Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
CVE ID: CVE-2018-16039 State: PUBLISHED Published: 2019-01-18T17:00:00 Last Updated: 2024-08-05T10:10:05.727Z Vendors: n/a Products: n/a Problem Types: n/a Description: Adobe Acrobat and Reader versions 2019.008.20081 and earlier, 2019.008.20080 and earlier, 2019.008.20081 and earlier, 2017.011.30106 and earlier version, 2017.011.30105 and earlier version, 2015.006.30457 and earlier, and 2015.006.30456 and earlier have a use after free vulnerability. Successful exploitation could lead to arbitrary code execution. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/106164 - https://helpx.adobe.com/security/products/acrobat/apsb18-41.html
CVE ID: CVE-2018-16040 State: PUBLISHED Published: 2019-01-18T17:00:00 Last Updated: 2024-08-05T10:10:06.083Z Vendors: n/a Products: n/a Problem Types: n/a Description: Adobe Acrobat and Reader versions 2019.008.20081 and earlier, 2019.008.20080 and earlier, 2019.008.20081 and earlier, 2017.011.30106 and earlier version, 2017.011.30105 and earlier version, 2015.006.30457 and earlier, and 2015.006.30456 and earlier have a use after free vulnerability. Successful exploitation could lead to arbitrary code execution. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/106164 - https://helpx.adobe.com/security/products/acrobat/apsb18-41.html
CVE ID: CVE-2018-16041 State: PUBLISHED Published: 2019-01-18T17:00:00 Last Updated: 2024-08-05T10:10:05.818Z Vendors: n/a Products: n/a Problem Types: n/a Description: Adobe Acrobat and Reader versions 2019.008.20081 and earlier, 2019.008.20080 and earlier, 2019.008.20081 and earlier, 2017.011.30106 and earlier version, 2017.011.30105 and earlier version, 2015.006.30457 and earlier, and 2015.006.30456 and earlier have an out-of-bounds read vulnerability. Successful exploitation could lead to information disclosure. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/106162 - https://helpx.adobe.com/security/products/acrobat/apsb18-41.html
CVE ID: CVE-2018-16042 State: PUBLISHED Published: 2019-01-18T17:00:00 Last Updated: 2024-08-05T10:10:05.952Z Vendors: n/a Products: n/a Problem Types: n/a Description: Adobe Acrobat and Reader versions 2019.008.20081 and earlier, 2019.008.20080 and earlier, 2019.008.20081 and earlier, 2017.011.30106 and earlier version, 2017.011.30105 and earlier version, 2015.006.30457 and earlier, and 2015.006.30456 and earlier have a security bypass vulnerability. Successful exploitation could lead to information disclosure. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/106159 - https://helpx.adobe.com/security/products/acrobat/apsb18-41.html - https://
- http://www.securityfocus.com/bid/106159 - https://helpx.adobe.com/security/products/acrobat/apsb18-41.html - https://pdf-insecurity.org/signature/evaluation_2018.html - https://pdf-insecurity.org/signature/signature.html - https://www.pdfa.org/recently-identified-pdf-digital-signature-vulnerabilities/
CVE ID: CVE-2018-16043 State: PUBLISHED Published: 2019-01-18T17:00:00 Last Updated: 2024-08-05T10:10:06.122Z Vendors: n/a Products: n/a Problem Types: n/a Description: Adobe Acrobat and Reader versions 2019.008.20081 and earlier, 2019.008.20080 and earlier, 2019.008.20081 and earlier, 2017.011.30106 and earlier version, 2017.011.30105 and earlier version, 2015.006.30457 and earlier, and 2015.006.30456 and earlier have an out-of-bounds read vulnerability. Successful exploitation could lead to information disclosure. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/106162 - https://helpx.adobe.com/security/products/acrobat/apsb18-41.html
