https://vulnerability.circl.lu Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Tue, 29 Sep 2026 19:30:13 +0000 https://vulnerability.circl.lu/vuln/cve-2017-5025 <p><strong>Affected:</strong> Google Chrome prior to 56.0.2924.76 for Linux, Windows and Mac</p> <p>FFmpeg in Google Chrome prior to 56.0.2924.76 for Linux, Windows and Mac, failed to perform proper bounds checking, which allowed a remote attacker to potentially exploit heap corruption via a crafted video file.</p> <p><strong>Affected:</strong> Google Chrome prior to 56.0.2924.76 for Linux, Windows and Mac</p> <p>FFmpeg in Google Chrome prior to 56.0.2924.76 for Linux, Windows and Mac, failed to perform proper bounds checking, which allowed a remote attacker to potentially exploit heap corruption via a crafted video file.</p> https://vulnerability.circl.lu/vuln/cve-2017-5025 https://vulnerability.circl.lu/vuln/usn-3180-1 <p><strong>Affected:</strong> Ubuntu:14.04:LTS: oxide-qt, Ubuntu:16.04:LTS: oxide-qt</p> <p>Multiple vulnerabilities were discovered in Chromium. If a user were tricked in to opening a specially crafted website, an attacker could potentially exploit these to conduct cross-site scripting (XSS) attacks, read uninitialized memory, obtain sensitive information, spoof the webview URL or other UI components, bypass same origin restrictions or other security restrictions, cause a denial of service via application crash, or execute arbitrary code. (CVE-2017-5006, CVE-2017-5007, CVE-2017-5008, CVE-2017-5009, CVE-2017-5010, CVE-2017-5011, CVE-2017-5012, CVE-2017-5014, CVE-2017-5017, CVE-2017-5019, CVE-2017-5022, CVE-2017-5023, CVE-2017-5024, CVE-2017-5025, CVE-2017-5026)</p> <p><strong>Affected:</strong> Ubuntu:14.04:LTS: oxide-qt, Ubuntu:16.04:LTS: oxide-qt</p> <p>Multiple vulnerabilities were discovered in Chromium. If a user were tricked in to opening a specially crafted website, an attacker could potentially exploit these to conduct cross-site scripting (XSS) attacks, read uninitialized memory, obtain sensitive information, spoof the webview URL or other UI components, bypass same origin restrictions or other security restrictions, cause a denial of service via application crash, or execute arbitrary code. (CVE-2017-5006, CVE-2017-5007, CVE-2017-5008, CVE-2017-5009, CVE-2017-5010, CVE-2017-5011, CVE-2017-5012, CVE-2017-5014, CVE-2017-5017, CVE-2017-5019, CVE-2017-5022, CVE-2017-5023, CVE-2017-5024, CVE-2017-5025, CVE-2017-5026)</p> https://vulnerability.circl.lu/vuln/usn-3180-1