Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
CVE ID: CVE-2018-6111 State: PUBLISHED Published: 2019-01-09T19:00:00 Last Updated: 2024-08-05T05:54:52.915Z Vendors: Google Products: Chrome Problem Types: Use after free Description: An object lifetime issue in the developer tools network handler in Google Chrome prior to 66.0.3359.117 allowed a local attacker to execute arbitrary code via a crafted HTML page. Additional Analyst Notes: - CVE Program Container: References: - https://chromereleases.googleblog.com/2018/04/stable-channel-update-for-desktop.html - https://security.gentoo.org/glsa/201804-22 - https://crbug.com/780694 - https://www.debian.org/security/2018/dsa-4182 - http://www.securityfocus.com/bid/103917 - https://access.redhat
780694 - https://www.debian.org/security/2018/dsa-4182 - http://www.securityfocus.com/bid/103917 - https://access.redhat.com/errata/RHSA-2018:1195
CVE ID: CVE-2018-6112 State: PUBLISHED Published: 2019-01-09T19:00:00 Last Updated: 2024-08-05T05:54:52.953Z Vendors: Google Products: Chrome Problem Types: Unsafe navigation Description: Making URLs clickable and allowing them to be styled in DevTools in Google Chrome prior to 66.0.3359.117 allowed a remote attacker to bypass navigation restrictions via a crafted HTML page. Additional Analyst Notes: - CVE Program Container: References: - https://chromereleases.googleblog.com/2018/04/stable-channel-update-for-desktop.html - https://security.gentoo.org/glsa/201804-22 - https://crbug.com/798096 - https://www.debian.org/security/2018/dsa-4182 - http://www.securityfocus.com/bid/103917 - https://
://crbug.com/798096 - https://www.debian.org/security/2018/dsa-4182 - http://www.securityfocus.com/bid/103917 - https://access.redhat.com/errata/RHSA-2018:1195
CVE ID: CVE-2018-6113 State: PUBLISHED Published: 2019-01-09T19:00:00 Last Updated: 2024-08-05T05:54:52.893Z Vendors: Google Products: Chrome Problem Types: Inappropriate implementation Description: Improper handling of pending navigation entries in Navigation in Google Chrome on iOS prior to 66.0.3359.117 allowed a remote attacker to perform domain spoofing via a crafted HTML page. Additional Analyst Notes: - CVE Program Container: References: - https://chromereleases.googleblog.com/2018/04/stable-channel-update-for-desktop.html - https://crbug.com/805900 - https://security.gentoo.org/glsa/201804-22 - https://www.debian.org/security/2018/dsa-4182 - http://www.securityfocus.com/bid/103917 -
y.gentoo.org/glsa/201804-22 - https://www.debian.org/security/2018/dsa-4182 - http://www.securityfocus.com/bid/103917 - https://access.redhat.com/errata/RHSA-2018:1195
CVE ID: CVE-2018-6114 State: PUBLISHED Published: 2019-01-09T19:00:00 Last Updated: 2024-08-05T05:54:52.862Z Vendors: Google Products: Chrome Problem Types: Insufficient policy enforcement Description: Incorrect enforcement of CSP for <object> tags in Blink in Google Chrome prior to 66.0.3359.117 allowed a remote attacker to bypass content security policy via a crafted HTML page. Additional Analyst Notes: - CVE Program Container: References: - https://chromereleases.googleblog.com/2018/04/stable-channel-update-for-desktop.html - https://security.gentoo.org/glsa/201804-22 - https://crbug.com/811691 - https://www.debian.org/security/2018/dsa-4182 - http://www.securityfocus.com/bid/103917 - htt
https://crbug.com/811691 - https://www.debian.org/security/2018/dsa-4182 - http://www.securityfocus.com/bid/103917 - https://access.redhat.com/errata/RHSA-2018:1195
CVE ID: CVE-2018-6115 State: PUBLISHED Published: 2018-12-04T17:00:00 Last Updated: 2024-08-05T05:54:52.867Z Vendors: Google Products: Chrome Problem Types: Inappropriate implementation Description: Inappropriate setting of the SEE_MASK_FLAG_NO_UI flag in file downloads in Google Chrome prior to 66.0.3359.117 allowed a remote attacker to potentially bypass OS malware checks via a crafted HTML page. Additional Analyst Notes: - CVE Program Container: References: - https://chromereleases.googleblog.com/2018/04/stable-channel-update-for-desktop.html - https://security.gentoo.org/glsa/201804-22 - https://crbug.com/819809 - http://www.securityfocus.com/bid/103917
