CVE List
Id | CVE No. | Status | Description | Phase | Votes | Comments | Actions |
---|---|---|---|---|---|---|---|
101830 | CVE-2017-5010 | Candidate | Blink in Google Chrome prior to 56.0.2924.76 for Linux, Windows and Mac, and 56.0.2924.87 for Android, resolved promises in an inappropriate context, which allowed a remote attacker to inject arbitrary scripts or HTML (UXSS) via a crafted HTML page. | Assigned (20170102) | None (candidate not yet proposed) | View | |
101831 | CVE-2017-5011 | Candidate | Google Chrome prior to 56.0.2924.76 for Windows insufficiently sanitized DevTools URLs, which allowed a remote attacker who convinced a user to install a malicious extension to read filesystem contents via a crafted HTML page. | Assigned (20170102) | None (candidate not yet proposed) | View | |
101832 | CVE-2017-5012 | Candidate | A heap buffer overflow in V8 in Google Chrome prior to 56.0.2924.76 for Linux, Windows and Mac, and 56.0.2924.87 for Android, allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. | Assigned (20170102) | None (candidate not yet proposed) | View | |
101833 | CVE-2017-5013 | Candidate | Google Chrome prior to 56.0.2924.76 for Linux incorrectly handled new tab page navigations in non-selected tabs, which allowed a remote attacker to spoof the contents of the Omnibox (URL bar) via a crafted HTML page. | Assigned (20170102) | None (candidate not yet proposed) | View | |
101834 | CVE-2017-5014 | Candidate | Heap buffer overflow during image processing in Skia in Google Chrome prior to 56.0.2924.76 for Linux, Windows and Mac, and 56.0.2924.87 for Android, allowed a remote attacker to perform an out of bounds memory read via a crafted HTML page. | Assigned (20170102) | None (candidate not yet proposed) | View |
Page 19736 of 20943, showing 5 records out of 104715 total, starting on record 98676, ending on 98680