Browse CVEs

CRITICAL 9.6 CVE-2018-6127 Early free of object in use in IndexDB in Google Chrome prior to 67.0.3396.62 allowed a remote attacker who had compromised the renderer process to p… Chrome 67.0.3396.62+ Fix from $2,3002019-01-09 HIGH 8.8 CVE-2018-6120 An integer overflow that could lead to an attacker-controlled heap out-of-bounds write in PDFium in Google Chrome prior to 66.0.3359.170 allowed a re… Chrome 67.0.3396.62+ Fix from $1,9502019-01-09 HIGH 8.8 CVE-2018-6124 Type confusion in ReadableStreams in Blink in Google Chrome prior to 67.0.3396.62 allowed a remote attacker to potentially exploit object corruption … Chrome 67.0.3396.62+ Fix from $1,9502019-01-09 HIGH 8.8 CVE-2018-6126EPSS 8% A precision error in Skia in Google Chrome prior to 67.0.3396.62 allowed a remote attacker to perform an out of bounds memory write via a crafted HTM… Chrome 67.0.3396.62+ Fix from $1,9502019-01-09 HIGH 8.8 CVE-2018-6139 Insufficient target checks on the chrome.debugger API in DevTools in Google Chrome prior to 67.0.3396.62 allowed an attacker who convinced a user to … Chrome 67.0.3396.62+ Fix from $1,9502019-01-09 HIGH 8.8 CVE-2018-6140 Allowing the chrome.debugger API to attach to Web UI pages in DevTools in Google Chrome prior to 67.0.3396.62 allowed an attacker who convinced a use… Chrome 67.0.3396.62+ Fix from $1,9502019-01-09 HIGH 8.8 CVE-2018-6141 Insufficient validation of an image filter in Skia in Google Chrome prior to 67.0.3396.62 allowed a remote attacker who had compromised the renderer … Chrome 67.0.3396.62+ Fix from $1,9502019-01-09 MEDIUM 6.5 CVE-2018-6117 Confusing settings in Autofill in Google Chrome prior to 66.0.3359.117 allowed a remote attacker to obtain potentially sensitive information from pro… Chrome 66.0.3359.117+ Fix from $1,6002019-01-09 MEDIUM 6.5 CVE-2018-6123 A use after free in Blink in Google Chrome prior to 67.0.3396.62 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML … Chrome 67.0.3396.62+ Fix from $1,6002019-01-09 MEDIUM 6.5 CVE-2018-6133 Incorrect handling of confusable characters in URL Formatter in Google Chrome prior to 67.0.3396.62 allowed a remote attacker to perform domain spoof… Chrome 67.0.3396.62+ Fix from $1,6002019-01-09 MEDIUM 6.5 CVE-2018-6135 Lack of clearing the previous site before loading alerts from a new one in Blink in Google Chrome prior to 67.0.3396.62 allowed a remote attacker to … Chrome 67.0.3396.62+ Fix from $1,6002019-01-09 MEDIUM 6.5 CVE-2018-6137 CSS Paint API in Blink in Google Chrome prior to 67.0.3396.62 allowed a remote attacker to leak cross-origin data via a crafted HTML page. Chrome 67.0.3396.62+ Fix from $1,6002019-01-09 MEDIUM 6.5 CVE-2018-6143 Insufficient validation in V8 in Google Chrome prior to 67.0.3396.62 allowed a remote attacker to perform an out of bounds memory read via a crafted … Chrome 67.0.3396.62+ Fix from $1,6002019-01-09 HIGH 8.8 CVE-2018-6111 An object lifetime issue in the developer tools network handler in Google Chrome prior to 66.0.3359.117 allowed a local attacker to execute arbitrary… Chrome 66.0.3359.117+ Fix from $1,9502019-01-09 MEDIUM 6.5 CVE-2018-6109 readAsText() can indefinitely read the file picked by the user, rather than only once at the time the file is picked in File API in Google Chrome pri… Chrome 66.0.3359.117+ Fix from $1,6002019-01-09 MEDIUM 6.5 CVE-2018-6113 