Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
CVE ID: CVE-2018-6050 State: PUBLISHED Published: 2018-09-25T14:00:00 Last Updated: 2024-08-05T05:54:52.952Z Vendors: Google Products: Chrome Problem Types: Incorrect security UI Description: Incorrect security UI in Omnibox in Google Chrome prior to 64.0.3282.119 allowed a remote attacker to spoof the contents of the Omnibox (URL bar) via a crafted HTML page. Additional Analyst Notes: - CVE Program Container: References: - https://chromereleases.googleblog.com/2018/01/stable-channel-update-for-desktop_24.html - https://www.debian.org/security/2018/dsa-4103 - https://crbug.com/774842 - http://www.securityfocus.com/bid/102797 - http://www.securitytracker.com/id/1040282 - https://access.redhat
com/774842 - http://www.securityfocus.com/bid/102797 - http://www.securitytracker.com/id/1040282 - https://access.redhat.com/errata/RHSA-2018:0265
CVE ID: CVE-2018-6051 State: PUBLISHED Published: 2018-09-25T14:00:00 Last Updated: 2024-08-05T05:54:52.978Z Vendors: Google Products: Chrome Problem Types: Inappropriate implementation Description: XSS Auditor in Google Chrome prior to 64.0.3282.119, did not ensure the reporting URL was in the same origin as the page it was on, which allowed a remote attacker to obtain referrer details via a crafted HTML page. Additional Analyst Notes: - CVE Program Container: References: - https://chromereleases.googleblog.com/2018/01/stable-channel-update-for-desktop_24.html - https://www.debian.org/security/2018/dsa-4103 - http://www.securityfocus.com/bid/102797 - http://www.securitytracker.com/id/104028
w.debian.org/security/2018/dsa-4103 - http://www.securityfocus.com/bid/102797 - http://www.securitytracker.com/id/1040282 - https://crbug.com/441275 - https://access.redhat.com/errata/RHSA-2018:0265
CVE ID: CVE-2018-6052 State: PUBLISHED Published: 2018-09-25T14:00:00 Last Updated: 2024-08-05T05:54:52.820Z Vendors: Google Products: Chrome Problem Types: Inappropriate implementation Description: Lack of support for a non standard no-referrer policy value in Blink in Google Chrome prior to 64.0.3282.119 allowed a remote attacker to obtain referrer details from a web page that had thought it had opted out of sending referrer data. Additional Analyst Notes: - CVE Program Container: References: - https://chromereleases.googleblog.com/2018/01/stable-channel-update-for-desktop_24.html - https://www.debian.org/security/2018/dsa-4103 - http://www.securityfocus.com/bid/102797 - https://crbug.com/
p_24.html - https://www.debian.org/security/2018/dsa-4103 - http://www.securityfocus.com/bid/102797 - https://crbug.com/615608 - http://www.securitytracker.com/id/1040282 - https://access.redhat.com/errata/RHSA-2018:0265
CVE ID: CVE-2018-6053 State: PUBLISHED Published: 2018-09-25T14:00:00 Last Updated: 2024-08-05T05:54:52.658Z Vendors: Google Products: Chrome Problem Types: Inappropriate implementation Description: Inappropriate implementation in New Tab Page in Google Chrome prior to 64.0.3282.119 allowed a local attacker to view website thumbnail images after clearing browser data via a crafted HTML page. Additional Analyst Notes: - CVE Program Container: References: - https://chromereleases.googleblog.com/2018/01/stable-channel-update-for-desktop_24.html - https://www.debian.org/security/2018/dsa-4103 - https://crbug.com/758169 - http://www.securityfocus.com/bid/102797 - http://www.securitytracker.com/id
