Where
-Infinity
0

Trending

Last week
Last month
Last year

Versions

6.0
44

debian/chromiumIncorrect handling of Reflect.construct in V8 in Google Chrome prior to 71.0.3578.80 allowed a remot…

Risk 79
Severity
8.8
CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

An out of bounds read flaw was found in the V8 component of the Chromium browser.

Upstream bug(s):

https://code.google.com/p/chromium/issues/detail?id=907714

External References:

https://chromereleases.googleblog.com/2018/12/stable-channel-update-for-desktop.html

1 / 2
Source: Red Hat
First published (updated )
CVE-2018-18359

debian/chromiumIncorrect handling of alert box display in Blink in Google Chrome prior to 71.0.3578.80 allowed a re…

Risk 38
Severity
6.5
CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:N

An incorrect security ui flaw was found in the Blink component of the Chromium browser.

Upstream bug(s):

https://code.google.com/p/chromium/issues/detail?id=606104

External References:

https://chromereleases.googleblog.com/2018/12/stable-channel-update-for-desktop.html

1 / 2
Source: Red Hat
First published (updated )
CVE-2018-18346

debian/chromiumInput Validation

Risk 79
Severity
8.8
Input Validation
CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

An inappropriate implementation flaw was found in the Navigation component of the Chromium browser.

Upstream bug(s):

https://code.google.com/p/chromium/issues/detail?id=850824

External References:

https://chromereleases.googleblog.com/2018/12/stable-channel-update-for-desktop.html

1 / 2
Source: Red Hat
First published (updated )
CVE-2018-18347

debian/chromiumUse After Free

Risk 79
Severity
8.8
Use After Free
CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

An use after free flaw was found in the MediaRecorder component of the Chromium browser.

Upstream bug(s):

https://code.google.com/p/chromium/issues/detail?id=896736

External References:

https://chromereleases.googleblog.com/2018/12/stable-channel-update-for-desktop.html

1 / 2
Source: Red Hat
First published (updated )
CVE-2018-18340

debian/chromiumBuffer Overflow, Integer Overflow

Risk 79
Severity
8.8
Buffer Overflow, Integer Overflow
CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

A heap buffer overflow flaw was found in the Blink component of the Chromium browser.

Upstream bug(s):

https://code.google.com/p/chromium/issues/detail?id=901030

External References:

https://chromereleases.googleblog.com/2018/12/stable-channel-update-for-desktop.html

1 / 2
Source: Red Hat
First published (updated )
CVE-2018-18341

debian/chromiumUse After Free

Risk 79
Severity
8.8
Use After Free
CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

An use after free flaw was found in the Skia component of the Chromium browser.

Upstream bug(s):

https://code.google.com/p/chromium/issues/detail?id=882423

External References:

https://chromereleases.googleblog.com/2018/12/stable-channel-update-for-desktop.html

1 / 2
Source: Red Hat
First published (updated )
CVE-2018-18343

debian/chromiumUse After Free

Risk 79
Severity
8.8
Use After Free
CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

An use after free flaw was found in the Blink component of the Chromium browser.

Upstream bug(s):

https://code.google.com/p/chromium/issues/detail?id=886753

External References:

https://chromereleases.googleblog.com/2018/12/stable-channel-update-for-desktop.html

1 / 2
Source: Red Hat
First published (updated )
CVE-2018-18337

debian/chromiumUse After Free

Risk 79
Severity
8.8
Use After Free
CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

An use after free flaw was found in the PDFium component of the Chromium browser.

Upstream bug(s):

https://code.google.com/p/chromium/issues/detail?id=898531

External References:

https://chromereleases.googleblog.com/2018/12/stable-channel-update-for-desktop.html

1 / 2
Source: Red Hat
First published (updated )
CVE-2018-18336

debian/chromiumBuffer Overflow

Risk 79
Severity
8.8
Buffer Overflow
CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

A heap buffer overflow flaw was found in the Canvas component of the Chromium browser.

Upstream bug(s):

https://code.google.com/p/chromium/issues/detail?id=890576

External References:

https://chromereleases.googleblog.com/2018/12/stable-channel-update-for-desktop.html

1 / 2
Source: Red Hat
First published (updated )
CVE-2018-18338

debian/chromiumUse After Free

Risk 79
Severity
8.8
Use After Free
CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

An use after free flaw was found in the WebAudio component of the Chromium browser.

