Skip to contentRedhat Desktop vulnerabilities
- google chrome, redhat enterprise linux desktop, enterprise linux server +1 more +3 moreInsufficient validation of untrusted input in V8 in Google Chrome prior to 59.0.3071.104 for Mac,...CVE-2017-5088Fix available8.8 High
- google chrome, redhat enterprise linux desktop, enterprise linux server +1 more +3 moreA use after free in Blink in Google Chrome prior to 59.0.3071.104 for Mac, Windows, and Linux,...CVE-2017-5087Fix available8.8 High
- mozilla firefox, redhat enterprise linux desktop, enterprise linux server +1 more +3 moreWhen entered directly, Reader Mode did not strip the username and password section of URLs...CVE-2017-7762Fix available7.5 High
- mozilla firefox, firefox esr, thunderbird +6 more +8 moreAn out-of-bounds read vulnerability with the Opus encoder when the number of channels in an audio...CVE-2017-7758Fix available9.1 Critical
- mozilla firefox, firefox esr, thunderbird +7 more +9 moreAn out-of-bounds read in WebGL with a maliciously crafted "ImageInfo" object during WebGL...CVE-2017-7754Fix available7.5 High
- mozilla firefox, firefox esr, thunderbird +7 more +9 moreA use-after-free vulnerability during specific user interactions with the input method editor ...CVE-2017-7752Fix available8.8 High
- mozilla firefox, firefox esr, thunderbird +7 more +9 moreA use-after-free vulnerability with content viewer listeners that results in a potentially...CVE-2017-7751Fix available9.8 Critical
- mozilla firefox, firefox esr, thunderbird +7 more +9 moreA use-after-free vulnerability during video control operations when a "<track>" element holds a...CVE-2017-7750Fix available9.8 Critical
- mozilla firefox, firefox esr, thunderbird +7 more +9 moreA use-after-free vulnerability when using an incorrect URL during the reloading of a docshell....CVE-2017-7749Fix available9.8 Critical
- mozilla firefox, firefox esr, thunderbird +7 more +9 moreA use-after-free vulnerability with the frameloader during tree reconstruction while regenerating...CVE-2017-5472Fix available9.8 Critical
- mozilla firefox, firefox esr, thunderbird +7 more +9 moreMemory safety bugs were reported in Firefox 53 and Firefox ESR 52.1. Some of these bugs showed...CVE-2017-5470Fix available9.8 Critical
- redhat enterprise linux desktop, enterprise linux hpc node, enterprise linux server +1 more +3 more389 Directory Server in Red Hat Enterprise Linux Desktop 6 through 7, Red Hat Enterprise Linux...CVE-2016-54167.5 High
- redhat enterprise linux desktop, enterprise linux hpc node, enterprise linux server +1 more +3 more389 Directory Server in Red Hat Enterprise Linux Desktop 6 through 7, Red Hat Enterprise Linux...CVE-2016-5405Fix available9.8 Critical
- google chrome, redhat enterprise linux desktop, enterprise linux server +1 more +3 moreInsufficient Policy Enforcement in Omnibox in Google Chrome prior to 59.0.3071.86 for Windows and...CVE-2017-5086Fix available6.5 Medium
- google chrome, redhat enterprise linux desktop, enterprise linux server +1 more +3 moreInappropriate implementation in Blink in Google Chrome prior to 59.0.3071.86 for Mac, Windows,...CVE-2017-5083Fix available4.3 Medium
- debian linux, google chrome, redhat enterprise linux desktop +2 more +4 moreLack of verification of an extension's locale folder in Google Chrome prior to 59.0.3071.86 for...CVE-2017-5081Fix available3.3 Low
- google chrome, redhat enterprise linux desktop, enterprise linux server +1 more +3 moreInappropriate implementation in Blink in Google Chrome prior to 59.0.3071.86 for Mac, Windows,...CVE-2017-5079Fix available4.3 Medium
