Known vulnerabilities in chromium - page 127

Software: chromium
Software CPE: cpe:2.3:o:fedoraproject:chromium:*:*:*:*:*:fedora:*:*
Total vulnerabilities: 2622
Public exploits: 60
Known exploited (KEV): 56
Highest CVSSv4 Score: 9.3

Breakdown by Severity Chart

Severity distribution of vulnerabilities affecting chromium chromium is affected by 2622 known vulnerabilities: 45 critical, 1497 high, 688 medium, 392 low Critical High Medium Low

Vulnerabilities (2622)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU9660 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2017-15429
CWE-79 Low
No
No
63.0.3239.108-1.fc26, 63.0.3239.108-1.fc27 15.12.2017 SB2017121802
SB2017121803
SB2017121903
and 9 more
#VU9590 - Permissions, Privileges, and Access Controls
CVE-2017-15427
CWE-264 Low
No
No
63.0.3239.108-1.fc26, 63.0.3239.108-1.fc27 07.12.2017 SB2017120705
SB2017120707
SB2017121202
and 6 more
#VU9589 - Permissions, Privileges, and Access Controls
CVE-2017-15423
CWE-264 Low
No
No
63.0.3239.108-1.fc26, 63.0.3239.108-1.fc27 07.12.2017 SB2017120705
SB2017120707
SB2017121202
and 8 more
#VU9587 - Missing release of memory after effective lifetime
CVE-2017-15419
CWE-401 Low
No
No
63.0.3239.108-1.fc26, 63.0.3239.108-1.fc27 07.12.2017 SB2017120705
SB2017120707
SB2017121202
and 8 more
#VU9586 - Exposure of sensitive information to an unauthorized actor
CVE-2017-15417
CWE-200 Low
No
No
63.0.3239.108-1.fc26, 63.0.3239.108-1.fc27 07.12.2017 SB2017120705
SB2017120707
SB2017121202
and 6 more
#VU9585 - Out-of-bounds read
CVE-2017-15416
CWE-125 Low
No
No
63.0.3239.108-1.fc26, 63.0.3239.108-1.fc27 07.12.2017 SB2017120705
SB2017120707
SB2017121202
and 8 more
#VU9584 - Exposure of sensitive information to an unauthorized actor
CVE-2017-15415
CWE-200 Low
No
No
63.0.3239.108-1.fc26, 63.0.3239.108-1.fc27 07.12.2017 SB2017120705
SB2017120707
SB2017121202
and 8 more
#VU9583 - Exposure of sensitive information to an unauthorized actor
CVE-2017-15418
CWE-200 Low
No
No
63.0.3239.108-1.fc26, 63.0.3239.108-1.fc27 07.12.2017 SB2017120705
SB2017120707
SB2017121202
and 8 more
#VU9582 - Type confusion
CVE-2017-15420
CWE-843 Low
No
No
63.0.3239.108-1.fc26, 63.0.3239.108-1.fc27 07.12.2017 SB2017120705
SB2017120707
SB2017121202
and 10 more
#VU9581 - Type confusion
CVE-2017-15424
CWE-843 Low
No
No
63.0.3239.108-1.fc26, 63.0.3239.108-1.fc27 07.12.2017 SB2017120705
SB2017120707
SB2017121202
and 8 more
#VU9580 - Type confusion
CVE-2017-15425
CWE-843 Low
No
No
63.0.3239.108-1.fc26, 63.0.3239.108-1.fc27 07.12.2017 SB2017120705
SB2017120707
SB2017121202
and 8 more
#VU9579 - Type confusion
CVE-2017-15426
CWE-843 Low
No
No
63.0.3239.108-1.fc26, 63.0.3239.108-1.fc27 07.12.2017 SB2017120705
SB2017120707
SB2017121202
and 8 more
#VU9578 - Type confusion
CVE-2017-15413
CWE-843 High
No
No
63.0.3239.108-1.fc26, 63.0.3239.108-1.fc27 07.12.2017 SB2017120705
SB2017120707
SB2017121202
and 6 more
#VU9127 - Use After Free
CVE-2017-15399
CWE-416 High
No
No
62.0.3202.89-1.fc25, 62.0.3202.89-1.fc26, 62.0.3202.89-1.fc27, 63.0.3239.108-1.fc26 08.11.2017 SB2017110805
SB2017110806
SB2017110812
and 7 more
#VU9126 - Stack-based buffer overflow
CVE-2017-15398
CWE-121 High
No
No
62.0.3202.89-1.fc25, 62.0.3202.89-1.fc26, 62.0.3202.89-1.fc27, 63.0.3239.108-1.fc26 08.11.2017 SB2017110805
SB2017110806
SB2017110812
and 10 more
#VU8948 - Improper Access Control
CVE-2017-15390
CWE-284 Low
No
No
62.0.3202.75-1.fc25, 62.0.3202.75-1.fc26, 62.0.3202.75-1.fc27, 62.0.3202.89-1.fc25, 62.0.3202.89-1.fc26, 62.0.3202.89-1.fc27, 63.0.3239.108-1.fc26 26.10.2017 SB2017101715
SB2017101916
SB2017110701
and 14 more
#VU8947 - Improper Access Control
CVE-2017-15389
CWE-284 Low
No
No
62.0.3202.75-1.fc25, 62.0.3202.75-1.fc26, 62.0.3202.75-1.fc27, 62.0.3202.89-1.fc25, 62.0.3202.89-1.fc26, 62.0.3202.89-1.fc27, 63.0.3239.108-1.fc26 26.10.2017 SB2017101715
SB2017101916
SB2017110701
and 10 more
#VU8946 - Out-of-bounds read
CVE-2017-15388
CWE-125 Low
No
No
62.0.3202.75-1.fc25, 62.0.3202.75-1.fc26, 62.0.3202.75-1.fc27, 62.0.3202.89-1.fc25, 62.0.3202.89-1.fc26, 62.0.3202.89-1.fc27, 63.0.3239.108-1.fc26 26.10.2017 SB2017101715
SB2017101916
SB2017110701
and 14 more
#VU8945 - Improper Access Control
CVE-2017-15387
CWE-284 Low
No
No
62.0.3202.75-1.fc25, 62.0.3202.75-1.fc26, 62.0.3202.75-1.fc27, 62.0.3202.89-1.fc25, 62.0.3202.89-1.fc26, 62.0.3202.89-1.fc27, 63.0.3239.108-1.fc26 26.10.2017 SB2017101715
SB2017101916
SB2017110701
and 14 more
#VU8944 - User Interface (UI) Misrepresentation of Critical Information (Clickjacking, spoofing)
CVE-2017-15386
CWE-451 Low
No
No
62.0.3202.75-1.fc25, 62.0.3202.75-1.fc26, 62.0.3202.75-1.fc27, 62.0.3202.89-1.fc25, 62.0.3202.89-1.fc26, 62.0.3202.89-1.fc27, 63.0.3239.108-1.fc26 26.10.2017 SB2017101715
SB2017101916
SB2017110701
and 14 more


Showing elements 2521 - 2540 out of 2622