PT-2016-1352

Name of the Vulnerable Software and Affected Versions Google Chrome versions prior to 49.0.2623.75 Opera affected versions not specified Description The issue is related to an error in blocking the installation process after the installation window is closed in the Extensions UI of Google Chrome...

PT-2016-1342

Name of the Vulnerable Software and Affected Versions Google Chrome versions prior to 49.0.2623.75 Opera affected versions not specified Description The issue is related to the ContainerNode::parserRemoveChild function in WebKit/Source/core/dom/ContainerNode.cpp in Blink, which mishandles widget...

PT-2016-1348

Name of the Vulnerable Software and Affected Versions Google Chrome versions prior to 49.0.2623.75 Opera versions prior to 49.0.2623.75 Description The issue is related to the PendingScript::notifyFinished function in WebKit/Source/core/dom/PendingScript.cpp, which relies on memory-cache...

Opera 12 and Opera Mail security update

Security Opera 12 and Opera Mail security update Share February 16th, 2016 We realize that those of you on old operating systems like Windows XP SP1 and older are left without much choice beyond using our Presto-based browser. With security standards on the web changing so much we didn’t want to...

PT-2016-1257

Name of the Vulnerable Software and Affected Versions OpenJPEG versions prior to 48.0.2564.109 PDFium in Google Chrome versions prior to 48.0.2564.109 Opera versions prior to 48.0.2564.109 Description The issue is related to the pi.c function in OpenJPEG, as used in PDFium, which does not validat...

PT-2016-1259

Name of the Vulnerable Software and Affected Versions Google Chrome versions prior to 48.0.2564.109 Opera affected versions not specified Description The issue is related to the Chrome Instant feature, which does not properly restrict access to New Tab Page navigation targets. This allows remote...

PT-2016-1192

Name of the Vulnerable Software and Affected Versions OpenJPEG versions prior to 48.0.2564.109 Google Chrome versions prior to 48.0.2564.109 PDFium versions prior to 48.0.2564.109 Opera versions prior to 48.0.2564.109 Description The issue is related to the opj pi update decode poc function in pi...

PT-2016-1262

Name of the Vulnerable Software and Affected Versions Google Chrome versions prior to 48.0.2564.109 Opera affected versions not specified Description The issue is related to the Extensions subsystem, which does not properly restrict access to certain functions. This allows remote attackers to...

PT-2016-1261

Name of the Vulnerable Software and Affected Versions Google Chrome versions prior to 48.0.2564.109 Opera affected versions not specified Description The issue is related to the DOM implementation in the browser, which does not properly restrict frame-attach operations from occurring during or...

PT-2016-1138

Name of the Vulnerable Software and Affected Versions Google Chrome versions prior to 48.0.2564.82 Opera affected versions not specified Description The issue is related to the UnacceleratedImageBufferSurface class in the Blink component, which mishandles the initialization mode. This allows remo...

PT-2016-1136

Name of the Vulnerable Software and Affected Versions Google Chrome versions prior to 48.0.2564.82 Opera affected versions not specified Description The issue is related to the LoadIC::UpdateCaches function in the Google V8 module, which does not ensure receiver compatibility before performing a...

PT-2016-1141

Name of the Vulnerable Software and Affected Versions Google Chrome versions prior to 48.0.2564.82 Opera affected versions not specified Description The issue is related to the CSPSource::schemeMatches function in the Content Security Policy CSP implementation in Blink. This function does not app...

PT-2016-1142

Name of the Vulnerable Software and Affected Versions Google Chrome versions prior to 48.0.2564.82 Opera affected versions not specified Description The issue is related to the Blink component in Google Chrome and Opera, where the random number generator may not function properly. This can make i...

PT-2016-1126

Name of the Vulnerable Software and Affected Versions Google Chrome versions prior to 48.0.2564.82 Opera affected versions not specified Description The issue is related to multiple unspecified vulnerabilities in the code. These vulnerabilities can be exploited by a remote attacker to cause a...

PT-2016-1143

Name of the Vulnerable Software and Affected Versions Google Chrome versions prior to 48.0.2564.82 Opera affected versions not specified Description The issue is caused by multiple integer overflows in the sycc422 to rgb and sycc444 to rgb functions in PDFium, as used in Google Chrome and Opera...

PT-2016-1139

Name of the Vulnerable Software and Affected Versions Google Chrome versions prior to 48.0.2564.82 Opera affected versions not specified Description The issue is related to the Omnibox implementation and is caused by errors in security settings. It allows remote attackers to spoof a document's...

PT-2016-1140

Name of the Vulnerable Software and Affected Versions Google Chrome versions prior to 48.0.2564.82 Opera affected versions not specified Description The issue is related to errors in security settings, specifically in the CustomButton::AcceleratorPressed function. This function is located in the...

PT-2016-1137

Name of the Vulnerable Software and Affected Versions Google Chrome versions prior to 48.0.2564.82 Opera affected versions not specified Description The issue is related to multiple use-after-free vulnerabilities in the formfiller implementation in PDFium, used in Google Chrome and Opera. These...

PT-2015-2903

Name of the Vulnerable Software and Affected Versions Google Chrome versions prior to 47.0.2526.106 Opera affected versions not specified Description The issue is related to the MIDI subsystem in the browser, specifically with the handling of sent data. This can be exploited by a remote attacker ...

PT-2015-3160

Name of the Vulnerable Software and Affected Versions Google Chrome versions prior to 47.0.2526.106 Opera versions prior to 47.0.2526.106 Description The issue is caused by an integer overflow in the WebCursor::Deserialize function, allowing remote attackers to cause a denial of service or possib...