- google chrome, redhat enterprise linux desktop, enterprise linux server +1 more +3 moreInsufficient validation of untrusted input in Blink's mailto: handling in Google Chrome prior to...CVE-2017-5078Fix available8.8 High
- google chrome, redhat enterprise linux desktop, enterprise linux server +1 more +3 moreInsufficient validation of untrusted input in Skia in Google Chrome prior to 59.0.3071.86 for...CVE-2017-5077Fix available8.8 High
- google chrome, redhat enterprise linux desktop, enterprise linux server +1 more +3 moreInsufficient Policy Enforcement in Omnibox in Google Chrome prior to 59.0.3071.86 for Mac,...CVE-2017-5076Fix available6.5 Medium
- google chrome, redhat enterprise linux desktop, enterprise linux server +1 more +3 moreInappropriate implementation in CSP reporting in Blink in Google Chrome prior to 59.0.3071.86 for...CVE-2017-5075Fix available4.3 Medium
- google chrome, redhat enterprise linux desktop, enterprise linux server +1 more +3 moreUse after free in print preview in Blink in Google Chrome prior to 59.0.3071.86 for Linux,...CVE-2017-5073Fix available8.8 High
- google chrome, redhat enterprise linux desktop, enterprise linux server +1 more +3 moreInsufficient validation of untrusted input in V8 in Google Chrome prior to 59.0.3071.86 for Linux...CVE-2017-5071Fix available6.3 Medium
- google chrome, chromium v8, redhat enterprise linux desktop +2 more +4 moreType confusion in V8 in Google Chrome prior to 59.0.3071.86 for Linux, Windows, and Mac, and 59.0...CVE-2017-5070In KEVFix availableEPSS 32.1%8.8 High
- mercurial, debian linux, redhat enterprise linux desktop +5 more +7 moreMercurial has Incorrect Permission Assignment for Critical ResourceCVE-2017-9462Public exploitFix availableEPSS 21.7%8.8 High
- samba, debian linux, redhat enterprise linux desktop +5 more +7 moresmbd in Samba before 4.4.10 and 4.5.x before 4.5.6 has a denial of service vulnerability ...CVE-2017-9461Fix available6.5 Medium
- openldap, debian linux, mcafee policy auditor +7 more +9 moreservers/slapd/back-mdb/search.c in OpenLDAP through 2.4.44 is prone to a double free...CVE-2017-9287Fix available6.5 Medium
- adobe flash player, flash player desktop runtime, redhat enterprise linux +2 more +4 moreAdobe Flash Player versions 25.0.0.148 and earlier have an exploitable memory corruption...CVE-2017-3074Fix available8.8 High
- adobe flash player, flash player desktop runtime, redhat enterprise linux +2 more +4 moreAdobe Flash Player versions 25.0.0.148 and earlier have an exploitable use after free...CVE-2017-3073Fix available8.8 High
- adobe flash player, flash player desktop runtime, redhat enterprise linux +2 more +4 moreAdobe Flash Player versions 25.0.0.148 and earlier have an exploitable memory corruption...CVE-2017-3072Fix available8.8 High
- adobe flash player, flash player desktop runtime, redhat enterprise linux +2 more +4 moreAdobe Flash Player versions 25.0.0.148 and earlier have an exploitable use after free...CVE-2017-3071Fix available8.8 High
- adobe flash player, flash player desktop runtime, redhat enterprise linux +2 more +4 moreAdobe Flash Player versions 25.0.0.148 and earlier have an exploitable memory corruption...CVE-2017-3070Fix available8.8 High
- adobe flash player, flash player desktop runtime, redhat enterprise linux +2 more +4 moreAdobe Flash Player versions 25.0.0.148 and earlier have an exploitable memory corruption...CVE-2017-3069Fix available8.8 High
- adobe flash player, flash player desktop runtime, redhat enterprise linux +2 more +4 moreAdobe Flash Player versions 25.0.0.148 and earlier have an exploitable memory corruption...CVE-2017-3068Public exploitFix availableEPSS 20.4%8.8 High
