deardaniel/secdata-raw huggingface dataset:
CVE: CVE-2018-16069
Published: 2019-06-27
Description: Unintended floating-point error accumulation in SwiftShader in Google Chrome prior to 69.0.3497.81 allowed a remote attacker to leak cross-origin data via a crafted HTML page.
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-125
References: https://chromereleases.googleblog.com/2018/09/stable-channel-update-for-desktop.html; https://crbug.com/848238; https://chromereleases.googleblog.com/2018/09/stable-channel-update-for-desktop.html
CVE: CVE-2018-16070
Published: 2019-06-27
Description: Integer overflows in Skia in Google Chrome prior to 69.0.3497.81 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page.
CVSS Score: 8.8 (HIGH)
CWE: CWE-190, CWE-787
References: https://chromereleases.googleblog.com/2018/09/stable-channel-update-for-desktop.html; https://crbug.com/848716; https://chromereleases.googleblog.com/2018/09/stable-channel-update-for-desktop.html
CVE: CVE-2018-16073
Published: 2019-06-27
Description: Insufficient policy enforcement in site isolation in Google Chrome prior to 69.0.3497.81 allowed a remote attacker to bypass site isolation via a crafted HTML page.
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-285
References: https://chromereleases.googleblog.com/2018/09/stable-channel-update-for-desktop.html; https://crbug.com/863069; https://chromereleases.googleblog.com/2018/09/stable-channel-update-for-desktop.html
CVE: CVE-2018-16074
Published: 2019-06-27
Description: Insufficient policy enforcement in site isolation in Google Chrome prior to 69.0.3497.81 allowed a remote attacker to bypass site isolation via a crafted HTML page.
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-285
References: https://chromereleases.googleblog.com/2018/09/stable-channel-update-for-desktop.html; https://crbug.com/863623; https://chromereleases.googleblog.com/2018/09/stable-channel-update-for-desktop.html
CVE: CVE-2018-16075
Published: 2019-06-27
Description: Insufficient file type enforcement in Blink in Google Chrome prior to 69.0.3497.81 allowed a remote attacker to obtain local file data via a crafted HTML page.
CVSS Score: 5.3 (MEDIUM)
References: https://chromereleases.googleblog.com/2018/09/stable-channel-update-for-desktop.html; https://crbug.com/788936; https://chromereleases.googleblog.com/2018/09/stable-channel-update-for-desktop.html
CVE: CVE-2018-16077
Published: 2019-06-27
Description: Object lifecycle issue in Blink in Google Chrome prior to 69.0.3497.81 allowed a remote attacker to bypass content security policy via a crafted HTML page.
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-285
References: https://chromereleases.googleblog.com/2018/09/stable-channel-update-for-desktop.html; https://crbug.com/377995; https://chromereleases.googleblog.com/2018/09/stable-channel-update-for-desktop.html
CVE: CVE-2018-16086
Published: 2019-06-27
Description: Insufficient policy enforcement in extensions API in Google Chrome prior to 69.0.3497.81 allowed an attacker who convinced a user to install a malicious extension to bypass navigation restrictions via a crafted Chrome Extension.
CVSS Score: 5.4 (MEDIUM)
CWE: CWE-285
References: https://chromereleases.googleblog.com/2018/09/stable-channel-update-for-desktop.html; https://crbug.com/844428; https://chromereleases.googleblog.com/2018/09/stable-channel-update-for-desktop.html
CVE: CVE-2018-17460
Published: 2019-06-27
Description: Insufficient data validation in filesystem URIs in Google Chrome prior to 68.0.3440.75 allowed a remote attacker to spoof the contents of the Omnibox (URL bar) via a crafted domain name.
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-20
References: https://chromereleases.googleblog.com/2018/07/stable-channel-update-for-desktop.html; https://crbug.com/696446; https://chromereleases.googleblog.com/2018/07/stable-channel-update-for-desktop.html
CVE: CVE-2018-17478
Published: 2019-06-27
Description: Incorrect array position calculations in V8 in Google Chrome prior to 70.0.3538.102 allowed a remote attacker to potentially exploit object corruption via a crafted HTML page.