CVE ID: CVE-2018-6116 State: PUBLISHED Published: 2018-12-04T17:00:00 Last Updated: 2024-08-05T05:54:52.962Z Vendors: Google Products: Chrome Problem Types: Out of bounds memory access Description: A nullptr dereference in WebAssembly in Google Chrome prior to 66.0.3359.117 allowed a remote attacker to potentially perform out of bounds memory access via a crafted HTML page. Additional Analyst Notes: - CVE Program Container: References: - https://chromereleases.googleblog.com/2018/04/stable-channel-update-for-desktop.html - https://security.gentoo.org/glsa/201804-22 - https://crbug.com/822266 - https://www.debian.org/security/2018/dsa-4182 - http://www.securityfocus.com/bid/103917 - https://a
//crbug.com/822266 - https://www.debian.org/security/2018/dsa-4182 - http://www.securityfocus.com/bid/103917 - https://access.redhat.com/errata/RHSA-2018:1195
CVE ID: CVE-2018-6117 State: PUBLISHED Published: 2019-01-09T19:00:00 Last Updated: 2024-08-05T05:54:53.040Z Vendors: Google Products: Chrome Problem Types: Incorrect security UI Description: Confusing settings in Autofill in Google Chrome prior to 66.0.3359.117 allowed a remote attacker to obtain potentially sensitive information from process memory via a crafted HTML page. Additional Analyst Notes: - CVE Program Container: References: - https://chromereleases.googleblog.com/2018/04/stable-channel-update-for-desktop.html - https://security.gentoo.org/glsa/201804-22 - https://crbug.com/822465 - https://www.debian.org/security/2018/dsa-4182 - http://www.securityfocus.com/bid/103917 - https://
://crbug.com/822465 - https://www.debian.org/security/2018/dsa-4182 - http://www.securityfocus.com/bid/103917 - https://access.redhat.com/errata/RHSA-2018:1195
CVE ID: CVE-2018-6118 State: PUBLISHED Published: 2019-06-27T16:13:42 Last Updated: 2024-08-05T05:54:52.923Z Vendors: Google Products: Chrome Problem Types: Use after free Description: A double-eviction in the Incognito mode cache that lead to a user-after-free in cache in Google Chrome prior to 66.0.3359.139 allowed a remote attacker who had compromised the renderer process to execute arbitrary code via a crafted HTML page. Additional Analyst Notes: - CVE Program Container: References: - https://crbug.com/831963 - https://chromereleases.googleblog.com/2018/04/stable-channel-update-for-desktop_26.html
CVE ID: CVE-2018-6119 State: PUBLISHED Published: 2018-09-25T14:00:00 Last Updated: 2024-08-05T05:54:52.840Z Vendors: Google Products: Chrome Problem Types: Incorrect security UI Description: Incorrect security UI in Omnibox in Google Chrome prior to 64.0.3282.119 allowed a remote attacker to spoof the contents of the Omnibox (URL bar) via a crafted HTML page. Additional Analyst Notes: - CVE Program Container: References: - https://chromereleases.googleblog.com/2018/01/stable-channel-update-for-desktop_24.html - https://crbug.com/784761 - http://www.securityfocus.com/bid/105512
CVE ID: CVE-2018-6120 State: PUBLISHED Published: 2019-01-09T19:00:00 Last Updated: 2024-08-05T05:54:52.930Z Vendors: Google Products: Chrome Problem Types: Integer overflow Description: An integer overflow that could lead to an attacker-controlled heap out-of-bounds write in PDFium in Google Chrome prior to 66.0.3359.170 allowed a remote attacker to execute arbitrary code inside a sandbox via a crafted PDF file. Additional Analyst Notes: - CVE Program Container: References: - https://crbug.com/833721 - https://access.redhat.com/errata/RHSA-2018:1446 - https://security.gentoo.org/glsa/201805-06 - https://chromereleases.googleblog.com/2018/05/stable-channel-update-for-desktop.html - http://ww
oo.org/glsa/201805-06 - https://chromereleases.googleblog.com/2018/05/stable-channel-update-for-desktop.html - http://www.securityfocus.com/bid/104143 - https://www.debian.org/security/2018/dsa-4237
