Search vulnerabilities

Use the Query Builder to create your own search query, or check out the documentation to learn the search syntax.

Results 4,046

Export CSV
CVE-2016-1682

chromium-browser: csp bypass for serviceworker

The ServiceWorkerContainer::registerServiceWorkerImpl function in WebKit/Source/modules/serviceworkers/ServiceWorkerContainer.cpp in Blink, as used in Google Chrome before 51.0.2704.63, allows remote attackers to bypass the Content Security Policy (CSP) protection mechanism via a ServiceWorker registration.

CVSS 3.0 · 6.1 Medium EPSS 1.1% KEV · Not listed
Vendors
Canonical Debian Google and 3 more
Products
Ubuntu Linux Debian Linux Chrome and 7 more
CVE-2016-1698

chromium-browser: information leak in extension bindings

The createCustomType function in extensions/renderer/resources/binding.js in the extension bindings in Google Chrome before 51.0.2704.79 does not validate module types, which might allow attackers to load arbitrary modules or obtain sensitive information by leveraging a poisoned definition.

CVSS 3.0 · 6.5 Medium EPSS 1.1% KEV · Not listed
Vendors
Debian Google Opensuse and 2 more
Products
Debian Linux Chrome Leap and 6 more
CVE-2016-3449

JDK: unspecified vulnerability fixed in 6u115, 7u101 and 8u91 (Deployment)

Unspecified vulnerability in Oracle Java SE 6u113, 7u99, and 8u77 allows remote attackers to affect confidentiality, integrity, and availability via vectors related to Deployment.

CVSS 3.0 · 8.3 High EPSS 4.0% KEV · Not listed
Vendors
Oracle Redhat
Products
Jdk Jre Network Satellite and 2 more
CVE-2016-1700

chromium-browser: use-after-free in extensions

extensions/renderer/runtime_custom_bindings.cc in Google Chrome before 51.0.2704.79 does not consider side effects during creation of an array of extension views, which allows remote attackers to cause a denial of service (use-after-free) or possibly have unspecified other impact via vectors related to extensions.

CVSS 3.0 · 7.5 High EPSS 1.2% KEV · Not listed
Vendors
Debian Google Opensuse and 2 more
Products
Debian Linux Chrome Leap and 6 more
CVE-2016-1701

chromium-browser: use-after-free in autofill

The Autofill implementation in Google Chrome before 51.0.2704.79 mishandles the interaction between field updates and JavaScript code that triggers a frame deletion, which allows remote attackers to cause a denial of service (use-after-free) or possibly have unspecified other impact via a crafted web site, a different vulnerability than CVE-2016-1690.

CVSS 3.0 · 8.8 High EPSS < 1% KEV · Not listed
Vendors
Debian Google Opensuse and 2 more
Products
Debian Linux Chrome Leap and 6 more
CVE-2016-1702

chromium-browser: out-of-bounds read in skia

The SkRegion::readFromMemory function in core/SkRegion.cpp in Skia, as used in Google Chrome before 51.0.2704.79, does not validate the interval count, which allows remote attackers to cause a denial of service (out-of-bounds read) via crafted serialized data.

CVSS 3.0 · 6.5 Medium EPSS 1.2% KEV · Not listed
Vendors
Canonical Debian Google and 3 more
Products
Ubuntu Linux Debian Linux Chrome and 7 more
CVE-2016-1681

chromium-browser: heap overflow in pdfium

Heap-based buffer overflow in the opj_j2k_read_SPCod_SPCoc function in j2k.c in OpenJPEG, as used in PDFium in Google Chrome before 51.0.2704.63, allows remote attackers to cause a denial of service or possibly have unspecified other impact via a crafted PDF document.

CVSS 3.0 · 8.8 High EPSS 1.5% KEV · Not listed
Vendors
Debian Google Opensuse and 2 more
Products
Debian Linux Chrome Leap and 6 more
CVE-2016-1705

chromium-browser: various fixes from internal audits

Multiple unspecified vulnerabilities in Google Chrome before 52.0.2743.82 allow attackers to cause a denial of service or possibly have other impact via unknown vectors.

CVSS 3.0 · 8.8 High EPSS 1.1% KEV · Not listed
Vendors
Google Redhat
Products
Chrome Rhel Extras
CVE-2016-1706

chromium-browser: sandbox escape in ppapi

The PPAPI implementation in Google Chrome before 52.0.2743.82 does not validate the origin of IPC messages to the plugin broker process that should have come from the browser process, which allows remote attackers to bypass a sandbox protection mechanism via an unexpected message type, related to broker_process_dispatcher.cc, ppapi_plugin_process_host.cc, ppapi_thread.cc, and render_frame_message_filter.cc.

