UBUNTU-CVE-2016-1679

The ToV8Value function in content/child/v8valueconverterimpl.cc in the V8 bindings in Google Chrome before 51.0.2704.63 does not properly restrict use of getters and setters, which allows remote attackers to cause a denial of service use-after-free or possibly have unspecified other impact via...

UBUNTU-CVE-2016-1677

uri.js in Google V8 before 5.1.281.26, as used in Google Chrome before 51.0.2704.63, uses an incorrect array type, which allows remote attackers to obtain sensitive information by calling the decodeURI function and leveraging "type confusion."...

UBUNTU-CVE-2016-1673

Blink, as used in Google Chrome before 51.0.2704.63, allows remote attackers to bypass the Same Origin Policy via unspecified vectors...

Google Chrome Competitive Conditions Vulnerability (CNVD-2016-03259)

Google Chrome is a web browser developed by the American company Google Google. Google Chrome versions prior to 50.0.2661.102 have a contention condition vulnerability in the 'ResourceDispatcherHostImpl::' function in the file content/browser/loader/resourcedispatcherhostimpl.cc. BeginRequest'...

CVE-2016-1661

Blink, as used in Google Chrome before 50.0.2661.94, does not ensure that frames satisfy a check for the same renderer process in addition to a Same Origin Policy check, which allows remote attackers to cause a denial of service memory corruption or possibly have unspecified other impact via a...

CVE-2016-1660

Blink, as used in Google Chrome before 50.0.2661.94, mishandles assertions in the WTF::BitArray and WTF::doubleconversion::Vector classes, which allows remote attackers to cause a denial of service out-of-bounds write or possibly have unspecified other impact via a crafted web site...

CVE-2016-1668

The forEachForBinding function in WebKit/Source/bindings/core/v8/Iterable.h in the V8 bindings in Blink, as used in Google Chrome before 50.0.2661.102, uses an improper creation context, which allows remote attackers to bypass the Same Origin Policy via a crafted web site...

The vulnerability of Google Chrome browser allows a hacker to manipulate the URL string.

The vulnerability of the WebContentsImpl::FocusLocationBarByDefault function content/browser/webcontents/webcontentsimpl.cc in the Google Chrome browser exists due to improper handling of calls to certain empty pages. Exploiting this vulnerability can allow a malicious actor to manipulate the URL...

The vulnerability of Google Chrome browser allows a violator to circumvent existing restrictions on domain names.

The vulnerability of the Google Chrome browser’s download process is related to deficiencies in access control. Exploiting this vulnerability could allow a malicious actor to circumvent existing restrictions on the directory name...

UBUNTU-CVE-2016-1661

Blink, as used in Google Chrome before 50.0.2661.94, does not ensure that frames satisfy a check for the same renderer process in addition to a Same Origin Policy check, which allows remote attackers to cause a denial of service memory corruption or possibly have unspecified other impact via a...

CVE-2016-1657

The WebContentsImpl::FocusLocationBarByDefault function in content/browser/webcontents/webcontentsimpl.cc in Google Chrome before 50.0.2661.75 mishandles focus for certain about:blank pages, which allows remote attackers to spoof the address bar via a crafted URL...

CVE-2016-1655

Google Chrome before 50.0.2661.75 does not properly consider that frame removal may occur during callback execution, which allows remote attackers to cause a denial of service use-after-free or possibly have unspecified other impact via a crafted extension...

UBUNTU-CVE-2016-1657

The WebContentsImpl::FocusLocationBarByDefault function in content/browser/webcontents/webcontentsimpl.cc in Google Chrome before 50.0.2661.75 mishandles focus for certain about:blank pages, which allows remote attackers to spoof the address bar via a crafted URL...

The vulnerability of Google Chrome browser allows a perpetrator to trigger a service failure or cause other effects.

The vulnerability of the PageCaptureSaveAsMHTMLFunction::ReturnFailure function browser/extensions/api/pagecapture/pagecaptureapi.cc in the Google Chrome browser is related to code errors. Exploiting this vulnerability may allow an attacker to cause service failures or potentially other effects d...

Vulnerabilities in the Google Chrome browser that allow a perpetrator to trigger a service failure or cause other effects

The multiple vulnerabilities of the opjj2kupdateimagedata function j2k.c in the OpenJPEG component, which is used in the Google Chrome browser’s PDFium engine, are caused by buffer overflows. Exploitation of these vulnerabilities could allow a malicious actor to cause a service failure memory spi...

chromium-browser: use-after-free in Extensions

Use-after-free vulnerability in the GetLoadTimes function in renderer/loadtimesextensionbindings.cc in the Extensions implementation in Google Chrome before 49.0.2623.108 allows remote attackers to cause a denial of service or possibly have unspecified other impact via crafted JavaScript code...

Google Chrome GetLoadTimes Memory Misreference Vulnerability

Google Chrome is a web browsing tool developed by Google. In Google Chrome versions prior to 49.0.2623.108, a memory misreference vulnerability exists in the Extensions/renderer/loadtimesextensionbindings.cc/GetLoadTimes function, which can be exploited by remote attackers to cause a denial of...

UBUNTU-CVE-2016-1647

Use-after-free vulnerability in the RenderWidgetHostImpl::Destroy function in content/browser/rendererhost/renderwidgethostimpl.cc in the Navigation implementation in Google Chrome before 49.0.2623.108 allows remote attackers to cause a denial of service or possibly have unspecified other impact...

The vulnerability of Google Chrome browser allows a perpetrator to trigger a service failure or execute arbitrary code.

The vulnerability of the pi.c function in OpenJPEG, a component of PDFium for the Google Chrome browser, is caused by buffer overflow. Exploiting this vulnerability allows an attacker to execute arbitrary code or cause a service failure memory-bound reading using a specially crafted JPEG 2000 ima...

The vulnerability of Google Chrome browser allows a violator to circumvent existing access restrictions policies.

The vulnerability of the Google Chrome browser’s DOM component is related to deficiencies in access control. Exploiting this vulnerability allows a malicious actor to circumvent existing access control policies by using a specially crafted website...