CVE ID: CVE-2018-6121 State: PUBLISHED Published: 2019-06-27T16:13:42 Last Updated: 2024-08-05T05:54:53.139Z Vendors: Google Products: Chrome Problem Types: Insufficient validation of untrusted input Description: Insufficient validation of input in Blink in Google Chrome prior to 66.0.3359.170 allowed a remote attacker to perform privilege escalation via a crafted HTML page. Additional Analyst Notes: - CVE Program Container: References: - https://crbug.com/836858 - https://chromereleases.googleblog.com/2018/05/stable-channel-update-for-desktop.html
CVE ID: CVE-2018-6122 State: PUBLISHED Published: 2021-11-02T22:35:12 Last Updated: 2024-08-05T05:54:53.031Z Vendors: Google Products: Chrome Problem Types: Type Confusion Description: Type confusion in WebAssembly in Google Chrome prior to 66.0.3359.139 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. Additional Analyst Notes: - CVE Program Container: References: - https://crbug.com/836141
CVE ID: CVE-2018-6123 State: PUBLISHED Published: 2019-01-09T19:00:00 Last Updated: 2024-08-05T05:54:53.160Z Vendors: Google Products: Chrome Problem Types: Use after free Description: A use after free in Blink in Google Chrome prior to 67.0.3396.62 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/104309 - https://chromereleases.googleblog.com/2018/05/stable-channel-update-for-desktop_58.html - http://www.securitytracker.com/id/1041014 - https://access.redhat.com/errata/RHSA-2018:1815 - https://crbug.com/835639 - https://www.debian.org/security/2018/dsa-4
https://access.redhat.com/errata/RHSA-2018:1815 - https://crbug.com/835639 - https://www.debian.org/security/2018/dsa-4237
CVE ID: CVE-2018-6124 State: PUBLISHED Published: 2019-01-09T19:00:00 Last Updated: 2024-08-05T05:54:52.999Z Vendors: Google Products: Chrome Problem Types: Type Confusion Description: Type confusion in ReadableStreams in Blink in Google Chrome prior to 67.0.3396.62 allowed a remote attacker to potentially exploit object corruption via a crafted HTML page. Additional Analyst Notes: - CVE Program Container: References: - https://crbug.com/840320 - http://www.securityfocus.com/bid/104309 - https://chromereleases.googleblog.com/2018/05/stable-channel-update-for-desktop_58.html - http://www.securitytracker.com/id/1041014 - https://access.redhat.com/errata/RHSA-2018:1815 - https://www.debian.org/
- http://www.securitytracker.com/id/1041014 - https://access.redhat.com/errata/RHSA-2018:1815 - https://www.debian.org/security/2018/dsa-4237
CVE ID: CVE-2018-6125 State: PUBLISHED Published: 2021-11-02T22:35:13 Last Updated: 2024-08-05T05:54:52.964Z Vendors: Google Products: Chrome Problem Types: Insufficient policy enforcement Description: Insufficient policy enforcement in USB in Google Chrome on Windows prior to 67.0.3396.62 allowed a remote attacker to obtain potentially sensitive information via a crafted HTML page. Additional Analyst Notes: - CVE Program Container: References: - https://crbug.com/818592
CVE ID: CVE-2018-6126 State: PUBLISHED Published: 2019-01-09T19:00:00 Last Updated: 2024-08-05T05:54:53.166Z Vendors: Google Products: Chrome Problem Types: Heap buffer overflow Description: A precision error in Skia in Google Chrome prior to 67.0.3396.62 allowed a remote attacker to perform an out of bounds memory write via a crafted HTML page. Additional Analyst Notes: - CVE Program Container: References: - https://security.gentoo.org/glsa/201810-01 - http://www.securityfocus.com/bid/104411 - http://www.securityfocus.com/bid/104309 - https://chromereleases.googleblog.com/2018/05/stable-channel-update-for-desktop_58.html - https://access.redhat.com/errata/RHSA-2018:2112 - http://www.securit
2018/05/stable-channel-update-for-desktop_58.html - https://access.redhat.com/errata/RHSA-2018:2112 - http://www.securitytracker.com/id/1041014 - https://access.redhat.com/errata/RHSA-2018:1815 - https://access.redhat.com/errata/RHSA-2018:2113 - http://www.securitytracker.com/id/1041046 - https://www.debian.org/security/2018/dsa-4220 - https://www.exploit-db.com/exploits/45098/ - https://crbug.com/844457 - https://www.debian.org/security/2018/dsa-4237
