Several vulnerabilities have been discovered in the chromium web browser.

  - CVE-2018-6118     Ned Williamson discovered a use-after-free issue.

  - CVE-2018-6120     Zhou Aiting discovered a buffer overflow issue in the     pdfium library.

  - CVE-2018-6121     It was discovered that malicious extensions could     escalate privileges.

  - CVE-2018-6122     A type confusion issue was discovered in the v8     JavaScript library.

  - CVE-2018-6123     Looben Yang discovered a use-after-free issue.

  - CVE-2018-6124     Guang Gong discovered a type confusion issue.

  - CVE-2018-6125     Yubico discovered that the WebUSB implementation was too     permissive.

  - CVE-2018-6126     Ivan Fratric discovered a buffer overflow issue in the     skia library.

  - CVE-2018-6127     Looben Yang discovered a use-after-free issue.

  - CVE-2018-6129     Natalie Silvanovich discovered an out-of-bounds read     issue in WebRTC.

  - CVE-2018-6130     Natalie Silvanovich discovered an out-of-bounds read     issue in WebRTC.

  - CVE-2018-6131     Natalie Silvanovich discovered an error in WebAssembly.

  - CVE-2018-6132     Ronald E. Crane discovered an uninitialized memory     issue.

  - CVE-2018-6133     Khalil Zhani discovered a URL spoofing issue.

  - CVE-2018-6134     Jun Kokatsu discovered a way to bypass the Referrer     Policy.

  - CVE-2018-6135     Jasper Rebane discovered a user interface spoofing     issue.

  - CVE-2018-6136     Peter Wong discovered an out-of-bounds read issue in the     v8 JavaScript library.

  - CVE-2018-6137     Michael Smith discovered an information leak.

  - CVE-2018-6138     Francois Lajeunesse-Robert discovered that the     extensions policy was too permissive.

  - CVE-2018-6139     Rob Wu discovered a way to bypass restrictions in the     debugger extension.

  - CVE-2018-6140     Rob Wu discovered a way to bypass restrictions in the     debugger extension.

  - CVE-2018-6141     Yangkang discovered a buffer overflow issue in the skia     library.

  - CVE-2018-6142     Choongwoo Han discovered an out-of-bounds read in the v8     JavaScript library.

  - CVE-2018-6143     Guang Gong discovered an out-of-bounds read in the v8     JavaScript library.

  - CVE-2018-6144     pdknsk discovered an out-of-bounds read in the pdfium     library.

  - CVE-2018-6145     Masato Kinugawa discovered an error in the MathML     implementation.

  - CVE-2018-6147     Michail Pishchagin discovered an error in password entry     fields.

  - CVE-2018-6148     Michal Bentkowski discovered that the Content Security     Policy header was handled incorrectly.

  - CVE-2018-6149     Yu Zhou and Jundong Xie discovered an out-of-bounds     write issue in the v8 JavaScript library.

Detections

Analytics

Debian DSA-4237-1 : chromium-browser - security update

critical Nessus Plugin ID 110820

Version 1.9