Search for packages
| purl | pkg:deb/ubuntu/oxide-qt@1.8.4-0ubuntu1 |
| Next non-vulnerable version | 1.21.5-0ubuntu0.14.04.1 |
| Latest non-vulnerable version | 1.21.5-0ubuntu0.16.04.1 |
| Risk | 10.0 |
| Vulnerability | Summary | Fixed by |
|---|---|---|
|
VCID-15et-tcvg-aaab
Aliases: CVE-2016-5199 |
An off by one error resulting in an allocation of zero size in FFmpeg in Google Chrome prior to 54.0.2840.98 for Mac, and 54.0.2840.99 for Windows, and 54.0.2840.100 for Linux, and 55.0.2883.84 for Android allowed a remote attacker to potentially exploit heap corruption via a crafted video file. |
Affected by 45 other vulnerabilities. Affected by 45 other vulnerabilities. |
|
VCID-18sf-2pc8-aaah
Aliases: CVE-2016-5142 |
The Web Cryptography API (aka WebCrypto) implementation in Blink, as used in Google Chrome before 52.0.2743.116, does not properly copy data buffers, which allows remote attackers to cause a denial of service (use-after-free) or possibly have unspecified other impact via crafted JavaScript code, related to NormalizeAlgorithm.cpp and SubtleCrypto.cpp. |
Affected by 67 other vulnerabilities. Affected by 67 other vulnerabilities. |
|
VCID-1pqv-1jte-aaaa
Aliases: CVE-2016-1697 |
The FrameLoader::startLoad function in WebKit/Source/core/loader/FrameLoader.cpp in Blink, as used in Google Chrome before 51.0.2704.79, does not prevent frame navigations during DocumentLoader detach operations, which allows remote attackers to bypass the Same Origin Policy via crafted JavaScript code. |
Affected by 99 other vulnerabilities. Affected by 99 other vulnerabilities. |
|
VCID-247q-ycyg-aaah
Aliases: CVE-2015-6782 |
The Document::open function in WebKit/Source/core/dom/Document.cpp in Google Chrome before 47.0.2526.73 does not ensure that page-dismissal event handling is compatible with modal-dialog blocking, which makes it easier for remote attackers to spoof Omnibox content via a crafted web site. |
Affected by 163 other vulnerabilities. |
|
VCID-2752-ce5b-aaar
Aliases: CVE-2015-6761 |
The update_dimensions function in libavcodec/vp8.c in FFmpeg through 2.8.1, as used in Google Chrome before 46.0.2490.71 and other products, relies on a coefficient-partition count during multi-threaded operation, which allows remote attackers to cause a denial of service (race condition and memory corruption) or possibly have unspecified other impact via a crafted WebM file. |
Affected by 181 other vulnerabilities. Affected by 181 other vulnerabilities. |
|
VCID-2dmw-geu9-aaam
Aliases: CVE-2016-1655 |
Google Chrome before 50.0.2661.75 does not properly consider that frame removal may occur during callback execution, which allows remote attackers to cause a denial of service (use-after-free) or possibly have unspecified other impact via a crafted extension. |
Affected by 126 other vulnerabilities. Affected by 126 other vulnerabilities. |
|
VCID-2g7z-t5ru-aaad
Aliases: CVE-2015-6772 |
The DOM implementation in Blink, as used in Google Chrome before 47.0.2526.73, does not prevent javascript: URL navigation while a document is being detached, which allows remote attackers to bypass the Same Origin Policy via crafted JavaScript code that improperly interacts with a plugin. |
Affected by 163 other vulnerabilities. |
|
VCID-2r3m-8tzu-aaan
Aliases: CVE-2015-6790 |
The WebPageSerializerImpl::openTagToString function in WebKit/Source/web/WebPageSerializerImpl.cpp in the page serializer in Google Chrome before 47.0.2526.80 does not properly use HTML entities, which might allow remote attackers to inject arbitrary web script or HTML via a crafted document, as demonstrated by a double-quote character inside a single-quoted string. |
Affected by 158 other vulnerabilities. |
|
VCID-2ug8-vj4q-aaam
Aliases: CVE-2016-1682 |
The ServiceWorkerContainer::registerServiceWorkerImpl function in WebKit/Source/modules/serviceworkers/ServiceWorkerContainer.cpp in Blink, as used in Google Chrome before 51.0.2704.63, allows remote attackers to bypass the Content Security Policy (CSP) protection mechanism via a ServiceWorker registration. |
Affected by 99 other vulnerabilities. Affected by 99 other vulnerabilities. |
|
VCID-32y5-4kkd-aaap
Aliases: CVE-2015-6770 |
The DOM implementation in Google Chrome before 47.0.2526.73 allows remote attackers to bypass the Same Origin Policy via unspecified vectors, a different vulnerability than CVE-2015-6768. |
Affected by 163 other vulnerabilities. |
|
VCID-37qj-e7y3-aaab
Aliases: CVE-2016-5213 |
A use after free in V8 in Google Chrome prior to 55.0.2883.75 for Mac, Windows and Linux, and 55.0.2883.84 for Android allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. |
Affected by 27 other vulnerabilities. Affected by 27 other vulnerabilities. |
|
VCID-3ck6-4dxs-aaad
Aliases: CVE-2015-6757 |
Use-after-free vulnerability in content/browser/service_worker/embedded_worker_instance.cc in the ServiceWorker implementation in Google Chrome before 46.0.2490.71 allows remote attackers to cause a denial of service or possibly have unspecified other impact by leveraging object destruction in a callback. |
Affected by 181 other vulnerabilities. |
|
VCID-3dw3-1sjv-aaag
Aliases: CVE-2016-5202 |
browser/extensions/api/dial/dial_registry.cc in Google Chrome before 54.0.2840.98 on macOS, before 54.0.2840.99 on Windows, and before 54.0.2840.100 on Linux neglects to copy a device ID before an erase() call, which causes the erase operation to access data that that erase operation will destroy. |
Affected by 45 other vulnerabilities. Affected by 45 other vulnerabilities. |
|
VCID-3edn-g4e6-aaan
Aliases: CVE-2015-6773 |
The convolution implementation in Skia, as used in Google Chrome before 47.0.2526.73, does not properly constrain row lengths, which allows remote attackers to cause a denial of service (out-of-bounds memory access) or possibly have unspecified other impact via crafted graphics data. |
Affected by 163 other vulnerabilities. |
|
VCID-3fxs-63ze-aaam
Aliases: CVE-2017-5030 |
Incorrect handling of complex species in V8 in Google Chrome prior to 57.0.2987.98 for Linux, Windows, and Mac and 57.0.2987.108 for Android allowed a remote attacker to execute arbitrary code via a crafted HTML page. |
Affected by 0 other vulnerabilities. Affected by 0 other vulnerabilities. |
|
VCID-3jfm-6sqp-aaap
Aliases: CVE-2016-1636 |
The PendingScript::notifyFinished function in WebKit/Source/core/dom/PendingScript.cpp in Google Chrome before 49.0.2623.75 relies on memory-cache information about integrity-check occurrences instead of integrity-check successes, which allows remote attackers to bypass the Subresource Integrity (aka SRI) protection mechanism by triggering two loads of the same resource. |
Affected by 135 other vulnerabilities. |
|
VCID-3kng-52md-aaan
Aliases: CVE-2016-1631 |
The PPB_Flash_MessageLoop_Impl::InternalRun function in content/renderer/pepper/ppb_flash_message_loop_impl.cc in the Pepper plugin in Google Chrome before 49.0.2623.75 mishandles nested message loops, which allows remote attackers to bypass the Same Origin Policy via a crafted web site. |
Affected by 135 other vulnerabilities. |
|
VCID-3qy7-nend-aaac
Aliases: CVE-2016-5164 |
Cross-site scripting (XSS) vulnerability in WebKit/Source/platform/v8_inspector/V8Debugger.cpp in Blink, as used in Google Chrome before 53.0.2785.89 on Windows and OS X and before 53.0.2785.92 on Linux, allows remote attackers to inject arbitrary web script or HTML into the Developer Tools (aka DevTools) subsystem via a crafted web site, aka "Universal XSS (UXSS)." |
Affected by 67 other vulnerabilities. Affected by 67 other vulnerabilities. |
|
VCID-3rd9-4cr4-aaaj
Aliases: CVE-2016-1647 |
Use-after-free vulnerability in the RenderWidgetHostImpl::Destroy function in content/browser/renderer_host/render_widget_host_impl.cc in the Navigation implementation in Google Chrome before 49.0.2623.108 allows remote attackers to cause a denial of service or possibly have unspecified other impact via unknown vectors. |
Affected by 126 other vulnerabilities. Affected by 126 other vulnerabilities. |
|
VCID-3ssp-uvwm-aaab
Aliases: CVE-2016-5186 |
Devtools in Google Chrome prior to 54.0.2840.59 for Windows, Mac, and Linux; 54.0.2840.85 for Android incorrectly handled objects after a tab crash, which allowed a remote attacker to perform an out of bounds memory read via crafted PDF files. |
Affected by 49 other vulnerabilities. Affected by 49 other vulnerabilities. |
|
VCID-4m17-41s3-aaaj
Aliases: CVE-2015-8664 |
Integer overflow in the WebCursor::Deserialize function in content/common/cursors/webcursor.cc in Google Chrome before 47.0.2526.106 allows remote attackers to cause a denial of service or possibly have unspecified other impact via an RGBA pixel array with crafted dimensions, a different vulnerability than CVE-2015-6792. |
Affected by 158 other vulnerabilities. |
|
VCID-4y4w-q3cs-aaae
Aliases: CVE-2016-1643 |
The ImageInputType::ensurePrimaryContent function in WebKit/Source/core/html/forms/ImageInputType.cpp in Blink, as used in Google Chrome before 49.0.2623.87, does not properly maintain the user agent shadow DOM, which allows remote attackers to cause a denial of service or possibly have unspecified other impact via vectors that leverage "type confusion." |
Affected by 135 other vulnerabilities. |
|
VCID-542z-u4uc-aaad
Aliases: CVE-2016-2845 |
The Content Security Policy (CSP) implementation in Blink, as used in Google Chrome before 49.0.2623.75, does not ignore a URL's path component in the case of a ServiceWorker fetch, which allows remote attackers to obtain sensitive information about visited web pages by reading CSP violation reports, related to FrameFetchContext.cpp and ResourceFetcher.cpp. |
Affected by 135 other vulnerabilities. |
|
VCID-561u-gsq3-aaab
Aliases: CVE-2016-9651 |
