The vulnerability of Google Chrome browser allows a perpetrator to trigger a service failure or cause other effects.

The vulnerability of the StyleResolver::appendCSSStyleSheet function WebKit/Source/core/css/resolver/StyleResolver.cpp in the Blink engine of Google Chrome browser is related to the use of memory after its release. Exploiting this vulnerability could allow a malicious actor to cause service...

The vulnerability of Google Chrome browser allows a violator to circumvent existing access restrictions policies.

The vulnerability of Google Chrome’s Blink engine is related to deficiencies in access control. Exploiting this vulnerability could allow a malicious actor to bypass existing access control policies...

CVE-2016-1644

WebKit/Source/core/layout/LayoutObject.cpp in Blink, as used in Google Chrome before 49.0.2623.87, does not properly restrict relayout scheduling, which allows remote attackers to cause a denial of service use-after-free or possibly have unspecified other impact via a crafted HTML document...

CVE-2016-1644

WebKit/Source/core/layout/LayoutObject.cpp in Blink, as used in Google Chrome before 49.0.2623.87, does not properly restrict relayout scheduling, which allows remote attackers to cause a denial of service use-after-free or possibly have unspecified other impact via a crafted HTML document...

CVE-2016-1643

The ImageInputType::ensurePrimaryContent function in WebKit/Source/core/html/forms/ImageInputType.cpp in Blink, as used in Google Chrome before 49.0.2623.87, does not properly maintain the user agent shadow DOM, which allows remote attackers to cause a denial of service or possibly have unspecifi...

CVE-2016-1643

The ImageInputType::ensurePrimaryContent function in WebKit/Source/core/html/forms/ImageInputType.cpp in Blink, as used in Google Chrome before 49.0.2623.87, does not properly maintain the user agent shadow DOM, which allows remote attackers to cause a denial of service or possibly have unspecifi...

Type confusion

The ImageInputType::ensurePrimaryContent function in WebKit/Source/core/html/forms/ImageInputType.cpp in Blink, as used in Google Chrome before 49.0.2623.87, does not properly maintain the user agent shadow DOM, which allows remote attackers to cause a denial of service or possibly have unspecifi...

CVE-2016-1644

WebKit/Source/core/layout/LayoutObject.cpp in Blink, as used in Google Chrome before 49.0.2623.87, does not properly restrict relayout scheduling, which allows remote attackers to cause a denial of service use-after-free or possibly have unspecified other impact via a crafted HTML document...

CVE-2016-1643

CVE-2016-1643 is a type confusion vulnerability in Blink/WebKit used by Google Chrome prior to version 49.0.2623.87. It affects ImageInputType::ensurePrimaryContent in WebKit/Blink, allowing remote attackers to cause a denial of service or other impact via crafted content. Public advisories confi...

CVE-2016-1644

Removed by vendor...

CVE-2016-1644

CVE-2016-1644 is a use-after-free in Blink/WebKit (LayoutObject.cpp) used by Google Chrome prior to 49.0.2623.87. Exploitation could cause a denial of service via a crafted HTML document. Chrome/Chromium fixes were released (e.g., Chrome 49.0.2623.87); Debian/Mageia/Arch advisories also reference...

Google Chrome Blink Code Execution Vulnerability

Blink is a set of browser typography engines. A security vulnerability in Blink for Google Chrome allows remote attackers to exploit the vulnerability to build malicious web pages that can be tricked into being parsed by users, which can crash applications or execute arbitrary code...

Google Chrome Blink Code Execution Vulnerability (CNVD-2016-01635)

Blink is a set of browser typography engines. A code execution vulnerability exists in Blink for Google Chrome, which allows remote attackers to exploit the vulnerability to build malicious web pages that can be tricked into parsing by users, which can crash the application or execute arbitrary...

Debian DSA-3513-1 : chromium-browser - security update

Several vulnerabilities have been discovered in the chromium web browser. - CVE-2016-1643 cloudfuzzer discovered a type confusion issue in Blink/Webkit. - CVE-2016-1644 Atte Kettunen discovered a use-after-free issue in Blink/Webkit. - CVE-2016-1645 An out-of-bounds write issue was discovered in...

Ubuntu 14.04 LTS : Oxide vulnerabilities (USN-2920-1)

The remote Ubuntu 14.04 LTS host has packages installed that are affected by multiple vulnerabilities as referenced in the USN-2920-1 advisory. It was discovered that the ContainerNode::parserRemoveChild function in Blink mishandled widget updates in some circumstances. If a user were tricked in ...

Ubuntu: Security Advisory (USN-2920-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2016 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

USN-2920-1: Oxide vulnerabilities

It was discovered that the ContainerNode::parserRemoveChild function in Blink mishandled widget updates in some circumstances. If a user were tricked in to opening a specially crafted website, an attacker could potentially exploit this to bypass same-origin restrictions. CVE-2016-1630 It was...

USN-2920-1 oxide-qt vulnerabilities

It was discovered that the ContainerNode::parserRemoveChild function in Blink mishandled widget updates in some circumstances. If a user were tricked in to opening a specially crafted website, an attacker could potentially exploit this to bypass same-origin restrictions. CVE-2016-1630 It was...

[SECURITY] [DSA 3513-1] chromium-browser security update

------------------------------------------------------------------------- Debian Security Advisory DSA-3513-1 [email protected] https://www.debian.org/security/ Michael Gilbert March 10, 2016 https://www.debian.org/security/faq -...

chromium-browser: type confusion in Blink

The ImageInputType::ensurePrimaryContent function in WebKit/Source/core/html/forms/ImageInputType.cpp in Blink, as used in Google Chrome before 49.0.2623.87, does not properly maintain the user agent shadow DOM, which allows remote attackers to cause a denial of service or possibly have unspecifi...