CVE ID: CVE-2018-16044 State: PUBLISHED Published: 2019-01-18T17:00:00 Last Updated: 2024-08-05T10:10:06.096Z Vendors: n/a Products: n/a Problem Types: n/a Description: Adobe Acrobat and Reader versions 2019.008.20081 and earlier, 2019.008.20080 and earlier, 2019.008.20081 and earlier, 2017.011.30106 and earlier version, 2017.011.30105 and earlier version, 2015.006.30457 and earlier, and 2015.006.30456 and earlier have a security bypass vulnerability. Successful exploitation could lead to privilege escalation. Additional Analyst Notes: - CVE Program Container: References: - https://helpx.adobe.com/security/products/acrobat/apsb18-41.html - http://www.securityfocus.com/bid/106165
CVE ID: CVE-2018-16045 State: PUBLISHED Published: 2019-01-18T17:00:00 Last Updated: 2024-08-05T10:10:06.094Z Vendors: n/a Products: n/a Problem Types: n/a Description: Adobe Acrobat and Reader versions 2019.008.20081 and earlier, 2019.008.20080 and earlier, 2019.008.20081 and earlier, 2017.011.30106 and earlier version, 2017.011.30105 and earlier version, 2015.006.30457 and earlier, and 2015.006.30456 and earlier have a security bypass vulnerability. Successful exploitation could lead to privilege escalation. Additional Analyst Notes: - CVE Program Container: References: - https://helpx.adobe.com/security/products/acrobat/apsb18-41.html - http://www.securityfocus.com/bid/106165
CVE ID: CVE-2018-16046 State: PUBLISHED Published: 2019-01-18T17:00:00 Last Updated: 2024-08-05T10:10:06.003Z Vendors: n/a Products: n/a Problem Types: n/a Description: Adobe Acrobat and Reader versions 2019.008.20081 and earlier, 2019.008.20080 and earlier, 2019.008.20081 and earlier, 2017.011.30106 and earlier version, 2017.011.30105 and earlier version, 2015.006.30457 and earlier, and 2015.006.30456 and earlier have a use after free vulnerability. Successful exploitation could lead to arbitrary code execution. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/106164 - https://helpx.adobe.com/security/products/acrobat/apsb18-41.html
CVE ID: CVE-2018-16047 State: PUBLISHED Published: 2019-01-18T17:00:00 Last Updated: 2024-08-05T10:10:05.836Z Vendors: n/a Products: n/a Problem Types: n/a Description: Adobe Acrobat and Reader versions 2019.008.20081 and earlier, 2019.008.20080 and earlier, 2019.008.20081 and earlier, 2017.011.30106 and earlier version, 2017.011.30105 and earlier version, 2015.006.30457 and earlier, and 2015.006.30456 and earlier have an out-of-bounds read vulnerability. Successful exploitation could lead to information disclosure. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/106162 - https://helpx.adobe.com/security/products/acrobat/apsb18-41.html
CVE ID: CVE-2018-16048 State: PUBLISHED Published: 2018-10-03T16:00:00 Last Updated: 2024-08-05T10:10:06.099Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered in GitLab Community and Enterprise Edition before 11.0.6, 11.1.x before 11.1.5, and 11.2.x before 11.2.2. There is Missing Authorization Control for API Repository Storage. Additional Analyst Notes: - CVE Program Container: References: - https://gitlab.com/gitlab-org/gitlab-ce/issues/49947 - https://about.gitlab.com/2018/08/28/security-release-gitlab-11-dot-2-dot-2-released/
CVE ID: CVE-2018-16049 State: PUBLISHED Published: 2018-10-03T16:00:00 Last Updated: 2024-08-05T10:10:05.810Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered in GitLab Community and Enterprise Edition before 11.0.6, 11.1.x before 11.1.5, and 11.2.x before 11.2.2. There is Sensitive Data Disclosure in Sidekiq Logs through an Error Message. Additional Analyst Notes: - CVE Program Container: References: - https://gitlab.com/gitlab-org/gitlab-ce/issues/46967 - https://about.gitlab.com/2018/08/28/security-release-gitlab-11-dot-2-dot-2-released/ - https://gitlab.com/gitlab-org/gitlab-ce/issues/49272
