Browse CVEs

MEDIUM 5.7 CVE-2018-18358 Lack of special casing of localhost in WPAD files in Google Chrome prior to 71.0.3578.80 allowed an attacker on the local network segment to proxy re… Chrome 71.0.3578.80+ Fix from $1,6002018-12-11 HIGH 8.8 CVE-2018-18347 Incorrect handling of failed navigations with invalid URLs in Navigation in Google Chrome prior to 71.0.3578.80 allowed a remote attacker to trick a … Chrome 71.0.3578.80+ Fix from $1,9502018-12-11 HIGH 8.8 CVE-2018-18354 Insufficient validate of external protocols in Shell Integration in Google Chrome on Windows prior to 71.0.3578.80 allowed a remote attacker to launc… Chrome 71.0.3578.80+ Fix from $1,9502018-12-11 MEDIUM 6.5 CVE-2018-18351 Lack of proper validation of ancestor frames site when sending lax cookies in Navigation in Google Chrome prior to 71.0.3578.80 allowed a remote atta… Chrome 71.0.3578.80+ Fix from $1,6002018-12-11 HIGH 7.8 CVE-2018-9547 In unflatten of GraphicBuffer.cpp, there is a possible bad fd close due to improper input validation. This could lead to local escalation of privileg… Android Patch available Fix from $1,9502018-12-06 HIGH 8.8 CVE-2018-6088 An iterator-invalidation bug in PDFium in Google Chrome prior to 66.0.3359.117 allowed a remote attacker to execute arbitrary code inside a sandbox v… Chrome 66.0.3359.117+ Fix from $1,9502018-12-04 MEDIUM 6.5 CVE-2018-6089 A lack of CORS checks, after a Service Worker redirected to a cross-origin PDF, in Service Worker in Google Chrome prior to 66.0.3359.117 allowed a r… Chrome 66.0.3359.117+ Fix from $1,6002018-12-04 MEDIUM 6.5 CVE-2018-6115 Inappropriate setting of the SEE_MASK_FLAG_NO_UI flag in file downloads in Google Chrome prior to 66.0.3359.117 allowed a remote attacker to potentia… Chrome 66.0.3359.117+ Fix from $1,6002018-12-04 HIGH 7.8 CVE-2018-11266 In all android releases(Android for MSM, Firefox OS for MSM, QRD Android) from CAF using the linux kernel, improper input validation can lead to an i… Android Patch available Fix from $1,9502018-11-27 HIGH 7.8 CVE-2018-9523 In Parcel.writeMapInternal of Parcel.java, there is a possible parcel serialization/deserialization mismatch due to improper input validation. This c… Android Patch available Fix from $1,9502018-11-14 MEDIUM 6.5 CVE-2018-9347 In function SMF_ParseMetaEvent of file eas_smf.c there is incorrect input validation causing an infinite loop. This could lead to a remote temporary … Android Patch available Fix from $1,6002018-11-14 HIGH 8.8 CVE-2018-6074 Failure to apply Mark-of-the-Web in Downloads in Google Chrome prior to 65.0.3325.146 allowed a remote attacker to bypass OS level controls via a cra… Chrome 65.0.3325.146+ Fix from $1,9502018-11-14 CRITICAL 9.6 CVE-2018-17472 Incorrect handling of googlechrome:// URL scheme on iOS in Intents in Google Chrome prior to 70.0.3538.67 allowed a remote attacker to escape the <if… Chrome 70.0.3538.67+ Fix from $2,3002018-11-14 HIGH 7.5 CVE-2018-9362 In processMessagePart of InboundSmsHandler.java, there is a possible remote denial of service due to improper input validation. This could lead to re… Android Patch available Fix from $1,9502018-11-06 MEDIUM 5.5 CVE-2018-9452 In getOffsetForHorizontal of Layout.java, there is a possible application hang due to a slow width calculation. This could lead to remote denial of s… Android Patch available Fix from $1,6002018-10-02 