CVE-2017-5103
- EPSS 1.16%
- Published 27.10.2017 05:29:02
- Last modified 20.04.2025 01:37:25
Use of an uninitialized value in Skia in Google Chrome prior to 60.0.3112.78 for Linux, Windows, and Mac allowed a remote attacker to obtain potentially sensitive information from process memory via a crafted HTML page.
CVE-2017-5104
- EPSS 1.16%
- Published 27.10.2017 05:29:02
- Last modified 20.04.2025 01:37:25
Inappropriate implementation in interstitials in Google Chrome prior to 60.0.3112.78 for Mac allowed a remote attacker to spoof the contents of the omnibox via a crafted HTML page.
CVE-2017-5105
- EPSS 1.16%
- Published 27.10.2017 05:29:02
- Last modified 20.04.2025 01:37:25
Insufficient Policy Enforcement in Omnibox in Google Chrome prior to 60.0.3112.78 for Mac, Windows, Linux, and Android allowed a remote attacker to perform domain spoofing via IDN homographs in a crafted domain name.
CVE-2017-5106
- EPSS 1.16%
- Published 27.10.2017 05:29:02
- Last modified 20.04.2025 01:37:25
Insufficient Policy Enforcement in Omnibox in Google Chrome prior to 60.0.3112.78 for Mac, Windows, Linux, and Android allowed a remote attacker to perform domain spoofing via IDN homographs in a crafted domain name.
CVE-2017-5107
- EPSS 0.59%
- Published 27.10.2017 05:29:02
- Last modified 20.04.2025 01:37:25
A timing attack in SVG rendering in Google Chrome prior to 60.0.3112.78 for Linux, Windows, and Mac allowed a remote attacker to extract pixel values from a cross-origin page being iframe'd via a crafted HTML page.
CVE-2017-5108
- EPSS 0.84%
- Published 27.10.2017 05:29:02
- Last modified 20.04.2025 01:37:25
Type confusion in PDFium in Google Chrome prior to 60.0.3112.78 for Mac, Windows, Linux, and Android allowed a remote attacker to potentially maliciously modify objects via a crafted PDF file.
CVE-2017-5109
- EPSS 1.16%
- Published 27.10.2017 05:29:02
- Last modified 20.04.2025 01:37:25
Inappropriate implementation of unload handler handling in permission prompts in Google Chrome prior to 60.0.3112.78 for Linux, Windows, and Mac allowed a remote attacker to display UI on a non attacker controlled tab via a crafted HTML page.
CVE-2017-5110
- EPSS 1.07%
- Published 27.10.2017 05:29:02
- Last modified 20.04.2025 01:37:25
Inappropriate implementation of the web payments API on blob: and data: schemes in Web Payments in Google Chrome prior to 60.0.3112.78 for Mac, Windows, Linux, and Android allowed a remote attacker to spoof the contents of the Omnibox via a crafted H...
CVE-2017-5111
- EPSS 1.48%
- Published 27.10.2017 05:29:02
- Last modified 20.04.2025 01:37:25
A use after free in PDFium in Google Chrome prior to 61.0.3163.79 for Linux, Windows, and Mac allowed a remote attacker to potentially exploit memory corruption via a crafted PDF file.
CVE-2017-5113
- EPSS 1.27%
- Published 27.10.2017 05:29:02
- Last modified 20.04.2025 01:37:25
Math overflow in Skia in Google Chrome prior to 61.0.3163.79 for Mac, Windows, and Linux, and 61.0.3163.81 for Android, allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page.