Category

Browsers

10,973 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

10,973 results · Feed

High 7.5

CVE-2018-8618 EPSS 11%

ChakraCore RCE Vulnerability

A remote code execution vulnerability exists in the way that the Chakra scripting engine handles objects in memory in Microsoft Edge, aka "Chakra Scripting Engine Memory Corruption Vulnerability." This affects Microsoft Edge, ChakraCore. This CVE ID is unique…

Microsoft Microsoft Edge ChakraCore Microsoft.ChakraCore Browsers NuGet

Dec 12, 2018
High 7.5

CVE-2018-8583 EPSS 11%

ChakraCore RCE Vulnerability

A remote code execution vulnerability exists in the way that the Chakra scripting engine handles objects in memory in Microsoft Edge, aka "Chakra Scripting Engine Memory Corruption Vulnerability." This affects Microsoft Edge, ChakraCore. This CVE ID is unique…

Microsoft Microsoft Edge ChakraCore Microsoft.ChakraCore Browsers NuGet

Dec 12, 2018
High 7.5

CVE-2018-8624 EPSS 13%

ChakraCore Remote code execution Vulnerability

A remote code execution vulnerability exists in the way that the Chakra scripting engine handles objects in memory in Microsoft Edge, aka "Chakra Scripting Engine Memory Corruption Vulnerability." This affects Microsoft Edge, ChakraCore. This CVE ID is unique…

Microsoft Microsoft Edge ChakraCore Microsoft.ChakraCore Browsers NuGet

Dec 12, 2018
High 7.5

CVE-2018-8617 Public exploit EPSS 62%

ChakraCore RCE Vulnerability

A remote code execution vulnerability exists in the way that the Chakra scripting engine handles objects in memory in Microsoft Edge, aka "Chakra Scripting Engine Memory Corruption Vulnerability." This affects Microsoft Edge, ChakraCore. This CVE ID is unique…

Microsoft Microsoft Edge ChakraCore Microsoft.ChakraCore Browsers NuGet

Dec 12, 2018
High 7.5

CVE-2018-8629 EPSS 23%

ChakraCore RCE Vulnerability

A remote code execution vulnerability exists in the way that the Chakra scripting engine handles objects in memory in Microsoft Edge, aka "Chakra Scripting Engine Memory Corruption Vulnerability." This affects Microsoft Edge, ChakraCore. This CVE ID is unique…

Microsoft Microsoft Edge ChakraCore Microsoft.ChakraCore Browsers NuGet

Dec 12, 2018
Unscored —

CVE-2018-18341

An integer overflow leading to a heap buffer overflow in Blink in Google Chrome prior to 71.0.3578.80 allowed a remote …

Google Chrome chromium chromium-browser Browsers Debian Ubuntu

Dec 11, 2018
Unscored —

CVE-2018-18355

Incorrect handling of confusable characters in URL Formatter in Google Chrome prior to 71.0.3578.80 allowed a remote at…

Google Chrome chromium chromium-browser Browsers Debian Ubuntu

Dec 11, 2018
Unscored —

CVE-2018-18336

Incorrect object lifecycle in PDFium in Google Chrome prior to 71.0.3578.80 allowed a remote attacker to potentially ex…

Google Chrome chromium chromium-browser Browsers Debian Ubuntu

Dec 11, 2018
Unscored —

CVE-2018-18337

Incorrect handling of stylesheets leading to a use after free in Blink in Google Chrome prior to 71.0.3578.80 allowed a…

Google Chrome chromium chromium-browser Browsers Debian Ubuntu

Dec 11, 2018
Unscored —

CVE-2018-18356

An integer overflow in path handling lead to a use after free in Skia in Google Chrome prior to 71.0.3578.80 allowed a …

Google Chrome chromium chromium-browser Browsers Debian Ubuntu Alpine

Dec 11, 2018
Unscored —

CVE-2018-18343

Incorrect handing of paths leading to a use after free in Skia in Google Chrome prior to 71.0.3578.80 allowed a remote …

