Vulnerability   
Search   
    Search 324607 CVE descriptions
and 145615 test descriptions,
access 10,000+ cross references.
Tests   CVE   All  

Test ID:1.3.6.1.4.1.25623.1.0.813505
Category:General
Title:Google Chrome Security Updates (stable-channel-update-for-desktop_29-2018-05) - Windows
Summary:Google Chrome is prone to multiple vulnerabilities.
Description:Summary:
Google Chrome is prone to multiple vulnerabilities.

Vulnerability Insight:
Multiple flaws are due to:

- An use after free in Blink.

- Type confusion in Blink.

- Overly permissive policy in WebUSB.

- Heap buffer overflow in Skia.

- Use after free in indexedDB.

- uXSS in Chrome on iOS.

- Out of bounds memory access in WebRTC, V8 and PDFium.

- Incorrect mutability protection in WebAssembly.

- Use of uninitialized memory in WebRTC.

- URL spoof in Omnibox.

- Referrer Policy bypass in Blink.

- UI spoofing in Blink.

- Leak of visited status of page in Blink.

- Overly permissive policy in Extensions.

- Restrictions bypass in the debugger extension API.

- Incorrect escaping of MathML in Blink.

- Password fields not taking advantage of OS protections in Views.

Vulnerability Impact:
Successful exploitation can potentially
result in the execution of arbitrary code or even enable full remote code
execution capabilities and some unspecified impacts.

Affected Software/OS:
Google Chrome version prior to 67.0.3396.62
on Windows.

Solution:
Upgrade to Google Chrome version
67.0.3396.62 or later. Please see the references for more information.

CVSS Score:
9.3

CVSS Vector:
AV:N/AC:M/Au:N/C:C/I:C/A:C

Cross-Ref: Common Vulnerability Exposure (CVE) ID: CVE-2018-6123
BugTraq ID: 104309
http://www.securityfocus.com/bid/104309
Debian Security Information: DSA-4237 (Google Search)
https://www.debian.org/security/2018/dsa-4237
https://crbug.com/835639
RedHat Security Advisories: RHSA-2018:1815
https://access.redhat.com/errata/RHSA-2018:1815
http://www.securitytracker.com/id/1041014
Common Vulnerability Exposure (CVE) ID: CVE-2018-6124
https://crbug.com/840320
Common Vulnerability Exposure (CVE) ID: CVE-2018-6125
https://crbug.com/818592
Common Vulnerability Exposure (CVE) ID: CVE-2018-6126
BugTraq ID: 104411
http://www.securityfocus.com/bid/104411
Debian Security Information: DSA-4220 (Google Search)
https://www.debian.org/security/2018/dsa-4220
https://www.exploit-db.com/exploits/45098/
https://security.gentoo.org/glsa/201810-01
https://crbug.com/844457
RedHat Security Advisories: RHSA-2018:2112
https://access.redhat.com/errata/RHSA-2018:2112
RedHat Security Advisories: RHSA-2018:2113
https://access.redhat.com/errata/RHSA-2018:2113
http://www.securitytracker.com/id/1041046
Common Vulnerability Exposure (CVE) ID: CVE-2018-6127
https://crbug.com/842990
Common Vulnerability Exposure (CVE) ID: CVE-2018-6128
https://chromereleases.googleblog.com/2018/05/stable-channel-update-for-desktop_58.html
https://crbug.com/841105
Common Vulnerability Exposure (CVE) ID: CVE-2018-6129
https://crbug.com/838672
Common Vulnerability Exposure (CVE) ID: CVE-2018-6130
https://crbug.com/838402
Common Vulnerability Exposure (CVE) ID: CVE-2018-6131
https://crbug.com/826434
Common Vulnerability Exposure (CVE) ID: CVE-2018-6132
https://crbug.com/839960
Common Vulnerability Exposure (CVE) ID: CVE-2018-6133
https://crbug.com/817247
Common Vulnerability Exposure (CVE) ID: CVE-2018-6134
https://crbug.com/797465
Common Vulnerability Exposure (CVE) ID: CVE-2018-6135
https://crbug.com/823353
Common Vulnerability Exposure (CVE) ID: CVE-2018-6136
https://crbug.com/831943
Common Vulnerability Exposure (CVE) ID: CVE-2018-6137
https://crbug.com/835589
Common Vulnerability Exposure (CVE) ID: CVE-2018-6138
https://crbug.com/810220
Common Vulnerability Exposure (CVE) ID: CVE-2018-6139
https://crbug.com/805224
Common Vulnerability Exposure (CVE) ID: CVE-2018-6140
https://crbug.com/798222
Common Vulnerability Exposure (CVE) ID: CVE-2018-6141
https://crbug.com/796107
Common Vulnerability Exposure (CVE) ID: CVE-2018-6142
https://crbug.com/837939
Common Vulnerability Exposure (CVE) ID: CVE-2018-6143
https://crbug.com/843022
Common Vulnerability Exposure (CVE) ID: CVE-2018-6144
https://crbug.com/828049
Common Vulnerability Exposure (CVE) ID: CVE-2018-6145
https://crbug.com/805924
Common Vulnerability Exposure (CVE) ID: CVE-2018-6147
https://crbug.com/818133
CopyrightCopyright (C) 2018 Greenbone AG

This is only one of 145615 vulnerability tests in our test suite. Find out more about running a complete security audit.

To run a free test of this vulnerability against your system, register below.




© 1998-2025 E-Soft Inc. All rights reserved.