Improper handling of pending navigation entries in Navigation in Google Chrome on iOS prior to 66.0.3359.117 allowed a remote attacker to perform dom… Chrome 66.0.3359.117+ Fix from $1,6002019-01-09 MEDIUM 6.5 CVE-2018-6114 Incorrect enforcement of CSP for <object> tags in Blink in Google Chrome prior to 66.0.3359.117 allowed a remote attacker to bypass content security … Chrome 66.0.3359.117+ Fix from $1,6002019-01-09 MEDIUM 5.4 CVE-2018-6110 Parsing documents as HTML in Downloads in Google Chrome prior to 66.0.3359.117 allowed a remote attacker to cause Chrome to execute scripts via a loc… Chrome 66.0.3359.117+ Fix from $1,6002019-01-09 HIGH 8.8 CVE-2018-6106 An asynchronous generator may return an incorrect state in V8 in Google Chrome prior to 66.0.3359.117 allowing a remote attacker to potentially explo… Chrome 66.0.3359.117+ Fix from $1,9502019-01-09 MEDIUM 6.5 CVE-2018-6096 A JavaScript focused window could overlap the fullscreen notification in Fullscreen in Google Chrome prior to 66.0.3359.117 allowed a remote attacker… Chrome 66.0.3359.117+ Fix from $1,6002019-01-09 MEDIUM 6.5 CVE-2018-6097 Incorrect handling of asynchronous methods in Fullscreen in Google Chrome on macOS prior to 66.0.3359.117 allowed a remote attacker to enter full scr… Chrome 66.0.3359.117+ Fix from $1,6002019-01-09 MEDIUM 6.5 CVE-2018-6100 Incorrect handling of confusable characters in URL Formatter in Google Chrome on macOS prior to 66.0.3359.117 allowed a remote attacker to perform do… Chrome 66.0.3359.117+ Fix from $1,6002019-01-09 MEDIUM 6.5 CVE-2018-6091 Service Workers can intercept any request made by an <embed> or <object> tag in Fetch API in Google Chrome prior to 66.0.3359.117 allowed a remote at… Chrome 66.0.3359.117+ Fix from $1,6002019-01-09 MEDIUM 6.5 CVE-2018-6093 Insufficient origin checks in Blink in Google Chrome prior to 66.0.3359.117 allowed a remote attacker to leak cross-origin data via a crafted HTML pa… Chrome 66.0.3359.117+ Fix from $1,6002019-01-09 HIGH 8.8 CVE-2018-20065 Handling of URI action in PDFium in Google Chrome prior to 71.0.3578.80 allowed a remote attacker to initiate potentially unsafe navigations without … Chrome 71.0.3578.80+ Fix from $1,9502019-01-09 HIGH 8.8 CVE-2018-20066 Incorrect object lifecycle in Extensions in Google Chrome prior to 71.0.3578.80 allowed a remote attacker to potentially exploit heap corruption via … Chrome 71.0.3578.80+ Fix from $1,9502019-01-09 HIGH 8.8 CVE-2018-6056EPSS 9% Type confusion could lead to a heap out-of-bounds write in V8 in Google Chrome prior to 64.0.3282.168 allowing a remote attacker to execute arbitrary… Chrome 64.0.3282.168+ Fix from $1,9502019-01-09 HIGH 7.8 CVE-2018-6084 Insufficiently sanitized distributed objects in Updater in Google Chrome on macOS prior to 66.0.3359.117 allowed a local attacker to execute arbitrar… Chrome 66.0.3359.117+ Fix from $1,9502019-01-09 MEDIUM 6.5 CVE-2018-20070 Incorrect handling of confusable characters in URL Formatter in Google Chrome prior to 71.0.3578.80 allowed a remote attacker to spoof the contents o… Chrome 71.0.3578.80+ Fix from $1,6002019-01-09 MEDIUM 6.1 CVE-2018-20071 Insufficiently strict origin checks during JIT payment app installation in Payments in Google Chrome prior to 70.0.3538.67 allowed a remote attacker … Chrome 70.0.3538.67+ Fix from $1,6002019-01-09