# CVEs published 2017-10-27

102 CVEs were published on October 27, 2017: 0 critical, 3 high. 1 is now in CISA KEV. Days are UTC.

- [CVE-2017-15938](https://cve.now/CVE-2017-15938.md): dwarf2.c in the Binary File Descriptor (BFD) library (aka libbfd), as distributed in GNU Binutils 2.29, miscalculates DW\_FORM\_ref\_addr die r (no CVSS)
- [CVE-2017-15939](https://cve.now/CVE-2017-15939.md): dwarf2.c in the Binary File Descriptor (BFD) library (aka libbfd), as distributed in GNU Binutils 2.29, mishandles NULL files in a .debug\_li (no CVSS)
- [CVE-2017-15945](https://cve.now/CVE-2017-15945.md): The installation scripts in the Gentoo dev-db/mysql, dev-db/mariadb, dev-db/percona-server, dev-db/mysql-cluster, and dev-db/mariadb-galera (no CVSS)
- [CVE-2017-15581](https://cve.now/CVE-2017-15581.md): In the "Diary with lock" (aka WriteDiary) application 4.72 for Android, neither HTTPS nor other encryption is used for transmitting data, de (no CVSS)
- [CVE-2017-15582](https://cve.now/CVE-2017-15582.md): In net.MCrypt in the "Diary with lock" (aka WriteDiary) application 4.72 for Android, hardcoded SecretKey and iv variables are used for the (no CVSS)
- [CVE-2017-15934](https://cve.now/CVE-2017-15934.md): Artica Pandora FMS version 7.0 is vulnerable to stored Cross-Site Scripting in the map name parameter. (no CVSS)
- [CVE-2017-15935](https://cve.now/CVE-2017-15935.md): Artica Pandora FMS version 7.0 is vulnerable to remote PHP code execution through the manager files function. (no CVSS)
- [CVE-2017-15936](https://cve.now/CVE-2017-15936.md): In Artica Pandora FMS version 7.0, an Attacker with write Permission can create an agent with an XSS Payload; when a user enters the agent d (no CVSS)
- [CVE-2017-15937](https://cve.now/CVE-2017-15937.md): Artica Pandora FMS version 7.0 leaks a full installation pathname via GET data when intercepting the main page's graph requisition. (no CVSS)
- [CVE-2014-3579](https://cve.now/CVE-2014-3579.md): XML external entity (XXE) vulnerability in Apache ActiveMQ Apollo 1.x before 1.7.1 allows remote consumers to have unspecified impact via ve (no CVSS, org.apache.activemq:apollo-project)
- [CVE-2014-3600](https://cve.now/CVE-2014-3600.md): XML external entity (XXE) vulnerability in Apache ActiveMQ 5.x before 5.10.1 allows remote consumers to have unspecified impact via vectors (no CVSS, org.apache.activemq:activemq-client · org.apache.activemq:a…)
- [CVE-2015-1835](https://cve.now/CVE-2015-1835.md): Apache Cordova Android before 3.7.2 and 4.x before 4.0.2, when an application does not set explicit values in config.xml, allows remote atta (no CVSS)
- [CVE-2017-13089](https://cve.now/CVE-2017-13089.md): GNU Wget: stack overflow in HTTP protocol handling (CVSS 8.8, GNU Project Wget)
- [CVE-2017-13090](https://cve.now/CVE-2017-13090.md): GNU Wget: heap overflow in HTTP protocol handling (CVSS 8.8, GNU Project Wget)
- [CVE-2017-15933](https://cve.now/CVE-2017-15933.md): SQL injection vulnerability vulnerability in the EyesOfNetwork web interface (aka eonweb) 5.1-0 allows remote authenticated administrators t (no CVSS)
