits0References6
OSV
OSV
added 2017/10/27 5:29 a.m.5 views

CVE-2017-5083

Inappropriate implementation in Blink in Google Chrome prior to 59.0.3071.86 for Mac, Windows, and Linux, and 59.0.3071.92 for Android, allowed a remote attacker to display UI on a non attacker controlled tab via a crafted HTML page...

4.3CVSS7.4AI score0.01122EPSS
SaveExploits0References6
OSV
OSV
added 2017/10/27 5:29 a.m.2 views

CVE-2017-5079

Inappropriate implementation in Blink in Google Chrome prior to 59.0.3071.86 for Mac, Windows, and Linux, and 59.0.3071.92 for Android, allowed a remote attacker to display UI on a non attacker controlled tab via a crafted HTML page...

4.3CVSS7.4AI score0.01353EPSS
SaveExploits0References6
OSV
OSV
added 2017/10/27 5:29 a.m.6 views

CVE-2017-5093

Inappropriate implementation in modal dialog handling in Blink in Google Chrome prior to 60.0.3112.78 for Mac, Windows, Linux, and Android allowed a remote attacker to prevent a full screen warning from being displayed via a crafted HTML page...

6.5CVSS7.3AI score0.01433EPSS
SaveExploits0References6
OSV
OSV
added 2017/10/27 5:29 a.m.3 views

CVE-2017-5087

A use after free in Blink in Google Chrome prior to 59.0.3071.104 for Mac, Windows, and Linux, and 59.0.3071.117 for Android, allowed a remote attacker to perform an out of bounds memory read via a crafted HTML page, aka an IndexedDB sandbox escape...

8.8CVSS7.3AI score0.01478EPSS
SaveExploits0References7
OSV
OSV
added 2017/10/27 5:29 a.m.8 views

CVE-2017-5064

Incorrect handling of DOM changes in Blink in Google Chrome prior to 58.0.3029.81 for Windows allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page...

8.8CVSS7.3AI score0.01374EPSS
SaveExploits0References6
Rows per page
Query Builder