Search vulnerabilities

Use the Query Builder to create your own search query, or check out the documentation to learn the search syntax.

Results 8,163

Export CSV
CVE-2016-5147

chromium-browser: universal xss in blink

Blink, as used in Google Chrome before 53.0.2785.89 on Windows and OS X and before 53.0.2785.92 on Linux, mishandles deferred page loads, which allows remote attackers to inject arbitrary web script or HTML via a crafted web site, aka "Universal XSS (UXSS)."

CVSS 3.0 · 6.1 Medium EPSS 1.3% KEV · Not listed
Vendors
Google Redhat
Products
Chrome Rhel Extras
CVE-2016-5148

chromium-browser: universal xss in blink

Cross-site scripting (XSS) vulnerability in Blink, as used in Google Chrome before 53.0.2785.89 on Windows and OS X and before 53.0.2785.92 on Linux, allows remote attackers to inject arbitrary web script or HTML via vectors related to widget updates, aka "Universal XSS (UXSS)."

CVSS 3.0 · 6.1 Medium EPSS 1.2% KEV · Not listed
Vendors
Google Redhat
Products
Chrome Rhel Extras
CVE-2016-5149

chromium-browser: script injection in extensions

The extensions subsystem in Google Chrome before 53.0.2785.89 on Windows and OS X and before 53.0.2785.92 on Linux relies on an IFRAME source URL to identify an associated extension, which allows remote attackers to conduct extension-bindings injection attacks by leveraging script access to a resource that initially has the about:blank URL.

CVSS 3.0 · 8.8 High EPSS 1.3% KEV · Not listed
Vendors
Google Opensuse Redhat
Products
Chrome Leap Rhel Extras
CVE-2016-5150

chromium-browser: use after free in blink

WebKit/Source/bindings/modules/v8/V8BindingForModules.cpp in Blink, as used in Google Chrome before 53.0.2785.89 on Windows and OS X and before 53.0.2785.92 on Linux, has an Indexed Database (aka IndexedDB) API implementation that does not properly restrict key-path evaluation, which allows remote attackers to cause a denial of service (use-after-free) or possibly have unspecified other impact via crafted JavaScript code that leverages certain side effects.

CVSS 3.0 · 8.8 High EPSS 1.3% KEV · Not listed
Vendors
Google Opensuse Redhat
Products
Chrome Leap Rhel Extras
CVE-2016-5151

chromium-browser: use after free in pdfium

PDFium in Google Chrome before 53.0.2785.89 on Windows and OS X and before 53.0.2785.92 on Linux mishandles timers, which allows remote attackers to cause a denial of service (use-after-free) or possibly have unspecified other impact via a crafted PDF document, related to fpdfsdk/javascript/JS_Object.cpp and fpdfsdk/javascript/app.cpp.

CVSS 3.0 · 8.8 High EPSS 1.4% KEV · Not listed
Vendors
Google Opensuse Redhat
Products
Chrome Leap Rhel Extras
CVE-2016-5152

chromium-browser: heap overflow in pdfium

Integer overflow in the opj_tcd_get_decoded_tile_size function in tcd.c in OpenJPEG, as used in PDFium in Google Chrome before 53.0.2785.89 on Windows and OS X and before 53.0.2785.92 on Linux, allows remote attackers to cause a denial of service (heap-based buffer overflow) or possibly have unspecified other impact via crafted JPEG 2000 data.

CVSS 3.0 · 8.8 High EPSS 1.6% KEV · Not listed
Vendors
Google Opensuse Redhat
Products
Chrome Leap Rhel Extras
CVE-2016-5153

chromium-browser: use after destruction in blink

The Web Animations implementation in Blink, as used in Google Chrome before 53.0.2785.89 on Windows and OS X and before 53.0.2785.92 on Linux, improperly relies on list iteration, which allows remote attackers to cause a denial of service (use-after-destruction) or possibly have unspecified other impact via a crafted web site.

