Skip to contentRedhat Linux Workstation vulnerabilities
- google chrome, debian linux, redhat enterprise linux desktop +2 more +4 moreLack of proper validation of ancestor frames site when sending lax cookies in Navigation in...CVE-2018-18351Fix available6.5 Medium
- google chrome, debian linux, redhat enterprise linux desktop +2 more +4 moreIncorrect handling of CSP enforcement during navigations in Blink in Google Chrome prior to 71.0...CVE-2018-18350Fix available6.5 Medium
- google chrome, debian linux, redhat enterprise linux desktop +2 more +4 moreRemote frame navigations was incorrectly permitted to local resources in Blink in Google Chrome...CVE-2018-18349Fix available6.5 Medium
- google chrome, debian linux, redhat enterprise linux desktop +2 more +4 moreIncorrect handling of bidirectional domain names with RTL characters in Omnibox in Google Chrome...CVE-2018-18348Fix available4.3 Medium
- google chrome, debian linux, redhat linux desktop +2 more +4 moreIncorrect handling of failed navigations with invalid URLs in Navigation in Google Chrome prior...CVE-2018-18347Fix available8.8 High
- google chrome, debian linux, redhat linux desktop +2 more +4 moreIncorrect handling of alert box display in Blink in Google Chrome prior to 71.0.3578.80 allowed a...CVE-2018-18346Fix available6.5 Medium
- google chrome, debian linux, redhat enterprise linux desktop +2 more +4 moreIncorrect handling of blob URLS in Site Isolation in Google Chrome prior to 71.0.3578.80 allowed...CVE-2018-18345Fix available6.5 Medium
- google chrome, debian linux, redhat enterprise linux desktop +2 more +4 moreInappropriate allowance of the setDownloadBehavior devtools protocol feature in Extensions in...CVE-2018-18344Fix available6.5 Medium
- google chrome, debian linux, redhat linux desktop +2 more +4 moreIncorrect handing of paths leading to a use after free in Skia in Google Chrome prior to 71.0...CVE-2018-18343Fix available8.8 High
- google chrome, debian linux, redhat enterprise linux desktop +2 more +4 moreExecution of user supplied Javascript during object deserialization can update object length...CVE-2018-18342Fix available8.8 High
- google chrome, debian linux, redhat linux desktop +2 more +4 moreAn integer overflow leading to a heap buffer overflow in Blink in Google Chrome prior to 71.0...CVE-2018-18341Fix available8.8 High
- google chrome, debian linux, redhat linux desktop +2 more +4 moreIncorrect object lifecycle in MediaRecorder in Google Chrome prior to 71.0.3578.80 allowed a...CVE-2018-18340Fix available8.8 High
- google chrome, debian linux, redhat linux desktop +2 more +4 moreIncorrect object lifecycle in WebAudio in Google Chrome prior to 71.0.3578.80 allowed a remote...CVE-2018-18339Fix available8.8 High
- google chrome, debian linux, redhat linux desktop +2 more +4 moreIncorrect, thread-unsafe use of SkImage in Canvas in Google Chrome prior to 71.0.3578.80 allowed...CVE-2018-18338Fix available8.8 High
- google chrome, debian linux, redhat linux desktop +2 more +4 moreIncorrect handling of stylesheets leading to a use after free in Blink in Google Chrome prior to...CVE-2018-18337Fix available8.8 High
- google chrome, debian linux, redhat linux desktop +2 more +4 moreIncorrect object lifecycle in PDFium in Google Chrome prior to 71.0.3578.80 allowed a remote...CVE-2018-18336Fix available8.8 High
- google chrome, debian linux, opensuse leap +3 more +5 moreHeap buffer overflow in Skia in Google Chrome prior to 71.0.3578.80 allowed a remote attacker to...CVE-2018-18335Fix available8.8 High
