CVE-2018-6089

A lack of CORS checks, after a Service Worker redirected to a cross-origin PDF, in Service Worker in Google Chrome prior to 66.0.3359.117 allowed a remote attacker to leak limited cross-origin data via a crafted HTML page...

PT-2018-17361

Name of the Vulnerable Software and Affected Versions Google Chrome versions prior to 66.0.3359.117 Opera affected versions not specified Description The issue allows Service Workers to intercept requests made by or tags in the Fetch API, enabling a remote attacker to leak cross-origin data via a...

PT-2018-17363

Name of the Vulnerable Software and Affected Versions Google Chrome versions prior to 66.0.3359.117 Opera affected versions not specified Description The issue is related to insufficient origin checks in Blink, allowing a remote attacker to leak cross-origin data via a crafted HTML page...

PT-2018-17369

Name of the Vulnerable Software and Affected Versions Google Chrome versions prior to 66.0.3359.117 Opera affected versions not specified Description A lack of CORS checks in Blink allowed a remote attacker to leak limited cross-origin data via a crafted HTML page. Recommendations For Google Chro...

CVE-2018-6066

Lack of CORS checking by ResourceFetcher/ResourceLoader in Blink in Google Chrome prior to 65.0.3325.146 allowed a remote attacker to leak cross-origin data via a crafted HTML page...

CVE-2018-6079

Inappropriate sharing of TEXTURE2DARRAY/TEXTURE3D data between tabs in WebGL in Google Chrome prior to 65.0.3325.146 allowed a remote attacker to leak cross-origin data via a crafted HTML page...

CVE-2018-6075

Incorrect handling of specified filenames in file downloads in Google Chrome prior to 65.0.3325.146 allowed a remote attacker to leak cross-origin data via a crafted HTML page and user interaction...

CVE-2018-6077

Displacement map filters being applied to cross-origin images in Blink SVG rendering in Google Chrome prior to 65.0.3325.146 allowed a remote attacker to leak cross-origin data via a crafted HTML page...

PT-2018-17348

Name of the Vulnerable Software and Affected Versions Google Chrome versions prior to 65.0.3325.146 Opera versions prior to 65.0.3325.146 Description The issue allows a remote attacker to leak cross-origin data via a crafted HTML page, due to displacement map filters being applied to cross-origin...

PT-2018-17337

Name of the Vulnerable Software and Affected Versions Google Chrome versions prior to 65.0.3325.146 Opera versions prior to 65.0.3325.146 Description The issue is related to a lack of CORS checking by ResourceFetcher/ResourceLoader in Blink, which allowed a remote attacker to leak cross-origin da...

PT-2018-17346

Name of the Vulnerable Software and Affected Versions Google Chrome versions prior to 65.0.3325.146 Opera versions prior to 65.0.3325.146 Description The issue is related to the incorrect handling of specified filenames in file downloads, allowing a remote attacker to leak cross-origin data via a...

PT-2018-17350

Name of the Vulnerable Software and Affected Versions Google Chrome versions prior to 65.0.3325.146 Opera versions prior to 65.0.3325.146 Description The issue involves the inappropriate sharing of TEXTURE 2D ARRAY/TEXTURE 3D data between tabs in WebGL, allowing a remote attacker to leak...

chromium-browser: same origin bypass in shared worker

Insufficient policy enforcement in Blink in Google Chrome prior to 64.0.3282.119 allowed a remote attacker to potentially leak user cross-origin data via a crafted HTML page...

chromium-browser: xss in devtools

Insufficient data validation in DevTools in Google Chrome prior to 64.0.3282.119 allowed a remote attacker to potentially leak user cross-origin data via a crafted Chrome Extension...

chromium-browser: insufficient isolation of devtools from extensions

Insufficient data validation in DevTools in Google Chrome prior to 64.0.3282.119 allowed a remote attacker to potentially leak user cross-origin data via a crafted Chrome Extension...

CVE-2018-6039

Insufficient data validation in DevTools in Google Chrome prior to 64.0.3282.119 allowed a remote attacker to potentially leak user cross-origin data via a crafted Chrome Extension...

PT-2018-17310

Name of the Vulnerable Software and Affected Versions Google Chrome versions prior to 64.0.3282.119 Description The issue is related to insufficient policy enforcement in Blink, allowing a remote attacker to potentially leak user cross-origin data via a crafted HTML page. This could enable...

PT-2018-17316

Name of the Vulnerable Software and Affected Versions Google Chrome versions prior to 64.0.3282.119 Description The issue is related to insufficient data validation in DevTools, allowing a remote attacker to potentially leak user cross-origin data via a crafted Chrome Extension. This could enable...

PT-2018-17321

Name of the Vulnerable Software and Affected Versions Google Chrome versions prior to 64.0.3282.119 Description The issue is related to insufficient data validation in DevTools, allowing a remote attacker to potentially leak user cross-origin data via a crafted Chrome Extension. This could enable...

chromium-browser: cross origin information disclosure in skia

Inappropriate implementation in Skia canvas composite operations in Google Chrome prior to 63.0.3239.84 allowed a remote attacker to leak cross-origin data via a crafted HTML page...