- google chrome, redhat enterprise linux desktop, enterprise linux server +1 more +3 moreIncorrect handling of picture ID in WebRTC in Google Chrome prior to 58.0.3029.96 for Mac,...CVE-2017-5068Fix available7.5 High
- [unknown] 389-ds-base, fedoraproject 389 directory server, redhat enterprise linux desktop +2 more +4 more389-ds-base before versions 1.3.5.17 and 1.3.6.10 is vulnerable to an invalid pointer dereference...CVE-2017-2668Fix available6.5 Medium
- artifex ghostscript, debian linux, redhat enterprise linux desktop +5 more +7 moreArtifex Ghostscript through 2017-04-26 allows -dSAFER bypass and remote command execution via ...CVE-2017-8291In KEVPublic exploitFix availableEPSS 97.0%7.8 High
- google chrome, redhat enterprise linux desktop, enterprise linux server +1 more +3 moreIncorrect MIME type of XSS-Protection reports in Blink in Google Chrome prior to 58.0.3029.81 for...CVE-2017-5069Fix available6.1 Medium
- google chrome, redhat enterprise linux desktop, enterprise linux server +1 more +3 moreAn insufficient watchdog timer in navigation in Google Chrome prior to 58.0.3029.81 for Linux,...CVE-2017-5067Fix available6.5 Medium
- google chrome, redhat enterprise linux desktop, enterprise linux server +1 more +3 moreInsufficient consistency checks in signature handling in the networking stack in Google Chrome...CVE-2017-5066Fix available6.5 Medium
- google chrome, redhat enterprise linux desktop, enterprise linux server +1 more +3 moreLack of an appropriate action on page navigation in Blink in Google Chrome prior to 58.0.3029.81...CVE-2017-5065Fix available4.7 Medium
- google chrome, redhat enterprise linux desktop, enterprise linux server +1 more +3 moreA numeric overflow in Skia in Google Chrome prior to 58.0.3029.81 for Linux, Windows, and Mac,...CVE-2017-5063Fix available8.8 High
- google chrome, redhat enterprise linux desktop, enterprise linux server +1 more +3 moreA use after free in Chrome Apps in Google Chrome prior to 58.0.3029.81 for Mac, Windows, and...CVE-2017-5062Fix available8.8 High
- google chrome, redhat enterprise linux desktop, enterprise linux server +1 more +3 moreA race condition in navigation in Google Chrome prior to 58.0.3029.81 for Linux, Windows, and Mac...CVE-2017-5061Fix available5.3 Medium
- google chrome, redhat enterprise linux desktop, enterprise linux server +1 more +3 moreInsufficient Policy Enforcement in Omnibox in Google Chrome prior to 58.0.3029.81 for Mac,...CVE-2017-5060Fix available6.5 Medium
- google chrome, redhat enterprise linux desktop, enterprise linux server +1 more +3 moreType confusion in Blink in Google Chrome prior to 58.0.3029.81 for Linux, Windows, and Mac, and...CVE-2017-5059Fix available8.8 High
- google chrome, redhat enterprise linux desktop, enterprise linux server +1 more +3 moreType confusion in PDFium in Google Chrome prior to 58.0.3029.81 for Mac, Windows, and Linux, and...CVE-2017-5057Fix available8.8 High
- oracle mysql, oracle corporation mysql server, debian linux +7 more +9 moreVulnerability in the MySQL Server component of Oracle MySQL (subcomponent: Client mysqldump)....CVE-2017-3600Fix available6.6 Medium
- oracle jrockit, oracle corporation java, debian linux +11 more +13 moreVulnerability in the Java SE, Java SE Embedded, JRockit component of Oracle Java SE (subcomponent...CVE-2017-3544Fix available3.7 Low
- oracle corporation java, debian linux, oracle jdk +9 more +11 moreVulnerability in the Java SE, Java SE Embedded component of Oracle Java SE (subcomponent:...CVE-2017-3539Fix available3.1 Low
- Show moreLoading…