Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
CVE ID: CVE-2018-6083 State: PUBLISHED Published: 2018-11-14T15:00:00 Last Updated: 2024-08-05T05:54:52.908Z Vendors: Google Products: Chrome Problem Types: Insufficient policy enforcement Description: Failure to disallow PWA installation from CSP sandboxed pages in AppManifest in Google Chrome prior to 65.0.3325.146 allowed a remote attacker to access privileged APIs via a crafted HTML page. Additional Analyst Notes: - CVE Program Container: References: - https://crbug.com/771709 - https://chromereleases.googleblog.com/2018/03/stable-channel-update-for-desktop.html - http://www.securityfocus.com/bid/103297 - https://access.redhat.com/errata/RHSA-2018:0484 - https://www.debian.org/security/2
CVE ID: CVE-2018-6084 State: PUBLISHED Published: 2019-01-09T19:00:00 Last Updated: 2024-08-05T05:54:52.953Z Vendors: Google Products: Chrome Problem Types: Insufficient data validation Description: Insufficiently sanitized distributed objects in Updater in Google Chrome on macOS prior to 66.0.3359.117 allowed a local attacker to execute arbitrary code via an executable file. Additional Analyst Notes: - CVE Program Container: References: - https://chromereleases.googleblog.com/2018/04/stable-channel-update-for-desktop.html - https://www.exploit-db.com/exploits/44307/ - http://www.securityfocus.com/bid/103468 - https://crbug.com/822424 - http://www.securityfocus.com/bid/103917
CVE ID: CVE-2018-6085 State: PUBLISHED Published: 2018-12-04T17:00:00 Last Updated: 2024-08-05T05:54:52.947Z Vendors: Google Products: Chrome Problem Types: Object corruption Description: Re-entry of a destructor in Networking Disk Cache in Google Chrome prior to 66.0.3359.117 allowed a remote attacker to execute arbitrary code via a crafted HTML page. Additional Analyst Notes: - CVE Program Container: References: - https://chromereleases.googleblog.com/2018/04/stable-channel-update-for-desktop.html - https://security.gentoo.org/glsa/201804-22 - https://crbug.com/826626 - https://www.debian.org/security/2018/dsa-4182 - http://www.securityfocus.com/bid/103917 - https://access.redhat.com/errat
ttps://www.debian.org/security/2018/dsa-4182 - http://www.securityfocus.com/bid/103917 - https://access.redhat.com/errata/RHSA-2018:1195
CVE ID: CVE-2018-6086 State: PUBLISHED Published: 2018-12-04T17:00:00 Last Updated: 2024-08-05T05:54:52.890Z Vendors: Google Products: Chrome Problem Types: Use after free Description: A double-eviction in the Incognito mode cache that lead to a user-after-free in Networking Disk Cache in Google Chrome prior to 66.0.3359.117 allowed a remote attacker to execute arbitrary code via a crafted HTML page. Additional Analyst Notes: - CVE Program Container: References: - https://chromereleases.googleblog.com/2018/04/stable-channel-update-for-desktop.html - https://security.gentoo.org/glsa/201804-22 - https://crbug.com/827492 - https://www.debian.org/security/2018/dsa-4182 - http://www.securityfocus
org/glsa/201804-22 - https://crbug.com/827492 - https://www.debian.org/security/2018/dsa-4182 - http://www.securityfocus.com/bid/103917 - https://access.redhat.com/errata/RHSA-2018:1195
CVE ID: CVE-2018-6087 State: PUBLISHED Published: 2018-12-04T17:00:00 Last Updated: 2024-08-05T05:54:52.731Z Vendors: Google Products: Chrome Problem Types: Use after free Description: A use-after-free in WebAssembly in Google Chrome prior to 66.0.3359.117 allowed a remote attacker to execute arbitrary code inside a sandbox via a crafted HTML page. Additional Analyst Notes: - CVE Program Container: References: - https://chromereleases.googleblog.com/2018/04/stable-channel-update-for-desktop.html - https://security.gentoo.org/glsa/201804-22 - https://crbug.com/813876 - https://www.debian.org/security/2018/dsa-4182 - http://www.securityfocus.com/bid/103917 - https://access.redhat.com/errata/RH
://www.debian.org/security/2018/dsa-4182 - http://www.securityfocus.com/bid/103917 - https://access.redhat.com/errata/RHSA-2018:1195