- [CVE-2016-5002](https://cve.now/CVE-2016-5002.md): XML external entity (XXE) vulnerability in the Apache XML-RPC (aka ws-xmlrpc) library 3.1.3, as used in Apache Archiva, allows remote attack (no CVSS, org.apache.xmlrpc:xmlrpc)
- [CVE-2016-5003](https://cve.now/CVE-2016-5003.md): The Apache XML-RPC (aka ws-xmlrpc) library 3.1.3, as used in Apache Archiva, allows remote attackers to execute arbitrary code via a crafted (no CVSS, org.apache.xmlrpc:xmlrpc)
- [CVE-2017-15930](https://cve.now/CVE-2017-15930.md): In ReadOneJNGImage in coders/png.c in GraphicsMagick 1.3.26, a Null Pointer Dereference occurs while transferring JPEG scanlines, related to (no CVSS)
- [CVE-2017-15931](https://cve.now/CVE-2017-15931.md): In radare2 2.0.1, an integer exception (negative number leading to an invalid memory access) exists in store\_versioninfo\_gnu\_verneed() in li (no CVSS)
- [CVE-2017-15932](https://cve.now/CVE-2017-15932.md): In radare2 2.0.1, an integer exception (negative number leading to an invalid memory access) exists in store\_versioninfo\_gnu\_verdef() in lib (no CVSS)
- [CVE-2017-15928](https://cve.now/CVE-2017-15928.md): In the Ox gem 2.8.0 for Ruby, the process crashes with a segmentation fault when a crafted input is supplied to parse\_obj. (no CVSS, ox)
- [CVE-2017-15924](https://cve.now/CVE-2017-15924.md): In manager.c in ss-manager in shadowsocks-libev 3.1.0, improper parsing allows command injection via shell metacharacters in a JSON configur (no CVSS)
- [CVE-2017-0303](https://cve.now/CVE-2017-0303.md): In F5 BIG-IP LTM, AAM, AFM, Analytics, APM, ASM, DNS, GTM, Link Controller, PEM and Websafe software version 13.0.0, 12.0.0 to 12.1.2 and 11 (no CVSS, F5 Networks BIG-IP LTM, AAM, AFM, Analytics, APM, ASM, DNS,…)
- [CVE-2017-6157](https://cve.now/CVE-2017-6157.md): In F5 BIG-IP LTM, AAM, AFM, Analytics, APM, ASM, DNS, GTM, Link Controller, PEM and Websafe software version 12.0.0 to 12.1.1, 11.6.0 to 11. (no CVSS, F5 Networks BIG-IP LTM, AAM, AFM, APM, ASM, Link Controller…)
- [CVE-2017-6159](https://cve.now/CVE-2017-6159.md): F5 BIG-IP LTM, AAM, AFM, Analytics, APM, ASM, DNS, GTM, Link Controller, PEM, Websafe software version 12.0.0 to 12.1.2, 11.6.0 to 11.6.1 ar (no CVSS, F5 Networks BIG-IP LTM, AAM, AFM, Analytics, APM, ASM, DNS,…)
- [CVE-2017-6160](https://cve.now/CVE-2017-6160.md): In F5 BIG-IP AAM and PEM software version 12.0.0 to 12.1.1, 11.6.0 to 11.6.1, 11.4.1 to 11.5.4, a remote attacker may create maliciously cra (no CVSS, F5 Networks BIG-IP AAM, PEM)
- [CVE-2017-6161](https://cve.now/CVE-2017-6161.md): In F5 BIG-IP LTM, AAM, AFM, Analytics, APM, ASM, DNS, Edge Gateway, GTM, Link Controller, PEM, WebAccelerator software version 12.0.0 - 12.1 (no CVSS, F5 Networks BIG-IP LTM, AAM, AFM, Analytics, APM, ASM, DNS,…)
- [CVE-2017-6162](https://cve.now/CVE-2017-6162.md): In F5 BIG-IP LTM, AAM, AFM, Analytics, APM, ASM, DNS, Edge Gateway, GTM, Link Controller, PEM, Websafe software version 12.0.0 to 12.1.2, 11 (no CVSS, F5 Networks BIG-IP LTM, AAM, AFM, Analytics, APM, ASM, DNS,…)
- [CVE-2017-6163](https://cve.now/CVE-2017-6163.md): In F5 BIG-IP LTM, AAM, AFM, APM, ASM, Link Controller, PEM, PSM software version 12.0.0 to 12.1.2, 11.6.0 to 11.6.1, 11.4.0 to 11.5.4, when (no CVSS, F5 Networks BIG-IP LTM, AAM, AFM, APM, ASM, Link Controller…)