A missing check for whether a property of a JS object is private in V8 in Google Chrome prior to 55.0.2883.75 allowed a remote attacker to execute arbitrary code inside a sandbox via a crafted HTML page. |
Affected by 27 other vulnerabilities. Affected by 27 other vulnerabilities. |
|
VCID-5b5v-by3b-aaam
Aliases: CVE-2016-1614 |
The UnacceleratedImageBufferSurface class in WebKit/Source/platform/graphics/UnacceleratedImageBufferSurface.cpp in Blink, as used in Google Chrome before 48.0.2564.82, mishandles the initialization mode, which allows remote attackers to obtain sensitive information from process memory via a crafted web site. |
Affected by 151 other vulnerabilities. |
|
VCID-5hhe-zms4-aaar
Aliases: CVE-2016-5145 |
Blink, as used in Google Chrome before 52.0.2743.116, does not ensure that a taint property is preserved after a structure-clone operation on an ImageBitmap object derived from a cross-origin image, which allows remote attackers to bypass the Same Origin Policy via crafted JavaScript code. |
Affected by 67 other vulnerabilities. Affected by 67 other vulnerabilities. |
|
VCID-5mrk-q7yp-aaan
Aliases: CVE-2016-1623 |
The DOM implementation in Google Chrome before 48.0.2564.109 does not properly restrict frame-attach operations from occurring during or after frame-detach operations, which allows remote attackers to bypass the Same Origin Policy via a crafted web site, related to FrameLoader.cpp, HTMLFrameOwnerElement.h, LocalFrame.cpp, and WebLocalFrameImpl.cpp. |
Affected by 149 other vulnerabilities. |
|
VCID-63em-f5aj-aaad
Aliases: CVE-2017-5040 |
V8 in Google Chrome prior to 57.0.2987.98 for Mac, Windows, and Linux and 57.0.2987.108 for Android was missing a neutering check, which allowed a remote attacker to read values in memory via a crafted HTML page. |
Affected by 0 other vulnerabilities. Affected by 0 other vulnerabilities. |
|
VCID-665s-e3x3-aaaj
Aliases: CVE-2016-5156 |
extensions/renderer/event_bindings.cc in the event bindings in Google Chrome before 53.0.2785.89 on Windows and OS X and before 53.0.2785.92 on Linux attempts to process filtered events after failure to add an event matcher, which allows remote attackers to cause a denial of service (use-after-free) or possibly have unspecified other impact via unknown vectors. |
Affected by 67 other vulnerabilities. Affected by 67 other vulnerabilities. |
|
VCID-6vn4-qb8q-aaag
Aliases: CVE-2016-2052 |
Multiple unspecified vulnerabilities in HarfBuzz before 1.0.6, as used in Google Chrome before 48.0.2564.82, allow attackers to cause a denial of service or possibly have other impact via crafted data, as demonstrated by a buffer over-read resulting from an inverted length check in hb-ot-font.cc, a different issue than CVE-2015-8947. |
Affected by 151 other vulnerabilities. Affected by 151 other vulnerabilities. |
|
VCID-79ga-q6c8-aaaj
Aliases: CVE-2015-6767 |
Use-after-free vulnerability in content/browser/appcache/appcache_dispatcher_host.cc in the AppCache implementation in Google Chrome before 47.0.2526.73 allows remote attackers to cause a denial of service or possibly have unspecified other impact by leveraging incorrect pointer maintenance associated with certain callbacks. |
Affected by 163 other vulnerabilities. |
|
VCID-7f6p-makp-aaag
Aliases: CVE-2016-1689 |
Heap-based buffer overflow in content/renderer/media/canvas_capture_handler.cc in Google Chrome before 51.0.2704.63 allows remote attackers to cause a denial of service or possibly have unspecified other impact via a crafted web site. |
Affected by 99 other vulnerabilities. Affected by 99 other vulnerabilities. |
|
VCID-84kw-aysb-aaah
Aliases: CVE-2016-1578 |
Use-after-free vulnerability in Oxide allows remote attackers to cause a denial of service (application crash) or execute arbitrary code via unspecified vectors, related to responding synchronously to permission requests. |
Affected by 126 other vulnerabilities. Affected by 126 other vulnerabilities. |
|
VCID-865t-2jwa-aaah
Aliases: CVE-2016-1612 |
The LoadIC::UpdateCaches function in ic/ic.cc in Google V8, as used in Google Chrome before 48.0.2564.82, does not ensure receiver compatibility before performing a cast of an unspecified variable, which allows remote attackers to cause a denial of service or possibly have unknown other impact via crafted JavaScript code. |
Affected by 151 other vulnerabilities. Affected by 151 other vulnerabilities. |
|
VCID-8999-y7he-aaab
Aliases: CVE-2016-5219 |
A heap use after free in V8 in Google Chrome prior to 55.0.2883.75 for Mac, Windows and Linux, and 55.0.2883.84 for Android allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. |
Affected by 27 other vulnerabilities. Affected by 27 other vulnerabilities. |
|
VCID-8n26-rs8a-aaam
Aliases: CVE-2015-1299 |
Use-after-free vulnerability in the shared-timer implementation in Blink, as used in Google Chrome before 45.0.2454.85, allows remote attackers to cause a denial of service or possibly have unspecified other impact by leveraging erroneous timer firing, related to ThreadTimers.cpp and Timer.cpp. |
Affected by 190 other vulnerabilities. |
|
VCID-8q7a-nwqd-aaan
Aliases: CVE-2016-5148 |
Cross-site scripting (XSS) vulnerability in Blink, as used in Google Chrome before 53.0.2785.89 on Windows and OS X and before 53.0.2785.92 on Linux, allows remote attackers to inject arbitrary web script or HTML via vectors related to widget updates, aka "Universal XSS (UXSS)." |
Affected by 67 other vulnerabilities. Affected by 67 other vulnerabilities. |
|
VCID-8sz8-zu9s-aaan
Aliases: CVE-2015-1304 |
object-observe.js in Google V8, as used in Google Chrome before 45.0.2454.101, does not properly restrict method calls on access-checked objects, which allows remote attackers to bypass the Same Origin Policy via a (1) observe or (2) getNotifier call. |
Affected by 188 other vulnerabilities. Affected by 188 other vulnerabilities. |
|
VCID-8wa2-7dk5-aaan
Aliases: CVE-2016-5161 |
The EditingStyle::mergeStyle function in WebKit/Source/core/editing/EditingStyle.cpp in Blink, as used in Google Chrome before 53.0.2785.89 on Windows and OS X and before 53.0.2785.92 on Linux, mishandles custom properties, which allows remote attackers to cause a denial of service or possibly have unspecified other impact via a crafted web site that leverages "type confusion" in the StylePropertySerializer class. |
Affected by 67 other vulnerabilities. Affected by 67 other vulnerabilities. |
|
VCID-9m93-udyb-aaak
Aliases: CVE-2016-5175 |
Multiple unspecified vulnerabilities in Google Chrome before 53.0.2785.113 allow attackers to cause a denial of service or possibly have other impact via unknown vectors. |
Affected by 59 other vulnerabilities. Affected by 59 other vulnerabilities. |
|
VCID-9r59-cy8b-aaaa
Aliases: CVE-2017-5006 |
Blink in Google Chrome prior to 56.0.2924.76 for Linux, Windows and Mac, and 56.0.2924.87 for Android, incorrectly handled object owner relationships, which allowed a remote attacker to inject arbitrary scripts or HTML (UXSS) via a crafted HTML page. |
Affected by 11 other vulnerabilities. Affected by 11 other vulnerabilities. |
|
VCID-9s4c-mdqg-aaak
Aliases: CVE-2015-6771 |
js/array.js in Google V8, as used in Google Chrome before 47.0.2526.73, improperly implements certain map and filter operations for arrays, which allows remote attackers to cause a denial of service (out-of-bounds memory access) or possibly have unspecified other impact via crafted JavaScript code. |
Affected by 163 other vulnerabilities. Affected by 163 other vulnerabilities. |
|
VCID-9tv6-tvj9-aaah
Aliases: CVE-2017-5017 |
Interactions with the OS in Google Chrome prior to 56.0.2924.76 for Mac insufficiently cleared video memory, which allowed a remote attacker to possibly extract image fragments on systems with GeForce 8600M graphics chips via a crafted HTML page. |
Affected by 11 other vulnerabilities. Affected by 11 other vulnerabilities. |
|
VCID-9wkw-j45r-aaar
Aliases: CVE-2017-5022 |
Blink in Google Chrome prior to 56.0.2924.76 for Linux, Windows and Mac, and 56.0.2924.87 for Android, failed to properly enforce unsafe-inline content security policy, which allowed a remote attacker to bypass content security policy via a crafted HTML page. |
Affected by 11 other vulnerabilities. Affected by 11 other vulnerabilities. |
|
VCID-9y6t-uz46-aaad
Aliases: CVE-2017-5029 GHSA-pf6m-fxpq-fg8v |
The xsltAddTextString function in transform.c in libxslt 1.1.29, as used in Blink in Google Chrome prior to 57.0.2987.98 for Mac, Windows, and Linux and 57.0.2987.108 for Android, lacked a check for integer overflow during a size calculation, which allowed a remote attacker to perform an out of bounds memory write via a crafted HTML page. |
Affected by 0 other vulnerabilities. Affected by 0 other vulnerabilities. |
|
VCID-a267-g4j5-aaab
Aliases: CVE-2016-5132 |
The Service Workers subsystem in Google Chrome before 52.0.2743.82 does not properly implement the Secure Contexts specification during decisions about whether to control a subframe, which allows remote attackers to bypass the Same Origin Policy via an https IFRAME element inside an http IFRAME element. |
Affected by 84 other vulnerabilities. Affected by 84 other vulnerabilities. |
|
VCID-a4h6-gx2x-aaae
Aliases: CVE-2016-2844 |
WebKit/Source/core/layout/LayoutBlock.cpp in Blink, as used in Google Chrome before 49.0.2623.75, does not properly determine when anonymous block wrappers may exist, which allows remote attackers to cause a denial of service (incorrect cast and assertion failure) or possibly have unspecified other impact via crafted JavaScript code. |
Affected by 135 other vulnerabilities. |
|
VCID-a968-v7d1-aaah
Aliases: CVE-2017-5035 |
Google Chrome prior to 57.0.2987.98 for Windows and Mac had a race condition, which could cause Chrome to display incorrect certificate information for a site. |