CVE ID: CVE-2018-6127 State: PUBLISHED Published: 2019-01-09T19:00:00 Last Updated: 2024-08-05T05:54:52.821Z Vendors: Google Products: Chrome Problem Types: Use after free Description: Early free of object in use in IndexDB in Google Chrome prior to 67.0.3396.62 allowed a remote attacker who had compromised the renderer process to potentially perform a sandbox escape via a crafted HTML page. Additional Analyst Notes: - CVE Program Container: References: - https://crbug.com/842990 - http://www.securityfocus.com/bid/104309 - https://chromereleases.googleblog.com/2018/05/stable-channel-update-for-desktop_58.html - http://www.securitytracker.com/id/1041014 - https://access.redhat.com/errata/RHSA
e-channel-update-for-desktop_58.html - http://www.securitytracker.com/id/1041014 - https://access.redhat.com/errata/RHSA-2018:1815 - https://www.debian.org/security/2018/dsa-4237
CVE ID: CVE-2018-6128 State: PUBLISHED Published: 2019-06-27T16:13:42 Last Updated: 2024-08-05T05:54:53.151Z Vendors: Google Products: Chrome Problem Types: Incorrect security UI Description: Incorrect URL parsing in WebKit in Google Chrome on iOS prior to 67.0.3396.62 allowed a remote attacker to perform domain spoofing via a crafted HTML page. Additional Analyst Notes: - CVE Program Container: References: - https://crbug.com/841105 - https://chromereleases.googleblog.com/2018/05/stable-channel-update-for-desktop_58.html
CVE ID: CVE-2018-6129 State: PUBLISHED Published: 2019-06-27T16:13:42 Last Updated: 2024-08-05T05:54:52.862Z Vendors: Google Products: Chrome Problem Types: Out of bounds read Description: Out of bounds array access in WebRTC in Google Chrome prior to 67.0.3396.62 allowed a remote attacker to potentially perform out of bounds memory access via a crafted HTML page. Additional Analyst Notes: - CVE Program Container: References: - https://chromereleases.googleblog.com/2018/05/stable-channel-update-for-desktop_58.html - https://crbug.com/838672
CVE ID: CVE-2018-6130 State: PUBLISHED Published: 2019-06-27T16:13:42 Last Updated: 2024-08-05T05:54:53.160Z Vendors: Google Products: Chrome Problem Types: Out of bounds read and write Description: Incorrect handling of object lifetimes in WebRTC in Google Chrome prior to 67.0.3396.62 allowed a remote attacker to potentially perform out of bounds memory access via a crafted HTML page. Additional Analyst Notes: - CVE Program Container: References: - https://chromereleases.googleblog.com/2018/05/stable-channel-update-for-desktop_58.html - https://crbug.com/838402
CVE ID: CVE-2018-6131 State: PUBLISHED Published: 2019-06-27T16:13:42 Last Updated: 2024-08-05T05:54:53.192Z Vendors: Google Products: Chrome Problem Types: Object lifecycle issue Description: Object lifecycle issue in WebAssembly in Google Chrome prior to 67.0.3396.62 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. Additional Analyst Notes: - CVE Program Container: References: - https://chromereleases.googleblog.com/2018/05/stable-channel-update-for-desktop_58.html - https://crbug.com/826434
CVE ID: CVE-2018-6132 State: PUBLISHED Published: 2019-06-27T16:13:42 Last Updated: 2024-08-05T05:54:53.085Z Vendors: Google Products: Chrome Problem Types: Uninitialized Use Description: Uninitialized data in WebRTC in Google Chrome prior to 67.0.3396.62 allowed a remote attacker to obtain potentially sensitive information from process memory via a crafted video file. Additional Analyst Notes: - CVE Program Container: References: - https://chromereleases.googleblog.com/2018/05/stable-channel-update-for-desktop_58.html - https://crbug.com/839960
