CVE-2016-1705

chromium-browser: various fixes from internal audits

Multiple unspecified vulnerabilities in Google Chrome before 52.0.2743.82 allow attackers to cause a denial of service or possibly have other impact via unknown vectors.

CVSS 3.0 · 8.8 High EPSS 1.1% KEV · Not listed

Vendors

Google Redhat

Products

Chrome Rhel Extras

CVE-2016-1706

chromium-browser: sandbox escape in ppapi

The PPAPI implementation in Google Chrome before 52.0.2743.82 does not validate the origin of IPC messages to the plugin broker process that should have come from the browser process, which allows remote attackers to bypass a sandbox protection mechanism via an unexpected message type, related to broker_process_dispatcher.cc, ppapi_plugin_process_host.cc, ppapi_thread.cc, and render_frame_message_filter.cc.

CVSS 3.0 · 9.6 Critical EPSS 2.2% KEV · Not listed

Vendors

Google Redhat

Products

Chrome Rhel Extras

CVE-2016-1707

chromium-browser: url spoofing on ios

ios/web/web_state/ui/crw_web_controller.mm in Google Chrome before 52.0.2743.82 on iOS does not ensure that an invalid URL is replaced with the about:blank URL, which allows remote attackers to spoof the URL display via a crafted web site.

CVSS 3.0 · 6.5 Medium EPSS 1.2% KEV · Not listed

Vendors

Google

Products

Chrome

CVE-2016-1710

chromium-browser: same-origin bypass in blink

The ChromeClientImpl::createWindow method in WebKit/Source/web/ChromeClientImpl.cpp in Blink, as used in Google Chrome before 52.0.2743.82, does not prevent window creation by a deferred frame, which allows remote attackers to bypass the Same Origin Policy via a crafted web site.

CVSS 3.0 · 8.8 High EPSS 1.3% KEV · Not listed

Vendors

Google Redhat

Products

Chrome Rhel Extras

CVE-2016-1711

chromium-browser: same-origin bypass in blink

WebKit/Source/core/loader/FrameLoader.cpp in Blink, as used in Google Chrome before 52.0.2743.82, does not disable frame navigation during a detach operation on a DocumentLoader object, which allows remote attackers to bypass the Same Origin Policy via a crafted web site.

CVSS 3.0 · 8.8 High EPSS 1.5% KEV · Not listed

Vendors

Google Redhat

Products

Chrome Rhel Extras

CVE-2016-2051

chromium-browser: Multiple unspecified vulnerabilities in Google V8 before 4.8.271.17

Multiple unspecified vulnerabilities in Google V8 before 4.8.271.17, as used in Google Chrome before 48.0.2564.82, allow attackers to cause a denial of service or possibly have other impact via unknown vectors.

CVSS 3.0 · 9.8 Critical EPSS < 1% KEV · Not listed

Vendors

Google Redhat

Products

Chrome Enterprise Linux Desktop Supplementary Enterprise Linux Server Supplementary and 3 more

CVE-2016-2052

chromium-browser: Multiple unspecified vulnerabilities in HarfBuzz before 1.0.6

Multiple unspecified vulnerabilities in HarfBuzz before 1.0.6, as used in Google Chrome before 48.0.2564.82, allow attackers to cause a denial of service or possibly have other impact via crafted data, as demonstrated by a buffer over-read resulting from an inverted length check in hb-ot-font.cc, a different issue than CVE-2015-8947.

CVSS 3.0 · 7.6 High EPSS < 1% KEV · Not listed

Vendors

Google Harfbuzz Project Redhat

Products

Chrome Harfbuzz Rhel Extras

CVE-2016-2843

chromium-browser: Multiple unspecified vulnerabilities in V8 before 4.9.385.26

Multiple unspecified vulnerabilities in Google V8 before 4.9.385.26, as used in Google Chrome before 49.0.2623.75, allow attackers to cause a denial of service or possibly have other impact via unknown vectors.

