← Back

Chrome

chrome

Vendor: Google • 5,450 CVEs

CVEs (5,450)

CVE
VENDORS
PRODUCTS
UPDATED
PUBLISHED
CVSS
CVE-2018-18341
3Debian
GoogleRedhat
5Chrome
Debian LinuxLinux Desktop+2 more
Nov 21, 2024
Dec 11, 2018
N/A· v4
8.8 HIGH· v3
6.8 MEDIUM· v2
An integer overflow leading to a heap buffer overflow in Blink in Google Chrome prior to 71.0.3578.80 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page.
CVE-2018-18340
3Debian
GoogleRedhat
5Chrome
Debian LinuxLinux Desktop+2 more
Nov 21, 2024
Dec 11, 2018
N/A· v4
8.8 HIGH· v3
6.8 MEDIUM· v2
Incorrect object lifecycle in MediaRecorder in Google Chrome prior to 71.0.3578.80 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page.
CVE-2018-18339
3Debian
GoogleRedhat
5Chrome
Debian LinuxLinux Desktop+2 more
Nov 21, 2024
Dec 11, 2018
N/A· v4
8.8 HIGH· v3
6.8 MEDIUM· v2
Incorrect object lifecycle in WebAudio in Google Chrome prior to 71.0.3578.80 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page.
CVE-2018-18338
3Debian
GoogleRedhat
5Chrome
Debian LinuxLinux Desktop+2 more
Nov 21, 2024
Dec 11, 2018
N/A· v4
8.8 HIGH· v3
6.8 MEDIUM· v2
Incorrect, thread-unsafe use of SkImage in Canvas in Google Chrome prior to 71.0.3578.80 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page.
CVE-2018-18337
3Debian
GoogleRedhat
5Chrome
Debian LinuxLinux Desktop+2 more
Nov 21, 2024
Dec 11, 2018
N/A· v4
8.8 HIGH· v3
6.8 MEDIUM· v2
Incorrect handling of stylesheets leading to a use after free in Blink in Google Chrome prior to 71.0.3578.80 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page.
CVE-2018-18336
3Debian
GoogleRedhat
5Chrome
Debian LinuxLinux Desktop+2 more
Nov 21, 2024
Dec 11, 2018
N/A· v4
8.8 HIGH· v3
6.8 MEDIUM· v2
Incorrect object lifecycle in PDFium in Google Chrome prior to 71.0.3578.80 allowed a remote attacker to potentially exploit heap corruption via a crafted PDF file.
CVE-2018-18335
4Debian
GoogleOpensuse+1 more
6Chrome
Debian LinuxEnterprise Linux Desktop+3 more
Nov 21, 2024
Dec 11, 2018
N/A· v4
8.8 HIGH· v3
6.8 MEDIUM· v2
Heap buffer overflow in Skia in Google Chrome prior to 71.0.3578.80 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page.
CVE-2018-17481
3Debian
GoogleRedhat
5Chrome
Debian LinuxLinux Desktop+2 more
Nov 21, 2024
Dec 11, 2018
N/A· v4
8.8 HIGH· v3
6.8 MEDIUM· v2
Incorrect object lifecycle handling in PDFium in Google Chrome prior to 71.0.3578.98 allowed a remote attacker to potentially exploit heap corruption via a crafted PDF file.
CVE-2018-17480
3Debian
GoogleRedhat
5Chrome
Debian LinuxEnterprise Linux Desktop+2 more
Oct 24, 2025
Dec 11, 2018
N/A· v4
8.8 HIGH· v3
6.8 MEDIUM· v2
Execution of user supplied Javascript during array deserialization leading to an out of bounds write in V8 in Google Chrome prior to 71.0.3578.80 allowed a remote attacker to execute arbitrary code inside a sandbox via a...Show more
Execution of user supplied Javascript during array deserialization leading to an out of bounds write in V8 in Google Chrome prior to 71.0.3578.80 allowed a remote attacker to execute arbitrary code inside a sandbox via a crafted HTML page.Show less
CVE-2018-6152
3Debian
GoogleRedhat
5Chrome
Debian LinuxEnterprise Linux Desktop+2 more
Jun 17, 2026
Dec 4, 2018
N/A· v4
9.6 CRITICAL· v3
6.8 MEDIUM· v2
The implementation of the Page.downloadBehavior backend unconditionally marked downloaded files as safe, regardless of file type in Google Chrome prior to 66.0.3359.117 allowed an attacker who convinced a user to install...Show more