Affected by 0 other vulnerabilities. Affected by 0 other vulnerabilities. |
|
VCID-ah8s-ue18-aaac
Aliases: CVE-2016-1695 |
Multiple unspecified vulnerabilities in Google Chrome before 51.0.2704.63 allow attackers to cause a denial of service or possibly have other impact via unknown vectors. |
Affected by 99 other vulnerabilities. Affected by 99 other vulnerabilities. |
|
VCID-axrj-ax7a-aaam
Aliases: CVE-2016-1704 |
Multiple unspecified vulnerabilities in Google Chrome before 51.0.2704.103 allow attackers to cause a denial of service or possibly have other impact via unknown vectors. |
Affected by 98 other vulnerabilities. Affected by 98 other vulnerabilities. |
|
VCID-aymf-9rhk-aaag
Aliases: CVE-2016-5170 |
WebKit/Source/bindings/modules/v8/V8BindingForModules.cpp in Blink, as used in Google Chrome before 53.0.2785.113, does not properly consider getter side effects during array key conversion, which allows remote attackers to cause a denial of service (use-after-free) or possibly have unspecified other impact via crafted Indexed Database (aka IndexedDB) API calls. |
Affected by 59 other vulnerabilities. Affected by 59 other vulnerabilities. |
|
VCID-b256-u6mf-aaaf
Aliases: CVE-2016-1624 |
Integer underflow in the ProcessCommandsInternal function in dec/decode.c in Brotli, as used in Google Chrome before 48.0.2564.109, allows remote attackers to cause a denial of service (buffer overflow) or possibly have unspecified other impact via crafted data with brotli compression. |
Affected by 149 other vulnerabilities. Affected by 149 other vulnerabilities. |
|
VCID-b4ay-xbyg-aaaa
Aliases: CVE-2017-5024 |
FFmpeg in Google Chrome prior to 56.0.2924.76 for Linux, Windows and Mac, failed to perform proper bounds checking, which allowed a remote attacker to potentially exploit heap corruption via a crafted video file. |
Affected by 11 other vulnerabilities. Affected by 11 other vulnerabilities. |
|
VCID-b6gm-xpgj-aaag
Aliases: CVE-2017-5025 |
FFmpeg in Google Chrome prior to 56.0.2924.76 for Linux, Windows and Mac, failed to perform proper bounds checking, which allowed a remote attacker to potentially exploit heap corruption via a crafted video file. |
Affected by 11 other vulnerabilities. Affected by 11 other vulnerabilities. |
|
VCID-b8nb-pyxr-aaas
Aliases: CVE-2016-1675 |
Blink, as used in Google Chrome before 51.0.2704.63, allows remote attackers to bypass the Same Origin Policy by leveraging the mishandling of Document reattachment during destruction, related to FrameLoader.cpp and LocalFrame.cpp. |
Affected by 99 other vulnerabilities. Affected by 99 other vulnerabilities. |
|
VCID-b9bg-uma3-aaac
Aliases: CVE-2015-6755 |
The ContainerNode::parserInsertBefore function in core/dom/ContainerNode.cpp in Blink, as used in Google Chrome before 46.0.2490.71, proceeds with a DOM tree insertion in certain cases where a parent node no longer contains a child node, which allows remote attackers to bypass the Same Origin Policy via crafted JavaScript code. |
Affected by 181 other vulnerabilities. |
|
VCID-bbhj-3z8t-aaan
Aliases: CVE-2015-1303 |
bindings/core/v8/V8DOMWrapper.h in Blink, as used in Google Chrome before 45.0.2454.101, does not perform a rethrow action to propagate information about a cross-context exception, which allows remote attackers to bypass the Same Origin Policy via a crafted HTML document containing an IFRAME element. |
Affected by 188 other vulnerabilities. |
|
VCID-bhbc-57tg-aaaf
Aliases: CVE-2016-1667 |
The TreeScope::adoptIfNeeded function in WebKit/Source/core/dom/TreeScope.cpp in the DOM implementation in Blink, as used in Google Chrome before 50.0.2661.102, does not prevent script execution during node-adoption operations, which allows remote attackers to bypass the Same Origin Policy via a crafted web site. |
Affected by 117 other vulnerabilities. Affected by 117 other vulnerabilities. |
|
VCID-brb9-3xj9-aaah
Aliases: CVE-2017-5014 |
Heap buffer overflow during image processing in Skia in Google Chrome prior to 56.0.2924.76 for Linux, Windows and Mac, and 56.0.2924.87 for Android, allowed a remote attacker to perform an out of bounds memory read via a crafted HTML page. |
Affected by 11 other vulnerabilities. Affected by 11 other vulnerabilities. |
|
VCID-bv2j-wub1-aaar
Aliases: CVE-2016-1620 |
Multiple unspecified vulnerabilities in Google Chrome before 48.0.2564.82 allow attackers to cause a denial of service or possibly have other impact via unknown vectors. |
Affected by 151 other vulnerabilities. |
|
VCID-bzx2-njp3-aaac
Aliases: CVE-2017-5010 |
Blink in Google Chrome prior to 56.0.2924.76 for Linux, Windows and Mac, and 56.0.2924.87 for Android, resolved promises in an inappropriate context, which allowed a remote attacker to inject arbitrary scripts or HTML (UXSS) via a crafted HTML page. |
Affected by 11 other vulnerabilities. Affected by 11 other vulnerabilities. |
|
VCID-c29x-2upq-aaag
Aliases: CVE-2016-1668 |
The forEachForBinding function in WebKit/Source/bindings/core/v8/Iterable.h in the V8 bindings in Blink, as used in Google Chrome before 50.0.2661.102, uses an improper creation context, which allows remote attackers to bypass the Same Origin Policy via a crafted web site. |
Affected by 117 other vulnerabilities. Affected by 117 other vulnerabilities. |
|
VCID-c5fj-b7y4-aaas
Aliases: CVE-2016-1629 |
Google Chrome before 48.0.2564.116 allows remote attackers to bypass the Blink Same Origin Policy and a sandbox protection mechanism via unspecified vectors. |
Affected by 148 other vulnerabilities. |
|
VCID-c5t4-3azw-aaah
Aliases: CVE-2016-9652 |
Multiple unspecified vulnerabilities in Google Chrome before 55.0.2883.75. |
Affected by 27 other vulnerabilities. Affected by 27 other vulnerabilities. |
|
VCID-c6y8-vcxb-aaas
Aliases: CVE-2015-1291 |
The ContainerNode::parserRemoveChild function in core/dom/ContainerNode.cpp in Blink, as used in Google Chrome before 45.0.2454.85, does not check whether a node is expected, which allows remote attackers to bypass the Same Origin Policy or cause a denial of service (DOM tree corruption) via a web site with crafted JavaScript code and IFRAME elements. |
Affected by 190 other vulnerabilities. |
|
VCID-cev2-ayyg-aaad
Aliases: CVE-2016-3679 |
CVE-2016-3679 chromium-browser: multiple unspecified vulnerabilities |
Affected by 126 other vulnerabilities. Affected by 126 other vulnerabilities. |
|
VCID-cjt2-72uw-aaaf
Aliases: CVE-2016-5207 |
In Blink in Google Chrome prior to 55.0.2883.75 for Mac, Windows and Linux, and 55.0.2883.84 for Android, corruption of the DOM tree could occur during the removal of a full screen element, which allowed a remote attacker to achieve arbitrary code execution via a crafted HTML page. |
Affected by 27 other vulnerabilities. Affected by 27 other vulnerabilities. |
|
VCID-ckca-qpak-aaad
Aliases: CVE-2016-1666 |
Multiple unspecified vulnerabilities in Google Chrome before 50.0.2661.94 allow attackers to cause a denial of service or possibly have other impact via unknown vectors. |
Affected by 117 other vulnerabilities. |
|
VCID-cmsz-uwmb-aaak
Aliases: CVE-2016-5198 |
V8 in Google Chrome prior to 54.0.2840.90 for Linux, and 54.0.2840.85 for Android, and 54.0.2840.87 for Windows and Mac included incorrect optimisation assumptions, which allowed a remote attacker to perform arbitrary read/write operations, leading to code execution, via a crafted HTML page. |
Affected by 45 other vulnerabilities. Affected by 45 other vulnerabilities. |
|
VCID-cpnk-9s2r-aaac
Aliases: CVE-2016-1673 |
Blink, as used in Google Chrome before 51.0.2704.63, allows remote attackers to bypass the Same Origin Policy via unspecified vectors. |
Affected by 99 other vulnerabilities. Affected by 99 other vulnerabilities. |
|
VCID-cqu7-s836-aaaq
Aliases: CVE-2016-5153 |
The Web Animations implementation in Blink, as used in Google Chrome before 53.0.2785.89 on Windows and OS X and before 53.0.2785.92 on Linux, improperly relies on list iteration, which allows remote attackers to cause a denial of service (use-after-destruction) or possibly have unspecified other impact via a crafted web site. |
Affected by 67 other vulnerabilities. Affected by 67 other vulnerabilities. |
|
VCID-d2qh-hmde-aaaa
Aliases: CVE-2015-6759 |
The shouldTreatAsUniqueOrigin function in platform/weborigin/SecurityOrigin.cpp in Blink, as used in Google Chrome before 46.0.2490.71, does not ensure that the origin of a LocalStorage resource is considered unique, which allows remote attackers to obtain sensitive information via vectors involving a blob: URL. |
Affected by 181 other vulnerabilities. |
|
VCID-d6qx-x3d8-aaag
Aliases: CVE-2015-1293 |
The DOM implementation in Blink, as used in Google Chrome before 45.0.2454.85, allows remote attackers to bypass the Same Origin Policy via unspecified vectors. |
Affected by 190 other vulnerabilities. |
|
VCID-dc82-nm96-aaac
Aliases: CVE-2017-5031 |
A use after free in ANGLE in Google Chrome prior to 57.0.2987.98 for Windows allowed a remote attacker to perform an out of bounds memory read via a crafted HTML page. |
Affected by 0 other vulnerabilities. Affected by 0 other vulnerabilities. |
|
VCID-dp4q-cu85-aaam
Aliases: CVE-2016-5178 |
Multiple unspecified vulnerabilities in Google Chrome before 53.0.2785.143 allow remote attackers to cause a denial of service or possibly have other impact via unknown vectors. |
Affected by 59 other vulnerabilities. Affected by 59 other vulnerabilities. |
|
VCID-drc5-xk74-aaan
Aliases: CVE-2015-8548 |
Multiple unspecified vulnerabilities in Google V8 before 4.7.80.23, as used in Google Chrome before 47.0.2526.80, allow attackers to cause a denial of service or possibly have other impact via unknown vectors, a different issue than CVE-2015-8478. |
