Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
CVE ID: CVE-2018-6144 State: PUBLISHED Published: 2019-01-09T19:00:00 Last Updated: 2024-08-05T05:54:53.157Z Vendors: Google Products: Chrome Problem Types: Out of bounds write Description: Off-by-one error in PDFium in Google Chrome prior to 67.0.3396.62 allowed a remote attacker to perform an out of bounds memory write via a crafted PDF file. Additional Analyst Notes: - CVE Program Container: References: - https://crbug.com/828049 - http://www.securityfocus.com/bid/104309 - https://chromereleases.googleblog.com/2018/05/stable-channel-update-for-desktop_58.html - http://www.securitytracker.com/id/1041014 - https://access.redhat.com/errata/RHSA-2018:1815 - https://www.debian.org/security/201
w.securitytracker.com/id/1041014 - https://access.redhat.com/errata/RHSA-2018:1815 - https://www.debian.org/security/2018/dsa-4237
CVE ID: CVE-2018-6145 State: PUBLISHED Published: 2019-06-27T16:13:42 Last Updated: 2024-08-05T05:54:53.136Z Vendors: Google Products: Chrome Problem Types: Insufficient validation of untrusted input Description: Insufficient data validation in HTML parser in Google Chrome prior to 67.0.3396.62 allowed a remote attacker to bypass same origin policy via a crafted HTML page. Additional Analyst Notes: - CVE Program Container: References: - https://chromereleases.googleblog.com/2018/05/stable-channel-update-for-desktop_58.html - https://crbug.com/805924
CVE ID: CVE-2018-6147 State: PUBLISHED Published: 2019-01-09T19:00:00 Last Updated: 2024-08-05T05:54:53.236Z Vendors: Google Products: Chrome Problem Types: Insufficient policy enforcement Description: Lack of secure text entry mode in Browser UI in Google Chrome on Mac prior to 67.0.3396.62 allowed a local attacker to obtain potentially sensitive information from process memory via a local process. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/104309 - https://chromereleases.googleblog.com/2018/05/stable-channel-update-for-desktop_58.html - http://www.securitytracker.com/id/1041014 - https://access.redhat.com/errata/RHSA-2018:1815 - https:
r-desktop_58.html - http://www.securitytracker.com/id/1041014 - https://access.redhat.com/errata/RHSA-2018:1815 - https://crbug.com/818133 - https://www.debian.org/security/2018/dsa-4237
CVE ID: CVE-2018-6148 State: PUBLISHED Published: 2019-06-27T16:13:42 Last Updated: 2024-08-05T05:54:53.159Z Vendors: Google Products: Chrome Problem Types: Inappropriate implementation Description: Incorrect implementation in Content Security Policy in Google Chrome prior to 67.0.3396.79 allowed a remote attacker to bypass navigation restrictions via a crafted HTML page. Additional Analyst Notes: - CVE Program Container: References: - https://crbug.com/845961 - https://chromereleases.googleblog.com/2018/06/stable-channel-update-for-desktop.html
CVE ID: CVE-2018-6149 State: PUBLISHED Published: 2019-06-27T16:13:42 Last Updated: 2024-08-05T05:54:53.186Z Vendors: Google Products: Chrome Problem Types: Type Confusion Description: Type confusion in JavaScript in Google Chrome prior to 67.0.3396.87 allowed a remote attacker to perform an out of bounds memory write via a crafted HTML page. Additional Analyst Notes: - CVE Program Container: References: - https://crbug.com/848672 - https://chromereleases.googleblog.com/2018/06/stable-channel-update-for-desktop_12.html
CVE ID: CVE-2018-6150 State: PUBLISHED Published: 2019-06-27T16:13:42 Last Updated: 2024-08-05T05:54:53.171Z Vendors: Google Products: Chrome Problem Types: Inappropriate implementation Description: Incorrect handling of CORS in ServiceWorker in Google Chrome prior to 66.0.3359.117 allowed a remote attacker to leak cross-origin data via a crafted HTML page. Additional Analyst Notes: - CVE Program Container: References: - https://crbug.com/812667 - https://chromereleases.googleblog.com/2018/04/stable-channel-update-for-desktop.html
