PT-2015-1933

Name of the Vulnerable Software and Affected Versions Google Chrome versions prior to 45.0.2454.85 Opera affected versions not specified Description The issue is related to multiple use-after-free vulnerabilities in the PrintWebViewHelper class. These vulnerabilities can be exploited by...

PT-2015-1929

Name of the Vulnerable Software and Affected Versions Google Chrome versions prior to 45.0.2454.85 Opera affected versions not specified Description The issue is related to the ContainerNode::parserRemoveChild function in Blink, which does not properly check whether a node is expected. This allow...

PT-2015-1934

Name of the Vulnerable Software and Affected Versions Google Chrome versions prior to 45.0.2454.85 Opera versions prior to 45.0.2454.85 Description The issue concerns the UnescapeURLWithAdjustmentsImpl implementation in net/base/escape.cc, which does not prevent the display of Unicode LOCK...

PT-2015-1930

Name of the Vulnerable Software and Affected Versions Google Chrome versions prior to 45.0.2454.85 Opera affected versions not specified Description The issue is related to the NavigatorServiceWorker::serviceWorker function in the Blink component of Google Chrome, which has insufficient access...

PT-2015-1939

Name of the Vulnerable Software and Affected Versions Google Chrome versions prior to 45.0.2454.85 Opera versions prior to 45.0.2454.85 Description The issue is related to errors in the code of Google Chrome, allowing a remote attacker to cause a denial of service or possibly have other impact vi...

PT-2015-1986

Name of the Vulnerable Software and Affected Versions Google Chrome versions prior to 45.0.2454.85 Opera affected versions not specified Description The issue is related to the decompose function in the TransformationMatrix.cpp component of Blink, which does not verify that a matrix inversion...

PT-2015-1987

Name of the Vulnerable Software and Affected Versions Google Chrome versions prior to 45.0.2454.85 Opera affected versions not specified Description The issue is related to errors in security settings, which might make it easier for remote attackers to spoof content via a crafted app. This could ...

PT-2015-1938

Name of the Vulnerable Software and Affected Versions Google Chrome versions prior to 45.0.2454.85 Opera versions prior to 45.0.2454.85 Description The issue is related to the FrameFetchContext::updateTimingInfoForIFrameNavigation function in the Blink component of Google Chrome, which does not...

PT-2015-1931

Name of the Vulnerable Software and Affected Versions Google Chrome versions prior to 45.0.2454.85 Opera affected versions not specified Description The issue is related to the DOM implementation in Blink, which allows remote attackers to bypass the Same Origin Policy. This is due to insufficient...

PT-2015-1937

Name of the Vulnerable Software and Affected Versions Google Chrome versions prior to 45.0.2454.85 Opera affected versions not specified Description The issue is related to a use-after-free vulnerability in the shared-timer implementation in Blink. This vulnerability can be exploited by remote...

Mozilla Firefox Launches Web Extensions API to Support Chrome and Opera Extensions

Should we feel happy about it? Let's find out! What Firefox has been thinking of is, it is planning to bring in Google chrome's web browser extensions to support the features of Mozilla Firefox. The parent company of Firefox i. e. Mozilla Foundation has decided to update their add-on and extensio...

PT-2015-1681

Name of the Vulnerable Software and Affected Versions Google Chrome versions prior to 44.0.2403.89 Opera affected versions not specified Description The issue is related to the regular-expression implementation in Google V8, which mishandles interrupts. This can be exploited by remote attackers t...

PT-2015-1566

Name of the Vulnerable Software and Affected Versions Google Chrome versions prior to 44.0.2403.89 Opera affected versions not specified Description The issue is caused by a buffer overflow in the dynamic memory of the Skia component, specifically in the SkPictureShader.cpp file. This can be...

PT-2015-5192

Name of the Vulnerable Software and Affected Versions Google Chrome versions prior to 44.0.2403.89 Opera affected versions not specified Description The issue concerns the XSSAuditor::canonicalize function in the XSS auditor in Blink, which does not properly choose a truncation point. This makes ...

PT-2015-5189

Name of the Vulnerable Software and Affected Versions Google Chrome versions prior to 44.0.2403.89 Opera affected versions not specified Description The issue allows remote attackers to bypass Content Security Policy CSP restrictions by providing an image from an unintended source. This is due to...

PT-2015-5194

Name of the Vulnerable Software and Affected Versions Google Chrome versions prior to 44.0.2403.89 Opera affected versions not specified Description The issue enables a quirks-mode exception that limits the cases in which a Cascading Style Sheets CSS document is required to have the text/css...

PT-2015-1567

Name of the Vulnerable Software and Affected Versions Google Chrome versions prior to 44.0.2403.89 Opera versions prior to 44.0.2403.89 affected versions not specified Description The issue is related to the LocalFrame::isURLAllowed function in core/frame/LocalFrame.cpp in Blink, which does not...

PT-2015-5190

Name of the Vulnerable Software and Affected Versions Google Chrome versions prior to 44.0.2403.89 Opera affected versions not specified Description The issue is related to multiple use-after-free vulnerabilities in the fpdfsdk/src/javascript/Document.cpp component of PDFium, as used in Google...

PT-2015-1565

Name of the Vulnerable Software and Affected Versions Google Chrome versions prior to 44.0.2403.89 Opera affected versions not specified Description The issue is related to an integer overflow in the CJBig2 Image::expand function, which can cause a heap-based buffer overflow. This allows remote...

PT-2015-1423

Name of the Vulnerable Software and Affected Versions Google Chrome versions prior to 43.0.2357.130 Opera affected versions not specified Description The issue is related to the bindings/scripts/v8 types.py file in Blink, which does not properly select a creation context for a return value's DOM...