The vulnerability of Google Chrome browser allows a perpetrator to trigger a service failure or cause other effects.

The vulnerability of the ImageInputType::ensurePrimaryContent function WebKit/Source/core/html/forms/ImageInputType.cpp in the Blink browser engine of Google Chrome is related to improper handling of time and state in the environment. Exploiting this vulnerability may allow a malicious actor to...

The vulnerability of Google Chrome browser allows a perpetrator to trigger a service failure or cause other effects.

The vulnerability in the WebKit/Source/core/layout/LayoutObject.cpp function of Google Chrome’s Blink engine is related to the use of memory after it is freed. Exploiting this vulnerability can allow an attacker to cause a service failure the continued use of resources after they are freed or hav...

openSUSE Security Update : Chromium (openSUSE-2016-362)

This update contains Chromium 49.0.2623.87 to fix the following issues : - CVE-2016-1643: Type confusion in Blink boo970514 - CVE-2016-1644: Use-after-free in Blink boo970509 - CVE-2016-1645: Out-of-bounds write in PDFium boo970511 %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The...

Security update for Chromium (important)

This update contains Chromium 49.0.2623.87 to fix the following issues: - CVE-2016-1643: Type confusion in Blink boo970514 - CVE-2016-1644: Use-after-free in Blink boo970509 - CVE-2016-1645: Out-of-bounds write in PDFium boo970511...

The vulnerability of Google Chrome browser allows a perpetrator to obtain confidential information.

The vulnerability of the Content Security Policy CSP implementation in Google Chrome’s Blink engine is related to the lack of protection for service data. Exploiting this vulnerability could allow a malicious actor, operating remotely, to obtain confidential information about visited web pages by...

The vulnerability of Google Chrome browser allows a perpetrator to trigger a service failure or cause other effects.

The vulnerability of Google Chrome’s Blink engine is related to the use of memory after it is freed. Exploiting this vulnerability can allow a remote attacker to cause service interruptions or other adverse effects...

The vulnerability of Google Chrome browser allows a perpetrator to trigger a service failure or cause other effects.

The vulnerability of the StyleResolver::appendCSSStyleSheet function WebKit/Source/core/css/resolver/StyleResolver.cpp in the Blink engine of Google Chrome browser is related to the use of memory after its release. Exploiting this vulnerability could allow a malicious actor to cause service...

The vulnerability of Google Chrome browser allows a violator to circumvent existing access restrictions policies.

The vulnerability of Google Chrome’s Blink engine is related to deficiencies in access control. Exploiting this vulnerability could allow a malicious actor to bypass existing access control policies...

CVE-2016-1644

WebKit/Source/core/layout/LayoutObject.cpp in Blink, as used in Google Chrome before 49.0.2623.87, does not properly restrict relayout scheduling, which allows remote attackers to cause a denial of service use-after-free or possibly have unspecified other impact via a crafted HTML document...

CVE-2016-1644

WebKit/Source/core/layout/LayoutObject.cpp in Blink, as used in Google Chrome before 49.0.2623.87, does not properly restrict relayout scheduling, which allows remote attackers to cause a denial of service use-after-free or possibly have unspecified other impact via a crafted HTML document...

CVE-2016-1643

The ImageInputType::ensurePrimaryContent function in WebKit/Source/core/html/forms/ImageInputType.cpp in Blink, as used in Google Chrome before 49.0.2623.87, does not properly maintain the user agent shadow DOM, which allows remote attackers to cause a denial of service or possibly have unspecifi...

CVE-2016-1643

The ImageInputType::ensurePrimaryContent function in WebKit/Source/core/html/forms/ImageInputType.cpp in Blink, as used in Google Chrome before 49.0.2623.87, does not properly maintain the user agent shadow DOM, which allows remote attackers to cause a denial of service or possibly have unspecifi...

Type confusion

The ImageInputType::ensurePrimaryContent function in WebKit/Source/core/html/forms/ImageInputType.cpp in Blink, as used in Google Chrome before 49.0.2623.87, does not properly maintain the user agent shadow DOM, which allows remote attackers to cause a denial of service or possibly have unspecifi...

CVE-2016-1644

WebKit/Source/core/layout/LayoutObject.cpp in Blink, as used in Google Chrome before 49.0.2623.87, does not properly restrict relayout scheduling, which allows remote attackers to cause a denial of service use-after-free or possibly have unspecified other impact via a crafted HTML document...

CVE-2016-1644

CVE-2016-1644 is a use-after-free in Blink/WebKit (LayoutObject.cpp) used by Google Chrome prior to 49.0.2623.87. Exploitation could cause a denial of service via a crafted HTML document. Chrome/Chromium fixes were released (e.g., Chrome 49.0.2623.87); Debian/Mageia/Arch advisories also reference...

CVE-2016-1643

CVE-2016-1643 is a type confusion vulnerability in Blink/WebKit used by Google Chrome prior to version 49.0.2623.87. It affects ImageInputType::ensurePrimaryContent in WebKit/Blink, allowing remote attackers to cause a denial of service or other impact via crafted content. Public advisories confi...

CVE-2016-1644

Removed by vendor...

Google Chrome Blink Code Execution Vulnerability (CNVD-2016-01635)

Blink is a set of browser typography engines. A code execution vulnerability exists in Blink for Google Chrome, which allows remote attackers to exploit the vulnerability to build malicious web pages that can be tricked into parsing by users, which can crash the application or execute arbitrary...

Google Chrome Blink Code Execution Vulnerability

Blink is a set of browser typography engines. A security vulnerability in Blink for Google Chrome allows remote attackers to exploit the vulnerability to build malicious web pages that can be tricked into being parsed by users, which can crash applications or execute arbitrary code...

Debian DSA-3513-1 : chromium-browser - security update

Several vulnerabilities have been discovered in the chromium web browser. - CVE-2016-1643 cloudfuzzer discovered a type confusion issue in Blink/Webkit. - CVE-2016-1644 Atte Kettunen discovered a use-after-free issue in Blink/Webkit. - CVE-2016-1645 An out-of-bounds write issue was discovered in...