- [CVE-2017-14182](https://cve.now/CVE-2017-14182.md): A Denial of Service (DoS) vulnerability in Fortinet FortiOS 5.4.0 to 5.4.5 allows an authenticated user to cause the web GUI to be temporari (no CVSS, Fortinet FortiOS)
- [CVE-2017-7733](https://cve.now/CVE-2017-7733.md): A Cross-Site-Scripting (XSS) vulnerability in Fortinet FortiOS 5.4.0 to 5.4.5 and 5.6.0 allows a remote unauthenticated attacker to execute (no CVSS, Fortinet FortiOS)
- [CVE-2017-5052](https://cve.now/CVE-2017-5052.md): An incorrect assumption about block structure in Blink in Google Chrome prior to 57.0.2987.133 for Mac, Windows, and Linux, and 57.0.2987.13 (no CVSS, Google Chrome prior to 57.0.2987.133 for Mac, Windows and L…)
- [CVE-2017-5053](https://cve.now/CVE-2017-5053.md): An out-of-bounds read in V8 in Google Chrome prior to 57.0.2987.133 for Linux, Windows, and Mac, and 57.0.2987.132 for Android, allowed a re (no CVSS, Google Chrome prior to 57.0.2987.133 for Linux, Windows and…)
- [CVE-2017-5054](https://cve.now/CVE-2017-5054.md): An out-of-bounds read in V8 in Google Chrome prior to 57.0.2987.133 for Linux, Windows, and Mac, and 57.0.2987.132 for Android, allowed a re (no CVSS, Google Chrome prior to 57.0.2987.133 for Linux, Windows and…)
- [CVE-2017-5055](https://cve.now/CVE-2017-5055.md): A use after free in printing in Google Chrome prior to 57.0.2987.133 for Linux and Windows allowed a remote attacker to perform an out of bo (no CVSS, Google Chrome prior to 57.0.2987.133 for Linux and Windows)
- [CVE-2017-5056](https://cve.now/CVE-2017-5056.md): A use after free in Blink in Google Chrome prior to 57.0.2987.133 for Linux, Windows, and Mac, and 57.0.2987.132 for Android, allowed a remo (no CVSS, Google Chrome prior to 57.0.2987.133 for Linux, Windows and…)
- [CVE-2017-5057](https://cve.now/CVE-2017-5057.md): Type confusion in PDFium in Google Chrome prior to 58.0.3029.81 for Mac, Windows, and Linux, and 58.0.3029.83 for Android, allowed a remote (no CVSS, Google Chrome prior to 58.0.3029.81 for Mac, Windows and Li…)
- [CVE-2017-5058](https://cve.now/CVE-2017-5058.md): A use after free in PrintPreview in Google Chrome prior to 58.0.3029.81 for Windows allowed a remote attacker to potentially perform out of (no CVSS, Google Chrome prior to 58.0.3029.81 for Windows)
- [CVE-2017-5059](https://cve.now/CVE-2017-5059.md): Type confusion in Blink in Google Chrome prior to 58.0.3029.81 for Linux, Windows, and Mac, and 58.0.3029.83 for Android, allowed a remote a (no CVSS, Google Chrome prior to 58.0.3029.81 for Linux, Windows and…)
- [CVE-2017-5060](https://cve.now/CVE-2017-5060.md): Insufficient Policy Enforcement in Omnibox in Google Chrome prior to 58.0.3029.81 for Mac, Windows, and Linux, and 58.0.3029.83 for Android, (no CVSS, Google Chrome prior to 58.0.3029.81 for Mac, Windows and Li…)
- [CVE-2017-5061](https://cve.now/CVE-2017-5061.md): A race condition in navigation in Google Chrome prior to 58.0.3029.81 for Linux, Windows, and Mac allowed a remote attacker to spoof the con (no CVSS, Google Chrome prior to 58.0.3029.81 for Linux, Windows and…)
