Search vulnerabilities

Use the Query Builder to create your own search query, or check out the documentation to learn the search syntax.

Results 18,405

CVE-2016-5130

chromium-browser: url spoofing

content/renderer/history_controller.cc in Google Chrome before 52.0.2743.82 does not properly restrict multiple uses of a JavaScript forward method, which allows remote attackers to spoof the URL display via a crafted web site.

CVSS 3.0 · 6.5 Medium EPSS 1.2% KEV · Not listed
Vendors
Google Redhat
Products
Chrome Rhel Extras
CVE-2016-5133

chromium-browser: origin confusion in proxy authentication

Google Chrome before 52.0.2743.82 mishandles origin information during proxy authentication, which allows man-in-the-middle attackers to spoof a proxy-authentication login prompt or trigger incorrect credential storage by modifying the client-server data stream.

CVSS 3.0 · 5.3 Medium EPSS < 1% KEV · Not listed
Vendors
Google Redhat
Products
Chrome Rhel Extras
CVE-2016-5134

chromium-browser: url leakage via pac script

net/proxy/proxy_service.cc in the Proxy Auto-Config (PAC) feature in Google Chrome before 52.0.2743.82 does not ensure that URL information is restricted to a scheme, host, and port, which allows remote attackers to discover credentials by operating a server with a PAC script, a related issue to CVE-2016-3763.

CVSS 3.0 · 8.8 High EPSS 1.5% KEV · Not listed
Vendors
Google Redhat
Products
Chrome Rhel Extras
CVE-2016-5139

openjpeg: Heap overflow in parsing of JPEG2000 precincts

Multiple integer overflows in the opj_tcd_init_tile function in tcd.c in OpenJPEG, as used in PDFium in Google Chrome before 52.0.2743.116, allow remote attackers to cause a denial of service (heap-based buffer overflow) or possibly have unspecified other impact via crafted JPEG 2000 data.

CVSS 3.0 · 7.6 High EPSS 1.3% KEV · Not listed
Vendors
Google Redhat
Products
Chrome Enterprise Linux Rhel Extras
CVE-2016-5142

chromium-browser: Use-after-free in Blink

The Web Cryptography API (aka WebCrypto) implementation in Blink, as used in Google Chrome before 52.0.2743.116, does not properly copy data buffers, which allows remote attackers to cause a denial of service (use-after-free) or possibly have unspecified other impact via crafted JavaScript code, related to NormalizeAlgorithm.cpp and SubtleCrypto.cpp.

CVSS 3.0 · 9.8 Critical EPSS 1.7% KEV · Not listed
Vendors
Google Redhat
Products
Chrome Rhel Extras
CVE-2016-5143

chromium-browser: Parameter sanitization failure in DevTools

The Developer Tools (aka DevTools) subsystem in Blink, as used in Google Chrome before 52.0.2743.116, mishandles the script-path hostname, remoteBase parameter, and remoteFrontendUrl parameter, which allows remote attackers to bypass intended access restrictions via a crafted URL, a different vulnerability than CVE-2016-5144.

CVSS 3.0 · 9.8 Critical EPSS 1.8% KEV · Not listed
Vendors
Google Redhat
Products
Chrome Rhel Extras
CVE-2016-5148

chromium-browser: universal xss in blink

Cross-site scripting (XSS) vulnerability in Blink, as used in Google Chrome before 53.0.2785.89 on Windows and OS X and before 53.0.2785.92 on Linux, allows remote attackers to inject arbitrary web script or HTML via vectors related to widget updates, aka "Universal XSS (UXSS)."

CVSS 3.0 · 6.1 Medium EPSS 1.2% KEV · Not listed
Vendors
Google Redhat
Products
Chrome Rhel Extras
CVE-2016-5149

chromium-browser: script injection in extensions

The extensions subsystem in Google Chrome before 53.0.2785.89 on Windows and OS X and before 53.0.2785.92 on Linux relies on an IFRAME source URL to identify an associated extension, which allows remote attackers to conduct extension-bindings injection attacks by leveraging script access to a resource that initially has the about:blank URL.

CVSS 3.0 · 8.8 High EPSS 1.3% KEV · Not listed
Vendors
Google Opensuse Redhat
Products
Chrome Leap Rhel Extras
CVE-2016-5150

chromium-browser: use after free in blink

WebKit/Source/bindings/modules/v8/V8BindingForModules.cpp in Blink, as used in Google Chrome before 53.0.2785.89 on Windows and OS X and before 53.0.2785.92 on Linux, has an Indexed Database (aka IndexedDB) API implementation that does not properly restrict key-path evaluation, which allows remote attackers to cause a denial of service (use-after-free) or possibly have unspecified other impact via crafted JavaScript code that leverages certain side effects.

CVSS 3.0 · 8.8 High EPSS 1.3% KEV · Not listed
Vendors
Google Opensuse Redhat
Products
Chrome Leap Rhel Extras
CVE-2016-5152

chromium-browser: heap overflow in pdfium

Integer overflow in the opj_tcd_get_decoded_tile_size function in tcd.c in OpenJPEG, as used in PDFium in Google Chrome before 53.0.2785.89 on Windows and OS X and before 53.0.2785.92 on Linux, allows remote attackers to cause a denial of service (heap-based buffer overflow) or possibly have unspecified other impact via crafted JPEG 2000 data.

