10389 matches found
CVE-2015-6788
CVE-2015-6788 affects Google Chrome prior to 47.0.2526.80. The issue is a type confusion in the extensions subsystem, specifically the ObjectBackedNativeHandler in extensions/renderer/object_backed_native_handler.cc, which can be triggered remotely to cause a denial of service and possibly unspec...
CVE-2015-6788
Removed by vendor...
CVE-2015-6788
The ObjectBackedNativeHandler class in extensions/renderer/objectbackednativehandler.cc in the extensions subsystem in Google Chrome before 47.0.2526.80 improperly implements handler functions, which allows remote attackers to cause a denial of service or possibly have unspecified other impact vi...
chromium-browser: Type confusion in extensions
The ObjectBackedNativeHandler class in extensions/renderer/objectbackednativehandler.cc in the extensions subsystem in Google Chrome before 47.0.2526.80 improperly implements handler functions, which allows remote attackers to cause a denial of service or possibly have unspecified other impact vi...
CVE-2015-7050
WebKit in Apple iOS before 9.2 and Safari before 9.0.2 misparses content extensions, which allows remote attackers to obtain sensitive browsing-history information via a crafted web site...
UBUNTU-CVE-2015-7050
WebKit in Apple iOS before 9.2 and Safari before 9.0.2 misparses content extensions, which allows remote attackers to obtain sensitive browsing-history information via a crafted web site...
PT-2015-3112
Name of the Vulnerable Software and Affected Versions Safari versions prior to 9.0.2 iOS versions prior to 9.2 Description The issue is related to the misparsing of content extensions in WebKit, which can allow remote attackers to obtain sensitive browsing-history information via a crafted web...
PT-2015-3114
Name of the Vulnerable Software and Affected Versions Apple OS X versions prior to 10.11.2 Description The issue is related to insufficient access control to certain functions in the Mac OS X operating system kernel. It allows a local attacker to exploit the weakness and potentially gain elevated...
CVE-2015-7050: Exposure of Sensitive Information to an Unauthorized Actor
WebKit in Apple iOS before 9.2 and Safari before 9.0.2 misparses content extensions, which allows remote attackers to obtain sensitive browsing-history information via a crafted web site...
Google Chrome Extensions Memory Misreference Vulnerability
Google Chrome is a web browser developed by the American company Google Google. The 'GetLoadTimes' function in the renderer/loadtimesextensionbindings.cc file in the Extensions implementation of Google Chrome prior to version 47.0.2526.73 A memory misreference vulnerability exists. A remote...
UBUNTU-CVE-2015-6774
Use-after-free vulnerability in the GetLoadTimes function in renderer/loadtimesextensionbindings.cc in the Extensions implementation in Google Chrome before 47.0.2526.73 allows remote attackers to cause a denial of service or possibly have unspecified other impact via crafted JavaScript code that...
CVE-2015-6774
Use-after-free vulnerability in the GetLoadTimes function in renderer/loadtimesextensionbindings.cc in the Extensions implementation in Google Chrome before 47.0.2526.73 allows remote attackers to cause a denial of service or possibly have unspecified other impact via crafted JavaScript code that...
CVE-2015-6774
Use-after-free vulnerability in the GetLoadTimes function in renderer/loadtimesextensionbindings.cc in the Extensions implementation in Google Chrome before 47.0.2526.73 allows remote attackers to cause a denial of service or possibly have unspecified other impact via crafted JavaScript code that...
CVE-2015-6774
Removed by vendor...
CVE-2015-6774
CVE-2015-6774 is a use-after-free in the Chrome/Chromium Extensions bindings. A crafted JavaScript payload in renderer/loadtimes_extension_bindings.cc (GetLoadTimes) can trigger a crash or potentially broader impact, leading to a denial of service and unspecified effects. Affected product: Google...
chromium-browser: Use-after-free in Extensions
Use-after-free vulnerability in the GetLoadTimes function in renderer/loadtimesextensionbindings.cc in the Extensions implementation in Google Chrome before 47.0.2526.73 allows remote attackers to cause a denial of service or possibly have unspecified other impact via crafted JavaScript code that...
FreeBSD : chromium -- multiple vulnerabilities (548f74bd-993c-11e5-956b-00262d5ed8ee)
Google Chrome Releases reports : 41 security fixes in this release, including : - 558589 Critical CVE-2015-6765: Use-after-free in AppCache. Credit to anonymous. - 551044 High CVE-2015-6766: Use-after-free in AppCache. Credit to anonymous. - 554908 High CVE-2015-6767: Use-after-free in AppCache...
KLA10703 Multiple vulnerabilities in Google Chrome
Multiple serious vulnerabilities have been found in Google Chrome. Malicious users can exploit these vulnerabilities to cause denial of service, spoof user interface, bypass security restrictions or execute arbitrary code. Below is a complete list of vulnerabilities 1. Improper array elements...
Chrome third-party extensions to be exposed can record private information and sell it-vulnerability warning-the black bar safety net
The Swedish security firm Detectify Labs currently represents some of the Chrome extension app will track The user's Internet history, and even also includes Facebook Connect and privacy of the access token, is connected to a private Dropbox and Google Drive file link. Affect a wide range is not...
Juniper Networks Junos OS FTPS-Extensions Vulnerability
Junos OS is prone to a vulnerability in BFD daemon. SPDX-FileCopyrightText: 2015 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE = "cpe:/o:juniper:junos"; if descriptio...