Affected by 158 other vulnerabilities. Affected by 158 other vulnerabilities. |
|
VCID-dspz-cq4b-aaah
Aliases: CVE-2016-5181 |
Blink in Google Chrome prior to 54.0.2840.59 for Windows, Mac, and Linux; 54.0.2840.85 for Android permitted execution of v8 microtasks while the DOM was in an inconsistent state, which allowed a remote attacker to inject arbitrary scripts or HTML (UXSS) via crafted HTML pages. |
Affected by 49 other vulnerabilities. Affected by 49 other vulnerabilities. |
|
VCID-dt1f-ww1w-aaad
Aliases: CVE-2016-1617 |
The CSPSource::schemeMatches function in WebKit/Source/core/frame/csp/CSPSource.cpp in the Content Security Policy (CSP) implementation in Blink, as used in Google Chrome before 48.0.2564.82, does not apply http policies to https URLs and does not apply ws policies to wss URLs, which makes it easier for remote attackers to determine whether a specific HSTS web site has been visited by reading a CSP report. |
Affected by 151 other vulnerabilities. |
|
VCID-e5sn-g1vc-aaan
Aliases: CVE-2017-5041 |
Google Chrome prior to 57.0.2987.100 incorrectly handled back-forward navigation, which allowed a remote attacker to display incorrect information for a site via a crafted HTML page. |
Affected by 0 other vulnerabilities. Affected by 0 other vulnerabilities. |
|
VCID-ec8c-js3n-aaap
Aliases: CVE-2016-1705 |
Multiple unspecified vulnerabilities in Google Chrome before 52.0.2743.82 allow attackers to cause a denial of service or possibly have other impact via unknown vectors. |
Affected by 84 other vulnerabilities. Affected by 84 other vulnerabilities. |
|
VCID-ee1f-yy97-aaar
Aliases: CVE-2015-6785 |
The CSPSource::hostMatches function in WebKit/Source/core/frame/csp/CSPSource.cpp in the Content Security Policy (CSP) implementation in Google Chrome before 47.0.2526.73 accepts an x.y hostname as a match for a *.x.y pattern, which might allow remote attackers to bypass intended access restrictions in opportunistic circumstances by leveraging a policy that was intended to be specific to subdomains. |
Affected by 163 other vulnerabilities. |
|
VCID-eg6q-kekn-aaas
Aliases: CVE-2015-3395 |
The msrle_decode_pal4 function in msrledec.c in Libav before 10.7 and 11.x before 11.4 and FFmpeg before 2.0.7, 2.2.x before 2.2.15, 2.4.x before 2.4.8, 2.5.x before 2.5.6, and 2.6.x before 2.6.2 allows remote attackers to have unspecified impact via a crafted image, related to a pixel pointer, which triggers an out-of-bounds array access. |
Affected by 27 other vulnerabilities. Affected by 27 other vulnerabilities. |
|
VCID-eh1e-nnxt-aaae
Aliases: CVE-2015-6766 |
Use-after-free vulnerability in the AppCache implementation in Google Chrome before 47.0.2526.73 allows remote attackers with renderer access to cause a denial of service or possibly have unspecified other impact by leveraging incorrect AppCacheUpdateJob behavior associated with duplicate cache selection. |
Affected by 163 other vulnerabilities. |
|
VCID-erag-eyn2-aaah
Aliases: CVE-2016-9650 |
Blink in Google Chrome prior to 55.0.2883.75 for Mac, Windows and Linux, and 55.0.2883.84 for Android incorrectly handled iframes, which allowed a remote attacker to bypass a no-referrer policy via a crafted HTML page. |
Affected by 27 other vulnerabilities. Affected by 27 other vulnerabilities. |
|
VCID-ewf2-44r6-aaag
Aliases: CVE-2016-5188 |
Multiple issues in Blink in Google Chrome prior to 54.0.2840.59 for Windows, Mac, and Linux allow a remote attacker to spoof various parts of browser UI via crafted HTML pages. |
Affected by 49 other vulnerabilities. Affected by 49 other vulnerabilities. |
|
VCID-f4xe-nj5v-aaae
Aliases: CVE-2016-5171 |
WebKit/Source/bindings/templates/interface.cpp in Blink, as used in Google Chrome before 53.0.2785.113, does not prevent certain constructor calls, which allows remote attackers to cause a denial of service (use-after-free) or possibly have unspecified other impact via crafted JavaScript code. |
Affected by 59 other vulnerabilities. Affected by 59 other vulnerabilities. |
|
VCID-f6fe-jwwu-aaaa
Aliases: CVE-2016-5194 |
Unspecified vulnerabilities in Google Chrome before 54.0.2840.59. |
Affected by 49 other vulnerabilities. Affected by 49 other vulnerabilities. |
|
VCID-f75g-98e6-aaac
Aliases: CVE-2016-1665 |
The JSGenericLowering class in compiler/js-generic-lowering.cc in Google V8, as used in Google Chrome before 50.0.2661.94, mishandles comparison operators, which allows remote attackers to obtain sensitive information via crafted JavaScript code. |
Affected by 117 other vulnerabilities. |
|
VCID-f84k-swdb-aaan
Aliases: CVE-2016-5209 |
Bad casting in bitmap manipulation in Blink in Google Chrome prior to 55.0.2883.75 for Mac, Windows and Linux, and 55.0.2883.84 for Android allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. |
Affected by 27 other vulnerabilities. Affected by 27 other vulnerabilities. |
|
VCID-ffar-2pw1-aaap
Aliases: CVE-2016-1653 |
The LoadBuffer implementation in Google V8, as used in Google Chrome before 50.0.2661.75, mishandles data types, which allows remote attackers to cause a denial of service or possibly have unspecified other impact via crafted JavaScript code that triggers an out-of-bounds write operation, related to compiler/pipeline.cc and compiler/simplified-lowering.cc. |
Affected by 126 other vulnerabilities. Affected by 126 other vulnerabilities. |
|
VCID-fp9y-jfya-aaaj
Aliases: CVE-2016-5128 |
objects.cc in Google V8 before 5.2.361.27, as used in Google Chrome before 52.0.2743.82, does not prevent API interceptors from modifying a store target without setting a property, which allows remote attackers to bypass the Same Origin Policy via a crafted web site. |
Affected by 84 other vulnerabilities. Affected by 84 other vulnerabilities. |
|
VCID-fzdj-kjcc-aaak
Aliases: CVE-2016-7549 |
Google Chrome before 53.0.2785.113 does not ensure that the recipient of a certain IPC message is a valid RenderFrame or RenderWidget, which allows remote attackers to cause a denial of service (invalid pointer dereference and application crash) or possibly have unspecified other impact by leveraging access to a renderer process, related to render_frame_host_impl.cc and render_widget_host_impl.cc, as demonstrated by a Password Manager message. |
Affected by 59 other vulnerabilities. Affected by 59 other vulnerabilities. |
|
VCID-g6dx-skcw-aaap
Aliases: CVE-2016-1702 |
The SkRegion::readFromMemory function in core/SkRegion.cpp in Skia, as used in Google Chrome before 51.0.2704.79, does not validate the interval count, which allows remote attackers to cause a denial of service (out-of-bounds read) via crafted serialized data. |
Affected by 99 other vulnerabilities. Affected by 99 other vulnerabilities. |
|
VCID-ggky-nw5w-aaar
Aliases: CVE-2016-5185 |
Blink in Google Chrome prior to 54.0.2840.59 for Windows, Mac, and Linux; 54.0.2840.85 for Android incorrectly allowed reentrance of FrameView::updateLifecyclePhasesInternal(), which allowed a remote attacker to perform an out of bounds memory read via crafted HTML pages. |
Affected by 49 other vulnerabilities. Affected by 49 other vulnerabilities. |
|
VCID-gkqx-2dkq-aaaa
Aliases: CVE-2015-1292 |
The NavigatorServiceWorker::serviceWorker function in modules/serviceworkers/NavigatorServiceWorker.cpp in Blink, as used in Google Chrome before 45.0.2454.85, allows remote attackers to bypass the Same Origin Policy by accessing a Service Worker. |
Affected by 190 other vulnerabilities. |
|
VCID-gkum-epbx-aaaq
Aliases: CVE-2017-5046 |
V8 in Google Chrome prior to 57.0.2987.98 for Mac, Windows, and Linux and 57.0.2987.108 for Android had insufficient policy enforcement, which allowed a remote attacker to spoof the location object via a crafted HTML page, related to Blink information disclosure. |
Affected by 0 other vulnerabilities. Affected by 0 other vulnerabilities. |
|
VCID-gvhw-da65-aaaq
Aliases: CVE-2015-6580 |
Multiple unspecified vulnerabilities in Google V8 before 4.5.103.29, as used in Google Chrome before 45.0.2454.85, allow attackers to cause a denial of service or possibly have other impact via unknown vectors. |
Affected by 190 other vulnerabilities. Affected by 190 other vulnerabilities. |
|
VCID-gyzj-166g-aaaj
Aliases: CVE-2016-1679 |
The ToV8Value function in content/child/v8_value_converter_impl.cc in the V8 bindings in Google Chrome before 51.0.2704.63 does not properly restrict use of getters and setters, which allows remote attackers to cause a denial of service (use-after-free) or possibly have unspecified other impact via crafted JavaScript code. |
Affected by 99 other vulnerabilities. Affected by 99 other vulnerabilities. |
|
VCID-h7nz-aveb-aaac
Aliases: CVE-2016-1680 |
Use-after-free vulnerability in ports/SkFontHost_FreeType.cpp in Skia, as used in Google Chrome before 51.0.2704.63, allows remote attackers to cause a denial of service (heap memory corruption) or possibly have unspecified other impact via unknown vectors. |
Affected by 99 other vulnerabilities. Affected by 99 other vulnerabilities. |
|
VCID-hjsk-6pz8-aaak
Aliases: CVE-2015-6787 |
Multiple unspecified vulnerabilities in Google Chrome before 47.0.2526.73 allow attackers to cause a denial of service or possibly have other impact via unknown vectors. |
Affected by 163 other vulnerabilities. |
|
VCID-hpyd-28rs-aaak
Aliases: CVE-2016-1703 |
Multiple unspecified vulnerabilities in Google Chrome before 51.0.2704.79 allow attackers to cause a denial of service or possibly have other impact via unknown vectors. |
Affected by 99 other vulnerabilities. Affected by 99 other vulnerabilities. |
|
VCID-hvsv-htj9-aaap
Aliases: CVE-2016-5167 |
Multiple unspecified vulnerabilities in Google Chrome before 53.0.2785.89 on Windows and OS X and before 53.0.2785.92 on Linux allow attackers to cause a denial of service or possibly have other impact via unknown vectors. |
