9.0.570.1

DATE	CVE	VULNERABILITY TITLE	RISK
2018-11-14	CVE-2018-6061	Race Condition vulnerability in multiple products A race in the handling of SharedArrayBuffers in WebAssembly in Google Chrome prior to 65.0.3325.146 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. network high complexity google redhat debian CWE-362	7.5
2018-11-14	CVE-2018-6060	Use After Free vulnerability in multiple products Use after free in WebAudio in Google Chrome prior to 65.0.3325.146 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. network low complexity google redhat debian CWE-416	8.8
2018-11-14	CVE-2018-6057	Incorrect Permission Assignment for Critical Resource vulnerability in multiple products Lack of special casing of Android ashmem in Google Chrome prior to 65.0.3325.146 allowed a remote attacker who had compromised the renderer process to bypass inter-process read only guarantees via a crafted HTML page. network low complexity google redhat debian CWE-732	8.8
2018-11-14	CVE-2018-17477	Incorrect dialog placement in Extensions in Google Chrome prior to 70.0.3538.67 allowed a remote attacker to spoof the contents of extension popups via a crafted HTML page. network low complexity google redhat debian	4.3
2018-11-14	CVE-2018-17476	Incorrect dialog placement in Cast UI in Google Chrome prior to 70.0.3538.67 allowed a remote attacker to obscure the full screen warning via a crafted HTML page. network low complexity google redhat debian	4.3
2018-11-14	CVE-2018-17475	Incorrect handling of history on iOS in Navigation in Google Chrome prior to 70.0.3538.67 allowed a remote attacker to spoof the contents of the Omnibox (URL bar) via a crafted HTML page. network low complexity google redhat debian	4.3
2018-11-14	CVE-2018-17474	Use After Free vulnerability in multiple products Use after free in HTMLImportsController in Blink in Google Chrome prior to 70.0.3538.67 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. network low complexity google redhat debian CWE-416	8.8
2018-11-14	CVE-2018-17473	Incorrect handling of confusable characters in Omnibox in Google Chrome prior to 70.0.3538.67 allowed a remote attacker to spoof the contents of the Omnibox (URL bar) via a crafted domain name. network low complexity google redhat debian	4.3
2018-11-14	CVE-2018-17472	Improper Input Validation vulnerability in multiple products Incorrect handling of googlechrome:// URL scheme on iOS in Intents in Google Chrome prior to 70.0.3538.67 allowed a remote attacker to escape the <iframe> sandbox via a crafted HTML page. network low complexity google redhat debian CWE-20 critical	9.6
2018-11-14	CVE-2018-17471	Incorrect dialog placement in WebContents in Google Chrome prior to 70.0.3538.67 allowed a remote attacker to obscure the full screen warning via a crafted HTML page. network low complexity google redhat debian	4.3