CVE ID: CVE-2018-6151 State: PUBLISHED Published: 2019-01-09T19:00:00 Last Updated: 2024-08-05T05:54:53.189Z Vendors: Google Products: Chrome Problem Types: Bad cast Description: Bad cast in DevTools in Google Chrome on Win, Linux, Mac, Chrome OS prior to 66.0.3359.117 allowed an attacker who convinced a user to install a malicious extension to perform an out of bounds memory read via a crafted Chrome Extension. Additional Analyst Notes: - CVE Program Container: References: - https://chromereleases.googleblog.com/2018/04/stable-channel-update-for-desktop.html - https://access.redhat.com/errata/RHSA-2018:2282 - https://security.gentoo.org/glsa/201808-01 - https://www.debian.org/security/2018/
ss.redhat.com/errata/RHSA-2018:2282 - https://security.gentoo.org/glsa/201808-01 - https://www.debian.org/security/2018/dsa-4256 - https://crbug.com/805905 - http://www.securityfocus.com/bid/104887
CVE ID: CVE-2018-6152 State: PUBLISHED Published: 2018-12-04T17:00:00 Last Updated: 2024-08-05T05:54:53.279Z Vendors: Google Products: Chrome Problem Types: Insufficient policy enforcement Description: The implementation of the Page.downloadBehavior backend unconditionally marked downloaded files as safe, regardless of file type in Google Chrome prior to 66.0.3359.117 allowed an attacker who convinced a user to install a malicious extension to potentially perform a sandbox escape via a crafted HTML page and user interaction. Additional Analyst Notes: - CVE Program Container: References: - https://chromereleases.googleblog.com/2018/04/stable-channel-update-for-desktop.html - https://crbug.com
: References: - https://chromereleases.googleblog.com/2018/04/stable-channel-update-for-desktop.html - https://crbug.com/805445 - https://access.redhat.com/errata/RHSA-2018:2282 - https://security.gentoo.org/glsa/201808-01 - https://www.debian.org/security/2018/dsa-4256 - http://www.securityfocus.com/bid/104887
CVE ID: CVE-2018-6153 State: PUBLISHED Published: 2019-01-09T19:00:00 Last Updated: 2024-08-05T05:54:53.153Z Vendors: Google Products: Chrome Problem Types: Stack buffer overflow Description: A precision error in Skia in Google Chrome prior to 68.0.3440.75 allowed a remote attacker who had compromised the renderer process to perform an out of bounds memory write via a crafted HTML page. Additional Analyst Notes: - CVE Program Container: References: - https://chromereleases.googleblog.com/2018/07/stable-channel-update-for-desktop.html - https://access.redhat.com/errata/RHSA-2018:2282 - https://crbug.com/850350 - https://security.gentoo.org/glsa/201808-01 - https://www.debian.org/security/2018
2018:2282 - https://crbug.com/850350 - https://security.gentoo.org/glsa/201808-01 - https://www.debian.org/security/2018/dsa-4256 - http://www.securityfocus.com/bid/104887
CVE ID: CVE-2018-6154 State: PUBLISHED Published: 2019-06-27T16:13:42 Last Updated: 2024-08-05T05:54:53.199Z Vendors: Google Products: Chrome Problem Types: Insufficient data validation Description: Insufficient data validation in WebGL in Google Chrome prior to 68.0.3440.75 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. Additional Analyst Notes: - CVE Program Container: References: - https://chromereleases.googleblog.com/2018/07/stable-channel-update-for-desktop.html - https://crbug.com/848914
CVE ID: CVE-2018-6155 State: PUBLISHED Published: 2019-06-27T16:13:42 Last Updated: 2024-08-05T05:54:53.178Z Vendors: Google Products: Chrome Problem Types: Use after free Description: Incorrect handling of frames in the VP8 parser in Google Chrome prior to 68.0.3440.75 allowed a remote attacker to potentially exploit heap corruption via a crafted video file. Additional Analyst Notes: - CVE Program Container: References: - https://chromereleases.googleblog.com/2018/07/stable-channel-update-for-desktop.html - https://crbug.com/842265