CVE ID: CVE-2018-6088 State: PUBLISHED Published: 2018-12-04T17:00:00 Last Updated: 2024-08-05T05:54:52.520Z Vendors: Google Products: Chrome Problem Types: Use after free Description: An iterator-invalidation bug in PDFium in Google Chrome prior to 66.0.3359.117 allowed a remote attacker to execute arbitrary code inside a sandbox via a crafted PDF file. Additional Analyst Notes: - CVE Program Container: References: - https://chromereleases.googleblog.com/2018/04/stable-channel-update-for-desktop.html - https://security.gentoo.org/glsa/201804-22 - https://crbug.com/822091 - https://www.debian.org/security/2018/dsa-4182 - http://www.securityfocus.com/bid/103917 - https://access.redhat.com/err
https://www.debian.org/security/2018/dsa-4182 - http://www.securityfocus.com/bid/103917 - https://access.redhat.com/errata/RHSA-2018:1195
CVE ID: CVE-2018-6089 State: PUBLISHED Published: 2018-12-04T17:00:00 Last Updated: 2024-08-05T05:54:52.959Z Vendors: Google Products: Chrome Problem Types: Insufficient policy enforcement Description: A lack of CORS checks, after a Service Worker redirected to a cross-origin PDF, in Service Worker in Google Chrome prior to 66.0.3359.117 allowed a remote attacker to leak limited cross-origin data via a crafted HTML page. Additional Analyst Notes: - CVE Program Container: References: - https://chromereleases.googleblog.com/2018/04/stable-channel-update-for-desktop.html - https://security.gentoo.org/glsa/201804-22 - https://crbug.com/808838 - https://www.debian.org/security/2018/dsa-4182 - htt
ps://security.gentoo.org/glsa/201804-22 - https://crbug.com/808838 - https://www.debian.org/security/2018/dsa-4182 - http://www.securityfocus.com/bid/103917 - https://access.redhat.com/errata/RHSA-2018:1195
CVE ID: CVE-2018-6090 State: PUBLISHED Published: 2018-12-04T17:00:00 Last Updated: 2024-08-05T05:54:52.975Z Vendors: Google Products: Chrome Problem Types: Integer overflow Description: An integer overflow that lead to a heap buffer-overflow in Skia in Google Chrome prior to 66.0.3359.117 allowed a remote attacker to execute arbitrary code inside a sandbox via a crafted HTML page. Additional Analyst Notes: - CVE Program Container: References: - https://chromereleases.googleblog.com/2018/04/stable-channel-update-for-desktop.html - https://crbug.com/820913 - https://security.gentoo.org/glsa/201804-22 - https://www.debian.org/security/2018/dsa-4182 - http://www.securityfocus.com/bid/103917 - h
.gentoo.org/glsa/201804-22 - https://www.debian.org/security/2018/dsa-4182 - http://www.securityfocus.com/bid/103917 - https://access.redhat.com/errata/RHSA-2018:1195
CVE ID: CVE-2018-6091 State: PUBLISHED Published: 2019-01-09T19:00:00 Last Updated: 2024-08-05T05:54:52.963Z Vendors: Google Products: Chrome Problem Types: Inappropriate implementation Description: Service Workers can intercept any request made by an <embed> or <object> tag in Fetch API in Google Chrome prior to 66.0.3359.117 allowed a remote attacker to leak cross-origin data via a crafted HTML page. Additional Analyst Notes: - CVE Program Container: References: - https://chromereleases.googleblog.com/2018/04/stable-channel-update-for-desktop.html - https://crbug.com/771933 - https://security.gentoo.org/glsa/201804-22 - https://www.debian.org/security/2018/dsa-4182 - http://www.securityfoc
33 - https://security.gentoo.org/glsa/201804-22 - https://www.debian.org/security/2018/dsa-4182 - http://www.securityfocus.com/bid/103917 - https://access.redhat.com/errata/RHSA-2018:1195
CVE ID: CVE-2018-6092 State: PUBLISHED Published: 2018-12-04T17:00:00 Last Updated: 2024-08-05T05:54:52.941Z Vendors: Google Products: Chrome Problem Types: Integer overflow Description: An integer overflow on 32-bit systems in WebAssembly in Google Chrome prior to 66.0.3359.117 allowed a remote attacker to execute arbitrary code inside a sandbox via a crafted HTML page. Additional Analyst Notes: - CVE Program Container: References: - https://chromereleases.googleblog.com/2018/04/stable-channel-update-for-desktop.html - https://security.gentoo.org/glsa/201804-22 - https://www.exploit-db.com/exploits/44860/ - https://crbug.com/819869 - https://www.debian.org/security/2018/dsa-4182 - http://ww
ww.exploit-db.com/exploits/44860/ - https://crbug.com/819869 - https://www.debian.org/security/2018/dsa-4182 - http://www.securityfocus.com/bid/103917 - https://access.redhat.com/errata/RHSA-2018:1195