CVE ID: CVE-2018-6133 State: PUBLISHED Published: 2019-01-09T19:00:00 Last Updated: 2024-08-05T05:54:53.156Z Vendors: Google Products: Chrome Problem Types: Insufficient policy enforcement Description: Incorrect handling of confusable characters in URL Formatter in Google Chrome prior to 67.0.3396.62 allowed a remote attacker to perform domain spoofing via IDN homographs via a crafted domain name. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/104309 - https://chromereleases.googleblog.com/2018/05/stable-channel-update-for-desktop_58.html - http://www.securitytracker.com/id/1041014 - https://access.redhat.com/errata/RHSA-2018:1815 - https://
desktop_58.html - http://www.securitytracker.com/id/1041014 - https://access.redhat.com/errata/RHSA-2018:1815 - https://crbug.com/817247 - https://www.debian.org/security/2018/dsa-4237
CVE ID: CVE-2018-6134 State: PUBLISHED Published: 2019-06-27T16:13:42 Last Updated: 2024-08-05T05:54:53.157Z Vendors: Google Products: Chrome Problem Types: Insufficient data validation Description: Information leak in Blink in Google Chrome prior to 67.0.3396.62 allowed a remote attacker to bypass no-referrer policy via a crafted HTML page. Additional Analyst Notes: - CVE Program Container: References: - https://chromereleases.googleblog.com/2018/05/stable-channel-update-for-desktop_58.html - https://crbug.com/797465
CVE ID: CVE-2018-6135 State: PUBLISHED Published: 2019-01-09T19:00:00 Last Updated: 2024-08-05T05:54:53.147Z Vendors: Google Products: Chrome Problem Types: Inappropriate implementation Description: Lack of clearing the previous site before loading alerts from a new one in Blink in Google Chrome prior to 67.0.3396.62 allowed a remote attacker to perform domain spoofing via a crafted HTML page. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/104309 - https://chromereleases.googleblog.com/2018/05/stable-channel-update-for-desktop_58.html - http://www.securitytracker.com/id/1041014 - https://access.redhat.com/errata/RHSA-2018:1815 - https://crbu
top_58.html - http://www.securitytracker.com/id/1041014 - https://access.redhat.com/errata/RHSA-2018:1815 - https://crbug.com/823353 - https://www.debian.org/security/2018/dsa-4237
CVE ID: CVE-2018-6136 State: PUBLISHED Published: 2019-06-27T16:13:42 Last Updated: 2024-08-05T05:54:53.187Z Vendors: Google Products: Chrome Problem Types: Out of bounds read Description: Missing type check in V8 in Google Chrome prior to 67.0.3396.62 allowed a remote attacker to perform an out of bounds memory read via a crafted HTML page. Additional Analyst Notes: - CVE Program Container: References: - https://chromereleases.googleblog.com/2018/05/stable-channel-update-for-desktop_58.html - https://crbug.com/831943
CVE ID: CVE-2018-6137 State: PUBLISHED Published: 2019-01-09T19:00:00 Last Updated: 2024-08-05T05:54:53.191Z Vendors: Google Products: Chrome Problem Types: Side-channel information leakage Description: CSS Paint API in Blink in Google Chrome prior to 67.0.3396.62 allowed a remote attacker to leak cross-origin data via a crafted HTML page. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/104309 - https://chromereleases.googleblog.com/2018/05/stable-channel-update-for-desktop_58.html - http://www.securitytracker.com/id/1041014 - https://access.redhat.com/errata/RHSA-2018:1815 - https://crbug.com/835589 - https://www.debian.org/security/2018/dsa
- https://access.redhat.com/errata/RHSA-2018:1815 - https://crbug.com/835589 - https://www.debian.org/security/2018/dsa-4237
CVE ID: CVE-2018-6138 State: PUBLISHED Published: 2019-06-27T16:13:42 Last Updated: 2024-08-05T05:54:53.260Z Vendors: Google Products: Chrome Problem Types: Insufficient policy enforcement Description: Insufficient policy enforcement in Extensions API in Google Chrome prior to 67.0.3396.62 allowed an attacker who convinced a user to install a malicious extension to bypass navigation restrictions via a crafted Chrome Extension. Additional Analyst Notes: - CVE Program Container: References: - https://chromereleases.googleblog.com/2018/05/stable-channel-update-for-desktop_58.html - https://crbug.com/810220