CVSS 3.0 · 8.8 High EPSS 1.6% KEV · Not listed
Vendors
Google Opensuse Redhat
Products
Chrome Leap Rhel Extras
CVE-2016-5155

chromium-browser: address bar spoofing

Google Chrome before 53.0.2785.89 on Windows and OS X and before 53.0.2785.92 on Linux does not properly validate access to the initial document, which allows remote attackers to spoof the address bar via a crafted web site.

CVSS 3.0 · 6.5 Medium EPSS 1.2% KEV · Not listed
Vendors
Google Opensuse Redhat
Products
Chrome Leap Rhel Extras
CVE-2016-5156

chromium-browser: use after free in event bindings

extensions/renderer/event_bindings.cc in the event bindings in Google Chrome before 53.0.2785.89 on Windows and OS X and before 53.0.2785.92 on Linux attempts to process filtered events after failure to add an event matcher, which allows remote attackers to cause a denial of service (use-after-free) or possibly have unspecified other impact via unknown vectors.

CVSS 3.0 · 8.8 High EPSS 1.3% KEV · Not listed
Vendors
Google Opensuse Redhat
Products
Chrome Leap Rhel Extras
CVE-2016-5157

chromium-browser: heap overflow in pdfium

Heap-based buffer overflow in the opj_dwt_interleave_v function in dwt.c in OpenJPEG, as used in PDFium in Google Chrome before 53.0.2785.89 on Windows and OS X and before 53.0.2785.92 on Linux, allows remote attackers to execute arbitrary code via crafted coordinate values in JPEG 2000 data.

CVSS 3.0 · 8.8 High EPSS 4.7% KEV · Not listed
Vendors
Fedoraproject Google Opensuse and 1 more
Products
Fedora Chrome Leap and 1 more
CVE-2016-5158

openjpeg: heap overflow due to unsafe use of opj_aligned_malloc

Multiple integer overflows in the opj_tcd_init_tile function in tcd.c in OpenJPEG, as used in PDFium in Google Chrome before 53.0.2785.89 on Windows and OS X and before 53.0.2785.92 on Linux, allow remote attackers to cause a denial of service (heap-based buffer overflow) or possibly have unspecified other impact via crafted JPEG 2000 data.

CVSS 3.0 · 8.8 High EPSS 1.5% KEV · Not listed
Vendors
Google Opensuse Redhat
Products
Chrome Leap Enterprise Linux and 1 more
CVE-2016-5159

openjpeg: heap overflow in parsing of JPEG2000 code blocks

Multiple integer overflows in OpenJPEG, as used in PDFium in Google Chrome before 53.0.2785.89 on Windows and OS X and before 53.0.2785.92 on Linux, allow remote attackers to cause a denial of service (heap-based buffer overflow) or possibly have unspecified other impact via crafted JPEG 2000 data that is mishandled during opj_aligned_malloc calls in dwt.c and t1.c.

CVSS 3.0 · 8.8 High EPSS 2.0% KEV · Not listed
Vendors
Google Opensuse Redhat
Products
Chrome Leap Enterprise Linux and 1 more
CVE-2016-5166

chromium-browser: smb relay attack via save page as

The download implementation in Google Chrome before 53.0.2785.89 on Windows and OS X and before 53.0.2785.92 on Linux does not properly restrict saving a file:// URL that is referenced by an http:// URL, which makes it easier for user-assisted remote attackers to discover NetNTLM hashes and conduct SMB relay attacks via a crafted web page that is accessed with the "Save page as" menu choice.

CVSS 3.0 · 3.1 Low EPSS 1.3% KEV · Not listed
Vendors
Google Opensuse Redhat
Products
Chrome Leap Rhel Extras
CVE-2016-5171

chromium-browser: use after free in blink

WebKit/Source/bindings/templates/interface.cpp in Blink, as used in Google Chrome before 53.0.2785.113, does not prevent certain constructor calls, which allows remote attackers to cause a denial of service (use-after-free) or possibly have unspecified other impact via crafted JavaScript code.

CVSS 3.0 · 8.8 High EPSS 1.1% KEV · Not listed
Vendors
Google Redhat
Products
Chrome Rhel Extras
CVE-2016-5174

chromium-browser: popup not correctly suppressed

browser/ui/cocoa/browser_window_controller_private.mm in Google Chrome before 53.0.2785.113 does not process fullscreen toggle requests during a fullscreen transition, which allows remote attackers to cause a denial of service (unsuppressed popup) via a crafted web site.

CVSS 3.0 · 6.5 Medium EPSS < 1% KEV · Not listed
Vendors
Google Redhat
Products
Chrome Rhel Extras
CVE-2016-5176

chromium-browser: SafeBrowsing protection mechanism bypass

Google Chrome before 53.0.2785.113 allows remote attackers to bypass the SafeBrowsing protection mechanism via unspecified vectors.

CVSS 3.0 · 6.5 Medium EPSS < 1% KEV · Not listed
Vendors
Google Redhat
Products
Chrome Rhel Extras
CVE-2016-5181

chromium-browser: universal xss in blink

Blink in Google Chrome prior to 54.0.2840.59 for Windows, Mac, and Linux; 54.0.2840.85 for Android permitted execution of v8 microtasks while the DOM was in an inconsistent state, which allowed a remote attacker to inject arbitrary scripts or HTML (UXSS) via crafted HTML pages.

CVSS 3.0 · 6.1 Medium EPSS 2.0% KEV · Not listed
Vendors
Google Redhat
Products
Chrome Rhel Extras