Multiple vulnerabilities in Google Chrome

Description

Multiple serious vulnerabilities have been found in Google Chrome. Malicious users can exploit these vulnerabilities to cause a denial of service and to execute arbitrary code.

Below is a complete list of vulnerabilities:

1. Stack buffer overflow in QUIC can be exploited remotely by an unauthenticated attacker possibly to cause denial of service or execute arbitrary code;
2. Use after free in V8 can be exploited remotely by an unauthenticated attacker possibly to cause denial of service or execute arbitrary code.

---

Technical details

NB: At this moment Google has just reserved CVE numbers for these vulnerabilities. Information can be changed soon.

Original advisories

• Stable Channel Update for Desktop

Related products

• Google-Chrome

CVE list

• CVE-2017-15398
  critical
• CVE-2017-15399
  critical

KB list

Read more

Find out the statistics of the vulnerabilities spreading in your region on statistics.securelist.com