62 matches found
CVE-2016-1694
browser/browsingdata/browsingdataremover.cc in Google Chrome before 51.0.2704.63 deletes HPKP pins during cache clearing, which makes it easier for remote attackers to spoof web sites via a valid certificate from an arbitrary recognized Certification Authority...
CVE-2016-1694
browser/browsingdata/browsingdataremover.cc in Google Chrome before 51.0.2704.63 deletes HPKP pins during cache clearing, which makes it easier for remote attackers to spoof web sites via a valid certificate from an arbitrary recognized Certification Authority...
Design/Logic Flaw
browser/browsingdata/browsingdataremover.cc in Google Chrome before 51.0.2704.63 deletes HPKP pins during cache clearing, which makes it easier for remote attackers to spoof web sites via a valid certificate from an arbitrary recognized Certification Authority...
CVE-2016-1694
browser/browsingdata/browsingdataremover.cc in Google Chrome before 51.0.2704.63 deletes HPKP pins during cache clearing, which makes it easier for remote attackers to spoof web sites via a valid certificate from an arbitrary recognized Certification Authority...
CVE-2016-1694
CVE-2016-1694 affects Google Chrome before 51.0.2704.63, where browser/browsing_data/browsing_data_remover.cc deletes HPKP pins during cache cleanup. This undermines certificate pinning, enabling remote attackers to spoof websites by presenting a valid certificate from any trusted CA. The public ...
CVE-2016-1694
Removed by vendor...
CVE-2016-1694: Improper Access Control
browser/browsingdata/browsingdataremover.cc in Google Chrome before 51.0.2704.63 deletes HPKP pins during cache clearing, which makes it easier for remote attackers to spoof web sites via a valid certificate from an arbitrary recognized Certification Authority...
Security update for Chromium (important)
Chromium was updated to 51.0.2704.63 to fix the following vulnerabilities boo981886: - CVE-2016-1672: Cross-origin bypass in extension bindings - CVE-2016-1673: Cross-origin bypass in Blink - CVE-2016-1674: Cross-origin bypass in extensions - CVE-2016-1675: Cross-origin bypass in Blink -...
Security update for Chromium (important)
Chromium was updated to 51.0.2704.63 to fix the following vulnerabilities boo981886: - CVE-2016-1672: Cross-origin bypass in extension bindings - CVE-2016-1673: Cross-origin bypass in Blink - CVE-2016-1674: Cross-origin bypass in extensions - CVE-2016-1675: Cross-origin bypass in Blink -...
Google Chrome < 51.0.2704.63 Multiple Vulnerabilities
The version of Google Chrome installed on the remote macOS host is prior to 51.0.2704.63. It is, therefore, affected by multiple vulnerabilities as referenced in the 201605stable-channel-update25 advisory. - Multiple unspecified vulnerabilities in Google Chrome before 51.0.2704.63 allow attackers...
CVE-2016-1694
browser/browsingdata/browsingdataremover.cc in Google Chrome before 51.0.2704.63 deletes HPKP pins during cache clearing, which makes it easier for remote attackers to spoof web sites via a valid certificate from an arbitrary recognized Certification Authority...
PT-2016-2144
Name of the Vulnerable Software and Affected Versions Google Chrome versions prior to 51.0.2704.63 Opera affected versions not specified Description The issue is related to the deletion of HPKP pins during cache clearing, which makes it easier for remote attackers to spoof web sites via a valid...
Mageia: Security Advisory (MGASA-2015-0265)
The remote host is missing an update for the SPDX-FileCopyrightText: 2015 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
Google Chrome OS < 43.0.2357.125 Multiple Vulnerabilities
Binary data 8887.prm...
Google Chrome < 43.0.2357.130 Multiple Vulnerabilities
Binary data 8880.pasl...
Updated chromium-browser package fixes security vulnerability
A scheme validation error in WebUI CVE-2015-1266. Two cross-origin bypass issues in Blink CVE-2015-1267, CVE-2015-1268. A normalization error in the HSTS/HPKP preload list CVE-2015-1269. This update also disables the automatic, silent downloading and installation of "external components" like the...
Ubuntu 14.04 LTS : Oxide vulnerabilities (USN-2652-1)
The remote Ubuntu 14.04 LTS host has packages installed that are affected by multiple vulnerabilities as referenced in the USN-2652-1 advisory. It was discovered that Chromium did not properly consider the scheme when determining whether a URL is associated with a WebUI SiteInstance. If a user we...
CVE-2015-1269
The DecodeHSTSPreloadRaw function in net/http/transportsecuritystate.cc in Google Chrome before 43.0.2357.130 does not properly canonicalize DNS hostnames before making comparisons to HSTS or HPKP preload entries, which allows remote attackers to bypass intended access restrictions via a string...
CVE-2015-1269
CVE-2015-1269 affects Google Chrome and related Chromium-based packages. The DecodeHSTSPreloadRaw function in net/http/transport_security_state.cc failed to canonicalize DNS hostnames before comparing against HSTS/HPKP preload entries, enabling bypass of access restrictions via hostnames that end...