- google chrome, debian linux, redhat linux desktop +2 more +4 moreIncorrect object lifecycle handling in PDFium in Google Chrome prior to 71.0.3578.98 allowed a...CVE-2018-17481Fix available8.8 High
- google chrome, debian linux, google chromium v8 +3 more +5 moreExecution of user supplied Javascript during array deserialization leading to an out of bounds...CVE-2018-17480In KEVFix availableEPSS 35.6%8.8 High
- google android, linux kernel, canonical ubuntu linux +6 more +8 moreIn sk_clone_lock of sock.c, there is a possible memory corruption due to type confusion. This...CVE-2018-9568Fix available7.8 High
- artifex ghostscript, redhat enterprise linux desktop, enterprise linux server +4 more +6 moreIt was found that RHSA-2018:2918 did not fully fix CVE-2018-16509. An attacker could possibly...CVE-2018-16863Fix available7.3 High
- check point software technologies ltd. freerdp, canonical ubuntu linux, debian linux +6 more +8 moreFreeRDP prior to version 2.0.0-rc4 contains an Integer Overflow that leads to a Heap-Based Buffer...CVE-2018-8787Fix available9.8 Critical
- check point software technologies ltd. freerdp, canonical ubuntu linux, debian linux +7 more +9 moreFreeRDP prior to version 2.0.0-rc4 contains an Integer Truncation that leads to a Heap-Based...CVE-2018-8786Fix available9.8 Critical
- perl, apple mac os x, canonical ubuntu linux +15 more +17 morePerl before 5.26.3 and 5.28.x before 5.28.1 has a buffer overflow via a crafted regular...CVE-2018-18311Fix availableEPSS 11.7%9.8 Critical
- node.js, redhat enterprise linux, enterprise linux desktop +5 more +7 moreNode.js: All versions prior to Node.js 6.15.0, 8.14.0, 10.14.0 and 11.3.0: Denial of Service with...CVE-2018-12121Fix availableEPSS 10.2%7.5 High
- artifex ghostscript, debian linux, redhat enterprise linux desktop +4 more +6 moreIn Artifex Ghostscript through 9.25, the setpattern operator did not properly validate certain...CVE-2018-19134Fix available7.8 High
- linux kernel, [unknown] kernel:, redhat enterprise linux desktop +5 more +7 moreThe Linux kernel before 4.15-rc8 was found to be vulnerable to a NULL pointer dereference bug in...CVE-2018-14646Fix available5.5 Medium
- exiv2, canonical ubuntu linux, debian linux +3 more +5 moreIn Exiv2 0.26 and previous versions, PngChunk::readRawProfile in pngchunk_int.cpp may cause a...CVE-2018-19535Fix available6.5 Medium
- artifex ghostscript, canonical ubuntu linux, debian linux +7 more +9 morepsi/zfjbig2.c in Artifex Ghostscript before 9.26 allows remote attackers to bypass intended...CVE-2018-19477Fix available7.8 High
- artifex ghostscript, canonical ubuntu linux, debian linux +7 more +9 morepsi/zicc.c in Artifex Ghostscript before 9.26 allows remote attackers to bypass intended access...CVE-2018-19476Fix available7.8 High
- artifex ghostscript, canonical ubuntu linux, debian linux +7 more +9 morepsi/zdevice2.c in Artifex Ghostscript before 9.26 allows remote attackers to bypass intended...CVE-2018-19475Fix available7.8 High
- adobe flash player, flash player desktop runtime, redhat enterprise linux desktop +2 more +4 moreFlash Player versions 31.0.0.148 and earlier have a type confusion vulnerability. Successful...CVE-2018-15981Fix availableEPSS 11.7%9.8 Critical
- artifex ghostscript, canonical ubuntu linux, debian linux +5 more +7 moreAn issue was discovered in Artifex Ghostscript before 9.26. LockSafetyParams is not checked...CVE-2018-19409Fix available9.8 Critical
