An use after free flaw was found in the V8 component of the Chromium browser.
Upstream bug(s):
https://code.google.com/p/chromium/issues/detail?id=870226
External References:
https://chromereleases.googleblog.com/2018/10/stable-channel-update-for-desktop.html
Lack of special casing of Android ashmem in Google Chrome prior to 65.0.3325.146 allowed a remote attacker who had compromised the renderer process to bypass inter-process read only guarantees via a crafted HTML page.
A heap buffer overflow flaw was found in the Skia component of the Chromium browser.
Upstream bug(s):
https://code.google.com/p/chromium/issues/detail?id=780104
External References:
https://chromereleases.googleblog.com/2018/03/stable-channel-update-for-desktop.html
An use after free flaw was found in the Blink component of the Chromium browser.
Upstream bug(s):
https://code.google.com/p/chromium/issues/detail?id=780919
External References:
https://chromereleases.googleblog.com/2018/03/stable-channel-update-for-desktop.html
A race condition flaw was found in the V8 component of the Chromium browser.
Upstream bug(s):
https://code.google.com/p/chromium/issues/detail?id=794091
External References:
https://chromereleases.googleblog.com/2018/03/stable-channel-update-for-desktop.html
Failure to disallow PWA installation from CSP sandboxed pages in AppManifest in Google Chrome prior to 65.0.3325.146 allowed a remote attacker to access privileged APIs via a crafted HTML page.
Including port 22 in the list of allowed FTP ports in Networking in Google Chrome prior to 65.0.3325.146 allowed a remote attacker to potentially enumerate internal host services via a crafted HTML page.
An information disclosure flaw was found in the IPC call component of the Chromium browser.
Upstream bug(s):
https://code.google.com/p/chromium/issues/detail?id=792028
External References:
https://chromereleases.googleblog.com/2018/03/stable-channel-update-for-desktop.html
A password fields not taking advantage of os protections flaw was found in the Views component of the Chromium browser.
Upstream bug(s):
https://code.google.com/p/chromium/issues/detail?id=818133
External References:
https://chromereleases.googleblog.com/2018/05/stable-channel-update-for-desktop58.html
An information disclosure via texture data flaw was found in the WebGL component of the Chromium browser.
Upstream bug(s):
https://code.google.com/p/chromium/issues/detail?id=788448
External References:
https://chromereleases.googleblog.com/2018/03/stable-channel-update-for-desktop.html
An url spoof flaw was found in the OmniBox component of the Chromium browser.
Upstream bug(s):
https://code.google.com/p/chromium/issues/detail?id=793628
External References:
https://chromereleases.googleblog.com/2018/03/stable-channel-update-for-desktop.html
An out of bounds memory access flaw was found in the PDFium component of the Chromium browser.
Upstream bug(s):
https://code.google.com/p/chromium/issues/detail?id=828049
External References:
https://chromereleases.googleblog.com/2018/05/stable-channel-update-for-desktop58.html
Displacement map filters being applied to cross-origin images in Blink SVG rendering in Google Chrome prior to 65.0.3325.146 allowed a remote attacker to leak cross-origin data via a crafted HTML page.
An out of bounds memory access flaw was found in the V8 component of the Chromium browser.
Upstream bug(s):
https://code.google.com/p/chromium/issues/detail?id=843022
External References:
https://chromereleases.googleblog.com/2018/05/stable-channel-update-for-desktop58.html
A heap buffer overflow flaw was found in the Skia component of the Chromium browser.
Upstream bug(s):
https://code.google.com/p/chromium/issues/detail?id=796107
External References:
https://chromereleases.googleblog.com/2018/05/stable-channel-update-for-desktop58.html
A restrictions bypass flaw was found in the the debugger extension API component of the Chromium browser.
Upstream bug(s):
https://code.google.com/p/chromium/issues/detail?id=798222
External References:
https://chromereleases.googleblog.com/2018/05/stable-channel-update-for-desktop58.html
A leak of visited status of page flaw was found in the Blink component of the Chromium browser.
Upstream bug(s):
https://code.google.com/p/chromium/issues/detail?id=835589
External References:
https://chromereleases.googleblog.com/2018/05/stable-channel-update-for-desktop58.html
An url spoof flaw was found in the Omnibox component of the Chromium browser.
Upstream bug(s):
https://code.google.com/p/chromium/issues/detail?id=756735
External References:
https://chromereleases.googleblog.com/2017/12/stable-channel-update-for-desktop.html
An insufficient blocking of javascript flaw was found in the Omnibox component of the Chromium browser.
Upstream bug(s):
https://code.google.com/p/chromium/issues/detail?id=768910
External References:
https://chromereleases.googleblog.com/2017/12/stable-channel-update-for-desktop.html
Lack of CSP enforcement on WebUI pages in Bink in Google Chrome prior to 65.0.3325.146 allowed an attacker who convinced a user to install a malicious extension to bypass content security policy via a crafted Chrome Extension.
An ui spoofing flaw was found in the Blink component of the Chromium browser.
Upstream bug(s):
https://code.google.com/p/chromium/issues/detail?id=823353
External References:
https://chromereleases.googleblog.com/2018/05/stable-channel-update-for-desktop58.html
An url spoof flaw was found in the Omnibox component of the Chromium browser.
Upstream bug(s):
https://code.google.com/p/chromium/issues/detail?id=756456
External References:
https://chromereleases.googleblog.com/2017/12/stable-channel-update-for-desktop.html
An url spoof flaw was found in the Omnibox component of the Chromium browser.
Upstream bug(s):
https://code.google.com/p/chromium/issues/detail?id=817247
External References:
https://chromereleases.googleblog.com/2018/05/stable-channel-update-for-desktop58.html
An url spoof flaw was found in the Omnibox component of the Chromium browser.
Upstream bug(s):
https://code.google.com/p/chromium/issues/detail?id=756226
External References:
https://chromereleases.googleblog.com/2017/12/stable-channel-update-for-desktop.html
An issue with spake implementation flaw was found in the BoringSSL component of the Chromium browser.
Upstream bug(s):
https://code.google.com/p/chromium/issues/detail?id=778101
External References:
https://chromereleases.googleblog.com/2017/12/stable-channel-update-for-desktop.html
A buffer overflow flaw was found in the Skia component of the Chromium browser.
Upstream bug(s):
https://code.google.com/p/chromium/issues/detail?id=779428
External References:
https://chromereleases.googleblog.com/2018/03/stable-channel-update-for-desktop.html
An integer overflow flaw was found in the V8 component of the Chromium browser.
Upstream bug(s):
https://code.google.com/p/chromium/issues/detail?id=808192
External References:
https://chromereleases.googleblog.com/2018/03/stable-channel-update-for-desktop.html
An url spoofing flaw was found in the Omnibox component of the Chromium browser.
Upstream bug(s):
https://code.google.com/p/chromium/issues/detail?id=777419
External References:
https://chromereleases.googleblog.com/2017/12/stable-channel-update-for-desktop.html
A type confusion flaw was found in the V8 component of the Chromium browser.
Upstream bug(s):
https://code.google.com/p/chromium/issues/detail?id=798644
External References:
https://chromereleases.googleblog.com/2018/03/stable-channel-update-for-desktop.html
A cross origin leak of redirect url flaw was found in the Blink component of the Chromium browser.
Upstream bug(s):
https://code.google.com/p/chromium/issues/detail?id=780312
External References:
https://chromereleases.googleblog.com/2017/12/stable-channel-update-for-desktop.html