Redhat Enterprise Linux Desktop Supplementary vulnerabilities, page 5
84 vulnerabilities
Known vulnerabilities in Redhat Enterprise Linux Desktop Supplementary, newest first, with CVSS severity, EPSS, KEV listings, ransomware use and the affected versions.
HighCVE-2014-3189ubuntu · chromium-browser +5 moreubuntu chromium-browserThe chrome_pdf::CopyImage function in pdf/draw_utils.cc in the PDFium component in Google Chrome before 38.0.2125.101 does not properly validate image-data dimensions, which allows remote attackers to cause a denial of service (out-of-bounds read) or possibly have unspecified other impact via unknown vectors.EPSS1.30%HighCVE-2014-3191ubuntu · chromium-browser +6 moreubuntu chromium-browserUse-after-free vulnerability in Blink, as used in Google Chrome before 38.0.2125.101, allows remote attackers to cause a denial of service or possibly have unspecified other impact via crafted JavaScript code that triggers a widget-position update that improperly interacts with the render tree, related to the FrameView::updateLayoutAndStyleForPainting function in core/frame/FrameView.cpp and the RenderLayerScrollableArea::setScrollOffset function in core/rendering/RenderLayerScrollableArea.cpp.EPSS1.51%HighCVE-2014-3193ubuntu · chromium-browser +5 moreubuntu chromium-browserThe SessionService::GetLastSession function in browser/sessions/session_service.cc in Google Chrome before 38.0.2125.101 allows remote attackers to cause a denial of service (use-after-free) or possibly have unspecified other impact via vectors that leverage "type confusion" for callback processing.EPSS1.68%HighCVE-2014-3192apple · iphone_os +10 moreapple iphone_osUse-after-free vulnerability in the ProcessingInstruction::setXSLStyleSheet function in core/dom/ProcessingInstruction.cpp in the DOM implementation in Blink, as used in Google Chrome before 38.0.2125.101, allows remote attackers to cause a denial of service or possibly have unspecified other impact via unknown vectors.EPSS1.75%