HIGH 8.8 CVE-2018-6055 Insufficient policy enforcement in Catalog Service in Google Chrome prior to 64.0.3282.119 allowed a remote attacker to potentially run arbitrary cod… Chrome 64.0.3282.119+ Fix from $1,9502018-09-25 MEDIUM 6.5 CVE-2018-6119 Incorrect security UI in Omnibox in Google Chrome prior to 64.0.3282.119 allowed a remote attacker to spoof the contents of the Omnibox (URL bar) via… Chrome 64.0.3282.119+ Fix from $1,6002018-09-25 MEDIUM 6.5 CVE-2018-6050 Incorrect security UI in Omnibox in Google Chrome prior to 64.0.3282.119 allowed a remote attacker to spoof the contents of the Omnibox (URL bar) via… Chrome 64.0.3282.119+ Fix from $1,6002018-09-25 HIGH 8.8 CVE-2018-6043 Insufficient data validation in External Protocol Handler in Google Chrome prior to 64.0.3282.119 allowed a remote attacker to potentially execute ar… Chrome 64.0.3282.119+ Fix from $1,9502018-09-25 MEDIUM 6.1 CVE-2018-6046 Insufficient data validation in DevTools in Google Chrome prior to 64.0.3282.119 allowed a remote attacker to potentially leak user cross-origin data… Chrome 64.0.3282.119+ Fix from $1,6002018-09-25 MEDIUM 6.5 CVE-2018-6036 Insufficient data validation in V8 in Google Chrome prior to 64.0.3282.119 allowed a remote attacker to potentially leak user data via a crafted HTML… Chrome 64.0.3282.119+ Fix from $1,6002018-09-25 MEDIUM 6.1 CVE-2018-6039 Insufficient data validation in DevTools in Google Chrome prior to 64.0.3282.119 allowed a remote attacker to potentially leak user cross-origin data… Chrome 64.0.3282.119+ Fix from $1,6002018-09-25 HIGH 8.8 CVE-2018-6033 Insufficient data validation in Downloads in Google Chrome prior to 64.0.3282.119 allowed a remote attacker to potentially run arbitrary code outside… Chrome 64.0.3282.119+ Fix from $1,9502018-09-25 MEDIUM 6.5 CVE-2018-6032 Insufficient policy enforcement in Blink in Google Chrome prior to 64.0.3282.119 allowed a remote attacker to potentially leak user cross-origin data… Chrome 64.0.3282.119+ Fix from $1,6002018-09-25 MEDIUM 5.5 CVE-2018-3574 In all android releases (Android for MSM, Firefox OS for MSM, QRD Android) from CAF using the linux kernel, userspace can request ION cache maintenan… Android Patch available Fix from $1,6002018-09-19 HIGH 7.8 CVE-2018-11302 In all android releases (Android for MSM, Firefox OS for MSM, QRD Android) from CAF using the linux kernel, lack of check of input received from user… Android Patch available Fix from $1,9502018-09-18 HIGH 8.0 CVE-2018-11294 In all android releases (Android for MSM, Firefox OS for MSM, QRD Android) from CAF using the linux kernel, WLAN handler indication from the firmware… Android Patch available Fix from $1,9502018-09-18 MEDIUM 5.5 CVE-2018-11280 In all android releases (Android for MSM, Firefox OS for MSM, QRD Android) from CAF using the linux kernel, while processing user-space there is no s… Android Patch available Fix from $1,6002018-09-18 MEDIUM 6.5 CVE-2017-15426 Insufficient policy enforcement in Omnibox in Google Chrome prior to 63.0.3239.84 allowed a remote attacker to perform domain spoofing via IDN homogr… Chrome 63.0.3239.84+ Fix from $1,6002018-08-28 MEDIUM 6.5 CVE-2017-15424 Insufficient policy enforcement in Omnibox in Google Chrome prior to 63.0.3239.84 allowed a remote attacker to perform domain spoofing via IDN homogr… Chrome 63.0.3239.84+ Fix from $1,6002018-08-28