Lucene search
K
Database
Vendors
Products
Years
CVSS
Scanner
Agent Scanning
API Scanning
Manual Audit
Perimeter Scanner
Scanning
Projects
Email
Webhook
Plugins
Resources
Documents
Blog
Glossary
FAQ
Pricing
Contacts
About Us
Partners
Branding Guideline
kasperskyKaspersky LabKLA10691
HistoryNov 10, 2015 - 12:00 a.m.

KLA10691 Multiple vulnerabilities in Google Chrome

2015-11-1000:00:00
Kaspersky Lab
threats.kaspersky.com
25

9.3 High

CVSS2

Access Vector

NETWORK

Access Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:N/AC:M/Au:N/C:C/I:C/A:C

0.035 Low

EPSS

Percentile

91.5%

JSON

Detect date:

11/10/2015

Severity:

Critical

Description:

Multiple serious vulnerabilities have been found in Google Chrome. Malicious users can exploit these vulnerabilities to bypass security restrictions, execute arbitrary code or obtain sensitive information.

Affected products:

Google Chrome versions earlier than 46.0.2490.86 (All branches)

Solution:

Update to the latest version. File with name old_chrome can be still detected after update. It caused by Google Chrome update policy which does not remove old versions when installing updates. Try to contact vendor for further delete instructions or ignore such kind of alerts at your own risk.
Get Chrome

Original advisories:

Google Chrome release blog

Impacts:

ACE

Related products:

Google Chrome

CVE-IDS:

CVE-2015-76569.3Critical
CVE-2015-76559.3Critical
CVE-2015-76529.3Critical
CVE-2015-76619.3Critical
CVE-2015-76627.8Critical
CVE-2015-76599.3Critical
CVE-2015-76519.3Critical
CVE-2015-76549.3Critical
CVE-2015-76539.3Critical
CVE-2015-76579.3Critical
CVE-2015-80429.3Critical
CVE-2015-76609.3Critical
CVE-2015-76589.3Critical
CVE-2015-13027.5Critical

Exploitation:

Public exploits exist for this vulnerability.

References

Related

kaspersky 1
nessus 22
openvas 14
altlinux 2
redhat 2
mageia 2
archlinux 2
freebsd 2
prion 18
ubuntucve 18
cve 18
checkpoint_advisories 8
gentoo 2
zdi 12
zdt 1
chrome 1
debiancve 1
securityvulns 1
osv 1
debian 2
kaspersky
kaspersky
KLA10690 Multiple vulnerabilities in Adobe products
2015-11-10 00:00:00
nessus
nessus
Google Chrome < 46.0.2490.86 Multiple Vulnerabilities
2015-12-04 00:00:00
Adobe AIR < 19.0.0.241 Multiple Vulnerabilities (APSB15-28)
2016-01-08 00:00:00
RHEL 6 : flash-plugin (RHSA-2015:2023)
2015-11-12 00:00:00
openvas
openvas
Adobe Air Multiple Vulnerabilities (Nov 2015) - Windows
2015-11-13 00:00:00
Adobe Air Multiple Vulnerabilities (Nov 2015) - Mac OS X
2015-11-13 00:00:00
Mageia: Security Advisory (MGASA-2015-0444)
2015-11-12 00:00:00
altlinux
altlinux
Security fix for the ALT Linux 7 package adobe-flash-player version 3:11-alt56
2015-11-11 00:00:00
Security fix for the ALT Linux 6 package adobe-flash-player version 3:11-alt56
2015-11-11 00:00:00
redhat
redhat
(RHSA-2015:2023) Critical: flash-plugin security update
2015-11-11 00:00:00
(RHSA-2015:2024) Critical: flash-plugin security update
2015-11-11 00:00:00
mageia
mageia
Updated flash-player-plugin packages fix security vulnerability
2015-11-11 22:20:05
Updated chromium-browser-stable packages fix security vulnerabilities
2015-11-17 00:36:58
archlinux
archlinux
flashplugin: multiple issues
2015-11-11 00:00:00
chromium: information leakage
2015-11-13 00:00:00
freebsd
freebsd
flash -- multiple vulnerabilities
2015-11-10 00:00:00
chromium -- multiple vulnerabilities
2015-11-10 00:00:00
prion
prion
Design/Logic Flaw
2015-11-11 12:59:00
Design/Logic Flaw
2015-11-11 12:59:00
Design/Logic Flaw
2015-11-11 12:59:00
ubuntucve
ubuntucve
CVE-2015-7658
2015-11-11 00:00:00
CVE-2015-7652
2015-11-11 00:00:00
CVE-2015-8046
2015-11-11 00:00:00
cve
cve
CVE-2015-7654
2015-11-11 12:59:00
CVE-2015-7657
2015-11-11 12:59:00
CVE-2015-7656
2015-11-11 12:59:00
checkpoint_advisories
checkpoint_advisories
Adobe Flash Player Use After Free Code Execution (APSB15-28: CVE-2015-7660; CVE-2015-7661)
2015-11-18 00:00:00
Adobe Flash Player Use After Free Code Execution (APSB15-28: CVE-2015-7657; CVE-2015-7658)
2015-11-18 00:00:00
Adobe Flash Player Use After Free Code Execution (APSB15-28: CVE-2015-7655; CVE-2015-7656)
2015-11-18 00:00:00
gentoo
gentoo
Adobe Flash Player: Multiple vulnerabilities
2015-11-17 00:00:00
Chromium: Multiple vulnerabilities
2016-03-12 00:00:00
zdi
zdi
Adobe Flash AS2 NetConnection Type Confusion Remote Code Execution Vulnerability
2015-11-10 00:00:00
Adobe Flash AS2 MovieClip getBounds Use-After-Free Remote Code Execution Vulnerability
2015-11-10 00:00:00
Adobe Flash AS2 DefineFunction Invalid Free Remote Code Execution Vulnerability
2015-11-10 00:00:00
zdt
zdt
Adobe Flash TextField.gridFitType Setter - Use-After-Free
2015-12-17 00:00:00
chrome
chrome
Stable Channel Update
2015-11-10 00:00:00
debiancve
debiancve
CVE-2015-1302
2015-11-11 11:59:00
securityvulns
securityvulns
Google Chrome / Oxide multiple security vulnerabilities
2015-09-14 00:00:00
osv
osv
chromium-browser - security update
2015-12-09 00:00:00
debian
debian
[SECURITY] [DSA 3415-1] chromium-browser security update
2015-12-10 02:01:17
[SECURITY] [DSA 3415-1] chromium-browser security update
2015-12-10 02:01:17

9.3 High

CVSS2

Access Vector

NETWORK

Access Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:N/AC:M/Au:N/C:C/I:C/A:C

0.035 Low

EPSS

Percentile

91.5%

JSON
Related for KLA10691
kaspersky1nessus22openvas14altlinux2redhat2mageia2archlinux2freebsd2prion18ubuntucve18cve18checkpoint_advisories8gentoo2zdi12zdt1chrome1debiancve1securityvulns1osv1debian2