CVE ID: CVE-2018-6093 State: PUBLISHED Published: 2019-01-09T19:00:00 Last Updated: 2024-08-05T05:54:53.095Z Vendors: Google Products: Chrome Problem Types: Inappropriate implementation Description: Insufficient origin checks in Blink in Google Chrome prior to 66.0.3359.117 allowed a remote attacker to leak cross-origin data via a crafted HTML page. Additional Analyst Notes: - CVE Program Container: References: - https://chromereleases.googleblog.com/2018/04/stable-channel-update-for-desktop.html - https://security.gentoo.org/glsa/201804-22 - https://www.debian.org/security/2018/dsa-4182 - http://www.securityfocus.com/bid/103917 - https://crbug.com/780435 - https://access.redhat.com/errata/R
/2018/dsa-4182 - http://www.securityfocus.com/bid/103917 - https://crbug.com/780435 - https://access.redhat.com/errata/RHSA-2018:1195
CVE ID: CVE-2018-6094 State: PUBLISHED Published: 2018-12-04T17:00:00 Last Updated: 2024-08-05T05:54:52.873Z Vendors: Google Products: Chrome Problem Types: Inappropriate implementation Description: Inline metadata in GarbageCollection in Google Chrome prior to 66.0.3359.117 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. Additional Analyst Notes: - CVE Program Container: References: - https://chromereleases.googleblog.com/2018/04/stable-channel-update-for-desktop.html - https://crbug.com/633030 - https://security.gentoo.org/glsa/201804-22 - https://www.debian.org/security/2018/dsa-4182 - http://www.securityfocus.com/bid/103917 - https://access.redha
1804-22 - https://www.debian.org/security/2018/dsa-4182 - http://www.securityfocus.com/bid/103917 - https://access.redhat.com/errata/RHSA-2018:1195
CVE ID: CVE-2018-6095 State: PUBLISHED Published: 2018-12-04T17:00:00 Last Updated: 2024-08-05T05:54:52.951Z Vendors: Google Products: Chrome Problem Types: Inappropriate implementation Description: Inappropriate dismissal of file picker on keyboard events in Blink in Google Chrome prior to 66.0.3359.117 allowed a remote attacker to read local files via a crafted HTML page. Additional Analyst Notes: - CVE Program Container: References: - https://chromereleases.googleblog.com/2018/04/stable-channel-update-for-desktop.html - https://security.gentoo.org/glsa/201804-22 - https://crbug.com/637098 - https://www.debian.org/security/2018/dsa-4182 - http://www.securityfocus.com/bid/103917 - https://a
//crbug.com/637098 - https://www.debian.org/security/2018/dsa-4182 - http://www.securityfocus.com/bid/103917 - https://access.redhat.com/errata/RHSA-2018:1195
CVE ID: CVE-2018-6096 State: PUBLISHED Published: 2019-01-09T19:00:00 Last Updated: 2024-08-05T05:54:52.677Z Vendors: Google Products: Chrome Problem Types: Insufficient policy enforcement Description: A JavaScript focused window could overlap the fullscreen notification in Fullscreen in Google Chrome prior to 66.0.3359.117 allowed a remote attacker to obscure the full screen warning via a crafted HTML page. Additional Analyst Notes: - CVE Program Container: References: - https://chromereleases.googleblog.com/2018/04/stable-channel-update-for-desktop.html - https://crbug.com/776418 - https://security.gentoo.org/glsa/201804-22 - https://www.debian.org/security/2018/dsa-4182 - http://www.secur
m/776418 - https://security.gentoo.org/glsa/201804-22 - https://www.debian.org/security/2018/dsa-4182 - http://www.securityfocus.com/bid/103917 - https://access.redhat.com/errata/RHSA-2018:1195
CVE ID: CVE-2018-6097 State: PUBLISHED Published: 2019-01-09T19:00:00 Last Updated: 2024-08-05T05:54:52.937Z Vendors: Google Products: Chrome Problem Types: Inappropriate implementation Description: Incorrect handling of asynchronous methods in Fullscreen in Google Chrome on macOS prior to 66.0.3359.117 allowed a remote attacker to enter full screen without showing a warning via a crafted HTML page. Additional Analyst Notes: - CVE Program Container: References: - https://chromereleases.googleblog.com/2018/04/stable-channel-update-for-desktop.html - https://security.gentoo.org/glsa/201804-22 - https://crbug.com/806162 - https://www.debian.org/security/2018/dsa-4182 - http://www.securityfocus.
