25 September 2016

77 results · Feed

• Unscored —
  CVE-2016-7549

  Google Chrome before 53.0.2785.113 does not ensure that the recipient of a certain IPC message is a valid RenderFrame o…

  chromium-browser oxide-qt Ubuntu
  Sep 25, 2016
• Unscored —
  CVE-2016-5173

  The extensions subsystem in Google Chrome before 53.0.2785.113 does not properly restrict access to Object.prototype, w…

  chromium-browser Ubuntu
  Sep 25, 2016
• Unscored —
  CVE-2016-5170

  WebKit/Source/bindings/modules/v8/V8BindingForModules.cpp in Blink, as used in Google Chrome before 53.0.2785.113, does…

  chromium-browser oxide-qt Ubuntu
  Sep 25, 2016
• Unscored —
  CVE-2016-5175

  Multiple unspecified vulnerabilities in Google Chrome before 53.0.2785.113 allow attackers to cause a denial of service…

  chromium-browser oxide-qt Ubuntu
  Sep 25, 2016
• Unscored —
  CVE-2016-5172

  The parser in Google V8, as used in Google Chrome before 53.0.2785.113, mishandles scopes, which allows remote attacker…

  chromium-browser oxide-qt Ubuntu
  Sep 25, 2016
• Unscored —
  CVE-2016-5169

  Format string vulnerability in Google Chrome OS before 53.0.2785.103 allows remote attackers to cause a denial of servi…

  Sep 25, 2016
• Unscored —
  CVE-2016-5171

  WebKit/Source/bindings/templates/interface.cpp in Blink, as used in Google Chrome before 53.0.2785.113, does not preven…

  chromium-browser oxide-qt Ubuntu
  Sep 25, 2016
• Unscored —
  CVE-2016-5174

  browser/ui/cocoa/browser_window_controller_private.mm in Google Chrome before 53.0.2785.113 does not process fullscreen…

  chromium-browser Ubuntu
  Sep 25, 2016
• Unscored —
  CVE-2016-4698

  AppleMobileFileIntegrity in Apple iOS before 10 and OS X before 10.12 mishandles process entitlement and Team ID values…

  Sep 25, 2016
• Unscored —
  CVE-2016-4751

  The Safari Tabs component in Apple Safari before 10 allows remote attackers to spoof the address bar of a tab via a cra…

  Sep 25, 2016
• Unscored —
  CVE-2016-4739

  mDNSResponder in Apple OS X before 10.12, when VMnet.framework is used, arranges for a DNS proxy to listen on all inter…

  Sep 25, 2016
• Unscored —
  CVE-2016-4706

  cd9660 in Apple OS X before 10.12 allows local users to cause a denial of service via unspecified vectors.

  Sep 25, 2016
• Unscored —
  CVE-2016-4759

  WebKit in Apple iOS before 10, tvOS before 10, iTunes before 12.5.1 on Windows, and Safari before 10 allows remote atta…

  qtwebkit-source qtwebkit-opensource-src webkitgtk webkit2gtk Ubuntu
  Sep 25, 2016
• Unscored —
  CVE-2016-4763

  WKWebView in WebKit in Apple iOS before 10, iTunes before 12.5.1 on Windows, and Safari before 10 does not properly ver…

  qtwebkit-source qtwebkit-opensource-src webkitgtk Ubuntu
  Sep 25, 2016
• Unscored —
  CVE-2016-4694

  The Apache HTTP Server in Apple OS X before 10.12 and OS X Server before 5.2 follows RFC 3875 section 4.1.18 and theref…

  Sep 25, 2016
• Unscored —
  CVE-2016-4710

  WindowServer in Apple OS X before 10.12 allows local users to obtain root access via vectors that leverage "type confus…

  Sep 25, 2016
• Unscored —
  CVE-2016-4726

  IOAcceleratorFamily in Apple iOS before 10, OS X before 10.12, tvOS before 10, and watchOS before 3 allows attackers to…

  Sep 25, 2016
• Unscored —
  CVE-2016-4767

  WebKit in Apple iOS before 10, tvOS before 10, iTunes before 12.5.1 on Windows, and Safari before 10 allows remote atta…

  qtwebkit-source qtwebkit-opensource-src webkitgtk webkit2gtk Ubuntu
  Sep 25, 2016
• Unscored —
  CVE-2016-4611

  WebKit in Apple iOS before 10, Safari before 10, and tvOS before 10 allows remote attackers to execute arbitrary code o…

  qtwebkit-source qtwebkit-opensource-src webkitgtk Ubuntu
  Sep 25, 2016
• Unscored —
  CVE-2016-4709

  WindowServer in Apple OS X before 10.12 allows local users to obtain root access via vectors that leverage "type confus…

