Chrome OS Shell Command Line Disclosure

The vulnerability of the Chrome OS Shell CROSH is related to the use of memory after it is freed. Exploiting this vulnerability can allow a remote attacker to expose sensitive information through a specially created web page...

PT-2022-2167

Name of the Vulnerable Software and Affected Versions Google Chrome on ChromeOS versions prior to 100.0.4896.88 Description The issue is related to the use of memory after it has been freed in the Chrome OS Shell CROSH of Google Chrome, potentially allowing a remote attacker to cause a denial of...

CVE-2017-15403

Insufficient data validation in crosh could lead to a command injection under chronos privileges in Networking in Google Chrome on Chrome OS prior to 61.0.3163.113 allowed a local attacker to execute arbitrary code via a crafted HTML page...

CVE-2017-15403: Improper Neutralization of Special Elements used in a Command

Insufficient data validation in crosh could lead to a command injection under chronos privileges in Networking in Google Chrome on Chrome OS prior to 61.0.3163.113 allowed a local attacker to execute arbitrary code via a crafted HTML page...

PT-2019-8020

Name of the Vulnerable Software and Affected Versions Google Chrome on Chrome OS versions prior to 61.0.3163.113 Description The issue is related to insufficient data validation in crosh, which could lead to a command injection under chronos privileges in the Networking component. This could allo...

CVE-2014-1706

crosh in Google Chrome OS before 33.0.1750.152 allows attackers to inject commands via unspecified vectors...

CVE-2014-1706

CVE-2014-1706 affects Google Chrome OS, specifically the crosh shell. The vulnerability is a command-injection issue in crosh that allowed attackers to inject commands via unspecified vectors. The issue was addressed in Chrome OS 33.0.1750.152, as noted in the Stable Channel Update, which publish...

CVE-2014-1706

crosh in Google Chrome OS before 33.0.1750.152 allows attackers to inject commands via unspecified vectors...

CVE-2014-1706: Undefined Security Weakness

crosh in Google Chrome OS before 33.0.1750.152 allows attackers to inject commands via unspecified vectors...

PT-2014-4305

Name of the Vulnerable Software and Affected Versions Google Chrome OS versions prior to 33.0.1750.152 Description The issue allows attackers to inject commands via unspecified vectors in crosh, a component of Google Chrome OS. Recommendations For versions prior to 33.0.1750.152, update to versio...