rg/glsa/201804-22 - https://crbug.com/806162 - https://www.debian.org/security/2018/dsa-4182 - http://www.securityfocus.com/bid/103917 - https://access.redhat.com/errata/RHSA-2018:1195
CVE ID: CVE-2018-6098 State: PUBLISHED Published: 2018-12-04T17:00:00 Last Updated: 2024-08-05T05:54:52.589Z Vendors: Google Products: Chrome Problem Types: Insufficient policy enforcement Description: Incorrect handling of confusable characters in URL Formatter in Google Chrome prior to 66.0.3359.117 allowed a remote attacker to perform domain spoofing via IDN homographs via a crafted domain name. Additional Analyst Notes: - CVE Program Container: References: - https://chromereleases.googleblog.com/2018/04/stable-channel-update-for-desktop.html - https://security.gentoo.org/glsa/201804-22 - https://crbug.com/798892 - https://www.debian.org/security/2018/dsa-4182 - http://www.securityfocus.c
g/glsa/201804-22 - https://crbug.com/798892 - https://www.debian.org/security/2018/dsa-4182 - http://www.securityfocus.com/bid/103917 - https://access.redhat.com/errata/RHSA-2018:1195
CVE ID: CVE-2018-6099 State: PUBLISHED Published: 2018-12-04T17:00:00 Last Updated: 2024-08-05T05:54:52.961Z Vendors: Google Products: Chrome Problem Types: Insufficient policy enforcement Description: A lack of CORS checks in Blink in Google Chrome prior to 66.0.3359.117 allowed a remote attacker to leak limited cross-origin data via a crafted HTML page. Additional Analyst Notes: - CVE Program Container: References: - https://chromereleases.googleblog.com/2018/04/stable-channel-update-for-desktop.html - https://crbug.com/808825 - https://security.gentoo.org/glsa/201804-22 - https://www.debian.org/security/2018/dsa-4182 - http://www.securityfocus.com/bid/103917 - https://access.redhat.com/er
- https://www.debian.org/security/2018/dsa-4182 - http://www.securityfocus.com/bid/103917 - https://access.redhat.com/errata/RHSA-2018:1195
CVE ID: CVE-2018-6100 State: PUBLISHED Published: 2019-01-09T19:00:00 Last Updated: 2024-08-05T05:54:53.029Z Vendors: Google Products: Chrome Problem Types: Insufficient policy enforcement Description: Incorrect handling of confusable characters in URL Formatter in Google Chrome on macOS prior to 66.0.3359.117 allowed a remote attacker to perform domain spoofing via IDN homographs via a crafted domain name. Additional Analyst Notes: - CVE Program Container: References: - https://chromereleases.googleblog.com/2018/04/stable-channel-update-for-desktop.html - https://security.gentoo.org/glsa/201804-22 - https://crbug.com/811117 - https://www.debian.org/security/2018/dsa-4182 - http://www.securi
gentoo.org/glsa/201804-22 - https://crbug.com/811117 - https://www.debian.org/security/2018/dsa-4182 - http://www.securityfocus.com/bid/103917 - https://access.redhat.com/errata/RHSA-2018:1195
CVE ID: CVE-2018-6101 State: PUBLISHED Published: 2018-12-04T17:00:00 Last Updated: 2024-08-05T05:54:52.659Z Vendors: Google Products: Chrome Problem Types: Insufficient policy enforcement Description: A lack of host validation in DevTools in Google Chrome prior to 66.0.3359.117 allowed a remote attacker to execute arbitrary code via a crafted HTML page, if the user is running a remote DevTools debugging server. Additional Analyst Notes: - CVE Program Container: References: - https://chromereleases.googleblog.com/2018/04/stable-channel-update-for-desktop.html - https://security.gentoo.org/glsa/201804-22 - https://crbug.com/813540 - https://www.debian.org/security/2018/dsa-4182 - http://www.s
rity.gentoo.org/glsa/201804-22 - https://crbug.com/813540 - https://www.debian.org/security/2018/dsa-4182 - http://www.securityfocus.com/bid/103917 - https://access.redhat.com/errata/RHSA-2018:1195
