Read the docs

Vulnerabilities

Filters

Reset all
Threatist priority
Signals
Fix status
Impact type
Attack vector
Requirements
Product

Products as named in CPE, with their records.

Published
Weakness (CWE)
1 selected

18 records

TI-2018-12452 CVE-2018-17461 · GHSA-mgc9-7rgj-3h62

Out-of-bounds read in Google Chrome

Priority LOW 39

An out of bounds read in PDFium in Google Chrome prior to 68.0.3440.75 allowed a remote attacker to perform an out of bounds memory read via a crafted PDF file.

CVSS 3.0HIGH 8.8 Network No auth User interaction EPSS 0.00619 Published 2019-01-09 Fixed in 68.0.3440.75 CWE-125
TI-2018-04538 CVE-2018-6179 · GHSA-83j2-pmf7-p2m2

Information disclosure in Google Chrome

Priority LOW 31

Insufficient enforcement of file access permission in the activeTab case in Extensions in Google Chrome prior to 68.0.3440.75 allowed an attacker who convinced a user to install a malicious extension to access files on t…

CVSS 3.0MEDIUM 6.5 Network No auth User interaction EPSS 0.01178 Published 2019-01-09 Fixed in 68.0.3440.75 CWE-200
TI-2018-04537 CVE-2018-6178 · GHSA-vx2p-vj7w-cwgh

Clickjacking in Google Chrome

Priority LOW 22

Eliding from the wrong side in an infobar in DevTools in Google Chrome prior to 68.0.3440.75 allowed an attacker who convinced a user to install a malicious extension to Hide Chrome Security UI via a crafted Chrome Exten…

CVSS 3.0MEDIUM 4.3 Network No auth User interaction EPSS 0.00905 Published 2019-01-09 Fixed in 68.0.3440.75 CWE-1021
TI-2018-04533 CVE-2018-6174 · GHSA-53fm-grwx-pjg9

Integer overflow in Google Chrome

Priority MEDIUM 44

Integer overflows in Swiftshader in Google Chrome prior to 68.0.3440.75 potentially allowed a remote attacker to execute arbitrary code via a crafted HTML page.

CVSS 3.0HIGH 8.8 Network No auth User interaction EPSS 0.03296 Published 2019-01-09 Fixed in 68.0.3440.75 CWE-190
TI-2018-04529 CVE-2018-6170 · GHSA-r454-mqjh-f2pc

Incorrect type conversion in Google Chrome

Priority MEDIUM 41

A bad cast in PDFium in Google Chrome prior to 68.0.3440.75 allowed a remote attacker to potentially exploit heap corruption via a crafted PDF file.

CVSS 3.0HIGH 8.8 Network No auth User interaction EPSS 0.01546 Published 2019-01-09 Fixed in 68.0.3440.75 CWE-704
TI-2018-04528 CVE-2018-6169 · GHSA-m8w6-9c44-28r8

Improper input validation in Google Chrome

Priority LOW 32

Lack of timeout on extension install prompt in Extensions in Google Chrome prior to 68.0.3440.75 allowed a remote attacker to trigger installation of an unwanted extension via a crafted HTML page.

CVSS 3.0MEDIUM 6.5 Network No auth User interaction EPSS 0.0135 Published 2019-01-09 Fixed in 68.0.3440.75 CWE-20
TI-2018-04523 CVE-2018-6164 · GHSA-5v3q-9vj7-x74r

Information disclosure in Google Chrome

Priority LOW 33

Insufficient origin checks for CSS content in Blink in Google Chrome prior to 68.0.3440.75 allowed a remote attacker to leak cross-origin data via a crafted HTML page.

CVSS 3.0MEDIUM 6.5 Network No auth User interaction EPSS 0.01893 Published 2019-01-09 Fixed in 68.0.3440.75 CWE-200
Priority MEDIUM 41

Improper deserialization in WebGL in Google Chrome on Mac prior to 68.0.3440.75 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page.

CVSS 3.0HIGH 8.8 Network No auth User interaction EPSS 0.01601 Published 2019-01-09 Fixed in 68.0.3440.75 CWE-502
TI-2018-04519 CVE-2018-6160 · GHSA-6qcp-7hqx-rm6q

Improper input validation in Google Chrome

Priority LOW 31

JavaScript alert handling in Prompts in Google Chrome prior to 68.0.3440.75 allowed a remote attacker to spoof the contents of the Omnibox (URL bar) via a crafted HTML page.

CVSS 3.0MEDIUM 6.5 Network No auth User interaction EPSS 0.00969 Published 2019-01-09 Fixed in 68.0.3440.75 CWE-20
TI-2018-04517 CVE-2018-6158 · GHSA-jx7j-x38p-vvr2

Race condition in Google Chrome

Priority LOW 35

A race condition in Oilpan in Google Chrome prior to 68.0.3440.75 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page.

CVSS 3.0HIGH 7.5 Network No auth User interaction EPSS 0.01267 Published 2019-01-09 Fixed in 68.0.3440.75 CWE-362
TI-2018-04512 CVE-2018-6153 · GHSA-jv2q-vg54-vqw5

Out-of-bounds write in Google Chrome

Priority MEDIUM 41

A precision error in Skia in Google Chrome prior to 68.0.3440.75 allowed a remote attacker who had compromised the renderer process to perform an out of bounds memory write via a crafted HTML page.

CVSS 3.0HIGH 8.8 Network No auth User interaction EPSS 0.01588 Published 2019-01-09 Fixed in 68.0.3440.75 CWE-787