Skip to contentRedhat Enterprise Linux Desktop vulnerabilities
- mozilla firefox, firefox esr, canonical ubuntu linux +7 more +9 moreMalicious PDF can inject JavaScript into PDF ViewerCVE-2018-5158Public exploitFix availableEPSS 10.3%8.8 High
- mozilla firefox, firefox esr, canonical ubuntu linux +7 more +9 moreSame-origin protections for the PDF viewer can be bypassed, allowing a malicious site to...CVE-2018-5157Fix available7.5 High
- mozilla firefox, firefox esr, thunderbird +9 more +11 moreA use-after-free vulnerability can occur while adjusting layout during SVG animations with text...CVE-2018-5155Fix available9.8 Critical
- mozilla firefox, firefox esr, thunderbird +9 more +11 moreA use-after-free vulnerability can occur while enumerating attributes during SVG animations with...CVE-2018-5154Fix available9.8 Critical
- mozilla firefox, firefox esr, thunderbird +9 more +11 moreMemory safety bugs were reported in Firefox 59, Firefox ESR 52.7, and Thunderbird 52.7. Some of...CVE-2018-5150Fix available9.8 Critical
- debian linux, linux kernel, canonical ubuntu linux +3 more +5 moreLinux kernel before version 4.16-rc7 is vulnerable to a null pointer dereference in...CVE-2018-1130Fix available5.5 Medium
- debian linux, kernel vhost, linux kernel +5 more +7 moreLinux kernel vhost since version 4.8 does not properly initialize memory in messages passed...CVE-2018-1118Fix available2.3 Low
- freedesktop poppler, canonical ubuntu linux, debian linux +4 more +6 moreThe FoFiType1C::cvtGlyph function in fofi/FoFiType1C.cc in Poppler through 0.64.0 allows remote...CVE-2017-18267Fix available5.5 Medium
- unspecified 389-ds-base, debian linux, fedoraproject 389 directory server +3 more +5 more389-ds-base before versions 1.4.0.9, 1.3.8.1, 1.3.6.15 did not properly handle long search...CVE-2018-1089Fix available7.5 High
- debian linux, kernel kvm, linux kernel +9 more +11 morekernel KVM before versions kernel 4.16, kernel 4.16-rc7, kernel 4.17-rc1, kernel 4.17-rc2 and...CVE-2018-1087Fix available8.0 High
- gnome libgxps, redhat ansible tower, enterprise linux desktop +2 more +4 moreThere is a stack-based buffer over-read in calling GLib in the function...CVE-2018-10767Fix available6.5 Medium
- freedesktop poppler, canonical ubuntu linux, debian linux +4 more +6 moreThere is a NULL pointer dereference in the AnnotPath::getCoordsLength function in Annot.h in an...CVE-2018-10768Fix available6.5 Medium
- gnu wget, canonical ubuntu linux, debian linux +3 more +5 moreGNU Wget before 1.19.5 is prone to a cookie injection vulnerability in the resp_new function in...CVE-2018-0494Public exploitFix availableEPSS 16.5%6.5 Medium
- gnome libgxps, opensuse leap, redhat ansible tower +3 more +5 moreThere is a heap-based buffer over-read in the function ft_font_face_hash of gxps-fonts.c in...CVE-2018-10733Fix available6.5 Medium
- linux kernel, canonical ubuntu linux, redhat enterprise linux desktop +6 more +8 moreThe do_get_mempolicy function in mm/mempolicy.c in the Linux kernel before 4.12.9 allows local...CVE-2018-10675Fix available7.8 High
- apache openoffice, libreoffice, canonical ubuntu linux +4 more +6 moreAn information disclosure vulnerability occurs when LibreOffice 6.0.3 and Apache OpenOffice...CVE-2018-10583Public exploitFix availableEPSS 79.5%7.5 High
- debian linux, linux kernel, canonical ubuntu linux +7 more +9 moreThe Linux Kernel version 3.18 contains a dangerous feature vulnerability in...CVE-2018-1000199Public exploitFix available5.5 Medium