CVE ID: CVE-2018-6102 State: PUBLISHED Published: 2018-12-04T17:00:00 Last Updated: 2024-08-05T05:54:52.746Z Vendors: Google Products: Chrome Problem Types: Insufficient policy enforcement Description: Missing confusable characters in Internationalization in Google Chrome prior to 66.0.3359.117 allowed a remote attacker to spoof the contents of the Omnibox (URL bar) via a crafted domain name. Additional Analyst Notes: - CVE Program Container: References: - https://chromereleases.googleblog.com/2018/04/stable-channel-update-for-desktop.html - https://security.gentoo.org/glsa/201804-22 - https://crbug.com/813814 - https://www.debian.org/security/2018/dsa-4182 - http://www.securityfocus.com/bid
/201804-22 - https://crbug.com/813814 - https://www.debian.org/security/2018/dsa-4182 - http://www.securityfocus.com/bid/103917 - https://access.redhat.com/errata/RHSA-2018:1195
CVE ID: CVE-2018-6103 State: PUBLISHED Published: 2018-12-04T17:00:00 Last Updated: 2024-08-05T05:54:52.880Z Vendors: Google Products: Chrome Problem Types: Incorrect security UI Description: A stagnant permission prompt in Prompts in Google Chrome prior to 66.0.3359.117 allowed a remote attacker to bypass permission policy via a crafted HTML page. Additional Analyst Notes: - CVE Program Container: References: - https://chromereleases.googleblog.com/2018/04/stable-channel-update-for-desktop.html - https://security.gentoo.org/glsa/201804-22 - https://crbug.com/816033 - https://www.debian.org/security/2018/dsa-4182 - http://www.securityfocus.com/bid/103917 - https://access.redhat.com/errata/RH
CVE ID: CVE-2018-6104 State: PUBLISHED Published: 2018-12-04T17:00:00 Last Updated: 2024-08-05T05:54:53.096Z Vendors: Google Products: Chrome Problem Types: Insufficient policy enforcement Description: Incorrect handling of confusable characters in URL Formatter in Google Chrome prior to 66.0.3359.117 allowed a remote attacker to perform domain spoofing via IDN homographs via a crafted domain name. Additional Analyst Notes: - CVE Program Container: References: - https://chromereleases.googleblog.com/2018/04/stable-channel-update-for-desktop.html - https://security.gentoo.org/glsa/201804-22 - https://crbug.com/820068 - https://www.debian.org/security/2018/dsa-4182 - http://www.securityfocus.c
g/glsa/201804-22 - https://crbug.com/820068 - https://www.debian.org/security/2018/dsa-4182 - http://www.securityfocus.com/bid/103917 - https://access.redhat.com/errata/RHSA-2018:1195
CVE ID: CVE-2018-6105 State: PUBLISHED Published: 2018-12-04T17:00:00 Last Updated: 2024-08-05T05:54:52.992Z Vendors: Google Products: Chrome Problem Types: Insufficient policy enforcement Description: Incorrect handling of confusable characters in Omnibox in Google Chrome prior to 66.0.3359.117 allowed a remote attacker to perform domain spoofing via IDN homographs via a crafted domain name. Additional Analyst Notes: - CVE Program Container: References: - https://chromereleases.googleblog.com/2018/04/stable-channel-update-for-desktop.html - https://crbug.com/803571 - https://security.gentoo.org/glsa/201804-22 - https://www.debian.org/security/2018/dsa-4182 - http://www.securityfocus.com/bid
://security.gentoo.org/glsa/201804-22 - https://www.debian.org/security/2018/dsa-4182 - http://www.securityfocus.com/bid/103917 - https://access.redhat.com/errata/RHSA-2018:1195
CVE ID: CVE-2018-6106 State: PUBLISHED Published: 2019-01-09T19:00:00 Last Updated: 2024-08-05T05:54:53.032Z Vendors: Google Products: Chrome Problem Types: Inappropriate implementation Description: An asynchronous generator may return an incorrect state in V8 in Google Chrome prior to 66.0.3359.117 allowing a remote attacker to potentially exploit object corruption via a crafted HTML page. Additional Analyst Notes: - CVE Program Container: References: - https://chromereleases.googleblog.com/2018/04/stable-channel-update-for-desktop.html - https://security.gentoo.org/glsa/201804-22 - https://crbug.com/805729 - https://www.debian.org/security/2018/dsa-4182 - http://www.securityfocus.com/bid/1
