High WID-SEC-2025-2406 19 CVEs

Google Chrome: Mehrere Schwachstellen

Published Dec 6, 2017 · Updated Oct 26, 2025 · Revision 14 · de-DE

Vendor: Debian Vendor: Google Vendor: HCL Software Vendor: Red Hat Vendor: SUSE Vendor: Ubuntu Product: Chrome Product: Commerce Product: Enterprise Linux Product: Linux Product: Linux Product: Linux Platform: Linux Platform: macOS Platform: Windows

Summary

Ein entfernter, anonymer Angreifer kann mehrere Schwachstellen in Google Chrome ausnutzen, um Informationen einzusehen, Sicherheitsmechanismen zu umgehen, Daten zu manipulieren, einen Denial of Service herbeizuführen oder Code mit den Privilegien des Angegriffenen zur Ausführung zu bringen.

Product

Chrome ist ein Internet-Browser von Google.

Vulnerabilities 19

High 8.8

CVE-2017-15412

Nokogiri gem, via libxml, is affected by DoS vulnerabilities

Use after free in libxml2 before 2.9.5, as used in Google Chrome prior to 63.0.3239.84 and other products, allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page.

chromium-browser oxide-qt libxml2 libxml2 Browsers Debian Ubuntu RubyGems

Aug 28, 2018
Unscored —

CVE-2017-15407

Out-of-bounds Write in the QUIC networking stack in Google Chrome prior to 63.0.3239.84 allowed a remote attacker to ga…

chromium-browser oxide-qt Browsers Ubuntu

Aug 28, 2018
Unscored —

CVE-2017-15408

Heap buffer overflow in Omnibox in Google Chrome prior to 63.0.3239.84 allowed a remote attacker to potentially exploit…

chromium-browser oxide-qt Browsers Ubuntu

Aug 28, 2018
Unscored —

CVE-2017-15409

Heap buffer overflow in Skia in Google Chrome prior to 63.0.3239.84 allowed a remote attacker to potentially exploit he…

chromium-browser oxide-qt Browsers Ubuntu

Aug 28, 2018
Unscored —

CVE-2017-15410

Use after free in PDFium in Google Chrome prior to 63.0.3239.84 allowed a remote attacker to potentially exploit heap c…

chromium-browser oxide-qt Browsers Ubuntu

Aug 28, 2018
Unscored —

CVE-2017-15411

Use after free in PDFium in Google Chrome prior to 63.0.3239.84 allowed a remote attacker to potentially exploit heap c…

chromium-browser oxide-qt Browsers Ubuntu

Aug 28, 2018
Unscored —

CVE-2017-15413

Type confusion in WebAssembly in V8 in Google Chrome prior to 63.0.3239.84 allowed a remote attacker to potentially exp…

chromium-browser oxide-qt Browsers Ubuntu

Aug 28, 2018
Unscored —

CVE-2017-15415

Incorrect serialization in IPC in Google Chrome prior to 63.0.3239.84 allowed a remote attacker to leak the value of a …

chromium-browser oxide-qt Browsers Ubuntu

Aug 28, 2018
Unscored —

CVE-2017-15416

Heap buffer overflow in Blob API in Google Chrome prior to 63.0.3239.84 allowed a remote attacker to potentially exploi…

chromium-browser oxide-qt Browsers Ubuntu

Aug 28, 2018
Unscored —

CVE-2017-15417

Inappropriate implementation in Skia canvas composite operations in Google Chrome prior to 63.0.3239.84 allowed a remot…

chromium-browser oxide-qt Browsers Ubuntu

Aug 28, 2018
Unscored —

CVE-2017-15418

Use of uninitialized memory in Skia in Google Chrome prior to 63.0.3239.84 allowed a remote attacker to obtain potentia…

chromium-browser oxide-qt Browsers Ubuntu

Aug 28, 2018
Unscored —

CVE-2017-15419

Insufficient policy enforcement in Resource Timing API in Google Chrome prior to 63.0.3239.84 allowed a remote attacker…

chromium-browser oxide-qt Browsers Ubuntu

Aug 28, 2018
Unscored —

CVE-2017-15420

Incorrect handling of back navigations in error pages in Navigation in Google Chrome prior to 63.0.3239.84 allowed a re…

