Read the docs

Vulnerabilities

Filters

Reset all
Threatist priority
Signals
Fix status
Attack vector
Requirements
Product

Products as named in CPE, with their records.

Published
Weakness (CWE)
1 selected

2 records

TI-2018-04479 CVE-2018-6119 · GHSA-w58v-36f9-5j7r

Improper input validation in Google Chrome

Priority LOW 31

Incorrect security UI in Omnibox in Google Chrome prior to 64.0.3282.119 allowed a remote attacker to spoof the contents of the Omnibox (URL bar) via a crafted HTML page.

CVSS 3.0MEDIUM 6.5 Network No auth User interaction EPSS 0.00899 Published 2018-09-25 Fixed in 64.0.3282.119 CWE-20
TI-2018-04417 CVE-2018-6055 · GHSA-m6qv-gwg5-63c6

Improper input validation in Google Chrome

Priority MEDIUM 40

Insufficient policy enforcement in Catalog Service in Google Chrome prior to 64.0.3282.119 allowed a remote attacker to potentially run arbitrary code outside sandbox via a crafted HTML page.

CVSS 3.0HIGH 8.8 Network No auth User interaction EPSS 0.01143 Published 2018-09-25 Fixed in 64.0.3282.119 CWE-20