- adobe flash player, flash player desktop runtime, redhat enterprise linux desktop +2 more +4 moreFlash Player versions 31.0.0.122 and earlier have an out-of-bounds read vulnerability. Successful...CVE-2018-15978Fix available7.5 High
- canonical ubuntu linux, debian linux, nodejs node.js +17 more +19 moreSimultaneous Multi-threading (SMT) in processors can enable local users to exploit software...CVE-2018-5407Public exploitFix available4.7 Medium
- keepalived, debian linux, redhat enterprise linux server +4 more +6 morekeepalived before 2.0.7 has a heap-based buffer overflow when parsing HTTP status codes resulting...CVE-2018-19115Fix available9.8 Critical
- exiv2, canonical ubuntu linux, debian linux +3 more +5 moreIn Exiv2 0.26, Exiv2::PsdImage::readMetadata in psdimage.cpp in the PSD image reader may suffer...CVE-2018-19108Fix available6.5 Medium
- exiv2, canonical ubuntu linux, debian linux +3 more +5 moreIn Exiv2 0.26, Exiv2::IptcParser::decode in iptc.cpp (called from psdimage.cpp in the PSD image...CVE-2018-19107Fix available6.5 Medium
- oracle mysql, oracle corporation mysql server, canonical ubuntu linux +11 more +13 moreVulnerability in the MySQL Server component of Oracle MySQL (subcomponent: Server: Connection...CVE-2019-2503Fix available6.4 Medium
- freedesktop poppler, canonical ubuntu linux, debian linux +3 more +5 moreAn issue was discovered in Poppler 0.71.0. There is a reachable abort in Object.h, will lead to...CVE-2018-19058Fix available6.5 Medium
- freedesktop poppler, canonical ubuntu linux, debian linux +7 more +9 moreAn issue was discovered in Poppler 0.71.0. There is a memory leak in GfxColorSpace:...CVE-2018-18897Fix available6.5 Medium
- google chrome, debian linux, redhat enterprise linux desktop +2 more +4 moreIncorrect dialog placement in Extensions in Google Chrome prior to 70.0.3538.67 allowed a remote...CVE-2018-17477Fix available4.3 Medium
- google chrome, debian linux, redhat enterprise linux desktop +2 more +4 moreIncorrect dialog placement in Cast UI in Google Chrome prior to 70.0.3538.67 allowed a remote...CVE-2018-17476Fix available4.3 Medium
- google chrome, debian linux, redhat enterprise linux desktop +2 more +4 moreIncorrect handling of history on iOS in Navigation in Google Chrome prior to 70.0.3538.67 allowed...CVE-2018-17475Fix available4.3 Medium
- google chrome, debian linux, redhat enterprise linux desktop +2 more +4 moreUse after free in HTMLImportsController in Blink in Google Chrome prior to 70.0.3538.67 allowed a...CVE-2018-17474Fix available8.8 High
- google chrome, debian linux, redhat linux desktop +2 more +4 moreIncorrect handling of confusable characters in Omnibox in Google Chrome prior to 70.0.3538.67...CVE-2018-17473Fix available4.3 Medium
- google chrome, debian linux, redhat enterprise linux desktop +2 more +4 moreIncorrect handling of googlechrome:// URL scheme on iOS in Intents in Google Chrome prior to 70.0...CVE-2018-17472Fix available9.6 Critical
- google chrome, debian linux, redhat enterprise linux desktop +2 more +4 moreIncorrect dialog placement in WebContents in Google Chrome prior to 70.0.3538.67 allowed a remote...CVE-2018-17471Fix available4.3 Medium
- google chrome, debian linux, redhat enterprise linux desktop +2 more +4 moreA heap buffer overflow in GPU in Google Chrome prior to 70.0.3538.67 allowed a remote attacker...CVE-2018-17470Fix available7.4 High
- google chrome, debian linux, redhat linux desktop +2 more +4 moreIncorrect handling of PDF filter chains in PDFium in Google Chrome prior to 70.0.3538.67 allowed...CVE-2018-17469Fix available8.8 High
- Show moreLoading…