Opensuse

Backports

96 vulnerabilities found.

Hinweis: Diese Liste kann unvollständig sein. Daten werden ohne Gewähr im Ursprungsformat bereitgestellt.
6.5

CVE-2019-5830

  • EPSS 0.87%
  • Published 27.06.2019 17:15:15
  • Last modified 21.11.2024 04:45:35

Insufficient policy enforcement in CORS in Google Chrome prior to 75.0.3770.80 allowed a remote attacker to leak cross-origin data via a crafted HTML page.

8.8

CVE-2019-5831

  • EPSS 2.15%
  • Published 27.06.2019 17:15:15
  • Last modified 21.11.2024 04:45:36

Object lifecycle issue in V8 in Google Chrome prior to 75.0.3770.80 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page.

6.5

CVE-2019-5832

  • EPSS 1.13%
  • Published 27.06.2019 17:15:15
  • Last modified 21.11.2024 04:45:36

Insufficient policy enforcement in XMLHttpRequest in Google Chrome prior to 75.0.3770.80 allowed a remote attacker to leak cross-origin data via a crafted HTML page.

4.3

CVE-2019-5833

  • EPSS 0.78%
  • Published 27.06.2019 17:15:15
  • Last modified 21.11.2024 04:45:36

Incorrect dialog box scoping in browser in Google Chrome on Android prior to 75.0.3770.80 allowed a remote attacker to display misleading security UI via a crafted HTML page.

6.5

CVE-2019-5834

  • EPSS 0.44%
  • Published 27.06.2019 17:15:15
  • Last modified 21.11.2024 04:45:36

Insufficient data validation in Blink in Google Chrome prior to 75.0.3770.80 allowed a remote attacker to perform domain spoofing via a crafted HTML page.

6.5

CVE-2019-5835

  • EPSS 0.5%
  • Published 27.06.2019 17:15:15
  • Last modified 21.11.2024 04:45:36

Object lifecycle issue in SwiftShader in Google Chrome prior to 75.0.3770.80 allowed a remote attacker to potentially perform out of bounds memory access via a crafted HTML page.

8.8

CVE-2019-5836

  • EPSS 2.04%
  • Published 27.06.2019 17:15:15
  • Last modified 21.11.2024 04:45:36

Heap buffer overflow in ANGLE in Google Chrome prior to 75.0.3770.80 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page.

6.5

CVE-2019-5837

  • EPSS 1.13%
  • Published 27.06.2019 17:15:15
  • Last modified 21.11.2024 04:45:36

Resource size information leakage in Blink in Google Chrome prior to 75.0.3770.80 allowed a remote attacker to leak cross-origin data via a crafted HTML page.

4.3

CVE-2019-5838

  • EPSS 0.47%
  • Published 27.06.2019 17:15:15
  • Last modified 21.11.2024 04:45:36

Insufficient policy enforcement in extensions API in Google Chrome prior to 75.0.3770.80 allowed an attacker who convinced a user to install a malicious extension to bypass restrictions on file URIs via a crafted Chrome Extension.

8.8

CVE-2019-5813

  • EPSS 1.75%
  • Published 27.06.2019 17:15:14
  • Last modified 21.11.2024 04:45:33

Use after free in V8 in Google Chrome prior to 74.0.3729.108 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page.