Aller au contenu

Vulnérabilités connues pour Google Chrome

Votre version est-elle touchée ?

CVE Résumé Score Publiée
CVE-2018-16071 A use after free in WebRTC in Google Chrome prior to 69.0.3497.81 allowed a remote attacker to potentially exploit… Non notée 9 janv. 2019
CVE-2018-16080 A missing check for popup window handling in Fullscreen in Google Chrome on macOS prior to 69.0.3497.81 allowed a remote… Non notée 9 janv. 2019
CVE-2018-16079 A race condition between permission prompts and navigations in Prompts in Google Chrome prior to 69.0.3497.81 allowed… Non notée 9 janv. 2019
CVE-2017-15428 Insufficient data validation in V8 builtins string generator could lead to out of bounds read and write access in V8… Non notée 9 janv. 2019
CVE-2017-15405 Inappropriate symlink handling and a race condition in the stateful recovery feature implementation could lead to a… Non notée 9 janv. 2019
CVE-2017-15404 An ability to process crash dumps under root privileges and inappropriate symlinks handling could lead to a local… Non notée 9 janv. 2019
CVE-2017-15403 Insufficient data validation in crosh could lead to a command injection under chronos privileges in Networking in Google… Non notée 9 janv. 2019
CVE-2017-15402 Using an ID that can be controlled by a compromised renderer which allows any frame to overwrite the page_state of any… Non notée 9 janv. 2019
CVE-2017-15401 A memory corruption bug in WebAssembly could lead to out of bounds read and write through V8 in WebAssembly in Google… Non notée 9 janv. 2019
CVE-2016-9651 A missing check for whether a property of a JS object is private in V8 in Google Chrome prior to 55.0.2883.75 allowed… Non notée 9 janv. 2019
CVE-2016-10403 Insufficient data validation on image data in PDFium in Google Chrome prior to 51.0.2704.63 allowed a remote attacker to… Non notée 9 janv. 2019
CVE-2018-18359 Incorrect handling of Reflect.construct in V8 in Google Chrome prior to 71.0.3578.80 allowed a remote attacker to… Non notée 11 déc. 2018
CVE-2018-18349 Remote frame navigations was incorrectly permitted to local resources in Blink in Google Chrome prior to 71.0.3578.80… Non notée 11 déc. 2018
CVE-2018-18358 Lack of special casing of localhost in WPAD files in Google Chrome prior to 71.0.3578.80 allowed an attacker on the… Non notée 11 déc. 2018
CVE-2018-18348 Incorrect handling of bidirectional domain names with RTL characters in Omnibox in Google Chrome prior to 71.0.3578.80… Non notée 11 déc. 2018
CVE-2018-18357 Incorrect handling of confusable characters in URL Formatter in Google Chrome prior to 71.0.3578.80 allowed a remote… Non notée 11 déc. 2018
CVE-2018-18356 An integer overflow in path handling lead to a use after free in Skia in Google Chrome prior to 71.0.3578.80 allowed a… Non notée 11 déc. 2018
CVE-2018-18339 Incorrect object lifecycle in WebAudio in Google Chrome prior to 71.0.3578.80 allowed a remote attacker to potentially… Non notée 11 déc. 2018
CVE-2018-18347 Incorrect handling of failed navigations with invalid URLs in Navigation in Google Chrome prior to 71.0.3578.80… Non notée 11 déc. 2018
CVE-2018-18355 Incorrect handling of confusable characters in URL Formatter in Google Chrome prior to 71.0.3578.80 allowed a remote… Non notée 11 déc. 2018
CVE-2018-18346 Incorrect handling of alert box display in Blink in Google Chrome prior to 71.0.3578.80 allowed a remote attacker to… Non notée 11 déc. 2018
CVE-2018-18338 Incorrect, thread-unsafe use of SkImage in Canvas in Google Chrome prior to 71.0.3578.80 allowed a remote attacker to… Non notée 11 déc. 2018
CVE-2018-18354 Insufficient validate of external protocols in Shell Integration in Google Chrome on Windows prior to 71.0.3578.80… Non notée 11 déc. 2018
CVE-2018-18345 Incorrect handling of blob URLS in Site Isolation in Google Chrome prior to 71.0.3578.80 allowed a remote attacker who… Non notée 11 déc. 2018
CVE-2018-18337 Incorrect handling of stylesheets leading to a use after free in Blink in Google Chrome prior to 71.0.3578.80 allowed… Non notée 11 déc. 2018

Autres produits Google