Google Chrome prior to 63.0.3239.84 unknown
18 published vulnerabilities name this product.
As the CNAs write it in their CVE records (vendor and product); the versions are theirs.
| CVE | Vulnerable versions | Title | Severity | Published | EPSS | Exploitation |
|---|---|---|---|---|---|---|
| CVE-2017-15427 | Google Chrome prior to 63.0.3239.84 unknown | Insufficient policy enforcement in Omnibox in Google Chrome prior to 63.0.3239.84 allowed a socially engineered user to XSS themselves by dr | MEDIUM 6.1 | 0.9 % | ||
| CVE-2017-15426 | Google Chrome prior to 63.0.3239.84 unknown | Insufficient policy enforcement in Omnibox in Google Chrome prior to 63.0.3239.84 allowed a remote attacker to perform domain spoofing via I | MEDIUM 6.5 | 1.2 % | ||
| CVE-2017-15425 | Google Chrome prior to 63.0.3239.84 unknown | Insufficient policy enforcement in Omnibox in Google Chrome prior to 63.0.3239.84 allowed a remote attacker to perform domain spoofing via I | MEDIUM 6.5 | 1.2 % | ||
| CVE-2017-15424 | Google Chrome prior to 63.0.3239.84 unknown | Insufficient policy enforcement in Omnibox in Google Chrome prior to 63.0.3239.84 allowed a remote attacker to perform domain spoofing via I | MEDIUM 6.5 | 1.2 % | ||
| CVE-2017-15423 | Google Chrome prior to 63.0.3239.84 unknown | Inappropriate implementation in BoringSSL SPAKE2 in Google Chrome prior to 63.0.3239.84 allowed a remote attacker to leak the low-order bits | MEDIUM 5.3 | 1.5 % | ||
| CVE-2017-15422 | Google Chrome prior to 63.0.3239.84 unknown | Integer overflow in international date handling in International Components for Unicode (ICU) for C/C++ before 60.1, as used in V8 in Google | MEDIUM 6.5 | 2.5 % | ||
| CVE-2017-15419 | Google Chrome prior to 63.0.3239.84 unknown | Insufficient policy enforcement in Resource Timing API in Google Chrome prior to 63.0.3239.84 allowed a remote attacker to infer browsing hi | MEDIUM 6.5 | 1.3 % | ||
| CVE-2017-15418 | Google Chrome prior to 63.0.3239.84 unknown | Use of uninitialized memory in Skia in Google Chrome prior to 63.0.3239.84 allowed a remote attacker to obtain potentially sensitive informa | MEDIUM 4.3 | 1.6 % | ||
| CVE-2017-15417 | Google Chrome prior to 63.0.3239.84 unknown | Inappropriate implementation in Skia canvas composite operations in Google Chrome prior to 63.0.3239.84 allowed a remote attacker to leak cr | MEDIUM 5.3 | 1.5 % | ||
| CVE-2017-15416 | Google Chrome prior to 63.0.3239.84 unknown | Heap buffer overflow in Blob API in Google Chrome prior to 63.0.3239.84 allowed a remote attacker to potentially exploit heap corruption via | MEDIUM 6.5 | 1.5 % | ||
| CVE-2017-15415 | Google Chrome prior to 63.0.3239.84 unknown | Incorrect serialization in IPC in Google Chrome prior to 63.0.3239.84 allowed a remote attacker to leak the value of a pointer via a crafted | MEDIUM 6.5 | 1.7 % | ||
| CVE-2017-15413 | Google Chrome prior to 63.0.3239.84 unknown | Type confusion in WebAssembly in V8 in Google Chrome prior to 63.0.3239.84 allowed a remote attacker to potentially exploit heap corruption | HIGH 8.8 | 1.7 % | ||
| CVE-2017-15412 | Google Chrome prior to 63.0.3239.84 unknown | Use after free in libxml2 before 2.9.5, as used in Google Chrome prior to 63.0.3239.84 and other products, allowed a remote attacker to pote | HIGH 8.8 | 2.9 % | ||
| CVE-2017-15411 | Google Chrome prior to 63.0.3239.84 unknown | Use after free in PDFium in Google Chrome prior to 63.0.3239.84 allowed a remote attacker to potentially exploit heap corruption via a craft | HIGH 8.8 | 1.6 % | ||
| CVE-2017-15410 | Google Chrome prior to 63.0.3239.84 unknown | Use after free in PDFium in Google Chrome prior to 63.0.3239.84 allowed a remote attacker to potentially exploit heap corruption via a craft | HIGH 8.8 | 1.6 % | ||
| CVE-2017-15409 | Google Chrome prior to 63.0.3239.84 unknown | Heap buffer overflow in Skia in Google Chrome prior to 63.0.3239.84 allowed a remote attacker to potentially exploit heap corruption via a c | HIGH 8.8 | 1.6 % | ||
| CVE-2017-15408 | Google Chrome prior to 63.0.3239.84 unknown | Heap buffer overflow in Omnibox in Google Chrome prior to 63.0.3239.84 allowed a remote attacker to potentially exploit heap corruption via | HIGH 8.8 | 1.5 % | ||
| CVE-2017-15407 | Google Chrome prior to 63.0.3239.84 unknown | Out-of-bounds Write in the QUIC networking stack in Google Chrome prior to 63.0.3239.84 allowed a remote attacker to gain code execution via | HIGH 8.8 | 2.4 % |