CVE-2019-5813

Use after free in V8 in Google Chrome prior to 74.0.3729.108 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page...

CVE-2019-5784

Incorrect handling of deferred code in V8 in Google Chrome prior to 72.0.3626.96 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page...

CVE-2019-5784

CVE-2019-5784 affects Chromium/Chrome’s V8 engine. Root cause: incorrect handling of deferred code in V8 leads to potential heap corruption via a crafted HTML page. Impact: remote attacker could exploit heap corruption. Affected versions: Chrome/Chromium before 72.0.3626.96. Remediation: upgrade ...

CVE-2019-5807

Object lifetime issue in V8 in Google Chrome prior to 74.0.3729.108 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page...

CVE-2019-5813

CVE-2019-5813 is an out-of-bounds read vulnerability in the V8 JavaScript engine of Chromium/Google Chrome, present in versions prior to 74.0.3729.108. The issue is rooted in the V8 component and could enable information disclosure or heap-related effects as described in vendor advisories. Remedi...

CVE-2019-5807

Object lifetime issue in V8 in Google Chrome prior to 74.0.3729.108 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page...

CVE-2019-5784

Incorrect handling of deferred code in V8 in Google Chrome prior to 72.0.3626.96 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page...

CVE-2018-6142

CVE-2018-6142 describes an out-of-bounds read vulnerability in Google Chrome’s V8 engine (pre-67.0.3396.62) that can be triggered by a crafted PDF file, allowing remote memory access. Connected advisories (Debian DSA-4237-1) indicate a fix in Chromium-based packages and note updates to version 67...

CVE-2018-6136

CVE-2018-6136 is an out-of-bounds read in V8 (Chrome/Chromium) prior to version 67.0.3396.62, enabling remote exploitation via a crafted HTML page to read memory. Publicly disclosed within multiple advisories (CNVD-2018-11486, CVE lists) and linked to Chrome/Chromium updates. Affected product: Go...

CVE-2018-6136

Removed by vendor...

CVE-2018-6136

Missing type check in V8 in Google Chrome prior to 67.0.3396.62 allowed a remote attacker to perform an out of bounds memory read via a crafted HTML page...

CVE-2018-6142

Removed by vendor...

CVE-2018-6142

Array bounds check failure in V8 in Google Chrome prior to 67.0.3396.62 allowed a remote attacker to perform an out of bounds memory read via a crafted PDF file...

CVE-2018-17478

Incorrect array position calculations in V8 in Google Chrome prior to 70.0.3538.102 allowed a remote attacker to potentially exploit object corruption via a crafted HTML page...

CVE-2018-17478

Removed by vendor...

CVE-2017-5028

Removed by vendor...

CVE-2017-5028

CVE-2017-5028 affects Google Chrome’s V8 engine. The issue is insufficient data validation in V8 prior to Chrome 56.0.2924.76, enabling a remote attacker to leak cross-origin data via a crafted HTML page. Impact per provided metrics: CVSSv2 base 4.3 (Partial confidentiality), CVSSv3 base 6.5 (Con...

CVE-2018-17478

CVE-2018-17478 is a V8-related vulnerability in Chromium/Google Chrome prior to version 70.0.3538.102, caused by an out-of-bounds memory access that could lead to object corruption. Reports across multiple security advisories indicate the issue was fixed by upgrading Chromium to 70.0.3538.102 (e....

chromium-browser: Incorrect map processing in V8

Object lifecycle issue in V8 in Google Chrome prior to 75.0.3770.80 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page...

openSUSE Security Update : chromium (openSUSE-2019-1557)

This update for chromium to version 75.0.3770.80 fixes the following issues : Security issues fixed : - CVE-2019-5828: Fixed a Use after free in ServiceWorker - CVE-2019-5829: Fixed Use after free in Download Manager - CVE-2019-5830: Fixed an incorrectly credentialed requests in CORS -...