Lack of special casing of Android ashmem in Google Chrome prior to 65.0.3325.146 allowed a remote attacker who had compromised the renderer process to bypass inter-process read only guarantees via a crafted HTML page.

An use after free flaw was found in the Blink component of the Chromium browser.

Upstream bug(s):

https://code.google.com/p/chromium/issues/detail?id=780919

External References:

https://chromereleases.googleblog.com/2018/03/stable-channel-update-for-desktop.html

Failure to disallow PWA installation from CSP sandboxed pages in AppManifest in Google Chrome prior to 65.0.3325.146 allowed a remote attacker to access privileged APIs via a crafted HTML page.

A xss flaw was found in the interstitials component of the Chromium browser.

Upstream bug(s):

https://code.google.com/p/chromium/issues/detail?id=797525

External References:

https://chromereleases.googleblog.com/2018/03/stable-channel-update-for-desktop.html

An information disclosure flaw was found in the IPC call component of the Chromium browser.

Upstream bug(s):

https://code.google.com/p/chromium/issues/detail?id=792028

External References:

https://chromereleases.googleblog.com/2018/03/stable-channel-update-for-desktop.html

An information disclosure via texture data flaw was found in the WebGL component of the Chromium browser.

Upstream bug(s):

https://code.google.com/p/chromium/issues/detail?id=788448

External References:

https://chromereleases.googleblog.com/2018/03/stable-channel-update-for-desktop.html

An url spoof flaw was found in the OmniBox component of the Chromium browser.

Upstream bug(s):

https://code.google.com/p/chromium/issues/detail?id=793628

External References:

https://chromereleases.googleblog.com/2018/03/stable-channel-update-for-desktop.html

Failure to apply Mark-of-the-Web in Downloads in Google Chrome prior to 65.0.3325.146 allowed a remote attacker to bypass OS level controls via a crafted HTML page.

A heap buffer overflow in WebGL in Google Chrome prior to 65.0.3325.146 allowed a remote attacker to perform an out of bounds memory write via a crafted HTML page.

An integer overflow flaw was found in the PDFium component of the Chromium browser.

Upstream bug(s):

https://code.google.com/p/chromium/issues/detail?id=791048

External References:

https://chromereleases.googleblog.com/2018/03/stable-channel-update-for-desktop.html

An url spoof flaw was found in the Omnibox component of the Chromium browser.

Upstream bug(s):

https://code.google.com/p/chromium/issues/detail?id=756735

External References:

https://chromereleases.googleblog.com/2017/12/stable-channel-update-for-desktop.html

An insufficient blocking of javascript flaw was found in the Omnibox component of the Chromium browser.

Upstream bug(s):

https://code.google.com/p/chromium/issues/detail?id=768910

External References:

https://chromereleases.googleblog.com/2017/12/stable-channel-update-for-desktop.html

Lack of CSP enforcement on WebUI pages in Bink in Google Chrome prior to 65.0.3325.146 allowed an attacker who convinced a user to install a malicious extension to bypass content security policy via a crafted Chrome Extension.

A stack buffer overflow flaw was found in the Skia component of the Chromium browser.

Upstream bug(s):

https://code.google.com/p/chromium/issues/detail?id=799918

External References:

https://chromereleases.googleblog.com/2018/03/stable-channel-update-for-desktop.html

An url spoof flaw was found in the Omnibox component of the Chromium browser.

Upstream bug(s):

https://code.google.com/p/chromium/issues/detail?id=756456

External References:

https://chromereleases.googleblog.com/2017/12/stable-channel-update-for-desktop.html

An url spoof flaw was found in the Omnibox component of the Chromium browser.

Upstream bug(s):

https://code.google.com/p/chromium/issues/detail?id=756226

External References:

https://chromereleases.googleblog.com/2017/12/stable-channel-update-for-desktop.html

An issue with spake implementation flaw was found in the BoringSSL component of the Chromium browser.

Upstream bug(s):

https://code.google.com/p/chromium/issues/detail?id=778101

External References:

https://chromereleases.googleblog.com/2017/12/stable-channel-update-for-desktop.html

A buffer overflow flaw was found in the Skia component of the Chromium browser.

Upstream bug(s):

https://code.google.com/p/chromium/issues/detail?id=779428

External References:

https://chromereleases.googleblog.com/2018/03/stable-channel-update-for-desktop.html

Lack of CORS checking by ResourceFetcher/ResourceLoader in Blink in Google Chrome prior to 65.0.3325.146 allowed a remote attacker to leak cross-origin data via a crafted HTML page.

An url spoofing flaw was found in the Omnibox component of the Chromium browser.

Upstream bug(s):

https://code.google.com/p/chromium/issues/detail?id=777419

External References:

https://chromereleases.googleblog.com/2017/12/stable-channel-update-for-desktop.html

A cross origin leak of redirect url flaw was found in the Blink component of the Chromium browser.

Upstream bug(s):

https://code.google.com/p/chromium/issues/detail?id=780312

External References:

https://chromereleases.googleblog.com/2017/12/stable-channel-update-for-desktop.html

An use of uninitialized value flaw was found in the Skia component of the Chromium browser.

Upstream bug(s):

https://code.google.com/p/chromium/issues/detail?id=765858

External References:

https://chromereleases.googleblog.com/2017/12/stable-channel-update-for-desktop.html

A cross origin information disclosure flaw was found in the Skia component of the Chromium browser.

Upstream bug(s):

https://code.google.com/p/chromium/issues/detail?id=699028

External References:

https://chromereleases.googleblog.com/2017/12/stable-channel-update-for-desktop.html

Incorrect use of mojo::WrapSharedMemoryHandle in Mojo in Google Chrome prior to 65.0.3325.146 allowed a remote attacker who had compromised the renderer process to perform an out of bounds memory write via a crafted HTML page.

An out of bounds read flaw was found in the Blink component of the Chromium browser.

Upstream bug(s):

https://code.google.com/p/chromium/issues/detail?id=779314

External References:

https://chromereleases.googleblog.com/2017/12/stable-channel-update-for-desktop.html

A type confusion flaw was found in the WebAssembly component of the Chromium browser.

Upstream bug(s):

https://code.google.com/p/chromium/issues/detail?id=766666

External References:

https://chromereleases.googleblog.com/2017/12/stable-channel-update-for-desktop.html

A pointer information disclosure flaw was found in the IPC call component of the Chromium browser.

Upstream bug(s):

https://code.google.com/p/chromium/issues/detail?id=765512

External References:

https://chromereleases.googleblog.com/2017/12/stable-channel-update-for-desktop.html

An use after free flaw was found in the PDFium component of the Chromium browser.

Upstream bug(s):

https://code.google.com/p/chromium/issues/detail?id=770148

External References:

https://chromereleases.googleblog.com/2017/12/stable-channel-update-for-desktop.html

An use after free flaw was found in the PDFium component of the Chromium browser.

Upstream bug(s):

https://code.google.com/p/chromium/issues/detail?id=765921

External References:

https://chromereleases.googleblog.com/2017/12/stable-channel-update-for-desktop.html

A heap buffer overflow flaw was found in the PDFium component of the Chromium browser.

Upstream bug(s):

https://code.google.com/p/chromium/issues/detail?id=762374

External References:

https://chromereleases.googleblog.com/2017/12/stable-channel-update-for-desktop.html