CVE-2014-3566

CVE-2014-3566 (POODLE) affects SSLv3 in AIX and related IBM components. IBM’s advisory (nettcp) states SSLv3 padding oracle vulnerability could allow MITM decryption of SSL sessions. Affected: AIX 6.1/7.1 and VIOS 2.2.x with vulnerable bos.net.tcp.client/server file sets (various lower/upper leve...

CVE-2015-0350

Adobe Flash Player vulnerable to memory corruption that can lead to remote code execution or denial of service. Affected versions: Windows/OS X before 13.0.0.281 and 14.x–17.x before 17.0.0.169; Linux before 11.2.202.457. Vectors are unspecified; no exploitation details provided in the source. No...

CVE-2015-0360

CVE-2015-0360 affects Adobe Flash Player pre-13.0.0.281 and 14.x–17.x pre-17.0.0.169 on Windows/macOS, and pre-11.2.202.457 on Linux, with memory corruption that could lead to arbitrary code execution or a denial of service via unspecified vectors. The connected CISA KEV entry summarizes it as a ...

CVE-2015-0347

CVE-2015-0347 affects Adobe Flash Player before 13.0.0.281 and 14.x up to 17.x before 17.0.0.169 on Windows/OS X, and before 11.2.202.457 on Linux. The vulnerability is described as memory corruption that allows attackers to execute arbitrary code or cause a denial of service, via unspecified vec...

CVE-2015-0353

Concrete details from connected documents show CVE-2015-0353 affects Adobe Flash Player before certain versions on Windows, OS X, and Linux, with memory corruption exploitable to execute arbitrary code or cause a denial of service. Affected lines specify: Windows/OS X builds up to 13.0.0.281 and ...

CVE-2015-0354

CVE-2015-0354 refers to Adobe Flash Player vulnerabilities that allow remote code execution or memory corruption. Affected products include Flash Player before 13.0.0.281 and versions up to 17.x before 17.0.0.169 on Windows/macOS, and before 11.2.202.457 on Linux. The initial description notes th...

CVE-2015-0352

CVE-2015-0352 concerns Adobe Flash Player with the vulnerability described as a memory corruption issue that allows an attacker to achieve remote code execution or cause a denial of service. Affected products include Flash Player on Windows, OS X, and Linux, with vulnerable versions listed as bef...

CVE-2015-3038

CVE-2015-3038 affects Adobe Flash Player on Windows, OS X, and Linux; vulnerable versions include Flash Player before 13.0.0.281 and 14.x through 17.x before 17.0.0.169 (Linux before 11.2.202.457), with memory corruption that can enable arbitrary code execution or a denial of service via unspecif...

CVE-2015-3042

CVE-2015-3042 affects Adobe Flash Player prior to 13.0.0.281 and 14.x through 17.x prior to 17.0.0.169 on Windows and OS X, and prior to 11.2.202.457 on Linux. The vulnerability is a memory corruption issue that allows attackers to execute arbitrary code or cause a denial of service via unspecifi...

CVE-2015-3041

Technical details for CVE-2015-3041 are not provided in the connected documents. Public info is limited to a generic description in the Initial document. Monitor for updates.

CVE-2015-0355

Adobe Flash Player memory‑corruption vulnerability (CVE‑2015‑0355) affects Flash Player before 13.0.0.281 and 14.x up to 17.x before 17.0.0.169 on Windows/macOS, and before 11.2.202.457 on Linux. Root cause is memory corruption via unspecified vectors, leading to arbitrary code execution or denia...

CVE-2015-8540

CVE-2015-8540: libpng contains an integer underflow in png_check_keyword (pngwutil.c) that allows remote attackers to trigger an out-of-bounds read via a space character used as a PNG keyword. Affected families include libpng 0.90–0.99, 1.0.x before 1.0.66, 1.1.x and 1.2.x before 1.2.56, 1.3.x an...