Google Chrome chromium chromium-browser Browsers Debian Ubuntu

Dec 11, 2018
Unscored —

CVE-2018-18352

Service works could inappropriately gain access to cross origin audio in Media in Google Chrome prior to 71.0.3578.80 a…

Google Chrome chromium chromium-browser Browsers Debian Ubuntu

Dec 11, 2018
Unscored —

CVE-2018-18349

Remote frame navigations was incorrectly permitted to local resources in Blink in Google Chrome prior to 71.0.3578.80 a…

Google Chrome chromium chromium-browser Browsers Debian Ubuntu

Dec 11, 2018
Unscored —

CVE-2018-18340

Incorrect object lifecycle in MediaRecorder in Google Chrome prior to 71.0.3578.80 allowed a remote attacker to potenti…

Google Chrome chromium chromium-browser Browsers Debian Ubuntu

Dec 11, 2018
Unscored —

CVE-2018-18351

Lack of proper validation of ancestor frames site when sending lax cookies in Navigation in Google Chrome prior to 71.0…

Google Chrome chromium chromium-browser Browsers Debian Ubuntu

Dec 11, 2018
Unscored —

CVE-2018-18350

Incorrect handling of CSP enforcement during navigations in Blink in Google Chrome prior to 71.0.3578.80 allowed a remo…

Google Chrome chromium chromium-browser Browsers Debian Ubuntu

Dec 11, 2018
Unscored —

CVE-2018-18338

Incorrect, thread-unsafe use of SkImage in Canvas in Google Chrome prior to 71.0.3578.80 allowed a remote attacker to p…

Google Chrome chromium chromium-browser Browsers Debian Ubuntu

Dec 11, 2018
Unscored —

CVE-2018-18359

Incorrect handling of Reflect.construct in V8 in Google Chrome prior to 71.0.3578.80 allowed a remote attacker to perfo…

Google Chrome chromium chromium-browser Browsers Debian Ubuntu

Dec 11, 2018
Unscored —

CVE-2018-18345

Incorrect handling of blob URLS in Site Isolation in Google Chrome prior to 71.0.3578.80 allowed a remote attacker who …

Google Chrome chromium chromium-browser Browsers Debian Ubuntu

Dec 11, 2018
Unscored —

CVE-2018-18347

Incorrect handling of failed navigations with invalid URLs in Navigation in Google Chrome prior to 71.0.3578.80 allowed…

Google Chrome chromium chromium-browser Browsers Debian Ubuntu

Dec 11, 2018
Unscored —

CVE-2018-18348

Incorrect handling of bidirectional domain names with RTL characters in Omnibox in Google Chrome prior to 71.0.3578.80 …

Google Chrome chromium chromium-browser Browsers Debian Ubuntu

Dec 11, 2018
Unscored —

CVE-2018-18354

Insufficient validate of external protocols in Shell Integration in Google Chrome on Windows prior to 71.0.3578.80 allo…

Google Chrome chromium chromium-browser Browsers Debian Ubuntu

Dec 11, 2018
Unscored —

CVE-2018-18358

Lack of special casing of localhost in WPAD files in Google Chrome prior to 71.0.3578.80 allowed an attacker on the loc…

Google Chrome chromium chromium-browser Browsers Debian Ubuntu

Dec 11, 2018
Unscored —

CVE-2018-18353

Failure to dismiss http auth dialogs on navigation in Network Authentication in Google Chrome on Android prior to 71.0.…

Google Chrome chromium chromium-browser Browsers Debian Ubuntu

Dec 11, 2018
Unscored —

CVE-2018-18335

Heap buffer overflow in Skia in Google Chrome prior to 71.0.3578.80 allowed a remote attacker to potentially exploit he…

Google Chrome chromium chromium-browser Browsers Debian Ubuntu Alpine

Dec 11, 2018
Unscored —

CVE-2018-18339

Incorrect object lifecycle in WebAudio in Google Chrome prior to 71.0.3578.80 allowed a remote attacker to potentially …