- [CVE-2017-5062](https://cve.now/CVE-2017-5062.md): A use after free in Chrome Apps in Google Chrome prior to 58.0.3029.81 for Mac, Windows, and Linux, and 58.0.3029.83 for Android, allowed a (no CVSS, Google Chrome prior to 58.0.3029.81 for Mac, Windows and Li…)
- [CVE-2017-5063](https://cve.now/CVE-2017-5063.md): A numeric overflow in Skia in Google Chrome prior to 58.0.3029.81 for Linux, Windows, and Mac, and 58.0.3029.83 for Android, allowed a remot (no CVSS, Google Chrome prior to 58.0.3029.81 for Linux, Windows and…)
- [CVE-2017-5064](https://cve.now/CVE-2017-5064.md): Incorrect handling of DOM changes in Blink in Google Chrome prior to 58.0.3029.81 for Windows allowed a remote attacker to potentially explo (no CVSS, Google Chrome prior to 58.0.3029.81 for Windows)
- [CVE-2017-5065](https://cve.now/CVE-2017-5065.md): Lack of an appropriate action on page navigation in Blink in Google Chrome prior to 58.0.3029.81 for Windows and Mac allowed a remote attack (no CVSS, Google Chrome prior to 58.0.3029.81 for Windows and Mac)
- [CVE-2017-5066](https://cve.now/CVE-2017-5066.md): Insufficient consistency checks in signature handling in the networking stack in Google Chrome prior to 58.0.3029.81 for Mac, Windows, and L (no CVSS, Google Chrome prior to 58.0.3029.81 for Mac, Windows and Li…)
- [CVE-2017-5067](https://cve.now/CVE-2017-5067.md): An insufficient watchdog timer in navigation in Google Chrome prior to 58.0.3029.81 for Linux, Windows, and Mac allowed a remote attacker to (no CVSS, Google Chrome prior to 58.0.3029.81 for Linux, Windows and…)
- [CVE-2017-5068](https://cve.now/CVE-2017-5068.md): Incorrect handling of picture ID in WebRTC in Google Chrome prior to 58.0.3029.96 for Mac, Windows, and Linux allowed a remote attacker to t (no CVSS, Google Chrome prior to 58.0.3029.96 for Mac, Windows and Li…)
- [CVE-2017-5069](https://cve.now/CVE-2017-5069.md): Incorrect MIME type of XSS-Protection reports in Blink in Google Chrome prior to 58.0.3029.81 for Linux, Windows, and Mac, and 58.0.3029.83 (no CVSS, Google Chrome prior to 58.0.3029.81 for Linux, Windows and…)
- [CVE-2017-5070](https://cve.now/CVE-2017-5070.md): Type confusion in V8 in Google Chrome prior to 59.0.3071.86 for Linux, Windows, and Mac, and 59.0.3071.92 for Android, allowed a remote atta (CVSS 8.8, KEV, Google Chrome prior to 59.0.3071.86 for Linux, Windows and…)
- [CVE-2017-5071](https://cve.now/CVE-2017-5071.md): Insufficient validation of untrusted input in V8 in Google Chrome prior to 59.0.3071.86 for Linux, Windows and Mac, and 59.0.3071.92 for And (no CVSS, Google Chrome prior to 59.0.3071.86 for Linux, Windows and…)
- [CVE-2017-5072](https://cve.now/CVE-2017-5072.md): Inappropriate implementation in Omnibox in Google Chrome prior to 59.0.3071.92 for Android allowed a remote attacker to perform domain spoof (no CVSS, Google Chrome prior to 59.0.3071.92 for Android)
- [CVE-2017-5073](https://cve.now/CVE-2017-5073.md): Use after free in print preview in Blink in Google Chrome prior to 59.0.3071.86 for Linux, Windows, and Mac, and 59.0.3071.92 for Android, a (no CVSS, Google Chrome prior to 59.0.3071.86 for Linux, Windows and…)
- [CVE-2017-5074](https://cve.now/CVE-2017-5074.md): A use after free in Chrome Apps in Google Chrome prior to 59.0.3071.86 for Windows allowed a remote attacker to perform an out of bounds mem (no CVSS, Google Chrome prior to 59.0.3071.86 for Windows)