CVE ID: CVE-2018-6156 State: PUBLISHED Published: 2019-06-27T16:13:42 Last Updated: 2024-08-05T05:54:53.175Z Vendors: Google Products: Chrome Problem Types: Heap buffer overflow Description: Incorect derivation of a packet length in WebRTC in Google Chrome prior to 68.0.3440.75 allowed a remote attacker to potentially exploit heap corruption via a crafted video file. Additional Analyst Notes: - CVE Program Container: References: - https://chromereleases.googleblog.com/2018/07/stable-channel-update-for-desktop.html - https://crbug.com/841962 - https://usn.ubuntu.com/4165-1/
CVE ID: CVE-2018-6157 State: PUBLISHED Published: 2019-06-27T16:13:42 Last Updated: 2024-08-05T05:54:53.150Z Vendors: Google Products: Chrome Problem Types: Type Confusion Description: Type confusion in WebRTC in Google Chrome prior to 68.0.3440.75 allowed a remote attacker to potentially exploit heap corruption via a crafted video file. Additional Analyst Notes: - CVE Program Container: References: - https://chromereleases.googleblog.com/2018/07/stable-channel-update-for-desktop.html - https://crbug.com/840536
CVE ID: CVE-2018-6158 State: PUBLISHED Published: 2019-01-09T19:00:00 Last Updated: 2024-08-05T05:54:53.163Z Vendors: Google Products: Chrome Problem Types: Race Description: A race condition in Oilpan in Google Chrome prior to 68.0.3440.75 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. Additional Analyst Notes: - CVE Program Container: References: - https://chromereleases.googleblog.com/2018/07/stable-channel-update-for-desktop.html - https://access.redhat.com/errata/RHSA-2018:2282 - https://security.gentoo.org/glsa/201808-01 - https://www.debian.org/security/2018/dsa-4256 - https://crbug.com/841280 - http://www.securityfocus.com/bid/104887
CVE ID: CVE-2018-6159 State: PUBLISHED Published: 2019-06-27T16:13:42 Last Updated: 2024-08-05T05:54:53.354Z Vendors: Google Products: Chrome Problem Types: Insufficient policy enforcement Description: Insufficient policy enforcement in ServiceWorker in Google Chrome prior to 68.0.3440.75 allowed a remote attacker to obtain potentially sensitive information from process memory via a crafted HTML page. Additional Analyst Notes: - CVE Program Container: References: - https://chromereleases.googleblog.com/2018/07/stable-channel-update-for-desktop.html - https://crbug.com/837275
CVE ID: CVE-2018-6160 State: PUBLISHED Published: 2019-01-09T19:00:00 Last Updated: 2024-08-05T05:54:53.221Z Vendors: Google Products: Chrome Problem Types: Inappropriate implementation Description: JavaScript alert handling in Prompts in Google Chrome prior to 68.0.3440.75 allowed a remote attacker to spoof the contents of the Omnibox (URL bar) via a crafted HTML page. Additional Analyst Notes: - CVE Program Container: References: - https://chromereleases.googleblog.com/2018/07/stable-channel-update-for-desktop.html - https://security.gentoo.org/glsa/201808-01 - http://www.securityfocus.com/bid/104887 - https://crbug.com/839822
CVE ID: CVE-2018-6161 State: PUBLISHED Published: 2019-06-27T16:13:42 Last Updated: 2024-08-05T05:54:53.189Z Vendors: Google Products: Chrome Problem Types: Insufficient policy enforcement Description: Insufficient policy enforcement in Blink in Google Chrome prior to 68.0.3440.75 allowed a remote attacker to bypass same origin policy via a crafted HTML page. Additional Analyst Notes: - CVE Program Container: References: - https://chromereleases.googleblog.com/2018/07/stable-channel-update-for-desktop.html - https://crbug.com/826552
CVE ID: CVE-2018-6162 State: PUBLISHED Published: 2019-01-09T19:00:00 Last Updated: 2024-08-05T05:54:53.183Z Vendors: Google Products: Chrome Problem Types: Heap buffer overflow Description: Improper deserialization in WebGL in Google Chrome on Mac prior to 68.0.3440.75 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. Additional Analyst Notes: - CVE Program Container: References: - https://chromereleases.googleblog.com/2018/07/stable-channel-update-for-desktop.html - https://access.redhat.com/errata/RHSA-2018:2282 - https://crbug.com/804123 - https://security.gentoo.org/glsa/201808-01 - https://www.debian.org/security/2018/dsa-4256 - http://www.securi