CVSS Score: 8.8 (HIGH)
CWE: CWE-129
References: https://chromereleases.googleblog.com/2018/11/stable-channel-update-for-desktop.html; https://crbug.com/897512; https://chromereleases.googleblog.com/2018/11/stable-channel-update-for-desktop.html
CVE: CVE-2018-17479
Published: 2019-06-27
Description: Incorrect object lifetime calculations in GPU code in Google Chrome prior to 70.0.3538.110 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page.
CVSS Score: 8.8 (HIGH)
CWE: CWE-416, CWE-787
References: https://chromereleases.googleblog.com/2018/11/stable-channel-update-for-chrome-os.html; https://crbug.com/905336; https://chromereleases.googleblog.com/2018/11/stable-channel-update-for-chrome-os.html
CVE: CVE-2018-20073
Published: 2019-06-27
Description: Use of extended attributes in downloads in Google Chrome prior to 72.0.3626.81 allowed a local attacker to read download URLs via the filesystem.
CVSS Score: 5.5 (MEDIUM)
CWE: CWE-200
References: http://lists.opensuse.org/opensuse-security-announce/2019-07/msg00057.html; https://chromereleases.googleblog.com/2019/01/stable-channel-update-for-desktop.html; https://crbug.com/733943
CVE: CVE-2018-6118
Published: 2019-06-27
Description: A double-eviction in the Incognito mode cache that lead to a user-after-free in cache in Google Chrome prior to 66.0.3359.139 allowed a remote attacker who had compromised the renderer process to execute arbitrary code via a crafted HTML page.
CVSS Score: 8.8 (HIGH)
CWE: CWE-416
References: https://chromereleases.googleblog.com/2018/04/stable-channel-update-for-desktop_26.html; https://crbug.com/831963; https://chromereleases.googleblog.com/2018/04/stable-channel-update-for-desktop_26.html
CVE: CVE-2018-6121
Published: 2019-06-27
Description: Insufficient validation of input in Blink in Google Chrome prior to 66.0.3359.170 allowed a remote attacker to perform privilege escalation via a crafted HTML page.
CVSS Score: 8.8 (HIGH)
CWE: CWE-20
References: https://chromereleases.googleblog.com/2018/05/stable-channel-update-for-desktop.html; https://crbug.com/836858; https://chromereleases.googleblog.com/2018/05/stable-channel-update-for-desktop.html
CVE: CVE-2018-6128
Published: 2019-06-27
Description: Incorrect URL parsing in WebKit in Google Chrome on iOS prior to 67.0.3396.62 allowed a remote attacker to perform domain spoofing via a crafted HTML page.
CVSS Score: 6.1 (MEDIUM)
CWE: CWE-79
References: https://chromereleases.googleblog.com/2018/05/stable-channel-update-for-desktop_58.html; https://crbug.com/841105; https://chromereleases.googleblog.com/2018/05/stable-channel-update-for-desktop_58.html
CVE: CVE-2018-6129
Published: 2019-06-27
Description: Out of bounds array access in WebRTC in Google Chrome prior to 67.0.3396.62 allowed a remote attacker to potentially perform out of bounds memory access via a crafted HTML page.
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-125
References: https://chromereleases.googleblog.com/2018/05/stable-channel-update-for-desktop_58.html; https://crbug.com/838672; https://chromereleases.googleblog.com/2018/05/stable-channel-update-for-desktop_58.html
CVE: CVE-2018-6130
Published: 2019-06-27
Description: Incorrect handling of object lifetimes in WebRTC in Google Chrome prior to 67.0.3396.62 allowed a remote attacker to potentially perform out of bounds memory access via a crafted HTML page.
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-125
References: https://chromereleases.googleblog.com/2018/05/stable-channel-update-for-desktop_58.html; https://crbug.com/838402; https://chromereleases.googleblog.com/2018/05/stable-channel-update-for-desktop_58.html
CVE: CVE-2018-6131
Published: 2019-06-27
Description: Object lifecycle issue in WebAssembly in Google Chrome prior to 67.0.3396.62 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page.
