deardaniel/secdata-raw huggingface dataset:
CVE: CVE-2018-8565
Published: 2018-11-14
Description: An information disclosure vulnerability exists when the win32k component improperly provides kernel information, aka "Win32k Information Disclosure Vulnerability." This affects Windows 7, Windows Server 2012 R2, Windows RT 8.1, Windows Server 2008, Windows Server 2012, Windows 8.1, Windows Server 2016, Windows Server 2008 R2, Windows 10, Windows 10 Servers.
CVSS Score: 5.5 (MEDIUM)
CWE: CWE-200
References: http://www.securityfocus.com/bid/105791; https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2018-8565; http://www.securityfocus.com/bid/105791
CVE: CVE-2018-8566
Published: 2018-11-14
Description: A security feature bypass vulnerability exists when Windows improperly suspends BitLocker Device Encryption, aka "BitLocker Security Feature Bypass Vulnerability." This affects Windows Server 2016, Windows 10, Windows Server 2019, Windows 10 Servers.
CVSS Score: 4.6 (MEDIUM)
References: http://www.securityfocus.com/bid/105806; https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2018-8566; http://www.securityfocus.com/bid/105806
CVE: CVE-2018-8567
Published: 2018-11-14
Description: An elevation of privilege vulnerability exists when Microsoft Edge does not properly enforce cross-domain policies, which could allow an attacker to access information from one domain and inject it into another domain, aka "Microsoft Edge Elevation of Privilege Vulnerability." This affects Microsoft Edge.
CVSS Score: 5.4 (MEDIUM)
References: http://www.securityfocus.com/bid/105784; http://www.securitytracker.com/id/1042107; https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2018-8567
CVE: CVE-2018-8568
Published: 2018-11-14
Description: An elevation of privilege vulnerability exists when Microsoft SharePoint Server does not properly sanitize a specially crafted web request to an affected SharePoint server, aka "Microsoft SharePoint Elevation of Privilege Vulnerability." This affects Microsoft SharePoint Server, Microsoft SharePoint. This CVE ID is unique from CVE-2018-8572.
CVSS Score: 5.4 (MEDIUM)
CWE: CWE-79, CWE-79
References: http://www.securityfocus.com/bid/105829; http://www.securitytracker.com/id/1042136; https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2018-8568
CVE: CVE-2018-8570
Published: 2018-11-14
Description: A remote code execution vulnerability exists when Internet Explorer improperly accesses objects in memory, aka "Internet Explorer Memory Corruption Vulnerability." This affects Internet Explorer 11.
CVSS Score: 7.5 (HIGH)
CWE: CWE-787
References: http://www.securityfocus.com/bid/105783; http://www.securitytracker.com/id/1042131; https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2018-8570
CVE: CVE-2018-8572
Published: 2018-11-14
Description: An elevation of privilege vulnerability exists when Microsoft SharePoint Server does not properly sanitize a specially crafted web request to an affected SharePoint server, aka "Microsoft SharePoint Elevation of Privilege Vulnerability." This affects Microsoft SharePoint Server, Microsoft SharePoint. This CVE ID is unique from CVE-2018-8568.
CVSS Score: 5.4 (MEDIUM)
CWE: CWE-79
References: http://www.securityfocus.com/bid/105831; https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2018-8572; http://www.securityfocus.com/bid/105831
CVE: CVE-2018-8573
Published: 2018-11-14
Description: A remote code execution vulnerability exists in Microsoft Word software when it fails to properly handle objects in memory, aka "Microsoft Word Remote Code Execution Vulnerability." This affects Microsoft Word, Office 365 ProPlus, Microsoft Office. This CVE ID is unique from CVE-2018-8539.
CVSS Score: 7.8 (HIGH)
References: http://www.securityfocus.com/bid/105836; http://www.securitytracker.com/id/1042114; https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2018-8573
CVE: CVE-2018-8574
Published: 2018-11-14
Description: A remote code execution vulnerability exists in Microsoft Excel software when the software fails to properly handle objects in memory, aka "Microsoft Excel Remote Code Execution Vulnerability." This affects Office 365 ProPlus, Microsoft Office, Microsoft Excel. This CVE ID is unique from CVE-2018-8577.
