Browse CVEs

MEDIUM 6.5 CVE-2017-5110 Inappropriate implementation of the web payments API on blob: and data: schemes in Web Payments in Google Chrome prior to 60.0.3112.78 for Mac, Windo… Chrome 60.0.3112.78+ Fix from $1,6002017-10-27 HIGH 8.8 CVE-2017-5092 Insufficient validation of untrusted input in PPAPI Plugins in Google Chrome prior to 60.0.3112.78 for Windows allowed a remote attacker to potential… Chrome 60.0.3112.78+ Fix from $1,9502017-10-27 HIGH 8.8 CVE-2017-5097 Insufficient validation of untrusted input in Skia in Google Chrome prior to 60.0.3112.78 for Linux allowed a remote attacker to perform an out of bo… Chrome after 60.0.3112.76 Fix from $1,9502017-10-27 HIGH 8.8 CVE-2017-5099 Insufficient validation of untrusted input in PPAPI Plugins in Google Chrome prior to 60.0.3112.78 for Mac allowed a remote attacker to potentially g… Chrome after 60.0.3112.76 Fix from $1,9502017-10-27 MEDIUM 6.5 CVE-2017-5076 Insufficient Policy Enforcement in Omnibox in Google Chrome prior to 59.0.3071.86 for Mac, Windows, and Linux, and 59.0.3071.92 for Android, allowed … Chrome 59.0.3071.86 / 59.0.3071.92+ Fix from $1,6002017-10-27 MEDIUM 6.5 CVE-2017-5086 Insufficient Policy Enforcement in Omnibox in Google Chrome prior to 59.0.3071.86 for Windows and Mac allowed a remote attacker to perform domain spo… Chrome 59.0.3071.86+ Fix from $1,6002017-10-27 MEDIUM 6.5 CVE-2017-5089 Insufficient Policy Enforcement in Omnibox in Google Chrome prior to 59.0.3071.104 for Mac allowed a remote attacker to perform domain spoofing via a… Chrome 59.0.3071.104+ Fix from $1,6002017-10-27 MEDIUM 6.5 CVE-2017-5090 Insufficient Policy Enforcement in Omnibox in Google Chrome prior to 59.0.3071.115 for Mac allowed a remote attacker to perform domain spoofing via a… Chrome 59.0.3071.115+ Fix from $1,6002017-10-27 MEDIUM 6.5 CVE-2017-5093 Inappropriate implementation in modal dialog handling in Blink in Google Chrome prior to 60.0.3112.78 for Mac, Windows, Linux, and Android allowed a … Chrome 60.0.3112.78+ Fix from $1,6002017-10-27 MEDIUM 6.5 CVE-2017-5067 An insufficient watchdog timer in navigation in Google Chrome prior to 58.0.3029.81 for Linux, Windows, and Mac allowed a remote attacker to spoof th… Chrome 58.0.3029.81+ Fix from $1,6002017-10-27 MEDIUM 6.5 CVE-2017-5072 Inappropriate implementation in Omnibox in Google Chrome prior to 59.0.3071.92 for Android allowed a remote attacker to perform domain spoofing with … Chrome 59.0.3071.92+ Fix from $1,6002017-10-27 MEDIUM 6.3 CVE-2017-5071 Insufficient validation of untrusted input in V8 in Google Chrome prior to 59.0.3071.86 for Linux, Windows and Mac, and 59.0.3071.92 for Android allo… Chrome 59.0.3071.86 / 59.0.3071.92+ Fix from $1,6002017-10-27 CRITICAL 9.8 CVE-2016-10391 In all Qualcomm products with Android releases from CAF using the Linux kernel, the length in an HCI command is not properly checked for validity. Android Mitigation only Fix from $2,3002017-08-18 CRITICAL 9.8 CVE-2016-5872 In all Qualcomm products with Android releases from CAF using the Linux kernel, arguments to several QTEE syscalls are not properly validated. Android Mitigation only Fix from $2,3002017-08-18 HIGH 7.8 CVE-2017-8260 In all Qualcomm products with Android releases from CAF using the Linux kernel, due to a type downcast, a value may improperly pass validation and ca… Android Patch available Fix from $1,9502017-08-18 CRITICAL 9.8 CVE-2015-9055 In all Qualcomm products with Android releases from CAF using the Linux kernel, an assertion was potentially reachable in a memory management routine. Android No fix yet Fix from $2,3002017-08-18 CRITICAL 9.8 CVE-2015-9060 In all Qualcomm products with Android releases from CAF using the Linux kernel, a pointer is not properly validated in a QTEE system call. Android Mitigation only Fix from $2,3002017-08-18 CRITICAL 9.8 CVE-2015-9061 In all Qualcomm products with Android releases from CAF using the Linux kernel, playReady DRM failed to check a length potentially leading to unautho… Android Mitigation only Fix from $2,3002017-08-18 CRITICAL 9.8 CVE-2015-9068 In all Qualcomm products with Android releases from CAF using the Linux kernel, an argument to a mink syscall is not properly validated. Android No fix yet Fix from $2,3002017-08-18 CRITICAL 9.8 CVE-2015-9069 In all Qualcomm products with Android releases from CAF using the Linux kernel, the Secure File System can become corrupted. Android Mitigation only Fix from $2,3002017-08-18 CRITICAL 9.8 CVE-2016-10347 In all Qualcomm products with Android releases from CAF using the Linux kernel, an argument to a hypervisor function is not properly validated. Android No fix yet Fix from $2,3002017-08-18 CRITICAL 9.8 CVE-2016-10384 In all Qualcomm products with Android releases from CAF using the Linux kernel, an assertion was potentially reachable in a WLAN driver ioctl. Android No fix yet Fix from $2,3002017-08-18 CRITICAL 9.8 CVE-2016-10387 In all Qualcomm products with Android releases from CAF using the Linux kernel, an assertion was potentially reachable in a handover scenario. Android No fix yet Fix from $2,3002017-08-18 CRITICAL 9.8 CVE-2015-9039 In all Qualcomm products with Android releases from CAF using the Linux kernel, a vulnerability exists in eMBMS where an assertion can be reached by … Android Mitigation only Fix from $2,3002017-08-18 CRITICAL 9.8 CVE-2015-9044 In all Qualcomm products with Android releases from CAF using the Linux kernel, a vulnerability exists in LTE where an assertion can be reached due t… Android Mitigation only Fix from $2,3002017-08-18 CRITICAL 9.8 CVE-2015-9046 In all Qualcomm products with Android releases from CAF using the Linux kernel, a vulnerability exists in LTE where an assertion can be reached due t… Android No fix yet Fix from $2,3002017-08-18 CRITICAL 9.8 CVE-2015-9048 In all Qualcomm products with Android releases from CAF using the Linux kernel, a vulnerability exists in the processing of lost RTP packets. Android No fix yet Fix from $2,3002017-08-18 CRITICAL 9.8 CVE-2015-9049 In all Qualcomm products with Android releases from CAF using the Linux kernel, a vulnerability exists in the processing of certain responses from th… Android Mitigation only Fix from $2,3002017-08-18 CRITICAL 9.8 CVE-2015-9051 In all Qualcomm products with Android releases from CAF using the Linux kernel, a vulnerability exists in LTE where an assertion can be reached due t… Android Mitigation only Fix from $2,3002017-08-18 CRITICAL 9.8 CVE-2015-9052 In all Qualcomm products with Android releases from CAF using the Linux kernel, a vulnerability exists in LTE where an assertion can be reached while… Android Mitigation only Fix from $2,3002017-08-18