CVE-2019-5792
Integer overflow in PDFium in Google Chrome prior to 73.0.3683.75 allowed a remote attacker to potentially perform out of bounds memory access via a crafted PDF file.
- Actualiza a 73.0.3683.75-0ubuntu0.16.04.1
Publicación Actualización
PatchFirst · Vulnerabilidades recientes
Vulnerabilidades de chromium-browser · Página 31
Vulnerabilidades publicadas para chromium-browser en los últimos 30 días: 0. Incluidas en el catálogo KEV: 0.
Vulnerabilidades: 1138
CVE-2019-5791
Inappropriate optimization in V8 in Google Chrome prior to 73.0.3683.75 allowed a remote attacker to perform an out of bounds memory read via a crafted HTML page.
- Actualiza a 73.0.3683.75-0ubuntu0.16.04.1
Publicación ActualizaciónCVE-2019-5790
An integer overflow leading to an incorrect capacity of a buffer in JavaScript in Google Chrome prior to 73.0.3683.75 allowed a remote attacker to execute arbitrary code inside a sandbox via a crafted HTML page.
- Actualiza a 73.0.3683.75-0ubuntu0.16.04.1
Publicación ActualizaciónCVE-2019-5789
An integer overflow that leads to a use-after-free in WebMIDI in Google Chrome on Windows prior to 73.0.3683.75 allowed a remote attacker who had compromised the renderer process to execute arbitrary code via a crafted HTML page.
- Actualiza a 73.0.3683.75-0ubuntu0.16.04.1
Publicación ActualizaciónCVE-2019-5788
An integer overflow that leads to a use-after-free in Blink Storage in Google Chrome on Linux prior to 73.0.3683.75 allowed a remote attacker who had compromised the renderer process to execute arbitrary code via a crafted HTML page.
- Actualiza a 73.0.3683.75-0ubuntu0.16.04.1
Publicación ActualizaciónCVE-2019-5787
Use-after-garbage-collection in Blink in Google Chrome prior to 73.0.3683.75 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page.
- Actualiza a 73.0.3683.75-0ubuntu0.16.04.1
Publicación ActualizaciónCVE-2018-5179
A service worker can send the activate event on itself periodically which allows it to run perpetually, allowing it to monitor activity by users. Affects all versions prior to Firefox 60.
- Actualiza a 70.0.3538.67-0ubuntu0.16.04.1
Publicación ActualizaciónCVE-2019-5783
Missing URI encoding of untrusted input in DevTools in Google Chrome prior to 72.0.3626.81 allowed a remote attacker to perform a Dangling Markup Injection attack via a crafted HTML page.
- Actualiza a 72.0.3626.119-0ubuntu0.16.04.1
Publicación ActualizaciónCVE-2019-5782
Incorrect optimization assumptions in V8 in Google Chrome prior to 72.0.3626.81 allowed a remote attacker to execute arbitrary code inside a sandbox via a crafted HTML page.
- Actualiza a 72.0.3626.119-0ubuntu0.16.04.1
Publicación ActualizaciónCVE-2019-5781
Incorrect handling of a confusable character in Omnibox in Google Chrome prior to 72.0.3626.81 allowed a remote attacker to spoof the contents of the Omnibox (URL bar) via a crafted domain name.
- Actualiza a 72.0.3626.119-0ubuntu0.16.04.1
Publicación ActualizaciónCVE-2019-5780
Insufficient restrictions on what can be done with Apple Events in Google Chrome on macOS prior to 72.0.3626.81 allowed a local attacker to execute JavaScript via Apple Events.
- Actualiza a 72.0.3626.119-0ubuntu0.16.04.1
Publicación ActualizaciónCVE-2019-5779
Insufficient policy validation in ServiceWorker in Google Chrome prior to 72.0.3626.81 allowed a remote attacker to bypass navigation restrictions via a crafted HTML page.
- Actualiza a 72.0.3626.119-0ubuntu0.16.04.1
Publicación ActualizaciónCVE-2019-5778
A missing case for handling special schemes in permission request checks in Extensions in Google Chrome prior to 72.0.3626.81 allowed an attacker who convinced a user to install a malicious extension to bypass extension permission checks for privileged pages via a crafted Chrome Extension.
- Actualiza a 72.0.3626.119-0ubuntu0.16.04.1
Publicación ActualizaciónCVE-2019-5777
Incorrect handling of a confusable character in Omnibox in Google Chrome prior to 72.0.3626.81 allowed a remote attacker to spoof the contents of the Omnibox (URL bar) via a crafted domain name.
- Actualiza a 72.0.3626.119-0ubuntu0.16.04.1
Publicación ActualizaciónCVE-2019-5776
Incorrect handling of a confusable character in Omnibox in Google Chrome prior to 72.0.3626.81 allowed a remote attacker to spoof the contents of the Omnibox (URL bar) via a crafted domain name.
- Actualiza a 72.0.3626.119-0ubuntu0.16.04.1
Publicación ActualizaciónCVE-2019-5775
Incorrect handling of a confusable character in Omnibox in Google Chrome prior to 72.0.3626.81 allowed a remote attacker to spoof the contents of the Omnibox (URL bar) via a crafted domain name.
- Actualiza a 72.0.3626.119-0ubuntu0.16.04.1
Publicación ActualizaciónCVE-2019-5774
Omission of the .desktop filetype from the Safe Browsing checklist in SafeBrowsing in Google Chrome on Linux prior to 72.0.3626.81 allowed an attacker who convinced a user to download a .desktop file to execute arbitrary code via a downloaded .desktop file.
- Actualiza a 72.0.3626.119-0ubuntu0.16.04.1
Publicación ActualizaciónCVE-2019-5773
Insufficient origin validation in IndexedDB in Google Chrome prior to 72.0.3626.81 allowed a remote attacker who had compromised the renderer process to bypass same origin policy via a crafted HTML page.
- Actualiza a 72.0.3626.119-0ubuntu0.16.04.1
Publicación ActualizaciónCVE-2019-5772
Sharing of objects over calls into JavaScript runtime in PDFium in Google Chrome prior to 72.0.3626.81 allowed a remote attacker to potentially exploit heap corruption via a crafted PDF file.
- Actualiza a 72.0.3626.119-0ubuntu0.16.04.1
Publicación ActualizaciónCVE-2019-5770
Insufficient input validation in WebGL in Google Chrome prior to 72.0.3626.81 allowed a remote attacker to perform an out of bounds memory read via a crafted HTML page.
- Actualiza a 72.0.3626.119-0ubuntu0.16.04.1
Publicación Actualización
Comprueba tu servidor
Compara tu pila y las versiones instaladas con las bases actuales de vulnerabilidades.