CVE-2016-2845

The Content Security Policy CSP implementation in Blink, as used in Google Chrome before 49.0.2623.75, does not ignore a URL's path component in the case of a ServiceWorker fetch, which allows remote attackers to obtain sensitive information about visited web pages by reading CSP violation report...

CVE-2016-2845

CVE-2016-2845 affects the Content Security Policy (CSP) implementation in Blink used by Google Chrome prior to 49.0.2623.75. The vulnerability arises because the CSP logic does not ignore the URL path component during a ServiceWorker fetch, enabling a remote attacker to read CSP violation reports...

CVE-2016-2844

CVE-2016-2844 affects Blink/WebKit as used in Google Chrome prior to 49.0.2623.75. The issue is an improper determination of when anonymous block wrappers may exist in LayoutBlock.cpp, which can allow remote attackers to trigger a denial of service via an incorrect cast and assertion failure, wit...

CVE-2016-2844

Removed by vendor...

CVE-2016-1630

Removed by vendor...

CVE-2016-2845

Removed by vendor...

CVE-2016-1634

CVE-2016-1634 is a use-after-free in Blink’s StyleResolver::appendCSSStyleSheet (WebKit/Blink) used by Google Chrome prior to 49.0.2623.75. The vulnerability allows a remote attacker to cause a denial of service (DoS) or potentially other impact via a crafted page triggering CSS style invalidatio...

CVE-2016-1633

CVE-2016-1633 is a use-after-free in Blink/WebKit used by Google Chrome prior to 49.0.2623.75. The issue, tracked across multiple advisories (Debian, Gentoo GLSA, CNVD, CNVD-like, Arch Linux, FreeBSD/vuxml), is described as a use-after-free in Blink that could lead to denial of service and possib...

CVE-2016-1633

Removed by vendor...

[SECURITY] [DSA 3507-1] chromium-browser security update

------------------------------------------------------------------------- Debian Security Advisory DSA-3507-1 [email protected] https://www.debian.org/security/ Michael Gilbert March 05, 2016 https://www.debian.org/security/faq -...

CVE-2016-1633

Use-after-free vulnerability in Blink, as used in Google Chrome before 49.0.2623.75, allows remote attackers to cause a denial of service or possibly have unspecified other impact via unknown vectors...

CVE-2016-1630

The ContainerNode::parserRemoveChild function in WebKit/Source/core/dom/ContainerNode.cpp in Blink, as used in Google Chrome before 49.0.2623.75, mishandles widget updates, which makes it easier for remote attackers to bypass the Same Origin Policy via a crafted web site...

UBUNTU-CVE-2016-2844

WebKit/Source/core/layout/LayoutBlock.cpp in Blink, as used in Google Chrome before 49.0.2623.75, does not properly determine when anonymous block wrappers may exist, which allows remote attackers to cause a denial of service incorrect cast and assertion failure or possibly have unspecified other...

CVE-2016-2845

The Content Security Policy CSP implementation in Blink, as used in Google Chrome before 49.0.2623.75, does not ignore a URL's path component in the case of a ServiceWorker fetch, which allows remote attackers to obtain sensitive information about visited web pages by reading CSP violation report...

UBUNTU-CVE-2016-1630

The ContainerNode::parserRemoveChild function in WebKit/Source/core/dom/ContainerNode.cpp in Blink, as used in Google Chrome before 49.0.2623.75, mishandles widget updates, which makes it easier for remote attackers to bypass the Same Origin Policy via a crafted web site...

UBUNTU-CVE-2016-1633

Use-after-free vulnerability in Blink, as used in Google Chrome before 49.0.2623.75, allows remote attackers to cause a denial of service or possibly have unspecified other impact via unknown vectors...

CVE-2016-1634

Use-after-free vulnerability in the StyleResolver::appendCSSStyleSheet function in WebKit/Source/core/css/resolver/StyleResolver.cpp in Blink, as used in Google Chrome before 49.0.2623.75, allows remote attackers to cause a denial of service or possibly have unspecified other impact via a crafted...

Google Chrome < 49.0.2623.75 Multiple Vulnerabilities

The version of Google Chrome installed on the remote macOS host is prior to 49.0.2623.75. It is, therefore, affected by multiple vulnerabilities as referenced in the 201603stable-channel-update advisory. - Multiple unspecified vulnerabilities in Google Chrome before 49.0.2623.75 allow attackers t...

Google Chrome < 49.0.2623.75 Multiple Vulnerabilities

The version of Google Chrome installed on the remote Windows host is prior to 49.0.2623.75. It is, therefore, affected by multiple vulnerabilities as referenced in the 201603stable-channel-update advisory. - Multiple unspecified vulnerabilities in Google Chrome before 49.0.2623.75 allow attackers...

Stable Channel Update

The Chrome team is delighted to announce the promotion of Chrome 49 to the stable channel for Windows, Mac and Linux. Chrome 49.0.2623.75 contains a number of fixes and improvements -- a list of changes is available in the log. Watch out for upcoming Chrome and Chromium blog posts about new...