CVE ID: CVE-2018-16050 State: PUBLISHED Published: 2018-10-03T16:00:00 Last Updated: 2024-08-05T10:10:06.090Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered in GitLab Community and Enterprise Edition 11.1.x before 11.1.5 and 11.2.x before 11.2.2. There is Persistent XSS in the Merge Request Changes View. Additional Analyst Notes: - CVE Program Container: References: - https://gitlab.com/gitlab-org/gitlab-ce/issues/49085 - https://about.gitlab.com/2018/08/28/security-release-gitlab-11-dot-2-dot-2-released/
CVE ID: CVE-2018-16051 State: PUBLISHED Published: 2018-10-03T16:00:00 Last Updated: 2024-08-05T10:10:06.091Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered in GitLab Community and Enterprise Edition before 11.0.6, 11.1.x before 11.1.5, and 11.2.x before 11.2.2. There is Orphaned Upload Files Exposure. Additional Analyst Notes: - CVE Program Container: References: - https://about.gitlab.com/2018/08/28/security-release-gitlab-11-dot-2-dot-2-released/ - https://gitlab.com/gitlab-org/gitlab-ee/issues/6012
CVE ID: CVE-2018-16055 State: PUBLISHED Published: 2018-09-26T22:00:00 Last Updated: 2024-08-05T10:10:05.701Z Vendors: n/a Products: n/a Problem Types: n/a Description: An authenticated command injection vulnerability exists in status_interfaces.php via dhcp_relinquish_lease() in pfSense before 2.4.4 due to its passing user input from the $_POST parameters "ifdescr" and "ipv" to a shell without escaping the contents of the variables. This allows an authenticated WebGUI user with privileges for the affected page to execute commands in the context of the root user when submitting a request to relinquish a DHCP lease for an interface which is configured to obtain its address via DHCP. Additiona
ting a request to relinquish a DHCP lease for an interface which is configured to obtain its address via DHCP. Additional Analyst Notes: - CVE Program Container: References: - https://www.pfsense.org/security/advisories/pfSense-SA-18_08.webgui.asc - https://doddsecurity.com/190/command-injection-on-pfsense-firewalls/
CVE ID: CVE-2018-16056 State: PUBLISHED Published: 2018-08-30T01:00:00 Last Updated: 2024-08-05T10:10:05.795Z Vendors: n/a Products: n/a Problem Types: n/a Description: In Wireshark 2.6.0 to 2.6.2, 2.4.0 to 2.4.8, and 2.2.0 to 2.2.16, the Bluetooth Attribute Protocol dissector could crash. This was addressed in epan/dissectors/packet-btatt.c by verifying that a dissector for a specific UUID exists. Additional Analyst Notes: - CVE Program Container: References: - https://code.wireshark.org/review/gitweb?p=wireshark.git%3Ba=commit%3Bh=f98fbce64cb230e94a2cafc410a3cedad657b485 - https://www.debian.org/security/2018/dsa-4315 - http://www.securityfocus.com/bid/105174 - http://www.securitytracker.c
- https://www.debian.org/security/2018/dsa-4315 - http://www.securityfocus.com/bid/105174 - http://www.securitytracker.com/id/1041609 - https://bugs.wireshark.org/bugzilla/show_bug.cgi?id=14994 - https://www.wireshark.org/security/wnpa-sec-2018-45.html - http://lists.opensuse.org/opensuse-security-announce/2020-03/msg00027.html
CVE ID: CVE-2018-16057 State: PUBLISHED Published: 2018-08-30T01:00:00 Last Updated: 2024-08-05T10:10:06.054Z Vendors: n/a Products: n/a Problem Types: n/a Description: In Wireshark 2.6.0 to 2.6.2, 2.4.0 to 2.4.8, and 2.2.0 to 2.2.16, the Radiotap dissector could crash. This was addressed in epan/dissectors/packet-ieee80211-radiotap-iter.c by validating iterator operations. Additional Analyst Notes: - CVE Program Container: References: - https://www.debian.org/security/2018/dsa-4315 - http://www.securityfocus.com/bid/105174 - http://www.securitytracker.com/id/1041609 - https://bugs.wireshark.org/bugzilla/show_bug.cgi?id=15022 - https://lists.debian.org/debian-lts-announce/2019/01/msg00010.ht
