Search vulnerabilities

Use the Query Builder to create your own search query, or check out the documentation to learn the search syntax.

Results 4,046

Export CSV
CVE-2016-1656

chromium-browser: android downloaded file path restriction bypass

The download implementation in Google Chrome before 50.0.2661.75 on Android allows remote attackers to bypass intended pathname restrictions via unspecified vectors.

CVSS 3.0 · 7.5 High EPSS 1.2% KEV · Not listed
Vendors
Google Opensuse Redhat and 1 more
Products
Android Chrome Leap and 2 more
CVE-2015-8822

flash-plugin: multiple code execution issues fixed in APSB15-32

Use-after-free vulnerability in Adobe Flash Player before 18.0.0.268 and 19.x and 20.x before 20.0.0.228 on Windows and OS X and before 11.2.202.554 on Linux, Adobe AIR before 20.0.0.204, Adobe AIR SDK before 20.0.0.204, and Adobe AIR SDK & Compiler before 20.0.0.204 allows attackers to execute arbitrary code via crafted MPEG-4 data, a different vulnerability than CVE-2015-8048, CVE-2015-8049, CVE-2015-8050, CVE-2015-8055, CVE-2015-8056, CVE-2015-8057, CVE-2015-8058, CVE-2015-8059, CVE-2015-8061, CVE-2015-8062, CVE-2015-8063, CVE-2015-8064, CVE-2015-8065, CVE-2015-8066, CVE-2015-8067, CVE-2015-8068, CVE-2015-8069, CVE-2015-8070, CVE-2015-8071, CVE-2015-8401, CVE-2015-8402, CVE-2015-8403, CVE-2015-8404, CVE-2015-8405, CVE-2015-8406, CVE-2015-8410, CVE-2015-8411, CVE-2015-8412, CVE-2015-8413, CVE-2015-8414, CVE-2015-8420, CVE-2015-8421, CVE-2015-8422, CVE-2015-8423, CVE-2015-8424, CVE-2015-8425, CVE-2015-8426, CVE-2015-8427, CVE-2015-8428, CVE-2015-8429, CVE-2015-8430, CVE-2015-8431, CVE-2015-8432, CVE-2015-8433, CVE-2015-8434, CVE-2015-8435, CVE-2015-8436, CVE-2015-8437, CVE-2015-8441, CVE-2015-8442, CVE-2015-8447, CVE-2015-8448, CVE-2015-8449, CVE-2015-8450, CVE-2015-8452, CVE-2015-8454, CVE-2015-8653, CVE-2015-8655, and CVE-2015-8821.

CVSS 3.1 · 8.8 High EPSS 6.5% KEV · Not listed
Vendors
Adobe Apple Google and 3 more
Products
Air Air Desktop Runtime Air Sdk and 13 more
CVE-2014-4209

OpenJDK: SubjectDelegator protection insufficient (JMX, 8029755)

Unspecified vulnerability in Oracle Java SE 5.0u65, 6u75, 7u60, and 8u5 allows remote attackers to affect confidentiality and integrity via vectors related to JMX.

CVSS 2.0 · 6.4 Medium EPSS 3.8% KEV · Not listed
Vendors
Oracle Redhat
Products
Jdk Jre Enterprise Linux and 3 more
CVE-2014-4208

JDK: unspecified vulnerability fixed in 7u65 and 8u11 (Deployment)

Unspecified vulnerability in the Java SE component in Oracle Java SE 7u60 and 8u5 allows remote attackers to affect integrity via unknown vectors related to Deployment, a different vulnerability than CVE-2014-4220.

CVSS 2.0 · 2.6 Low EPSS 2.9% KEV · Not listed
Vendors
Oracle Redhat
Products
Jdk Jre Rhel Extras and 1 more
CVE-2016-1657

chromium-browser: address bar spoofing

The WebContentsImpl::FocusLocationBarByDefault function in content/browser/web_contents/web_contents_impl.cc in Google Chrome before 50.0.2661.75 mishandles focus for certain about:blank pages, which allows remote attackers to spoof the address bar via a crafted URL.