- gnu binutils, redhat enterprise linux desktop, enterprise linux server +1 more +3 moreThe ignore_section_sym function in elf.c in the Binary File Descriptor (BFD) library (aka libbfd)...CVE-2018-10535Fix available5.5 Medium
- gnu binutils, redhat enterprise linux desktop, enterprise linux server +1 more +3 moreThe _bfd_XX_bfd_copy_private_bfd_data_common function in peXXigen.c in the Binary File Descriptor...CVE-2018-10534Fix available5.5 Medium
- google chrome, debian linux, redhat enterprise linux desktop +2 more +4 moreConfusing settings in Autofill in Google Chrome prior to 66.0.3359.117 allowed a remote attacker...CVE-2018-6117Fix available6.5 Medium
- google chrome, debian linux, redhat enterprise linux desktop +2 more +4 moreIncorrect enforcement of CSP for <object> tags in Blink in Google Chrome prior to 66.0.3359.117...CVE-2018-6114Fix available6.5 Medium
- google chrome, debian linux, redhat enterprise linux desktop +2 more +4 moreImproper handling of pending navigation entries in Navigation in Google Chrome on iOS prior to 66...CVE-2018-6113Fix available6.5 Medium
- google chrome, debian linux, redhat enterprise linux desktop +2 more +4 moreMaking URLs clickable and allowing them to be styled in DevTools in Google Chrome prior to 66.0...CVE-2018-6112Fix available4.3 Medium
- google chrome, debian linux, redhat enterprise linux desktop +2 more +4 moreAn object lifetime issue in the developer tools network handler in Google Chrome prior to 66.0...CVE-2018-6111Fix available8.8 High
- google chrome, debian linux, redhat enterprise linux desktop +2 more +4 moreParsing documents as HTML in Downloads in Google Chrome prior to 66.0.3359.117 allowed a remote...CVE-2018-6110Fix available5.4 Medium
- google chrome, debian linux, redhat enterprise linux desktop +2 more +4 morereadAsText() can indefinitely read the file picked by the user, rather than only once at the time...CVE-2018-6109Fix available6.5 Medium
- google chrome, debian linux, redhat enterprise linux desktop +2 more +4 moreAn asynchronous generator may return an incorrect state in V8 in Google Chrome prior to 66.0.3359...CVE-2018-6106Fix available8.8 High
- google chrome, debian linux, redhat enterprise linux desktop +2 more +4 moreIncorrect handling of confusable characters in URL Formatter in Google Chrome on macOS prior to...CVE-2018-6100Fix available6.5 Medium
- google chrome, debian linux, redhat enterprise linux desktop +2 more +4 moreIncorrect handling of asynchronous methods in Fullscreen in Google Chrome on macOS prior to 66.0...CVE-2018-6097Fix available6.5 Medium
- google chrome, debian linux, redhat enterprise linux desktop +2 more +4 moreA JavaScript focused window could overlap the fullscreen notification in Fullscreen in Google...CVE-2018-6096Fix available6.5 Medium
- google chrome, debian linux, redhat enterprise linux desktop +2 more +4 moreInsufficient origin checks in Blink in Google Chrome prior to 66.0.3359.117 allowed a remote...CVE-2018-6093Fix available6.5 Medium
- google chrome, debian linux, redhat enterprise linux desktop +2 more +4 moreService Workers can intercept any request made by an <embed> or <object> tag in Fetch API in...CVE-2018-6091Fix available6.5 Medium
- google chrome, debian linux, redhat enterprise linux desktop +2 more +4 moreFailure to disallow PWA installation from CSP sandboxed pages in AppManifest in Google Chrome...CVE-2018-6083Fix available8.8 High
- google chrome, debian linux, redhat enterprise linux desktop +2 more +4 moreIncluding port 22 in the list of allowed FTP ports in Networking in Google Chrome prior to 65.0...CVE-2018-6082Fix available4.7 Medium
