https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-02T20:18:31.530266+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/bdu:2017-02681 bdu:2017-02681 2026-10-02T20:18:31.726439+00:00 bdu:2017-02681 https://cve.radiocsirt.org/vuln/certfr-2017-avi-168 certfr-2017-avi-168 — De multiples vulnérabilités ont été corrigées dans <span class="textit">Google Chrome</span>. Elles permettent à un att… 2026-10-02T20:18:31.726488+00:00 certfr-2017-avi-168 https://cve.radiocsirt.org/vuln/cnvd-2017-09203 cnvd-2017-09203 2026-10-02T20:18:31.726509+00:00 cnvd-2017-09203 https://cve.radiocsirt.org/vuln/euvd-2026-73091 EUVD-2026-73091 2026-10-02T20:18:31.726523+00:00 EUVD-2026-73091 https://cve.radiocsirt.org/vuln/fkie_cve-2017-5078 fkie_cve-2017-5078 2026-10-02T20:18:31.726534+00:00

Insufficient validation of untrusted input in Blink's mailto: handling in Google Chrome prior to 59.0.3071.86 for Linux, Windows, and Mac allowed a remote attacker to perform command injection via a crafted HTML page, a similar issue to CVE-2004-0121. For example, characters such as * have an incorrect interaction with xdg-email in xdg-utils, and a space character can be used in front of a command-line argument.

 https://cve.radiocsirt.org/vuln/ghsa-mvv4-2gfv-gwc4 GHSA-mvv4-2gfv-gwc4 2026-10-02T20:18:31.726566+00:00

Insufficient validation of untrusted input in Blink's mailto: handling in Google Chrome prior to 59.0.3071.86 for Linux, Windows, and Mac allowed a remote attacker to perform command injection via a crafted HTML page, a similar issue to CVE-2004-0121. For example, characters such as * have an incorrect interaction with xdg-email in xdg-utils, and a space character can be used in front of a command-line argument.

 https://cve.radiocsirt.org/vuln/gsd-2017-5078 gsd-2017-5078 2026-10-02T20:18:31.726584+00:00 gsd-2017-5078 https://cve.radiocsirt.org/vuln/opensuse-su-2017:1501-1 openSUSE-SU-2017:1501-1 — Security update for chromium 2026-10-02T20:18:31.726636+00:00

Security update for chromium

 https://cve.radiocsirt.org/vuln/rhsa-2017:1399 RHSA-2017:1399 — Red Hat Security Advisory: chromium-browser security update 2026-10-02T20:18:31.726663+00:00

chromium-browser: type confusion in v8 chromium-browser: out of bounds read in v8 chromium-browser: address spoofing in omnibox chromium-browser: use after free in print preview chromium-browser: use after free in apps bluetooth chromium-browser: information leak in csp reporting chromium-browser: address spoofing in omnibox chromium-browser: heap buffer overflow in skia chromium-browser: possible command injection in mailto handling chromium-browser: ui spoofing in blink chromium-browser: use after free in credit card autofill chromium-browser: extension verification bypass chromium-browser: insufficient hardening in credit card editor chromium-browser: ui spoofing in blink chromium-browser: inappropriate javascript execution on webui pages chromium-browser: address spoofing in omnibox

 https://cve.radiocsirt.org/vuln/ubuntu-cve-2017-5078 UBUNTU-CVE-2017-5078 2026-10-02T20:18:31.726699+00:00

Affected: Ubuntu:14.04:LTS: chromium-browser, Ubuntu:16.04:LTS: chromium-browser, Ubuntu:16.04:LTS: oxide-qt

Insufficient validation of untrusted input in Blink's mailto: handling in Google Chrome prior to 59.0.3071.86 for Linux, Windows, and Mac allowed a remote attacker to perform command injection via a crafted HTML page, a similar issue to CVE-2004-0121. For example, characters such as * have an incorrect interaction with xdg-email in xdg-utils, and a space character can be used in front of a command-line argument.