Affected by 67 other vulnerabilities. Affected by 67 other vulnerabilities. |
|
VCID-jfzb-5wfh-aaad
Aliases: CVE-2016-1630 |
The ContainerNode::parserRemoveChild function in WebKit/Source/core/dom/ContainerNode.cpp in Blink, as used in Google Chrome before 49.0.2623.75, mishandles widget updates, which makes it easier for remote attackers to bypass the Same Origin Policy via a crafted web site. |
Affected by 135 other vulnerabilities. |
|
VCID-jnw6-j8ge-aaak
Aliases: CVE-2015-6786 |
The CSPSourceList::matches function in WebKit/Source/core/frame/csp/CSPSourceList.cpp in the Content Security Policy (CSP) implementation in Google Chrome before 47.0.2526.73 accepts a blob:, data:, or filesystem: URL as a match for a * pattern, which allows remote attackers to bypass intended scheme restrictions in opportunistic circumstances by leveraging a policy that relies on this pattern. |
Affected by 163 other vulnerabilities. |
|
VCID-jvz6-6j8r-aaar
Aliases: CVE-2016-2051 |
CVE-2016-2051 chromium-browser: Multiple unspecified vulnerabilities in Google V8 before 4.8.271.17 |
Affected by 151 other vulnerabilities. Affected by 151 other vulnerabilities. |
|
VCID-k88e-x7sp-aaac
Aliases: CVE-2015-6763 |
Multiple unspecified vulnerabilities in Google Chrome before 46.0.2490.71 allow attackers to cause a denial of service or possibly have other impact via unknown vectors. |
Affected by 181 other vulnerabilities. |
|
VCID-k8sk-y7yj-aaac
Aliases: CVE-2015-6777 |
Use-after-free vulnerability in the ContainerNode::notifyNodeInsertedInternal function in WebKit/Source/core/dom/ContainerNode.cpp in the DOM implementation in Google Chrome before 47.0.2526.73 allows remote attackers to cause a denial of service or possibly have unspecified other impact via vectors related to DOMCharacterDataModified events for certain detached-subtree insertions. |
Affected by 163 other vulnerabilities. |
|
VCID-kc87-8y6z-aaaq
Aliases: CVE-2016-5187 |
Google Chrome prior to 54.0.2840.85 for Android incorrectly handled rapid transition into and out of full screen mode, which allowed a remote attacker to spoof the contents of the Omnibox (URL bar) via crafted HTML pages. |
Affected by 49 other vulnerabilities. Affected by 49 other vulnerabilities. |
|
VCID-khbk-ubvw-aaaq
Aliases: CVE-2016-5146 |
Multiple unspecified vulnerabilities in Google Chrome before 52.0.2743.116 allow attackers to cause a denial of service or possibly have other impact via unknown vectors. |
Affected by 67 other vulnerabilities. Affected by 67 other vulnerabilities. |
|
VCID-kj1j-du4f-aaac
Aliases: CVE-2016-5129 |
Google V8 before 5.2.361.32, as used in Google Chrome before 52.0.2743.82, does not properly process left-trimmed objects, which allows remote attackers to cause a denial of service (memory corruption) or possibly have unspecified other impact via crafted JavaScript code. |
Affected by 84 other vulnerabilities. Affected by 84 other vulnerabilities. |
|
VCID-km64-6xsh-aaad
Aliases: CVE-2015-8479 |
Use-after-free vulnerability in the AudioOutputDevice::OnDeviceAuthorized function in media/audio/audio_output_device.cc in Google Chrome before 47.0.2526.73 allows attackers to cause a denial of service (heap memory corruption) or possibly have unspecified other impact by triggering access to an unauthorized audio output device. |
Affected by 163 other vulnerabilities. |
|
VCID-kp5n-qnpm-aaaq
Aliases: CVE-2016-5221 |
Type confusion in libGLESv2 in ANGLE in Google Chrome prior to 55.0.2883.75 for Mac, Windows and Linux, and 55.0.2883.84 for Android possibly allowed a remote attacker to bypass buffer validation via a crafted HTML page. |
Affected by 27 other vulnerabilities. Affected by 27 other vulnerabilities. |
|
VCID-kw47-yuqd-aaak
Aliases: CVE-2015-6768 |
The DOM implementation in Google Chrome before 47.0.2526.73 allows remote attackers to bypass the Same Origin Policy via unspecified vectors, a different vulnerability than CVE-2015-6770. |
Affected by 163 other vulnerabilities. |
|
VCID-m163-j743-aaad
Aliases: CVE-2015-8480 |
The VideoFramePool::PoolImpl::CreateFrame function in media/base/video_frame_pool.cc in Google Chrome before 47.0.2526.73 does not initialize memory for a video-frame data structure, which might allow remote attackers to cause a denial of service (out-of-bounds memory access) or possibly have unspecified other impact by leveraging improper interaction with the vp3_h_loop_filter_c function in libavcodec/vp3dsp.c in FFmpeg. |
Affected by 163 other vulnerabilities. |
|
VCID-m24c-e83m-aaah
Aliases: CVE-2016-5130 |
content/renderer/history_controller.cc in Google Chrome before 52.0.2743.82 does not properly restrict multiple uses of a JavaScript forward method, which allows remote attackers to spoof the URL display via a crafted web site. |
Affected by 84 other vulnerabilities. Affected by 84 other vulnerabilities. |
|
VCID-m67b-6zfb-aaaq
Aliases: CVE-2015-6791 |
Multiple unspecified vulnerabilities in Google Chrome before 47.0.2526.80 allow attackers to cause a denial of service or possibly have other impact via unknown vectors. |
Affected by 158 other vulnerabilities. |
|
VCID-m6yf-9g4g-aaan
Aliases: CVE-2016-1663 |
The SerializedScriptValue::transferArrayBuffers function in WebKit/Source/bindings/core/v8/SerializedScriptValue.cpp in the V8 bindings in Blink, as used in Google Chrome before 50.0.2661.94, mishandles certain array-buffer data structures, which allows remote attackers to cause a denial of service (use-after-free) or possibly have unspecified other impact via a crafted web site. |
Affected by 117 other vulnerabilities. |
|
VCID-m7pt-esj7-aaaf
Aliases: CVE-2016-7395 |
SkPath.cpp in Skia, as used in Google Chrome before 53.0.2785.89 on Windows and OS X and before 53.0.2785.92 on Linux, does not properly validate the return values of ChopMonoAtY calls, which allows remote attackers to cause a denial of service (uninitialized memory access and application crash) or possibly have unspecified other impact via crafted graphics data. |
Affected by 67 other vulnerabilities. Affected by 67 other vulnerabilities. |
|
VCID-mewv-var3-aaar
Aliases: CVE-2016-5165 |
Cross-site scripting (XSS) vulnerability in the Developer Tools (aka DevTools) subsystem in Google Chrome before 53.0.2785.89 on Windows and OS X and before 53.0.2785.92 on Linux allows remote attackers to inject arbitrary web script or HTML via the settings parameter in a chrome-devtools-frontend.appspot.com URL's query string. |
Affected by 67 other vulnerabilities. Affected by 67 other vulnerabilities. |
|
VCID-mjtj-t247-aaah
Aliases: CVE-2016-5133 |
Google Chrome before 52.0.2743.82 mishandles origin information during proxy authentication, which allows man-in-the-middle attackers to spoof a proxy-authentication login prompt or trigger incorrect credential storage by modifying the client-server data stream. |
Affected by 84 other vulnerabilities. Affected by 84 other vulnerabilities. |
|
VCID-mpwr-6m2h-aaad
Aliases: CVE-2016-2843 |
Multiple unspecified vulnerabilities in Google V8 before 4.9.385.26, as used in Google Chrome before 49.0.2623.75, allow attackers to cause a denial of service or possibly have other impact via unknown vectors. |
Affected by 135 other vulnerabilities. |
|
VCID-mr8h-b2uz-aaab
Aliases: CVE-2016-5204 |
Leaking of an SVG shadow tree leading to corruption of the DOM tree in Blink in Google Chrome prior to 55.0.2883.75 for Mac, Windows and Linux, and 55.0.2883.84 for Android allowed a remote attacker to inject arbitrary scripts or HTML (UXSS) via a crafted HTML page. |
Affected by 27 other vulnerabilities. Affected by 27 other vulnerabilities. |
|
VCID-mt53-r77t-aaac
Aliases: CVE-2016-1692 |
WebKit/Source/core/css/StyleSheetContents.cpp in Blink, as used in Google Chrome before 51.0.2704.63, permits cross-origin loading of CSS stylesheets by a ServiceWorker even when the stylesheet download has an incorrect MIME type, which allows remote attackers to bypass the Same Origin Policy via a crafted web site. |
Affected by 99 other vulnerabilities. Affected by 99 other vulnerabilities. |
|
VCID-mt8f-pyvq-aaaq
Aliases: CVE-2017-5009 |
WebRTC in Google Chrome prior to 56.0.2924.76 for Linux, Windows and Mac, and 56.0.2924.87 for Android, failed to perform proper bounds checking, which allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. |
Affected by 11 other vulnerabilities. Affected by 11 other vulnerabilities. |
|
VCID-n2f3-tvmz-aaak
Aliases: CVE-2016-5192 |
Blink in Google Chrome prior to 54.0.2840.59 for Windows missed a CORS check on redirect in TextTrackLoader, which allowed a remote attacker to bypass cross-origin restrictions via crafted HTML pages. |
Affected by 49 other vulnerabilities. Affected by 49 other vulnerabilities. |
|
VCID-n6gh-z75z-aaab
Aliases: CVE-2015-1294 |
Use-after-free vulnerability in the SkMatrix::invertNonIdentity function in core/SkMatrix.cpp in Skia, as used in Google Chrome before 45.0.2454.85, allows remote attackers to cause a denial of service or possibly have unspecified other impact by triggering the use of matrix elements that lead to an infinite result during an inversion calculation. |
Affected by 190 other vulnerabilities. |
|
VCID-n9pt-7u7g-aaab
Aliases: CVE-2016-5134 |
net/proxy/proxy_service.cc in the Proxy Auto-Config (PAC) feature in Google Chrome before 52.0.2743.82 does not ensure that URL information is restricted to a scheme, host, and port, which allows remote attackers to discover credentials by operating a server with a PAC script, a related issue to CVE-2016-3763. |
Affected by 84 other vulnerabilities. Affected by 84 other vulnerabilities. |
|
VCID-nemq-8rsh-aaaj
Aliases: CVE-2016-1669 |