CVSS Score: 7.8 (HIGH)
References: http://www.securityfocus.com/bid/105833; http://www.securitytracker.com/id/1042115; https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2018-8574
CVE: CVE-2018-8575
Published: 2018-11-14
Description: A remote code execution vulnerability exists in Microsoft Project software when it fails to properly handle objects in memory, aka "Microsoft Project Remote Code Execution Vulnerability." This affects Microsoft Project, Office 365 ProPlus, Microsoft Project Server.
CVSS Score: 7.8 (HIGH)
References: http://www.securityfocus.com/bid/105807; http://www.securitytracker.com/id/1042116; https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2018-8575
CVE: CVE-2018-8576
Published: 2018-11-14
Description: A remote code execution vulnerability exists in Microsoft Outlook software when it fails to properly handle objects in memory, aka "Microsoft Outlook Remote Code Execution Vulnerability." This affects Office 365 ProPlus, Microsoft Office, Microsoft Outlook. This CVE ID is unique from CVE-2018-8522, CVE-2018-8524, CVE-2018-8582.
CVSS Score: 7.8 (HIGH)
References: http://www.securityfocus.com/bid/105822; http://www.securitytracker.com/id/1042110; https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2018-8576
CVE: CVE-2018-8577
Published: 2018-11-14
Description: A remote code execution vulnerability exists in Microsoft Excel software when the software fails to properly handle objects in memory, aka "Microsoft Excel Remote Code Execution Vulnerability." This affects Microsoft Office, Office 365 ProPlus, Microsoft Excel, Microsoft Excel Viewer, Excel. This CVE ID is unique from CVE-2018-8574.
CVSS Score: 7.8 (HIGH)
References: http://www.securityfocus.com/bid/105834; http://www.securitytracker.com/id/1042134; https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2018-8577
CVE: CVE-2018-8578
Published: 2018-11-14
Description: An information disclosure vulnerability exists when Microsoft SharePoint Server improperly discloses its folder structure when rendering specific web pages, aka "Microsoft SharePoint Information Disclosure Vulnerability." This affects Microsoft SharePoint.
CVSS Score: 4.3 (MEDIUM)
References: http://www.securityfocus.com/bid/105832; http://www.securitytracker.com/id/1042133; https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2018-8578
CVE: CVE-2018-8579
Published: 2018-11-14
Description: An information disclosure vulnerability exists when attaching files to Outlook messages, aka "Microsoft Outlook Information Disclosure Vulnerability." This affects Office 365 ProPlus, Microsoft Office. This CVE ID is unique from CVE-2018-8558.
CVSS Score: 6.5 (MEDIUM)
References: http://www.securityfocus.com/bid/105828; http://www.securitytracker.com/id/1042132; https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2018-8579
CVE: CVE-2018-8581
Published: 2018-11-14
Description: An elevation of privilege vulnerability exists in Microsoft Exchange Server, aka "Microsoft Exchange Server Elevation of Privilege Vulnerability." This affects Microsoft Exchange Server.
CVSS Score: 7.4 (HIGH)
References: http://www.securityfocus.com/bid/105837; http://www.securitytracker.com/id/1042141; https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2018-8581
CVE: CVE-2018-8582
Published: 2018-11-14
Description: A remote code execution vulnerability exists in the way that Microsoft Outlook parses specially modified rule export files, aka "Microsoft Outlook Remote Code Execution Vulnerability." This affects Office 365 ProPlus, Microsoft Office, Microsoft Outlook. This CVE ID is unique from CVE-2018-8522, CVE-2018-8524, CVE-2018-8576.
CVSS Score: 8.8 (HIGH)
References: http://www.securityfocus.com/bid/105825; http://www.securitytracker.com/id/1042110; https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2018-8582
CVE: CVE-2018-8584
Published: 2018-11-14
Description: An elevation of privilege vulnerability exists when Windows improperly handles calls to Advanced Local Procedure Call (ALPC), aka "Windows ALPC Elevation of Privilege Vulnerability." This affects Windows Server 2016, Windows 10, Windows Server 2019, Windows 10 Servers.