CVSS Score: 8.8 (HIGH)
CWE: CWE-787
References: https://chromereleases.googleblog.com/2018/05/stable-channel-update-for-desktop_58.html; https://crbug.com/826434; https://chromereleases.googleblog.com/2018/05/stable-channel-update-for-desktop_58.html
CVE: CVE-2018-6132
Published: 2019-06-27
Description: Uninitialized data in WebRTC in Google Chrome prior to 67.0.3396.62 allowed a remote attacker to obtain potentially sensitive information from process memory via a crafted video file.
CVSS Score: 4.3 (MEDIUM)
CWE: CWE-908
References: https://chromereleases.googleblog.com/2018/05/stable-channel-update-for-desktop_58.html; https://crbug.com/839960; https://chromereleases.googleblog.com/2018/05/stable-channel-update-for-desktop_58.html
CVE: CVE-2018-6134
Published: 2019-06-27
Description: Information leak in Blink in Google Chrome prior to 67.0.3396.62 allowed a remote attacker to bypass no-referrer policy via a crafted HTML page.
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-200
References: https://chromereleases.googleblog.com/2018/05/stable-channel-update-for-desktop_58.html; https://crbug.com/797465; https://chromereleases.googleblog.com/2018/05/stable-channel-update-for-desktop_58.html
CVE: CVE-2018-6136
Published: 2019-06-27
Description: Missing type check in V8 in Google Chrome prior to 67.0.3396.62 allowed a remote attacker to perform an out of bounds memory read via a crafted HTML page.
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-125
References: https://chromereleases.googleblog.com/2018/05/stable-channel-update-for-desktop_58.html; https://crbug.com/831943; https://chromereleases.googleblog.com/2018/05/stable-channel-update-for-desktop_58.html
CVE: CVE-2018-6138
Published: 2019-06-27
Description: Insufficient policy enforcement in Extensions API in Google Chrome prior to 67.0.3396.62 allowed an attacker who convinced a user to install a malicious extension to bypass navigation restrictions via a crafted Chrome Extension.
CVSS Score: 8.1 (HIGH)
CWE: CWE-20
References: https://chromereleases.googleblog.com/2018/05/stable-channel-update-for-desktop_58.html; https://crbug.com/810220; https://chromereleases.googleblog.com/2018/05/stable-channel-update-for-desktop_58.html
CVE: CVE-2018-6142
Published: 2019-06-27
Description: Array bounds check failure in V8 in Google Chrome prior to 67.0.3396.62 allowed a remote attacker to perform an out of bounds memory read via a crafted PDF file.
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-125
References: https://chromereleases.googleblog.com/2018/05/stable-channel-update-for-desktop_58.html; https://crbug.com/837939; https://chromereleases.googleblog.com/2018/05/stable-channel-update-for-desktop_58.html
CVE: CVE-2018-6145
Published: 2019-06-27
Description: Insufficient data validation in HTML parser in Google Chrome prior to 67.0.3396.62 allowed a remote attacker to bypass same origin policy via a crafted HTML page.
CVSS Score: 6.1 (MEDIUM)
CWE: CWE-79
References: https://chromereleases.googleblog.com/2018/05/stable-channel-update-for-desktop_58.html; https://crbug.com/805924; https://chromereleases.googleblog.com/2018/05/stable-channel-update-for-desktop_58.html
CVE: CVE-2018-6148
Published: 2019-06-27
Description: Incorrect implementation in Content Security Policy in Google Chrome prior to 67.0.3396.79 allowed a remote attacker to bypass navigation restrictions via a crafted HTML page.
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-93
References: https://chromereleases.googleblog.com/2018/06/stable-channel-update-for-desktop.html; https://crbug.com/845961; https://chromereleases.googleblog.com/2018/06/stable-channel-update-for-desktop.html
CVE: CVE-2018-6149
Published: 2019-06-27
Description: Type confusion in JavaScript in Google Chrome prior to 67.0.3396.87 allowed a remote attacker to perform an out of bounds memory write via a crafted HTML page.
CVSS Score: 8.8 (HIGH)
CWE: CWE-787
References: https://chromereleases.googleblog.com/2018/06/stable-channel-update-for-desktop_12.html; https://crbug.com/848672; https://chromereleases.googleblog.com/2018/06/stable-channel-update-for-desktop_12.html
CVE: CVE-2018-6150
Published: 2019-06-27
Description: Incorrect handling of CORS in ServiceWorker in Google Chrome prior to 66.0.3359.117 allowed a remote attacker to leak cross-origin data via a crafted HTML page.