CVSS 3.0 · 4.3 Medium EPSS 1.2% KEV · Not listed
Vendors
Debian Google Novell and 2 more
Products
Debian Linux Chrome Suse Package Hub For Suse Linux Enterprise and 2 more
CVE-2015-8845

kernel: incorrect restoration of machine specific registers from userspace

The tm_reclaim_thread function in arch/powerpc/kernel/process.c in the Linux kernel before 4.4.1 on powerpc platforms does not ensure that TM suspend mode exists before proceeding with a tm_reclaim call, which allows local users to cause a denial of service (TM Bad Thing exception and panic) via a crafted application.

CVSS 3.0 · 5.5 Medium EPSS < 1% KEV · Not listed
Vendors
Linux Novell Redhat and 1 more
Products
Linux Kernel Suse Linux Enterprise Desktop Suse Linux Enterprise Server and 7 more
CVE-2016-1654

chromium-browser: uninitialized memory read in media

The media subsystem in Google Chrome before 50.0.2661.75 does not initialize an unspecified data structure, which allows remote attackers to cause a denial of service (invalid read operation) via unknown vectors.

CVSS 3.0 · 6.5 Medium EPSS 1.2% KEV · Not listed
Vendors
Canonical Debian Google and 3 more
Products
Ubuntu Linux Debian Linux Chrome and 3 more
CVE-2014-3499

docker: systemd socket activation results in privilege escalation

Docker 1.0.0 uses world-readable and world-writable permissions on the management socket, which allows local users to gain privileges via unspecified vectors.

CVSS 2.0 · 7.2 High EPSS < 1% KEV · Not listed
Vendors
Docker Fedoraproject Redhat
Products
Docker Fedora Rhel Extras Other
CVE-2016-1655

chromium-browser: use-after-free related to extensions

Google Chrome before 50.0.2661.75 does not properly consider that frame removal may occur during callback execution, which allows remote attackers to cause a denial of service (use-after-free) or possibly have unspecified other impact via a crafted extension.

CVSS 3.0 · 8.8 High EPSS 2.0% KEV · Not listed
Vendors
Canonical Debian Google and 3 more
Products
Ubuntu Linux Debian Linux Chrome and 3 more
CVE-2016-1658

chromium-browser: potential leak of sensitive information to malicious extensions

The Extensions subsystem in Google Chrome before 50.0.2661.75 incorrectly relies on GetOrigin method calls for origin comparisons, which allows remote attackers to bypass the Same Origin Policy and obtain sensitive information via a crafted extension.

CVSS 3.0 · 4.3 Medium EPSS 1.2% KEV · Not listed
Vendors
Debian Google Novell and 2 more
Products
Debian Linux Chrome Suse Package Hub For Suse Linux Enterprise and 2 more
CVE-2016-1664

chromium-browser: address bar spoofing

The HistoryController::UpdateForCommit function in content/renderer/history_controller.cc in Google Chrome before 50.0.2661.94 mishandles the interaction between subframe forward navigations and other forward navigations, which allows remote attackers to spoof the address bar via a crafted web site.

CVSS 3.0 · 4.3 Medium EPSS < 1% KEV · Not listed
Vendors
Google Opensuse Redhat
Products
Chrome Opensuse Enterprise Linux Desktop Supplementary and 4 more
CVE-2016-1677

chromium-browser: type confusion in v8

uri.js in Google V8 before 5.1.281.26, as used in Google Chrome before 51.0.2704.63, uses an incorrect array type, which allows remote attackers to obtain sensitive information by calling the decodeURI function and leveraging "type confusion."

CVSS 3.0 · 6.5 Medium EPSS 3.1% KEV · Not listed
Vendors
Canonical Debian Google and 3 more
Products
Ubuntu Linux Debian Linux Chrome and 8 more
CVE-2014-3199

chromium: multiple security fixes in Chrome 38.0.2125.101

The wrap function in bindings/core/v8/custom/V8EventCustom.cpp in the V8 bindings in Blink, as used in Google Chrome before 38.0.2125.101, has an erroneous fallback outcome for wrapper-selection failures, which allows remote attackers to cause a denial of service via vectors that trigger stopping a worker process that had been handling an Event object.

