CVE-2019-5818

chromium-browser: Uninitialized value in media reader

Uninitialized data in media in Google Chrome prior to 74.0.3729.108 allowed a remote attacker to obtain potentially sensitive information from process memory via a crafted video file.

CVSS 3.1 · 6.5 Medium EPSS 1.6% KEV · Not listed

Vendors

Debian Fedoraproject Google and 2 more

Products

Debian Linux Fedora Chrome and 3 more

CVE-2019-5817

chromium-browser: Heap buffer overflow in Angle on Windows

Heap buffer overflow in ANGLE in Google Chrome on Windows prior to 74.0.3729.108 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page.

CVSS 3.1 · 8.8 High EPSS 1.9% KEV · Not listed

Vendors

Debian Fedoraproject Google and 2 more

Products

Debian Linux Fedora Chrome and 3 more

CVE-2019-5816

chromium-browser: Exploit persistence extension on Android

Process lifetime issue in Chrome in Google Chrome on Android prior to 74.0.3729.108 allowed a remote attacker to potentially persist an exploited process via a crafted HTML page.

CVSS 3.1 · 8.8 High EPSS 1.6% KEV · Not listed

Vendors

Fedoraproject Google Opensuse

Products

Fedora Android Chrome and 2 more

CVE-2019-5814

chromium-browser: CORS bypass in Blink

Insufficient policy enforcement in Blink in Google Chrome prior to 74.0.3729.108 allowed a remote attacker to leak cross-origin data via a crafted HTML page.

CVSS 3.1 · 6.5 Medium EPSS < 1% KEV · Not listed

Vendors

Debian Fedoraproject Google and 2 more

Products

Debian Linux Fedora Chrome and 3 more

CVE-2019-5813

chromium-browser: Out of bounds read in V8

Use after free in V8 in Google Chrome prior to 74.0.3729.108 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page.

CVSS 3.1 · 8.8 High EPSS 1.3% KEV · Not listed

Vendors

Debian Fedoraproject Google and 2 more

Products

Debian Linux Fedora Chrome and 3 more

CVE-2019-5812

chromium-browser: URL spoof in Omnibox on iOS

Inadequate security UI in iOS UI in Google Chrome prior to 74.0.3729.108 allowed a remote attacker to perform domain spoofing via a crafted HTML page.

CVSS 3.1 · 6.5 Medium EPSS 1.4% KEV · Not listed

Vendors

Apple Fedoraproject Google

Products

Iphone Os Fedora Chrome

CVE-2019-5811

chromium-browser: CORS bypass in Blink

Incorrect handling of CORS in ServiceWorker in Google Chrome prior to 74.0.3729.108 allowed a remote attacker to bypass same origin policy via a crafted HTML page.

CVSS 3.1 · 8.8 High EPSS 1.2% KEV · Not listed

Vendors

Debian Fedoraproject Google and 2 more

Products

Debian Linux Fedora Chrome and 3 more

CVE-2019-5810

chromium-browser: User information disclosure in Autofill

Information leak in autofill in Google Chrome prior to 74.0.3729.108 allowed a remote attacker to obtain potentially sensitive information from process memory via a crafted HTML page.

CVSS 3.1 · 6.5 Medium EPSS 1.1% KEV · Not listed

Vendors

Debian Fedoraproject Google and 2 more

Products

Debian Linux Fedora Chrome and 3 more

CVE-2019-5809

chromium-browser: Use after free in Blink

Use after free in file chooser in Google Chrome prior to 74.0.3729.108 allowed a remote attacker who had compromised the renderer process to perform privilege escalation via a crafted HTML page.

CVSS 3.1 · 8.8 High EPSS 1.5% KEV · Not listed

Vendors

Debian Fedoraproject Google and 2 more

Products

Debian Linux Fedora Chrome and 3 more

CVE-2019-5808

chromium-browser: Use after free in Blink

Use after free in Blink in Google Chrome prior to 74.0.3729.108 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page.

CVSS 3.1 · 8.8 High EPSS 1.8% KEV · Not listed

Vendors

Debian Fedoraproject Google and 2 more

Products

Debian Linux Fedora Chrome and 3 more

CVE-2019-5807

chromium-browser: Memory corruption in V8

Object lifetime issue in V8 in Google Chrome prior to 74.0.3729.108 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page.

