Skip to contentRedhat Desktop vulnerabilities
- google chrome, debian linux, redhat linux desktop +2 more +4 moreMissing confusable characters in Internationalization in Google Chrome prior to 66.0.3359.117...CVE-2018-6102Fix available4.3 Medium
- google chrome, debian linux, redhat linux desktop +2 more +4 moreA lack of host validation in DevTools in Google Chrome prior to 66.0.3359.117 allowed a remote...CVE-2018-6101Fix available7.5 High
- google chrome, debian linux, redhat enterprise linux desktop +2 more +4 moreIncorrect handling of confusable characters in URL Formatter in Google Chrome on macOS prior to...CVE-2018-6100Fix available6.5 Medium
- google chrome, debian linux, redhat linux desktop +2 more +4 moreA lack of CORS checks in Blink in Google Chrome prior to 66.0.3359.117 allowed a remote attacker...CVE-2018-6099Fix available6.5 Medium
- google chrome, debian linux, redhat linux desktop +2 more +4 moreIncorrect handling of confusable characters in URL Formatter in Google Chrome prior to 66.0.3359...CVE-2018-6098Fix available6.5 Medium
- google chrome, debian linux, redhat enterprise linux desktop +2 more +4 moreIncorrect handling of asynchronous methods in Fullscreen in Google Chrome on macOS prior to 66.0...CVE-2018-6097Fix available6.5 Medium
- google chrome, debian linux, redhat enterprise linux desktop +2 more +4 moreA JavaScript focused window could overlap the fullscreen notification in Fullscreen in Google...CVE-2018-6096Fix available6.5 Medium
- google chrome, debian linux, redhat linux desktop +2 more +4 moreInappropriate dismissal of file picker on keyboard events in Blink in Google Chrome prior to 66.0...CVE-2018-6095Fix available6.5 Medium
- google chrome, debian linux, redhat linux desktop +2 more +4 moreInline metadata in GarbageCollection in Google Chrome prior to 66.0.3359.117 allowed a remote...CVE-2018-6094Fix available8.8 High
- google chrome, debian linux, redhat enterprise linux desktop +2 more +4 moreInsufficient origin checks in Blink in Google Chrome prior to 66.0.3359.117 allowed a remote...CVE-2018-6093Fix available6.5 Medium
- google chrome, debian linux, redhat linux desktop +2 more +4 moreAn integer overflow on 32-bit systems in WebAssembly in Google Chrome prior to 66.0.3359.117...CVE-2018-6092Public exploitFix available8.8 High
- google chrome, debian linux, redhat enterprise linux desktop +2 more +4 moreService Workers can intercept any request made by an <embed> or <object> tag in Fetch API in...CVE-2018-6091Fix available6.5 Medium
- google chrome, debian linux, redhat linux desktop +2 more +4 moreAn integer overflow that lead to a heap buffer-overflow in Skia in Google Chrome prior to 66.0...CVE-2018-6090Fix available8.8 High
- google chrome, debian linux, redhat linux desktop +2 more +4 moreA lack of CORS checks, after a Service Worker redirected to a cross-origin PDF, in Service Worker...CVE-2018-6089Fix available6.5 Medium
- google chrome, debian linux, redhat linux desktop +2 more +4 moreAn iterator-invalidation bug in PDFium in Google Chrome prior to 66.0.3359.117 allowed a remote...CVE-2018-6088Fix available8.8 High
- google chrome, debian linux, redhat linux desktop +2 more +4 moreA use-after-free in WebAssembly in Google Chrome prior to 66.0.3359.117 allowed a remote attacker...CVE-2018-6087Fix available8.8 High
- google chrome, debian linux, redhat linux desktop +2 more +4 moreA double-eviction in the Incognito mode cache that lead to a user-after-free in Networking Disk...CVE-2018-6086Fix available8.8 High
