FreeBSD7DA1DA96-24BB-11E6-BD31-3065EC8FD3ECchromium -- multiple vulnerabilities
9.8 High
CVSS3
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
NONE
User Interaction
NONE
Scope
UNCHANGED
Confidentiality Impact
HIGH
Integrity Impact
HIGH
Availability Impact
HIGH
CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
10 High
CVSS2
Access Vector
NETWORK
Access Complexity
LOW
Authentication
NONE
Confidentiality Impact
COMPLETE
Integrity Impact
COMPLETE
Availability Impact
COMPLETE
AV:N/AC:L/Au:N/C:C/I:C/A:C
0.021 Low
EPSS
Percentile
89.1%
Google Chrome Releases reports:
9 security fixes in this release, including:
[574802] High CVE-2016-1660: Out-of-bounds write in Blink.
Credit to Atte Kettunen of OUSPG.
[601629] High CVE-2016-1661: Memory corruption in cross-process
frames. Credit to Wadih Matar.
[603732] High CVE-2016-1662: Use-after-free in extensions.
Credit to Rob Wu.
[603987] High CVE-2016-1663: Use-after-free in Blink’s V8
bindings. Credit to anonymous.
[597322] Medium CVE-2016-1664: Address bar spoofing. Credit to
Wadih Matar.
[606181] Medium CVE-2016-1665: Information leak in V8. Credit
to HyungSeok Han.
[607652] CVE-2016-1666: Various fixes from internal audits,
fuzzing and other initiatives.
Related
9.8 High
CVSS3
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
NONE
User Interaction
NONE
Scope
UNCHANGED
Confidentiality Impact
HIGH
Integrity Impact
HIGH
Availability Impact
HIGH
CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
10 High
CVSS2
Access Vector
NETWORK
Access Complexity
LOW
Authentication
NONE
Confidentiality Impact
COMPLETE
Integrity Impact
COMPLETE
Availability Impact
COMPLETE
AV:N/AC:L/Au:N/C:C/I:C/A:C
0.021 Low
EPSS
Percentile
89.1%