Google Chrome prior to 62.0.3202.62
20 published vulnerabilities name this product.
As the CNAs write it in their CVE records (vendor and product); the versions are theirs.
| CVE | Vulnerable versions | Title | Severity | Published | EPSS | Exploitation |
|---|---|---|---|---|---|---|
| CVE-2017-5133 | Google Chrome prior to 62.0.3202.62 | Off-by-one read/write on the heap in Blink in Google Chrome prior to 62.0.3202.62 allowed a remote attacker to corrupt memory and possibly l | HIGH 8.8 | 2.0 % | ||
| CVE-2017-5132 | Google Chrome prior to 62.0.3202.62 | Inappropriate implementation in V8 in Google Chrome prior to 62.0.3202.62 allowed a remote attacker to potentially exploit heap corruption v | HIGH 8.8 | 1.6 % | ||
| CVE-2017-5131 | Google Chrome prior to 62.0.3202.62 | An integer overflow in Skia in Google Chrome prior to 62.0.3202.62 allowed a remote attacker to potentially exploit heap corruption via a cr | HIGH 8.8 | 1.4 % | ||
| CVE-2017-5130 | Google Chrome prior to 62.0.3202.62 | An integer overflow in xmlmemory.c in libxml2 before 2.9.5, as used in Google Chrome prior to 62.0.3202.62 and other products, allowed a rem | HIGH 8.8 | 2.7 % | ||
| CVE-2017-5129 | Google Chrome prior to 62.0.3202.62 | A use after free in WebAudio in Blink in Google Chrome prior to 62.0.3202.62 allowed a remote attacker to perform an out of bounds memory re | HIGH 8.8 | 1.4 % | ||
| CVE-2017-5128 | Google Chrome prior to 62.0.3202.62 | Heap buffer overflow in Blink in Google Chrome prior to 62.0.3202.62 allowed a remote attacker to potentially exploit heap corruption via a | HIGH 8.8 | 1.6 % | ||
| CVE-2017-5127 | Google Chrome prior to 62.0.3202.62 | Use after free in PDFium in Google Chrome prior to 62.0.3202.62 allowed a remote attacker to potentially exploit heap corruption via a craft | HIGH 8.8 | 1.6 % | ||
| CVE-2017-5126 | Google Chrome prior to 62.0.3202.62 | A use after free in PDFium in Google Chrome prior to 62.0.3202.62 allowed a remote attacker to potentially exploit heap corruption via a cra | HIGH 8.8 | 1.3 % | ||
| CVE-2017-5125 | Google Chrome prior to 62.0.3202.62 | Heap buffer overflow in Skia in Google Chrome prior to 62.0.3202.62 allowed a remote attacker to potentially exploit heap corruption via a c | HIGH 8.8 | 1.7 % | ||
| CVE-2017-5124 | Google Chrome prior to 62.0.3202.62 | Incorrect application of sandboxing in Blink in Google Chrome prior to 62.0.3202.62 allowed a remote attacker to inject arbitrary scripts or | MEDIUM 6.1 | 5.1 % | ||
| CVE-2017-15395 | Google Chrome prior to 62.0.3202.62 | A use after free in Blink in Google Chrome prior to 62.0.3202.62 allowed a remote attacker to potentially exploit heap corruption via a craf | MEDIUM 6.5 | 1.3 % | ||
| CVE-2017-15394 | Google Chrome prior to 62.0.3202.62 | Insufficient Policy Enforcement in Extensions in Google Chrome prior to 62.0.3202.62 allowed a remote attacker to perform domain spoofing in | MEDIUM 6.5 | 1.8 % | ||
| CVE-2017-15393 | Google Chrome prior to 62.0.3202.62 | Insufficient Policy Enforcement in Devtools remote debugging in Google Chrome prior to 62.0.3202.62 allowed a remote attacker to obtain acce | HIGH 8.8 | 1.4 % | ||
| CVE-2017-15392 | Google Chrome prior to 62.0.3202.62 | Insufficient data validation in V8 in Google Chrome prior to 62.0.3202.62 allowed an attacker who can write to the Windows Registry to poten | MEDIUM 4.3 | 0.8 % | ||
| CVE-2017-15391 | Google Chrome prior to 62.0.3202.62 | Insufficient Policy Enforcement in Extensions in Google Chrome prior to 62.0.3202.62 allowed a remote attacker to access Extension pages wit | MEDIUM 6.5 | 1.3 % | ||
| CVE-2017-15390 | Google Chrome prior to 62.0.3202.62 | Insufficient Policy Enforcement in Omnibox in Google Chrome prior to 62.0.3202.62 allowed a remote attacker to perform domain spoofing via I | MEDIUM 6.5 | 1.2 % | ||
| CVE-2017-15389 | Google Chrome prior to 62.0.3202.62 | An insufficient watchdog timer in navigation in Google Chrome prior to 62.0.3202.62 allowed a remote attacker to spoof the contents of the O | MEDIUM 6.5 | 1.3 % | ||
| CVE-2017-15388 | Google Chrome prior to 62.0.3202.62 | Iteration through non-finite points in Skia in Google Chrome prior to 62.0.3202.62 allowed a remote attacker to perform an out of bounds mem | HIGH 8.8 | 1.6 % | ||
| CVE-2017-15387 | Google Chrome prior to 62.0.3202.62 | Insufficient enforcement of Content Security Policy in Blink in Google Chrome prior to 62.0.3202.62 allowed a remote attacker to open javasc | HIGH 8.8 | 1.4 % | ||
| CVE-2017-15386 | Google Chrome prior to 62.0.3202.62 | Incorrect implementation in Blink in Google Chrome prior to 62.0.3202.62 allowed a remote attacker to spoof the contents of the Omnibox (URL | MEDIUM 6.5 | 1.5 % |