Redhat

CVE VENDORS PRODUCTS UPDATED PUBLISHED CVSS
CVE-2018-18312 5Canonical DebianNetapp+2 more 8Debian Linux E Series Santricity Os ControllerEnterprise Linux+5 more Nov 21, 2024 Dec 5, 2018 N/A· v4 9.8 CRITICAL· v3 7.5 HIGH· v2 Perl before 5.26.3 and 5.28.0 before 5.28.1 has a buffer overflow via a crafted regular expression that triggers invalid write operations.
CVE-2018-1002105 3Kubernetes NetappRedhat 3Kubernetes Openshift Container PlatformTrident Nov 21, 2024 Dec 5, 2018 N/A· v4 9.8 CRITICAL· v3 7.5 HIGH· v2 In all Kubernetes versions prior to v1.10.11, v1.11.5, and v1.12.3, incorrect handling of error responses to proxied upgrade requests in the kube-apiserver allowed specially crafted requests to establish a connection thr...Show more In all Kubernetes versions prior to v1.10.11, v1.11.5, and v1.12.3, incorrect handling of error responses to proxied upgrade requests in the kube-apiserver allowed specially crafted requests to establish a connection through the Kubernetes API server to backend servers, then send arbitrary requests over the same connection directly to the backend, authenticated with the Kubernetes API server's TLS credentials used to establish the backend connection.Show less
CVE-2018-6152 3Debian GoogleRedhat 5Chrome Debian LinuxEnterprise Linux Desktop+2 more Jun 17, 2026 Dec 4, 2018 N/A· v4 9.6 CRITICAL· v3 6.8 MEDIUM· v2 The implementation of the Page.downloadBehavior backend unconditionally marked downloaded files as safe, regardless of file type in Google Chrome prior to 66.0.3359.117 allowed an attacker who convinced a user to install...Show more The implementation of the Page.downloadBehavior backend unconditionally marked downloaded files as safe, regardless of file type in Google Chrome prior to 66.0.3359.117 allowed an attacker who convinced a user to install a malicious extension to potentially perform a sandbox escape via a crafted HTML page and user interaction.Show less
CVE-2018-6116 3Debian GoogleRedhat 5Chrome Debian LinuxLinux Desktop+2 more Jun 17, 2026 Dec 4, 2018 N/A· v4 6.5 MEDIUM· v3 4.3 MEDIUM· v2 A nullptr dereference in WebAssembly in Google Chrome prior to 66.0.3359.117 allowed a remote attacker to potentially perform out of bounds memory access via a crafted HTML page.
CVE-2018-6108 3Debian GoogleRedhat 5Chrome Debian LinuxLinux Desktop+2 more Jun 17, 2026 Dec 4, 2018 N/A· v4 6.5 MEDIUM· v3 4.3 MEDIUM· v2 Incorrect handling of confusable characters in URL Formatter in Google Chrome prior to 66.0.3359.117 allowed a remote attacker to perform domain spoofing via IDN homographs via a crafted HTML page.
CVE-2018-6107 3Debian GoogleRedhat 5Chrome Debian LinuxLinux Desktop+2 more Jun 17, 2026 Dec 4, 2018 N/A· v4 6.5 MEDIUM· v3 4.3 MEDIUM· v2 Incorrect handling of confusable characters in URL Formatter in Google Chrome prior to 66.0.3359.117 allowed a remote attacker to perform domain spoofing via IDN homographs via a crafted domain name.
CVE-2018-6105 3Debian GoogleRedhat 5Chrome Debian LinuxLinux Desktop+2 more Jun 17, 2026 Dec 4, 2018 N/A· v4 6.5 MEDIUM· v3 4.3 MEDIUM· v2 Incorrect handling of confusable characters in Omnibox in Google Chrome prior to 66.0.3359.117 allowed a remote attacker to perform domain spoofing via IDN homographs via a crafted domain name.
CVE-2018-6104 3Debian GoogleRedhat 5Chrome Debian LinuxLinux Desktop+2 more Jun 17, 2026 Dec 4, 2018 N/A· v4 6.5 MEDIUM· v3 4.3 MEDIUM· v2 Incorrect handling of confusable characters in URL Formatter in Google Chrome prior to 66.0.3359.117 allowed a remote attacker to perform domain spoofing via IDN homographs via a crafted domain name.
CVE-2018-6103 3Debian GoogleRedhat 5Chrome Debian LinuxLinux Desktop+2 more Jun 17, 2026 Dec 4, 2018 N/A· v4 6.5 MEDIUM· v3 4.3 MEDIUM· v2 A stagnant permission prompt in Prompts in Google Chrome prior to 66.0.3359.117 allowed a remote attacker to bypass permission policy via a crafted HTML page.