CVSS 3.0 · 9.8 Critical EPSS 1.1% KEV · Not listed

Vendors

Google Redhat

Products

Chrome V8 Rhel Extras

CVE-2016-2844

chromium-browser: LayoutBlock.cpp in Blink does not properly determine when anonymous block wrappers may exist

WebKit/Source/core/layout/LayoutBlock.cpp in Blink, as used in Google Chrome before 49.0.2623.75, does not properly determine when anonymous block wrappers may exist, which allows remote attackers to cause a denial of service (incorrect cast and assertion failure) or possibly have unspecified other impact via crafted JavaScript code.

CVSS 3.0 · 8.8 High EPSS 2.1% KEV · Not listed

Vendors

Google Redhat

Products

Chrome Rhel Extras

CVE-2016-2845

chromium-browser: CSP implementation in Blink does not ignore a URL's path component in the case of a ServiceWorker fetch

The Content Security Policy (CSP) implementation in Blink, as used in Google Chrome before 49.0.2623.75, does not ignore a URL's path component in the case of a ServiceWorker fetch, which allows remote attackers to obtain sensitive information about visited web pages by reading CSP violation reports, related to FrameFetchContext.cpp and ResourceFetcher.cpp.

CVSS 3.0 · 5.3 Medium EPSS 2.1% KEV · Not listed

Vendors

Google Redhat

Products

Chrome Rhel Extras

CVE-2016-3679

chromium-browser: multiple unspecified vulnerabilities

Multiple unspecified vulnerabilities in Google V8 before 4.9.385.33, as used in Google Chrome before 49.0.2623.108, allow attackers to cause a denial of service or possibly have other impact via unknown vectors.

CVSS 3.0 · 8.8 High EPSS 1.2% KEV · Not listed

Vendors

Canonical Google Opensuse and 1 more

Products

Ubuntu Linux Chrome V8 and 2 more

CVE-2016-4120

flash-plugin: multiple code execution issues fixed in APSB16-15

Adobe Flash Player before 18.0.0.352 and 19.x through 21.x before 21.0.0.242 on Windows and OS X and before 11.2.202.621 on Linux allows attackers to execute arbitrary code or cause a denial of service (memory corruption) via unspecified vectors, a different vulnerability than CVE-2016-1096, CVE-2016-1098, CVE-2016-1099, CVE-2016-1100, CVE-2016-1102, CVE-2016-1104, CVE-2016-4109, CVE-2016-4111, CVE-2016-4112, CVE-2016-4113, CVE-2016-4114, CVE-2016-4115, CVE-2016-4160, CVE-2016-4161, CVE-2016-4162, and CVE-2016-4163.

CVSS 3.1 · 9.8 Critical EPSS 6.3% KEV · Not listed

Vendors

Adobe Apple Google and 3 more

Products

Air Desktop Runtime Air Sdk Air Sdk \& Compiler and 11 more

CVE-2016-4121

flash-plugin: multiple code execution issues fixed in APSB16-15

Use-after-free vulnerability in Adobe Flash Player before 18.0.0.352 and 19.x through 21.x before 21.0.0.242 on Windows and OS X and before 11.2.202.621 on Linux allows attackers to execute arbitrary code via unspecified vectors, a different vulnerability than CVE-2016-1097, CVE-2016-1106, CVE-2016-1107, CVE-2016-1108, CVE-2016-1109, CVE-2016-1110, CVE-2016-4108, and CVE-2016-4110.

CVSS 3.1 · 9.8 Critical EPSS 10.0% KEV · Not listed

Vendors

Adobe Apple Google and 3 more

Products

Air Desktop Runtime Air Sdk Air Sdk \& Compiler and 11 more

CVE-2016-4122

flash-plugin: multiple code execution issues fixed in APSB16-18

Unspecified vulnerability in Adobe Flash Player 21.0.0.242 and earlier, as used in the Adobe Flash libraries in Microsoft Internet Explorer 10 and 11 and Microsoft Edge, has unknown impact and attack vectors, a different vulnerability than other CVEs listed in MS16-083.

