CVSS: 8.8EPSS: 0%CPEs: 1EXPL: 0CVE-2016-5204 – chromium-browser: universal xss in blink
https://notcve.org/view.php?id=CVE-2016-5204
05 Dec 2016 — Leaking of an SVG shadow tree leading to corruption of the DOM tree in Blink in Google Chrome prior to 55.0.2883.75 for Mac, Windows and Linux, and 55.0.2883.84 for Android allowed a remote attacker to inject arbitrary scripts or HTML (UXSS) via a crafted HTML page. La filtración de un árbol de sombra SVG dando lugar a corrupción del árbol DOM en Blink en Google Chrome anterior a 55.0.2883.75 para Mac, Windows y Linux y 55.0.2883.84 para Android permitió a un atacante remoto inyectar secuencias de comandos ... • http://rhn.redhat.com/errata/RHSA-2016-2919.html • CWE-79: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') •
CVSS: 6.8EPSS: 0%CPEs: 1EXPL: 0CVE-2016-5219 – chromium-browser: use after free in v8
https://notcve.org/view.php?id=CVE-2016-5219
05 Dec 2016 — A heap use after free in V8 in Google Chrome prior to 55.0.2883.75 for Mac, Windows and Linux, and 55.0.2883.84 for Android allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. Un uso después de liberación de memoria en V8 en Google Chrome anterior a 55.0.2883.75 para Mac, Windows y Linux y 55.0.2883.84 para Android permitió a un atacante remoto explotar potencialmente corrupción de memoria a través de una página HTML manipulada. Multiple vulnerabilities were discovered ... • http://rhn.redhat.com/errata/RHSA-2016-2919.html • CWE-416: Use After Free •
CVSS: 8.8EPSS: 0%CPEs: 1EXPL: 0CVE-2016-5208 – chromium-browser: universal xss in blink
https://notcve.org/view.php?id=CVE-2016-5208
05 Dec 2016 — Blink in Google Chrome prior to 55.0.2883.75 for Linux and Windows, and 55.0.2883.84 for Android allowed possible corruption of the DOM tree during synchronous event handling, which allowed a remote attacker to inject arbitrary scripts or HTML (UXSS) via a crafted HTML page. Blink en Google Chrome anterior a 55.0.2883.75 para Linux y Windows y 55.0.2883.84 para Android permitió una posible corrupción del árbol DOM durante el manejo del evento sincronizado, lo que permitió a un atacante remoto inyectar secue... • http://rhn.redhat.com/errata/RHSA-2016-2919.html • CWE-79: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') •
CVSS: 6.5EPSS: 0%CPEs: 1EXPL: 0CVE-2016-5223 – chromium-browser: integer overflow in pdfium
https://notcve.org/view.php?id=CVE-2016-5223
05 Dec 2016 — Integer overflow in PDFium in Google Chrome prior to 55.0.2883.75 for Mac, Windows and Linux, and 55.0.2883.84 for Android allowed a remote attacker to potentially exploit heap corruption or DoS via a crafted PDF file. Vulnerabilidad de desbordamiento de entero en PDFium en Google Chrome anterior a 55.0.2883.75 para Mac, Windows y Linux y 55.0.2883.84 para Android permitió a un atacante remoto explotar potencialmente la corrupción de memoria o DoS a través de un archivo PDF manipulado. Chromium is an open-s... • http://rhn.redhat.com/errata/RHSA-2016-2919.html • CWE-190: Integer Overflow or Wraparound •
CVSS: 8.8EPSS: 0%CPEs: 1EXPL: 0CVE-2016-5211 – chromium-browser: use after free in pdfium
https://notcve.org/view.php?id=CVE-2016-5211
05 Dec 2016 — A use after free in PDFium in Google Chrome prior to 55.0.2883.75 for Mac, Windows and Linux, and 55.0.2883.84 for Android allowed a remote attacker to potentially exploit heap corruption via a crafted PDF file. Un uso después de liberación de memoria en PDFium en Google Chrome anterior a 55.0.2883.75 para Mac, Windows y Linux y 55.0.2883.84 para Android permitió a un atacante remoto explotar corrupción de memoria a través de un archivo PDF manipulado. Chromium is an open-source web browser, powered by WebK... • http://rhn.redhat.com/errata/RHSA-2016-2919.html • CWE-416: Use After Free •
