https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-02T16:50:32.123306+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/certfr-2017-avi-284 certfr-2017-avi-284 — De multiples vulnérabilités ont été corrigées dans <span class="textit">Google Chrome</span>. Certaines d'entre elles p… 2026-10-02T16:50:32.296620+00:00 certfr-2017-avi-284 https://cve.radiocsirt.org/vuln/cnvd-2017-31828 cnvd-2017-31828 2026-10-02T16:50:32.296670+00:00 cnvd-2017-31828 https://cve.radiocsirt.org/vuln/euvd-2026-73089 EUVD-2026-73089 2026-10-02T16:50:32.296685+00:00 EUVD-2026-73089 https://cve.radiocsirt.org/vuln/fkie_cve-2017-5120 fkie_cve-2017-5120 2026-10-02T16:50:32.296697+00:00

Inappropriate use of www mismatch redirects in browser navigation in Google Chrome prior to 61.0.3163.79 for Mac, Windows, and Linux, and 61.0.3163.81 for Android, allowed a remote attacker to potentially downgrade HTTPS requests to HTTP via a crafted HTML page. In other words, Chrome could transmit cleartext even though the user had entered an https URL, because of a misdesigned workaround for cases where the domain name in a URL almost matches the domain name in an X.509 server certificate (but differs in the initial "www." substring).

 https://cve.radiocsirt.org/vuln/ghsa-qmqm-g7x7-xpcx GHSA-qmqm-g7x7-xpcx 2026-10-02T16:50:32.296730+00:00

Inappropriate use of www mismatch redirects in browser navigation in Google Chrome prior to 61.0.3163.79 for Mac, Windows, and Linux, and 61.0.3163.81 for Android, allowed a remote attacker to potentially downgrade HTTPS requests to HTTP via a crafted HTML page. In other words, Chrome could transmit cleartext even though the user had entered an https URL, because of a misdesigned workaround for cases where the domain name in a URL almost matches the domain name in an X.509 server certificate (but differs in the initial "www." substring).

 https://cve.radiocsirt.org/vuln/gsd-2017-5120 gsd-2017-5120 2026-10-02T16:50:32.296749+00:00 gsd-2017-5120 https://cve.radiocsirt.org/vuln/opensuse-su-2017:2482-1 openSUSE-SU-2017:2482-1 — Security update for chromium 2026-10-02T16:50:32.296760+00:00

Security update for chromium

 https://cve.radiocsirt.org/vuln/rhsa-2017:2676 RHSA-2017:2676 — Red Hat Security Advisory: chromium-browser security update 2026-10-02T16:50:32.296782+00:00

chromium-browser: use after free in pdfium chromium-browser: heap buffer overflow in webgl chromium-browser: heap buffer overflow in skia chromium-browser: memory lifecycle issue in pdfium chromium-browser: type confusion in v8 chromium-browser: type confusion in v8 chromium-browser: use of uninitialized value in skia chromium-browser: bypass of content security policy in blink chromium-browser: use of uninitialized value in skia chromium-browser: potential https downgrade during redirect navigation

 https://cve.radiocsirt.org/vuln/ubuntu-cve-2017-5120 UBUNTU-CVE-2017-5120 2026-10-02T16:50:32.296808+00:00

Affected: Ubuntu:14.04:LTS: chromium-browser, Ubuntu:16.04:LTS: chromium-browser, Ubuntu:16.04:LTS: oxide-qt, Ubuntu:18.04:LTS: chromium-browser

Inappropriate use of www mismatch redirects in browser navigation in Google Chrome prior to 61.0.3163.79 for Mac, Windows, and Linux, and 61.0.3163.81 for Android, allowed a remote attacker to potentially downgrade HTTPS requests to HTTP via a crafted HTML page. In other words, Chrome could transmit cleartext even though the user had entered an https URL, because of a misdesigned workaround for cases where the domain name in a URL almost matches the domain name in an X.509 server certificate (but differs in the initial "www." substring).