Vulnerabilities > High
| DATE | CVE | VULNERABILITY TITLE | RISK |
|---|---|---|---|
| 2017-04-24 | CVE-2017-5035 | Race Condition vulnerability in multiple products Google Chrome prior to 57.0.2987.98 for Windows and Mac had a race condition, which could cause Chrome to display incorrect certificate information for a site. | 8.1 |
| 2017-04-24 | CVE-2017-5034 | Use After Free vulnerability in Google Chrome A use after free in PDFium in Google Chrome prior to 57.0.2987.98 for Linux and Windows allowed a remote attacker to perform an out of bounds memory read via a crafted PDF file. | 8.8 |
| 2017-04-24 | CVE-2017-5032 | Out-of-bounds Write vulnerability in Google Chrome PDFium in Google Chrome prior to 57.0.2987.98 for Windows could be made to increment off the end of a buffer, which allowed a remote attacker to potentially exploit heap corruption via a crafted PDF file. | 8.8 |
| 2017-04-24 | CVE-2017-5031 | Use After Free vulnerability in Google Chrome A use after free in ANGLE in Google Chrome prior to 57.0.2987.98 for Windows allowed a remote attacker to perform an out of bounds memory read via a crafted HTML page. | 8.8 |
| 2017-04-24 | CVE-2017-5030 | Out-of-bounds Read vulnerability in multiple products Incorrect handling of complex species in V8 in Google Chrome prior to 57.0.2987.98 for Linux, Windows, and Mac and 57.0.2987.108 for Android allowed a remote attacker to execute arbitrary code via a crafted HTML page. | 8.8 |
| 2017-04-24 | CVE-2017-5029 | Out-of-bounds Write vulnerability in multiple products The xsltAddTextString function in transform.c in libxslt 1.1.29, as used in Blink in Google Chrome prior to 57.0.2987.98 for Mac, Windows, and Linux and 57.0.2987.108 for Android, lacked a check for integer overflow during a size calculation, which allowed a remote attacker to perform an out of bounds memory write via a crafted HTML page. | 8.8 |
| 2017-04-24 | CVE-2016-6915 | Improper Restriction of Operations within the Bounds of a Memory Buffer vulnerability in Nvidia products Stack-based buffer overflow in nvhost_job.c in the NVIDIA video driver for Android, Shield TV before OTA 3.3, Shield Table before OTA 4.4, and Shield Table TK1 before OTA 1.5. | 7.8 |
| 2017-04-24 | CVE-2017-3625 | Unspecified vulnerability in Oracle Webcenter Content Vulnerability in the Oracle WebCenter Content component of Oracle Fusion Middleware (subcomponent: Content Server). | 8.2 |
| 2017-04-24 | CVE-2017-3622 | Unspecified vulnerability in Oracle Solaris 10 Vulnerability in the Solaris component of Oracle Sun Systems Products Suite (subcomponent: Common Desktop Environment (CDE)). | 7.8 |
| 2017-04-24 | CVE-2017-3621 | Unspecified vulnerability in Oracle SUN ZFS Storage Appliance KIT Ak2013 Vulnerability in the Sun ZFS Storage Appliance Kit (AK) component of Oracle Sun Systems Products Suite (subcomponent: IPC Frameworks). | 7.5 |