The Zone::New function in zone.cc in Google V8 before 5.0.71.47, as used in Google Chrome before 50.0.2661.102, does not properly determine when to expand certain memory allocations, which allows remote attackers to cause a denial of service (buffer overflow) or possibly have unspecified other impact via crafted JavaScript code. |
Affected by 117 other vulnerabilities. Affected by 117 other vulnerabilities. |
|
VCID-nevx-9gyg-aaad
Aliases: CVE-2016-5215 |
A use after free in webaudio in Google Chrome prior to 55.0.2883.75 for Mac, Windows and Linux, and 55.0.2883.84 for Android allowed a remote attacker to perform an out of bounds memory read via a crafted HTML page. |
Affected by 27 other vulnerabilities. Affected by 27 other vulnerabilities. |
|
VCID-nhhe-457p-aaaf
Aliases: CVE-2016-1710 |
The ChromeClientImpl::createWindow method in WebKit/Source/web/ChromeClientImpl.cpp in Blink, as used in Google Chrome before 52.0.2743.82, does not prevent window creation by a deferred frame, which allows remote attackers to bypass the Same Origin Policy via a crafted web site. |
Affected by 84 other vulnerabilities. Affected by 84 other vulnerabilities. |
|
VCID-nkf5-xx9k-aaah
Aliases: CVE-2016-5200 |
V8 in Google Chrome prior to 54.0.2840.98 for Mac, and 54.0.2840.99 for Windows, and 54.0.2840.100 for Linux, and 55.0.2883.84 for Android incorrectly applied type rules, which allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. |
Affected by 45 other vulnerabilities. Affected by 45 other vulnerabilities. |
|
VCID-p817-jw6u-aaas
Aliases: CVE-2016-5224 |
A timing attack on denormalized floating point arithmetic in SVG filters in Blink in Google Chrome prior to 55.0.2883.75 for Mac, Windows and Linux, and 55.0.2883.84 for Android allowed a remote attacker to bypass the Same Origin Policy via a crafted HTML page. |
Affected by 27 other vulnerabilities. Affected by 27 other vulnerabilities. |
|
VCID-pdca-fa4h-aaaj
Aliases: CVE-2016-1642 |
Multiple unspecified vulnerabilities in Google Chrome before 49.0.2623.75 allow attackers to cause a denial of service or possibly have other impact via unknown vectors. |
Affected by 135 other vulnerabilities. |
|
VCID-pe2a-7rtn-aaaq
Aliases: CVE-2017-5019 |
A use after free in Google Chrome prior to 56.0.2924.76 for Linux, Windows and Mac, and 56.0.2924.87 for Android, allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. |
Affected by 11 other vulnerabilities. Affected by 11 other vulnerabilities. |
|
VCID-pf6b-dxvk-aaan
Aliases: CVE-2016-5131 |
Use-after-free vulnerability in libxml2 through 2.9.4, as used in Google Chrome before 52.0.2743.82, allows remote attackers to cause a denial of service or possibly have unspecified other impact via vectors related to the XPointer range-to function. |
Affected by 84 other vulnerabilities. Affected by 84 other vulnerabilities. |
|
VCID-phqf-xha1-aaah
Aliases: CVE-2015-1300 |
The FrameFetchContext::updateTimingInfoForIFrameNavigation function in core/loader/FrameFetchContext.cpp in Blink, as used in Google Chrome before 45.0.2454.85, does not properly restrict the availability of IFRAME Resource Timing API times, which allows remote attackers to obtain sensitive information via crafted JavaScript code that leverages a history.back call. |
Affected by 190 other vulnerabilities. |
|
VCID-pja5-e1ud-aaae
Aliases: CVE-2015-1332 |
The oxide::JavaScriptDialogManager function in oxide-qt before 1.9.1 as packaged in Ubuntu 15.04 and Ubuntu 14.04 allows remote attackers to cause a denial of service (application crash) or execute arbitrary code via a crafted website. |
Affected by 190 other vulnerabilities. |
|
VCID-q8bh-zcj7-aaaq
Aliases: CVE-2016-5172 |
The parser in Google V8, as used in Google Chrome before 53.0.2785.113, mishandles scopes, which allows remote attackers to obtain sensitive information from arbitrary memory locations via crafted JavaScript code. |
Affected by 59 other vulnerabilities. Affected by 59 other vulnerabilities. |
|
VCID-qgjz-nen9-aaan
Aliases: CVE-2016-5225 |
Blink in Google Chrome prior to 55.0.2883.75 for Mac, Windows and Linux, and 55.0.2883.84 for Android incorrectly handled form actions, which allowed a remote attacker to bypass Content Security Policy via a crafted HTML page. |
Affected by 27 other vulnerabilities. Affected by 27 other vulnerabilities. |
|
VCID-qhdd-7fbe-aaas
Aliases: CVE-2016-1683 |
Improper Restriction of Operations within the Bounds of a Memory Buffer nokogiri mishandles namespace nodes, which allows remote attackers to cause a denial of service (out-of-bounds heap memory access) or possibly have unspecified other impact via a crafted document. |
Affected by 99 other vulnerabilities. Affected by 99 other vulnerabilities. |
|
VCID-qr5j-vch1-aaam
Aliases: CVE-2016-1659 |
Multiple unspecified vulnerabilities in Google Chrome before 50.0.2661.75 allow attackers to cause a denial of service or possibly have other impact via unknown vectors. |
Affected by 126 other vulnerabilities. Affected by 126 other vulnerabilities. |
|
VCID-qthf-xyzg-aaan
Aliases: CVE-2016-5147 |
Blink, as used in Google Chrome before 53.0.2785.89 on Windows and OS X and before 53.0.2785.92 on Linux, mishandles deferred page loads, which allows remote attackers to inject arbitrary web script or HTML via a crafted web site, aka "Universal XSS (UXSS)." |
Affected by 67 other vulnerabilities. Affected by 67 other vulnerabilities. |
|
VCID-r9vu-mkpa-aaar
Aliases: CVE-2016-1670 |
Race condition in the ResourceDispatcherHostImpl::BeginRequest function in content/browser/loader/resource_dispatcher_host_impl.cc in Google Chrome before 50.0.2661.102 allows remote attackers to make arbitrary HTTP requests by leveraging access to a renderer process and reusing a request ID. |
Affected by 117 other vulnerabilities. Affected by 117 other vulnerabilities. |
|
VCID-rbbx-p6kq-aaas
Aliases: CVE-2016-5177 |
Use-after-free vulnerability in V8 in Google Chrome before 53.0.2785.143 allows remote attackers to cause a denial of service (crash) or possibly have unspecified other impact via unknown vectors. |
Affected by 59 other vulnerabilities. Affected by 59 other vulnerabilities. |
|
VCID-rkcb-qyc8-aaaa
Aliases: CVE-2017-5045 |
XSS Auditor in Google Chrome prior to 57.0.2987.98 for Mac, Windows, and Linux and 57.0.2987.108 for Android allowed detection of a blocked iframe load, which allowed a remote attacker to brute force JavaScript variables via a crafted HTML page. |
Affected by 0 other vulnerabilities. Affected by 0 other vulnerabilities. |
|
VCID-rkez-c67z-aaad
Aliases: CVE-2016-1684 |
numbers.c in libxslt before 1.1.29, as used in Google Chrome before 51.0.2704.63, mishandles the i format token for xsl:number data, which allows remote attackers to cause a denial of service (integer overflow or resource consumption) or possibly have unspecified other impact via a crafted document. |
Affected by 99 other vulnerabilities. Affected by 99 other vulnerabilities. |
|
VCID-rthm-6sun-aaaf
Aliases: CVE-2016-1688 |
The regexp (aka regular expression) implementation in Google V8 before 5.0.71.40, as used in Google Chrome before 51.0.2704.63, mishandles external string sizes, which allows remote attackers to cause a denial of service (out-of-bounds read) via crafted JavaScript code. |
Affected by 99 other vulnerabilities. Affected by 99 other vulnerabilities. |
|
VCID-rws6-24vh-aaap
Aliases: CVE-2016-1660 |
Blink, as used in Google Chrome before 50.0.2661.94, mishandles assertions in the WTF::BitArray and WTF::double_conversion::Vector classes, which allows remote attackers to cause a denial of service (out-of-bounds write) or possibly have unspecified other impact via a crafted web site. |
Affected by 117 other vulnerabilities. |
|
VCID-s5ta-1p4j-aaad
Aliases: CVE-2016-5212 |
Google Chrome prior to 55.0.2883.75 for Mac, Windows and Linux, and 55.0.2883.84 for Android insufficiently sanitized DevTools URLs, which allowed a remote attacker to read local files via a crafted HTML page. |
Affected by 27 other vulnerabilities. Affected by 27 other vulnerabilities. |
|
VCID-s7zr-aw7h-aaan
Aliases: CVE-2017-5044 |
Heap buffer overflow in filter processing in Skia in Google Chrome prior to 57.0.2987.98 for Mac, Windows, and Linux and 57.0.2987.108 for Android allowed a remote attacker to perform an out of bounds memory read via a crafted HTML page. |
Affected by 0 other vulnerabilities. Affected by 0 other vulnerabilities. |
|
VCID-sdyf-s9qn-aaaj
Aliases: CVE-2016-1637 |
The SkATan2_255 function in effects/gradients/SkSweepGradient.cpp in Skia, as used in Google Chrome before 49.0.2623.75, mishandles arctangent calculations, which allows remote attackers to obtain sensitive information via a crafted web site. |
Affected by 135 other vulnerabilities. |
|
VCID-sgnc-347g-aaah
Aliases: CVE-2017-5023 |
Type confusion in Histogram in Google Chrome prior to 56.0.2924.76 for Linux, Windows and Mac, and 56.0.2924.87 for Android, allowed a remote attacker to potentially exploit a near null dereference via a crafted HTML page. |
Affected by 11 other vulnerabilities. Affected by 11 other vulnerabilities. |
|
VCID-sjgz-mfah-aaan
Aliases: CVE-2015-6769 |
The provisional-load commit implementation in WebKit/Source/bindings/core/v8/WindowProxy.cpp in Google Chrome before 47.0.2526.73 allows remote attackers to bypass the Same Origin Policy by leveraging a delay in window proxy clearing. |
Affected by 163 other vulnerabilities. |
|
VCID-snp1-1vxd-aaaa
Aliases: CVE-2016-1586 |
A malicious webview could install long-lived unload handlers that re-use an incognito BrowserContext that is queued for destruction in versions of Oxide before 1.18.3. |
Affected by 49 other vulnerabilities. Affected by 49 other vulnerabilities. |
|
VCID-spvv-jn57-aaam
Aliases: CVE-2016-5205 |
