CVE-2017-5107

Synopsis Important: chromium-browser security update Type/Severity Security Advisory: Important Topic An update for chromium-browser is now available for Red Hat Enterprise Linux 6 SupplementaryRed Hat Product Security has rated this update as having a security impact of Important A Common Vulnerability S ...

Several vulnerabilities have been discovered in the chromium web browser CVE-2017-5087 Ned Williamson discovered a way to escape the sandbox CVE-2017-5088 Xiling Gong discovered an out-of-bounds read issue in the v8 javascript library CVE-2017-5089 Michal Bentkowski discovered a spoofing issue CVE-2017-5091 Ned Williamson d ...

A timing attack in SVG rendering in Google Chrome prior to 600311278 for Linux, Windows, and Mac allowed a remote attacker to extract pixel values from a cross-origin page being iframe'd via a crafted HTML page ...

An information leakage vulnerability has been found in the Chromium browser < 600311278 By rendering a FeConvolveMatrix SVG filter over a target iframe and timing its execution an attacking page can extract pixel values from a cross-origin page being iframe'd This also allows reading ones own origin for history sniffing ...