Adobe Flash Player <= 21.0.0.242 Multiple Vulnerabilities (APSB16-18)

The version of Adobe Flash Player installed on the remote Windows host is equal or prior to version 21.0.0.242. It is, therefore, affected by multiple vulnerabilities : - Multiple memory corruption issues exist that allow an unauthenticated, remote attacker to cause a denial of service condition ...

CVE-2016-2825: Improper Access Control

Mozilla Firefox before 47.0 allows remote attackers to bypass the Same Origin Policy and modify the location.host property via an invalid data: URL...

firefox: multiple issues

CVE-2016-2815 arbitrary code execution Mozilla developers and community members reported several memory safety bugs in the browser engine used in Firefox and other Mozilla-based products. Some of these bugs showed evidence of memory corruption under certain circumstances, and we presume that with...

KLA10822 Multiple vulnerabilities in Mozilla Firefox and Firefox ESR

Multiple serious vulnerabilities have been found in Mozilla Firefox. Malicious users can exploit these vulnerabilities to bypass security restrictions, execute arbitrary code, elevate privileges, cause denial of service, conduct XSS or obtain sensitive information. Below is a complete list of...

PT-2016-2200

Name of the Vulnerable Software and Affected Versions Mozilla Firefox versions prior to 47.0 Description The issue allows remote attackers to bypass the Same Origin Policy and modify the location.host property via an invalid data: URL. This is related to insufficient access control in the browser...

CVE-2016-1692: Improper Access Control

WebKit/Source/core/css/StyleSheetContents.cpp in Blink, as used in Google Chrome before 51.0.2704.63, permits cross-origin loading of CSS stylesheets by a ServiceWorker even when the stylesheet download has an incorrect MIME type, which allows remote attackers to bypass the Same Origin Policy via...

CVE-2016-1675: Improper Access Control

Blink, as used in Google Chrome before 51.0.2704.63, allows remote attackers to bypass the Same Origin Policy by leveraging the mishandling of Document reattachment during destruction, related to FrameLoader.cpp and LocalFrame.cpp...

CVE-2016-1672: Improper Access Control

The ModuleSystem::RequireForJsInner function in extensions/renderer/modulesystem.cc in the extension bindings in Google Chrome before 51.0.2704.63 mishandles properties, which allows remote attackers to conduct bindings-interception attacks and bypass the Same Origin Policy via unspecified vector...

CVE-2016-1674: Undefined Security Weakness

The extensions subsystem in Google Chrome before 51.0.2704.63 allows remote attackers to bypass the Same Origin Policy via unspecified vectors...

CVE-2016-1676: Improper Access Control

extensions/renderer/resources/binding.js in the extension bindings in Google Chrome before 51.0.2704.63 does not properly use prototypes, which allows remote attackers to bypass the Same Origin Policy via unspecified vectors...

CVE-2016-1697: Improper Access Control

The FrameLoader::startLoad function in WebKit/Source/core/loader/FrameLoader.cpp in Blink, as used in Google Chrome before 51.0.2704.79, does not prevent frame navigations during DocumentLoader detach operations, which allows remote attackers to bypass the Same Origin Policy via crafted JavaScrip...

CVE-2016-1673: Undefined Security Weakness

Blink, as used in Google Chrome before 51.0.2704.63, allows remote attackers to bypass the Same Origin Policy via unspecified vectors...

PT-2016-2141

Name of the Vulnerable Software and Affected Versions Google Chrome versions prior to 51.0.2704.79 Opera versions prior to 51.0.2704.79 Description The issue is related to the FrameLoader::startLoad function in WebKit/Source/core/loader/FrameLoader.cpp in Blink, which does not prevent frame...

PT-2016-2142

Name of the Vulnerable Software and Affected Versions Google Chrome versions prior to 51.0.2704.79 Opera affected versions not specified Description The issue is related to errors in access restriction within the browser extension subsystem, allowing a remote attacker to bypass existing access...

PT-2016-2166

Name of the Vulnerable Software and Affected Versions Google Chrome versions prior to 51.0.2704.63 Opera affected versions not specified Description The issue is related to the ModuleSystem::RequireForJsInner function in the extension bindings, which mishandles properties. This allows remote...

PT-2016-2164

Name of the Vulnerable Software and Affected Versions Google Chrome versions prior to 51.0.2704.63 Opera affected versions not specified Description The issue is related to errors in the code of the extensions subsystem, allowing a remote attacker to bypass the existing access restriction policy,...

PT-2016-2163

Name of the Vulnerable Software and Affected Versions Google Chrome versions prior to 51.0.2704.63 Opera affected versions not specified Description The issue allows remote attackers to bypass the Same Origin Policy by leveraging the mishandling of Document reattachment during destruction, relate...

PT-2016-2165

Name of the Vulnerable Software and Affected Versions Google Chrome versions prior to 51.0.2704.63 Opera affected versions not specified Description The issue allows remote attackers to bypass the Same Origin Policy via unspecified vectors. This is related to errors in the code of the Blink...

PT-2016-2162

Name of the Vulnerable Software and Affected Versions Google Chrome versions prior to 51.0.2704.63 Opera affected versions not specified Description The issue is related to the improper use of prototypes in the extensions/renderer/resources/binding.js component of the extension bindings. This...

PT-2016-2146

Name of the Vulnerable Software and Affected Versions Google Chrome versions prior to 51.0.2704.63 Description The issue is related to errors in controlling access to CSS styles, allowing remote attackers to bypass the Same Origin Policy via a crafted web site. This can be achieved by exploiting...