y/2018/dsa-4103 - https://crbug.com/758169 - http://www.securityfocus.com/bid/102797 - http://www.securitytracker.com/id/1040282 - https://access.redhat.com/errata/RHSA-2018:0265
CVE ID: CVE-2018-6054 State: PUBLISHED Published: 2018-09-25T14:00:00 Last Updated: 2024-08-05T05:54:52.618Z Vendors: Google Products: Chrome Problem Types: Use after free Description: Use after free in WebUI in Google Chrome prior to 64.0.3282.119 allowed a remote attacker to potentially exploit heap corruption via a crafted Chrome Extension. Additional Analyst Notes: - CVE Program Container: References: - https://chromereleases.googleblog.com/2018/01/stable-channel-update-for-desktop_24.html - https://www.debian.org/security/2018/dsa-4103 - http://www.securityfocus.com/bid/102797 - http://www.securitytracker.com/id/1040282 - https://access.redhat.com/errata/RHSA-2018:0265 - https://crbug.c
d/102797 - http://www.securitytracker.com/id/1040282 - https://access.redhat.com/errata/RHSA-2018:0265 - https://crbug.com/797511
CVE ID: CVE-2018-6055 State: PUBLISHED Published: 2018-09-25T14:00:00 Last Updated: 2024-08-05T05:54:52.571Z Vendors: Google Products: Chrome Problem Types: Insufficient policy enforcement Description: Insufficient policy enforcement in Catalog Service in Google Chrome prior to 64.0.3282.119 allowed a remote attacker to potentially run arbitrary code outside sandbox via a crafted HTML page. Additional Analyst Notes: - CVE Program Container: References: - https://chromereleases.googleblog.com/2018/01/stable-channel-update-for-desktop_24.html - https://crbug.com/791003 - http://www.securityfocus.com/bid/105516
CVE ID: CVE-2018-6056 State: PUBLISHED Published: 2019-01-09T19:00:00 Last Updated: 2024-08-05T05:54:53.248Z Vendors: Google Products: Chrome Problem Types: Type Confusion Description: Type confusion could lead to a heap out-of-bounds write in V8 in Google Chrome prior to 64.0.3282.168 allowing a remote attacker to execute arbitrary code inside a sandbox via a crafted HTML page. Additional Analyst Notes: - CVE Program Container: References: - https://crbug.com/806388 - https://chromereleases.googleblog.com/2018/02/stable-channel-update-for-desktop_13.html - http://www.securityfocus.com/bid/103003 - https://access.redhat.com/errata/RHSA-2018:0334 - https://www.debian.org/security/2018/dsa-418
ityfocus.com/bid/103003 - https://access.redhat.com/errata/RHSA-2018:0334 - https://www.debian.org/security/2018/dsa-4182
CVE ID: CVE-2018-6057 State: PUBLISHED Published: 2018-11-14T15:00:00 Last Updated: 2024-08-05T05:54:52.744Z Vendors: Google Products: Chrome Problem Types: Inappropriate implementation Description: Lack of special casing of Android ashmem in Google Chrome prior to 65.0.3325.146 allowed a remote attacker who had compromised the renderer process to bypass inter-process read only guarantees via a crafted HTML page. Additional Analyst Notes: - CVE Program Container: References: - https://chromereleases.googleblog.com/2018/03/stable-channel-update-for-desktop.html - http://www.securityfocus.com/bid/103297 - https://access.redhat.com/errata/RHSA-2018:0484 - https://crbug.com/789959 - https://www.
securityfocus.com/bid/103297 - https://access.redhat.com/errata/RHSA-2018:0484 - https://crbug.com/789959 - https://www.debian.org/security/2018/dsa-4182
CVE ID: CVE-2018-6058 State: REJECTED Published: 2021-11-02T21:10:12 Last Updated: 2021-11-02T21:10:12 Description: No description available.
CVE ID: CVE-2018-6059 State: REJECTED Published: 2021-11-02T21:10:13 Last Updated: 2021-11-02T21:10:13 Description: No description available.
