|
219101
|
6.5 |
MEDIUM
Network
|
google opensuse debian fedoraproject
|
chrome leap backports debian_linux fedora
|
Insufficient policy enforcement in Blink in Google Chrome prior to 74.0.3729.108 allowed a remote attacker to leak cross-origin data via a crafted HTML page.
|
CWE-352
Origin Validation Error
|
CVE-2019-5814
|
2024-11-21 13:45 |
2019-06-28 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
219102
|
8.8 |
HIGH
Network
|
google opensuse debian fedoraproject
|
chrome leap debian_linux fedora backports
|
Use after free in V8 in Google Chrome prior to 74.0.3729.108 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page.
|
CWE-787 CWE-416
Out-of-bounds Write Use After Free
|
CVE-2019-5813
|
2024-11-21 13:45 |
2019-06-28 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
219103
|
6.5 |
MEDIUM
Network
|
google fedoraproject
|
chrome fedora
|
Inadequate security UI in iOS UI in Google Chrome prior to 74.0.3729.108 allowed a remote attacker to perform domain spoofing via a crafted HTML page.
|
NVD-CWE-noinfo
|
CVE-2019-5812
|
2024-11-21 13:45 |
2019-06-28 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
219104
|
8.8 |
HIGH
Network
|
google opensuse debian fedoraproject
|
chrome leap debian_linux fedora backports
|
Incorrect handling of CORS in ServiceWorker in Google Chrome prior to 74.0.3729.108 allowed a remote attacker to bypass same origin policy via a crafted HTML page.
|
NVD-CWE-noinfo
|
CVE-2019-5811
|
2024-11-21 13:45 |
2019-06-28 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
219105
|
6.5 |
MEDIUM
Network
|
google opensuse debian fedoraproject
|
chrome leap debian_linux fedora backports
|
Information leak in autofill in Google Chrome prior to 74.0.3729.108 allowed a remote attacker to obtain potentially sensitive information from process memory via a crafted HTML page.
|
CWE-312
Cleartext Storage of Sensitive Information
|
CVE-2019-5810
|
2024-11-21 13:45 |
2019-06-28 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
219106
|
8.8 |
HIGH
Network
|
google opensuse debian fedoraproject
|
chrome leap debian_linux fedora backports
|
Use after free in file chooser in Google Chrome prior to 74.0.3729.108 allowed a remote attacker who had compromised the renderer process to perform privilege escalation via a crafted HTML page.
|
CWE-416
Use After Free
|
CVE-2019-5809
|
2024-11-21 13:45 |
2019-06-28 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
219107
|
8.8 |
HIGH
Network
|
google opensuse debian fedoraproject
|
chrome leap debian_linux fedora backports
|
Use after free in Blink in Google Chrome prior to 74.0.3729.108 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page.
|
CWE-787 CWE-416
Out-of-bounds Write Use After Free
|
CVE-2019-5808
|
2024-11-21 13:45 |
2019-06-28 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
219108
|
8.8 |
HIGH
Network
|
google opensuse debian fedoraproject
|
chrome leap debian_linux fedora backports
|
Object lifetime issue in V8 in Google Chrome prior to 74.0.3729.108 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page.
|
CWE-787
Out-of-bounds Write
|
CVE-2019-5807
|
2024-11-21 13:45 |
2019-06-28 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
219109
|
8.8 |
HIGH
Network
|
google opensuse debian fedoraproject
|
chrome leap debian_linux fedora backports
|
Integer overflow in ANGLE in Google Chrome on Windows prior to 74.0.3729.108 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page.
|
CWE-787 CWE-190
Out-of-bounds Write Integer Overflow or Wraparound
|
CVE-2019-5806
|
2024-11-21 13:45 |
2019-06-28 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
219110
|
6.5 |
MEDIUM
Network
|
google opensuse debian fedoraproject
|
chrome leap debian_linux fedora backports
|
Use-after-free in PDFium in Google Chrome prior to 74.0.3729.108 allowed a remote attacker to potentially exploit heap corruption via a crafted PDF file.
|
CWE-787 CWE-416
Out-of-bounds Write Use After Free
|
CVE-2019-5805
|
2024-11-21 13:45 |
2019-06-28 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|