CVSS 3.0 · 8.8 High EPSS 1.1% KEV · Not listed
Vendors
Google Opensuse Redhat
Products
Chrome Leap Rhel Extras
CVE-2016-5154

chromium-browser: heap overflow in pdfium

Multiple heap-based buffer overflows in PDFium, as used in Google Chrome before 53.0.2785.89 on Windows and OS X and before 53.0.2785.92 on Linux, allow remote attackers to cause a denial of service or possibly have unspecified other impact via a crafted JBig2 image.

CVSS 3.0 · 8.8 High EPSS 1.4% KEV · Not listed
Vendors
Google Opensuse Redhat
Products
Chrome Leap Rhel Extras
CVE-2016-5155

chromium-browser: address bar spoofing

Google Chrome before 53.0.2785.89 on Windows and OS X and before 53.0.2785.92 on Linux does not properly validate access to the initial document, which allows remote attackers to spoof the address bar via a crafted web site.

CVSS 3.0 · 6.5 Medium EPSS 1.2% KEV · Not listed
Vendors
Google Opensuse Redhat
Products
Chrome Leap Rhel Extras
CVE-2016-5156

chromium-browser: use after free in event bindings

extensions/renderer/event_bindings.cc in the event bindings in Google Chrome before 53.0.2785.89 on Windows and OS X and before 53.0.2785.92 on Linux attempts to process filtered events after failure to add an event matcher, which allows remote attackers to cause a denial of service (use-after-free) or possibly have unspecified other impact via unknown vectors.

CVSS 3.0 · 8.8 High EPSS 1.3% KEV · Not listed
Vendors
Google Opensuse Redhat
Products
Chrome Leap Rhel Extras
CVE-2016-5157

chromium-browser: heap overflow in pdfium

Heap-based buffer overflow in the opj_dwt_interleave_v function in dwt.c in OpenJPEG, as used in PDFium in Google Chrome before 53.0.2785.89 on Windows and OS X and before 53.0.2785.92 on Linux, allows remote attackers to execute arbitrary code via crafted coordinate values in JPEG 2000 data.

CVSS 3.0 · 8.8 High EPSS 4.7% KEV · Not listed
Vendors
Fedoraproject Google Opensuse and 1 more
Products
Fedora Chrome Leap and 1 more
CVE-2016-5158

openjpeg: heap overflow due to unsafe use of opj_aligned_malloc

Multiple integer overflows in the opj_tcd_init_tile function in tcd.c in OpenJPEG, as used in PDFium in Google Chrome before 53.0.2785.89 on Windows and OS X and before 53.0.2785.92 on Linux, allow remote attackers to cause a denial of service (heap-based buffer overflow) or possibly have unspecified other impact via crafted JPEG 2000 data.

CVSS 3.0 · 8.8 High EPSS 1.5% KEV · Not listed
Vendors
Google Opensuse Redhat
Products
Chrome Leap Enterprise Linux and 1 more
CVE-2016-5159

openjpeg: heap overflow in parsing of JPEG2000 code blocks

Multiple integer overflows in OpenJPEG, as used in PDFium in Google Chrome before 53.0.2785.89 on Windows and OS X and before 53.0.2785.92 on Linux, allow remote attackers to cause a denial of service (heap-based buffer overflow) or possibly have unspecified other impact via crafted JPEG 2000 data that is mishandled during opj_aligned_malloc calls in dwt.c and t1.c.

CVSS 3.0 · 8.8 High EPSS 2.0% KEV · Not listed
Vendors
Google Opensuse Redhat
Products
Chrome Leap Enterprise Linux and 1 more
CVE-2016-5160

chromium-browser: extensions web accessible resources bypass

The AllowCrossRendererResourceLoad function in extensions/browser/url_request_util.cc in Google Chrome before 53.0.2785.89 on Windows and OS X and before 53.0.2785.92 on Linux does not properly use an extension's manifest.json web_accessible_resources field for restrictions on IFRAME elements, which makes it easier for remote attackers to conduct clickjacking attacks, and trick users into changing extension settings, via a crafted web site, a different vulnerability than CVE-2016-5162.

