Skip to content

Browse Docs Sources Guide

Search/Get API key

Every CVE
Archive
2018
December

CVEs published in December 2018

1,178 vulnerabilities, 184 critical, 11 exploited.

Known exploitedIn KEVPublic exploitFix available

ibm marketing platformIBM Marketing Platform 9.1.0, 9.1.2, and 10.1 is vulnerable to a XML External Entity Injection ...CVE-2018-14247.1 HighDecember 7, 2018
ge cimplicityXXE in GE Proficy Cimplicity GDS versions 9.0 R2, 9.5, 10.0CVE-2018-153629.1 CriticalDecember 7, 2018
philips healthsuite health, healthsuite health android app +1 morePhilips HealthSuite Health Android App, all versions. The software uses simple encryption that is...CVE-2018-190014.3 MediumDecember 7, 2018
rockwellautomation 1756-en2f series a firmware, 1756-en2f series b firmware, 1756-en2f series c firmware +13 more +15 moreRockwell Automation MicroLogix 1400 Controllers and 1756 ControlLogix Communications Modules An...CVE-2018-179248.6 HighDecember 7, 2018
google android, qualcomm, inc. android for msm, firefox os for msm, qrd android +1 moreIn all android releases(Android for MSM, Firefox OS for MSM, QRD Android) from CAF using the...CVE-2018-119059.8 CriticalDecember 7, 2018
google android, qualcomm, inc. android for msm, firefox os for msm, qrd android +1 moreIn all android releases(Android for MSM, Firefox OS for MSM, QRD Android) from CAF using the...CVE-2017-158356.5 MediumDecember 7, 2018
google android, qualcomm, inc. android for msm, firefox os for msm, qrd android +1 moreIn all android releases(Android for MSM, Firefox OS for MSM, QRD Android) from CAF using the...CVE-2017-148887.8 HighDecember 7, 2018
adobe flash playerFlash Player versions 31.0.0.153 and earlier, and 31.0.0.108 and earlier have an insecure library...CVE-2018-15983Fix available7.8 HighDecember 7, 2018
adobe flash player, flash player installer, redhat enterprise linux desktop +2 more +4 moreFlash Player versions 31.0.0.153 and earlier, and 31.0.0.108 and earlier have a use after free...CVE-2018-15982In KEVPublic exploitFix availableEPSS 89.6%7.8 HighDecember 7, 2018
mi a2 lite firmware, redmi 6 firmware +1 moreThe Goodix GT9xx touchscreen driver for custom Linux kernels on Xiaomi daisy-o-oss and daisy-p...CVE-2018-199397.5 HighDecember 7, 2018
php, debian linux +1 moreext/imap/php_imap.c in PHP 5.x and 7.x before 7.3.0 allows remote attackers to cause a denial of...CVE-2018-19935Fix available7.5 HighDecember 7, 2018
gnu binutils, netapp vasa provider +1 moreAn issue was discovered in the Binary File Descriptor (BFD) library (aka libbfd), as distributed...CVE-2018-19932Fix available5.5 MediumDecember 7, 2018
gnu binutils, canonical ubuntu linux, netapp vasa provider +2 moreAn issue was discovered in the Binary File Descriptor (BFD) library (aka libbfd), as distributed...CVE-2018-19931Fix available7.8 HighDecember 7, 2018
google androidIn pppol2tp_connect, there is possible memory corruption due to a use after free. This could lead...CVE-2018-9517Fix available6.7 MediumDecember 7, 2018
zte zxin10, zxin10-european region +1 moreAll versions up to ZXINOS-RESV1.01.43 of the ZTE ZXIN10 product European region are impacted by...CVE-2018-7364EPSS 10.3%8.3 HighDecember 7, 2018
sqlite, debian linux, google chrome +1 more +3 moreSQLite before 3.25.3, when the FTS3 extension is enabled, encounters an integer overflow (and...CVE-2018-20346Fix availableEPSS 10.3%8.1 HighDecember 7, 2018
google chromeIncorrect handling of confusable characters in URL Formatter in Google Chrome prior to 71.0.3578...CVE-2018-20070Fix available6.5 MediumDecember 7, 2018
