CVE-2018-6120

CVE-2018-6120 affects Google Chrome’s PDFium component. An integer overflow could cause a heap out-of-bounds write in PDFium, enabling a remote attacker to execute arbitrary code inside Chrome’s sandbox via a crafted PDF file. Affected version: Chrome prior to 66.0.3359.170. Remediation: upgrade ...

CVE-2018-6120

Removed by vendor...

CVE-2018-6144

Removed by vendor...

FreeBSD : chromium -- Use after free in PDFium (720590df-10eb-11e9-b407-080027ef1a23)

Google Chrome Releases reports : 1 security fix contributed by external researches : - High CVE-2018-17481: Use after free in PDFium C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from the FreeBSD VuXML database : Copyright 2003-2020 Jacques...

FreeBSD : chromium -- multiple vulnerabilities (546d4dd4-10ea-11e9-b407-080027ef1a23)

Google Chrome Releases reports : 43 security fixes in this release, including : - High CVE-2018-17480: Out of bounds write in V8 - High CVE-2018-17481: Use after free in PDFium - High CVE-2018-18335: Heap buffer overflow in Skia - High CVE-2018-18336: Use after free in PDFium - High CVE-2018-1833...

The vulnerability of the PDFium component in the Google Chrome browser allows a hacker to execute arbitrary code.

The vulnerability of the PDFium component in the Google Chrome browser relates to the use of memory after it is freed. Exploiting this vulnerability could allow a remote attacker to execute arbitrary code using a specially crafted PDF file...

openSUSE Security Update : Chromium (openSUSE-2018-1546)

This update to Chromium 71.0.3578.98 fixes on security issue. - CVE-2018-17481: Use after free in PDFium - a follow-up fix to Chromiun 70 boo1119364 %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from openSUSE Security...

Security update for Chromium (important)

This update to Chromium 71.0.3578.98 fixes the following issues: Security issues fixed boo1118529: - CVE-2018-17480: Out of bounds write in V8 - CVE-2018-17481: Use after frees in PDFium - CVE-2018-18335: Heap buffer overflow in Skia - CVE-2018-18336: Use after free in PDFium - CVE-2018-18337: Us...

Security update for Chromium (important)

This update to Chromium 71.0.3578.98 fixes on security issue. - CVE-2018-17481: Use after free in PDFium - a follow-up fix to Chromiun 70 boo1119364...

Google Chrome Security Updates (stable-channel-update-for-desktop_12-2018-12) - Linux

Google Chrome is prone to multiple vulnerabilities. SPDX-FileCopyrightText: 2018 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE = "cpe:/a:google:chrome"; ifdescription...

Google Chrome Security Updates (stable-channel-update-for-desktop_12-2018-12) - Windows

Google Chrome is prone to multiple vulnerabilities. SPDX-FileCopyrightText: 2018 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE = "cpe:/a:google:chrome"; ifdescription...

Google Chrome < 71.0.3578.98 Vulnerability

The version of Google Chrome installed on the remote Windows host is prior to 71.0.3578.98. It is, therefore, affected by a vulnerability as referenced in the 201812stable-channel-update-for-desktop12 advisory. - Incorrect object lifecycle handling in PDFium in Google Chrome prior to 71.0.3578.98...

Google Chrome Security Updates (stable-channel-update-for-desktop_12-2018-12) - Mac OS X

Google Chrome is prone to multiple vulnerabilities. SPDX-FileCopyrightText: 2018 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE = "cpe:/a:google:chrome"; ifdescription...

Google Chrome < 71.0.3578.98 Vulnerability

The version of Google Chrome installed on the remote macOS host is prior to 71.0.3578.98. It is, therefore, affected by a vulnerability as referenced in the 201812stable-channel-update-for-desktop12 advisory. - Incorrect object lifecycle handling in PDFium in Google Chrome prior to 71.0.3578.98...

Stable Channel Update for Desktop

The stable channel has been updated to 71.0.3578.98 for Windows, Mac, and Linux, which will roll out over the coming days/weeks. Security Fixes and Rewards We would also like to thank all security researchers that worked with us during the development cycle to prevent security bugs from ever...

KLA11734 Multiple vulnerabilities in Opera

Multiple vulnerabilities were found in Opera. Malicious users can exploit these vulnerabilities to cause denial of service, bypass security restrictions, execute arbitrary code, spoof user interface, obtain sensitive information. Below is a complete list of vulnerabilities: 1. Use after free...

KLA11391 Use after free vulnerability in Google Chrome

Use afrer free vulnerability was found in Google Chrome’s. This vulnerability related to PDFium component. Malicious users can exploit this vulnerability to execute arbitrary code, cause denial of service. Original advisories Stable Channel Update for Desktop Related products Google-Chrome CVE li...

chromium -- Use after free in PDFium

Google Chrome Releases reports: 1 security fix contributed by external researches: High CVE-2018-17481: Use after free in PDFium...

CVE-2018-17481

Incorrect object lifecycle handling in PDFium in Google Chrome prior to 71.0.3578.98 allowed a remote attacker to potentially exploit heap corruption via a crafted PDF file...

Design/Logic Flaw

Incorrect object lifecycle in PDFium in Google Chrome prior to 71.0.3578.80 allowed a remote attacker to potentially exploit heap corruption via a crafted PDF file...