Vulnerabilities > Fedoraproject > Fedora > Medium

DATE CVE VULNERABILITY TITLE RISK
2019-06-27 CVE-2019-5837 Resource size information leakage in Blink in Google Chrome prior to 75.0.3770.80 allowed a remote attacker to leak cross-origin data via a crafted HTML page.
network
low complexity
google opensuse debian fedoraproject
6.5
6.5
2019-06-27 CVE-2019-5835 Out-of-bounds Read vulnerability in multiple products
Object lifecycle issue in SwiftShader in Google Chrome prior to 75.0.3770.80 allowed a remote attacker to potentially perform out of bounds memory access via a crafted HTML page.
network
low complexity
google opensuse fedoraproject CWE-125
6.5
6.5
2019-06-27 CVE-2019-5834 Origin Validation Error vulnerability in multiple products
Insufficient data validation in Blink in Google Chrome prior to 75.0.3770.80 allowed a remote attacker to perform domain spoofing via a crafted HTML page.
network
low complexity
google opensuse fedoraproject debian CWE-346
6.5
6.5
2019-06-27 CVE-2019-5833 Incorrect dialog box scoping in browser in Google Chrome on Android prior to 75.0.3770.80 allowed a remote attacker to display misleading security UI via a crafted HTML page.
network
low complexity
google opensuse debian fedoraproject
4.3
4.3
2019-06-27 CVE-2019-5832 Insufficient policy enforcement in XMLHttpRequest in Google Chrome prior to 75.0.3770.80 allowed a remote attacker to leak cross-origin data via a crafted HTML page.
network
low complexity
google opensuse debian fedoraproject
6.5
6.5
2019-06-27 CVE-2019-5830 Insufficient policy enforcement in CORS in Google Chrome prior to 75.0.3770.80 allowed a remote attacker to leak cross-origin data via a crafted HTML page.
network
low complexity
google opensuse debian fedoraproject
6.5
6.5
2019-06-27 CVE-2019-5823 Open Redirect vulnerability in multiple products
Insufficient policy enforcement in service workers in Google Chrome prior to 74.0.3729.108 allowed a remote attacker to bypass navigation restrictions via a crafted HTML page.
network
low complexity
google opensuse debian fedoraproject CWE-601
5.4
5.4
2019-06-27 CVE-2019-5818 Use of Uninitialized Resource vulnerability in multiple products
Uninitialized data in media in Google Chrome prior to 74.0.3729.108 allowed a remote attacker to obtain potentially sensitive information from process memory via a crafted video file.
network
low complexity
google opensuse debian fedoraproject CWE-908
6.5
6.5
2019-06-27 CVE-2019-5814 Cross-Site Request Forgery (CSRF) vulnerability in multiple products
Insufficient policy enforcement in Blink in Google Chrome prior to 74.0.3729.108 allowed a remote attacker to leak cross-origin data via a crafted HTML page.
network
low complexity
google opensuse debian fedoraproject CWE-352
6.5
6.5
2019-06-27 CVE-2019-5812 Inadequate security UI in iOS UI in Google Chrome prior to 74.0.3729.108 allowed a remote attacker to perform domain spoofing via a crafted HTML page.
network
low complexity
google fedoraproject
6.5
6.5