p PatchFirst

PatchFirst · Vulnerabilidades recientes

Vulnerabilidades de chromium-browser · Página 6

Vulnerabilidades publicadas para chromium-browser en los últimos 30 días: 0. Incluidas en el catálogo KEV: 0.

RSS ↗ JSON ↗
Filtrar vulnerabilidades
Borrar filtros

Vulnerabilidades: 657

  1. CVE-2017-5120

    Media · CVSS 6.5EPSS 1,11%Corrección disponible

    CVE-2017-5120

    Inappropriate use of www mismatch redirects in browser navigation in Google Chrome prior to 61.0.3163.79 for Mac, Windows, and Linux, and 61.0.3163.81 for Android, allowed a remote attacker to potentially downgrade HTTPS requests to HTTP via a crafted HTML page. In other words, Chrome could transmit cleartext even though the user had entered an https URL, because of a misdesigned workaround for cases where the domain name in a URL almost matches the domain name in an X.509 server certificate (but differs in the initial "www." substring).

    chromium-browserSistemas operativos
    • Actualiza a 61.0.3163.100-0ubuntu0.14.04.1202
    Publicación Actualización
    Aviso original 1 ↗Aviso original 2 ↗Aviso original 3 ↗

  2. CVE-2017-5119

    Media · CVSS 4.3EPSS 1,76%Corrección disponible

    CVE-2017-5119

    Use of an uninitialized value in Skia in Google Chrome prior to 61.0.3163.79 for Mac, Windows, and Linux, and 61.0.3163.81 for Android, allowed a remote attacker to obtain potentially sensitive information from process memory via a crafted HTML page.

    chromium-browserSistemas operativos
    • Actualiza a 61.0.3163.100-0ubuntu0.14.04.1202
    Publicación Actualización
    Aviso original 1 ↗Aviso original 2 ↗Aviso original 3 ↗

  3. CVE-2017-5118

    Media · CVSS 4.3EPSS 1,13%Corrección disponible

    CVE-2017-5118

    Blink in Google Chrome prior to 61.0.3163.79 for Mac, Windows, and Linux, and 61.0.3163.81 for Android, failed to correctly propagate CSP restrictions to javascript scheme pages, which allowed a remote attacker to bypass content security policy via a crafted HTML page.

    chromium-browserSistemas operativos
    • Actualiza a 61.0.3163.100-0ubuntu0.14.04.1202
    Publicación Actualización
    Aviso original 1 ↗Aviso original 2 ↗Aviso original 3 ↗

  7. CVE-2017-5114

    Alta · CVSS 8.8EPSS 1,32%Corrección disponible

    CVE-2017-5114

    Inappropriate use of partition alloc in PDFium in Google Chrome prior to 61.0.3163.79 for Linux, Windows, and Mac, and 61.0.3163.81 for Android, allowed a remote attacker to potentially exploit memory corruption via a crafted PDF file.

    chromium-browserSistemas operativos
    • Actualiza a 61.0.3163.100-0ubuntu0.14.04.1202
    Publicación Actualización
    Aviso original 1 ↗Aviso original 2 ↗Aviso original 3 ↗

  11. CVE-2017-5110

    Media · CVSS 6.5EPSS 1,4%Corrección disponible

    CVE-2017-5110

    Inappropriate implementation of the web payments API on blob: and data: schemes in Web Payments in Google Chrome prior to 60.0.3112.78 for Mac, Windows, Linux, and Android allowed a remote attacker to spoof the contents of the Omnibox via a crafted HTML page.

    chromium-browserSistemas operativos
    • Actualiza a 60.0.3112.78-0ubuntu0.14.04.1190
    Publicación Actualización
    Aviso original 1 ↗Aviso original 2 ↗Aviso original 3 ↗

  12. CVE-2017-5109

    Media · CVSS 4.3EPSS 1,25%Corrección disponible

    CVE-2017-5109

    Inappropriate implementation of unload handler handling in permission prompts in Google Chrome prior to 60.0.3112.78 for Linux, Windows, and Mac allowed a remote attacker to display UI on a non attacker controlled tab via a crafted HTML page.

    chromium-browserSistemas operativos
    • Actualiza a 60.0.3112.78-0ubuntu0.14.04.1190
    Publicación Actualización
    Aviso original 1 ↗Aviso original 2 ↗Aviso original 3 ↗

  18. CVE-2017-5103

    Media · CVSS 4.3EPSS 1,88%Corrección disponible

    CVE-2017-5103

    Use of an uninitialized value in Skia in Google Chrome prior to 60.0.3112.78 for Linux, Windows, and Mac allowed a remote attacker to obtain potentially sensitive information from process memory via a crafted HTML page.

    chromium-browserSistemas operativos
    • Actualiza a 60.0.3112.78-0ubuntu0.14.04.1190
    Publicación Actualización
    Aviso original 1 ↗Aviso original 2 ↗Aviso original 3 ↗

  19. CVE-2017-5102

    Media · CVSS 4.3EPSS 1,88%Corrección disponible

    CVE-2017-5102

    Use of an uninitialized value in Skia in Google Chrome prior to 60.0.3112.78 for Mac, Windows, Linux, and Android allowed a remote attacker to obtain potentially sensitive information from process memory via a crafted HTML page.

    chromium-browserSistemas operativos
    • Actualiza a 60.0.3112.78-0ubuntu0.14.04.1190
    Publicación Actualización
    Aviso original 1 ↗Aviso original 2 ↗Aviso original 3 ↗

Comprueba tu servidor

Compara tu pila y las versiones instaladas con las bases actuales de vulnerabilidades.

Comprueba tu servidor →