CVE-2017-5070

Type confusion in V8 in Google Chrome prior to 59.0.3071.86 for Linux, Windows, and Mac, and 59.0.3071.92 for Android, allowed a remote attacker to execute arbitrary code inside a sandbox via a crafted HTML page...

CVE-2017-5071

CVE-2017-5071 : Insufficient validation of untrusted input in the V8 component of Google Chrome/Chromium allowed a remote attacker to trigger an out-of-bounds memory read via a crafted HTML page. Affected: V8 in Chromium/Chrome prior to 59.0.3071.86 on Linux/Windows/macOS and prior to 59.0.3071.9...

CVE-2017-5098

CVE-2017-5098 is a use-after-free in V8 (Chromium) prior to 60.0.3112.78, affecting Chrome on Mac, Windows, Linux and Android. This vulnerability allows a remote attacker to trigger an out-of-bounds memory read via a crafted HTML page. The connected advisories indicate the fix was released with C...

CVE-2017-5070

CVE-2017-5070 is a type confusion vulnerability in Google Chrome’s V8 engine that allows a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML page. Affected products include Google Chrome and other Chromium-based browsers (V8 engine), with desktop versions prior to 59...

CVE-2017-5121

Removed by vendor...

CVE-2017-5098

Removed by vendor...

CVE-2017-5070

Removed by vendor...

CVE-2017-5115

CVE-2017-5115 concerns Chromium/Chrome before 61.0.3163.79 on Windows, with a type confusion issue in the V8 JavaScript engine. The Arch Linux advisory confirms the class of defects across Chromium components (V8 type confusion) and notes the upstream fix in 61.0.3163.79, upgrading mitigates the ...

CVE-2017-5098

A use after free in V8 in Google Chrome prior to 60.0.3112.78 for Mac, Windows, Linux, and Android allowed a remote attacker to perform an out of bounds memory read via a crafted HTML page...

CVE-2017-5053

An out-of-bounds read in V8 in Google Chrome prior to 57.0.2987.133 for Linux, Windows, and Mac, and 57.0.2987.132 for Android, allowed a remote attacker to execute arbitrary code inside a sandbox via a crafted HTML page, related to Array.prototype.indexOf...

CVE-2017-5116

CVE-2017-5116 is a type-confusion vulnerability in Google Chrome/Chromium’s V8 engine. A race-condition based flaw allowed remote attackers to execute arbitrary code by enticing a user to open a crafted HTML page. Affected product family is Chromium/Chrome with V8 in the browser’s JavaScript engi...

CVE-2017-5088

CVE-2017-5088 refers to an out-of-bounds read vulnerability in the V8 JavaScript engine of Google Chrome/Chromium before version 59.0.3071.104 (Android: 59.0.3071.117). The issue arises from insufficient validation in V8, allowing a remote attacker to read memory via a crafted HTML page. Public a...

CVE-2017-5071

Removed by vendor...

CVE-2017-5054

Removed by vendor...

CVE-2017-5053

Removed by vendor...

CVE-2017-5122

Removed by vendor...

CVE-2017-5071

Insufficient validation of untrusted input in V8 in Google Chrome prior to 59.0.3071.86 for Linux, Windows and Mac, and 59.0.3071.92 for Android allowed a remote attacker to perform an out of bounds memory read via a crafted HTML page...

CVE-2017-5122

Inappropriate use of table size handling in V8 in Google Chrome prior to 61.0.3163.100 for Windows allowed a remote attacker to trigger out-of-bounds access via a crafted HTML page...

CVE-2017-5053

CVE-2017-5053 describes an out-of-bounds read in V8 that could allow remote code execution in Google Chrome. Affected: Google Chrome on Linux/Windows/macOS older than 57.0.2987.133, and Android older than 57.0.2987.132; vulnerability linked to Array.prototype.indexOf. Impact: arbitrary code execu...

CVE-2017-5054

CVE-2017-5054 is an out-of-bounds read in V8 that affects Google Chrome prior to 57.0.2987.133 on Linux, Windows and macOS (57.0.2987.132 on Android). This vulnerability lets a remote attacker obtain heap memory contents via a crafted HTML page, with the desktop impact including potential arbitra...