- google chrome, debian linux, redhat enterprise linux desktop +2 more +4 moreLack of access control checks in Instrumentation in Google Chrome prior to 65.0.3325.146 allowed...CVE-2018-6080Fix available6.5 Medium
- google chrome, debian linux, redhat enterprise linux desktop +2 more +4 moreInappropriate sharing of TEXTURE_2D_ARRAY/TEXTURE_3D data between tabs in WebGL in Google Chrome...CVE-2018-6079Fix available6.5 Medium
- google chrome, debian linux, redhat enterprise linux desktop +2 more +4 moreIncorrect handling of confusable characters in Omnibox in Google Chrome prior to 65.0.3325.146...CVE-2018-6078Fix available4.3 Medium
- google chrome, debian linux, redhat enterprise linux desktop +2 more +4 moreDisplacement map filters being applied to cross-origin images in Blink SVG rendering in Google...CVE-2018-6077Fix available6.5 Medium
- google chrome, debian linux, redhat enterprise linux desktop +2 more +4 moreLack of CSP enforcement on WebUI pages in Bink in Google Chrome prior to 65.0.3325.146 allowed an...CVE-2018-6070Fix available6.1 Medium
- google chrome, debian linux, redhat enterprise linux desktop +2 more +4 moreIncorrect IPC serialization in Skia in Google Chrome prior to 65.0.3325.146 allowed a remote...CVE-2018-6067Fix available8.8 High
- google chrome, debian linux, google chromium v8 +4 more +6 moreInteger overflow in computing the required allocation size when instantiating a new javascript...CVE-2018-6065In KEVPublic exploitFix availableEPSS 60.3%8.8 High
- google chrome, debian linux, redhat enterprise linux desktop +2 more +4 moreType Confusion in the implementation of __defineGetter__ in V8 in Google Chrome prior to 65.0...CVE-2018-6064Public exploitFix available8.8 High
- google chrome, debian linux, redhat enterprise linux desktop +2 more +4 moreIncorrect use of mojo::WrapSharedMemoryHandle in Mojo in Google Chrome prior to 65.0.3325.146...CVE-2018-6063Fix available8.8 High
- google chrome, debian linux, redhat enterprise linux desktop +2 more +4 moreHeap overflow write in Skia in Google Chrome prior to 65.0.3325.146 allowed a remote attacker to...CVE-2018-6062Fix available8.8 High
- google chrome, debian linux, redhat enterprise linux desktop +2 more +4 moreA race in the handling of SharedArrayBuffers in WebAssembly in Google Chrome prior to 65.0.3325...CVE-2018-6061Fix available7.5 High
- google chrome, debian linux, redhat enterprise linux desktop +2 more +4 moreUse after free in WebAudio in Google Chrome prior to 65.0.3325.146 allowed a remote attacker to...CVE-2018-6060Fix available8.8 High
- google chrome, debian linux, redhat enterprise linux desktop +2 more +4 moreLack of special casing of Android ashmem in Google Chrome prior to 65.0.3325.146 allowed a remote...CVE-2018-6057Fix available8.8 High
- gnu binutils, redhat enterprise linux desktop, enterprise linux server +1 more +3 moreconcat_filename in dwarf2.c in the Binary File Descriptor (BFD) library (aka libbfd), as...CVE-2018-10373Fix available6.5 Medium
- gnu binutils, redhat enterprise linux desktop, enterprise linux server +1 more +3 moreprocess_cu_tu_index in dwarf.c in GNU Binutils 2.30 allows remote attackers to cause a denial of...CVE-2018-10372Fix available5.5 Medium
- linux kernel, redhat enterprise linux desktop, enterprise linux server +2 more +4 moreThe xfs_dinode_verify function in fs/xfs/libxfs/xfs_inode_buf.c in the Linux kernel through 4.16...CVE-2018-10322Fix available5.5 Medium
- Show moreLoading…