CVSS 2.0 · 5.0 Medium EPSS 1.3% KEV · Not listed
Vendors
Google Redhat
Products
Chrome Enterprise Linux Desktop Supplementary Enterprise Linux Server Supplementary and 3 more
CVE-2014-3198

chromium: OOB reads in PDFium fixed in Chrome 38.0.2125.101

The Instance::HandleInputEvent function in pdf/instance.cc in the PDFium component in Google Chrome before 38.0.2125.101 interprets a certain -1 value as an index instead of a no-visible-page error code, which allows remote attackers to cause a denial of service (out-of-bounds read) via unspecified vectors.

CVSS 2.0 · 5.0 Medium EPSS 1.3% KEV · Not listed
Vendors
Google Redhat
Products
Chrome Enterprise Linux Desktop Supplementary Enterprise Linux Server Supplementary and 3 more
CVE-2016-1649

chromium-browser: buffer overflow in libANGLE

The Program::getUniformInternal function in Program.cpp in libANGLE, as used in Google Chrome before 49.0.2623.108, does not properly handle a certain data-type mismatch, which allows remote attackers to cause a denial of service (buffer overflow) or possibly have unspecified other impact via crafted shader stages.

CVSS 3.0 · 8.8 High EPSS 2.9% KEV · Not listed
Vendors
Canonical Debian Google and 2 more
Products
Ubuntu Linux Debian Linux Chrome and 2 more
CVE-2014-3197

chromium: information leak in XSS Auditor fixed in Chrome 38.0.2125.101

The NavigationScheduler::schedulePageBlock function in core/loader/NavigationScheduler.cpp in Blink, as used in Google Chrome before 38.0.2125.101, does not properly provide substitute data for pages blocked by the XSS auditor, which allows remote attackers to obtain sensitive information via a crafted web site.

CVSS 2.0 · 5.0 Medium EPSS 1.0% KEV · Not listed
Vendors
Google Redhat
Products
Chrome Enterprise Linux Desktop Supplementary Enterprise Linux Server Supplementary and 3 more
CVE-2014-3195

v8: information leak fixed in Google Chrome 38.0.2125.101

Google V8, as used in Google Chrome before 38.0.2125.101, does not properly track JavaScript heap-memory allocations as allocations of uninitialized memory and does not properly concatenate arrays of double-precision floating-point numbers, which allows remote attackers to obtain sensitive information via crafted JavaScript code, related to the PagedSpace::AllocateRaw and NewSpace::AllocateRaw functions in heap/spaces-inl.h, the LargeObjectSpace::AllocateRaw function in heap/spaces.cc, and the Runtime_ArrayConcat function in runtime.cc.

CVSS 2.0 · 5.0 Medium EPSS 1.3% KEV · Not listed
Vendors
Google Redhat
Products
Chrome Enterprise Linux Desktop Supplementary Enterprise Linux Server Supplementary and 3 more
CVE-2016-1648

chromium-browser: use-after-free in Extensions

Use-after-free vulnerability in the GetLoadTimes function in renderer/loadtimes_extension_bindings.cc in the Extensions implementation in Google Chrome before 49.0.2623.108 allows remote attackers to cause a denial of service or possibly have unspecified other impact via crafted JavaScript code.

CVSS 3.0 · 8.8 High EPSS 1.9% KEV · Not listed
Vendors
Debian Google Opensuse and 1 more
Products
Debian Linux Chrome Opensuse and 1 more
CVE-2016-1650

chromium-browser: various fixes from internal audits

The PageCaptureSaveAsMHTMLFunction::ReturnFailure function in browser/extensions/api/page_capture/page_capture_api.cc in Google Chrome before 49.0.2623.108 allows attackers to cause a denial of service or possibly have unspecified other impact by triggering an error in creating an MHTML document.

CVSS 3.0 · 8.8 High EPSS 1.2% KEV · Not listed
Vendors
Debian Google Opensuse and 1 more
Products
Debian Linux Chrome Opensuse and 1 more