CVE List
Id | CVE No. | Status | Description | Phase | Votes | Comments | Actions |
---|---|---|---|---|---|---|---|
101835 | CVE-2017-5015 | Candidate | Google Chrome prior to 56.0.2924.76 for Linux, Windows and Mac, and 56.0.2924.87 for Android, incorrectly handled Unicode glyphs, which allowed a remote attacker to perform domain spoofing via IDN homographs in a crafted domain name. | Assigned (20170102) | None (candidate not yet proposed) | View | |
101834 | CVE-2017-5014 | Candidate | Heap buffer overflow during image processing in Skia in Google Chrome prior to 56.0.2924.76 for Linux, Windows and Mac, and 56.0.2924.87 for Android, allowed a remote attacker to perform an out of bounds memory read via a crafted HTML page. | Assigned (20170102) | None (candidate not yet proposed) | View | |
101833 | CVE-2017-5013 | Candidate | Google Chrome prior to 56.0.2924.76 for Linux incorrectly handled new tab page navigations in non-selected tabs, which allowed a remote attacker to spoof the contents of the Omnibox (URL bar) via a crafted HTML page. | Assigned (20170102) | None (candidate not yet proposed) | View | |
101832 | CVE-2017-5012 | Candidate | A heap buffer overflow in V8 in Google Chrome prior to 56.0.2924.76 for Linux, Windows and Mac, and 56.0.2924.87 for Android, allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. | Assigned (20170102) | None (candidate not yet proposed) | View | |
101831 | CVE-2017-5011 | Candidate | Google Chrome prior to 56.0.2924.76 for Windows insufficiently sanitized DevTools URLs, which allowed a remote attacker who convinced a user to install a malicious extension to read filesystem contents via a crafted HTML page. | Assigned (20170102) | None (candidate not yet proposed) | View |
Page 577 of 20943, showing 5 records out of 104715 total, starting on record 2881, ending on 2885