Redhat Linux Desktop vulnerabilities, page 2
44 vulnerabilities
Known vulnerabilities in Redhat Linux Desktop, newest first, with CVSS severity, EPSS, KEV listings, ransomware use and the affected versions.
CVE-2018-6075ubuntuchromium-browser+6
EPSS score1.48%
Incorrect handling of specified filenames in file downloads in Google Chrome prior to 65.0.3325.146 allowed a remote attacker to leak cross-origin data via a crafted HTML page and user interaction.CVE-2018-6071ubuntuchromium-browser+6EPSS score1.48%
An integer overflow in Skia in Google Chrome prior to 65.0.3325.146 allowed a remote attacker to perform an out of bounds memory read via a crafted HTML page.CVE-2018-6090ubuntuchromium-browser+6EPSS score3.27%
An integer overflow that lead to a heap buffer-overflow in Skia in Google Chrome prior to 66.0.3359.117 allowed a remote attacker to execute arbitrary code inside a sandbox via a crafted HTML page.CVE-2018-6076ubuntuchromium-browser+6EPSS score1.16%
Insufficient encoding of URL fragment identifiers in Blink in Google Chrome prior to 65.0.3325.146 allowed a remote attacker to perform a DOM based XSS attack via a crafted HTML page.CVE-2018-6069ubuntuchromium-browser+6EPSS score1.55%
Stack buffer overflow in Skia in Google Chrome prior to 65.0.3325.146 allowed a remote attacker to perform an out of bounds memory read via a crafted HTML page.CVE-2018-6085ubuntuchromium-browser+6EPSS score3.56%
Re-entry of a destructor in Networking Disk Cache in Google Chrome prior to 66.0.3359.117 allowed a remote attacker to execute arbitrary code via a crafted HTML page.CVE-2018-6116ubuntuchromium-browser+6EPSS score1.40%
A nullptr dereference in WebAssembly in Google Chrome prior to 66.0.3359.117 allowed a remote attacker to potentially perform out of bounds memory access via a crafted HTML page.CVE-2018-6081ubuntuchromium-browser+6EPSS score0.88%
XSS vulnerabilities in Interstitials in Google Chrome prior to 65.0.3325.146 allowed an attacker who convinced a user to install a malicious extension or open Developer Console to inject arbitrary scripts or HTML via a crafted HTML page.CVE-2018-6104ubuntuchromium-browser+6EPSS score1.39%
Incorrect handling of confusable characters in URL Formatter in Google Chrome prior to 66.0.3359.117 allowed a remote attacker to perform domain spoofing via IDN homographs via a crafted domain name.CVE-2018-6108ubuntuchromium-browser+6EPSS score1.45%
Incorrect handling of confusable characters in URL Formatter in Google Chrome prior to 66.0.3359.117 allowed a remote attacker to perform domain spoofing via IDN homographs via a crafted HTML page.CVE-2018-6103ubuntuchromium-browser+6EPSS score1.49%
A stagnant permission prompt in Prompts in Google Chrome prior to 66.0.3359.117 allowed a remote attacker to bypass permission policy via a crafted HTML page.CVE-2018-6087ubuntuchromium-browser+6EPSS score3.45%
A use-after-free in WebAssembly in Google Chrome prior to 66.0.3359.117 allowed a remote attacker to execute arbitrary code inside a sandbox via a crafted HTML page.CVE-2018-6099ubuntuchromium-browser+6EPSS score1.60%
A lack of CORS checks in Blink in Google Chrome prior to 66.0.3359.117 allowed a remote attacker to leak limited cross-origin data via a crafted HTML page.CVE-2018-6094ubuntuchromium-browser+6EPSS score1.62%
Inline metadata in GarbageCollection in Google Chrome prior to 66.0.3359.117 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page.CVE-2018-6073ubuntuchromium-browser+6EPSS score1.79%
A heap buffer overflow in WebGL in Google Chrome prior to 65.0.3325.146 allowed a remote attacker to perform an out of bounds memory write via a crafted HTML page.CVE-2018-6068ubuntuchromium-browser+6EPSS score0.97%
Object lifecycle issue in Chrome Custom Tab in Google Chrome prior to 65.0.3325.146 allowed a remote attacker to spoof the contents of the Omnibox (URL bar) via a crafted HTML page.CVE-2018-6086ubuntuchromium-browser+6EPSS score3.35%
A double-eviction in the Incognito mode cache that lead to a user-after-free in Networking Disk Cache in Google Chrome prior to 66.0.3359.117 allowed a remote attacker to execute arbitrary code via a crafted HTML page.CVE-2018-6066ubuntuchromium-browser+6EPSS score2.80%
Lack of CORS checking by ResourceFetcher/ResourceLoader in Blink in Google Chrome prior to 65.0.3325.146 allowed a remote attacker to leak cross-origin data via a crafted HTML page.CVE-2018-6095ubuntuchromium-browser+6EPSS score1.57%
Inappropriate dismissal of file picker on keyboard events in Blink in Google Chrome prior to 66.0.3359.117 allowed a remote attacker to read local files via a crafted HTML page.CVE-2018-6102ubuntuchromium-browser+6EPSS score1.21%
Missing confusable characters in Internationalization in Google Chrome prior to 66.0.3359.117 allowed a remote attacker to spoof the contents of the Omnibox (URL bar) via a crafted domain name.