The implementation of the Page.downloadBehavior backend unconditionally marked downloaded files as safe, regardless of file type in Google Chrome prior to 66.0.3359.117 allowed an attacker who convinced a user to install a malicious extension to potentially perform a sandbox escape via a crafted HTML page and user interaction.Show less
CVE-2018-6116
3Debian
GoogleRedhat
5Chrome
Debian LinuxLinux Desktop+2 more
Jun 17, 2026
Dec 4, 2018
N/A· v4
6.5 MEDIUM· v3
4.3 MEDIUM· v2
A nullptr dereference in WebAssembly in Google Chrome prior to 66.0.3359.117 allowed a remote attacker to potentially perform out of bounds memory access via a crafted HTML page.
CVE-2018-6115
1Google
1Chrome
Jun 17, 2026
Dec 4, 2018
N/A· v4
6.5 MEDIUM· v3
4.3 MEDIUM· v2
Inappropriate setting of the SEE_MASK_FLAG_NO_UI flag in file downloads in Google Chrome prior to 66.0.3359.117 allowed a remote attacker to potentially bypass OS malware checks via a crafted HTML page.
CVE-2018-6108
3Debian
GoogleRedhat
5Chrome
Debian LinuxLinux Desktop+2 more
Jun 17, 2026
Dec 4, 2018
N/A· v4
6.5 MEDIUM· v3
4.3 MEDIUM· v2
Incorrect handling of confusable characters in URL Formatter in Google Chrome prior to 66.0.3359.117 allowed a remote attacker to perform domain spoofing via IDN homographs via a crafted HTML page.
CVE-2018-6107
3Debian
GoogleRedhat
5Chrome
Debian LinuxLinux Desktop+2 more
Jun 17, 2026
Dec 4, 2018
N/A· v4
6.5 MEDIUM· v3
4.3 MEDIUM· v2
Incorrect handling of confusable characters in URL Formatter in Google Chrome prior to 66.0.3359.117 allowed a remote attacker to perform domain spoofing via IDN homographs via a crafted domain name.
CVE-2018-6105
3Debian
GoogleRedhat
5Chrome
Debian LinuxLinux Desktop+2 more
Jun 17, 2026
Dec 4, 2018
N/A· v4
6.5 MEDIUM· v3
4.3 MEDIUM· v2
Incorrect handling of confusable characters in Omnibox in Google Chrome prior to 66.0.3359.117 allowed a remote attacker to perform domain spoofing via IDN homographs via a crafted domain name.
CVE-2018-6104
3Debian
GoogleRedhat
5Chrome
Debian LinuxLinux Desktop+2 more
Jun 17, 2026
Dec 4, 2018
N/A· v4
6.5 MEDIUM· v3
4.3 MEDIUM· v2
Incorrect handling of confusable characters in URL Formatter in Google Chrome prior to 66.0.3359.117 allowed a remote attacker to perform domain spoofing via IDN homographs via a crafted domain name.
CVE-2018-6103
3Debian
GoogleRedhat
5Chrome
Debian LinuxLinux Desktop+2 more
Jun 17, 2026
Dec 4, 2018
N/A· v4
6.5 MEDIUM· v3
4.3 MEDIUM· v2
A stagnant permission prompt in Prompts in Google Chrome prior to 66.0.3359.117 allowed a remote attacker to bypass permission policy via a crafted HTML page.
CVE-2018-6102
3Debian
GoogleRedhat
5Chrome
Debian LinuxLinux Desktop+2 more
Jun 17, 2026
Dec 4, 2018
N/A· v4
4.3 MEDIUM· v3
4.3 MEDIUM· v2
Missing confusable characters in Internationalization in Google Chrome prior to 66.0.3359.117 allowed a remote attacker to spoof the contents of the Omnibox (URL bar) via a crafted domain name.
CVE-2018-6101
3Debian
GoogleRedhat
5Chrome
Debian LinuxLinux Desktop+2 more
Jun 17, 2026
Dec 4, 2018
N/A· v4
7.5 HIGH· v3
5.1 MEDIUM· v2
A lack of host validation in DevTools in Google Chrome prior to 66.0.3359.117 allowed a remote attacker to execute arbitrary code via a crafted HTML page, if the user is running a remote DevTools debugging server.
CVE-2018-6099
3Debian
GoogleRedhat
5Chrome
Debian LinuxLinux Desktop+2 more
Jun 17, 2026
Dec 4, 2018
N/A· v4
6.5 MEDIUM· v3
4.3 MEDIUM· v2
A lack of CORS checks in Blink in Google Chrome prior to 66.0.3359.117 allowed a remote attacker to leak limited cross-origin data via a crafted HTML page.