- [CVE-2017-5075](https://cve.now/CVE-2017-5075.md): Inappropriate implementation in CSP reporting in Blink in Google Chrome prior to 59.0.3071.86 for Linux, Windows, and Mac, and 59.0.3071.92 (no CVSS, Google Chrome prior to 59.0.3071.86 for Linux, Windows and…)
- [CVE-2017-5076](https://cve.now/CVE-2017-5076.md): Insufficient Policy Enforcement in Omnibox in Google Chrome prior to 59.0.3071.86 for Mac, Windows, and Linux, and 59.0.3071.92 for Android, (no CVSS, Google Chrome prior to 59.0.3071.86 for Mac, Windows and Li…)
- [CVE-2017-5077](https://cve.now/CVE-2017-5077.md): Insufficient validation of untrusted input in Skia in Google Chrome prior to 59.0.3071.86 for Linux, Windows, and Mac, and 59.0.3071.92 for (no CVSS, Google Chrome prior to 59.0.3071.86 for Linux, Windows and…)
- [CVE-2017-5078](https://cve.now/CVE-2017-5078.md): Insufficient validation of untrusted input in Blink's mailto: handling in Google Chrome prior to 59.0.3071.86 for Linux, Windows, and Mac al (no CVSS, Google Chrome prior to 59.0.3071.86 for Linux, Windows and…)
- [CVE-2017-5079](https://cve.now/CVE-2017-5079.md): Inappropriate implementation in Blink in Google Chrome prior to 59.0.3071.86 for Mac, Windows, and Linux, and 59.0.3071.92 for Android, allo (no CVSS, Google Chrome prior to 59.0.3071.86 for Mac, Windows and Li…)
- [CVE-2017-5080](https://cve.now/CVE-2017-5080.md): A use after free in credit card autofill in Google Chrome prior to 59.0.3071.86 for Linux and Windows allowed a remote attacker to perform a (no CVSS, Google Chrome prior to 59.0.3071.86 for Linux and Windows)
- [CVE-2017-5081](https://cve.now/CVE-2017-5081.md): Lack of verification of an extension's locale folder in Google Chrome prior to 59.0.3071.86 for Mac, Windows, and Linux, and 59.0.3071.92 fo (no CVSS, Google Chrome prior to 59.0.3071.86 for Mac, Windows and Li…)
- [CVE-2017-5082](https://cve.now/CVE-2017-5082.md): Failure to take advantage of available mitigations in credit card autofill in Google Chrome prior to 59.0.3071.92 for Android allowed a loca (no CVSS, Google Chrome prior to 59.0.3071.92 for Android)
- [CVE-2017-5083](https://cve.now/CVE-2017-5083.md): Inappropriate implementation in Blink in Google Chrome prior to 59.0.3071.86 for Mac, Windows, and Linux, and 59.0.3071.92 for Android, allo (no CVSS, Google Chrome prior to 59.0.3071.86 for Mac, Windows and Li…)
- [CVE-2017-5084](https://cve.now/CVE-2017-5084.md): Inappropriate implementation in image-burner in Google Chrome OS prior to 59.0.3071.92 allowed a local attacker to read local files via dbus (no CVSS, Google Chrome prior to)
- [CVE-2017-5085](https://cve.now/CVE-2017-5085.md): Inappropriate implementation in Bookmarks in Google Chrome prior to 59 for iOS allowed a remote attacker who convinced the user to perform c (no CVSS, Google Chrome prior to 59 for iOS)
- [CVE-2017-5086](https://cve.now/CVE-2017-5086.md): Insufficient Policy Enforcement in Omnibox in Google Chrome prior to 59.0.3071.86 for Windows and Mac allowed a remote attacker to perform d (no CVSS, Google Chrome prior to 59.0.3071.86 for Windows and Mac)