google chromeIncorrect handling of 304 status codes in Navigation in Google Chrome prior to 71.0.3578.80...CVE-2018-20068Fix available4.3 MediumDecember 7, 2018
google chromeA renderer initiated back navigation was incorrectly allowed to cancel a browser initiated one in...CVE-2018-20067Fix available4.3 MediumDecember 7, 2018
google chromeIncorrect object lifecycle in Extensions in Google Chrome prior to 71.0.3578.80 allowed a remote...CVE-2018-20066Fix available8.8 HighDecember 7, 2018
google chromeHandling of URI action in PDFium in Google Chrome prior to 71.0.3578.80 allowed a remote attacker...CVE-2018-20065Fix available8.8 HighDecember 7, 2018
google chrome, debian linux, redhat linux desktop +2 more +4 moreIncorrect handling of Reflect.construct in V8 in Google Chrome prior to 71.0.3578.80 allowed a...CVE-2018-18359Fix available8.8 HighDecember 7, 2018
google chrome, debian linux, redhat enterprise linux desktop +2 more +4 moreLack of special casing of localhost in WPAD files in Google Chrome prior to 71.0.3578.80 allowed...CVE-2018-18358Fix available5.7 MediumDecember 7, 2018
google chrome, debian linux, redhat enterprise linux desktop +2 more +4 moreIncorrect handling of confusable characters in URL Formatter in Google Chrome prior to 71.0.3578...CVE-2018-18357Fix available4.3 MediumDecember 7, 2018
google chrome, canonical ubuntu linux, debian linux +7 more +9 moreAn integer overflow in path handling lead to a use after free in Skia in Google Chrome prior to...CVE-2018-18356Fix available8.8 HighDecember 7, 2018
google chrome, debian linux, redhat enterprise linux desktop +2 more +4 moreIncorrect handling of confusable characters in URL Formatter in Google Chrome prior to 71.0.3578...CVE-2018-18355Fix available4.3 MediumDecember 7, 2018
google chrome, debian linux, redhat enterprise linux desktop +2 more +4 moreInsufficient validate of external protocols in Shell Integration in Google Chrome on Windows...CVE-2018-18354Fix available8.8 HighDecember 7, 2018
google chrome, debian linux, redhat enterprise linux desktop +2 more +4 moreFailure to dismiss http auth dialogs on navigation in Network Authentication in Google Chrome on...CVE-2018-18353Fix available6.5 MediumDecember 7, 2018
google chrome, debian linux, redhat enterprise linux desktop +2 more +4 moreService works could inappropriately gain access to cross origin audio in Media in Google Chrome...CVE-2018-18352Fix available6.5 MediumDecember 7, 2018
google chrome, debian linux, redhat enterprise linux desktop +2 more +4 moreLack of proper validation of ancestor frames site when sending lax cookies in Navigation in...CVE-2018-18351Fix available6.5 MediumDecember 7, 2018
google chrome, debian linux, redhat enterprise linux desktop +2 more +4 moreIncorrect handling of CSP enforcement during navigations in Blink in Google Chrome prior to 71.0...CVE-2018-18350Fix available6.5 MediumDecember 7, 2018
google chrome, debian linux, redhat enterprise linux desktop +2 more +4 moreRemote frame navigations was incorrectly permitted to local resources in Blink in Google Chrome...CVE-2018-18349Fix available6.5 MediumDecember 7, 2018
google chrome, debian linux, redhat enterprise linux desktop +2 more +4 moreIncorrect handling of bidirectional domain names with RTL characters in Omnibox in Google Chrome...CVE-2018-18348Fix available4.3 MediumDecember 7, 2018
google chrome, debian linux, redhat linux desktop +2 more +4 moreIncorrect handling of failed navigations with invalid URLs in Navigation in Google Chrome prior...CVE-2018-18347Fix available8.8 HighDecember 7, 2018