s://bugs.wireshark.org/bugzilla/show_bug.cgi?id=15022 - https://lists.debian.org/debian-lts-announce/2019/01/msg00010.html - https://www.wireshark.org/security/wnpa-sec-2018-46.html - http://lists.opensuse.org/opensuse-security-announce/2020-03/msg00027.html - https://code.wireshark.org/review/gitweb?p=wireshark.git%3Ba=commit%3Bh=bbf46eb46ae38392af8e6cd288795f0def50a621
CVE ID: CVE-2018-16058 State: PUBLISHED Published: 2018-08-30T01:00:00 Last Updated: 2024-08-05T10:10:05.803Z Vendors: n/a Products: n/a Problem Types: n/a Description: In Wireshark 2.6.0 to 2.6.2, 2.4.0 to 2.4.8, and 2.2.0 to 2.2.16, the Bluetooth AVDTP dissector could crash. This was addressed in epan/dissectors/packet-btavdtp.c by properly initializing a data structure. Additional Analyst Notes: - CVE Program Container: References: - https://www.debian.org/security/2018/dsa-4315 - http://www.securityfocus.com/bid/105174 - http://www.securitytracker.com/id/1041609 - https://lists.debian.org/debian-lts-announce/2019/01/msg00010.html - https://code.wireshark.org/review/gitweb?p=wireshark.git
://lists.debian.org/debian-lts-announce/2019/01/msg00010.html - https://code.wireshark.org/review/gitweb?p=wireshark.git%3Ba=commit%3Bh=c48d6a6d60c5c9111838a945966b6cb8750777be - https://www.wireshark.org/security/wnpa-sec-2018-44.html - https://bugs.wireshark.org/bugzilla/show_bug.cgi?id=14884 - http://lists.opensuse.org/opensuse-security-announce/2020-03/msg00027.html
CVE ID: CVE-2018-16059 State: PUBLISHED Published: 2018-09-07T22:00:00 Last Updated: 2024-08-05T10:10:05.948Z Vendors: n/a Products: n/a Problem Types: n/a Description: Endress+Hauser WirelessHART Fieldgate SWG70 3.x devices allow Directory Traversal via the fcgi-bin/wgsetcgi filename parameter. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/107416 - https://www.exploit-db.com/exploits/45342/ - https://ics-cert.us-cert.gov/advisories/ICSA-19-073-03 - https://cert.vde.com/en-us/advisories/vde-2019-002
CVE ID: CVE-2018-16060 State: PUBLISHED Published: 2021-10-15T19:04:21 Last Updated: 2024-09-11T14:16:49.445Z Vendors: n/a Products: n/a Problem Types: n/a Description: Mitsubishi Electric Europe B.V. SmartRTU devices allow remote attackers to obtain sensitive information (directory listing and source code) via a direct request to the /web URI. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://drive.google.com/open?id=1QMHwTnBbIqrTkR0NEpnTKssYdi8vRsHH - http://packetstormsecurity.com/files/164538/Mitsubishi-Electric-INEA-SmartRTU-Source-Code-Disclosure.html
CVE ID: CVE-2018-16061 State: PUBLISHED Published: 2021-10-15T19:04:31 Last Updated: 2024-09-11T14:15:21.830Z Vendors: n/a Products: n/a Problem Types: n/a Description: Mitsubishi Electric Europe B.V. SmartRTU devices allow XSS via the username parameter or PATH_INFO to login.php. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://drive.google.com/open?id=1DEZQqfpIgcflY2cF6O0y7vtlWYe8Wjjv - http://packetstormsecurity.com/files/164537/Mitsubishi-Electric-INEA-SmartRTU-Cross-Site-Scripting.html
CVE ID: CVE-2018-16062 State: PUBLISHED Published: 2018-08-29T03:00:00 Last Updated: 2024-08-05T10:10:05.946Z Vendors: n/a Products: n/a Problem Types: n/a Description: dwarf_getaranges in dwarf_getaranges.c in libdw in elfutils before 2018-08-18 allows remote attackers to cause a denial of service (heap-based buffer over-read) via a crafted file. Additional Analyst Notes: - CVE Program Container: References: - https://sourceware.org/git/?p=elfutils.git%3Ba=commit%3Bh=29e31978ba51c1051743a503ee325b5ebc03d7e9 - https://sourceware.org/bugzilla/show_bug.cgi?id=23541 - https://lists.debian.org/debian-lts-announce/2019/02/msg00036.html - https://usn.ubuntu.com/4012-1/ - http://lists.opensuse.org/