- google chrome, debian linux, redhat linux desktop +2 more +4 moreRe-entry of a destructor in Networking Disk Cache in Google Chrome prior to 66.0.3359.117 allowed...CVE-2018-6085Fix available8.8 High
- google chrome, debian linux, redhat enterprise linux desktop +2 more +4 moreFailure to disallow PWA installation from CSP sandboxed pages in AppManifest in Google Chrome...CVE-2018-6083Fix available8.8 High
- google chrome, debian linux, redhat enterprise linux desktop +2 more +4 moreIncluding port 22 in the list of allowed FTP ports in Networking in Google Chrome prior to 65.0...CVE-2018-6082Fix available4.7 Medium
- google chrome, debian linux, redhat linux desktop +2 more +4 moreXSS vulnerabilities in Interstitials in Google Chrome prior to 65.0.3325.146 allowed an attacker...CVE-2018-6081Fix available6.1 Medium
- google chrome, debian linux, redhat enterprise linux desktop +2 more +4 moreLack of access control checks in Instrumentation in Google Chrome prior to 65.0.3325.146 allowed...CVE-2018-6080Fix available6.5 Medium
- google chrome, debian linux, redhat enterprise linux desktop +2 more +4 moreInappropriate sharing of TEXTURE_2D_ARRAY/TEXTURE_3D data between tabs in WebGL in Google Chrome...CVE-2018-6079Fix available6.5 Medium
- google chrome, debian linux, redhat enterprise linux desktop +2 more +4 moreIncorrect handling of confusable characters in Omnibox in Google Chrome prior to 65.0.3325.146...CVE-2018-6078Fix available4.3 Medium
- google chrome, debian linux, redhat enterprise linux desktop +2 more +4 moreDisplacement map filters being applied to cross-origin images in Blink SVG rendering in Google...CVE-2018-6077Fix available6.5 Medium
- google chrome, debian linux, redhat linux desktop +2 more +4 moreInsufficient encoding of URL fragment identifiers in Blink in Google Chrome prior to 65.0.3325...CVE-2018-6076Fix available6.1 Medium
- google chrome, debian linux, redhat linux desktop +2 more +4 moreIncorrect handling of specified filenames in file downloads in Google Chrome prior to 65.0.3325...CVE-2018-6075Fix available6.5 Medium
- google chrome, debian linux, redhat linux desktop +2 more +4 moreFailure to apply Mark-of-the-Web in Downloads in Google Chrome prior to 65.0.3325.146 allowed a...CVE-2018-6074Fix available8.8 High
- google chrome, debian linux, redhat linux desktop +2 more +4 moreA heap buffer overflow in WebGL in Google Chrome prior to 65.0.3325.146 allowed a remote attacker...CVE-2018-6073Fix available8.8 High
- google chrome, debian linux, redhat linux desktop +2 more +4 moreAn integer overflow leading to use after free in PDFium in Google Chrome prior to 65.0.3325.146...CVE-2018-6072Fix available8.8 High
- google chrome, debian linux, redhat linux desktop +2 more +4 moreAn integer overflow in Skia in Google Chrome prior to 65.0.3325.146 allowed a remote attacker to...CVE-2018-6071Fix available8.8 High
- google chrome, debian linux, redhat enterprise linux desktop +2 more +4 moreLack of CSP enforcement on WebUI pages in Bink in Google Chrome prior to 65.0.3325.146 allowed an...CVE-2018-6070Fix available6.1 Medium
- google chrome, debian linux, redhat linux desktop +2 more +4 moreStack buffer overflow in Skia in Google Chrome prior to 65.0.3325.146 allowed a remote attacker...CVE-2018-6069Fix available6.5 Medium
- google chrome, debian linux, redhat linux desktop +2 more +4 moreObject lifecycle issue in Chrome Custom Tab in Google Chrome prior to 65.0.3325.146 allowed a...CVE-2018-6068Fix available4.3 Medium