/804123 - https://security.gentoo.org/glsa/201808-01 - https://www.debian.org/security/2018/dsa-4256 - http://www.securityfocus.com/bid/104887
CVE ID: CVE-2018-6163 State: PUBLISHED Published: 2019-01-09T19:00:00 Last Updated: 2024-08-05T05:54:53.158Z Vendors: Google Products: Chrome Problem Types: Insufficient policy enforcement Description: Incorrect handling of confusable characters in URL Formatter in Google Chrome prior to 68.0.3440.75 allowed a remote attacker to perform domain spoofing via IDN homographs via a crafted domain name. Additional Analyst Notes: - CVE Program Container: References: - https://chromereleases.googleblog.com/2018/07/stable-channel-update-for-desktop.html - https://access.redhat.com/errata/RHSA-2018:2282 - https://security.gentoo.org/glsa/201808-01 - https://www.debian.org/security/2018/dsa-4256 - http
rrata/RHSA-2018:2282 - https://security.gentoo.org/glsa/201808-01 - https://www.debian.org/security/2018/dsa-4256 - https://crbug.com/849398 - http://www.securityfocus.com/bid/104887
CVE ID: CVE-2018-6164 State: PUBLISHED Published: 2019-01-09T19:00:00 Last Updated: 2024-08-05T05:54:53.089Z Vendors: Google Products: Chrome Problem Types: Inappropriate implementation Description: Insufficient origin checks for CSS content in Blink in Google Chrome prior to 68.0.3440.75 allowed a remote attacker to leak cross-origin data via a crafted HTML page. Additional Analyst Notes: - CVE Program Container: References: - https://chromereleases.googleblog.com/2018/07/stable-channel-update-for-desktop.html - https://access.redhat.com/errata/RHSA-2018:2282 - https://security.gentoo.org/glsa/201808-01 - https://www.debian.org/security/2018/dsa-4256 - https://crbug.com/848786 - http://www.
urity.gentoo.org/glsa/201808-01 - https://www.debian.org/security/2018/dsa-4256 - https://crbug.com/848786 - http://www.securityfocus.com/bid/104887
CVE ID: CVE-2018-6165 State: PUBLISHED Published: 2019-01-09T19:00:00 Last Updated: 2024-08-05T05:54:53.144Z Vendors: Google Products: Chrome Problem Types: Inappropriate implementation Description: Incorrect handling of reloads in Navigation in Google Chrome prior to 68.0.3440.75 allowed a remote attacker to spoof the contents of the Omnibox (URL bar) via a crafted HTML page. Additional Analyst Notes: - CVE Program Container: References: - https://chromereleases.googleblog.com/2018/07/stable-channel-update-for-desktop.html - https://crbug.com/847718 - https://access.redhat.com/errata/RHSA-2018:2282 - https://security.gentoo.org/glsa/201808-01 - https://www.debian.org/security/2018/dsa-4256
.com/errata/RHSA-2018:2282 - https://security.gentoo.org/glsa/201808-01 - https://www.debian.org/security/2018/dsa-4256 - http://www.securityfocus.com/bid/104887
CVE ID: CVE-2018-6166 State: PUBLISHED Published: 2019-01-09T19:00:00 Last Updated: 2024-08-05T05:54:53.043Z Vendors: Google Products: Chrome Problem Types: Insufficient policy enforcement Description: Incorrect handling of confusable characters in URL Formatter in Google Chrome prior to 68.0.3440.75 allowed a remote attacker to perform domain spoofing via IDN homographs via a crafted domain name. Additional Analyst Notes: - CVE Program Container: References: - https://chromereleases.googleblog.com/2018/07/stable-channel-update-for-desktop.html - https://access.redhat.com/errata/RHSA-2018:2282 - https://security.gentoo.org/glsa/201808-01 - https://www.debian.org/security/2018/dsa-4256 - http
rrata/RHSA-2018:2282 - https://security.gentoo.org/glsa/201808-01 - https://www.debian.org/security/2018/dsa-4256 - https://crbug.com/835554 - http://www.securityfocus.com/bid/104887