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-200
References: https://chromereleases.googleblog.com/2018/04/stable-channel-update-for-desktop.html; https://crbug.com/812667; https://chromereleases.googleblog.com/2018/04/stable-channel-update-for-desktop.html
CVE: CVE-2018-6154
Published: 2019-06-27
Description: Insufficient data validation in WebGL in Google Chrome prior to 68.0.3440.75 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page.
CVSS Score: 8.8 (HIGH)
CWE: CWE-787
References: https://chromereleases.googleblog.com/2018/07/stable-channel-update-for-desktop.html; https://crbug.com/848914; https://chromereleases.googleblog.com/2018/07/stable-channel-update-for-desktop.html
CVE: CVE-2018-6155
Published: 2019-06-27
Description: Incorrect handling of frames in the VP8 parser in Google Chrome prior to 68.0.3440.75 allowed a remote attacker to potentially exploit heap corruption via a crafted video file.
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-416, CWE-787
References: https://chromereleases.googleblog.com/2018/07/stable-channel-update-for-desktop.html; https://crbug.com/842265; https://chromereleases.googleblog.com/2018/07/stable-channel-update-for-desktop.html
CVE: CVE-2018-6156
Published: 2019-06-27
Description: Incorect derivation of a packet length in WebRTC in Google Chrome prior to 68.0.3440.75 allowed a remote attacker to potentially exploit heap corruption via a crafted video file.
CVSS Score: 8.8 (HIGH)
CWE: CWE-787
References: https://chromereleases.googleblog.com/2018/07/stable-channel-update-for-desktop.html; https://crbug.com/841962; https://usn.ubuntu.com/4165-1/
CVE: CVE-2018-6157
Published: 2019-06-27
Description: Type confusion in WebRTC in Google Chrome prior to 68.0.3440.75 allowed a remote attacker to potentially exploit heap corruption via a crafted video file.
CVSS Score: 8.8 (HIGH)
CWE: CWE-704
References: https://chromereleases.googleblog.com/2018/07/stable-channel-update-for-desktop.html; https://crbug.com/840536; https://chromereleases.googleblog.com/2018/07/stable-channel-update-for-desktop.html
CVE: CVE-2018-6159
Published: 2019-06-27
Description: Insufficient policy enforcement in ServiceWorker in Google Chrome prior to 68.0.3440.75 allowed a remote attacker to obtain potentially sensitive information from process memory via a crafted HTML page.
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-200
References: https://chromereleases.googleblog.com/2018/07/stable-channel-update-for-desktop.html; https://crbug.com/837275; https://chromereleases.googleblog.com/2018/07/stable-channel-update-for-desktop.html
CVE: CVE-2018-6161
Published: 2019-06-27
Description: Insufficient policy enforcement in Blink in Google Chrome prior to 68.0.3440.75 allowed a remote attacker to bypass same origin policy via a crafted HTML page.
CVSS Score: 8.8 (HIGH)
CWE: CWE-20
References: https://chromereleases.googleblog.com/2018/07/stable-channel-update-for-desktop.html; https://crbug.com/826552; https://chromereleases.googleblog.com/2018/07/stable-channel-update-for-desktop.html
CVE: CVE-2018-6168
Published: 2019-06-27
Description: Information leak in media engine in Google Chrome prior to 68.0.3440.75 allowed a remote attacker to obtain potentially sensitive information from process memory via a crafted HTML page.
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-200
References: https://chromereleases.googleblog.com/2018/07/stable-channel-update-for-desktop.html; https://crbug.com/828265; https://chromereleases.googleblog.com/2018/07/stable-channel-update-for-desktop.html
CVE: CVE-2018-6171
Published: 2019-06-27
Description: Use after free in Bluetooth in Google Chrome prior to 68.0.3440.75 allowed an attacker who convinced a user to install a malicious extension to obtain potentially sensitive information from process memory via a crafted Chrome Extension.
