|
246031
|
6.5 |
MEDIUM
Network
|
google redhat debian
|
chrome enterprise_linux_desktop enterprise_linux_server enterprise_linux_workstation debian_linux
|
Lack of proper validation of ancestor frames site when sending lax cookies in Navigation in Google Chrome prior to 71.0.3578.80 allowed a remote attacker to bypass SameSite cookie policy via a crafte…
|
CWE-20
Improper Input Validation
|
CVE-2018-18351
|
2024-11-21 12:55 |
2018-12-12 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
246032
|
6.5 |
MEDIUM
Network
|
google redhat debian
|
chrome enterprise_linux_desktop enterprise_linux_server enterprise_linux_workstation debian_linux
|
Incorrect handling of CSP enforcement during navigations in Blink in Google Chrome prior to 71.0.3578.80 allowed a remote attacker to bypass content security policy via a crafted HTML page.
|
NVD-CWE-noinfo
|
CVE-2018-18350
|
2024-11-21 12:55 |
2018-12-12 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
246033
|
6.5 |
MEDIUM
Network
|
google debian redhat
|
chrome debian_linux enterprise_linux_desktop enterprise_linux_server enterprise_linux_workstation
|
Remote frame navigations was incorrectly permitted to local resources in Blink in Google Chrome prior to 71.0.3578.80 allowed an attacker who convinced a user to install a malicious extension to acce…
|
CWE-732
Incorrect Permission Assignment for Critical Resource
|
CVE-2018-18349
|
2024-11-21 12:55 |
2018-12-12 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
246034
|
4.3 |
MEDIUM
Network
|
google redhat debian
|
chrome enterprise_linux_desktop enterprise_linux_server enterprise_linux_workstation debian_linux
|
Incorrect handling of bidirectional domain names with RTL characters in Omnibox in Google Chrome prior to 71.0.3578.80 allowed a remote attacker to spoof the contents of the Omnibox (URL bar) via a c…
|
NVD-CWE-noinfo
|
CVE-2018-18348
|
2024-11-21 12:55 |
2018-12-12 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
246035
|
8.8 |
HIGH
Network
|
google redhat debian
|
chrome linux_desktop linux_workstation linux_server debian_linux
|
Incorrect handling of failed navigations with invalid URLs in Navigation in Google Chrome prior to 71.0.3578.80 allowed a remote attacker to trick a user into executing javascript in an arbitrary ori…
|
CWE-20
Improper Input Validation
|
CVE-2018-18347
|
2024-11-21 12:55 |
2018-12-12 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
246036
|
6.5 |
MEDIUM
Network
|
google redhat debian
|
chrome linux_desktop linux_workstation linux_server debian_linux
|
Incorrect handling of alert box display in Blink in Google Chrome prior to 71.0.3578.80 allowed a remote attacker to present confusing browser UI via a crafted HTML page.
|
NVD-CWE-noinfo
|
CVE-2018-18346
|
2024-11-21 12:55 |
2018-12-12 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
246037
|
6.5 |
MEDIUM
Network
|
google redhat debian
|
chrome enterprise_linux_desktop enterprise_linux_server enterprise_linux_workstation debian_linux
|
Incorrect handling of blob URLS in Site Isolation in Google Chrome prior to 71.0.3578.80 allowed a remote attacker who had compromised the renderer process to bypass site isolation protections via a …
|
NVD-CWE-noinfo
|
CVE-2018-18345
|
2024-11-21 12:55 |
2018-12-12 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
246038
|
6.5 |
MEDIUM
Network
|
google debian redhat
|
chrome debian_linux enterprise_linux_desktop enterprise_linux_server enterprise_linux_workstation
|
Inappropriate allowance of the setDownloadBehavior devtools protocol feature in Extensions in Google Chrome prior to 71.0.3578.80 allowed a remote attacker with control of an installed extension to a…
|
CWE-269
Improper Privilege Management
|
CVE-2018-18344
|
2024-11-21 12:55 |
2018-12-12 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
246039
|
8.8 |
HIGH
Network
|
google redhat debian
|
chrome linux_desktop linux_workstation linux_server debian_linux
|
Incorrect handing of paths leading to a use after free in Skia in Google Chrome prior to 71.0.3578.80 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page.
|
CWE-787 CWE-416
Out-of-bounds Write Use After Free
|
CVE-2018-18343
|
2024-11-21 12:55 |
2018-12-12 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
246040
|
8.8 |
HIGH
Network
|
google redhat debian
|
chrome enterprise_linux_desktop enterprise_linux_server enterprise_linux_workstation debian_linux
|
Execution of user supplied Javascript during object deserialization can update object length leading to an out of bounds write in V8 in Google Chrome prior to 71.0.3578.80 allowed a remote attacker t…
|
CWE-787
Out-of-bounds Write
|
CVE-2018-18342
|
2024-11-21 12:55 |
2018-12-12 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|