CVSS Score: 7.8 (HIGH)
CWE: CWE-367
References: http://www.securityfocus.com/bid/105808; http://www.securitytracker.com/id/1042119; https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2018-8584
CVE: CVE-2018-8588
Published: 2018-11-14
Description: A remote code execution vulnerability exists in the way that the Chakra scripting engine handles objects in memory in Microsoft Edge, aka "Chakra Scripting Engine Memory Corruption Vulnerability." This affects Microsoft Edge, ChakraCore. This CVE ID is unique from CVE-2018-8541, CVE-2018-8542, CVE-2018-8543, CVE-2018-8551, CVE-2018-8555, CVE-2018-8556, CVE-2018-8557.
CVSS Score: 7.5 (HIGH)
CWE: CWE-787
References: http://www.securityfocus.com/bid/105782; http://www.securitytracker.com/id/1042107; https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2018-8588
CVE: CVE-2018-8589
Published: 2018-11-14
Description: An elevation of privilege vulnerability exists when Windows improperly handles calls to Win32k.sys, aka "Windows Win32k Elevation of Privilege Vulnerability." This affects Windows Server 2008, Windows 7, Windows Server 2008 R2.
CVSS Score: 7.8 (HIGH)
References: http://www.securityfocus.com/bid/105796; http://www.securitytracker.com/id/1042140; https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2018-8589
CVE: CVE-2018-8592
Published: 2018-11-14
Description: An elevation of privilege vulnerability exists in Windows 10 version 1809 when installed from physical media (USB, DVD, etc, aka "Windows Elevation Of Privilege Vulnerability." This affects Windows 10, Windows Server 2019.
CVSS Score: 6.4 (MEDIUM)
References: http://www.securityfocus.com/bid/105809; http://www.securitytracker.com/id/1042126; https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2018-8592
CVE: CVE-2018-8600
Published: 2018-11-14
Description: A Cross-site Scripting (XSS) vulnerability exists when Azure App Services on Azure Stack does not properly sanitize user provided input, aka "Azure App Service Cross-site Scripting Vulnerability." This affects Azure App.
CVSS Score: 6.1 (MEDIUM)
CWE: CWE-79
References: http://www.securityfocus.com/bid/105893; https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2018-8600; http://www.securityfocus.com/bid/105893
CVE: CVE-2018-8602
Published: 2018-11-14
Description: A Cross-site Scripting (XSS) vulnerability exists when Team Foundation Server does not properly sanitize user provided input, aka "Team Foundation Server Cross-site Scripting Vulnerability." This affects Team.
CVSS Score: 5.4 (MEDIUM)
CWE: CWE-79
References: http://www.securityfocus.com/bid/105895; https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2018-8602; http://www.securityfocus.com/bid/105895
CVE: CVE-2018-8605
Published: 2018-11-14
Description: A cross site scripting vulnerability exists when Microsoft Dynamics 365 (on-premises) version 8 does not properly sanitize a specially crafted web request to an affected Dynamics server, aka "Microsoft Dynamics 365 (on-premises) version 8 Cross Site Scripting Vulnerability." This affects Microsoft Dynamics 365. This CVE ID is unique from CVE-2018-8606, CVE-2018-8607, CVE-2018-8608.
CVSS Score: 5.4 (MEDIUM)
CWE: CWE-79
References: http://www.securityfocus.com/bid/105889; https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2018-8605; http://www.securityfocus.com/bid/105889
CVE: CVE-2018-8606
Published: 2018-11-14
Description: A cross site scripting vulnerability exists when Microsoft Dynamics 365 (on-premises) version 8 does not properly sanitize a specially crafted web request to an affected Dynamics server, aka "Microsoft Dynamics 365 (on-premises) version 8 Cross Site Scripting Vulnerability." This affects Microsoft Dynamics 365. This CVE ID is unique from CVE-2018-8605, CVE-2018-8607, CVE-2018-8608.
CVSS Score: 5.4 (MEDIUM)
CWE: CWE-79
References: http://www.securityfocus.com/bid/105890; https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2018-8606; http://www.securityfocus.com/bid/105890
CVE: CVE-2018-8607
Published: 2018-11-14
Description: A cross site scripting vulnerability exists when Microsoft Dynamics 365 (on-premises) version 8 does not properly sanitize a specially crafted web request to an affected Dynamics server, aka "Microsoft Dynamics 365 (on-premises) version 8 Cross Site Scripting Vulnerability." This affects Microsoft Dynamics 365. This CVE ID is unique from CVE-2018-8605, CVE-2018-8606, CVE-2018-8608.