CVE ID: CVE-2018-6060 State: PUBLISHED Published: 2018-11-14T15:00:00 Last Updated: 2024-08-05T05:54:52.558Z Vendors: Google Products: Chrome Problem Types: Use after free Description: Use after free in WebAudio in Google Chrome prior to 65.0.3325.146 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. Additional Analyst Notes: - CVE Program Container: References: - https://crbug.com/780919 - https://chromereleases.googleblog.com/2018/03/stable-channel-update-for-desktop.html - http://www.securityfocus.com/bid/103297 - https://access.redhat.com/errata/RHSA-2018:0484 - https://www.debian.org/security/2018/dsa-4182
CVE ID: CVE-2018-6061 State: PUBLISHED Published: 2018-11-14T15:00:00 Last Updated: 2024-08-05T05:54:52.460Z Vendors: Google Products: Chrome Problem Types: Race Description: A race in the handling of SharedArrayBuffers in WebAssembly in Google Chrome prior to 65.0.3325.146 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. Additional Analyst Notes: - CVE Program Container: References: - https://crbug.com/794091 - https://chromereleases.googleblog.com/2018/03/stable-channel-update-for-desktop.html - http://www.securityfocus.com/bid/103297 - https://access.redhat.com/errata/RHSA-2018:0484 - https://www.debian.org/security/2018/dsa-4182
CVE ID: CVE-2018-6062 State: PUBLISHED Published: 2018-11-14T15:00:00 Last Updated: 2024-08-05T05:54:53.268Z Vendors: Google Products: Chrome Problem Types: Integer overflow Description: Heap overflow write in Skia in Google Chrome prior to 65.0.3325.146 allowed a remote attacker to perform an out of bounds memory write via a crafted HTML page. Additional Analyst Notes: - CVE Program Container: References: - https://crbug.com/780104 - https://chromereleases.googleblog.com/2018/03/stable-channel-update-for-desktop.html - http://www.securityfocus.com/bid/103297 - https://access.redhat.com/errata/RHSA-2018:0484 - https://www.debian.org/security/2018/dsa-4182
CVE ID: CVE-2018-6063 State: PUBLISHED Published: 2018-11-14T15:00:00 Last Updated: 2024-08-05T05:54:52.970Z Vendors: Google Products: Chrome Problem Types: Inappropriate implementation Description: Incorrect use of mojo::WrapSharedMemoryHandle in Mojo in Google Chrome prior to 65.0.3325.146 allowed a remote attacker who had compromised the renderer process to perform an out of bounds memory write via a crafted HTML page. Additional Analyst Notes: - CVE Program Container: References: - https://crbug.com/792900 - https://chromereleases.googleblog.com/2018/03/stable-channel-update-for-desktop.html - http://www.securityfocus.com/bid/103297 - https://access.redhat.com/errata/RHSA-2018:0484 - htt
pdate-for-desktop.html - http://www.securityfocus.com/bid/103297 - https://access.redhat.com/errata/RHSA-2018:0484 - https://www.debian.org/security/2018/dsa-4182
CVE ID: CVE-2018-6064 State: PUBLISHED Published: 2018-11-14T15:00:00 Last Updated: 2024-08-05T05:54:52.867Z Vendors: Google Products: Chrome Problem Types: Type Confusion Description: Type Confusion in the implementation of __defineGetter__ in V8 in Google Chrome prior to 65.0.3325.146 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. Additional Analyst Notes: - CVE Program Container: References: - https://chromereleases.googleblog.com/2018/03/stable-channel-update-for-desktop.html - https://www.exploit-db.com/exploits/44394/ - http://www.securityfocus.com/bid/103297 - https://access.redhat.com/errata/RHSA-2018:0484 - https://www.debian.org/security/2
//www.securityfocus.com/bid/103297 - https://access.redhat.com/errata/RHSA-2018:0484 - https://www.debian.org/security/2018/dsa-4182 - https://crbug.com/798644 - https://www.zerodayinitiative.com/advisories/ZDI-19-368/
CVE ID: CVE-2018-6065 State: PUBLISHED Published: 2018-11-14T15:00:00.000Z Last Updated: 2025-10-21T23:45:46.861Z Vendors: Google Products: Chrome Problem Types: Integer overflow Description: Integer overflow in computing the required allocation size when instantiating a new javascript object in V8 in Google Chrome prior to 65.0.3325.146 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://crbug.com/808192 - https://chromereleases.googleblog.com/2018/03/stable-channel-update-for-desktop.html - http://www.securityfocus.com/bid/103297 - https://access.redhat.co