CVE-2014-7923

The CVE-2014-7923 entry concerns the Regular Expressions package in ICU (International Components for Unicode) bundled as ICU 52 before SVN revision 292944. It affected Google Chrome builds that used this ICU version (specifically Chrome before 40.0.2214.91). The vulnerability allows remote attac...

CVE-2015-1271

CVE-2015-1271 is a confirmed vulnerability in Chromium’s pdfium component, described as a heap-buffer-overflow in pdfium associated with large memory allocations triggered by crafted PDFs. Public references in the connected documents indicate the issue was fixed in Chrome 44.0.2403.89 (stable cha...

CVE-2013-5870

Oracle Java SE 7u45 and JavaFX 2.2.45 are affected by an unspecified vulnerability (CVE-2013-5870) that allows remote attackers to impact confidentiality, integrity, and availability via unknown vectors related to JavaFX. The issue is listed among multiple CVEs in Red Hat/RHSA advisories and Gent...

CVE-2015-1270

CVE-2015-1270 affects the ICU library used by Google Chrome prior to 44.0.2403.89. The issue arises in ucnv_io_getConverterName within common/ucnv_io.cpp, where converter names starting with x- are mishandled, allowing a remote attacker to trigger a read of uninitialized memory (denial of service...

CVE-2014-3192

CVE-2014-3192 is a use-after-free in the Blink DOM implementation (ProcessingInstruction::setXSLStyleSheet) that affects Google Chrome before 38.0.2125.101. The vulnerability can lead to remote denial of service or possibly unspecified impact via unknown vectors. The initial description specifies...

CVE-2015-1274

CVE-2015-1274 affects Google Chrome/Chromium prior to 44.0.2403.89, where the auto-open list could still execute certain file types immediately after download. Root causes are described in download_commands.cc and download_prefs.cc. The vulnerability could allow remote attackers to run arbitrary ...

CVE-2016-1663

CVE-2016-1663 refers to a use-after-free in Blink’s V8 bindings (SerializedScriptValue transfer logic) within Chromium/Chrome prior to 50.0.2661.94. The vulnerability arises from mishandling certain array-buffer data structures in the V8 bindings used by Blink, allowing a remote attacker to explo...

CVE-2015-1243

CVE-2015-1243 affects Google's Blink DOM (MutationObserver.cpp, MutationObserver::disconnect) in Chrome up to 42.0.2311.135. The vulnerability is a use-after-free that can be triggered by unregistering a MutationObserver not currently registered, enabling remote DoS or unspecified impact. Documen...

CVE-2015-0346

CVE-2015-0346 is a double-free vulnerability in Adobe Flash Player that allows arbitrary code execution. Affected products and versions: Windows and OS X builds prior to 13.0.0.281, and 14.x up to 17.x before 17.0.0.169; Linux prior to 11.2.202.457. Root cause: a double-free condition in Flash’s ...

CVE-2015-1214

CVE-2015-1214 : Integer overflow in the SkAutoSTArray implementation (Skia) used by Google Chrome before 41.0.2272.76 enables remote attackers to cause a denial of service or possibly other impact via vectors triggering a reset with a large count, leading to an out-of-bounds write. The issue is p...

CVE-2016-1661

CVE-2016-1661 affects Blink in Google Chrome prior to 50.0.2661.94. The issue arises because frames are not only checked against Same Origin Policy but also against the renderer process, enabling remote attackers to trigger memory corruption in cross‑process frames. Related components: BindingSec...

CVE-2015-3044

CVE-2015-3044 affects Adobe Flash Player across Windows, macOS and Linux (e.g., Flash Player before 13.0.0.281 and 14.x up to 17.x before 17.0.0.169 on Windows/macOS; before 11.2.202.457 on Linux). The vulnerability is a access restriction bypass that could leak sensitive data via unspecified vec...

CVE-2015-1277

CVE-2015-1277 is a use-after-free vulnerability in Google's Chrome/Chromium accessibility implementation (Chromium project). The issue arises from invalid memory handling in accessibility-tree structures, enabling a remote attacker to trigger a denial of service and possibly other unspecified imp...