lists.debian.org/debian-lts-announce/2019/02/msg00036.html - https://usn.ubuntu.com/4012-1/ - http://lists.opensuse.org/opensuse-security-announce/2019-06/msg00052.html - https://access.redhat.com/errata/RHSA-2019:2197 - https://lists.debian.org/debian-lts-announce/2021/10/msg00030.html
CVE ID: CVE-2018-16064 State: PUBLISHED Published: 2019-06-27T16:13:41 Last Updated: 2024-08-05T10:10:05.811Z Vendors: Google Products: Chrome Problem Types: Insufficient policy enforcement Description: Insufficient data validation in Extensions API in Google Chrome prior to 68.0.3440.75 allowed an attacker who convinced a user to install a malicious extension to bypass navigation restrictions via a crafted Chrome Extension. Additional Analyst Notes: - CVE Program Container: References: - https://crbug.com/797461 - https://chromereleases.googleblog.com/2018/07/stable-channel-update-for-desktop.html
CVE ID: CVE-2018-16065 State: PUBLISHED Published: 2019-01-09T19:00:00 Last Updated: 2024-08-05T10:10:06.123Z Vendors: Google Products: Chrome Problem Types: Use after free Description: A Javascript reentrancy issues that caused a use-after-free in V8 in Google Chrome prior to 69.0.3497.81 allowed a remote attacker to execute arbitrary code inside a sandbox via a crafted HTML page. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/105215 - https://www.debian.org/security/2018/dsa-4289 - https://access.redhat.com/errata/RHSA-2018:2666 - https://chromereleases.googleblog.com/2018/09/stable-channel-update-for-desktop.html - https://security.gentoo
18:2666 - https://chromereleases.googleblog.com/2018/09/stable-channel-update-for-desktop.html - https://security.gentoo.org/glsa/201811-10 - https://crbug.com/867776
CVE ID: CVE-2018-16066 State: PUBLISHED Published: 2019-01-09T19:00:00 Last Updated: 2024-08-05T10:10:05.797Z Vendors: Google Products: Chrome Problem Types: Use after free Description: A use after free in Blink in Google Chrome prior to 69.0.3497.81 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/105215 - https://www.debian.org/security/2018/dsa-4289 - https://access.redhat.com/errata/RHSA-2018:2666 - https://crbug.com/847570 - https://chromereleases.googleblog.com/2018/09/stable-channel-update-for-desktop.html - https://security.gentoo.org/glsa/201811-
/chromereleases.googleblog.com/2018/09/stable-channel-update-for-desktop.html - https://security.gentoo.org/glsa/201811-10
CVE ID: CVE-2018-16067 State: PUBLISHED Published: 2019-01-09T19:00:00 Last Updated: 2024-08-05T10:10:06.078Z Vendors: Google Products: Chrome Problem Types: Use after free Description: A use after free in WebAudio in Google Chrome prior to 69.0.3497.81 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/105215 - https://crbug.com/860522 - https://www.debian.org/security/2018/dsa-4289 - https://access.redhat.com/errata/RHSA-2018:2666 - https://chromereleases.googleblog.com/2018/09/stable-channel-update-for-desktop.html - https://security.gentoo.org/glsa/2018
s://chromereleases.googleblog.com/2018/09/stable-channel-update-for-desktop.html - https://security.gentoo.org/glsa/201811-10
CVE ID: CVE-2018-16068 State: PUBLISHED Published: 2019-01-09T19:00:00 Last Updated: 2024-08-05T10:10:05.818Z Vendors: Google Products: Chrome Problem Types: Out of bounds read and write Description: Missing validation in Mojo in Google Chrome prior to 69.0.3497.81 allowed a remote attacker to potentially perform a sandbox escape via a crafted HTML page. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/105215 - https://www.debian.org/security/2018/dsa-4289 - https://crbug.com/877182 - https://access.redhat.com/errata/RHSA-2018:2666 - https://chromereleases.googleblog.com/2018/09/stable-channel-update-for-desktop.html - https://security.gentoo.