01804-22 - https://crbug.com/805729 - https://www.debian.org/security/2018/dsa-4182 - http://www.securityfocus.com/bid/103917 - https://access.redhat.com/errata/RHSA-2018:1195
CVE ID: CVE-2018-6107 State: PUBLISHED Published: 2018-12-04T17:00:00 Last Updated: 2024-08-05T05:54:52.958Z Vendors: Google Products: Chrome Problem Types: Insufficient policy enforcement Description: Incorrect handling of confusable characters in URL Formatter in Google Chrome prior to 66.0.3359.117 allowed a remote attacker to perform domain spoofing via IDN homographs via a crafted domain name. Additional Analyst Notes: - CVE Program Container: References: - https://chromereleases.googleblog.com/2018/04/stable-channel-update-for-desktop.html - https://crbug.com/808316 - https://security.gentoo.org/glsa/201804-22 - https://www.debian.org/security/2018/dsa-4182 - http://www.securityfocus.c
https://security.gentoo.org/glsa/201804-22 - https://www.debian.org/security/2018/dsa-4182 - http://www.securityfocus.com/bid/103917 - https://access.redhat.com/errata/RHSA-2018:1195
CVE ID: CVE-2018-6108 State: PUBLISHED Published: 2018-12-04T17:00:00 Last Updated: 2024-08-05T05:54:53.078Z Vendors: Google Products: Chrome Problem Types: Insufficient policy enforcement Description: Incorrect handling of confusable characters in URL Formatter in Google Chrome prior to 66.0.3359.117 allowed a remote attacker to perform domain spoofing via IDN homographs via a crafted HTML page. Additional Analyst Notes: - CVE Program Container: References: - https://chromereleases.googleblog.com/2018/04/stable-channel-update-for-desktop.html - https://security.gentoo.org/glsa/201804-22 - https://crbug.com/816769 - https://www.debian.org/security/2018/dsa-4182 - http://www.securityfocus.com
glsa/201804-22 - https://crbug.com/816769 - https://www.debian.org/security/2018/dsa-4182 - http://www.securityfocus.com/bid/103917 - https://access.redhat.com/errata/RHSA-2018:1195
CVE ID: CVE-2018-6109 State: PUBLISHED Published: 2019-01-09T19:00:00 Last Updated: 2024-08-05T05:54:52.701Z Vendors: Google Products: Chrome Problem Types: Inappropriate implementation Description: readAsText() can indefinitely read the file picked by the user, rather than only once at the time the file is picked in File API in Google Chrome prior to 66.0.3359.117 allowed a remote attacker to access data on the user file system without explicit consent via a crafted HTML page. Additional Analyst Notes: - CVE Program Container: References: - https://chromereleases.googleblog.com/2018/04/stable-channel-update-for-desktop.html - https://security.gentoo.org/glsa/201804-22 - https://crbug.com/71
g.com/2018/04/stable-channel-update-for-desktop.html - https://security.gentoo.org/glsa/201804-22 - https://crbug.com/710190 - https://www.debian.org/security/2018/dsa-4182 - http://www.securityfocus.com/bid/103917 - https://access.redhat.com/errata/RHSA-2018:1195
CVE ID: CVE-2018-6110 State: PUBLISHED Published: 2019-01-09T19:00:00 Last Updated: 2024-08-05T05:54:53.152Z Vendors: Google Products: Chrome Problem Types: Insufficient policy enforcement Description: Parsing documents as HTML in Downloads in Google Chrome prior to 66.0.3359.117 allowed a remote attacker to cause Chrome to execute scripts via a local non-HTML page. Additional Analyst Notes: - CVE Program Container: References: - https://chromereleases.googleblog.com/2018/04/stable-channel-update-for-desktop.html - https://security.gentoo.org/glsa/201804-22 - https://crbug.com/777737 - https://www.debian.org/security/2018/dsa-4182 - http://www.securityfocus.com/bid/103917 - https://access.re
com/777737 - https://www.debian.org/security/2018/dsa-4182 - http://www.securityfocus.com/bid/103917 - https://access.redhat.com/errata/RHSA-2018:1195