CVSS Score: 5.4 (MEDIUM)
CWE: CWE-79
References: http://www.securityfocus.com/bid/105891; https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2018-8607; http://www.securityfocus.com/bid/105891
CVE: CVE-2018-8608
Published: 2018-11-14
Description: A cross site scripting vulnerability exists when Microsoft Dynamics 365 (on-premises) version 8 does not properly sanitize a specially crafted web request to an affected Dynamics server, aka "Microsoft Dynamics 365 (on-premises) version 8 Cross Site Scripting Vulnerability." This affects Microsoft Dynamics 365. This CVE ID is unique from CVE-2018-8605, CVE-2018-8606, CVE-2018-8607.
CVSS Score: 5.4 (MEDIUM)
CWE: CWE-79
References: http://www.securityfocus.com/bid/105892; https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2018-8608; http://www.securityfocus.com/bid/105892
CVE: CVE-2018-8609
Published: 2018-11-14
Description: A remote code execution vulnerability exists in Microsoft Dynamics 365 (on-premises) version 8 when the server fails to properly sanitize web requests to an affected Dynamics server, aka "Microsoft Dynamics 365 (on-premises) version 8 Remote Code Execution Vulnerability." This affects Microsoft Dynamics 365.
CVSS Score: 8.8 (HIGH)
CWE: CWE-116
References: http://www.securityfocus.com/bid/105894; https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2018-8609; http://www.securityfocus.com/bid/105894
CVE: CVE-2018-19186
Published: 2018-11-14
Description: The Amazon PAYFORT payfort-php-SDK payment gateway SDK through 2018-04-26 has XSS via the route.php paymentMethod parameter.
CVSS Score: 6.1 (MEDIUM)
CWE: CWE-79
References: https://www.seekurity.com/blog/general/payfort-multiple-security-issues-and-concerns-in-a-supposed-to-be-pci-dss-compliant-payment-processor-sdk; https://www.seekurity.com/blog/general/payfort-multiple-security-issues-and-concerns-in-a-supposed-to-be-pci-dss-compliant-payment-processor-sdk
CVE: CVE-2018-19187
Published: 2018-11-14
Description: The Amazon PAYFORT payfort-php-SDK payment gateway SDK through 2018-04-26 has XSS via an arbitrary parameter name or value that is mishandled in a success.php echo statement.
CVSS Score: 6.1 (MEDIUM)
CWE: CWE-79
References: http://www.securityfocus.com/bid/105930; https://www.seekurity.com/blog/general/payfort-multiple-security-issues-and-concerns-in-a-supposed-to-be-pci-dss-compliant-payment-processor-sdk; http://www.securityfocus.com/bid/105930
CVE: CVE-2018-19188
Published: 2018-11-14
Description: The Amazon PAYFORT payfort-php-SDK payment gateway SDK through 2018-04-26 has XSS via the success.php fort_id parameter.
CVSS Score: 6.1 (MEDIUM)
CWE: CWE-79
References: http://www.securityfocus.com/bid/105930; https://github.com/payfort/payfort-php-sdk/issues/12; https://www.seekurity.com/blog/general/payfort-multiple-security-issues-and-concerns-in-a-supposed-to-be-pci-dss-compliant-payment-processor-sdk
CVE: CVE-2018-19189
Published: 2018-11-14
Description: The Amazon PAYFORT payfort-php-SDK payment gateway SDK through 2018-04-26 has XSS via an arbitrary parameter name or value that is mishandled in an error.php echo statement.
CVSS Score: 6.1 (MEDIUM)
CWE: CWE-79
References: http://www.securityfocus.com/bid/105930; https://www.seekurity.com/blog/general/payfort-multiple-security-issues-and-concerns-in-a-supposed-to-be-pci-dss-compliant-payment-processor-sdk; http://www.securityfocus.com/bid/105930
CVE: CVE-2018-19190
Published: 2018-11-14
Description: The Amazon PAYFORT payfort-php-SDK payment gateway SDK through 2018-04-26 has XSS via the error.php error_msg parameter.