- [CVE-2017-5087](https://cve.now/CVE-2017-5087.md): A use after free in Blink in Google Chrome prior to 59.0.3071.104 for Mac, Windows, and Linux, and 59.0.3071.117 for Android, allowed a remo (no CVSS, Google Chrome prior to 59.0.3071.104 for Mac, Windows and L…)
- [CVE-2017-5088](https://cve.now/CVE-2017-5088.md): Insufficient validation of untrusted input in V8 in Google Chrome prior to 59.0.3071.104 for Mac, Windows, and Linux, and 59.0.3071.117 for (no CVSS, Google Chrome prior to 59.0.3071.104 for Mac, Windows and L…)
- [CVE-2017-5089](https://cve.now/CVE-2017-5089.md): Insufficient Policy Enforcement in Omnibox in Google Chrome prior to 59.0.3071.104 for Mac allowed a remote attacker to perform domain spoof (no CVSS, Google Chrome prior to 59.0.3071.104 for Mac)
- [CVE-2017-5090](https://cve.now/CVE-2017-5090.md): Insufficient Policy Enforcement in Omnibox in Google Chrome prior to 59.0.3071.115 for Mac allowed a remote attacker to perform domain spoof (no CVSS, Google Chrome prior to 59.0.3071.115 for Mac)
- [CVE-2017-5091](https://cve.now/CVE-2017-5091.md): A use after free in IndexedDB in Google Chrome prior to 60.0.3112.78 for Linux, Android, Windows, and Mac allowed a remote attacker to perfo (no CVSS, Google Chrome prior to 60.0.3112.78 for Linux, Android, Win…)
- [CVE-2017-5092](https://cve.now/CVE-2017-5092.md): Insufficient validation of untrusted input in PPAPI Plugins in Google Chrome prior to 60.0.3112.78 for Windows allowed a remote attacker to (no CVSS, Google Chrome prior to 60.0.3112.78 for Windows)
- [CVE-2017-5093](https://cve.now/CVE-2017-5093.md): Inappropriate implementation in modal dialog handling in Blink in Google Chrome prior to 60.0.3112.78 for Mac, Windows, Linux, and Android a (no CVSS, Google Chrome prior to 60.0.3112.78 for Mac, Windows, Linux…)
- [CVE-2017-5094](https://cve.now/CVE-2017-5094.md): Type confusion in extensions JavaScript bindings in Google Chrome prior to 60.0.3112.78 for Mac, Windows, Linux, and Android allowed a remot (no CVSS, Google Chrome prior to 60.0.3112.78 for Mac, Windows, Linux…)
- [CVE-2017-5095](https://cve.now/CVE-2017-5095.md): Stack overflow in PDFium in Google Chrome prior to 60.0.3112.78 for Linux, Windows, and Mac allowed a remote attacker to potentially exploit (no CVSS, Google Chrome prior to 60.0.3112.78 for Linux, Windows and…)
- [CVE-2017-5096](https://cve.now/CVE-2017-5096.md): Insufficient policy enforcement during navigation between different schemes in Google Chrome prior to 60.0.3112.78 for Android allowed a rem (no CVSS, Google Chrome prior to 60.0.3112.78 for Android)
- [CVE-2017-5097](https://cve.now/CVE-2017-5097.md): Insufficient validation of untrusted input in Skia in Google Chrome prior to 60.0.3112.78 for Linux allowed a remote attacker to perform an (no CVSS, Google Chrome prior to 60.0.3112.78 for Linux)
- [CVE-2017-5098](https://cve.now/CVE-2017-5098.md): A use after free in V8 in Google Chrome prior to 60.0.3112.78 for Mac, Windows, Linux, and Android allowed a remote attacker to perform an o (no CVSS, Google Chrome prior to 60.0.3112.78 for Mac, Windows, Linux…)
