CVE List

Id CVE No. Status Description Phase Votes Comments Actions
101835  CVE-2017-5015  Candidate  Google Chrome prior to 56.0.2924.76 for Linux, Windows and Mac, and 56.0.2924.87 for Android, incorrectly handled Unicode glyphs, which allowed a remote attacker to perform domain spoofing via IDN homographs in a crafted domain name.  Assigned (20170102)  None (candidate not yet proposed)    View
101834  CVE-2017-5014  Candidate  Heap buffer overflow during image processing in Skia in Google Chrome prior to 56.0.2924.76 for Linux, Windows and Mac, and 56.0.2924.87 for Android, allowed a remote attacker to perform an out of bounds memory read via a crafted HTML page.  Assigned (20170102)  None (candidate not yet proposed)    View
101833  CVE-2017-5013  Candidate  Google Chrome prior to 56.0.2924.76 for Linux incorrectly handled new tab page navigations in non-selected tabs, which allowed a remote attacker to spoof the contents of the Omnibox (URL bar) via a crafted HTML page.  Assigned (20170102)  None (candidate not yet proposed)    View
101832  CVE-2017-5012  Candidate  A heap buffer overflow in V8 in Google Chrome prior to 56.0.2924.76 for Linux, Windows and Mac, and 56.0.2924.87 for Android, allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page.  Assigned (20170102)  None (candidate not yet proposed)    View
101831  CVE-2017-5011  Candidate  Google Chrome prior to 56.0.2924.76 for Windows insufficiently sanitized DevTools URLs, which allowed a remote attacker who convinced a user to install a malicious extension to read filesystem contents via a crafted HTML page.  Assigned (20170102)  None (candidate not yet proposed)    View

Page 577 of 20943, showing 5 records out of 104715 total, starting on record 2881, ending on 2885

Actions