CVE-2019-5792
Integer overflow in PDFium in Google Chrome prior to 73.0.3683.75 allowed a remote attacker to potentially perform out of bounds memory access via a crafted PDF file.
- Update to 73.0.3683.75-0ubuntu0.16.04.1
Published Updated
PatchFirst · Latest vulnerabilities
chromium-browser vulnerabilities · Page 31
Vulnerabilities published for chromium-browser in the last 30 days: 0. Listed in the KEV catalogue: 0.
Vulnerabilities: 1138
CVE-2019-5791
Inappropriate optimization in V8 in Google Chrome prior to 73.0.3683.75 allowed a remote attacker to perform an out of bounds memory read via a crafted HTML page.
- Update to 73.0.3683.75-0ubuntu0.16.04.1
Published UpdatedCVE-2019-5790
An integer overflow leading to an incorrect capacity of a buffer in JavaScript in Google Chrome prior to 73.0.3683.75 allowed a remote attacker to execute arbitrary code inside a sandbox via a crafted HTML page.
- Update to 73.0.3683.75-0ubuntu0.16.04.1
Published UpdatedCVE-2019-5789
An integer overflow that leads to a use-after-free in WebMIDI in Google Chrome on Windows prior to 73.0.3683.75 allowed a remote attacker who had compromised the renderer process to execute arbitrary code via a crafted HTML page.
- Update to 73.0.3683.75-0ubuntu0.16.04.1
Published UpdatedCVE-2019-5788
An integer overflow that leads to a use-after-free in Blink Storage in Google Chrome on Linux prior to 73.0.3683.75 allowed a remote attacker who had compromised the renderer process to execute arbitrary code via a crafted HTML page.
- Update to 73.0.3683.75-0ubuntu0.16.04.1
Published UpdatedCVE-2019-5787
Use-after-garbage-collection in Blink in Google Chrome prior to 73.0.3683.75 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page.
- Update to 73.0.3683.75-0ubuntu0.16.04.1
Published UpdatedCVE-2018-5179
A service worker can send the activate event on itself periodically which allows it to run perpetually, allowing it to monitor activity by users. Affects all versions prior to Firefox 60.
- Update to 70.0.3538.67-0ubuntu0.16.04.1
Published UpdatedCVE-2019-5783
Missing URI encoding of untrusted input in DevTools in Google Chrome prior to 72.0.3626.81 allowed a remote attacker to perform a Dangling Markup Injection attack via a crafted HTML page.
- Update to 72.0.3626.119-0ubuntu0.16.04.1
Published UpdatedCVE-2019-5782
Incorrect optimization assumptions in V8 in Google Chrome prior to 72.0.3626.81 allowed a remote attacker to execute arbitrary code inside a sandbox via a crafted HTML page.
- Update to 72.0.3626.119-0ubuntu0.16.04.1
Published UpdatedCVE-2019-5781
Incorrect handling of a confusable character in Omnibox in Google Chrome prior to 72.0.3626.81 allowed a remote attacker to spoof the contents of the Omnibox (URL bar) via a crafted domain name.
- Update to 72.0.3626.119-0ubuntu0.16.04.1
Published UpdatedCVE-2019-5780
Insufficient restrictions on what can be done with Apple Events in Google Chrome on macOS prior to 72.0.3626.81 allowed a local attacker to execute JavaScript via Apple Events.
- Update to 72.0.3626.119-0ubuntu0.16.04.1
Published UpdatedCVE-2019-5779
Insufficient policy validation in ServiceWorker in Google Chrome prior to 72.0.3626.81 allowed a remote attacker to bypass navigation restrictions via a crafted HTML page.
- Update to 72.0.3626.119-0ubuntu0.16.04.1
Published UpdatedCVE-2019-5778
A missing case for handling special schemes in permission request checks in Extensions in Google Chrome prior to 72.0.3626.81 allowed an attacker who convinced a user to install a malicious extension to bypass extension permission checks for privileged pages via a crafted Chrome Extension.
- Update to 72.0.3626.119-0ubuntu0.16.04.1
Published UpdatedCVE-2019-5777
Incorrect handling of a confusable character in Omnibox in Google Chrome prior to 72.0.3626.81 allowed a remote attacker to spoof the contents of the Omnibox (URL bar) via a crafted domain name.
- Update to 72.0.3626.119-0ubuntu0.16.04.1
Published UpdatedCVE-2019-5776
Incorrect handling of a confusable character in Omnibox in Google Chrome prior to 72.0.3626.81 allowed a remote attacker to spoof the contents of the Omnibox (URL bar) via a crafted domain name.
- Update to 72.0.3626.119-0ubuntu0.16.04.1
Published UpdatedCVE-2019-5775
Incorrect handling of a confusable character in Omnibox in Google Chrome prior to 72.0.3626.81 allowed a remote attacker to spoof the contents of the Omnibox (URL bar) via a crafted domain name.
- Update to 72.0.3626.119-0ubuntu0.16.04.1
Published UpdatedCVE-2019-5774
Omission of the .desktop filetype from the Safe Browsing checklist in SafeBrowsing in Google Chrome on Linux prior to 72.0.3626.81 allowed an attacker who convinced a user to download a .desktop file to execute arbitrary code via a downloaded .desktop file.
- Update to 72.0.3626.119-0ubuntu0.16.04.1
Published UpdatedCVE-2019-5773
Insufficient origin validation in IndexedDB in Google Chrome prior to 72.0.3626.81 allowed a remote attacker who had compromised the renderer process to bypass same origin policy via a crafted HTML page.
- Update to 72.0.3626.119-0ubuntu0.16.04.1
Published UpdatedCVE-2019-5772
Sharing of objects over calls into JavaScript runtime in PDFium in Google Chrome prior to 72.0.3626.81 allowed a remote attacker to potentially exploit heap corruption via a crafted PDF file.
- Update to 72.0.3626.119-0ubuntu0.16.04.1
Published UpdatedCVE-2019-5770
Insufficient input validation in WebGL in Google Chrome prior to 72.0.3626.81 allowed a remote attacker to perform an out of bounds memory read via a crafted HTML page.
- Update to 72.0.3626.119-0ubuntu0.16.04.1
Published Updated
Check your server
Check your installed stack and versions against the current vulnerability feeds.