- [CVE-2017-5099](https://cve.now/CVE-2017-5099.md): Insufficient validation of untrusted input in PPAPI Plugins in Google Chrome prior to 60.0.3112.78 for Mac allowed a remote attacker to pote (no CVSS, Google Chrome prior to 60.0.3112.78 for Mac)
- [CVE-2017-5100](https://cve.now/CVE-2017-5100.md): A use after free in Apps in Google Chrome prior to 60.0.3112.78 for Windows allowed a remote attacker to perform an out of bounds memory rea (no CVSS, Google Chrome prior to 60.0.3112.78 for Windows)
- [CVE-2017-5101](https://cve.now/CVE-2017-5101.md): Inappropriate implementation in Omnibox in Google Chrome prior to 60.0.3112.78 for Linux, Windows, and Mac allowed a remote attacker to spoo (no CVSS, Google Chrome prior to 60.0.3112.78 for Linux, Windows and…)
- [CVE-2017-5102](https://cve.now/CVE-2017-5102.md): Use of an uninitialized value in Skia in Google Chrome prior to 60.0.3112.78 for Mac, Windows, Linux, and Android allowed a remote attacker (no CVSS, Google Chrome prior to 60.0.3112.78 for Mac, Windows, Linux…)
- [CVE-2017-5103](https://cve.now/CVE-2017-5103.md): Use of an uninitialized value in Skia in Google Chrome prior to 60.0.3112.78 for Linux, Windows, and Mac allowed a remote attacker to obtain (no CVSS, Google Chrome prior to 60.0.3112.78 for Linux, Windows and…)
- [CVE-2017-5104](https://cve.now/CVE-2017-5104.md): Inappropriate implementation in interstitials in Google Chrome prior to 60.0.3112.78 for Mac allowed a remote attacker to spoof the contents (no CVSS, Google Chrome prior to 60.0.3112.78 for Mac)
- [CVE-2017-5105](https://cve.now/CVE-2017-5105.md): Insufficient Policy Enforcement in Omnibox in Google Chrome prior to 60.0.3112.78 for Mac, Windows, Linux, and Android allowed a remote atta (no CVSS, Google Chrome prior to 60.0.3112.78 for Mac, Windows, Linux…)
- [CVE-2017-5106](https://cve.now/CVE-2017-5106.md): Insufficient Policy Enforcement in Omnibox in Google Chrome prior to 60.0.3112.78 for Mac, Windows, Linux, and Android allowed a remote atta (no CVSS, Google Chrome prior to 60.0.3112.78 for Mac, Windows, Linux…)
- [CVE-2017-5107](https://cve.now/CVE-2017-5107.md): A timing attack in SVG rendering in Google Chrome prior to 60.0.3112.78 for Linux, Windows, and Mac allowed a remote attacker to extract pix (no CVSS, Google Chrome prior to 60.0.3112.78 for Linux, Windows and…)
- [CVE-2017-5108](https://cve.now/CVE-2017-5108.md): Type confusion in PDFium in Google Chrome prior to 60.0.3112.78 for Mac, Windows, Linux, and Android allowed a remote attacker to potentiall (no CVSS, Google Chrome prior to 60.0.3112.78 for Mac, Windows, Linux…)
- [CVE-2017-5109](https://cve.now/CVE-2017-5109.md): Inappropriate implementation of unload handler handling in permission prompts in Google Chrome prior to 60.0.3112.78 for Linux, Windows, and (no CVSS, Google Chrome prior to 60.0.3112.78 for Linux, Windows and…)
- [CVE-2017-5110](https://cve.now/CVE-2017-5110.md): Inappropriate implementation of the web payments API on blob: and data: schemes in Web Payments in Google Chrome prior to 60.0.3112.78 for M (no CVSS, Google Chrome prior to 60.0.3112.78 for Mac, Windows, Linux…)
- [CVE-2017-5111](https://cve.now/CVE-2017-5111.md): A use after free in PDFium in Google Chrome prior to 61.0.3163.79 for Linux, Windows, and Mac allowed a remote attacker to potentially explo (no CVSS, Google Chrome prior to 61.0.3163.79 for Linux, Windows and…)
