Archive

23 July 2016

Vulnerabilities first published on this day (UTC), newest first.

← June 2016 2016 / July /23 August 2016 →

All Critical High Medium Low Exploited only Public exploit

18 results · Feed

Unscored —

CVE-2016-1709

Heap-based buffer overflow in the ByteArray::Get method in data/byte_array.cc in Google sfntly before 2016-06-10, as us…

chromium-browser Ubuntu

Jul 23, 2016
Unscored —

CVE-2016-1705

Multiple unspecified vulnerabilities in Google Chrome before 52.0.2743.82 allow attackers to cause a denial of service …

chromium-browser oxide-qt Ubuntu

Jul 23, 2016
Unscored —

CVE-2016-1706

The PPAPI implementation in Google Chrome before 52.0.2743.82 does not validate the origin of IPC messages to the plugi…

chromium-browser oxide-qt Ubuntu

Jul 23, 2016
Unscored —

CVE-2016-1711

WebKit/Source/core/loader/FrameLoader.cpp in Blink, as used in Google Chrome before 52.0.2743.82, does not disable fram…

chromium-browser oxide-qt Ubuntu

Jul 23, 2016
Unscored —

CVE-2016-1708

The Chrome Web Store inline-installation implementation in the Extensions subsystem in Google Chrome before 52.0.2743.8…

chromium-browser Ubuntu

Jul 23, 2016
Unscored —

CVE-2016-1710

The ChromeClientImpl::createWindow method in WebKit/Source/web/ChromeClientImpl.cpp in Blink, as used in Google Chrome …

chromium-browser oxide-qt Ubuntu

Jul 23, 2016
Unscored —

CVE-2016-1707

ios/web/web_state/ui/crw_web_controller.mm in Google Chrome before 52.0.2743.82 on iOS does not ensure that an invalid …

Jul 23, 2016
Unscored —

CVE-2016-5127

Use-after-free vulnerability in WebKit/Source/core/editing/VisibleUnits.cpp in Blink, as used in Google Chrome before 5…

chromium-browser oxide-qt Ubuntu

Jul 23, 2016
Unscored —

CVE-2016-5137

The CSPSource::schemeMatches function in WebKit/Source/core/frame/csp/CSPSource.cpp in the Content Security Policy (CSP…

chromium-browser oxide-qt Ubuntu

Jul 23, 2016
Unscored —

CVE-2016-5134

net/proxy/proxy_service.cc in the Proxy Auto-Config (PAC) feature in Google Chrome before 52.0.2743.82 does not ensure …

chromium-browser oxide-qt Ubuntu

Jul 23, 2016
High 8.8

CVE-2016-5131

Use-after-free vulnerability in libxml2 through 2.9.4, as used in Google Chrome before 52.0.2743.82, allows remote atta…

chromium-browser oxide-qt libxml2 libxml2 Debian Ubuntu Alpine

Jul 23, 2016
Unscored —

CVE-2016-5135

WebKit/Source/core/html/parser/HTMLPreloadScanner.cpp in Blink, as used in Google Chrome before 52.0.2743.82, does not …

chromium-browser oxide-qt Ubuntu

Jul 23, 2016
Unscored —

CVE-2016-5128

objects.cc in Google V8 before 5.2.361.27, as used in Google Chrome before 52.0.2743.82, does not prevent API intercept…

chromium-browser oxide-qt libv8-3.14 Ubuntu

Jul 23, 2016
Unscored —

CVE-2016-5136

Use-after-free vulnerability in extensions/renderer/user_script_injector.cc in the Extensions subsystem in Google Chrom…

chromium-browser Ubuntu

Jul 23, 2016
Unscored —

CVE-2016-5132

The Service Workers subsystem in Google Chrome before 52.0.2743.82 does not properly implement the Secure Contexts spec…

chromium-browser oxide-qt Ubuntu

Jul 23, 2016
Unscored —

CVE-2016-5130

content/renderer/history_controller.cc in Google Chrome before 52.0.2743.82 does not properly restrict multiple uses of…

chromium-browser oxide-qt Ubuntu

Jul 23, 2016
Unscored —

CVE-2016-5129

Google V8 before 5.2.361.32, as used in Google Chrome before 52.0.2743.82, does not properly process left-trimmed objec…

chromium-browser oxide-qt nodejs libv8-3.14 Ubuntu Alpine

Jul 23, 2016
Unscored —

CVE-2016-5133

Google Chrome before 52.0.2743.82 mishandles origin information during proxy authentication, which allows man-in-the-mi…

chromium-browser oxide-qt Ubuntu

Jul 23, 2016