CVE-2013-2231

CVE-2013-2231 is an Unquoted Windows search path vulnerability in the QEMU Guest Agent service that affects Red Hat Enterprise Linux Desktop 6, HPC Node 6, Server 6, Workstation 6, and related 6.x variants. The issue is exploitable locally via a crafted program placed in an unspecified folder, wi...

CVE-2015-1278

Google Chrome up to 44.0.2403.89 is affected by CVE-2015-1278 due to content/browser/web_contents/web_contents_impl.cc not closing a PDF document's modal dialog when navigating to an interstitial page, enabling URL spoofing via a crafted PDF (alert_dialog.pdf). Remediation: upgrade to Chrome 44.0...

CVE-2015-1281

CVE-2015-1281 is documented in multiple connected sources as a CSP bypass in Blink (core/loader/ImageLoader.cpp) used by Google Chrome/Chromium prior to 44.0.2403.89. The root cause is a failure to correctly determine the V8 context of a microtask, enabling remote CSP restrictions bypass via an i...

CVE-2015-1284

The CVE-2015-1284 entry concerns Google Chrome/Blink: LocalFrame::isURLAllowed in core/frame/LocalFrame.cpp did not properly cap the maximum number of frames on a page, allowing crafted JavaScript that creates many IFRAME elements to trigger a denial of service (invalid count value) and potential...

CVE-2015-0349

Technical details for CVE-2015-0349 are not publicly available in the provided documents. No affected products, versions, root cause, or fixes are documented here. Monitor for updates in connected sources.

CVE-2015-0348

CVE-2015-0348 is a documented buffer overflow in Adobe Flash Player that could allow remote code execution via unspecified vectors. The initial description specifies affected versions: Windows/macOS before 13.0.0.281 and 14.x through 17.x before 17.0.0.169, and Linux before 11.2.202.457. Connecte...

CVE-2015-1272

CVE-2015-1272 affects Google Chrome before 44.0.2403.89; a race condition in the GPU process (GPUChannelHost during Blink shutdown) could allow remote denial of service or unspecified impact. Mitigation: upgrade to Chrome 44.0.2403.89 or later (as fixed in the Debian/Chromium advisories and Chrom...

CVE-2014-7926

The CVE-2014-7926 entry concerns the Regular Expressions component of ICU. It describes a memory corruption vulnerability triggered by a zero-length quantifier in ICU 52 (before SVN r292944) and affects software bundling that ICU, notably Google Chrome prior to 40.0.2214.91. Public advisories in ...

CVE-2015-0351

CVE-2015-0351 is an Adobe Flash Player use-after-free vulnerability that could allow remote code execution. Publicly available sources note it affects Flash Player prior to 13.0.0.281 and 14.x through 17.x prior to 17.0.0.169 on Windows/macOS, and prior to 11.2.202.457 on Linux, with the attack v...

CVE-2015-1276

The CVE-2015-1276 issue affects Google Chrome’s IndexedDB implementation (content/browser/indexed_db/indexed_db_backing_store.cc). Description: a use-after-free in IndexedDB can allow remote attackers to cause a denials of service or potentially other impact by leveraging an abort action before a...

CVE-2015-1285

The CVE-2015-1285 issue affects the Blink XSS auditor (XSSAuditor.cpp) used by Google Chrome up to version 44.0.2403.89. Root cause: the XSSAuditor::canonicalize function fails to properly select a truncation point, enabling an information leak via an unspecified linear-time attack. Impact: remot...

CVE-2016-1665

CVE-2016-1665 is an information-leak vulnerability in Google Chrome’s V8 JavaScript engine. The issue arises in the JSGenericLowering path (compiler/js-generic-lowering.cc) where Chrome before 50.0.2661.94 mishandled certain comparison operators, enabling remote attackers to obtain sensitive info...

CVE-2015-0358

Technical details about CVE-2015-0358 are not provided in the connected documents. The initial description mentions use-after-free in Flash Player versions but lacks concrete product/version/root-cause/remediation details. Monitor for updates.