- google chrome, debian linux, redhat enterprise linux desktop +2 more +4 moreIncorrect IPC serialization in Skia in Google Chrome prior to 65.0.3325.146 allowed a remote...CVE-2018-6067Fix available8.8 High
- google chrome, debian linux, redhat linux desktop +2 more +4 moreLack of CORS checking by ResourceFetcher/ResourceLoader in Blink in Google Chrome prior to 65.0...CVE-2018-6066Public exploitFix available6.5 Medium
- google chrome, debian linux, google chromium v8 +4 more +6 moreInteger overflow in computing the required allocation size when instantiating a new javascript...CVE-2018-6065In KEVPublic exploitFix availableEPSS 60.3%8.8 High
- google chrome, debian linux, redhat enterprise linux desktop +2 more +4 moreType Confusion in the implementation of __defineGetter__ in V8 in Google Chrome prior to 65.0...CVE-2018-6064Public exploitFix available8.8 High
- google chrome, debian linux, redhat enterprise linux desktop +2 more +4 moreIncorrect use of mojo::WrapSharedMemoryHandle in Mojo in Google Chrome prior to 65.0.3325.146...CVE-2018-6063Fix available8.8 High
- google chrome, debian linux, redhat enterprise linux desktop +2 more +4 moreHeap overflow write in Skia in Google Chrome prior to 65.0.3325.146 allowed a remote attacker to...CVE-2018-6062Fix available8.8 High
- google chrome, debian linux, redhat enterprise linux desktop +2 more +4 moreA race in the handling of SharedArrayBuffers in WebAssembly in Google Chrome prior to 65.0.3325...CVE-2018-6061Fix available7.5 High
- google chrome, debian linux, redhat enterprise linux desktop +2 more +4 moreUse after free in WebAudio in Google Chrome prior to 65.0.3325.146 allowed a remote attacker to...CVE-2018-6060Fix available8.8 High
- google chrome, debian linux, redhat enterprise linux desktop +2 more +4 moreLack of special casing of Android ashmem in Google Chrome prior to 65.0.3325.146 allowed a remote...CVE-2018-6057Fix available8.8 High
- gnu binutils, redhat enterprise linux desktop, enterprise linux server +1 more +3 moreconcat_filename in dwarf2.c in the Binary File Descriptor (BFD) library (aka libbfd), as...CVE-2018-10373Fix available6.5 Medium
- gnu binutils, redhat enterprise linux desktop, enterprise linux server +1 more +3 moreprocess_cu_tu_index in dwarf.c in GNU Binutils 2.30 allows remote attackers to cause a denial of...CVE-2018-10372Fix available5.5 Medium
- linux kernel, redhat enterprise linux desktop, enterprise linux server +2 more +4 moreThe xfs_dinode_verify function in fs/xfs/libxfs/xfs_inode_buf.c in the Linux kernel through 4.16...CVE-2018-10322Fix available5.5 Medium
- packagekit, canonical ubuntu linux, debian linux +6 more +8 moreAn authentication bypass flaw has been found in PackageKit before 1.1.10 that allows users...CVE-2018-1106Fix available5.5 Medium
- check point software technologies ltd. linux kernel, debian linux, linux kernel +4 more +6 moreThe udl_fb_mmap function in drivers/gpu/drm/udl/udl_fb.c at the Linux kernel version 3.4 and up...CVE-2018-8781Fix available7.8 High
- openslp, canonical ubuntu linux, debian linux +35 more +37 moreOpenSLP releases in the 1.0.2 and 1.1.0 code streams have a heap-related memory corruption issue...CVE-2017-17833Fix available9.8 Critical
- oracle mysql, oracle corporation mysql server, canonical ubuntu linux +13 more +15 moreVulnerability in the MySQL Server component of Oracle MySQL (subcomponent: InnoDB). Supported...CVE-2018-2819Fix available6.5 Medium
- Show moreLoading…