SUSE-SU-2023:4951-1 Security update for libqt5-qtbase

This update for libqt5-qtbase fixes the following issues: - CVE-2023-37369: Fixed buffer overflow in QXmlStreamReader bsc1214327. - libq5-qtbase was rebuild against icu 73. jscPED-6193...

Google Chrome Prior to 73.0.3683.75 Multiple Security Vulnerabilities

Description Google Chrome is prone to multiple security vulnerabilities. Attackers can exploit these issues to cause denial-of-service conditions. Versions prior to Chrome 73.0.3683.75 are vulnerable. Technologies Affected Google Chrome 0.1.38.1 Google Chrome 0.1.38.2 Google Chrome 0.1.38.4 Googl...

Google Chrome V8 Remote Code Execution Vulnerability (CNVD-2019-40080)

Google Chrome is a web browser of Google Google, U.S. V8 is one of the open source JavaScript engine. A remote code execution vulnerability exists in V8 in versions prior to Google Chromium 73.0.3683.103, which can be exploited by remote attackers to execute arbitrary code with the help of a...

CVE-2018-20889

cPanel before 74.0.0 allows certain file-read operations via password file caching SEC-425...

chromium-browser: Out of bounds read in Skia

Lack of correct bounds checking in Skia in Google Chrome prior to 73.0.3683.75 allowed a remote attacker to perform an out of bounds memory read via a crafted HTML page...

chromium-browser: Out of bounds read in Skia

Lack of correct bounds checking in Skia in Google Chrome prior to 73.0.3683.75 allowed a remote attacker to perform an out of bounds memory read via a crafted HTML page...

CVE-2019-5801

Incorrect eliding of URLs in Omnibox in Google Chrome on iOS prior to 73.0.3683.75 allowed a remote attacker to perform domain spoofing via a crafted HTML page...

chromium-browser: Type confusion in V8

Inappropriate optimization in V8 in Google Chrome prior to 73.0.3683.75 allowed a remote attacker to perform an out of bounds memory read via a crafted HTML page...

chromium-browser: Race condition in DOMStorage

Double free in DOMStorage in Google Chrome prior to 73.0.3683.75 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page...