Google Chrome chromium-browser oxide-qt Browsers Ubuntu

Aug 28, 2018
Unscored —

CVE-2017-15422

Integer overflow in international date handling in International Components for Unicode (ICU) for C/C++ before 60.1, as…

chromium-browser oxide-qt icu icu Browsers Debian Ubuntu

Aug 28, 2018
Unscored —

CVE-2017-15423

Inappropriate implementation in BoringSSL SPAKE2 in Google Chrome prior to 63.0.3239.84 allowed a remote attacker to le…

chromium-browser oxide-qt Browsers Ubuntu

Aug 28, 2018
Unscored —

CVE-2017-15424

Insufficient policy enforcement in Omnibox in Google Chrome prior to 63.0.3239.84 allowed a remote attacker to perform …

chromium-browser oxide-qt Browsers Ubuntu

Aug 28, 2018
Unscored —

CVE-2017-15425

Insufficient policy enforcement in Omnibox in Google Chrome prior to 63.0.3239.84 allowed a remote attacker to perform …

chromium-browser oxide-qt Browsers Ubuntu

Aug 28, 2018
Unscored —

CVE-2017-15426

Insufficient policy enforcement in Omnibox in Google Chrome prior to 63.0.3239.84 allowed a remote attacker to perform …

chromium-browser oxide-qt Browsers Ubuntu

Aug 28, 2018
Unscored —

CVE-2017-15427

Insufficient policy enforcement in Omnibox in Google Chrome prior to 63.0.3239.84 allowed a socially engineered user to…

chromium-browser oxide-qt Browsers Ubuntu

Aug 28, 2018

Revision history

2025-10-26 #14
Neue Updates von HCL aufgenommen
2018-09-09 #13
Added references
2018-05-27 #11
Added references
2018-05-27 #12
Version nicht vorhanden
2018-03-28 #10
New remediations available
2018-03-25 #9
New remediations available
2018-02-08 #8
New remediations available
2018-01-31 #7
New remediations available
2017-12-18 #6
Added references
2017-12-13 #5
New remediations available
2017-12-12 #4
New remediations available
2017-12-07 #3
New remediations available
2017-12-06 #1
Initial Release
2017-12-06 #2
Version nicht vorhanden

References

https://chromereleases.googleblog.com/ vom 2017-12-06
https://chromereleases.googleblog.com/
Red Hat Security Advisory RHSA-2017:3401 vom 2017-12-07
https://access.redhat.com/errata/RHSA-2017:3401
Debian Security Advisory DSA-4064 vom 2017-12-12
https://www.debian.org/security/2017/dsa-4064
Ubuntu Security Notice USN-3513-1 vom 2017-12-13
http://www.ubuntu.com/usn/usn-3513-1/
Ubuntu Security Notice USN-3513-2 vom 2017-12-13
http://www.ubuntu.com/usn/usn-3513-2/
Debian Security Advisory DSA-4086 vom 2018-01-14
https://www.debian.org/security/2018/dsa-4086
Debian Security Advisory DSA-4103 vom 2018-02-01
http://www.debian.org/security/2018/dsa-4103
SUSE Security Update SUSE-SU-2018:0395-1 vom 2018-02-08
https://www.suse.com/support/update/announcement/2018/suse-su-20180395-1.html
Red Hat Security Advisory RHSA-2018:0287 vom 2018-02-08
https://access.redhat.com/errata/RHSA-2018:0287
SUSE Security Update SUSE-SU-2018:0401-1 vom 2018-02-09
https://www.suse.com/support/update/announcement/2018/suse-su-20180401-1.html
Debian Security Advisory DSA-4150 vom 2018-03-24
https://www.debian.org/security/2018/dsa-4150
Ubuntu Security Notice USN-3610-1 vom 2018-03-29
http://www.ubuntu.com/usn/usn-3610-1
Red Hat Security Advisory RHSA-2020:1190 vom 2020-03-31
https://access.redhat.com/errata/RHSA-2020:1190
HCL Security Bulletin vom 2025-10-24
https://support.hcl-software.com/csm?id=kb_article&sysparm_article=KB0123933