CVSS Score: 5.7 (MEDIUM)
CWE: CWE-416
References: https://chromereleases.googleblog.com/2018/07/stable-channel-update-for-desktop.html; https://crbug.com/851799; https://chromereleases.googleblog.com/2018/07/stable-channel-update-for-desktop.html
CVE: CVE-2018-6176
Published: 2019-06-27
Description: Insufficient file type enforcement in Extensions API in Google Chrome prior to 68.0.3440.75 allowed a remote attacker who had compromised the renderer process to perform privilege escalation via a crafted Chrome Extension.
CVSS Score: 7.8 (HIGH)
CWE: CWE-20
References: https://chromereleases.googleblog.com/2018/07/stable-channel-update-for-desktop.html; https://crbug.com/666824; https://chromereleases.googleblog.com/2018/07/stable-channel-update-for-desktop.html
CVE: CVE-2018-6177
Published: 2019-06-27
Description: Information leak in media engine in Google Chrome prior to 68.0.3440.75 allowed a remote attacker to leak cross-origin data via a crafted HTML page.
CVSS Score: 4.3 (MEDIUM)
CWE: CWE-200
References: https://chromereleases.googleblog.com/2018/07/stable-channel-update-for-desktop.html; https://crbug.com/826187; https://chromereleases.googleblog.com/2018/07/stable-channel-update-for-desktop.html
CVE: CVE-2019-3628
Published: 2019-06-27
Description: Privilege escalation in McAfee Enterprise Security Manager (ESM) 11.x prior to 11.2.0 allows authenticated user to gain access to a core system component via incorrect access control.
CVSS Score: 8.8 (HIGH)
References: https://kc.mcafee.com/corporate/index?page=content&id=SB10284; https://kc.mcafee.com/corporate/index?page=content&id=SB10284
CVE: CVE-2019-5784
Published: 2019-06-27
Description: Incorrect handling of deferred code in V8 in Google Chrome prior to 72.0.3626.96 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page.
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-787
References: https://chromereleases.googleblog.com/2019/02/stable-channel-update-for-desktop.html; https://crbug.com/915975; https://chromereleases.googleblog.com/2019/02/stable-channel-update-for-desktop.html
CVE: CVE-2019-5785
Published: 2019-06-27
Description: Incorrect convexity calculations in Skia in Google Chrome prior to 72.0.3626.81 allowed a remote attacker to perform an out of bounds memory write via a crafted HTML page.
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-787
References: https://chromereleases.googleblog.com/2019/01/stable-channel-update-for-desktop.html; https://crbug.com/899689; https://chromereleases.googleblog.com/2019/01/stable-channel-update-for-desktop.html
CVE: CVE-2019-5786
Published: 2019-06-27
Description: Object lifetime issue in Blink in Google Chrome prior to 72.0.3626.121 allowed a remote attacker to potentially perform out of bounds memory access via a crafted HTML page.
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-416, CWE-416
References: https://chromereleases.googleblog.com/2019/03/stable-channel-update-for-desktop.html; https://crbug.com/936448; https://chromereleases.googleblog.com/2019/03/stable-channel-update-for-desktop.html
CVE: CVE-2019-5805
Published: 2019-06-27
Description: Use-after-free in PDFium in Google Chrome prior to 74.0.3729.108 allowed a remote attacker to potentially exploit heap corruption via a crafted PDF file.
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-416, CWE-787
References: http://lists.opensuse.org/opensuse-security-announce/2019-06/msg00085.html; https://chromereleases.googleblog.com/2019/04/stable-channel-update-for-desktop_23.html; https://crbug.com/913320
CVE: CVE-2019-5806
Published: 2019-06-27
Description: Integer overflow in ANGLE in Google Chrome on Windows prior to 74.0.3729.108 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page.
CVSS Score: 8.8 (HIGH)
CWE: CWE-190, CWE-787
References: http://lists.opensuse.org/opensuse-security-announce/2019-06/msg00085.html; https://chromereleases.googleblog.com/2019/04/stable-channel-update-for-desktop_23.html; https://crbug.com/943087
CVE: CVE-2019-5807
Published: 2019-06-27
Description: Object lifetime issue in V8 in Google Chrome prior to 74.0.3729.108 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page.
