CVE-2016-5182

Blink in Google Chrome prior to 54.0.2840.59 for Windows, Mac, and Linux; 54.0.2840.85 for Android had insufficient validation in bitmap handling, which allowed a remote attacker to potentially exploit heap corruption via crafted HTML pages...

CVE-2016-5181

Blink in Google Chrome prior to 54.0.2840.59 for Windows, Mac, and Linux; 54.0.2840.85 for Android permitted execution of v8 microtasks while the DOM was in an inconsistent state, which allowed a remote attacker to inject arbitrary scripts or HTML UXSS via crafted HTML pages...

UBUNTU-CVE-2016-5185

Blink in Google Chrome prior to 54.0.2840.59 for Windows, Mac, and Linux; 54.0.2840.85 for Android incorrectly allowed reentrance of FrameView::updateLifecyclePhasesInternal, which allowed a remote attacker to perform an out of bounds memory read via crafted HTML pages...

PT-2016-6305

Name of the Vulnerable Software and Affected Versions Google Chrome versions prior to 54.0.2840.85 for Android Description The issue concerns the incorrect handling of rapid transition into and out of full screen mode in Google Chrome for Android. This allowed a remote attacker to spoof the...

UBUNTU-CVE-2016-5189

Google Chrome prior to 54.0.2840.59 for Windows, Mac, and Linux; 54.0.2840.85 for Android permitted navigation to blob URLs with non-canonical origins, which allowed a remote attacker to spoof the contents of the Omnibox URL bar via crafted HTML pages...

PT-2016-6308

Name of the Vulnerable Software and Affected Versions Google Chrome versions prior to 54.0.2840.59 for Windows, Mac, and Linux Google Chrome version 54.0.2840.85 for Android Description The issue incorrectly handled object lifecycles during shutdown, allowing a remote attacker to perform an out o...

CVE-2016-5185

Blink in Google Chrome prior to 54.0.2840.59 for Windows, Mac, and Linux; 54.0.2840.85 for Android incorrectly allowed reentrance of FrameView::updateLifecyclePhasesInternal, which allowed a remote attacker to perform an out of bounds memory read via crafted HTML pages...

CVE-2016-5187

Google Chrome prior to 54.0.2840.85 for Android incorrectly handled rapid transition into and out of full screen mode, which allowed a remote attacker to spoof the contents of the Omnibox URL bar via crafted HTML pages...

CVE-2016-5182

Blink in Google Chrome prior to 54.0.2840.59 for Windows, Mac, and Linux; 54.0.2840.85 for Android had insufficient validation in bitmap handling, which allowed a remote attacker to potentially exploit heap corruption via crafted HTML pages...

CVE-2016-5189

Google Chrome prior to 54.0.2840.59 for Windows, Mac, and Linux; 54.0.2840.85 for Android permitted navigation to blob URLs with non-canonical origins, which allowed a remote attacker to spoof the contents of the Omnibox URL bar via crafted HTML pages...

CVE-2016-5188

Multiple issues in Blink in Google Chrome prior to 54.0.2840.59 for Windows, Mac, and Linux allow a remote attacker to spoof various parts of browser UI via crafted HTML pages...

PT-2016-6300

Name of the Vulnerable Software and Affected Versions Google Chrome versions prior to 54.0.2840.59 for Windows, Mac, and Linux Google Chrome version prior to 54.0.2840.85 for Android Opera affected versions not specified Description The issue is related to insufficient validation in bitmap...

PT-2016-6299

Name of the Vulnerable Software and Affected Versions Google Chrome versions prior to 54.0.2840.59 Google Chrome for Android version 54.0.2840.85 and earlier Opera affected versions not specified Description The issue allowed a remote attacker to inject arbitrary scripts or HTML via crafted HTML...

PT-2016-6303

Name of the Vulnerable Software and Affected Versions Google Chrome versions prior to 54.0.2840.59 Google Chrome for Android version prior to 54.0.2840.85 Opera affected versions not specified Description The issue allows a remote attacker to perform an out of bounds memory read via crafted HTML...

Mozilla Firefox Denial of Service Vulnerability (CNVD-2015-02214)

Mozilla Firefox is a web browser developed by the Mozilla Foundation in conjunction with the open source community. A denial-of-service vulnerability exists in versions of Mozilla Firefox prior to 37.0, which allows remote attackers to exploit the vulnerability to construct malicious HTML pages...