CVE-2018-17463
- EPSS 91.08%
- Published 14.11.2018 15:29:00
- Last modified 20.02.2025 18:05:36
Incorrect side effect annotation in V8 in Google Chrome prior to 70.0.3538.64 allowed a remote attacker to execute arbitrary code inside a sandbox via a crafted HTML page.
CVE-2018-17465
- EPSS 1.62%
- Published 14.11.2018 15:29:00
- Last modified 21.11.2024 03:54:28
Incorrect implementation of object trimming in V8 in Google Chrome prior to 70.0.3538.67 allowed a remote attacker to potentially exploit object corruption via a crafted HTML page.
CVE-2018-17466
- EPSS 1.05%
- Published 14.11.2018 15:29:00
- Last modified 21.11.2024 03:54:28
Incorrect texture handling in Angle in Google Chrome prior to 70.0.3538.67 allowed a remote attacker to perform an out of bounds memory read via a crafted HTML page.
CVE-2018-17467
- EPSS 0.95%
- Published 14.11.2018 15:29:00
- Last modified 21.11.2024 03:54:29
Insufficiently quick clearing of stale rendered content in Navigation in Google Chrome prior to 70.0.3538.67 allowed a remote attacker to spoof the contents of the Omnibox (URL bar) via a crafted HTML page.
CVE-2018-17468
- EPSS 0.97%
- Published 14.11.2018 15:29:00
- Last modified 21.11.2024 03:54:29
Incorrect handling of timer information during navigation in Blink in Google Chrome prior to 70.0.3538.67 allowed a remote attacker to obtain cross origin URLs via a crafted HTML page.
CVE-2018-17471
- EPSS 0.87%
- Published 14.11.2018 15:29:00
- Last modified 21.11.2024 03:54:29
Incorrect dialog placement in WebContents in Google Chrome prior to 70.0.3538.67 allowed a remote attacker to obscure the full screen warning via a crafted HTML page.
CVE-2018-17472
- EPSS 1.04%
- Published 14.11.2018 15:29:00
- Last modified 21.11.2024 03:54:29
Incorrect handling of googlechrome:// URL scheme on iOS in Intents in Google Chrome prior to 70.0.3538.67 allowed a remote attacker to escape the <iframe> sandbox via a crafted HTML page.
CVE-2018-17474
- EPSS 1.38%
- Published 14.11.2018 15:29:00
- Last modified 21.11.2024 03:54:29
Use after free in HTMLImportsController in Blink in Google Chrome prior to 70.0.3538.67 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page.
CVE-2018-17475
- EPSS 0.95%
- Published 14.11.2018 15:29:00
- Last modified 21.11.2024 03:54:30
Incorrect handling of history on iOS in Navigation in Google Chrome prior to 70.0.3538.67 allowed a remote attacker to spoof the contents of the Omnibox (URL bar) via a crafted HTML page.
CVE-2018-17476
- EPSS 0.95%
- Published 14.11.2018 15:29:00
- Last modified 21.11.2024 03:54:30
Incorrect dialog placement in Cast UI in Google Chrome prior to 70.0.3538.67 allowed a remote attacker to obscure the full screen warning via a crafted HTML page.