Read the docs

Vulnerabilities

Filters

Reset all
Threatist priority
Signals
Fix status
Impact type
Attack vector
Requirements
Product

Products as named in CPE, with their records.

Published
Weakness (CWE)
1 selected

3 records

Release: Google Chrome 61.0.3163.113 Clear all filters
TI-2017-11317 CVE-2017-15405 · GHSA-2wgf-8c9h-xvxv

Race condition in Google Chrome

Priority LOW 30

Inappropriate symlink handling and a race condition in the stateful recovery feature implementation could lead to a persistance established by a malicious code running with root privileges in cryptohomed in Google Chrome…

CVSS 3.0HIGH 7.0 Local Low privileges No interaction EPSS 0.00185 Published 2019-01-09 Fixed in 61.0.3163.113 CWE-362
TI-2017-11316 CVE-2017-15404 · GHSA-3gxj-93jf-h822

Time-of-check time-of-use race condition in Google Chrome

Priority LOW 33

An ability to process crash dumps under root privileges and inappropriate symlinks handling could lead to a local privilege escalation in Crash Reporting in Google Chrome on Chrome OS prior to 61.0.3163.113 allowed a loc…

CVSS 3.0HIGH 7.8 Local Low privileges No interaction EPSS 0.00189 Published 2019-01-09 Fixed in 61.0.3163.113 CWE-367
TI-2017-11315 CVE-2017-15403 · GHSA-4wfv-vf72-f6xj

Command injection in Google Chrome

Priority LOW 33

Insufficient data validation in crosh could lead to a command injection under chronos privileges in Networking in Google Chrome on Chrome OS prior to 61.0.3163.113 allowed a local attacker to execute arbitrary code via a…

CVSS 3.0HIGH 7.3 Local Low privileges User interaction EPSS 0.00626 Published 2019-01-09 Fixed in 61.0.3163.113 CWE-77