Google Chrome IndexedDB Sandbox Bypass Vulnerability

Google Chrome is a web browser developed by Google, Inc. and IndexedDB is one of the built-in databases. A sandbox bypass vulnerability exists in IndexedDB in versions of Google Chrome prior to 59.0.3071.104. An attacker can exploit this vulnerability to bypass the sandbox and perform unauthorize...

Google Chrome < 59.0.3071.104 Multiple Vulnerabilities

The version of Google Chrome installed on the remote macOS host is prior to 59.0.3071.104. It is, therefore, affected by multiple vulnerabilities as referenced in the 201706stable-channel-update-for-desktop15 advisory. - Insufficient validation of untrusted input in V8 in Google Chrome prior to...

Google Chrome < 59.0.3071.104 Multiple Vulnerabilities

The version of Google Chrome installed on the remote Windows host is prior to 59.0.3071.104. It is, therefore, affected by multiple vulnerabilities as referenced in the 201706stable-channel-update-for-desktop15 advisory. - Insufficient validation of untrusted input in V8 in Google Chrome prior to...

Mozilla: Use-after-free in IndexedDB (MFSA 2017-16)

A use-after-free vulnerability in IndexedDB when one of its objects is destroyed in memory while a method on it is still being executed. This results in a potentially exploitable crash. This vulnerability affects Firefox 54, Firefox ESR 52.2, and Thunderbird 52.2...

chromium-browser: sandbox escape in indexeddb

A use after free in Blink in Google Chrome prior to 59.0.3071.104 for Mac, Windows, and Linux, and 59.0.3071.117 for Android, allowed a remote attacker to perform an out of bounds memory read via a crafted HTML page, aka an IndexedDB sandbox escape...

openSUSE Security Update : chromium (openSUSE-2017-701)

This update to Chromium 59.0.3071.104 fixes the following security issues : - CVE-2017-5087: Sandbox Escape in IndexedDB - CVE-2017-5088: Out of bounds read in V8 - CVE-2017-5089: Domain spoofing in Omnibox - Various fixes from internal audits, fuzzing and other initiatives The following tracked...

FreeBSD : chromium -- multiple vulnerabilities (f53dd5cc-527f-11e7-a772-e8e0b747a45a)

Google Chrome releases reports : 5 security fixes in this release, including : - 725032 High CVE-2017-5087: Sandbox Escape in IndexedDB. Reported by Ned Williamson on 2017-05-22 - 729991 High CVE-2017-5088: Out of bounds read in V8. Reported by Xiling Gong of Tencent Security Platform Department ...

CVE-2017-5087

A use after free in Blink in Google Chrome prior to 59.0.3071.104 for Mac, Windows, and Linux, and 59.0.3071.117 for Android, allowed a remote attacker to perform an out of bounds memory read via a crafted HTML page, aka an IndexedDB sandbox escape...

Stable Channel Update for Desktop

The stable channel has been updated to 59.0.3071.104 for Windows, Mac, and Linux. This will roll out over the coming days/weeks. Security Fixes and Rewards Note: Access to bug details and links may be kept restricted until a majority of users are updated with a fix. We will also retain restrictio...

chromium -- multiple vulnerabilities

Google Chrome releases reports: 5 security fixes in this release, including: 725032 High CVE-2017-5087: Sandbox Escape in IndexedDB. Reported by Ned Williamson on 2017-05-22 729991 High CVE-2017-5088: Out of bounds read in V8. Reported by Xiling Gong of Tencent Security Platform Department on...

Mozilla: Use-after-free in IndexedDB (MFSA 2017-16)

A use-after-free vulnerability in IndexedDB when one of its objects is destroyed in memory while a method on it is still being executed. This results in a potentially exploitable crash. This vulnerability affects Firefox 54, Firefox ESR 52.2, and Thunderbird 52.2...

Security vulnerabilities fixed in Thunderbird 52.2 — Mozilla

A use-after-free vulnerability with the frameloader during tree reconstruction while regenerating CSS layout when attempting to use a node in the tree that no longer exists. This results in a potentially exploitable crash. A use-after-free vulnerability when using an incorrect URL during the...

CVE-2017-7757

A use-after-free vulnerability in IndexedDB when one of its objects is destroyed in memory while a method on it is still being executed. This results in a potentially exploitable crash. This vulnerability affects Firefox 54, Firefox ESR 52.2, and Thunderbird 52.2...

UBUNTU-CVE-2017-7757

A use-after-free vulnerability in IndexedDB when one of its objects is destroyed in memory while a method on it is still being executed. This results in a potentially exploitable crash. This vulnerability affects Firefox 54, Firefox ESR 52.2, and Thunderbird 52.2...

Google Chrome < 59.0.3071.104 Multiple Vulnerabilities

Binary data 700135.pasl...

CVE-2016-5170

CVE-2016-5170 affects Blink in Chromium-based browsers (WebKit/Blink) via WebKit/Source/bindings/modules/v8/V8BindingForModules.cpp. The vulnerability arises when converting array keys, failing to account for getter side effects, enabling a remote attacker to trigger a denial-of-service through u...

CVE-2016-5150

WebKit/Source/bindings/modules/v8/V8BindingForModules.cpp in Blink, as used in Google Chrome before 53.0.2785.89 on Windows and OS X and before 53.0.2785.92 on Linux, has an Indexed Database aka IndexedDB API implementation that does not properly restrict key-path evaluation, which allows remote...

CVE-2016-5150

Removed by vendor...

UBUNTU-CVE-2016-5150

WebKit/Source/bindings/modules/v8/V8BindingForModules.cpp in Blink, as used in Google Chrome before 53.0.2785.89 on Windows and OS X and before 53.0.2785.92 on Linux, has an Indexed Database aka IndexedDB API implementation that does not properly restrict key-path evaluation, which allows remote...

Fedora 22 : webkitgtk4-2.10.4-1.fc22 (2016-d132dbb529)

Update to 2.10.4. Major new features: New HTTP disk cache for the Network Process. IndexedDB support. New Web Inspector UI. Automatic ScreenServer inhibition when playing fullscreen videos. Initial Editor API. - Performance improvements. This update addresses the following vulnerabilities:...