Stable Channel Update

The Chrome team is delighted to announce the promotion of Chrome 48 to the stable channel for Windows, Mac and Linux. Chrome 48.0.2564.82 contains a number of fixes and improvements -- a list of changes is available in the log. Watch out for upcoming Chrome and Chromium blog posts about new...

Ubuntu 14.04 LTS : Oxide vulnerabilities (USN-2860-1)

The remote Ubuntu 14.04 LTS host has packages installed that are affected by multiple vulnerabilities as referenced in the USN-2860-1 advisory. A race condition was discovered in the MutationObserver implementation in Blink. If a user were tricked in to opening a specially crafted website, an...

USN-2860-1 oxide-qt vulnerabilities

A race condition was discovered in the MutationObserver implementation in Blink. If a user were tricked in to opening a specially crafted website, an attacker could potentially exploit this to cause a denial of service via renderer crash, or execute arbitrary code with the privileges of the...

openSUSE Security Update : Qt 5 (openSUSE-2015-953)

Qt 5 was updated to the 5.5.1 release to deliver upstream improvements and fixes to Qt functionality. The following Security fixes are contained in QtWebEngineCore : - ICU: CVE-2014-8146, CVE-2014-8147 - Blink: CVE-2015-1284, CVE-2015-1291, CVE-2015-1292 - Skia: CVE-2015-1294 - V8: CVE-2015-1290...

Blink Denial of Service Vulnerability (CNVD-2015-08388)

Blink is a browser typography engine developed by Google and Opera Software. Blink suffers from a denial of service vulnerability. Allows remote attackers to cause a denial of service or unspecified other impact by exploiting unanticipated object deletions...

CVE-2015-6789

Race condition in the MutationObserver implementation in Blink, as used in Google Chrome before 47.0.2526.80, allows remote attackers to cause a denial of service use-after-free or possibly have unspecified other impact by leveraging unanticipated object deletion...

Race condition

Race condition in the MutationObserver implementation in Blink, as used in Google Chrome before 47.0.2526.80, allows remote attackers to cause a denial of service use-after-free or possibly have unspecified other impact by leveraging unanticipated object deletion...

CVE-2015-6789

CVE-2015-6789 is a vulnerability in Blink (used by Google Chrome) described as a race condition in MutationObserver that can lead to a use-after-free and remote denial of service. Affected product: Google Chrome (Blink). Root cause: race condition with unanticipated object deletion in MutationObs...

CVE-2015-6789

Race condition in the MutationObserver implementation in Blink, as used in Google Chrome before 47.0.2526.80, allows remote attackers to cause a denial of service use-after-free or possibly have unspecified other impact by leveraging unanticipated object deletion...

CVE-2015-6789

Removed by vendor...

chromium-browser: Use-after free in Blink

Race condition in the MutationObserver implementation in Blink, as used in Google Chrome before 47.0.2526.80, allows remote attackers to cause a denial of service use-after-free or possibly have unspecified other impact by leveraging unanticipated object deletion...

UBUNTU-CVE-2015-6789

Race condition in the MutationObserver implementation in Blink, as used in Google Chrome before 47.0.2526.80, allows remote attackers to cause a denial of service use-after-free or possibly have unspecified other impact by leveraging unanticipated object deletion...

CVE-2015-6789

Race condition in the MutationObserver implementation in Blink, as used in Google Chrome before 47.0.2526.80, allows remote attackers to cause a denial of service use-after-free or possibly have unspecified other impact by leveraging unanticipated object deletion...

CVE-2015-6772

The DOM implementation in Blink, as used in Google Chrome before 47.0.2526.73, does not prevent javascript: URL navigation while a document is being detached, which allows remote attackers to bypass the Same Origin Policy via crafted JavaScript code that improperly interacts with a plugin...

Design/Logic Flaw

The DOM implementation in Blink, as used in Google Chrome before 47.0.2526.73, does not prevent javascript: URL navigation while a document is being detached, which allows remote attackers to bypass the Same Origin Policy via crafted JavaScript code that improperly interacts with a plugin...

CVE-2015-6772

The DOM implementation in Blink, as used in Google Chrome before 47.0.2526.73, does not prevent javascript: URL navigation while a document is being detached, which allows remote attackers to bypass the Same Origin Policy via crafted JavaScript code that improperly interacts with a plugin...

CVE-2015-6772

CVE-2015-6772 refers to a flaw in Blink used by Google Chrome before 47.0.2526.73, where the DOM implementation did not prevent javascript: URL navigation while a document was detached. This enables bypass of the Same Origin Policy through crafted JavaScript interactions with a plugin. The issue ...

CVE-2015-6772

Removed by vendor...

UBUNTU-CVE-2015-6772

The DOM implementation in Blink, as used in Google Chrome before 47.0.2526.73, does not prevent javascript: URL navigation while a document is being detached, which allows remote attackers to bypass the Same Origin Policy via crafted JavaScript code that improperly interacts with a plugin...

CVE-2015-6772

The DOM implementation in Blink, as used in Google Chrome before 47.0.2526.73, does not prevent javascript: URL navigation while a document is being detached, which allows remote attackers to bypass the Same Origin Policy via crafted JavaScript code that improperly interacts with a plugin...