Upstream bug(s):

https://code.google.com/p/chromium/issues/detail?id=891187

External References:

https://chromereleases.googleblog.com/2018/12/stable-channel-update-for-desktop.html

1 / 2
Source: Red Hat
First published (updated )
CVE-2018-18339

debian/chromiumUse After Free

Risk 79
Severity
8.8
Use After Free
CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

An use after frees flaw was found in the PDFium component of the Chromium browser.

Upstream bug(s):

https://code.google.com/p/chromium/issues/detail?id=901654

External References:

https://chromereleases.googleblog.com/2018/12/stable-channel-update-for-desktop.html

1 / 2
Source: Red Hat
First published (updated )
CVE-2018-17481

debian/chromium-browserInput Validation

Risk 22
Severity
4.3
Input Validation
CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N

Object lifecycle issue in Chrome Custom Tab in Google Chrome prior to 65.0.3325.146 allowed a remote attacker to spoof the contents of the Omnibox (URL bar) via a crafted HTML page.

First published (updated )
CVE-2018-6068

debian/chromium-browserIncorrect handling of confusable characters in Omnibox in Google Chrome prior to 70.0.3538.67 allowe…

Risk 23
Severity
4.3
CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N

An url spoof flaw was found in the Omnibox component of the Chromium browser.

Upstream bug(s):

https://code.google.com/p/chromium/issues/detail?id=882078

External References:

https://chromereleases.googleblog.com/2018/10/stable-channel-update-for-desktop.html

1 / 2
Source: Red Hat
First published (updated )
CVE-2018-17473

debian/chromium-browserBuffer Overflow

Risk 79
Severity
8.8
Buffer Overflow
CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

A heap buffer overflow flaw was found in the PDFium component of the Chromium browser.

Upstream bug(s):

https://code.google.com/p/chromium/issues/detail?id=880675

External References:

https://chromereleases.googleblog.com/2018/10/stable-channel-update-for-desktop.html

1 / 2
Source: Red Hat
First published (updated )
CVE-2018-17469

debian/chromium-browserIncorrect handling of history on iOS in Navigation in Google Chrome prior to 70.0.3538.67 allowed a …

Risk 23
Severity
4.3
CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N

An url spoof flaw was found in the Omnibox component of the Chromium browser.

Upstream bug(s):

https://code.google.com/p/chromium/issues/detail?id=887273

External References:

https://chromereleases.googleblog.com/2018/10/stable-channel-update-for-desktop.html

1 / 2
Source: Red Hat
First published (updated )
CVE-2018-17464

debian/chromium-browserUse After Free

Risk 82
Severity
9.6
Use After Free
CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:H

A sandbox escape flaw was found in the AppCache component of the Chromium browser.

Upstream bug(s):

https://code.google.com/p/chromium/issues/detail?id=888926

External References:

https://chromereleases.googleblog.com/2018/10/stable-channel-update-for-desktop.html

1 / 2
Source: Red Hat
First published (updated )
CVE-2018-17462

debian/chromium-browserUse after free in Disk Cache

Risk 79
Severity
8.8
Use After Free
CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

A double-eviction in the Incognito mode cache that lead to a user-after-free in Networking Disk Cache in Google Chrome prior to 66.0.3359.117 allowed a remote attacker to execute arbitrary code via a crafted HTML page.

1 / 2
First published (updated )
CVE-2018-6086

debian/chromium-browserUse after free in Disk Cache

Risk 79
Severity
8.8
Use After Free
CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

An use after free flaw was found in the Disk Cache component of the Chromium browser.

Upstream bug(s):

https://code.google.com/p/chromium/issues/detail?id=826626

External References:

https://chromereleases.googleblog.com/2018/04/stable-channel-update-for-desktop.html

1 / 2
Source: Red Hat
First published (updated )
CVE-2018-6085

debian/chromium-browserUse after free in PDFium

Risk 79
Severity
8.8
Input Validation, Use After Free
CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

An iterator-invalidation bug in PDFium in Google Chrome prior to 66.0.3359.117 allowed a remote attacker to execute arbitrary code inside a sandbox via a crafted PDF file.

1 / 2
First published (updated )
CVE-2018-6088

debian/chromium-browserIncorrect low memory handling in WebAssembly

Risk 38
Severity
6.5
Null Pointer Dereference
CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H

A nullptr dereference in WebAssembly in Google Chrome prior to 66.0.3359.117 allowed a remote attacker to potentially perform out of bounds memory access via a crafted HTML page.

1 / 2
First published (updated )
CVE-2018-6116

debian/chromium-browserHeap buffer overflow in Skia

Risk 79
Severity
8.8
Integer Overflow, Buffer Overflow
CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

A heap buffer overflow flaw was found in the Skia component of the Chromium browser.

