CVE-2017-15411
Use after free in PDFium in Google Chrome prior to 63.0.3239.84 allowed a remote attacker to potentially exploit heap corruption via a crafted PDF file.
- Actualiza a 63.0.3239.84-0ubuntu1
Publicación Actualización
PatchFirst · Vulnerabilidades recientes
Vulnerabilidades de chromium-browser · Página 74
Vulnerabilidades publicadas para chromium-browser en los últimos 30 días: 0. Incluidas en el catálogo KEV: 0.
Vulnerabilidades: 1499
CVE-2017-15410
Use after free in PDFium in Google Chrome prior to 63.0.3239.84 allowed a remote attacker to potentially exploit heap corruption via a crafted PDF file.
- Actualiza a 63.0.3239.84-0ubuntu1
Publicación ActualizaciónCVE-2017-15409
Heap buffer overflow in Skia in Google Chrome prior to 63.0.3239.84 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page.
- Actualiza a 63.0.3239.84-0ubuntu1
Publicación ActualizaciónCVE-2017-15408
Heap buffer overflow in Omnibox in Google Chrome prior to 63.0.3239.84 allowed a remote attacker to potentially exploit heap corruption via a crafted PDF file that is mishandled by PDFium.
- Actualiza a 63.0.3239.84-0ubuntu1
Publicación ActualizaciónCVE-2017-15407
Out-of-bounds Write in the QUIC networking stack in Google Chrome prior to 63.0.3239.84 allowed a remote attacker to gain code execution via a malicious server.
- Actualiza a 63.0.3239.84-0ubuntu1
Publicación ActualizaciónCVE-2018-4117
An issue was discovered in certain Apple products. iOS before 11.3 is affected. Safari before 11.1 is affected. iCloud before 7.4 on Windows is affected. iTunes before 12.7.4 on Windows is affected. watchOS before 4.3 is affected. The issue involves the fetch API in the "WebKit" component. It allows remote attackers to bypass the Same Origin Policy and obtain sensitive information via a crafted web site.
- Actualiza a 68.0.3440.75-0ubuntu0.18.04.1
Publicación ActualizaciónCVE-2017-7000
An issue was discovered in certain Apple products. iOS before 10.3.2 is affected. macOS before 10.12.5 is affected. The issue involves the "SQLite" component. It allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption and application crash) via a crafted web site.
- Actualiza a 61.0.3163.100-0ubuntu1.1378
Publicación ActualizaciónCVE-2017-5133
Off-by-one read/write on the heap in Blink in Google Chrome prior to 62.0.3202.62 allowed a remote attacker to corrupt memory and possibly leak information and potentially execute code via a crafted PDF file.
- Actualiza a 62.0.3202.62-0ubuntu0.17.10.1380
Publicación ActualizaciónCVE-2017-5132
Inappropriate implementation in V8 in Google Chrome prior to 62.0.3202.62 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page, aka incorrect WebAssembly stack manipulation.
- Actualiza a 62.0.3202.62-0ubuntu0.17.10.1380
Publicación ActualizaciónCVE-2017-5131
An integer overflow in Skia in Google Chrome prior to 62.0.3202.62 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page, aka an out-of-bounds write.
- Actualiza a 62.0.3202.62-0ubuntu0.17.10.1380
Publicación ActualizaciónCVE-2017-5130
An integer overflow in xmlmemory.c in libxml2 before 2.9.5, as used in Google Chrome prior to 62.0.3202.62 and other products, allowed a remote attacker to potentially exploit heap corruption via a crafted XML file.
- Actualiza a 62.0.3202.62-0ubuntu0.17.10.1380
Publicación ActualizaciónCVE-2017-5129
A use after free in WebAudio in Blink in Google Chrome prior to 62.0.3202.62 allowed a remote attacker to perform an out of bounds memory read via a crafted HTML page.
- Actualiza a 62.0.3202.62-0ubuntu0.17.10.1380
Publicación ActualizaciónCVE-2017-5128
Heap buffer overflow in Blink in Google Chrome prior to 62.0.3202.62 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page, related to WebGL.
- Actualiza a 62.0.3202.62-0ubuntu0.17.10.1380
Publicación ActualizaciónCVE-2017-5127
Use after free in PDFium in Google Chrome prior to 62.0.3202.62 allowed a remote attacker to potentially exploit heap corruption via a crafted PDF file.
- Actualiza a 62.0.3202.62-0ubuntu0.17.10.1380
Publicación ActualizaciónCVE-2017-5126
A use after free in PDFium in Google Chrome prior to 62.0.3202.62 allowed a remote attacker to potentially exploit heap corruption via a crafted PDF file.
- Actualiza a 62.0.3202.62-0ubuntu0.17.10.1380
Publicación ActualizaciónCVE-2017-5125
Heap buffer overflow in Skia in Google Chrome prior to 62.0.3202.62 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page.
- Actualiza a 62.0.3202.62-0ubuntu0.17.10.1380
Publicación ActualizaciónCVE-2017-5124
Incorrect application of sandboxing in Blink in Google Chrome prior to 62.0.3202.62 allowed a remote attacker to inject arbitrary scripts or HTML (UXSS) via a crafted MHTML page.
- Actualiza a 62.0.3202.62-0ubuntu0.17.10.1380
Publicación ActualizaciónCVE-2017-15395
A use after free in Blink in Google Chrome prior to 62.0.3202.62 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page, aka an ImageCapture NULL pointer dereference.
- Actualiza a 62.0.3202.62-0ubuntu0.17.10.1380
Publicación ActualizaciónCVE-2017-15394
Insufficient Policy Enforcement in Extensions in Google Chrome prior to 62.0.3202.62 allowed a remote attacker to perform domain spoofing in permission dialogs via IDN homographs in a crafted Chrome Extension.
- Actualiza a 62.0.3202.62-0ubuntu0.17.10.1380
Publicación ActualizaciónCVE-2017-15393
Insufficient Policy Enforcement in Devtools remote debugging in Google Chrome prior to 62.0.3202.62 allowed a remote attacker to obtain access to remote debugging functionality via a crafted HTML page, aka a Referer leak.
- Actualiza a 62.0.3202.62-0ubuntu0.17.10.1380
Publicación Actualización
Comprueba tu servidor
Compara tu pila y las versiones instaladas con las bases actuales de vulnerabilidades.