Summary
It was discovered that a long running unload handler could cause an
incognito profile to be reused in some circumstances. If a user were
tricked in to opening a specially crafted website, an attacker could
potentially exploit this to obtain sensitive information. (CVE-2016-1586)
Multiple security vulnerabilities were discovered in Chromium. If a user
were tricked in to opening a specially crafted website, an attacker could
potentially exploit these to conduct cross-site scripting (XSS) attacks,
spoof an application's URL bar, obtain sensitive information, cause a
denial of service via application crash, or execute arbitrary code.
(CVE-2016-5181, CVE-2016-5182, CVE-2016-5185, CVE-2016-5186,
CVE-2016-5187, CVE-2016-5188, CVE-2016-5189, CVE-2016-5192, CVE-2016-5194)
Fixed packages 2
| Release | Package | Fixed in |
|---|---|---|
| Ubuntu · 14.04 LTS 14.04:LTS | oxide-qt | 1.18.3-0ubuntu0.14.04.1 |
| Ubuntu · 16.04 LTS 16.04:LTS | oxide-qt | 1.18.3-0ubuntu0.16.04.1 |
Vulnerabilities 10
-
Low 1.8
A malicious webview could install long-lived unload handlers that re-use an incognito BrowserContext that is queued for…
-
Unscored —
Blink in Google Chrome prior to 54.0.2840.59 for Windows, Mac, and Linux; 54.0.2840.85 for Android permitted execution …
-
Unscored —
Blink in Google Chrome prior to 54.0.2840.59 for Windows, Mac, and Linux; 54.0.2840.85 for Android had insufficient val…
-
Unscored —
Blink in Google Chrome prior to 54.0.2840.59 for Windows, Mac, and Linux; 54.0.2840.85 for Android incorrectly allowed …
-
Unscored —
Devtools in Google Chrome prior to 54.0.2840.59 for Windows, Mac, and Linux; 54.0.2840.85 for Android incorrectly handl…
-
Unscored —
Google Chrome prior to 54.0.2840.85 for Android incorrectly handled rapid transition into and out of full screen mode, …
-
Unscored —
Multiple issues in Blink in Google Chrome prior to 54.0.2840.59 for Windows, Mac, and Linux allow a remote attacker to …
-
Unscored —
Google Chrome prior to 54.0.2840.59 for Windows, Mac, and Linux; 54.0.2840.85 for Android permitted navigation to blob …
-
Unscored —
Blink in Google Chrome prior to 54.0.2840.59 for Windows missed a CORS check on redirect in TextTrackLoader, which allo…
-
Unscored —
Unspecified vulnerabilities in Google Chrome before 54.0.2840.59.
References
-
report
https://ubuntu.com/security/CVE-2016-1586
-
report
https://ubuntu.com/security/CVE-2016-5181
-
report
https://ubuntu.com/security/CVE-2016-5182
-
report
https://ubuntu.com/security/CVE-2016-5185
-
report
https://ubuntu.com/security/CVE-2016-5186
-
report
https://ubuntu.com/security/CVE-2016-5187
-
report
https://ubuntu.com/security/CVE-2016-5188
-
report
https://ubuntu.com/security/CVE-2016-5189
-
report
https://ubuntu.com/security/CVE-2016-5192
-
report
https://ubuntu.com/security/CVE-2016-5194