Latest CVE Feed

Following is the list of latest published vulnerabilities. You can filter the list based on the severity of the vulnerability, whether it is actively exploited (also known as CISA KEV List) or remotely exploitable. You can also sort the list based on the published date, last updated date, or CVSS score.

Latest Critical Actively Exploited Remotely Exploitable

4.3

MEDIUM

CVE-2017-15418

Use of uninitialized memory in Skia in Google Chrome prior to 63.0.3239.84 allowed a remote attacker to obtain potentially sensitive information from process memory via a crafted HTML page....

Affected Products : debian_linux enterprise_linux_desktop enterprise_linux_server enterprise_linux_workstation chrome
EPSS Score: %0.66

Published: Aug. 28, 2018

Modified: Nov. 21, 2024
5.3

MEDIUM

CVE-2017-15417

Inappropriate implementation in Skia canvas composite operations in Google Chrome prior to 63.0.3239.84 allowed a remote attacker to leak cross-origin data via a crafted HTML page....

Affected Products : debian_linux enterprise_linux_desktop enterprise_linux_server enterprise_linux_workstation chrome
EPSS Score: %0.62

Published: Aug. 28, 2018

Modified: Nov. 21, 2024
6.5

MEDIUM

CVE-2017-15416

Heap buffer overflow in Blob API in Google Chrome prior to 63.0.3239.84 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page, aka a Blink out-of-bounds read....

Affected Products : debian_linux enterprise_linux_desktop enterprise_linux_server enterprise_linux_workstation chrome
EPSS Score: %0.57

Published: Aug. 28, 2018

Modified: Nov. 21, 2024
6.5

MEDIUM

CVE-2017-15415

Incorrect serialization in IPC in Google Chrome prior to 63.0.3239.84 allowed a remote attacker to leak the value of a pointer via a crafted HTML page....

Affected Products : debian_linux enterprise_linux_desktop enterprise_linux_server enterprise_linux_workstation chrome
EPSS Score: %0.73

Published: Aug. 28, 2018

Modified: Nov. 21, 2024
8.8

HIGH

CVE-2017-15413

Type confusion in WebAssembly in V8 in Google Chrome prior to 63.0.3239.84 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page....

Affected Products : debian_linux enterprise_linux_desktop enterprise_linux_server enterprise_linux_workstation chrome
EPSS Score: %0.92

Published: Aug. 28, 2018

Modified: Nov. 21, 2024
8.8

HIGH

CVE-2017-15412

Use after free in libxml2 before 2.9.5, as used in Google Chrome prior to 63.0.3239.84 and other products, allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page....

Affected Products : debian_linux enterprise_linux_desktop enterprise_linux_server enterprise_linux_workstation chrome libxml2 nokogiri
EPSS Score: %3.25

Published: Aug. 28, 2018

Modified: Nov. 21, 2024
8.8

HIGH

CVE-2017-15411

Use after free in PDFium in Google Chrome prior to 63.0.3239.84 allowed a remote attacker to potentially exploit heap corruption via a crafted PDF file....

Affected Products : debian_linux enterprise_linux_desktop enterprise_linux_server enterprise_linux_workstation chrome
EPSS Score: %0.94

Published: Aug. 28, 2018

Modified: Nov. 21, 2024
8.8

HIGH

CVE-2017-15410

Use after free in PDFium in Google Chrome prior to 63.0.3239.84 allowed a remote attacker to potentially exploit heap corruption via a crafted PDF file....

Affected Products : debian_linux enterprise_linux_desktop enterprise_linux_server enterprise_linux_workstation chrome
EPSS Score: %0.94

Published: Aug. 28, 2018

Modified: Nov. 21, 2024
8.8

HIGH

CVE-2017-15409

Heap buffer overflow in Skia in Google Chrome prior to 63.0.3239.84 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page....

Affected Products : debian_linux enterprise_linux_desktop enterprise_linux_server enterprise_linux_workstation chrome
EPSS Score: %1.10

Published: Aug. 28, 2018

Modified: Nov. 21, 2024
8.8

HIGH

CVE-2017-15408

Heap buffer overflow in Omnibox in Google Chrome prior to 63.0.3239.84 allowed a remote attacker to potentially exploit heap corruption via a crafted PDF file that is mishandled by PDFium....

Affected Products : debian_linux enterprise_linux_desktop enterprise_linux_server enterprise_linux_workstation chrome
EPSS Score: %1.10

Published: Aug. 28, 2018

Modified: Nov. 21, 2024
8.8

HIGH

CVE-2017-15407

Out-of-bounds Write in the QUIC networking stack in Google Chrome prior to 63.0.3239.84 allowed a remote attacker to gain code execution via a malicious server....