  Sep 25, 2016
• Unscored —
  CVE-2016-4778

  The kernel in Apple iOS before 10, OS X before 10.12, tvOS before 10, and watchOS before 3 allows attackers to execute …

  Sep 25, 2016
• Unscored —
  CVE-2016-4742

  NSSecureTextField in Apple OS X before 10.12 does not enable Secure Input, which allows attackers to discover credentia…

  Sep 25, 2016
• Critical 9.8
  CVE-2016-4658

  Nokogiri does not forbid namespace nodes in XPointer ranges

  xpointer.c in libxml2 before 2.9.5 (as used in Apple iOS before 10, OS X before 10.12, tvOS before 10, and watchOS before 3, and other products) does not forbid namespace nodes in XPointer ranges, which allows remote attackers to execute arbitrary code or cau…

  libxml2 libxml2 nokogiri Debian Ubuntu RubyGems
  Sep 25, 2016
• Unscored —
  CVE-2016-4701

  Application Firewall in Apple OS X before 10.12 allows local users to cause a denial of service via vectors involving a…

  Sep 25, 2016
• Unscored —
  CVE-2016-4696

  AppleEFIRuntime in Apple OS X before 10.12 allows attackers to execute arbitrary code in a privileged context or cause …

  Sep 25, 2016
• Unscored —
  CVE-2016-4748

  Perl in Apple OS X before 10.12 allows local users to bypass the taint-mode protection mechanism via a crafted environm…

  Sep 25, 2016
• Unscored —
  CVE-2016-4762

  WebKit in Apple iOS before 10, iTunes before 12.5.1 on Windows, iCloud before 6.0 on Windows, and Safari before 10 allo…

  qtwebkit-source qtwebkit-opensource-src webkitgtk webkit2gtk Ubuntu
  Sep 25, 2016
• Unscored —
  CVE-2016-4775

  The kernel in Apple OS X before 10.12, tvOS before 10, and watchOS before 3 allows local users to gain privileges or ca…

  Sep 25, 2016
• Unscored —
  CVE-2016-4729

  WebKit in Apple iOS before 10 and Safari before 10 allows remote attackers to execute arbitrary code or cause a denial …

  qtwebkit-source qtwebkit-opensource-src webkitgtk Ubuntu
  Sep 25, 2016
• Unscored —
  CVE-2016-4777

  The kernel in Apple iOS before 10, OS X before 10.12, tvOS before 10, and watchOS before 3 allows attackers to execute …

  Sep 25, 2016
• Unscored —
  CVE-2016-4717

  The File Bookmark component in Apple OS X before 10.12 mishandles scoped-bookmark file descriptors, which allows attack…

  Sep 25, 2016
• Unscored —
  CVE-2016-4733

  WebKit in Apple iOS before 10, Safari before 10, and tvOS before 10 allows remote attackers to execute arbitrary code o…

  qtwebkit-source qtwebkit-opensource-src webkitgtk webkit2gtk Ubuntu
  Sep 25, 2016
• Unscored —
  CVE-2016-4716

  diskutil in DiskArbitration in Apple OS X before 10.12 allows local users to gain privileges via unspecified vectors.

  Sep 25, 2016
• Unscored —
  CVE-2016-4718

  Buffer overflow in FontParser in Apple iOS before 10, OS X before 10.12, tvOS before 10, and watchOS before 3 allows re…

  Sep 25, 2016
• Unscored —
  CVE-2016-4707

  CFNetwork in Apple iOS before 10 and OS X before 10.12 mishandles Local Storage deletion, which allows local users to d…

  qtwebkit-source qtwebkit-opensource-src webkitgtk webkit2gtk Ubuntu
  Sep 25, 2016
• Unscored —
  CVE-2016-4712

  CoreCrypto in Apple iOS before 10, OS X before 10.12, tvOS before 10, and watchOS before 3 allows attackers to execute …

  Sep 25, 2016
• Unscored —
  CVE-2016-4728

  WebKit in Apple iOS before 10, tvOS before 10, iTunes before 12.5.1 on Windows, and Safari before 10 mishandles error p…

  qtwebkit-source qtwebkit-opensource-src webkitgtk webkit2gtk Ubuntu
  Sep 25, 2016
• Unscored —
  CVE-2016-4750

  S2 Camera in Apple iOS before 10 and OS X before 10.12 allows attackers to execute arbitrary code in a privileged conte…

  Sep 25, 2016
• Unscored —
  CVE-2016-4745

  The Kerberos 5 (aka krb5) PAM module in Apple OS X before 10.12 does not use constant-time operations for determining u…

  Sep 25, 2016
• Unscored —
  CVE-2016-4711

  CCrypt in corecrypto in CommonCrypto in Apple iOS before 10 and OS X before 10.12 allows attackers to discover cleartex…

  Sep 25, 2016