Your submission was sent successfully! Close

Thank you for contacting us. A member of our team will be in touch shortly. Close

You have successfully unsubscribed! Close

Thank you for signing up for our newsletter!
In these regular emails you will find the latest updates about Ubuntu and upcoming events where you can meet our team.Close

Search CVE reports

Toggle filters

161 – 170 of 878 results

CVE-2018-17463

Medium priority

Some fixes available 3 of 4

Incorrect side effect annotation in V8 in Google Chrome prior to 70.0.3538.64 allowed a remote attacker to execute arbitrary code inside a sandbox via a crafted HTML page.

2 affected packages

chromium-browser, oxide-qt

Package 24.04 LTS 22.04 LTS 20.04 LTS 18.04 LTS 16.04 LTS
chromium-browser — — — Fixed Fixed
oxide-qt — — — Not in release Ignored
Show less packages

CVE-2018-17462

Medium priority

Some fixes available 3 of 4

Incorrect refcounting in AppCache in Google Chrome prior to 70.0.3538.67 allowed a remote attacker to perform a sandbox escape via a crafted HTML page.

2 affected packages

chromium-browser, oxide-qt

Package 24.04 LTS 22.04 LTS 20.04 LTS 18.04 LTS 16.04 LTS
chromium-browser — — — Fixed Fixed
oxide-qt — — — Not in release Ignored
Show less packages

CVE-2018-17466

Medium priority

Some fixes available 11 of 12

Incorrect texture handling in Angle in Google Chrome prior to 70.0.3538.67 allowed a remote attacker to perform an out of bounds memory read via a crafted HTML page.

4 affected packages

chromium-browser, firefox, oxide-qt, thunderbird

Package 24.04 LTS 22.04 LTS 20.04 LTS 18.04 LTS 16.04 LTS
chromium-browser — — — Fixed Fixed
firefox — — — Fixed Fixed
oxide-qt — — — Not in release Ignored
thunderbird — — — Fixed Fixed
Show less packages

CVE-2018-19212

Low priority
Needs evaluation

In libwebm through 2018-10-03, there is an abort caused by libwebm::Webm2Pes::InitWebmParser() that will lead to a DoS attack.

5 affected packages

android, chromium-browser, libvpx, oxide-qt, sludge

Package 24.04 LTS 22.04 LTS 20.04 LTS 18.04 LTS 16.04 LTS
android Not in release Not in release Not in release Not in release Needs evaluation
chromium-browser Not affected Not affected Not affected Not affected Not affected
libvpx Not affected Not affected Not affected Not affected Not affected
oxide-qt Not in release Not in release Not in release Not in release Needs evaluation
sludge Needs evaluation Needs evaluation Needs evaluation Needs evaluation Needs evaluation
Show less packages

CVE-2018-6119

Medium priority

Some fixes available 3 of 4

Incorrect security UI in Omnibox in Google Chrome prior to 64.0.3282.119 allowed a remote attacker to spoof the contents of the Omnibox (URL bar) via a crafted HTML page.

2 affected packages

chromium-browser, oxide-qt

Package 24.04 LTS 22.04 LTS 20.04 LTS 18.04 LTS 16.04 LTS
chromium-browser — — — Fixed Fixed
oxide-qt — — — Not in release Ignored
Show less packages

CVE-2018-6055

Medium priority

Some fixes available 3 of 4

Insufficient policy enforcement in Catalog Service in Google Chrome prior to 64.0.3282.119 allowed a remote attacker to potentially run arbitrary code outside sandbox via a crafted HTML page.

2 affected packages

chromium-browser, oxide-qt

Package 24.04 LTS 22.04 LTS 20.04 LTS 18.04 LTS 16.04 LTS
chromium-browser — — — Fixed Fixed
oxide-qt — — — Not in release Ignored
Show less packages

CVE-2018-6054

Low priority

Some fixes available 5 of 7

Use after free in WebUI in Google Chrome prior to 64.0.3282.119 allowed a remote attacker to potentially exploit heap corruption via a crafted Chrome Extension.

2 affected packages

chromium-browser, oxide-qt

Package 24.04 LTS 22.04 LTS 20.04 LTS 18.04 LTS 16.04 LTS
chromium-browser — — — Fixed Fixed
oxide-qt — — — Not in release Ignored
Show less packages

CVE-2018-6053

Low priority

Some fixes available 5 of 7

Inappropriate implementation in New Tab Page in Google Chrome prior to 64.0.3282.119 allowed a local attacker to view website thumbnail images after clearing browser data via a crafted HTML page.

2 affected packages

chromium-browser, oxide-qt

Package 24.04 LTS 22.04 LTS 20.04 LTS 18.04 LTS 16.04 LTS
chromium-browser — — — Fixed Fixed
oxide-qt — — — Not in release Ignored
Show less packages

CVE-2018-6052

Low priority

Some fixes available 5 of 7

Lack of support for a non standard no-referrer policy value in Blink in Google Chrome prior to 64.0.3282.119 allowed a remote attacker to obtain referrer details from a web page that had thought it had opted out of sending referrer data.

2 affected packages

chromium-browser, oxide-qt

Package 24.04 LTS 22.04 LTS 20.04 LTS 18.04 LTS 16.04 LTS
chromium-browser — — — Fixed Fixed
oxide-qt — — — Not in release Ignored
Show less packages

CVE-2018-6051

Low priority

Some fixes available 5 of 7

XSS Auditor in Google Chrome prior to 64.0.3282.119, did not ensure the reporting URL was in the same origin as the page it was on, which allowed a remote attacker to obtain referrer details via a crafted HTML page.

2 affected packages

chromium-browser, oxide-qt

Package 24.04 LTS 22.04 LTS 20.04 LTS 18.04 LTS 16.04 LTS
chromium-browser — — — Fixed Fixed
oxide-qt — — — Not in release Ignored
Show less packages
  1. Previous page
  2. 15
  3. 16
  4. 17
  5. 18
  6. 19
  7. Next page
Export to JSON