CVSS Score: 6.1 (MEDIUM)
CWE: CWE-79
References: http://www.securityfocus.com/bid/105930; https://www.seekurity.com/blog/general/payfort-multiple-security-issues-and-concerns-in-a-supposed-to-be-pci-dss-compliant-payment-processor-sdk; http://www.securityfocus.com/bid/105930
CVE: CVE-2018-19270
Published: 2018-11-14
Description: Rejected reason: DO NOT USE THIS CANDIDATE NUMBER.  ConsultIDs: CVE-2018-16276.  Reason: This candidate is a reservation duplicate of CVE-2018-16276.  Notes: All CVE users should reference CVE-2018-16276 instead of this candidate.  All references and descriptions in this candidate have been removed to prevent accidental usage
CVE: CVE-2018-19271
Published: 2018-11-14
Description: Centreon 3.4.x (fixed in Centreon 18.10.0 and Centreon web 2.8.28) allows SQL Injection via the main.php searchH parameter.
CVSS Score: 8.8 (HIGH)
CWE: CWE-89
References: http://www.rootlabs.com.br/authenticated-sql-injection-in-centreon-3-4-x/; https://documentation.centreon.com/docs/centreon/en/latest/release_notes/centreon-18.10/centreon-18.10.0.html; https://documentation.centreon.com/docs/centreon/en/latest/release_notes/centreon-2.8/centreon-2.8.28.html
CVE: CVE-2018-19277
Published: 2018-11-14
Description: securityScan() in PHPOffice PhpSpreadsheet through 1.5.0 allows a bypass of protection mechanisms for XXE via UTF-7 encoding in a .xlsx file
CVSS Score: 8.8 (HIGH)
CWE: CWE-91
References: https://github.com/MewesK/TwigSpreadsheetBundle/issues/18; https://github.com/PHPOffice/PhpSpreadsheet/issues/771; https://www.bishopfox.com/news/2018/11/phpoffice-versions/
CVE: CVE-2018-12174
Published: 2018-11-14
Description: Heap overflow in Intel Trace Analyzer 2018 in Intel Parallel Studio XE 2018 Update 3 may allow an authenticated user to potentially escalate privileges via local access.
CVSS Score: 7.8 (HIGH)
CWE: CWE-787
References: http://www.securityfocus.com/bid/106038; https://www.intel.com/content/www/us/en/security-center/advisory/INTEL-SA-00180.html; http://www.securityfocus.com/bid/106038
CVE: CVE-2018-3621
Published: 2018-11-14
Description: Insufficient input validation in the Intel Driver & Support Assistant before 3.6.0.4 may allow an unauthenticated user to potentially enable information disclosure via adjacent access.
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-200
References: https://www.intel.com/content/www/us/en/security-center/advisory/INTEL-SA-00187.html; https://www.intel.com/content/www/us/en/security-center/advisory/INTEL-SA-00187.html
CVE: CVE-2018-3635
Published: 2018-11-14
Description: Insufficient input validation in installer in Intel Rapid Store Technology (RST) before version 16.7 may allow an unprivileged user to potentially elevate privileges or cause an installer denial of service via local access.
CVSS Score: 7.8 (HIGH)
CWE: CWE-269
References: http://seclists.org/fulldisclosure/2021/Mar/55; http://www.securityfocus.com/bid/105984; https://www.intel.com/content/www/us/en/security-center/advisory/INTEL-SA-00153.html
CVE: CVE-2018-3696
Published: 2018-11-14
Description: Authentication bypass in the Intel RAID Web Console 3 for Windows before 4.186 may allow an unprivileged user to potentially gain administrative privileges via local access.
CVSS Score: 5.5 (MEDIUM)
CWE: CWE-287
References: http://www.securityfocus.com/bid/106028; https://www.intel.com/content/www/us/en/security-center/advisory/INTEL-SA-00196.html; http://www.securityfocus.com/bid/106028
CVE: CVE-2018-3697
Published: 2018-11-14
Description: Improper directory permissions in the installer for the Intel Media Server Studio may allow unprivileged users to potentially enable an escalation of privilege via local access.
