CVE-2016-4595

Safari Login AutoFill in Apple OS X before 10.11.6 allows physically proximate attackers to discover passwords by reading the screen during the login procedure...

Code injection

Safari Login AutoFill in Apple OS X before 10.11.6 allows physically proximate attackers to discover passwords by reading the screen during the login procedure...

CVE-2016-4595

Safari Login AutoFill in Apple OS X before 10.11.6 allows physically proximate attackers to discover passwords by reading the screen during the login procedure...

CVE-2016-4595

CVE-2016-4595 concerns Safari Login AutoFill on OS X El Capitan (prior to 10.11.6). The connected Apple security content confirms the issue affects Safari AutoFill form-field matching, enabling a physically proximate attacker to view passwords during login. The vulnerability is mitigated by the O...

PT-2016-6052

Name of the Vulnerable Software and Affected Versions Apple OS X versions prior to 10.11.6 Description The issue allows physically proximate attackers to discover passwords by reading the screen during the login procedure due to Safari Login AutoFill. Recommendations For Apple OS X versions prior...

CVE-2016-4595: Exposure of Sensitive Information to an Unauthorized Actor

Safari Login AutoFill in Apple OS X before 10.11.6 allows physically proximate attackers to discover passwords by reading the screen during the login procedure...

Apple Fixes Vulnerabilities Across OS X, iOS, Safari

Apple fixed dozens of vulnerabilities in its software on Monday, including 60 vulnerabilities in its operating system, OS X, and 43 in its mobile operating system, iOS. The OS X update graduates the desktop and server operating system to OS X El Capitan v10.11.6 and applies to anyone running OS X...

Google Chrome DoS

The vulnerability of the Autofill implementation in Google Chrome arises from improper interaction between the field update process and JavaScript, which causes the deletion of images. Exploiting this vulnerability can allow a malicious actor to cause service failure the inability to use the...

Google Chrome DoS

The vulnerability of the Autofill implementation in Google Chrome arises from improper interaction between the field update process and JavaScript, which causes the deletion of images. Exploiting this vulnerability can allow a malicious actor to cause service failure the inability to use the...

Google Chrome < 51.0.2704.63 Multiple Vulnerabilities

Binary data 9372.pasl...

FreeBSD : chromium -- multiple vulnerabilities (c039a761-2c29-11e6-8912-3065ec8fd3ec)

Google Chrome Releases reports : 15 security fixes in this release, including : - 601073 High CVE-2016-1696: Cross-origin bypass in Extension bindings. Credit to anonymous. - 613266 High CVE-2016-1697: Cross-origin bypass in Blink. Credit to Mariusz Mlynski. - 603725 Medium CVE-2016-1698:...

openSUSE Security Update : Chromium (openSUSE-2016-682)

Chromium was updated to 51.0.2704.79 to fix the following vulnerabilities : - CVE-2016-1696: Cross-origin bypass in Extension bindings - CVE-2016-1697: Cross-origin bypass in Blink - CVE-2016-1698: Information leak in Extension bindings - CVE-2016-1699: Parameter sanitization failure in DevTools ...

Google Chrome Autofill Memory Misreference Denial of Service Vulnerability

Google Chrome is a web browsing tool developed by Google. In versions prior to Google Chrome 51.0.2704.79, Autofill incorrectly handles field updates and interactions between JavaScript code with a memory misreference vulnerability. A remote attacker could cause a denial of service by exploiting...

Debian DSA-3594-1 : chromium-browser - security update

Several vulnerabilities have been discovered in the chromium web browser. - CVE-2016-1696 A cross-origin bypass was found in the bindings to extensions. - CVE-2016-1697 Mariusz Mlynski discovered a cross-origin bypass in Blink/Webkit. - CVE-2016-1698 Rob Wu discovered an information leak. -...

CVE-2016-1701

The Autofill implementation in Google Chrome before 51.0.2704.79 mishandles the interaction between field updates and JavaScript code that triggers a frame deletion, which allows remote attackers to cause a denial of service use-after-free or possibly have unspecified other impact via a crafted w...

CVE-2016-1701

The Autofill implementation in Google Chrome before 51.0.2704.79 mishandles the interaction between field updates and JavaScript code that triggers a frame deletion, which allows remote attackers to cause a denial of service use-after-free or possibly have unspecified other impact via a crafted w...

CVE-2016-1690

The Autofill implementation in Google Chrome before 51.0.2704.63 mishandles the interaction between field updates and JavaScript code that triggers a frame deletion, which allows remote attackers to cause a denial of service use-after-free or possibly have unspecified other impact via a crafted w...

CVE-2016-1690

The Autofill implementation in Google Chrome before 51.0.2704.63 mishandles the interaction between field updates and JavaScript code that triggers a frame deletion, which allows remote attackers to cause a denial of service use-after-free or possibly have unspecified other impact via a crafted w...

CVE-2016-1690

The Autofill implementation in Google Chrome before 51.0.2704.63 mishandles the interaction between field updates and JavaScript code that triggers a frame deletion, which allows remote attackers to cause a denial of service use-after-free or possibly have unspecified other impact via a crafted w...

UBUNTU-CVE-2016-1690

The Autofill implementation in Google Chrome before 51.0.2704.63 mishandles the interaction between field updates and JavaScript code that triggers a frame deletion, which allows remote attackers to cause a denial of service use-after-free or possibly have unspecified other impact via a crafted w...