.com/2018/03/stable-channel-update-for-desktop.html - http://www.securityfocus.com/bid/103297 - https://access.redhat.com/errata/RHSA-2018:0484 - https://www.exploit-db.com/exploits/44584/ - https://www.debian.org/security/2018/dsa-4182 - https://www.zerodayinitiative.com/advisories/ZDI-19-367/
CVE ID: CVE-2018-6066 State: PUBLISHED Published: 2018-11-14T15:00:00 Last Updated: 2024-08-05T05:54:52.632Z Vendors: Google Products: Chrome Problem Types: Insufficient policy enforcement Description: Lack of CORS checking by ResourceFetcher/ResourceLoader in Blink in Google Chrome prior to 65.0.3325.146 allowed a remote attacker to leak cross-origin data via a crafted HTML page. Additional Analyst Notes: - CVE Program Container: References: - https://crbug.com/799477 - https://chromereleases.googleblog.com/2018/03/stable-channel-update-for-desktop.html - http://www.securityfocus.com/bid/103297 - https://access.redhat.com/errata/RHSA-2018:0484 - https://www.debian.org/security/2018/dsa-4182
CVE ID: CVE-2018-6067 State: PUBLISHED Published: 2018-11-14T15:00:00 Last Updated: 2024-08-05T05:54:52.983Z Vendors: Google Products: Chrome Problem Types: Heap buffer overflow Description: Incorrect IPC serialization in Skia in Google Chrome prior to 65.0.3325.146 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. Additional Analyst Notes: - CVE Program Container: References: - https://crbug.com/779428 - https://chromereleases.googleblog.com/2018/03/stable-channel-update-for-desktop.html - http://www.securityfocus.com/bid/103297 - https://access.redhat.com/errata/RHSA-2018:0484 - https://www.debian.org/security/2018/dsa-4182
CVE ID: CVE-2018-6068 State: PUBLISHED Published: 2018-11-14T15:00:00 Last Updated: 2024-08-05T05:54:52.849Z Vendors: Google Products: Chrome Problem Types: Object lifecycle issue Description: Object lifecycle issue in Chrome Custom Tab in Google Chrome prior to 65.0.3325.146 allowed a remote attacker to spoof the contents of the Omnibox (URL bar) via a crafted HTML page. Additional Analyst Notes: - CVE Program Container: References: - https://chromereleases.googleblog.com/2018/03/stable-channel-update-for-desktop.html - http://www.securityfocus.com/bid/103297 - https://crbug.com/798933 - https://www.debian.org/security/2018/dsa-4182
CVE ID: CVE-2018-6069 State: PUBLISHED Published: 2018-11-14T15:00:00 Last Updated: 2024-08-05T05:54:53.249Z Vendors: Google Products: Chrome Problem Types: Stack buffer overflow Description: Stack buffer overflow in Skia in Google Chrome prior to 65.0.3325.146 allowed a remote attacker to perform an out of bounds memory read via a crafted HTML page. Additional Analyst Notes: - CVE Program Container: References: - https://crbug.com/799918 - https://chromereleases.googleblog.com/2018/03/stable-channel-update-for-desktop.html - http://www.securityfocus.com/bid/103297 - https://access.redhat.com/errata/RHSA-2018:0484 - https://www.debian.org/security/2018/dsa-4182
CVE ID: CVE-2018-6070 State: PUBLISHED Published: 2018-11-14T15:00:00 Last Updated: 2024-08-05T05:54:52.855Z Vendors: Google Products: Chrome Problem Types: Insufficient policy enforcement Description: Lack of CSP enforcement on WebUI pages in Bink in Google Chrome prior to 65.0.3325.146 allowed an attacker who convinced a user to install a malicious extension to bypass content security policy via a crafted Chrome Extension. Additional Analyst Notes: - CVE Program Container: References: - https://chromereleases.googleblog.com/2018/03/stable-channel-update-for-desktop.html - http://www.securityfocus.com/bid/103297 - https://access.redhat.com/errata/RHSA-2018:0484 - https://crbug.com/668645 -
http://www.securityfocus.com/bid/103297 - https://access.redhat.com/errata/RHSA-2018:0484 - https://crbug.com/668645 - https://www.debian.org/security/2018/dsa-4182
CVE ID: CVE-2018-6071 State: PUBLISHED Published: 2018-11-14T15:00:00 Last Updated: 2024-08-05T05:54:53.141Z Vendors: Google Products: Chrome Problem Types: Heap buffer overflow Description: An integer overflow in Skia in Google Chrome prior to 65.0.3325.146 allowed a remote attacker to perform an out of bounds memory read via a crafted HTML page. Additional Analyst Notes: - CVE Program Container: References: - https://crbug.com/777318 - https://chromereleases.googleblog.com/2018/03/stable-channel-update-for-desktop.html - http://www.securityfocus.com/bid/103297 - https://access.redhat.com/errata/RHSA-2018:0484 - https://www.debian.org/security/2018/dsa-4182
