UBUNTU-CVE-2017-5056

A use after free in Blink in Google Chrome prior to 57.0.2987.133 for Linux, Windows, and Mac, and 57.0.2987.132 for Android, allowed a remote attacker to perform an out of bounds memory read via a crafted HTML page...

CVE-2017-5056

A use after free in Blink in Google Chrome prior to 57.0.2987.133 for Linux, Windows, and Mac, and 57.0.2987.132 for Android, allowed a remote attacker to perform an out of bounds memory read via a crafted HTML page...

CVE-2017-5073

Use after free in print preview in Blink in Google Chrome prior to 59.0.3071.86 for Linux, Windows, and Mac, and 59.0.3071.92 for Android, allowed a remote attacker to perform an out of bounds memory read via a crafted HTML page...

UBUNTU-CVE-2017-5093

Inappropriate implementation in modal dialog handling in Blink in Google Chrome prior to 60.0.3112.78 for Mac, Windows, Linux, and Android allowed a remote attacker to prevent a full screen warning from being displayed via a crafted HTML page...

UBUNTU-CVE-2017-5079

Inappropriate implementation in Blink in Google Chrome prior to 59.0.3071.86 for Mac, Windows, and Linux, and 59.0.3071.92 for Android, allowed a remote attacker to display UI on a non attacker controlled tab via a crafted HTML page...

UBUNTU-CVE-2017-5073

Use after free in print preview in Blink in Google Chrome prior to 59.0.3071.86 for Linux, Windows, and Mac, and 59.0.3071.92 for Android, allowed a remote attacker to perform an out of bounds memory read via a crafted HTML page...

UBUNTU-CVE-2017-5075

Inappropriate implementation in CSP reporting in Blink in Google Chrome prior to 59.0.3071.86 for Linux, Windows, and Mac, and 59.0.3071.92 for Android, allowed a remote attacker to obtain the value of url fragments via a crafted HTML page...

UBUNTU-CVE-2017-5052

An incorrect assumption about block structure in Blink in Google Chrome prior to 57.0.2987.133 for Mac, Windows, and Linux, and 57.0.2987.132 for Android, allowed a remote attacker to potentially exploit memory corruption via a crafted HTML page that triggers improper casting...

CVE-2017-5075

CVE-2017-5075 is a CSP reporting information-disclosure flaw in the Blink/Chromium CSP reporting code. The vulnerability allows a remote attacker to obtain the value of URL fragments through a crafted HTML page. Affected component is the CSP reporting in Blink within Chromium-based QtWebEngine bu...

CVE-2017-5087

A use after free in Blink in Google Chrome prior to 59.0.3071.104 for Mac, Windows, and Linux, and 59.0.3071.117 for Android, allowed a remote attacker to perform an out of bounds memory read via a crafted HTML page, aka an IndexedDB sandbox escape...

CVE-2017-5059

CVE-2017-5059 describes a type confusion in Blink used by Google Chrome prior to 58.0.3029.81 on Linux/Windows/macOS (58.0.3029.83 on Android). The underlying issue could allow a remote attacker to potentially obtain code execution through a crafted HTML page. Desktop impact is listed as code exe...

CVE-2017-5056

CVE-2017-5056 is a use-after-free in Blink in Google Chrome that allowed a remote attacker to trigger an out-of-bounds memory read via a crafted HTML page. Affected: Chrome on Linux/Windows/macOS before 57.0.2987.133 and Android before 57.0.2987.132. Mitigation: apply the Chrome updates (stable c...

CVE-2017-5087

CVE-2017-5087 is a use-after-free in Blink in Google Chrome that enables a remote attacker to perform an out-of-bounds memory read via a crafted HTML page (IndexedDB sandbox escape). Affected Chrome versions: prior to 59.0.3071.104 on Mac/Windows/Linux and 59.0.3071.117 on Android. Impact describ...

CVE-2017-5093

Inappropriate implementation in modal dialog handling in Blink in Google Chrome prior to 60.0.3112.78 for Mac, Windows, Linux, and Android allowed a remote attacker to prevent a full screen warning from being displayed via a crafted HTML page...

CVE-2017-5083

Inappropriate implementation in Blink in Google Chrome prior to 59.0.3071.86 for Mac, Windows, and Linux, and 59.0.3071.92 for Android, allowed a remote attacker to display UI on a non attacker controlled tab via a crafted HTML page...

CVE-2017-5065

CVE-2017-5065 is a Blink/navigation flaw in Google Chrome on Windows and macOS prior to 58.0.3029.81. A crafted HTML page could mislead a user into making an incorrect security decision. The vulnerability stems from insufficient action on page navigation. Remediation, where noted, is to update to...

CVE-2017-5118

Removed by vendor...

CVE-2017-5059

Removed by vendor...

CVE-2017-5064

CVE-2017-5064 relates to Blink in Google Chrome prior to 58.0.3029.81 on Windows, where incorrect handling of DOM changes could lead to heap corruption via a crafted HTML page. The vulnerability affects Chrome/Chromium’s rendering engine (Blink) and could be exploited remotely without user intera...

CVE-2017-5118

CVE-2017-5118 describes a CSP bypass in Blink used by Google Chrome (Mac/Win/Linux) and Chromium builds, where CSP restrictions were not correctly propagated to javascript: scheme pages. The underlying issue allowed a remote attacker to bypass the Content Security Policy via a crafted HTML page. ...