CVE-2015-3040

CVE-2015-3040 affects Adobe Flash Player. A memory address discovery bypass vulnerability allows bypassing ASLR on Windows, OS X, and Linux. Affected versions: Flash Player before 13.0.0.281 and 14.x through 17.x before 17.0.0.169 (Windows/OS X); before 11.2.202.457 (Linux). Root cause: improper ...

CVE-2015-3039

CVE-2015-3039 is a use-after-free in Adobe Flash Player (AS2 conversion operator handling) that can lead to arbitrary code execution. Affected: Flash Player before 13.0.0.281 and 14.x up to 17.x before 17.0.0.169 on Windows/OS X, and before 11.2.202.457 on Linux. Root cause: during native matrix ...

CVE-2015-1273

CVE-2015-1273 is a heap-buffer-overflow in OpenJPEG (j2k.c) used by PDFium inside Google Chrome/Chromium. The vulnerability is triggered by invalid JPEG2000 data within PDFs, potentially causing a denial of service or other impact. Affected product: Chromium-based browsers (Chrome/Chromium) prior...

CVE-2016-1660

CVE-2016-1660 affects the Blink component in Google Chrome (pre-50.0.2661.94). The issue is an out-of-bounds write in Blink’s WTF::BitArray and WTF::double_conversion::Vector, allowing remote attackers to crash the browser or potentially cause more impact via crafted web pages. Public notices acr...

CVE-2016-1666

CVE-2016-1666 affects Google Chrome/Chromium up to version 50.0.2661.94. The issue is listed among multiple Chrome vulnerabilities; the linked Debian advisory and Chrome release notes attribute it to broad fixes from internal audits, fuzzing, and related initiatives. The initial CVE summary state...

CVE-2016-1662

CVE-2016-1662 is a use-after-free in Google Chrome/Chromium extensions related to the GC callback (gc_callback.cc). The issue arises because Chrome, prior to version 50.0.2661.94, does not prevent fallback execution once the Garbage Collection callback has started, enabling denial-of-service via ...

CVE-2015-1231

Google Chrome before 41.0.2272.76 is affected by multiple vulnerabilities described in MGASA-2015-0123 (CVE-2015-1231 family), including use-after-free and out-of-bounds issues in Skia/Blink components (e.g., SkBitmap, Skia filters, V8/DOM paths) that allow denial of service or other unspecified ...

CVE-2015-1289

CVE-2015-1289 refers to multiple vulnerabilities found in Google Chrome prior to 44.0.2403.89. The connected records confirm this CVE as part of the Chromium/Chrome fixes, with the Chrome 44 stable update (44.0.2403.89) addressing these issues. The user-visible impact from the sources is a denial...

CVE-2015-1280

Affected software: Google Chrome (Skia). CVE-2015-1280 is a memory corruption issue in SkPictureShader.cpp within Skia used by Chrome before 44.0.2403.89. Root cause: crafted serialized data provided to the renderer can trigger memory corruption, leading to a possible denial of service and unspec...

CVE-2014-0418

CVE-2014-0418 is an unspecified vulnerability in Oracle Java SE 6u65 and 7u45 related to the Deployment component. The initial description notes remote attackers could affect confidentiality, integrity, and availability via unknown vectors, and explicitly differentiates this CVE from other CVEs i...

CVE-2015-1250

Google Chrome prior to 42.0.2311.135 contained multiple vulnerabilities that were fixed by the Chrome team during internal auditing; affecting Chrome/Chromium prior to the 42.0.2311.135 release and potentially enabling denial of service or other impacts via unknown vectors. Remediation observed i...

CVE-2015-1279

CVE-2015-1279 : Integer overflow in CJBig2_Image::expand within PDFium (fxcodec/jbig2/JBig2_Image.cpp) used by Google Chrome before 44.0.2403.89 leads to a heap-based buffer overflow when processing large height/stride values. Impact described as remote denial of service (and unspecified other im...