Upstream bug(s):

https://code.google.com/p/chromium/issues/detail?id=820913

External References:

https://chromereleases.googleblog.com/2018/04/stable-channel-update-for-desktop.html

1 / 2
Source: Red Hat
First published (updated )
CVE-2018-6090

debian/chromium-browserURL spoof in Omnibox

Risk 38
Severity
6.5
CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:N

An url spoof flaw was found in the Omnibox component of the Chromium browser.

Upstream bug(s):

https://code.google.com/p/chromium/issues/detail?id=820068

External References:

https://chromereleases.googleblog.com/2018/04/stable-channel-update-for-desktop.html

1 / 2
Source: Red Hat
First published (updated )
CVE-2018-6104

debian/chromium-browserInteger overflow in WebAssembly

Risk 79
Severity
8.8
Integer Overflow
CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

An integer overflow flaw was found in the WebAssembly component of the Chromium browser.

Upstream bug(s):

https://code.google.com/p/chromium/issues/detail?id=819869

External References:

https://chromereleases.googleblog.com/2018/04/stable-channel-update-for-desktop.html

1 / 2
Source: Red Hat
First published (updated )
CVE-2018-6092

debian/chromium-browserXSS

Risk 39
Severity
6.1
XSS
CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N

A xss flaw was found in the interstitials component of the Chromium browser.

Upstream bug(s):

https://code.google.com/p/chromium/issues/detail?id=797525

External References:

https://chromereleases.googleblog.com/2018/03/stable-channel-update-for-desktop.html

1 / 2
Source: Red Hat
First published (updated )
CVE-2018-6081

debian/chromium-browserInput Validation

Risk 79
Severity
8.8
Input Validation
CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

Failure to apply Mark-of-the-Web in Downloads in Google Chrome prior to 65.0.3325.146 allowed a remote attacker to bypass OS level controls via a crafted HTML page.

1 / 2
First published (updated )
CVE-2018-6074

debian/chromium-browserXSS

Risk 39
Severity
6.1
XSS
CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N

An incorrect handling of url fragment identifiers flaw was found in the Blink component of the Chromium browser.

Upstream bug(s):

https://code.google.com/p/chromium/issues/detail?id=758523

External References:

https://chromereleases.googleblog.com/2018/03/stable-channel-update-for-desktop.html

1 / 2
Source: Red Hat
First published (updated )
CVE-2018-6076

debian/chromium-browserInfoleak

Risk 38
Severity
6.5
Infoleak
CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N

Incorrect handling of specified filenames in file downloads in Google Chrome prior to 65.0.3325.146 allowed a remote attacker to leak cross-origin data via a crafted HTML page and user interaction.

1 / 2
First published (updated )
CVE-2018-6075

debian/chromium-browserInteger Overflow, Use After Free

Risk 79
Severity
8.8
Integer Overflow, Use After Free
CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

An integer overflow flaw was found in the PDFium component of the Chromium browser.

Upstream bug(s):

https://code.google.com/p/chromium/issues/detail?id=791048

External References:

https://chromereleases.googleblog.com/2018/03/stable-channel-update-for-desktop.html

1 / 2
Source: Red Hat
First published (updated )
CVE-2018-6072

debian/chromium-browserBuffer Overflow

Risk 79
Severity
8.8
Buffer Overflow
CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

A heap buffer overflow in WebGL in Google Chrome prior to 65.0.3325.146 allowed a remote attacker to perform an out of bounds memory write via a crafted HTML page.

1 / 2
First published (updated )
CVE-2018-6073

debian/chromium-browserBuffer Overflow

Risk 38
Severity
6.5
Buffer Overflow
CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N

A stack buffer overflow flaw was found in the Skia component of the Chromium browser.

Upstream bug(s):

https://code.google.com/p/chromium/issues/detail?id=799918

External References:

https://chromereleases.googleblog.com/2018/03/stable-channel-update-for-desktop.html

1 / 2
Source: Red Hat
First published (updated )
CVE-2018-6069

Company

Resources

Contact

SecAlerts Pty Ltd.
132 Wickham Terrace
Fortitude Valley,
QLD 4006, Australia
info@secalerts.co
By using SecAlerts services, you agree to our services end-user license agreement. This website is safeguarded by reCAPTCHA and governed by the Google Privacy Policy and Terms of Service. All names, logos, and brands of products are owned by their respective owners, and any usage of these names, logos, and brands for identification purposes only does not imply endorsement. If you possess any content that requires removal, please get in touch with us.
© 2026 SecAlerts Pty Ltd.
ABN: 70 645 966 203, ACN: 645 966 203