CVSS 3.1 · 8.8 High EPSS 1.4% KEV · Not listed

Vendors

Debian Fedoraproject Google and 2 more

Products

Debian Linux Fedora Chrome and 3 more

CVE-2019-5806

chromium-browser: Integer overflow in Angle

Integer overflow in ANGLE in Google Chrome on Windows prior to 74.0.3729.108 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page.

CVSS 3.1 · 8.8 High EPSS 1.3% KEV · Not listed

Vendors

Debian Fedoraproject Google and 3 more

Products

Debian Linux Fedora Chrome and 4 more

CVE-2019-5805

chromium-browser: Use after free in PDFium

Use-after-free in PDFium in Google Chrome prior to 74.0.3729.108 allowed a remote attacker to potentially exploit heap corruption via a crafted PDF file.

CVSS 3.1 · 6.5 Medium EPSS 1.5% KEV · Not listed

Vendors

Debian Fedoraproject Google and 2 more

Products

Debian Linux Fedora Chrome and 3 more

CVE-2019-5782

chromium-browser: Inappropriate implementation in V8

Incorrect optimization assumptions in V8 in Google Chrome prior to 72.0.3626.81 allowed a remote attacker to execute arbitrary code inside a sandbox via a crafted HTML page.

CVSS 3.0 · 8.8 High EPSS 13.4% KEV · Not listed

Vendors

Debian Fedoraproject Google and 1 more

Products

Debian Linux Fedora Chrome and 4 more

CVE-2019-5781

chromium-browser: Insufficient policy enforcement in Omnibox

Incorrect handling of a confusable character in Omnibox in Google Chrome prior to 72.0.3626.81 allowed a remote attacker to spoof the contents of the Omnibox (URL bar) via a crafted domain name.

CVSS 3.0 · 6.5 Medium EPSS 1.5% KEV · Not listed

Vendors

Debian Fedoraproject Google and 1 more

Products

Debian Linux Fedora Chrome and 4 more

CVE-2019-5780

chromium-browser: Insufficient policy enforcement

Insufficient restrictions on what can be done with Apple Events in Google Chrome on macOS prior to 72.0.3626.81 allowed a local attacker to execute JavaScript via Apple Events.

CVSS 3.0 · 7.8 High EPSS < 1% KEV · Not listed

Vendors

Apple Debian Fedoraproject and 2 more

Products

Macos Debian Linux Fedora and 5 more

CVE-2019-5779

chromium-browser: Insufficient policy enforcement in ServiceWorker

Insufficient policy validation in ServiceWorker in Google Chrome prior to 72.0.3626.81 allowed a remote attacker to bypass navigation restrictions via a crafted HTML page.

CVSS 3.0 · 4.3 Medium EPSS 2.6% KEV · Not listed

Vendors

Debian Fedoraproject Google and 1 more

Products

Debian Linux Fedora Chrome and 4 more

CVE-2019-5778

chromium-browser: Insufficient policy enforcement in Extensions

A missing case for handling special schemes in permission request checks in Extensions in Google Chrome prior to 72.0.3626.81 allowed an attacker who convinced a user to install a malicious extension to bypass extension permission checks for privileged pages via a crafted Chrome Extension.

CVSS 3.0 · 6.5 Medium EPSS 1.0% KEV · Not listed

Vendors

Debian Fedoraproject Google and 1 more

Products

Debian Linux Fedora Chrome and 4 more

CVE-2019-5777

chromium-browser: Insufficient policy enforcement in Omnibox

Incorrect handling of a confusable character in Omnibox in Google Chrome prior to 72.0.3626.81 allowed a remote attacker to spoof the contents of the Omnibox (URL bar) via a crafted domain name.

CVSS 3.0 · 6.5 Medium EPSS 1.5% KEV · Not listed

Vendors

Debian Fedoraproject Google and 1 more

Products

Debian Linux Fedora Chrome and 4 more

CVE-2019-5776

chromium-browser: Insufficient policy enforcement in Omnibox

Incorrect handling of a confusable character in Omnibox in Google Chrome prior to 72.0.3626.81 allowed a remote attacker to spoof the contents of the Omnibox (URL bar) via a crafted domain name.

CVSS 3.0 · 6.5 Medium EPSS 1.5% KEV · Not listed

Vendors

Debian Fedoraproject Google and 1 more

Products

Debian Linux Fedora Chrome and 4 more