CVE-2017-5079

CVE-2017-5079 affects Blink in Chromium/Chrome on Mac, Windows and Linux (desktop) and Android, allowing a remote attacker to spoof UI by crafting HTML in a non-attacker tab. Desktop impact reported as UI spoofing; affected Chrome versions before 59.0.3071.86 (and Android before 59.0.3071.92). Re...

CVE-2017-5073

Use after free in print preview in Blink in Google Chrome prior to 59.0.3071.86 for Linux, Windows, and Mac, and 59.0.3071.92 for Android, allowed a remote attacker to perform an out of bounds memory read via a crafted HTML page...

CVE-2017-5059

Type confusion in Blink in Google Chrome prior to 58.0.3029.81 for Linux, Windows, and Mac, and 58.0.3029.83 for Android, allowed a remote attacker to potentially obtain code execution via a crafted HTML page...

CVE-2017-5052

CVE-2017-5052 affects Google Chrome/Blink: an incorrect assumption about block structure can allow memory corruption via a crafted HTML page. Affected are Chrome on Mac/Windows/Linux up to 57.0.2987.133 and Android up to 57.0.2987.132. Exploitation may lead to arbitrary code or DoS; a malware pre...

CVE-2017-5083

CVE-2017-5083: In Google Chrome Blink, an inappropriate implementation allowed a remote attacker to display UI on a non-attacker-controlled tab via a crafted HTML page. Affected versions are Chrome desktop/macOS/Linux prior to 59.0.3071.86 and Android prior to 59.0.3071.92. Mitigation is to upgra...

CVE-2017-5073

CVE-2017-5073 is a vulnerability in the Chromium-based Google Chrome browser’s print preview feature (Blink). The issue is a use-after-free in print preview, affecting Chrome up to 59.0.3071.86 on Linux, Windows, and macOS, and 59.0.3071.92 on Android. The underlying fault is a memory-management ...

CVE-2017-5065

Removed by vendor...

CVE-2017-5073

Removed by vendor...

chromium-browser: out of bounds write in skia

Off-by-one read/write on the heap in Blink in Google Chrome prior to 62.0.3202.62 allowed a remote attacker to corrupt memory and possibly leak information and potentially execute code via a crafted PDF file...

chromium-browser: uxss with mhtml

Incorrect application of sandboxing in Blink in Google Chrome prior to 62.0.3202.62 allowed a remote attacker to inject arbitrary scripts or HTML UXSS via a crafted MHTML page...

chromium-browser: null pointer dereference in imagecapture

A use after free in Blink in Google Chrome prior to 62.0.3202.62 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page, aka an ImageCapture NULL pointer dereference...

chromium-browser: ui spoofing in blink

Incorrect implementation in Blink in Google Chrome prior to 62.0.3202.62 allowed a remote attacker to spoof the contents of the Omnibox URL bar via a crafted HTML page...

CVE-2017-5133

Off-by-one read/write on the heap in Blink in Google Chrome prior to 62.0.3202.62 allowed a remote attacker to corrupt memory and possibly leak information and potentially execute code via a crafted PDF file...

CVE-2017-15386

Incorrect implementation in Blink in Google Chrome prior to 62.0.3202.62 allowed a remote attacker to spoof the contents of the Omnibox URL bar via a crafted HTML page...

CVE-2017-15387

Insufficient enforcement of Content Security Policy in Blink in Google Chrome prior to 62.0.3202.62 allowed a remote attacker to open javascript: URL windows when they should not be allowed to via a crafted HTML page...

chromium -- multiple vulnerabilities

Google Chrome Releases reports: 35 security fixes in this release, including: 762930 High CVE-2017-5124: UXSS with MHTML. Reported by Anonymous on 2017-09-07 749147 High CVE-2017-5125: Heap overflow in Skia. Reported by Anonymous on 2017-07-26 760455 High CVE-2017-5126: Use after free in PDFium...

[SECURITY] Fedora 26 Update: chromium-61.0.3163.100-1.fc26

Chromium is an open-source web browser, powered by WebKit Blink...

[SECURITY] Fedora 27 Update: chromium-61.0.3163.100-1.fc27

Chromium is an open-source web browser, powered by WebKit Blink...

Important: Red Hat Security Advisory: chromium-browser security update

An update for chromium-browser is now available for Red Hat Enterprise Linux 6 Supplementary. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for ea...

openSUSE Security Update : chromium (openSUSE-2017-1047)

This update for chromium to version 61.0.3163.79 fixes several issues. These security issues were fixed : - CVE-2017-5111: Use after free in PDFium boo1057364. - CVE-2017-5112: Heap buffer overflow in WebGL boo1057364. - CVE-2017-5113: Heap buffer overflow in Skia boo1057364. - CVE-2017-5114:...