Affected Products : debian_linux enterprise_linux_desktop enterprise_linux_server enterprise_linux_workstation chrome
EPSS Score: %2.03

Published: Aug. 28, 2018

Modified: Nov. 21, 2024
8.8

HIGH

CVE-2017-15406

A stack buffer overflow in V8 in Google Chrome prior to 62.0.3202.75 allowed a remote attacker to perform an out of bounds memory read via a crafted HTML page....

Affected Products : chrome
EPSS Score: %1.02

Published: Aug. 28, 2018

Modified: Nov. 21, 2024
7.0

HIGH

CVE-2017-15405

Inappropriate symlink handling and a race condition in the stateful recovery feature implementation could lead to a persistance established by a malicious code running with root privileges in cryptohomed in Google Chrome on Chrome OS prior to 61.0.3163.11...

Affected Products : chrome
EPSS Score: %0.01

Published: Jan. 09, 2019

Modified: Nov. 21, 2024
7.8

HIGH

CVE-2017-15404

An ability to process crash dumps under root privileges and inappropriate symlinks handling could lead to a local privilege escalation in Crash Reporting in Google Chrome on Chrome OS prior to 61.0.3163.113 allowed a local attacker to perform privilege es...

Affected Products : chrome
EPSS Score: %0.01

Published: Jan. 09, 2019

Modified: Nov. 21, 2024
7.3

HIGH

CVE-2017-15403

Insufficient data validation in crosh could lead to a command injection under chronos privileges in Networking in Google Chrome on Chrome OS prior to 61.0.3163.113 allowed a local attacker to execute arbitrary code via a crafted HTML page....

Affected Products : chrome chrome_os
EPSS Score: %0.09

Published: Jan. 09, 2019

Modified: Nov. 21, 2024
9.6

CRITICAL

CVE-2017-15402

Using an ID that can be controlled by a compromised renderer which allows any frame to overwrite the page_state of any other frame in the same process in Navigation in Google Chrome on Chrome OS prior to 62.0.3202.74 allowed a remote attacker who had comp...

Affected Products : chrome chrome_os
EPSS Score: %0.38

Published: Jan. 09, 2019

Modified: Nov. 21, 2024
8.8

HIGH

CVE-2017-15401

A memory corruption bug in WebAssembly could lead to out of bounds read and write through V8 in WebAssembly in Google Chrome prior to 62.0.3202.62 allowed a remote attacker to execute arbitrary code inside a sandbox via a crafted HTML page....

Affected Products : chrome
EPSS Score: %1.18

Published: Jan. 09, 2019

Modified: Nov. 21, 2024
9.3

HIGH

CVE-2017-15400

Insufficient restriction of IPP filters in CUPS in Google Chrome OS prior to 62.0.3202.74 allowed a remote attacker to execute a command with the same privileges as the cups daemon via a crafted PPD file, aka a printer zeroconfig CRLF issue....

Affected Products : chrome_os
EPSS Score: %0.41

Published: Feb. 07, 2018

Modified: Nov. 21, 2024
9.3

HIGH

CVE-2017-15399

A use after free in V8 in Google Chrome prior to 62.0.3202.89 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page....

Affected Products : debian_linux enterprise_linux_desktop enterprise_linux_server enterprise_linux_workstation chrome
EPSS Score: %30.44

Published: Aug. 28, 2018

Modified: Nov. 21, 2024
9.8

CRITICAL

CVE-2017-15398

A stack buffer overflow in the QUIC networking stack in Google Chrome prior to 62.0.3202.89 allowed a remote attacker to gain code execution via a malicious server....

Affected Products : debian_linux enterprise_linux_desktop enterprise_linux_server enterprise_linux_workstation chrome
EPSS Score: %9.05

Published: Aug. 28, 2018

Modified: Nov. 21, 2024

Showing 20 of 292318 Results

Browse by Apps

Latest CVE Feed

4.3

5.3

6.5

6.5

8.8

8.8

8.8

8.8

8.8

8.8

8.8

8.8

7.0

7.8

7.3

9.6

8.8

9.3

9.3

9.8

Theme Customizer

Layout

Vertical

Horizontal

Two Column

Color Scheme

Light

Dark

Layout Width

Fluid

Boxed

Layout Position

Topbar Color

Light

Dark

Sidebar Size

Default

Compact

Small (Icon View)

Small Hover View

Sidebar View

Default

Detached

Sidebar Color

Light

Dark

Gradient

Preloader

Enable

Disable