CVE ID: CVE-2018-6167 State: PUBLISHED Published: 2019-01-09T19:00:00 Last Updated: 2024-08-05T05:54:53.167Z Vendors: Google Products: Chrome Problem Types: Insufficient policy enforcement Description: Incorrect handling of confusable characters in URL Formatter in Google Chrome prior to 68.0.3440.75 allowed a remote attacker to perform domain spoofing via IDN homographs via a crafted domain name. Additional Analyst Notes: - CVE Program Container: References: - https://chromereleases.googleblog.com/2018/07/stable-channel-update-for-desktop.html - https://access.redhat.com/errata/RHSA-2018:2282 - https://security.gentoo.org/glsa/201808-01 - https://crbug.com/833143 - https://www.debian.org/se
rrata/RHSA-2018:2282 - https://security.gentoo.org/glsa/201808-01 - https://crbug.com/833143 - https://www.debian.org/security/2018/dsa-4256 - http://www.securityfocus.com/bid/104887
CVE ID: CVE-2018-6168 State: PUBLISHED Published: 2019-06-27T16:13:43 Last Updated: 2024-08-05T05:54:53.161Z Vendors: Google Products: Chrome Problem Types: Insufficient policy enforcement Description: Information leak in media engine in Google Chrome prior to 68.0.3440.75 allowed a remote attacker to obtain potentially sensitive information from process memory via a crafted HTML page. Additional Analyst Notes: - CVE Program Container: References: - https://chromereleases.googleblog.com/2018/07/stable-channel-update-for-desktop.html - https://crbug.com/828265
CVE ID: CVE-2018-6169 State: PUBLISHED Published: 2019-01-09T19:00:00 Last Updated: 2024-08-05T05:54:53.196Z Vendors: Google Products: Chrome Problem Types: Incorrect security UI Description: Lack of timeout on extension install prompt in Extensions in Google Chrome prior to 68.0.3440.75 allowed a remote attacker to trigger installation of an unwanted extension via a crafted HTML page. Additional Analyst Notes: - CVE Program Container: References: - https://chromereleases.googleblog.com/2018/07/stable-channel-update-for-desktop.html - https://access.redhat.com/errata/RHSA-2018:2282 - https://security.gentoo.org/glsa/201808-01 - https://www.debian.org/security/2018/dsa-4256 - https://crbug.co
018:2282 - https://security.gentoo.org/glsa/201808-01 - https://www.debian.org/security/2018/dsa-4256 - https://crbug.com/394518 - http://www.securityfocus.com/bid/104887
CVE ID: CVE-2018-6170 State: PUBLISHED Published: 2019-01-09T19:00:00 Last Updated: 2024-08-05T05:54:53.152Z Vendors: Google Products: Chrome Problem Types: Type Confusion Description: A bad cast in PDFium in Google Chrome prior to 68.0.3440.75 allowed a remote attacker to potentially exploit heap corruption via a crafted PDF file. Additional Analyst Notes: - CVE Program Container: References: - https://chromereleases.googleblog.com/2018/07/stable-channel-update-for-desktop.html - https://access.redhat.com/errata/RHSA-2018:2282 - https://security.gentoo.org/glsa/201808-01 - https://www.debian.org/security/2018/dsa-4256 - https://crbug.com/862059 - http://www.securityfocus.com/bid/104887
CVE ID: CVE-2018-6171 State: PUBLISHED Published: 2019-06-27T16:13:43 Last Updated: 2024-08-05T05:54:53.181Z Vendors: Google Products: Chrome Problem Types: Use after free Description: Use after free in Bluetooth in Google Chrome prior to 68.0.3440.75 allowed an attacker who convinced a user to install a malicious extension to obtain potentially sensitive information from process memory via a crafted Chrome Extension. Additional Analyst Notes: - CVE Program Container: References: - https://chromereleases.googleblog.com/2018/07/stable-channel-update-for-desktop.html - https://crbug.com/851799
CVE ID: CVE-2018-6172 State: PUBLISHED Published: 2019-01-09T19:00:00 Last Updated: 2024-08-05T05:54:53.270Z Vendors: Google Products: Chrome Problem Types: Insufficient policy enforcement Description: Incorrect handling of confusable characters in URL Formatter in Google Chrome prior to 68.0.3440.75 allowed a remote attacker to perform domain spoofing via IDN homographs via a crafted domain name. Additional Analyst Notes: - CVE Program Container: References: - https://chromereleases.googleblog.com/2018/07/stable-channel-update-for-desktop.html - https://access.redhat.com/errata/RHSA-2018:2282 - https://security.gentoo.org/glsa/201808-01 - https://crbug.com/847242 - https://www.debian.org/se