CVE ID: CVE-2018-6072 State: PUBLISHED Published: 2018-11-14T15:00:00 Last Updated: 2024-08-05T05:54:52.848Z Vendors: n/a Products: n/a Problem Types: n/a Description: An integer overflow leading to use after free in PDFium in Google Chrome prior to 65.0.3325.146 allowed a remote attacker to potentially exploit heap corruption via a crafted PDF file. Additional Analyst Notes: - CVE Program Container: References: - https://chromereleases.googleblog.com/2018/03/stable-channel-update-for-desktop.html - http://www.securityfocus.com/bid/103297 - https://access.redhat.com/errata/RHSA-2018:0484 - https://www.debian.org/security/2018/dsa-4182 - https://crbug.com/791048
CVE ID: CVE-2018-6073 State: PUBLISHED Published: 2018-11-14T15:00:00 Last Updated: 2024-08-05T05:54:53.028Z Vendors: Google Products: Chrome Problem Types: Heap buffer overflow Description: A heap buffer overflow in WebGL in Google Chrome prior to 65.0.3325.146 allowed a remote attacker to perform an out of bounds memory write via a crafted HTML page. Additional Analyst Notes: - CVE Program Container: References: - https://crbug.com/804118 - https://chromereleases.googleblog.com/2018/03/stable-channel-update-for-desktop.html - http://www.securityfocus.com/bid/103297 - https://access.redhat.com/errata/RHSA-2018:0484 - https://www.debian.org/security/2018/dsa-4182
CVE ID: CVE-2018-6074 State: PUBLISHED Published: 2018-11-14T15:00:00 Last Updated: 2024-08-05T05:54:52.901Z Vendors: Google Products: Chrome Problem Types: Inappropriate implementation Description: Failure to apply Mark-of-the-Web in Downloads in Google Chrome prior to 65.0.3325.146 allowed a remote attacker to bypass OS level controls via a crafted HTML page. Additional Analyst Notes: - CVE Program Container: References: - https://chromereleases.googleblog.com/2018/03/stable-channel-update-for-desktop.html - http://www.securityfocus.com/bid/103297 - https://crbug.com/809759 - https://access.redhat.com/errata/RHSA-2018:0484 - https://www.debian.org/security/2018/dsa-4182
CVE ID: CVE-2018-6075 State: PUBLISHED Published: 2018-11-14T15:00:00 Last Updated: 2024-08-05T05:54:52.894Z Vendors: Google Products: Chrome Problem Types: Inappropriate implementation Description: Incorrect handling of specified filenames in file downloads in Google Chrome prior to 65.0.3325.146 allowed a remote attacker to leak cross-origin data via a crafted HTML page and user interaction. Additional Analyst Notes: - CVE Program Container: References: - https://crbug.com/608669 - https://chromereleases.googleblog.com/2018/03/stable-channel-update-for-desktop.html - http://www.securityfocus.com/bid/103297 - https://access.redhat.com/errata/RHSA-2018:0484 - https://www.debian.org/security/
://www.securityfocus.com/bid/103297 - https://access.redhat.com/errata/RHSA-2018:0484 - https://www.debian.org/security/2018/dsa-4182
CVE ID: CVE-2018-6076 State: PUBLISHED Published: 2018-11-14T15:00:00 Last Updated: 2024-08-05T05:54:52.623Z Vendors: Google Products: Chrome Problem Types: Inappropriate implementation Description: Insufficient encoding of URL fragment identifiers in Blink in Google Chrome prior to 65.0.3325.146 allowed a remote attacker to perform a DOM based XSS attack via a crafted HTML page. Additional Analyst Notes: - CVE Program Container: References: - https://chromereleases.googleblog.com/2018/03/stable-channel-update-for-desktop.html - http://www.securityfocus.com/bid/103297 - https://crbug.com/758523 - https://access.redhat.com/errata/RHSA-2018:0484 - https://www.debian.org/security/2018/dsa-4182
CVE ID: CVE-2018-6077 State: PUBLISHED Published: 2018-11-14T15:00:00 Last Updated: 2024-08-05T05:54:52.657Z Vendors: Google Products: Chrome Problem Types: Side-channel information leakage Description: Displacement map filters being applied to cross-origin images in Blink SVG rendering in Google Chrome prior to 65.0.3325.146 allowed a remote attacker to leak cross-origin data via a crafted HTML page. Additional Analyst Notes: - CVE Program Container: References: - https://chromereleases.googleblog.com/2018/03/stable-channel-update-for-desktop.html - https://crbug.com/778506 - http://www.securityfocus.com/bid/103297 - https://access.redhat.com/errata/RHSA-2018:0484 - https://www.debian.org/s
