Lack of special casing of Android ashmem in Google Chrome prior to 65.0.3325.146 allowed a remote attacker who had compromised the renderer process to bypass inter-process read only guarantees via a crafted HTML page.
A heap buffer overflow flaw was found in the Skia component of the Chromium browser.
Upstream bug(s):
https://code.google.com/p/chromium/issues/detail?id=780104
External References:
https://chromereleases.googleblog.com/2018/03/stable-channel-update-for-desktop.html
An use after free flaw was found in the Blink component of the Chromium browser.
Upstream bug(s):
https://code.google.com/p/chromium/issues/detail?id=780919
External References:
https://chromereleases.googleblog.com/2018/03/stable-channel-update-for-desktop.html
A race condition flaw was found in the V8 component of the Chromium browser.
Upstream bug(s):
https://code.google.com/p/chromium/issues/detail?id=794091
External References:
https://chromereleases.googleblog.com/2018/03/stable-channel-update-for-desktop.html
Failure to disallow PWA installation from CSP sandboxed pages in AppManifest in Google Chrome prior to 65.0.3325.146 allowed a remote attacker to access privileged APIs via a crafted HTML page.
Including port 22 in the list of allowed FTP ports in Networking in Google Chrome prior to 65.0.3325.146 allowed a remote attacker to potentially enumerate internal host services via a crafted HTML page.
A xss flaw was found in the interstitials component of the Chromium browser.
Upstream bug(s):
https://code.google.com/p/chromium/issues/detail?id=797525
External References:
https://chromereleases.googleblog.com/2018/03/stable-channel-update-for-desktop.html
An information disclosure flaw was found in the IPC call component of the Chromium browser.
Upstream bug(s):
https://code.google.com/p/chromium/issues/detail?id=792028
External References:
https://chromereleases.googleblog.com/2018/03/stable-channel-update-for-desktop.html
A password fields not taking advantage of os protections flaw was found in the Views component of the Chromium browser.
Upstream bug(s):
https://code.google.com/p/chromium/issues/detail?id=818133
External References:
https://chromereleases.googleblog.com/2018/05/stable-channel-update-for-desktop58.html
An information disclosure via texture data flaw was found in the WebGL component of the Chromium browser.
Upstream bug(s):
https://code.google.com/p/chromium/issues/detail?id=788448
External References:
https://chromereleases.googleblog.com/2018/03/stable-channel-update-for-desktop.html
An url spoof flaw was found in the OmniBox component of the Chromium browser.
Upstream bug(s):
https://code.google.com/p/chromium/issues/detail?id=793628
External References:
https://chromereleases.googleblog.com/2018/03/stable-channel-update-for-desktop.html
An out of bounds memory access flaw was found in the PDFium component of the Chromium browser.
Upstream bug(s):
https://code.google.com/p/chromium/issues/detail?id=828049
External References:
https://chromereleases.googleblog.com/2018/05/stable-channel-update-for-desktop58.html
An incorrect escaping of mathml flaw was found in the Blink component of the Chromium browser.
Upstream bug(s):
https://code.google.com/p/chromium/issues/detail?id=805924
External References:
https://chromereleases.googleblog.com/2018/05/stable-channel-update-for-desktop58.html
Displacement map filters being applied to cross-origin images in Blink SVG rendering in Google Chrome prior to 65.0.3325.146 allowed a remote attacker to leak cross-origin data via a crafted HTML page.
An out of bounds memory access flaw was found in the V8 component of the Chromium browser.
Upstream bug(s):
https://code.google.com/p/chromium/issues/detail?id=843022
External References:
https://chromereleases.googleblog.com/2018/05/stable-channel-update-for-desktop58.html
An incorrect handling of url fragment identifiers flaw was found in the Blink component of the Chromium browser.
Upstream bug(s):
https://code.google.com/p/chromium/issues/detail?id=758523
External References:
https://chromereleases.googleblog.com/2018/03/stable-channel-update-for-desktop.html
An out of bounds memory access flaw was found in the V8 component of the Chromium browser.
Upstream bug(s):
https://code.google.com/p/chromium/issues/detail?id=837939
External References:
https://chromereleases.googleblog.com/2018/05/stable-channel-update-for-desktop58.html
A heap buffer overflow flaw was found in the Skia component of the Chromium browser.
Upstream bug(s):
https://code.google.com/p/chromium/issues/detail?id=796107
External References:
https://chromereleases.googleblog.com/2018/05/stable-channel-update-for-desktop58.html
Failure to apply Mark-of-the-Web in Downloads in Google Chrome prior to 65.0.3325.146 allowed a remote attacker to bypass OS level controls via a crafted HTML page.
Incorrect handling of specified filenames in file downloads in Google Chrome prior to 65.0.3325.146 allowed a remote attacker to leak cross-origin data via a crafted HTML page and user interaction.
A restrictions bypass flaw was found in the the debugger extension API component of the Chromium browser.
Upstream bug(s):
https://code.google.com/p/chromium/issues/detail?id=798222
External References:
https://chromereleases.googleblog.com/2018/05/stable-channel-update-for-desktop58.html
A heap buffer overflow in WebGL in Google Chrome prior to 65.0.3325.146 allowed a remote attacker to perform an out of bounds memory write via a crafted HTML page.
An integer overflow flaw was found in the PDFium component of the Chromium browser.
Upstream bug(s):
https://code.google.com/p/chromium/issues/detail?id=791048
External References:
https://chromereleases.googleblog.com/2018/03/stable-channel-update-for-desktop.html
An overly permissive policy flaw was found in the Extensions component of the Chromium browser.
Upstream bug(s):
https://code.google.com/p/chromium/issues/detail?id=810220
External References:
https://chromereleases.googleblog.com/2018/05/stable-channel-update-for-desktop58.html
A leak of visited status of page flaw was found in the Blink component of the Chromium browser.
Upstream bug(s):
https://code.google.com/p/chromium/issues/detail?id=835589
External References:
https://chromereleases.googleblog.com/2018/05/stable-channel-update-for-desktop58.html
A heap bufffer overflow flaw was found in the Skia component of the Chromium browser.
Upstream bug(s):
https://code.google.com/p/chromium/issues/detail?id=777318
External References:
https://chromereleases.googleblog.com/2018/03/stable-channel-update-for-desktop.html
An out of bounds memory access flaw was found in the V8 component of the Chromium browser.
Upstream bug(s):
https://code.google.com/p/chromium/issues/detail?id=831943
External References:
https://chromereleases.googleblog.com/2018/05/stable-channel-update-for-desktop58.html
An url spoof flaw was found in the Omnibox component of the Chromium browser.
Upstream bug(s):
https://code.google.com/p/chromium/issues/detail?id=756735
External References:
https://chromereleases.googleblog.com/2017/12/stable-channel-update-for-desktop.html
An insufficient blocking of javascript flaw was found in the Omnibox component of the Chromium browser.
Upstream bug(s):
https://code.google.com/p/chromium/issues/detail?id=768910
External References:
https://chromereleases.googleblog.com/2017/12/stable-channel-update-for-desktop.html
Lack of CSP enforcement on WebUI pages in Bink in Google Chrome prior to 65.0.3325.146 allowed an attacker who convinced a user to install a malicious extension to bypass content security policy via a crafted Chrome Extension.