CVSS 3.0 · 9.6 Critical EPSS 2.2% KEV · Not listed
Vendors
Google Redhat
Products
Chrome Rhel Extras
CVE-2016-1710

chromium-browser: same-origin bypass in blink

The ChromeClientImpl::createWindow method in WebKit/Source/web/ChromeClientImpl.cpp in Blink, as used in Google Chrome before 52.0.2743.82, does not prevent window creation by a deferred frame, which allows remote attackers to bypass the Same Origin Policy via a crafted web site.

CVSS 3.0 · 8.8 High EPSS 1.3% KEV · Not listed
Vendors
Google Redhat
Products
Chrome Rhel Extras
CVE-2016-1711

chromium-browser: same-origin bypass in blink

WebKit/Source/core/loader/FrameLoader.cpp in Blink, as used in Google Chrome before 52.0.2743.82, does not disable frame navigation during a detach operation on a DocumentLoader object, which allows remote attackers to bypass the Same Origin Policy via a crafted web site.

CVSS 3.0 · 8.8 High EPSS 1.5% KEV · Not listed
Vendors
Google Redhat
Products
Chrome Rhel Extras
CVE-2016-2051

chromium-browser: Multiple unspecified vulnerabilities in Google V8 before 4.8.271.17

Multiple unspecified vulnerabilities in Google V8 before 4.8.271.17, as used in Google Chrome before 48.0.2564.82, allow attackers to cause a denial of service or possibly have other impact via unknown vectors.

CVSS 3.0 · 9.8 Critical EPSS < 1% KEV · Not listed
Vendors
Google Redhat
Products
Chrome Enterprise Linux Desktop Supplementary Enterprise Linux Server Supplementary and 3 more
CVE-2016-2052

chromium-browser: Multiple unspecified vulnerabilities in HarfBuzz before 1.0.6

Multiple unspecified vulnerabilities in HarfBuzz before 1.0.6, as used in Google Chrome before 48.0.2564.82, allow attackers to cause a denial of service or possibly have other impact via crafted data, as demonstrated by a buffer over-read resulting from an inverted length check in hb-ot-font.cc, a different issue than CVE-2015-8947.

CVSS 3.0 · 7.6 High EPSS < 1% KEV · Not listed
Vendors
Google Harfbuzz Project Redhat
Products
Chrome Harfbuzz Rhel Extras
CVE-2016-1680

chromium-browser: heap use-after-free in skia

Use-after-free vulnerability in ports/SkFontHost_FreeType.cpp in Skia, as used in Google Chrome before 51.0.2704.63, allows remote attackers to cause a denial of service (heap memory corruption) or possibly have unspecified other impact via unknown vectors.

CVSS 3.0 · 8.8 High EPSS 1.3% KEV · Not listed
Vendors
Canonical Debian Google and 3 more
Products
Ubuntu Linux Debian Linux Chrome and 7 more
CVE-2016-2117

kernel: Kernel memory leakage to ethernet frames due to buffer overflow in ethernet drivers

The atl2_probe function in drivers/net/ethernet/atheros/atlx/atl2.c in the Linux kernel through 4.5.2 incorrectly enables scatter/gather I/O, which allows remote attackers to obtain sensitive information from kernel memory by reading packet data.

CVSS 3.0 · 7.5 High EPSS 6.4% KEV · Not listed
Vendors
Canonical Linux Oracle and 1 more
Products
Ubuntu Linux Linux Kernel Vm Server and 2 more
CVE-2016-3458

OpenJDK: insufficient restrictions on the use of custom ValueHandler (CORBA, 8079718)

Unspecified vulnerability in Oracle Java SE 6u115, 7u101, and 8u92; and Java SE Embedded 8u91 allows remote attackers to affect integrity via vectors related to CORBA.

CVSS 3.0 · 4.3 Medium EPSS 3.0% KEV · Not listed
Vendors
Oracle Redhat
Products
Jdk Jre Linux and 2 more
CVE-2016-3503

JDK: unspecified vulnerability fixed in 6u121, 7u111, and 8u101 (Install)

Unspecified vulnerability in Oracle Java SE 6u115, 7u101, and 8u92 allows local users to affect confidentiality, integrity, and availability via vectors related to Install.

CVSS 3.0 · 7.7 High EPSS < 1% KEV · Not listed
Vendors
Oracle Redhat
Products
Jdk Jre Rhel Extras Oracle Java
CVE-2016-3606

OpenJDK: insufficient bytecode verification (Hotspot, 8155981)

Unspecified vulnerability in Oracle Java SE 7u101 and 8u92 and Java SE Embedded 8u91 allows remote attackers to affect confidentiality, integrity, and availability via vectors related to Hotspot.

CVSS 3.0 · 9.6 Critical EPSS 3.8% KEV · Not listed
Vendors
Oracle Redhat
Products
Jdk Jre Linux and 2 more