CVE-2017-5041
Google Chrome prior to 57.0.2987.100 incorrectly handled back-forward navigation, which allowed a remote attacker to display incorrect information for a site via a crafted HTML page.
- Update to 1.21.5-0ubuntu0.16.04.1
Published Updated
PatchFirst · Latest vulnerabilities
oxide-qt vulnerabilities · Page 18
Vulnerabilities published for oxide-qt in the last 30 days: 0. Listed in the KEV catalogue: 0.
Vulnerabilities: 475
CVE-2017-5040
V8 in Google Chrome prior to 57.0.2987.98 for Mac, Windows, and Linux and 57.0.2987.108 for Android was missing a neutering check, which allowed a remote attacker to read values in memory via a crafted HTML page.
- Update to 1.21.5-0ubuntu0.16.04.1
Published UpdatedCVE-2017-5037
An integer overflow in FFmpeg in Google Chrome prior to 57.0.2987.98 for Mac, Windows, and Linux and 57.0.2987.108 for Android allowed a remote attacker to perform an out of bounds memory write via a crafted video file, related to ChunkDemuxer.
- Update to 1.21.5-0ubuntu0.16.04.1
Published UpdatedCVE-2017-5035
Google Chrome prior to 57.0.2987.98 for Windows and Mac had a race condition, which could cause Chrome to display incorrect certificate information for a site.
- Update to 1.21.5-0ubuntu0.16.04.1
Published UpdatedCVE-2017-5033
Blink in Google Chrome prior to 57.0.2987.98 for Mac, Windows, and Linux and 57.0.2987.108 for Android failed to correctly propagate CSP restrictions to local scheme pages, which allowed a remote attacker to bypass content security policy via a crafted HTML page, related to the unsafe-inline keyword.
- Update to 1.21.5-0ubuntu0.16.04.1
Published UpdatedCVE-2017-5031
A use after free in ANGLE in Google Chrome prior to 57.0.2987.98 for Windows allowed a remote attacker to perform an out of bounds memory read via a crafted HTML page.
- Update to 1.21.5-0ubuntu0.16.04.1
Published UpdatedCVE-2017-5030
Incorrect handling of complex species in V8 in Google Chrome prior to 57.0.2987.98 for Linux, Windows, and Mac and 57.0.2987.108 for Android allowed a remote attacker to execute arbitrary code via a crafted HTML page.
- Update to 1.21.5-0ubuntu0.16.04.1
Published UpdatedCVE-2017-5029
The xsltAddTextString function in transform.c in libxslt 1.1.29, as used in Blink in Google Chrome prior to 57.0.2987.98 for Mac, Windows, and Linux and 57.0.2987.108 for Android, lacked a check for integer overflow during a size calculation, which allowed a remote attacker to perform an out of bounds memory write via a crafted HTML page.
- Update to 1.21.5-0ubuntu0.16.04.1
Published UpdatedCVE-2016-5168
Skia, as used in Google Chrome before 50.0.2661.94, allows remote attackers to bypass the Same Origin Policy and obtain sensitive information.
Published UpdatedCVE-2013-6662
Google Chrome caches TLS sessions before certificate validation occurs.
Published UpdatedCVE-2013-6647
A use-after-free in AnimationController::endAnimationUpdate in Google Chrome.
Published UpdatedCVE-2017-5027
Blink in Google Chrome prior to 56.0.2924.76 for Linux, Windows and Mac, and 56.0.2924.87 for Android, failed to properly enforce unsafe-inline content security policy, which allowed a remote attacker to bypass content security policy via a crafted HTML page.
- Update to 1.20.4-0ubuntu0.16.04.1
Published UpdatedCVE-2017-5026
Google Chrome prior to 56.0.2924.76 for Linux, Windows and Mac, failed to prevent alerts from being displayed by swapped out frames, which allowed a remote attacker to show alerts on a page they don't control via a crafted HTML page.
- Update to 1.20.4-0ubuntu0.16.04.1
Published UpdatedCVE-2017-5025
FFmpeg in Google Chrome prior to 56.0.2924.76 for Linux, Windows and Mac, failed to perform proper bounds checking, which allowed a remote attacker to potentially exploit heap corruption via a crafted video file.
- Update to 1.20.4-0ubuntu0.16.04.1
Published UpdatedCVE-2017-5024
FFmpeg in Google Chrome prior to 56.0.2924.76 for Linux, Windows and Mac, failed to perform proper bounds checking, which allowed a remote attacker to potentially exploit heap corruption via a crafted video file.
- Update to 1.20.4-0ubuntu0.16.04.1
Published UpdatedCVE-2017-5023
Type confusion in Histogram in Google Chrome prior to 56.0.2924.76 for Linux, Windows and Mac, and 56.0.2924.87 for Android, allowed a remote attacker to potentially exploit a near null dereference via a crafted HTML page.
- Update to 1.20.4-0ubuntu0.16.04.1
Published UpdatedCVE-2017-5022
Blink in Google Chrome prior to 56.0.2924.76 for Linux, Windows and Mac, and 56.0.2924.87 for Android, failed to properly enforce unsafe-inline content security policy, which allowed a remote attacker to bypass content security policy via a crafted HTML page.
- Update to 1.20.4-0ubuntu0.16.04.1
Published UpdatedCVE-2017-5019
A use after free in Google Chrome prior to 56.0.2924.76 for Linux, Windows and Mac, and 56.0.2924.87 for Android, allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page.
- Update to 1.20.4-0ubuntu0.16.04.1
Published UpdatedCVE-2017-5017
Interactions with the OS in Google Chrome prior to 56.0.2924.76 for Mac insufficiently cleared video memory, which allowed a remote attacker to possibly extract image fragments on systems with GeForce 8600M graphics chips via a crafted HTML page.
- Update to 1.20.4-0ubuntu0.16.04.1
Published UpdatedCVE-2017-5014
Heap buffer overflow during image processing in Skia in Google Chrome prior to 56.0.2924.76 for Linux, Windows and Mac, and 56.0.2924.87 for Android, allowed a remote attacker to perform an out of bounds memory read via a crafted HTML page.
- Update to 1.20.4-0ubuntu0.16.04.1
Published Updated
Check your server
Check your installed stack and versions against the current vulnerability feeds.