rrata/RHSA-2018:2282 - https://security.gentoo.org/glsa/201808-01 - https://crbug.com/847242 - https://www.debian.org/security/2018/dsa-4256 - http://www.securityfocus.com/bid/104887
CVE ID: CVE-2018-6173 State: PUBLISHED Published: 2019-01-09T19:00:00 Last Updated: 2024-08-05T05:54:53.221Z Vendors: Google Products: Chrome Problem Types: Insufficient policy enforcement Description: Incorrect handling of confusable characters in URL Formatter in Google Chrome prior to 68.0.3440.75 allowed a remote attacker to perform domain spoofing via IDN homographs via a crafted domain name. Additional Analyst Notes: - CVE Program Container: References: - https://chromereleases.googleblog.com/2018/07/stable-channel-update-for-desktop.html - https://access.redhat.com/errata/RHSA-2018:2282 - https://crbug.com/836885 - https://security.gentoo.org/glsa/201808-01 - https://www.debian.org/se
rrata/RHSA-2018:2282 - https://crbug.com/836885 - https://security.gentoo.org/glsa/201808-01 - https://www.debian.org/security/2018/dsa-4256 - http://www.securityfocus.com/bid/104887
CVE ID: CVE-2018-6174 State: PUBLISHED Published: 2019-01-09T19:00:00 Last Updated: 2024-08-05T05:54:53.172Z Vendors: Google Products: Chrome Problem Types: Integer overflow Description: Integer overflows in Swiftshader in Google Chrome prior to 68.0.3440.75 potentially allowed a remote attacker to execute arbitrary code via a crafted HTML page. Additional Analyst Notes: - CVE Program Container: References: - https://chromereleases.googleblog.com/2018/07/stable-channel-update-for-desktop.html - https://crbug.com/835299 - https://access.redhat.com/errata/RHSA-2018:2282 - https://security.gentoo.org/glsa/201808-01 - https://www.debian.org/security/2018/dsa-4256 - http://www.securityfocus.com/b
ps://security.gentoo.org/glsa/201808-01 - https://www.debian.org/security/2018/dsa-4256 - http://www.securityfocus.com/bid/104887
CVE ID: CVE-2018-6175 State: PUBLISHED Published: 2019-01-09T19:00:00 Last Updated: 2024-08-05T05:54:53.170Z Vendors: Google Products: Chrome Problem Types: Insufficient policy enforcement Description: Incorrect handling of confusable characters in URL Formatter in Google Chrome prior to 68.0.3440.75 allowed a remote attacker to perform domain spoofing via IDN homographs via a crafted domain name. Additional Analyst Notes: - CVE Program Container: References: - https://chromereleases.googleblog.com/2018/07/stable-channel-update-for-desktop.html - https://crbug.com/826019 - https://access.redhat.com/errata/RHSA-2018:2282 - https://security.gentoo.org/glsa/201808-01 - https://www.debian.org/se
https://access.redhat.com/errata/RHSA-2018:2282 - https://security.gentoo.org/glsa/201808-01 - https://www.debian.org/security/2018/dsa-4256 - http://www.securityfocus.com/bid/104887
CVE ID: CVE-2018-6176 State: PUBLISHED Published: 2019-06-27T16:13:43 Last Updated: 2024-08-05T05:54:53.298Z Vendors: Google Products: Chrome Problem Types: Insufficient policy enforcement Description: Insufficient file type enforcement in Extensions API in Google Chrome prior to 68.0.3440.75 allowed a remote attacker who had compromised the renderer process to perform privilege escalation via a crafted Chrome Extension. Additional Analyst Notes: - CVE Program Container: References: - https://chromereleases.googleblog.com/2018/07/stable-channel-update-for-desktop.html - https://crbug.com/666824
CVE ID: CVE-2018-6177 State: PUBLISHED Published: 2019-06-27T16:13:43 Last Updated: 2024-08-05T05:54:53.193Z Vendors: Google Products: Chrome Problem Types: Insufficient policy enforcement Description: Information leak in media engine in Google Chrome prior to 68.0.3440.75 allowed a remote attacker to leak cross-origin data via a crafted HTML page. Additional Analyst Notes: - CVE Program Container: References: - https://chromereleases.googleblog.com/2018/07/stable-channel-update-for-desktop.html - https://crbug.com/826187