CVSS: 8.8EPSS: 0%CPEs: 1EXPL: 0CVE-2016-5212 – chromium-browser: local file disclosure in devtools
https://notcve.org/view.php?id=CVE-2016-5212
05 Dec 2016 — Google Chrome prior to 55.0.2883.75 for Mac, Windows and Linux, and 55.0.2883.84 for Android insufficiently sanitized DevTools URLs, which allowed a remote attacker to read local files via a crafted HTML page. Google Chrome anterior a 55.0.2883.75 para Mac, Windows y Linux y 55.0.2883.84 para Android desinfecta insuficientemente URLs DevTools, lo que permitió a un atacante remoto leer archivos locales a través de una página HTML manipulada. Multiple vulnerabilities were discovered in Chromium. If a user wer... • http://rhn.redhat.com/errata/RHSA-2016-2919.html • CWE-200: Exposure of Sensitive Information to an Unauthorized Actor •
CVSS: 10.0EPSS: 0%CPEs: 1EXPL: 0CVE-2016-9652 – chromium-browser: various fixes from internal audits
https://notcve.org/view.php?id=CVE-2016-9652
05 Dec 2016 — Multiple unspecified vulnerabilities in Google Chrome before 55.0.2883.75. múltiples vulnerabilidades no especificadas en Google Chrome anterior a la versión 55,0,2883,75 Multiple vulnerabilities were discovered in Chromium. If a user were tricked in to opening a specially crafted website, an attacker could potentially exploit these to conduct cross-site scripting attacks, read uninitialized memory, obtain sensitive information, spoof the webview URL, bypass same origin restrictions, cause a denial of servi... • http://lists.opensuse.org/opensuse-security-announce/2016-12/msg00050.html •
CVSS: 8.8EPSS: 1%CPEs: 1EXPL: 0CVE-2016-5210 – chromium-browser: out of bounds write in pdfium
https://notcve.org/view.php?id=CVE-2016-5210
05 Dec 2016 — Heap buffer overflow during TIFF image parsing in PDFium in Google Chrome prior to 55.0.2883.75 for Mac, Windows and Linux, and 55.0.2883.84 for Android allowed a remote attacker to potentially exploit heap corruption via a crafted PDF file. Desbordamiento de búfer basado en memoria dinámica durante el análisis de imagen TIFF en PDFium en Google Chrome anterior a 55.0.2883.75 para Mac, Windows y Linux y 55.0.2883.84 para Android permitió a un atacante remoto explotar potencialmente corrupción de memoria a t... • http://rhn.redhat.com/errata/RHSA-2016-2919.html • CWE-787: Out-of-bounds Write •
CVSS: 6.5EPSS: 0%CPEs: 1EXPL: 0CVE-2016-5217 – chromium-browser: use of unvalidated data in pdfium
https://notcve.org/view.php?id=CVE-2016-5217
05 Dec 2016 — The extensions API in Google Chrome prior to 55.0.2883.75 for Mac, Windows and Linux, and 55.0.2883.84 for Android incorrectly permitted access to privileged plugins, which allowed a remote attacker to bypass site isolation via a crafted HTML page. La API de extensiones en Google Chrome anterior a 55.0.2883.75 para Mac, Windows y Linux permite acceso de manera incorrecta a plugins privilegiados, lo que permitió a un atacante remoto eludir el aislamiento del sitio a través de una página HTML manipulada. Chro... • http://rhn.redhat.com/errata/RHSA-2016-2919.html • CWE-284: Improper Access Control •
CVSS: 8.8EPSS: 0%CPEs: 1EXPL: 0CVE-2016-5213 – chromium-browser: use after free in v8
https://notcve.org/view.php?id=CVE-2016-5213
05 Dec 2016 — A use after free in V8 in Google Chrome prior to 55.0.2883.75 for Mac, Windows and Linux, and 55.0.2883.84 for Android allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. Un uso después de liberación de memoria en V8 en Google Chrome anterior a 55.0.2883.75 para Mac, Windows y Linux y 55.0.2883.84 para Android permitió a un atacante remoto explotar potencialmente corrupción de memoria a través de una página HTML manipulada. Multiple vulnerabilities were discovered in Ch... • http://rhn.redhat.com/errata/RHSA-2016-2919.html • CWE-416: Use After Free •