CVE-2017-5084

Removed by vendor...

Code injection

The Infineon RSA library 1.02.013 in Infineon Trusted Platform Module TPM firmware, such as versions before 0000000000000422 - 4.34, before 000000000000062b - 6.43, and before 0000000000008521 - 133.33, mishandles RSA key generation, which makes it easier for attackers to defeat various...

CVE-2017-15361

The Infineon RSA library 1.02.013 in Infineon Trusted Platform Module TPM firmware, such as versions before 0000000000000422 - 4.34, before 000000000000062b - 6.43, and before 0000000000008521 - 133.33, mishandles RSA key generation, which makes it easier for attackers to defeat various...

CVE-2017-15361

The Infineon RSA library 1.02.013 in Infineon Trusted Platform Module TPM firmware, such as versions before 0000000000000422 - 4.34, before 000000000000062b - 6.43, and before 0000000000008521 - 133.33, mishandles RSA key generation, which makes it easier for attackers to defeat various...

CVE-2017-15361

The CVE-2017-15361 ROCA issue stems from Infineon RSA Library 1.02.013 used in TPM firmware, where RSA key generation can be mishandled. Affected firmware ranges include versions prior to 0000000000000422–4.34, prior to 000000000000062b–6.43, and prior to 0000000000008521–133.33. This enables att...

Stable Channel Updates for Chrome OS

The Stable channel has been updated to 61.0.3163.113 Platform version: 9765.76.0 for most Chrome OS devices . This build contains a number of bug fixes, security updates, and feature enhancements. Systems will be receiving updates over the next several days. Some highlights of these changes are:...

Google Releases Security Updates for Chrome OS

Google has released Chrome OS version 60.0.3112.80 for Chrome devices to address multiple vulnerabilities. Exploitation of one these vulnerabilities could allow a remote attacker to take control of an affected system. Users and administrators are encouraged to review the Google Chrome blog entry...

Stable Channel Update for Chrome OS

The Stable channel has been updated to 60.0.3112.80 Platform version: 9592.71.0 for most Chrome OS devices . This build contains a number of bug fixes, security updates and feature enhancements. Systems will be receiving updates over the next several days. Some highlights of these changes are:...

Google Chrome OS Local Information Disclosure Vulnerability

Google Chrome OS is a fast, lightweight, open source Web-based operating system developed by Google. A local information disclosure vulnerability exists in Google Chrome OS versions prior to 59.0.3071.91 and prior to 59.0.3071.92. An attacker can exploit this vulnerability to obtain sensitive...

Stable Channel Update for Chrome OS

The Stable channel has been updated to 59.0.3071.91, 59.0.3071.92 Platform version: 9460.60.0, 9460.60.2 for all Chrome OS devices except the Google Chromebook Pixel 2015. This build contains a number of bug fixes, security updates, and feature enhancements. Systems will be receiving updates over...

Stable Channel Update for Chrome OS

The Stable channel has been updated to 58.0.3029.89 Platform version: 9334.58.0,9334.58.1 for all Chrome OS devices except Acer Chromebase 24, Acer Chromebook R11, AOpen Chromebase Mini, AOpen Chromebox Mini, Google Chromebook Pixel 2015, ASUS Chromebook Flip C100PA, Dell Chromebook 11 3120, Leno...

Unspecified Vulnerability in Google Chrome and Chrome OS (CNVD-2017-06652)

Google Chrome is a web browser.Google Chrome OS is an open source web-based operating system. A security vulnerability exists in Google Chrome and Chrome OS that allows remote attackers to exploit the vulnerability to build malicious web pages that can be tricked into parsing by users, which can...

Unspecified Vulnerability in Google Chrome and Chrome OS (CNVD-2017-06653)

Google Chrome is a web browser.Google Chrome OS is an open source web-based operating system. A security vulnerability exists in Google Chrome and Chrome OS that allows remote attackers to exploit the vulnerability to build malicious web pages that can be tricked into parsing by users, which can...

Unspecified Vulnerability in Google Chrome and Chrome OS

Google Chrome is a web browser.Google Chrome OS is an open source web-based operating system. A security vulnerability exists in Google Chrome and Chrome OS that allows remote attackers to exploit the vulnerability to build malicious web pages that can be tricked into parsing by users, which can...

Multiple Vulnerabilities in Google Chrome and Chrome OS

Google Chrome and Chrome OS are both products of Google Inc. Google Chrome is a Web browser.Google Chrome OS is a fast, lightweight, open source Web-based operating system. Multiple vulnerabilities exist in Google Chrome versions prior to 57.0.2987.133 and Chrome OS versions prior to 57.0.2987.13...

Stable Channel Updates for Chrome OS

The Stable channel has been updated to 57.0.2987.137 Platform version: 9202.60.0 for all Chrome OS devices except AOpen Chromebase Mini, AOpen Chromebox Mini, Google Chromebook Pixel 2015, ASUS Chromebook Flip C100PA, Samsung Chromebook Plus. This build contains a number of bug fixes, security...

Chrome OS exploit: one byte overflow and symlinks

The following article is an guest blog post from an external researcher i.e. the author is not a Project Zero or Google researcher. This post is about a Chrome OS exploit I reported to Chrome VRP in September. The Project Zero folks were nice to let me do a guest post about it, so here goes. The...

FreeBSD : flash -- remote code execution (de6d01d5-9c44-11e6-ba67-0011d823eebd)

Adobe reports : Adobe has released security updates for Adobe Flash Player for Windows, Macintosh, Linux and Chrome OS. These updates address a critical vulnerability that could potentially allow an attacker to take control of the affected system. Adobe is aware of a report that an exploit for...

flash -- remote code execution

Adobe reports: Adobe has released security updates for Adobe Flash Player for Windows, Macintosh, Linux and Chrome OS. These updates address a critical vulnerability that could potentially allow an attacker to take control of the affected system. Adobe is aware of a report that an exploit for...

Stable Channel Update for Chrome OS

The Stable channel has been updated to 54.0.2840.79 Platform version: 8743.76.0 for all Chrome OS devices except HP Chromebook 13 G1, Acer Chromebook 14 for Work and Thinkpad 13 Chromebook. This build contains a number of bug fixes, security updates, and feature enhancements. Systems will be...