High WID-SEC-2025-1427 20 CVEs

Google Chrome: Mehrere Schwachstellen

Published Oct 18, 2017 · Updated Jun 30, 2025 · Revision 6 · de-DE

Vendor: Debian Vendor: Dell Vendor: Google Vendor: Red Hat Vendor: SUSE Product: Chrome Product: Enterprise Linux Product: Linux Product: Linux Product: NetWorker Platform: Linux Platform: macOS Platform: Windows

Summary

Ein entfernter, anonymer Angreifer kann mehrere Schwachstellen in Google Chrome ausnutzen, um Informationen einzusehen, Sicherheitsmechanismen zu umgehen, Daten zu manipulieren, einen Denial of Service herbeizuführen oder Code mit den Privilegien des Angegriffenen zur Ausführung zu bringen.

Product

Chrome ist ein Internet-Browser von Google.

Vulnerabilities 20

High 8.8

CVE-2017-5130

An integer overflow in xmlmemory.c in libxml2 before 2.9.5, as used in Google Chrome prior to 62.0.3202.62 and other pr…

chromium-browser oxide-qt libxml2 libxml2 Browsers Debian Ubuntu

Feb 7, 2018
Unscored —

CVE-2017-15386

Incorrect implementation in Blink in Google Chrome prior to 62.0.3202.62 allowed a remote attacker to spoof the content…

chromium-browser oxide-qt Browsers Ubuntu

Feb 7, 2018
Unscored —

CVE-2017-15387

Insufficient enforcement of Content Security Policy in Blink in Google Chrome prior to 62.0.3202.62 allowed a remote at…

chromium-browser oxide-qt Browsers Ubuntu

Feb 7, 2018
Unscored —

CVE-2017-15388

Iteration through non-finite points in Skia in Google Chrome prior to 62.0.3202.62 allowed a remote attacker to perform…

chromium-browser oxide-qt Browsers Ubuntu

Feb 7, 2018
Unscored —

CVE-2017-15389

An insufficient watchdog timer in navigation in Google Chrome prior to 62.0.3202.62 allowed a remote attacker to spoof …

chromium-browser oxide-qt Browsers Ubuntu

Feb 7, 2018
Unscored —

CVE-2017-15390

Insufficient Policy Enforcement in Omnibox in Google Chrome prior to 62.0.3202.62 allowed a remote attacker to perform …

chromium-browser oxide-qt Browsers Ubuntu

Feb 7, 2018
Unscored —

CVE-2017-15391

Insufficient Policy Enforcement in Extensions in Google Chrome prior to 62.0.3202.62 allowed a remote attacker to acces…

chromium-browser oxide-qt Browsers Ubuntu

Feb 7, 2018
Unscored —

CVE-2017-15392

Insufficient data validation in V8 in Google Chrome prior to 62.0.3202.62 allowed an attacker who can write to the Wind…

chromium-browser oxide-qt Browsers Ubuntu

Feb 7, 2018
Unscored —

CVE-2017-15393

Insufficient Policy Enforcement in Devtools remote debugging in Google Chrome prior to 62.0.3202.62 allowed a remote at…

chromium-browser oxide-qt Browsers Ubuntu

Feb 7, 2018
Unscored —

CVE-2017-15394 Public exploit

Insufficient Policy Enforcement in Extensions in Google Chrome prior to 62.0.3202.62 allowed a remote attacker to perfo…

chromium-browser oxide-qt Browsers Ubuntu

Feb 7, 2018
Unscored —

CVE-2017-15395

A use after free in Blink in Google Chrome prior to 62.0.3202.62 allowed a remote attacker to potentially exploit heap …

chromium-browser oxide-qt Browsers Ubuntu

Feb 7, 2018
Unscored —

CVE-2017-5124 Public exploit

Incorrect application of sandboxing in Blink in Google Chrome prior to 62.0.3202.62 allowed a remote attacker to inject…

chromium-browser oxide-qt Browsers Ubuntu

Feb 7, 2018
Unscored —

CVE-2017-5125

Heap buffer overflow in Skia in Google Chrome prior to 62.0.3202.62 allowed a remote attacker to potentially exploit he…

chromium-browser oxide-qt Browsers Ubuntu

Feb 7, 2018
Unscored —

CVE-2017-5126

A use after free in PDFium in Google Chrome prior to 62.0.3202.62 allowed a remote attacker to potentially exploit heap…

chromium-browser oxide-qt Browsers Ubuntu

Feb 7, 2018
Unscored —

CVE-2017-5127

Use after free in PDFium in Google Chrome prior to 62.0.3202.62 allowed a remote attacker to potentially exploit heap c…

chromium-browser oxide-qt Browsers Ubuntu

Feb 7, 2018
Unscored —

CVE-2017-5128

Heap buffer overflow in Blink in Google Chrome prior to 62.0.3202.62 allowed a remote attacker to potentially exploit h…

chromium-browser oxide-qt Browsers Ubuntu

Feb 7, 2018
Unscored —

CVE-2017-5129

A use after free in WebAudio in Blink in Google Chrome prior to 62.0.3202.62 allowed a remote attacker to perform an ou…

chromium-browser oxide-qt Browsers Ubuntu

Feb 7, 2018
Unscored —

CVE-2017-5131

An integer overflow in Skia in Google Chrome prior to 62.0.3202.62 allowed a remote attacker to potentially exploit hea…

chromium-browser oxide-qt Browsers Ubuntu

Feb 7, 2018
Unscored —

CVE-2017-5132

Inappropriate implementation in V8 in Google Chrome prior to 62.0.3202.62 allowed a remote attacker to potentially expl…

chromium-browser oxide-qt Browsers Ubuntu

Feb 7, 2018
Unscored —

CVE-2017-5133

Off-by-one read/write on the heap in Blink in Google Chrome prior to 62.0.3202.62 allowed a remote attacker to corrupt …

chromium-browser oxide-qt Browsers Ubuntu

Feb 7, 2018

Revision history

2025-06-30 #6
Neue Updates von Dell aufgenommen
2017-11-12 #5
Added references
2017-11-06 #4
Added references
2017-10-22 #3
New remediations available
2017-10-18 #1
Initial Release
2017-10-18 #2
Version nicht vorhanden

References

Chrome Releases Stable Channel Update for Desktop vom 2017-10-18
https://chromereleases.googleblog.com/2017/10/stable-channel-update-for-desktop.html
Red Hat Security Advisory RHSA-2017:2997 vom 2017-10-20
https://access.redhat.com/errata/RHSA-2017:2997
Debian Security Advisory DSA-4020 vom 2017-11-07
https://www.debian.org/security/2017/dsa-4020
SUSE Security Update SUSE-SU-2018:0395-1 vom 2018-02-08
https://www.suse.com/support/update/announcement/2018/suse-su-20180395-1.html
SUSE Security Update SUSE-SU-2018:0401-1 vom 2018-02-09
https://www.suse.com/support/update/announcement/2018/suse-su-20180401-1.html
Dell Security Advisory DSA-2025-269 vom 2025-07-01
https://www.dell.com/support/kbdoc/de-de/000338743/dsa-2025-269-security-update-for-dell-networker-multiple-third-party-component-vulnerabilities