CVSS Score: 7.8 (HIGH)
CWE: CWE-732
References: http://www.securityfocus.com/bid/106025; https://www.intel.com/content/www/us/en/security-center/advisory/INTEL-SA-00197.html; http://www.securityfocus.com/bid/106025
CVE: CVE-2018-3698
Published: 2018-11-14
Description: Improper file permissions in the installer for the Intel Ready Mode Technology may allow an unprivileged user to potentially gain privileged access via local access.
CVSS Score: 7.8 (HIGH)
References: http://www.securityfocus.com/bid/105995; https://www.intel.com/content/www/us/en/security-center/advisory/INTEL-SA-00198.html; http://www.securityfocus.com/bid/105995
CVE: CVE-2018-3699
Published: 2018-11-14
Description: Cross-site scripting in the Intel RAID Web Console v3 for Windows may allow an unauthenticated user to elevate privilege via remote access.
CVSS Score: 6.1 (MEDIUM)
CWE: CWE-79
References: http://www.securityfocus.com/bid/105992; https://www.intel.com/content/www/us/en/security-center/advisory/INTEL-SA-00199.html; http://www.securityfocus.com/bid/105992
CVE: CVE-2018-17462
Published: 2018-11-14
Description: Incorrect refcounting in AppCache in Google Chrome prior to 70.0.3538.67 allowed a remote attacker to perform a sandbox escape via a crafted HTML page.
CVSS Score: 9.6 (CRITICAL)
CWE: CWE-416
References: http://www.securityfocus.com/bid/105666; https://access.redhat.com/errata/RHSA-2018:3004; https://chromereleases.googleblog.com/2018/10/stable-channel-update-for-desktop.html
CVE: CVE-2018-17463
Published: 2018-11-14
Description: Incorrect side effect annotation in V8 in Google Chrome prior to 70.0.3538.64 allowed a remote attacker to execute arbitrary code inside a sandbox via a crafted HTML page.
CVSS Score: 8.8 (HIGH)
References: http://packetstormsecurity.com/files/156640/Google-Chrome-67-68-69-Object.create-Type-Confusion.html; http://www.securityfocus.com/bid/105666; https://access.redhat.com/errata/RHSA-2018:3004
CVE: CVE-2018-17464
Published: 2018-11-14
Description: Incorrect handling of history on iOS in Navigation in Google Chrome prior to 70.0.3538.67 allowed a remote attacker to spoof the contents of the Omnibox (URL bar) via a crafted HTML page.
CVSS Score: 4.3 (MEDIUM)
References: http://www.securityfocus.com/bid/105666; https://access.redhat.com/errata/RHSA-2018:3004; https://chromereleases.googleblog.com/2018/10/stable-channel-update-for-desktop.html
CVE: CVE-2018-17465
Published: 2018-11-14
Description: Incorrect implementation of object trimming in V8 in Google Chrome prior to 70.0.3538.67 allowed a remote attacker to potentially exploit object corruption via a crafted HTML page.
CVSS Score: 8.8 (HIGH)
CWE: CWE-416
References: http://www.securityfocus.com/bid/105666; https://access.redhat.com/errata/RHSA-2018:3004; https://chromereleases.googleblog.com/2018/10/stable-channel-update-for-desktop.html
CVE: CVE-2018-17466
Published: 2018-11-14
Description: Incorrect texture handling in Angle in Google Chrome prior to 70.0.3538.67 allowed a remote attacker to perform an out of bounds memory read via a crafted HTML page.
CVSS Score: 8.8 (HIGH)
CWE: CWE-125
References: http://www.securityfocus.com/bid/105666; http://www.securityfocus.com/bid/106168; https://access.redhat.com/errata/RHSA-2018:3004
CVE: CVE-2018-17467
Published: 2018-11-14
Description: Insufficiently quick clearing of stale rendered content in Navigation in Google Chrome prior to 70.0.3538.67 allowed a remote attacker to spoof the contents of the Omnibox (URL bar) via a crafted HTML page.
CVSS Score: 4.3 (MEDIUM)
CWE: CWE-459
References: http://www.securityfocus.com/bid/105666; https://access.redhat.com/errata/RHSA-2018:3004; https://chromereleases.googleblog.com/2018/10/stable-channel-update-for-desktop.html