{"vulnerability": "CVE-2017-1540", "sightings": [{"uuid": "b098f28b-ff89-48a1-b0f4-cd97336e27cd", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2017-15400", "type": "seen", "source": "https://t.me/R0_Crew/445", "content": "Google ChromeOS Printer Zeroconf Remote Code Execution Vulnerability (CVE-2017-15400) https://bugs.chromium.org/p/chromium/issues/detail?id=777215 #rce #expdev #darw1n", "creation_timestamp": "2018-02-21T17:00:40.000000Z"}, {"uuid": "7bc67ab0-461e-4f5b-80f4-48ffc1941c28", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2017-1540", "type": "seen", "source": "Telegram/xqhrXOTPhYX7Flnex66qLfoVbSzRTuncxP1ZID8e24a4DuWc", "content": "", "creation_timestamp": "2025-02-06T02:44:20.000000Z"}, {"uuid": "dc64b3f4-87b5-49cf-be4c-4b2a728d8b0c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2017-15401", "type": "seen", "source": "https://t.me/cibsecurity/1952", "content": "ATENTION\u203c New - CVE-2017-15401\n\nA memory corruption bug in WebAssembly could lead to out of bounds read and write through V8 in WebAssembly in Google Chrome prior to 62.0.3202.62 allowed a remote attacker to execute arbitrary code inside a sandbox via a crafted HTML page.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2019-01-09T22:23:31.000000Z"}, {"uuid": "75f71053-c395-4817-87bd-be0353a91f65", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2017-15405", "type": "seen", "source": "https://t.me/cibsecurity/1948", "content": "ATENTION\u203c New - CVE-2017-15405\n\nInappropriate symlink handling and a race condition in the stateful recovery feature implementation could lead to a persistance established by a malicious code running with root privileges in cryptohomed in Google Chrome on Chrome OS prior to 61.0.3163.113 allowed a local attacker to execute arbitrary code via a crafted HTML page.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2019-01-09T22:23:24.000000Z"}, {"uuid": "267b2b2d-cae8-440b-832f-a12af2fc90cb", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2017-15404", "type": "seen", "source": "https://t.me/cibsecurity/1949", "content": "ATENTION\u203c New - CVE-2017-15404\n\nAn ability to process crash dumps under root privileges and inappropriate symlinks handling could lead to a local privilege escalation in Crash Reporting in Google Chrome on Chrome OS prior to 61.0.3163.113 allowed a local attacker to perform privilege escalation via a crafted HTML page.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2019-01-09T22:23:25.000000Z"}, {"uuid": "2bdc6c08-020c-48d6-9753-23d201934d17", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2017-15403", "type": "seen", "source": "https://t.me/cibsecurity/1950", "content": "ATENTION\u203c New - CVE-2017-15403\n\nInsufficient data validation in crosh could lead to a command injection under chronos privileges in Networking in Google Chrome on Chrome OS prior to 61.0.3163.113 allowed a local attacker to execute arbitrary code via a crafted HTML page.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2019-01-09T22:23:26.000000Z"}, {"uuid": "0f85bdf8-e87b-41a2-ad4b-4b47b128616b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2017-15402", "type": "seen", "source": "https://t.me/cibsecurity/1951", "content": "ATENTION\u203c New - CVE-2017-15402\n\nUsing an ID that can be controlled by a compromised renderer which allows any frame to overwrite the page_state of any other frame in the same process in Navigation in Google Chrome on Chrome OS prior to 62.0.3202.74 allowed a remote attacker who had compromised the renderer process to potentially perform a sandbox escape via a crafted HTML page.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2019-01-09T22:23:27.000000Z"}]}