CVSS 3.0 · 6.5 Medium EPSS 1.5% KEV · Not listed
Vendors
Google Opensuse Redhat
Products
Chrome Leap Rhel Extras
CVE-2016-5161

chromium-browser: type confusion in blink

The EditingStyle::mergeStyle function in WebKit/Source/core/editing/EditingStyle.cpp in Blink, as used in Google Chrome before 53.0.2785.89 on Windows and OS X and before 53.0.2785.92 on Linux, mishandles custom properties, which allows remote attackers to cause a denial of service or possibly have unspecified other impact via a crafted web site that leverages "type confusion" in the StylePropertySerializer class.

CVSS 3.0 · 8.8 High EPSS 1.4% KEV · Not listed
Vendors
Google Opensuse Redhat
Products
Chrome Leap Rhel Extras
CVE-2016-5162

chromium-browser: extensions web accessible resources bypass

The AllowCrossRendererResourceLoad function in extensions/browser/url_request_util.cc in Google Chrome before 53.0.2785.89 on Windows and OS X and before 53.0.2785.92 on Linux does not properly use an extension's manifest.json web_accessible_resources field for restrictions on IFRAME elements, which makes it easier for remote attackers to conduct clickjacking attacks, and trick users into changing extension settings, via a crafted web site, a different vulnerability than CVE-2016-5160.

CVSS 3.0 · 6.5 Medium EPSS 1.4% KEV · Not listed
Vendors
Google Opensuse Redhat
Products
Chrome Leap Rhel Extras
CVE-2016-5163

chromium-browser: address bar spoofing

The bidirectional-text implementation in Google Chrome before 53.0.2785.89 on Windows and OS X and before 53.0.2785.92 on Linux does not ensure left-to-right (LTR) rendering of URLs, which allows remote attackers to spoof the address bar via crafted right-to-left (RTL) Unicode text, related to omnibox/SuggestionView.java and omnibox/UrlBar.java in Chrome for Android.

CVSS 3.0 · 4.3 Medium EPSS 1.2% KEV · Not listed
Vendors
Google Opensuse Redhat
Products
Chrome Leap Rhel Extras
CVE-2016-5164

chromium-browser: universal xss using devtools

Cross-site scripting (XSS) vulnerability in WebKit/Source/platform/v8_inspector/V8Debugger.cpp in Blink, as used in Google Chrome before 53.0.2785.89 on Windows and OS X and before 53.0.2785.92 on Linux, allows remote attackers to inject arbitrary web script or HTML into the Developer Tools (aka DevTools) subsystem via a crafted web site, aka "Universal XSS (UXSS)."

CVSS 3.0 · 6.1 Medium EPSS 1.0% KEV · Not listed
Vendors
Google Opensuse Redhat
Products
Chrome Leap Rhel Extras
CVE-2016-5165

chromium-browser: script injection in devtools

Cross-site scripting (XSS) vulnerability in the Developer Tools (aka DevTools) subsystem in Google Chrome before 53.0.2785.89 on Windows and OS X and before 53.0.2785.92 on Linux allows remote attackers to inject arbitrary web script or HTML via the settings parameter in a chrome-devtools-frontend.appspot.com URL's query string.

CVSS 3.0 · 6.1 Medium EPSS 1.2% KEV · Not listed
Vendors
Google Opensuse Redhat
Products
Chrome Leap Rhel Extras
CVE-2016-5166

chromium-browser: smb relay attack via save page as

The download implementation in Google Chrome before 53.0.2785.89 on Windows and OS X and before 53.0.2785.92 on Linux does not properly restrict saving a file:// URL that is referenced by an http:// URL, which makes it easier for user-assisted remote attackers to discover NetNTLM hashes and conduct SMB relay attacks via a crafted web page that is accessed with the "Save page as" menu choice.

CVSS 3.0 · 3.1 Low EPSS 1.3% KEV · Not listed
Vendors
Google Opensuse Redhat
Products
Chrome Leap Rhel Extras