CVE-2017-15403

Insufficient data validation in crosh could lead to a command injection under chronos privileges in Networking in Google Chrome on Chrome OS prior to 61.0.3163.113 allowed a local attacker to execute arbitrary code via a crafted HTML page...

CVE-2014-1706

crosh in Google Chrome OS before 33.0.1750.152 allows attackers to inject commands via unspecified vectors...

CVE-2014-1706

crosh in Google Chrome OS before 33.0.1750.152 allows attackers to inject commands via unspecified vectors...

CVE-2014-1706

CVE-2014-1706 affects Google Chrome OS, specifically the crosh shell. The vulnerability is a command-injection issue in crosh that allowed attackers to inject commands via unspecified vectors. The issue was addressed in Chrome OS 33.0.1750.152, as noted in the Stable Channel Update, which publish...