CVSS Score: 8.8 (HIGH)
CWE: CWE-787
References: http://lists.opensuse.org/opensuse-security-announce/2019-06/msg00085.html; https://chromereleases.googleblog.com/2019/04/stable-channel-update-for-desktop_23.html; https://crbug.com/945644
CVE: CVE-2019-5808
Published: 2019-06-27
Description: Use after free in Blink in Google Chrome prior to 74.0.3729.108 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page.
CVSS Score: 8.8 (HIGH)
CWE: CWE-416, CWE-787
References: http://lists.opensuse.org/opensuse-security-announce/2019-06/msg00085.html; https://chromereleases.googleblog.com/2019/04/stable-channel-update-for-desktop_23.html; https://crbug.com/947029
CVE: CVE-2019-5809
Published: 2019-06-27
Description: Use after free in file chooser in Google Chrome prior to 74.0.3729.108 allowed a remote attacker who had compromised the renderer process to perform privilege escalation via a crafted HTML page.
CVSS Score: 8.8 (HIGH)
CWE: CWE-416
References: http://lists.opensuse.org/opensuse-security-announce/2019-06/msg00085.html; https://chromereleases.googleblog.com/2019/04/stable-channel-update-for-desktop_23.html; https://crbug.com/941008
CVE: CVE-2019-5810
Published: 2019-06-27
Description: Information leak in autofill in Google Chrome prior to 74.0.3729.108 allowed a remote attacker to obtain potentially sensitive information from process memory via a crafted HTML page.
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-312
References: http://lists.opensuse.org/opensuse-security-announce/2019-06/msg00085.html; https://chromereleases.googleblog.com/2019/04/stable-channel-update-for-desktop_23.html; https://crbug.com/916838
CVE: CVE-2019-5811
Published: 2019-06-27
Description: Incorrect handling of CORS in ServiceWorker in Google Chrome prior to 74.0.3729.108 allowed a remote attacker to bypass same origin policy via a crafted HTML page.
CVSS Score: 8.8 (HIGH)
References: http://lists.opensuse.org/opensuse-security-announce/2019-06/msg00085.html; https://chromereleases.googleblog.com/2019/04/stable-channel-update-for-desktop_23.html; https://crbug.com/771815
CVE: CVE-2019-5812
Published: 2019-06-27
Description: Inadequate security UI in iOS UI in Google Chrome prior to 74.0.3729.108 allowed a remote attacker to perform domain spoofing via a crafted HTML page.
CVSS Score: 6.5 (MEDIUM)
References: http://lists.opensuse.org/opensuse-security-announce/2019-06/msg00085.html; https://chromereleases.googleblog.com/2019/04/stable-channel-update-for-desktop_23.html; https://crbug.com/925598
CVE: CVE-2019-5813
Published: 2019-06-27
Description: Use after free in V8 in Google Chrome prior to 74.0.3729.108 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page.
CVSS Score: 8.8 (HIGH)
CWE: CWE-416, CWE-787
References: http://lists.opensuse.org/opensuse-security-announce/2019-06/msg00085.html; https://chromereleases.googleblog.com/2019/04/stable-channel-update-for-desktop_23.html; https://crbug.com/942699
CVE: CVE-2019-5814
Published: 2019-06-27
Description: Insufficient policy enforcement in Blink in Google Chrome prior to 74.0.3729.108 allowed a remote attacker to leak cross-origin data via a crafted HTML page.
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-352
References: http://lists.opensuse.org/opensuse-security-announce/2019-06/msg00085.html; https://chromereleases.googleblog.com/2019/04/stable-channel-update-for-desktop_23.html; https://crbug.com/930057
CVE: CVE-2019-5816
Published: 2019-06-27
Description: Process lifetime issue in Chrome in Google Chrome on Android prior to 74.0.3729.108 allowed a remote attacker to potentially persist an exploited process via a crafted HTML page.
CVSS Score: 8.8 (HIGH)
CWE: CWE-664
References: http://lists.opensuse.org/opensuse-security-announce/2019-06/msg00085.html; https://chromereleases.googleblog.com/2019/04/stable-channel-update-for-desktop_23.html; https://crbug.com/940245