Read the docs

Vulnerabilities

Filters

Reset all
Threatist priority
Signals
Fix status
Impact type
Attack vector
Requirements
Product

Products as named in CPE, with their records.

Published
Weakness (CWE)
1 selected

6 records

Release: Google Chrome 71.0.3578.80 Clear all filters
TI-2018-14231 CVE-2018-20070 · GHSA-cj84-cp2x-w68q

Improper input validation in Google Chrome

Priority LOW 29

Incorrect handling of confusable characters in URL Formatter in Google Chrome prior to 71.0.3578.80 allowed a remote attacker to spoof the contents of the Omnibox (URL bar) via a crafted domain name.

CVSS 3.0MEDIUM 6.5 Network No auth User interaction EPSS 0.00485 Published 2019-01-09 Fixed in 71.0.3578.80 CWE-20
TI-2018-14230 CVE-2018-20069 · GHSA-c6vv-wc55-crp5

Failure to prevent navigation to top frame to data URLs in Navigation in Google Chrome on…

Priority LOW 20

Failure to prevent navigation to top frame to data URLs in Navigation in Google Chrome on iOS prior to 71.0.3578.80 allowed a remote attacker to confuse the user about the origin of the current page via a crafted HTML pa…

CVSS 3.0MEDIUM 4.3 Network No auth User interaction EPSS 0.00432 Published 2019-01-09 Fixed in 71.0.3578.80
TI-2018-14229 CVE-2018-20068 · GHSA-2pw7-4hp6-pq53

Improper input validation in Google Chrome

Priority LOW 20

Incorrect handling of 304 status codes in Navigation in Google Chrome prior to 71.0.3578.80 allowed a remote attacker to confuse the user about the origin of the current page via a crafted HTML page.

CVSS 3.0MEDIUM 4.3 Network No auth User interaction EPSS 0.00471 Published 2019-01-09 Fixed in 71.0.3578.80 CWE-20
TI-2018-14228 CVE-2018-20067 · GHSA-6q4j-9x7g-wqj4

A renderer initiated back navigation was incorrectly allowed to cancel a browser…

Priority LOW 20

A renderer initiated back navigation was incorrectly allowed to cancel a browser initiated one in Navigation in Google Chrome prior to 71.0.3578.80 allowed a remote attacker to confuse the user about the origin of the cu…

CVSS 3.0MEDIUM 4.3 Network No auth User interaction EPSS 0.00471 Published 2019-01-09 Fixed in 71.0.3578.80
TI-2018-14227 CVE-2018-20066 · GHSA-4r75-3cj5-x52w

Use after free in Google Chrome

Priority LOW 39

Incorrect object lifecycle in Extensions in Google Chrome prior to 71.0.3578.80 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page.

CVSS 3.0HIGH 8.8 Network No auth User interaction EPSS 0.006 Published 2019-01-09 Fixed in 71.0.3578.80 CWE-416
TI-2018-14226 CVE-2018-20065 · GHSA-9qhf-3vhp-gmgv

Improper input validation in Google Chrome

Priority LOW 39

Handling of URI action in PDFium in Google Chrome prior to 71.0.3578.80 allowed a remote attacker to initiate potentially unsafe navigations without a user gesture via a crafted PDF file.

CVSS 3.0HIGH 8.8 Network No auth User interaction EPSS 0.0057 Published 2019-01-09 Fixed in 71.0.3578.80 CWE-20