CVE-2016-5161

CVE-2016-5161 affects Blink (WebKit editing stack) used by Google Chrome. The issue arises in EditingStyle::mergeStyle, where mis-handling of custom properties allows a crafted site to trigger a type-confusion in StylePropertySerializer, enabling a remote attacker to cause a denial of service (an...

CVE-2016-5161

Removed by vendor...

CVE-2016-5164

Removed by vendor...

CVE-2016-5147

Removed by vendor...

CVE-2016-5153

The Web Animations implementation in Blink, as used in Google Chrome before 53.0.2785.89 on Windows and OS X and before 53.0.2785.92 on Linux, improperly relies on list iteration, which allows remote attackers to cause a denial of service use-after-destruction or possibly have unspecified other...

CVE-2016-5150

CVE-2016-5150 affects Blink/WebKit’s IndexedDB implementation (V8BindingForModules.cpp) used by Chrome. The issue arises from improper restriction of key-path evaluation, enabling a crafted JavaScript sequence to trigger a use-after-free in IndexedDB, potentially causing a denial of service and o...

CVE-2016-5161

The EditingStyle::mergeStyle function in WebKit/Source/core/editing/EditingStyle.cpp in Blink, as used in Google Chrome before 53.0.2785.89 on Windows and OS X and before 53.0.2785.92 on Linux, mishandles custom properties, which allows remote attackers to cause a denial of service or possibly ha...

CVE-2016-5150

Removed by vendor...

[SECURITY] Fedora 24 Update: chromium-53.0.2785.101-1.fc24

Chromium is an open-source web browser, powered by WebKit Blink...

The vulnerability of Google Chrome browser allows a violator to circumvent existing access restrictions policies.

The vulnerability in the WebKit/Source/core/loader/FrameLoader.cpp file of the Google Chrome browser’s Blink component is related to the continued operation of the frame navigation mechanism during the disconnection of the DocumentLoader object. Exploiting this vulnerability could allow a malicio...

Google Chrome Blink Cross-Site Scripting Vulnerability (CNVD-2016-07201)

Google Chrome is a web browser developed by Google Inc. Blink is a browser layout engine rendering engine jointly developed by Google Inc. and Opera Software of Norway. A cross-site scripting vulnerability exists in Blink in versions of Google Chrome prior to 53.0.2785.89. An attacker can exploit...

Google Chrome Blink Memory Misreference Vulnerability (CNVD-2016-07200)

Google Chrome is a web browser developed by Google Inc. Blink is a browser layout engine rendering engine jointly developed by Google Inc. and Opera Software of Norway. A memory misreference vulnerability exists in Blink in versions of Google Chrome prior to 53.0.2785.89. An attacker could use th...

Google Chrome Blink Cross-Site Scripting Vulnerability (CNVD-2016-07202)

Google Chrome is a web browser developed by Google Inc. Blink is a browser layout engine rendering engine jointly developed by Google Inc. and Opera Software of Norway. A cross-site scripting vulnerability exists in Blink in versions of Google Chrome prior to 53.0.2785.89. An attacker could use...

Google Chrome Blink Arbitrary Code Execution Vulnerability (CNVD-2016-07198)

Google Chrome is a web browser developed by Google Inc. Blink is a browser layout engine rendering engine jointly developed by Google Inc. and Opera Software of Norway. An arbitrary code execution vulnerability exists in Blink in versions of Google Chrome prior to 53.0.2785.89. An attacker could...

CVE-2016-5164

Cross-site scripting XSS vulnerability in WebKit/Source/platform/v8inspector/V8Debugger.cpp in Blink, as used in Google Chrome before 53.0.2785.89 on Windows and OS X and before 53.0.2785.92 on Linux, allows remote attackers to inject arbitrary web script or HTML into the Developer Tools aka...

CVE-2016-5161

The EditingStyle::mergeStyle function in WebKit/Source/core/editing/EditingStyle.cpp in Blink, as used in Google Chrome before 53.0.2785.89 on Windows and OS X and before 53.0.2785.92 on Linux, mishandles custom properties, which allows remote attackers to cause a denial of service or possibly ha...

CVE-2016-5147

Blink, as used in Google Chrome before 53.0.2785.89 on Windows and OS X and before 53.0.2785.92 on Linux, mishandles deferred page loads, which allows remote attackers to inject arbitrary web script or HTML via a crafted web site, aka "Universal XSS UXSS."...

UBUNTU-CVE-2016-5164

Cross-site scripting XSS vulnerability in WebKit/Source/platform/v8inspector/V8Debugger.cpp in Blink, as used in Google Chrome before 53.0.2785.89 on Windows and OS X and before 53.0.2785.92 on Linux, allows remote attackers to inject arbitrary web script or HTML into the Developer Tools aka...

UBUNTU-CVE-2016-5161

The EditingStyle::mergeStyle function in WebKit/Source/core/editing/EditingStyle.cpp in Blink, as used in Google Chrome before 53.0.2785.89 on Windows and OS X and before 53.0.2785.92 on Linux, mishandles custom properties, which allows remote attackers to cause a denial of service or possibly ha...

UBUNTU-CVE-2016-5148

Cross-site scripting XSS vulnerability in Blink, as used in Google Chrome before 53.0.2785.89 on Windows and OS X and before 53.0.2785.92 on Linux, allows remote attackers to inject arbitrary web script or HTML via vectors related to widget updates, aka "Universal XSS UXSS."...