6 - http://www.securityfocus.com/bid/103297 - https://access.redhat.com/errata/RHSA-2018:0484 - https://www.debian.org/security/2018/dsa-4182
CVE ID: CVE-2018-6078 State: PUBLISHED Published: 2018-11-14T15:00:00 Last Updated: 2024-08-05T05:54:53.000Z Vendors: Google Products: Chrome Problem Types: Insufficient policy enforcement Description: Incorrect handling of confusable characters in Omnibox in Google Chrome prior to 65.0.3325.146 allowed a remote attacker to spoof the contents of the Omnibox (URL bar) via a crafted domain name. Additional Analyst Notes: - CVE Program Container: References: - https://chromereleases.googleblog.com/2018/03/stable-channel-update-for-desktop.html - http://www.securityfocus.com/bid/103297 - https://access.redhat.com/errata/RHSA-2018:0484 - https://crbug.com/793628 - https://www.debian.org/security/
d/103297 - https://access.redhat.com/errata/RHSA-2018:0484 - https://crbug.com/793628 - https://www.debian.org/security/2018/dsa-4182
CVE ID: CVE-2018-6079 State: PUBLISHED Published: 2018-11-14T15:00:00 Last Updated: 2024-08-05T05:54:52.890Z Vendors: Google Products: Chrome Problem Types: Inappropriate implementation Description: Inappropriate sharing of TEXTURE_2D_ARRAY/TEXTURE_3D data between tabs in WebGL in Google Chrome prior to 65.0.3325.146 allowed a remote attacker to leak cross-origin data via a crafted HTML page. Additional Analyst Notes: - CVE Program Container: References: - https://crbug.com/788448 - https://chromereleases.googleblog.com/2018/03/stable-channel-update-for-desktop.html - http://www.securityfocus.com/bid/103297 - https://access.redhat.com/errata/RHSA-2018:0484 - https://www.debian.org/security/2
//www.securityfocus.com/bid/103297 - https://access.redhat.com/errata/RHSA-2018:0484 - https://www.debian.org/security/2018/dsa-4182
CVE ID: CVE-2018-6080 State: PUBLISHED Published: 2018-11-14T15:00:00 Last Updated: 2024-08-05T05:54:52.817Z Vendors: Google Products: Chrome Problem Types: Insufficient policy enforcement Description: Lack of access control checks in Instrumentation in Google Chrome prior to 65.0.3325.146 allowed a remote attacker who had compromised the renderer process to obtain memory metadata from privileged processes . Additional Analyst Notes: - CVE Program Container: References: - https://crbug.com/792028 - https://chromereleases.googleblog.com/2018/03/stable-channel-update-for-desktop.html - http://www.securityfocus.com/bid/103297 - https://access.redhat.com/errata/RHSA-2018:0484 - https://www.debia
top.html - http://www.securityfocus.com/bid/103297 - https://access.redhat.com/errata/RHSA-2018:0484 - https://www.debian.org/security/2018/dsa-4182
CVE ID: CVE-2018-6081 State: PUBLISHED Published: 2018-11-14T15:00:00 Last Updated: 2024-08-05T05:54:52.691Z Vendors: Google Products: Chrome Problem Types: Inappropriate implementation Description: XSS vulnerabilities in Interstitials in Google Chrome prior to 65.0.3325.146 allowed an attacker who convinced a user to install a malicious extension or open Developer Console to inject arbitrary scripts or HTML via a crafted HTML page. Additional Analyst Notes: - CVE Program Container: References: - https://chromereleases.googleblog.com/2018/03/stable-channel-update-for-desktop.html - http://www.securityfocus.com/bid/103297 - https://access.redhat.com/errata/RHSA-2018:0484 - https://crbug.com/7
p.html - http://www.securityfocus.com/bid/103297 - https://access.redhat.com/errata/RHSA-2018:0484 - https://crbug.com/797525 - https://www.debian.org/security/2018/dsa-4182
CVE ID: CVE-2018-6082 State: PUBLISHED Published: 2018-11-14T15:00:00 Last Updated: 2024-08-05T05:54:52.856Z Vendors: n/a Products: n/a Problem Types: n/a Description: Including port 22 in the list of allowed FTP ports in Networking in Google Chrome prior to 65.0.3325.146 allowed a remote attacker to potentially enumerate internal host services via a crafted HTML page. Additional Analyst Notes: - CVE Program Container: References: - https://chromereleases.googleblog.com/2018/03/stable-channel-update-for-desktop.html - http://www.securityfocus.com/bid/103297 - https://crbug.com/767354 - https://access.redhat.com/errata/RHSA-2018:0484 - https://www.debian.org/security/2018/dsa-4182