- [CVE-2017-5112](https://cve.now/CVE-2017-5112.md): Heap buffer overflow in WebGL in Google Chrome prior to 61.0.3163.79 for Windows allowed a remote attacker to execute arbitrary code inside (no CVSS, Google Chrome prior to 61.0.3163.79 for Windows)
- [CVE-2017-5113](https://cve.now/CVE-2017-5113.md): Math overflow in Skia in Google Chrome prior to 61.0.3163.79 for Mac, Windows, and Linux, and 61.0.3163.81 for Android, allowed a remote att (no CVSS, Google Chrome prior to 61.0.3163.79 for Mac, Windows and Li…)
- [CVE-2017-5114](https://cve.now/CVE-2017-5114.md): Inappropriate use of partition alloc in PDFium in Google Chrome prior to 61.0.3163.79 for Linux, Windows, and Mac, and 61.0.3163.81 for Andr (no CVSS, Google Chrome prior to 61.0.3163.79 for Linux, Windows and…)
- [CVE-2017-5115](https://cve.now/CVE-2017-5115.md): Type confusion in V8 in Google Chrome prior to 61.0.3163.79 for Windows allowed a remote attacker to potentially exploit object corruption v (no CVSS, Google Chrome prior to 61.0.3163.79 for Windows)
- [CVE-2017-5116](https://cve.now/CVE-2017-5116.md): Type confusion in V8 in Google Chrome prior to 61.0.3163.79 for Mac, Windows, and Linux, and 61.0.3163.81 for Android, allowed a remote atta (no CVSS, Google Chrome prior to 61.0.3163.79 for Mac, Windows and Li…)
- [CVE-2017-5117](https://cve.now/CVE-2017-5117.md): Use of an uninitialized value in Skia in Google Chrome prior to 61.0.3163.79 for Linux and Windows allowed a remote attacker to obtain poten (no CVSS, Google Chrome prior to 61.0.3163.79 for Linux and Windows)
- [CVE-2017-5118](https://cve.now/CVE-2017-5118.md): Blink in Google Chrome prior to 61.0.3163.79 for Mac, Windows, and Linux, and 61.0.3163.81 for Android, failed to correctly propagate CSP re (no CVSS, Google Chrome prior to 61.0.3163.79 for Mac, Windows and Li…)
- [CVE-2017-5119](https://cve.now/CVE-2017-5119.md): Use of an uninitialized value in Skia in Google Chrome prior to 61.0.3163.79 for Mac, Windows, and Linux, and 61.0.3163.81 for Android, allo (no CVSS, Google Chrome prior to 61.0.3163.79 for Mac, Windows and Li…)
- [CVE-2017-5120](https://cve.now/CVE-2017-5120.md): Inappropriate use of www mismatch redirects in browser navigation in Google Chrome prior to 61.0.3163.79 for Mac, Windows, and Linux, and 61 (no CVSS, Google Chrome prior to 61.0.3163.79 for Mac, Windows and Li…)
- [CVE-2017-5121](https://cve.now/CVE-2017-5121.md): Inappropriate use of JIT optimisation in V8 in Google Chrome prior to 61.0.3163.100 for Linux, Windows, and Mac allowed a remote attacker to (no CVSS, Google Chrome prior to 61.0.3163.100 for Linux, Windows and…)
- [CVE-2017-5122](https://cve.now/CVE-2017-5122.md): Inappropriate use of table size handling in V8 in Google Chrome prior to 61.0.3163.100 for Windows allowed a remote attacker to trigger out- (no CVSS, Google Chrome prior to 61.0.3163.100 for Windows)

---

Source: cve.now, built and run by Sazabi (AI-native observability and security)
Page: https://cve.now/daily/2017-10-27
Site guide for agents: https://cve.now/llms.txt
Uses NVD data; not endorsed by NVD.