CVE-2018-6158
- EPSS 1.38%
- Published 09.01.2019 19:29:10
- Last modified 21.11.2024 04:10:11
A race condition in Oilpan in Google Chrome prior to 68.0.3440.75 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page.
CVE-2018-6162
- EPSS 1.61%
- Published 09.01.2019 19:29:10
- Last modified 21.11.2024 04:10:11
Improper deserialization in WebGL in Google Chrome on Mac prior to 68.0.3440.75 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page.
CVE-2018-6163
- EPSS 0.96%
- Published 09.01.2019 19:29:10
- Last modified 21.11.2024 04:10:11
Incorrect handling of confusable characters in URL Formatter in Google Chrome prior to 68.0.3440.75 allowed a remote attacker to perform domain spoofing via IDN homographs via a crafted domain name.
CVE-2018-6164
- EPSS 0.99%
- Published 09.01.2019 19:29:10
- Last modified 21.11.2024 04:10:12
Insufficient origin checks for CSS content in Blink in Google Chrome prior to 68.0.3440.75 allowed a remote attacker to leak cross-origin data via a crafted HTML page.
CVE-2018-6165
- EPSS 0.96%
- Published 09.01.2019 19:29:10
- Last modified 21.11.2024 04:10:12
Incorrect handling of reloads in Navigation in Google Chrome prior to 68.0.3440.75 allowed a remote attacker to spoof the contents of the Omnibox (URL bar) via a crafted HTML page.
CVE-2018-6166
- EPSS 0.96%
- Published 09.01.2019 19:29:10
- Last modified 21.11.2024 04:10:12
Incorrect handling of confusable characters in URL Formatter in Google Chrome prior to 68.0.3440.75 allowed a remote attacker to perform domain spoofing via IDN homographs via a crafted domain name.
CVE-2018-6167
- EPSS 0.96%
- Published 09.01.2019 19:29:10
- Last modified 21.11.2024 04:10:12
Incorrect handling of confusable characters in URL Formatter in Google Chrome prior to 68.0.3440.75 allowed a remote attacker to perform domain spoofing via IDN homographs via a crafted domain name.
CVE-2018-6169
- EPSS 0.82%
- Published 09.01.2019 19:29:10
- Last modified 21.11.2024 04:10:12
Lack of timeout on extension install prompt in Extensions in Google Chrome prior to 68.0.3440.75 allowed a remote attacker to trigger installation of an unwanted extension via a crafted HTML page.
CVE-2018-6170
- EPSS 1.66%
- Published 09.01.2019 19:29:10
- Last modified 21.11.2024 04:10:12
A bad cast in PDFium in Google Chrome prior to 68.0.3440.75 allowed a remote attacker to potentially exploit heap corruption via a crafted PDF file.
CVE-2018-6172
- EPSS 0.96%
- Published 09.01.2019 19:29:10
- Last modified 21.11.2024 04:10:13
Incorrect handling of confusable characters in URL Formatter in Google Chrome prior to 68.0.3440.75 allowed a remote attacker to perform domain spoofing via IDN homographs via a crafted domain name.