CVE-2018-6102 3Debian GoogleRedhat 5Chrome Debian LinuxLinux Desktop+2 more Jun 17, 2026 Dec 4, 2018 N/A· v4 4.3 MEDIUM· v3 4.3 MEDIUM· v2 Missing confusable characters in Internationalization in Google Chrome prior to 66.0.3359.117 allowed a remote attacker to spoof the contents of the Omnibox (URL bar) via a crafted domain name.
CVE-2018-6101 3Debian GoogleRedhat 5Chrome Debian LinuxLinux Desktop+2 more Jun 17, 2026 Dec 4, 2018 N/A· v4 7.5 HIGH· v3 5.1 MEDIUM· v2 A lack of host validation in DevTools in Google Chrome prior to 66.0.3359.117 allowed a remote attacker to execute arbitrary code via a crafted HTML page, if the user is running a remote DevTools debugging server.
CVE-2018-6099 3Debian GoogleRedhat 5Chrome Debian LinuxLinux Desktop+2 more Jun 17, 2026 Dec 4, 2018 N/A· v4 6.5 MEDIUM· v3 4.3 MEDIUM· v2 A lack of CORS checks in Blink in Google Chrome prior to 66.0.3359.117 allowed a remote attacker to leak limited cross-origin data via a crafted HTML page.
CVE-2018-6098 3Debian GoogleRedhat 5Chrome Debian LinuxLinux Desktop+2 more Jun 17, 2026 Dec 4, 2018 N/A· v4 6.5 MEDIUM· v3 4.3 MEDIUM· v2 Incorrect handling of confusable characters in URL Formatter in Google Chrome prior to 66.0.3359.117 allowed a remote attacker to perform domain spoofing via IDN homographs via a crafted domain name.
CVE-2018-6095 3Debian GoogleRedhat 5Chrome Debian LinuxLinux Desktop+2 more Jun 17, 2026 Dec 4, 2018 N/A· v4 6.5 MEDIUM· v3 4.3 MEDIUM· v2 Inappropriate dismissal of file picker on keyboard events in Blink in Google Chrome prior to 66.0.3359.117 allowed a remote attacker to read local files via a crafted HTML page.
CVE-2018-6094 3Debian GoogleRedhat 5Chrome Debian LinuxLinux Desktop+2 more Jun 17, 2026 Dec 4, 2018 N/A· v4 8.8 HIGH· v3 6.8 MEDIUM· v2 Inline metadata in GarbageCollection in Google Chrome prior to 66.0.3359.117 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page.
CVE-2018-6092 3Debian GoogleRedhat 5Chrome Debian LinuxLinux Desktop+2 more Jun 17, 2026 Dec 4, 2018 N/A· v4 8.8 HIGH· v3 6.8 MEDIUM· v2 An integer overflow on 32-bit systems in WebAssembly in Google Chrome prior to 66.0.3359.117 allowed a remote attacker to execute arbitrary code inside a sandbox via a crafted HTML page.
CVE-2018-6090 3Debian GoogleRedhat 5Chrome Debian LinuxLinux Desktop+2 more Jun 17, 2026 Dec 4, 2018 N/A· v4 8.8 HIGH· v3 6.8 MEDIUM· v2 An integer overflow that lead to a heap buffer-overflow in Skia in Google Chrome prior to 66.0.3359.117 allowed a remote attacker to execute arbitrary code inside a sandbox via a crafted HTML page.
CVE-2018-6089 3Debian GoogleRedhat 5Chrome Debian LinuxLinux Desktop+2 more Jun 17, 2026 Dec 4, 2018 N/A· v4 6.5 MEDIUM· v3 4.3 MEDIUM· v2 A lack of CORS checks, after a Service Worker redirected to a cross-origin PDF, in Service Worker in Google Chrome prior to 66.0.3359.117 allowed a remote attacker to leak limited cross-origin data via a crafted HTML pag...Show more A lack of CORS checks, after a Service Worker redirected to a cross-origin PDF, in Service Worker in Google Chrome prior to 66.0.3359.117 allowed a remote attacker to leak limited cross-origin data via a crafted HTML page.Show less
CVE-2018-6088 3Debian GoogleRedhat 5Chrome Debian LinuxLinux Desktop+2 more Jun 17, 2026 Dec 4, 2018 N/A· v4 8.8 HIGH· v3 6.8 MEDIUM· v2 An iterator-invalidation bug in PDFium in Google Chrome prior to 66.0.3359.117 allowed a remote attacker to execute arbitrary code inside a sandbox via a crafted PDF file.
CVE-2018-6087 3Debian GoogleRedhat 5Chrome Debian LinuxLinux Desktop+2 more Jun 17, 2026 Dec 4, 2018 N/A· v4 8.8 HIGH· v3 6.8 MEDIUM· v2 A use-after-free in WebAssembly in Google Chrome prior to 66.0.3359.117 allowed a remote attacker to execute arbitrary code inside a sandbox via a crafted HTML page.

Previous 1...122123124...285 Next