CVSS 3.1 · 8.8 High EPSS 3.8% KEV · Not listed

Vendors

Adobe Apple Google and 5 more

Products

Flash Player Flash Player Desktop Runtime Mac Os X and 12 more

CVE-2016-4123

flash-plugin: multiple code execution issues fixed in APSB16-18

Unspecified vulnerability in Adobe Flash Player 21.0.0.242 and earlier, as used in the Adobe Flash libraries in Microsoft Internet Explorer 10 and 11 and Microsoft Edge, has unknown impact and attack vectors, a different vulnerability than other CVEs listed in MS16-083.

CVSS 3.1 · 8.8 High EPSS 3.8% KEV · Not listed

Vendors

Adobe Apple Google and 5 more

Products

Flash Player Flash Player Desktop Runtime Mac Os X and 12 more

CVE-2016-4124

flash-plugin: multiple code execution issues fixed in APSB16-18

Unspecified vulnerability in Adobe Flash Player 21.0.0.242 and earlier, as used in the Adobe Flash libraries in Microsoft Internet Explorer 10 and 11 and Microsoft Edge, has unknown impact and attack vectors, a different vulnerability than other CVEs listed in MS16-083.

CVSS 3.1 · 8.8 High EPSS 3.8% KEV · Not listed

Vendors

Adobe Apple Google and 5 more

Products

Flash Player Flash Player Desktop Runtime Mac Os X and 12 more

CVE-2016-4125

flash-plugin: multiple code execution issues fixed in APSB16-18

Unspecified vulnerability in Adobe Flash Player 21.0.0.242 and earlier, as used in the Adobe Flash libraries in Microsoft Internet Explorer 10 and 11 and Microsoft Edge, has unknown impact and attack vectors, a different vulnerability than other CVEs listed in MS16-083.

CVSS 3.1 · 8.8 High EPSS 3.8% KEV · Not listed

Vendors

Adobe Apple Google and 5 more

Products

Flash Player Flash Player Desktop Runtime Mac Os X and 12 more

CVE-2016-4127

flash-plugin: multiple code execution issues fixed in APSB16-18

Unspecified vulnerability in Adobe Flash Player 21.0.0.242 and earlier, as used in the Adobe Flash libraries in Microsoft Internet Explorer 10 and 11 and Microsoft Edge, has unknown impact and attack vectors, a different vulnerability than other CVEs listed in MS16-083.

CVSS 3.1 · 8.8 High EPSS 3.8% KEV · Not listed

Vendors

Adobe Apple Google and 5 more

Products

Flash Player Flash Player Desktop Runtime Mac Os X and 12 more

CVE-2016-4128

flash-plugin: multiple code execution issues fixed in APSB16-18

Unspecified vulnerability in Adobe Flash Player 21.0.0.242 and earlier, as used in the Adobe Flash libraries in Microsoft Internet Explorer 10 and 11 and Microsoft Edge, has unknown impact and attack vectors, a different vulnerability than other CVEs listed in MS16-083.

CVSS 3.1 · 8.8 High EPSS 3.8% KEV · Not listed

Vendors

Adobe Apple Google and 5 more

Products

Flash Player Flash Player Desktop Runtime Mac Os X and 12 more

CVE-2016-4129

flash-plugin: multiple code execution issues fixed in APSB16-18

Unspecified vulnerability in Adobe Flash Player 21.0.0.242 and earlier, as used in the Adobe Flash libraries in Microsoft Internet Explorer 10 and 11 and Microsoft Edge, has unknown impact and attack vectors, a different vulnerability than other CVEs listed in MS16-083.

CVSS 3.1 · 8.8 High EPSS 3.8% KEV · Not listed

Vendors

Adobe Apple Google and 5 more

Products

Flash Player Flash Player Desktop Runtime Mac Os X and 12 more