CVE ID: CVE-2018-6139 State: PUBLISHED Published: 2019-01-09T19:00:00 Last Updated: 2024-08-05T05:54:53.153Z Vendors: Google Products: Chrome Problem Types: Insufficient policy enforcement Description: Insufficient target checks on the chrome.debugger API in DevTools in Google Chrome prior to 67.0.3396.62 allowed an attacker who convinced a user to install a malicious extension to execute arbitrary code via a crafted Chrome Extension. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/104309 - https://chromereleases.googleblog.com/2018/05/stable-channel-update-for-desktop_58.html - http://www.securitytracker.com/id/1041014 - https://access.redha
com/2018/05/stable-channel-update-for-desktop_58.html - http://www.securitytracker.com/id/1041014 - https://access.redhat.com/errata/RHSA-2018:1815 - https://crbug.com/805224 - https://www.debian.org/security/2018/dsa-4237
CVE ID: CVE-2018-6140 State: PUBLISHED Published: 2019-01-09T19:00:00 Last Updated: 2024-08-05T05:54:53.158Z Vendors: Google Products: Chrome Problem Types: Insufficient policy enforcement Description: Allowing the chrome.debugger API to attach to Web UI pages in DevTools in Google Chrome prior to 67.0.3396.62 allowed an attacker who convinced a user to install a malicious extension to execute arbitrary code via a crafted Chrome Extension. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/104309 - https://chromereleases.googleblog.com/2018/05/stable-channel-update-for-desktop_58.html - http://www.securitytracker.com/id/1041014 - https://access.
blog.com/2018/05/stable-channel-update-for-desktop_58.html - http://www.securitytracker.com/id/1041014 - https://access.redhat.com/errata/RHSA-2018:1815 - https://crbug.com/798222 - https://www.debian.org/security/2018/dsa-4237
CVE ID: CVE-2018-6141 State: PUBLISHED Published: 2019-01-09T19:00:00 Last Updated: 2024-08-05T05:54:53.178Z Vendors: Google Products: Chrome Problem Types: Insufficient validation of untrusted input Description: Insufficient validation of an image filter in Skia in Google Chrome prior to 67.0.3396.62 allowed a remote attacker who had compromised the renderer process to perform an out of bounds memory read via a crafted HTML page. Additional Analyst Notes: - CVE Program Container: References: - https://crbug.com/796107 - http://www.securityfocus.com/bid/104309 - https://chromereleases.googleblog.com/2018/05/stable-channel-update-for-desktop_58.html - http://www.securitytracker.com/id/1041014
omereleases.googleblog.com/2018/05/stable-channel-update-for-desktop_58.html - http://www.securitytracker.com/id/1041014 - https://access.redhat.com/errata/RHSA-2018:1815 - https://www.debian.org/security/2018/dsa-4237
CVE ID: CVE-2018-6142 State: PUBLISHED Published: 2019-06-27T16:13:42 Last Updated: 2024-08-05T05:54:53.159Z Vendors: Google Products: Chrome Problem Types: Out of bounds read Description: Array bounds check failure in V8 in Google Chrome prior to 67.0.3396.62 allowed a remote attacker to perform an out of bounds memory read via a crafted PDF file. Additional Analyst Notes: - CVE Program Container: References: - https://chromereleases.googleblog.com/2018/05/stable-channel-update-for-desktop_58.html - https://crbug.com/837939
CVE ID: CVE-2018-6143 State: PUBLISHED Published: 2019-01-09T19:00:00 Last Updated: 2024-08-05T05:54:53.182Z Vendors: Google Products: Chrome Problem Types: Type Confusion Description: Insufficient validation in V8 in Google Chrome prior to 67.0.3396.62 allowed a remote attacker to perform an out of bounds memory read via a crafted HTML page. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/104309 - https://chromereleases.googleblog.com/2018/05/stable-channel-update-for-desktop_58.html - http://www.securitytracker.com/id/1041014 - https://crbug.com/843022 - https://access.redhat.com/errata/RHSA-2018:1815 - https://www.debian.org/security/2018/
014 - https://crbug.com/843022 - https://access.redhat.com/errata/RHSA-2018:1815 - https://www.debian.org/security/2018/dsa-4237