Google Chrome chromium chromium-browser Browsers Debian Ubuntu

Dec 11, 2018
Unscored —

CVE-2018-18342

Execution of user supplied Javascript during object deserialization can update object length leading to an out of bound…

Google Chrome chromium chromium-browser Browsers Debian Ubuntu

Dec 11, 2018
Unscored —

CVE-2018-18357

Incorrect handling of confusable characters in URL Formatter in Google Chrome prior to 71.0.3578.80 allowed a remote at…

Google Chrome chromium chromium-browser Browsers Debian Ubuntu

Dec 11, 2018
Unscored —

CVE-2018-18346

Incorrect handling of alert box display in Blink in Google Chrome prior to 71.0.3578.80 allowed a remote attacker to pr…

Google Chrome chromium chromium-browser Browsers Debian Ubuntu

Dec 11, 2018
Unscored —

CVE-2018-17481

Incorrect object lifecycle handling in PDFium in Google Chrome prior to 71.0.3578.98 allowed a remote attacker to poten…

Google Chrome chromium chromium-browser Browsers Debian Ubuntu

Dec 11, 2018
High 8.8

CVE-2018-17480 Exploited EPSS 36%

Execution of user supplied Javascript during array deserialization leading to an out of bounds write in V8 in Google Ch…

Google Chrome chromium chromium-browser Browsers Debian Ubuntu

Dec 11, 2018
KEV Jun 8, 2022
Unscored —

CVE-2018-11905

In all android releases(Android for MSM, Firefox OS for MSM, QRD Android) from CAF using the linux kernel, Possible buf…

Qualcomm Android for MSM, Firefox OS for MSM, QRD Android Android Browsers

Dec 7, 2018
Unscored —

CVE-2017-15835

In all android releases(Android for MSM, Firefox OS for MSM, QRD Android) from CAF using the linux kernel, While proces…

Qualcomm Android for MSM, Firefox OS for MSM, QRD Android Android Browsers

Dec 7, 2018
Unscored —

CVE-2017-14888

In all android releases(Android for MSM, Firefox OS for MSM, QRD Android) from CAF using the linux kernel, Userspace ca…

Qualcomm Android for MSM, Firefox OS for MSM, QRD Android Android Browsers

Dec 7, 2018
Unscored —

CVE-2018-15332

The svpn component of the F5 BIG-IP APM client prior to version 7.1.7.2 for Linux and macOS runs as a privileged proces…

F5 BIG-IP (APM), BIG-IP APM Clients, BIG-IP Edge Client Network devices Browsers

Dec 6, 2018
Unscored —

CVE-2018-6086

A double-eviction in the Incognito mode cache that lead to a user-after-free in Networking Disk Cache in Google Chrome …

Google Chrome chromium-browser oxide-qt Browsers Ubuntu

Dec 4, 2018
Unscored —

CVE-2018-6092 Public exploit

An integer overflow on 32-bit systems in WebAssembly in Google Chrome prior to 66.0.3359.117 allowed a remote attacker …

Google Chrome chromium-browser oxide-qt Browsers Ubuntu

Dec 4, 2018
Unscored —

CVE-2018-6108

Incorrect handling of confusable characters in URL Formatter in Google Chrome prior to 66.0.3359.117 allowed a remote a…

Google Chrome chromium-browser oxide-qt Browsers Ubuntu

Dec 4, 2018
Unscored —

CVE-2018-6116

A nullptr dereference in WebAssembly in Google Chrome prior to 66.0.3359.117 allowed a remote attacker to potentially p…

Google Chrome chromium-browser oxide-qt Browsers Ubuntu

Dec 4, 2018
Unscored —

CVE-2018-6104

Incorrect handling of confusable characters in URL Formatter in Google Chrome prior to 66.0.3359.117 allowed a remote a…

Google Chrome chromium-browser oxide-qt Browsers Ubuntu

Dec 4, 2018