google chrome, debian linux, redhat linux desktop +2 more +4 moreIncorrect handling of alert box display in Blink in Google Chrome prior to 71.0.3578.80 allowed a...CVE-2018-18346Fix available6.5 MediumDecember 7, 2018
google chrome, debian linux, redhat enterprise linux desktop +2 more +4 moreIncorrect handling of blob URLS in Site Isolation in Google Chrome prior to 71.0.3578.80 allowed...CVE-2018-18345Fix available6.5 MediumDecember 7, 2018
google chrome, debian linux, redhat enterprise linux desktop +2 more +4 moreInappropriate allowance of the setDownloadBehavior devtools protocol feature in Extensions in...CVE-2018-18344Fix available6.5 MediumDecember 7, 2018
google chrome, debian linux, redhat linux desktop +2 more +4 moreIncorrect handing of paths leading to a use after free in Skia in Google Chrome prior to 71.0...CVE-2018-18343Fix available8.8 HighDecember 7, 2018
google chrome, debian linux, redhat enterprise linux desktop +2 more +4 moreExecution of user supplied Javascript during object deserialization can update object length...CVE-2018-18342Fix available8.8 HighDecember 7, 2018
google chrome, debian linux, redhat linux desktop +2 more +4 moreAn integer overflow leading to a heap buffer overflow in Blink in Google Chrome prior to 71.0...CVE-2018-18341Fix available8.8 HighDecember 7, 2018
google chrome, debian linux, redhat linux desktop +2 more +4 moreIncorrect object lifecycle in MediaRecorder in Google Chrome prior to 71.0.3578.80 allowed a...CVE-2018-18340Fix available8.8 HighDecember 7, 2018
google chrome, debian linux, redhat linux desktop +2 more +4 moreIncorrect object lifecycle in WebAudio in Google Chrome prior to 71.0.3578.80 allowed a remote...CVE-2018-18339Fix available8.8 HighDecember 7, 2018
google chrome, debian linux, redhat linux desktop +2 more +4 moreIncorrect, thread-unsafe use of SkImage in Canvas in Google Chrome prior to 71.0.3578.80 allowed...CVE-2018-18338Fix available8.8 HighDecember 7, 2018
google chrome, debian linux, redhat linux desktop +2 more +4 moreIncorrect handling of stylesheets leading to a use after free in Blink in Google Chrome prior to...CVE-2018-18337Fix available8.8 HighDecember 7, 2018
google chrome, debian linux, redhat linux desktop +2 more +4 moreIncorrect object lifecycle in PDFium in Google Chrome prior to 71.0.3578.80 allowed a remote...CVE-2018-18336Fix available8.8 HighDecember 7, 2018
google chrome, debian linux, opensuse leap +3 more +5 moreHeap buffer overflow in Skia in Google Chrome prior to 71.0.3578.80 allowed a remote attacker to...CVE-2018-18335Fix available8.8 HighDecember 7, 2018
google chrome, debian linux, redhat linux desktop +2 more +4 moreIncorrect object lifecycle handling in PDFium in Google Chrome prior to 71.0.3578.98 allowed a...CVE-2018-17481Fix available8.8 HighDecember 7, 2018
google chrome, debian linux, google chromium v8 +3 more +5 moreExecution of user supplied Javascript during array deserialization leading to an out of bounds...CVE-2018-17480In KEVFix availableEPSS 35.6%8.8 HighDecember 7, 2018
mcafee true keyTrue Key (TK) Windows Client - Privilege Escalation vulnerabilityCVE-2018-6757Public exploit7.5 HighDecember 6, 2018
mcafee true keyTrue Key (TK) Windows Client - Authentication Abuse vulnerabilityCVE-2018-6756Public exploit7.8 HighDecember 6, 2018
Show moreLoading…

Docs Sources Guide Browse Privacy Terms

esc

PagesAll vulnerabilities Browse Docs Sources Guide Get API key

MoveEnter Open