8:2666 - https://chromereleases.googleblog.com/2018/09/stable-channel-update-for-desktop.html - https://security.gentoo.org/glsa/201811-10
CVE ID: CVE-2018-16069 State: PUBLISHED Published: 2019-06-27T16:13:41 Last Updated: 2024-08-05T10:10:06.100Z Vendors: Google Products: Chrome Problem Types: Heap buffer overflow Description: Unintended floating-point error accumulation in SwiftShader in Google Chrome prior to 69.0.3497.81 allowed a remote attacker to leak cross-origin data via a crafted HTML page. Additional Analyst Notes: - CVE Program Container: References: - https://crbug.com/848238 - https://chromereleases.googleblog.com/2018/09/stable-channel-update-for-desktop.html
CVE ID: CVE-2018-16070 State: PUBLISHED Published: 2019-06-27T16:13:41 Last Updated: 2024-08-05T10:10:06.100Z Vendors: Google Products: Chrome Problem Types: Integer overflow Description: Integer overflows in Skia in Google Chrome prior to 69.0.3497.81 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. Additional Analyst Notes: - CVE Program Container: References: - https://chromereleases.googleblog.com/2018/09/stable-channel-update-for-desktop.html - https://crbug.com/848716
CVE ID: CVE-2018-16071 State: PUBLISHED Published: 2019-01-09T19:00:00 Last Updated: 2024-08-05T10:17:36.927Z Vendors: Google Products: Chrome Problem Types: Use after free Description: A use after free in WebRTC in Google Chrome prior to 69.0.3497.81 allowed a remote attacker to potentially exploit heap corruption via a crafted video file. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/105215 - https://access.redhat.com/errata/RHSA-2018:2666 - https://chromereleases.googleblog.com/2018/09/stable-channel-update-for-desktop.html - https://security.gentoo.org/glsa/201811-10 - https://www.exploit-db.com/exploits/45443/ - https://crbug.com/85521
html - https://security.gentoo.org/glsa/201811-10 - https://www.exploit-db.com/exploits/45443/ - https://crbug.com/855211
CVE ID: CVE-2018-16072 State: PUBLISHED Published: 2019-01-09T19:00:00 Last Updated: 2024-08-05T10:17:36.944Z Vendors: Google Products: Chrome Problem Types: Insufficient policy enforcement Description: A missing origin check related to HLS manifests in Blink in Google Chrome prior to 69.0.3497.81 allowed a remote attacker to bypass same origin policy via a crafted HTML page. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/105215 - https://crbug.com/864283 - https://chromereleases.googleblog.com/2018/09/stable-channel-update-for-desktop.html - https://security.gentoo.org/glsa/201811-10
CVE ID: CVE-2018-16073 State: PUBLISHED Published: 2019-06-27T16:13:41 Last Updated: 2024-08-05T10:17:37.014Z Vendors: Google Products: Chrome Problem Types: Insufficient policy enforcement Description: Insufficient policy enforcement in site isolation in Google Chrome prior to 69.0.3497.81 allowed a remote attacker to bypass site isolation via a crafted HTML page. Additional Analyst Notes: - CVE Program Container: References: - https://chromereleases.googleblog.com/2018/09/stable-channel-update-for-desktop.html - https://crbug.com/863069
CVE ID: CVE-2018-16074 State: PUBLISHED Published: 2019-06-27T16:13:41 Last Updated: 2024-08-05T10:17:36.997Z Vendors: Google Products: Chrome Problem Types: Insufficient policy enforcement Description: Insufficient policy enforcement in site isolation in Google Chrome prior to 69.0.3497.81 allowed a remote attacker to bypass site isolation via a crafted HTML page. Additional Analyst Notes: - CVE Program Container: References: - https://chromereleases.googleblog.com/2018/09/stable-channel-update-for-desktop.html - https://crbug.com/863623
CVE ID: CVE-2018-16075 State: PUBLISHED Published: 2019-06-27T16:13:41 Last Updated: 2024-08-05T10:17:36.940Z Vendors: Google Products: Chrome Problem Types: Insufficient data validation Description: Insufficient file type enforcement in Blink in Google Chrome prior to 69.0.3497.81 allowed a remote attacker to obtain local file data via a crafted HTML page. Additional Analyst Notes: - CVE Program Container: References: - https://chromereleases.googleblog.com/2018/09/stable-channel-update-for-desktop.html - https://crbug.com/788936