Blink in Google Chrome prior to 55.0.2883.75 for Linux, Windows and Mac, incorrectly handles deferred page loads, which allowed a remote attacker to inject arbitrary scripts or HTML (UXSS) via a crafted HTML page. |
Affected by 27 other vulnerabilities. Affected by 27 other vulnerabilities. |
|
VCID-syhs-jdj3-aaas
Aliases: CVE-2017-5008 |
Blink in Google Chrome prior to 56.0.2924.76 for Linux, Windows and Mac, and 56.0.2924.87 for Android, allowed attacker controlled JavaScript to be run during the invocation of a private script method, which allowed a remote attacker to inject arbitrary scripts or HTML (UXSS) via a crafted HTML page. |
Affected by 11 other vulnerabilities. Affected by 11 other vulnerabilities. |
|
VCID-syju-ahf9-aaah
Aliases: CVE-2015-6582 |
The decompose function in platform/transforms/TransformationMatrix.cpp in Blink, as used in Google Chrome before 45.0.2454.85, does not verify that a matrix inversion succeeded, which allows remote attackers to cause a denial of service (uninitialized memory access and application crash) or possibly have unspecified other impact via a crafted web site. |
Affected by 190 other vulnerabilities. |
|
VCID-t42a-hd1c-aaaa
Aliases: CVE-2016-5222 |
Incorrect handling of invalid URLs in Google Chrome prior to 55.0.2883.75 for Mac, Windows and Linux, and 55.0.2883.84 for Android allowed a remote attacker to spoof the contents of the Omnibox (URL bar) via a crafted HTML page. |
Affected by 27 other vulnerabilities. Affected by 27 other vulnerabilities. |
|
VCID-t7v2-yu54-aaaa
Aliases: CVE-2014-9911 |
Stack-based buffer overflow in the ures_getByKeyWithFallback function in common/uresbund.cpp in International Components for Unicode (ICU) before 54.1 for C/C++ allows remote attackers to cause a denial of service or possibly have unspecified other impact via a crafted uloc_getDisplayName call. |
Affected by 59 other vulnerabilities. Affected by 59 other vulnerabilities. |
|
VCID-t8b5-e58p-aaas
Aliases: CVE-2016-1641 |
Use-after-free vulnerability in content/browser/web_contents/web_contents_impl.cc in Google Chrome before 49.0.2623.75 allows remote attackers to cause a denial of service or possibly have unspecified other impact by triggering an image download after a certain data structure is deleted, as demonstrated by a favicon.ico download. |
Affected by 135 other vulnerabilities. |
|
VCID-t8gt-2hus-aaaa
Aliases: CVE-2017-5037 |
An integer overflow in FFmpeg in Google Chrome prior to 57.0.2987.98 for Mac, Windows, and Linux and 57.0.2987.108 for Android allowed a remote attacker to perform an out of bounds memory write via a crafted video file, related to ChunkDemuxer. |
Affected by 0 other vulnerabilities. Affected by 0 other vulnerabilities. |
|
VCID-ta7h-auqp-aaah
Aliases: CVE-2016-1634 |
Use-after-free vulnerability in the StyleResolver::appendCSSStyleSheet function in WebKit/Source/core/css/resolver/StyleResolver.cpp in Blink, as used in Google Chrome before 49.0.2623.75, allows remote attackers to cause a denial of service or possibly have unspecified other impact via a crafted web site that triggers Cascading Style Sheets (CSS) style invalidation during a certain subtree-removal action. |
Affected by 135 other vulnerabilities. |
|
VCID-tpeh-7gcc-aaaf
Aliases: CVE-2017-5026 |
Google Chrome prior to 56.0.2924.76 for Linux, Windows and Mac, failed to prevent alerts from being displayed by swapped out frames, which allowed a remote attacker to show alerts on a page they don't control via a crafted HTML page. |
Affected by 11 other vulnerabilities. Affected by 11 other vulnerabilities. |
|
VCID-tpn3-2brd-aaad
Aliases: CVE-2017-5033 |
Blink in Google Chrome prior to 57.0.2987.98 for Mac, Windows, and Linux and 57.0.2987.108 for Android failed to correctly propagate CSP restrictions to local scheme pages, which allowed a remote attacker to bypass content security policy via a crafted HTML page, related to the unsafe-inline keyword. |
Affected by 0 other vulnerabilities. Affected by 0 other vulnerabilities. |
|
VCID-tznb-pcuf-aaar
Aliases: CVE-2016-5226 |
Blink in Google Chrome prior to 55.0.2883.75 for Linux, Windows and Mac executed javascript: URLs entered in the URL bar in the context of the current tab, which allowed a socially engineered user to XSS themselves by dragging and dropping a javascript: URL into the URL bar. |
Affected by 27 other vulnerabilities. Affected by 27 other vulnerabilities. |
|
VCID-ucbt-trvs-aaam
Aliases: CVE-2016-1711 |
WebKit/Source/core/loader/FrameLoader.cpp in Blink, as used in Google Chrome before 52.0.2743.82, does not disable frame navigation during a detach operation on a DocumentLoader object, which allows remote attackers to bypass the Same Origin Policy via a crafted web site. |
Affected by 84 other vulnerabilities. Affected by 84 other vulnerabilities. |
|
VCID-ufg7-d65p-aaak
Aliases: CVE-2017-5027 |
Blink in Google Chrome prior to 56.0.2924.76 for Linux, Windows and Mac, and 56.0.2924.87 for Android, failed to properly enforce unsafe-inline content security policy, which allowed a remote attacker to bypass content security policy via a crafted HTML page. |
Affected by 11 other vulnerabilities. Affected by 11 other vulnerabilities. |
|
VCID-ukmv-wdhg-aaae
Aliases: CVE-2016-5137 |
The CSPSource::schemeMatches function in WebKit/Source/core/frame/csp/CSPSource.cpp in the Content Security Policy (CSP) implementation in Blink, as used in Google Chrome before 52.0.2743.82, does not apply http :80 policies to https :443 URLs and does not apply ws :80 policies to wss :443 URLs, which makes it easier for remote attackers to determine whether a specific HSTS web site has been visited by reading a CSP report. NOTE: this vulnerability is associated with a specification change after CVE-2016-1617 resolution. |
Affected by 84 other vulnerabilities. Affected by 84 other vulnerabilities. |
|
VCID-uskx-td9k-aaak
Aliases: CVE-2016-5127 |
Use-after-free vulnerability in WebKit/Source/core/editing/VisibleUnits.cpp in Blink, as used in Google Chrome before 52.0.2743.82, allows remote attackers to cause a denial of service or possibly have unspecified other impact via crafted JavaScript code involving an @import at-rule in a Cascading Style Sheets (CSS) token sequence in conjunction with a rel=import attribute of a LINK element. |
Affected by 84 other vulnerabilities. Affected by 84 other vulnerabilities. |
|
VCID-v466-pbhd-aaar
Aliases: CVE-2015-7834 |
Multiple unspecified vulnerabilities in Google V8 before 4.6.85.23, as used in Google Chrome before 46.0.2490.71, allow attackers to cause a denial of service or possibly have other impact via unknown vectors. |
Affected by 181 other vulnerabilities. Affected by 181 other vulnerabilities. |
|
VCID-vd5v-psbw-aaaq
Aliases: CVE-2016-5208 |
Blink in Google Chrome prior to 55.0.2883.75 for Linux and Windows, and 55.0.2883.84 for Android allowed possible corruption of the DOM tree during synchronous event handling, which allowed a remote attacker to inject arbitrary scripts or HTML (UXSS) via a crafted HTML page. |
Affected by 27 other vulnerabilities. Affected by 27 other vulnerabilities. |
|
VCID-ver1-pkzg-aaaj
Aliases: CVE-2015-8478 |
Multiple unspecified vulnerabilities in Google V8 before 4.7.80.23, as used in Google Chrome before 47.0.2526.73, allow attackers to cause a denial of service or possibly have other impact via unknown vectors. |
Affected by 163 other vulnerabilities. Affected by 163 other vulnerabilities. |
|
VCID-vfby-vsrv-aaaa
Aliases: CVE-2016-1678 |
objects.cc in Google V8 before 5.0.71.32, as used in Google Chrome before 51.0.2704.63, does not properly restrict lazy deoptimization, which allows remote attackers to cause a denial of service (heap-based buffer overflow) or possibly have unspecified other impact via crafted JavaScript code. |
Affected by 99 other vulnerabilities. Affected by 99 other vulnerabilities. |
|
VCID-w4gf-uvbq-aaac
Aliases: CVE-2015-1301 |
Multiple unspecified vulnerabilities in Google Chrome before 45.0.2454.85 allow attackers to cause a denial of service or possibly have other impact via unknown vectors. |
Affected by 190 other vulnerabilities. |
|
VCID-w8pm-ggck-aaar
Aliases: CVE-2016-5144 |
The Developer Tools (aka DevTools) subsystem in Blink, as used in Google Chrome before 52.0.2743.116, mishandles the script-path hostname, remoteBase parameter, and remoteFrontendUrl parameter, which allows remote attackers to bypass intended access restrictions via a crafted URL, a different vulnerability than CVE-2016-5143. |
Affected by 67 other vulnerabilities. Affected by 67 other vulnerabilities. |
|
VCID-wbn4-ykqu-aaak
Aliases: CVE-2017-5007 |
Blink in Google Chrome prior to 56.0.2924.76 for Linux, Windows and Mac, and 56.0.2924.87 for Android, incorrectly handled the sequence of events when closing a page, which allowed a remote attacker to inject arbitrary scripts or HTML (UXSS) via a crafted HTML page. |
Affected by 11 other vulnerabilities. Affected by 11 other vulnerabilities. |
|
VCID-wdpa-yxc1-aaaa
Aliases: CVE-2017-5012 |
A heap buffer overflow in V8 in Google Chrome prior to 56.0.2924.76 for Linux, Windows and Mac, and 56.0.2924.87 for Android, allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. |
Affected by 11 other vulnerabilities. Affected by 11 other vulnerabilities. |
|
VCID-wpda-7shn-aaap
Aliases: CVE-2016-1691 |
Skia, as used in Google Chrome before 51.0.2704.63, mishandles coincidence runs, which allows remote attackers to cause a denial of service (heap-based buffer overflow) or possibly have unspecified other impact via crafted curves, related to SkOpCoincidence.cpp and SkPathOpsCommon.cpp. |
Affected by 99 other vulnerabilities. Affected by 99 other vulnerabilities. |
|
VCID-wuby-sjvn-aaah
Aliases: CVE-2016-5182 |
Blink in Google Chrome prior to 54.0.2840.59 for Windows, Mac, and Linux; 54.0.2840.85 for Android had insufficient validation in bitmap handling, which allowed a remote attacker to potentially exploit heap corruption via crafted HTML pages. |
Affected by 49 other vulnerabilities. Affected by 49 other vulnerabilities. |
|
VCID-x628-g9qg-aaam
Aliases: CVE-2016-5189 |
Google Chrome prior to 54.0.2840.59 for Windows, Mac, and Linux; 54.0.2840.85 for Android permitted navigation to blob URLs with non-canonical origins, which allowed a remote attacker to spoof the contents of the Omnibox (URL bar) via crafted HTML pages. |
Affected by 49 other vulnerabilities. Affected by 49 other vulnerabilities. |
|
VCID-xac2-xgfb-aaac
Aliases: CVE-2016-5155 |
Google Chrome before 53.0.2785.89 on Windows and OS X and before 53.0.2785.92 on Linux does not properly validate access to the initial document, which allows remote attackers to spoof the address bar via a crafted web site. |
Affected by 67 other vulnerabilities. Affected by 67 other vulnerabilities. |
|
VCID-xcef-zej7-aaar
Aliases: CVE-2015-6789 |
Race condition in the MutationObserver implementation in Blink, as used in Google Chrome before 47.0.2526.80, allows remote attackers to cause a denial of service (use-after-free) or possibly have unspecified other impact by leveraging unanticipated object deletion. |
Affected by 158 other vulnerabilities. |
|
VCID-xpyj-uw54-aaam
Aliases: CVE-2017-5011 |
Google Chrome prior to 56.0.2924.76 for Windows insufficiently sanitized DevTools URLs, which allowed a remote attacker who convinced a user to install a malicious extension to read filesystem contents via a crafted HTML page. |
Affected by 11 other vulnerabilities. Affected by 11 other vulnerabilities. |
|
VCID-xvjs-kgj7-aaae
Aliases: CVE-2016-1661 |
Blink, as used in Google Chrome before 50.0.2661.94, does not ensure that frames satisfy a check for the same renderer process in addition to a Same Origin Policy check, which allows remote attackers to cause a denial of service (memory corruption) or possibly have unspecified other impact via a crafted web site, related to BindingSecurity.cpp and DOMWindow.cpp. |
Affected by 117 other vulnerabilities. |
|
VCID-xzet-w7bf-aaar
Aliases: CVE-2016-1618 |
Blink, as used in Google Chrome before 48.0.2564.82, does not ensure that a proper cryptographicallyRandomValues random number generator is used, which makes it easier for remote attackers to defeat cryptographic protection mechanisms via unspecified vectors. |
Affected by 151 other vulnerabilities. |
|
VCID-yehd-sm9z-aaad
Aliases: CVE-2016-5150 |
WebKit/Source/bindings/modules/v8/V8BindingForModules.cpp in Blink, as used in Google Chrome before 53.0.2785.89 on Windows and OS X and before 53.0.2785.92 on Linux, has an Indexed Database (aka IndexedDB) API implementation that does not properly restrict key-path evaluation, which allows remote attackers to cause a denial of service (use-after-free) or possibly have unspecified other impact via crafted JavaScript code that leverages certain side effects. |
Affected by 67 other vulnerabilities. Affected by 67 other vulnerabilities. |
|
VCID-ykju-xjyz-aaag
Aliases: CVE-2016-1646 |
The Array.prototype.concat implementation in builtins.cc in Google V8, as used in Google Chrome before 49.0.2623.108, does not properly consider element data types, which allows remote attackers to cause a denial of service (out-of-bounds read) or possibly have unspecified other impact via crafted JavaScript code. |
Affected by 126 other vulnerabilities. Affected by 126 other vulnerabilities. |
|
VCID-yrn8-vscb-aaab
Aliases: CVE-2016-1677 |
uri.js in Google V8 before 5.1.281.26, as used in Google Chrome before 51.0.2704.63, uses an incorrect array type, which allows remote attackers to obtain sensitive information by calling the decodeURI function and leveraging "type confusion." |
Affected by 99 other vulnerabilities. Affected by 99 other vulnerabilities. |
|
VCID-ytxf-t2w9-aaaj
Aliases: CVE-2016-5141 |
Blink, as used in Google Chrome before 52.0.2743.116, allows remote attackers to spoof the address bar via vectors involving a provisional URL for an initially empty document, related to FrameLoader.cpp and ScopedPageLoadDeferrer.cpp. |
Affected by 67 other vulnerabilities. Affected by 67 other vulnerabilities. |
|
VCID-yu4g-j1kx-aaag
Aliases: CVE-2016-1644 |
WebKit/Source/core/layout/LayoutObject.cpp in Blink, as used in Google Chrome before 49.0.2623.87, does not properly restrict relayout scheduling, which allows remote attackers to cause a denial of service (use-after-free) or possibly have unspecified other impact via a crafted HTML document. |
Affected by 135 other vulnerabilities. |
|
VCID-yukc-x7vh-aaar
Aliases: CVE-2015-6784 |
The page serializer in Google Chrome before 47.0.2526.73 mishandles Mark of the Web (MOTW) comments for URLs containing a "--" sequence, which might allow remote attackers to inject HTML via a crafted URL, as demonstrated by an initial http://example.com?-- substring. |
Affected by 163 other vulnerabilities. |
|
VCID-yure-7qma-aaad
Aliases: CVE-2015-6765 |
Use-after-free vulnerability in content/browser/appcache/appcache_update_job.cc in Google Chrome before 47.0.2526.73 allows remote attackers to execute arbitrary code or cause a denial of service by leveraging the mishandling of AppCache update jobs. |
Affected by 163 other vulnerabilities. |
|
VCID-z11r-1qxk-aaap
Aliases: CVE-2016-1699 |
WebKit/Source/devtools/front_end/devtools.js in the Developer Tools (aka DevTools) subsystem in Blink, as used in Google Chrome before 51.0.2704.79, does not ensure that the remoteFrontendUrl parameter is associated with a chrome-devtools-frontend.appspot.com URL, which allows remote attackers to bypass intended access restrictions via a crafted URL. |
Affected by 99 other vulnerabilities. Affected by 99 other vulnerabilities. |
|
VCID-zade-1t4e-aaag
Aliases: CVE-2016-1654 |
The media subsystem in Google Chrome before 50.0.2661.75 does not initialize an unspecified data structure, which allows remote attackers to cause a denial of service (invalid read operation) via unknown vectors. |
Affected by 126 other vulnerabilities. Affected by 126 other vulnerabilities. |
|
VCID-zhrf-jjwp-aaas
Aliases: CVE-2016-1706 |
The PPAPI implementation in Google Chrome before 52.0.2743.82 does not validate the origin of IPC messages to the plugin broker process that should have come from the browser process, which allows remote attackers to bypass a sandbox protection mechanism via an unexpected message type, related to broker_process_dispatcher.cc, ppapi_plugin_process_host.cc, ppapi_thread.cc, and render_frame_message_filter.cc. |
Affected by 84 other vulnerabilities. Affected by 84 other vulnerabilities. |
|
VCID-zm2t-crgn-aaaq
Aliases: CVE-2016-5135 |
WebKit/Source/core/html/parser/HTMLPreloadScanner.cpp in Blink, as used in Google Chrome before 52.0.2743.82, does not consider referrer-policy information inside an HTML document during a preload request, which allows remote attackers to bypass the Content Security Policy (CSP) protection mechanism via a crafted web site, as demonstrated by a "Content-Security-Policy: referrer origin-when-cross-origin" header that overrides a "<META name='referrer' content='no-referrer'>" element. |
Affected by 84 other vulnerabilities. Affected by 84 other vulnerabilities. |
|
VCID-znsp-9hsp-aaab
Aliases: CVE-2016-1633 |
Use-after-free vulnerability in Blink, as used in Google Chrome before 49.0.2623.75, allows remote attackers to cause a denial of service or possibly have unspecified other impact via unknown vectors. |
Affected by 135 other vulnerabilities. |
|
VCID-zpyh-c587-aaad
Aliases: CVE-2015-6762 |
The CSSFontFaceSrcValue::fetch function in core/css/CSSFontFaceSrcValue.cpp in the Cascading Style Sheets (CSS) implementation in Blink, as used in Google Chrome before 46.0.2490.71, does not use the CORS cross-origin request algorithm when a font's URL appears to be a same-origin URL, which allows remote web servers to bypass the Same Origin Policy via a redirect. |
Affected by 181 other vulnerabilities. |
|
VCID-zspw-8pfa-aaan
Aliases: CVE-2016-1649 |
The Program::getUniformInternal function in Program.cpp in libANGLE, as used in Google Chrome before 49.0.2623.108, does not properly handle a certain data-type mismatch, which allows remote attackers to cause a denial of service (buffer overflow) or possibly have unspecified other impact via crafted shader stages. |
Affected by 126 other vulnerabilities. Affected by 126 other vulnerabilities. |
|
VCID-zvhz-paa8-aaah
Aliases: CVE-2016-5143 |
The Developer Tools (aka DevTools) subsystem in Blink, as used in Google Chrome before 52.0.2743.116, mishandles the script-path hostname, remoteBase parameter, and remoteFrontendUrl parameter, which allows remote attackers to bypass intended access restrictions via a crafted URL, a different vulnerability than CVE-2016-5144. |
Affected by 67 other vulnerabilities. Affected by 67 other vulnerabilities. |
| Vulnerability | Summary | Aliases |
|---|---|---|
| VCID-869q-17wa-aaaj | The regular-expression implementation in Google V8, as used in Google Chrome before 44.0.2403.89, mishandles interrupts, which allows remote attackers to cause a denial of service (application crash) via crafted JavaScript code, as demonstrated by an error in garbage collection during allocation of a stack-overflow exception message. |
CVE-2015-5605
|
| VCID-a9gp-eezn-aaaf | Multiple integer overflows in the XML_GetBuffer function in Expat through 2.1.0, as used in Google Chrome before 44.0.2403.89 and other products, allow remote attackers to cause a denial of service (heap-based buffer overflow) or possibly have unspecified other impact via crafted XML data, a related issue to CVE-2015-2716. |
CVE-2015-1283
|
| Date | Actor | Action | Vulnerability | Source | VulnerableCode Version |
|---|