TI-2016-04495 CVE-2016-5194 · GHSA-9599-wjxj-x99m
Unspecified vulnerabilities in Google Chrome before 54.0.2840.59.
Priority MEDIUM 43
Unspecified vulnerabilities in Google Chrome before 54.0.2840.59.
RHSA-2016:2067
chromium-browser security update
Released 2016-10-17 · Red Hat rating Important · View on Red Hat →
Fixed in
- Red Hat Enterprise Linux Desktop Supplementary (v. 6) chromium-browser-54.0.2840.59-1.el6
- Red Hat Enterprise Linux Server Supplementary (v. 6) chromium-browser-54.0.2840.59-1.el6
- Red Hat Enterprise Linux Workstation Supplementary (v. 6) chromium-browser-54.0.2840.59-1.el6
Fixes 14 records
TI-2016-04483 CVE-2016-5182 · GHSA-2w74-h4gc-c374
Memory corruption in Chrome prior to 54.0.2840.59 for Windows, Mac, and Linux…
Priority MEDIUM 41
Blink in Google Chrome prior to 54.0.2840.59 for Windows, Mac, and Linux; 54.0.2840.85 for Android had insufficient validation in bitmap handling, which allowed a remote attacker to potentially exploit heap corruption vi…
TI-2016-04486 CVE-2016-5185 · GHSA-p7vv-6mr3-qfv8
Use after free in Chrome prior to 54.0.2840.59 for Windows, Mac, and Linux; 54.0.2840.85…
Priority MEDIUM 40
Blink in Google Chrome prior to 54.0.2840.59 for Windows, Mac, and Linux; 54.0.2840.85 for Android incorrectly allowed reentrance of FrameView::updateLifecyclePhasesInternal(), which allowed a remote attacker to perform…
TI-2016-04485 CVE-2016-5184 · GHSA-r98c-x7h2-q5rv
Use after free in Chrome prior to 54.0.2840.59 for Windows, Mac, and Linux; 54.0.2840.85…
Priority MEDIUM 40
PDFium in Google Chrome prior to 54.0.2840.59 for Windows, Mac, and Linux; 54.0.2840.85 for Android incorrectly handled object lifecycles in CFFL_FormFillter::KillFocusForAnnot, which allowed a remote attacker to potenti…
TI-2016-04484 CVE-2016-5183 · GHSA-mr78-86rh-644v
Use after free in Chrome prior to 54.0.2840.59 for Windows, Mac, and Linux; 54.0.2840.85…
Priority MEDIUM 40
A heap use after free in PDFium in Google Chrome prior to 54.0.2840.59 for Windows, Mac, and Linux; 54.0.2840.85 for Android allows a remote attacker to potentially exploit heap corruption via crafted PDF files.
TI-2016-04493 CVE-2016-5192 · GHSA-5qph-qrqq-9w48
Improper access control in Chrome prior to 54.0.2840.59 for Windows
Priority LOW 31
Blink in Google Chrome prior to 54.0.2840.59 for Windows missed a CORS check on redirect in TextTrackLoader, which allowed a remote attacker to bypass cross-origin restrictions via crafted HTML pages.
TI-2016-04492 CVE-2016-5191 · GHSA-4rf5-qf66-5m85
Cross-site scripting in Chrome prior to 54.0.2840.59 for Windows, Mac, and Linux…
Priority LOW 31
Bookmark handling in Google Chrome prior to 54.0.2840.59 for Windows, Mac, and Linux; 54.0.2840.85 for Android had insufficient validation of supplied data, which allowed a remote attacker to inject arbitrary scripts or…
TI-2016-04490 CVE-2016-5189 · GHSA-cmfh-jgfm-976r
Improper access control in Chrome prior to 54.0.2840.59 for Windows, Mac, and Linux…
Priority LOW 31
Google Chrome prior to 54.0.2840.59 for Windows, Mac, and Linux; 54.0.2840.85 for Android permitted navigation to blob URLs with non-canonical origins, which allowed a remote attacker to spoof the contents of the Omnibox…
TI-2016-04488 CVE-2016-5187 · GHSA-52jh-hj3q-x9m5
Improper input validation in Chrome prior to 54.0.2840.85 for Android
Priority LOW 31
Google Chrome prior to 54.0.2840.85 for Android incorrectly handled rapid transition into and out of full screen mode, which allowed a remote attacker to spoof the contents of the Omnibox (URL bar) via crafted HTML pages…
TI-2016-04482 CVE-2016-5181 · GHSA-j5hj-pjvg-f88f
Cross-site scripting in Chrome prior to 54.0.2840.59 for Windows, Mac, and Linux…
Priority LOW 31
Blink in Google Chrome prior to 54.0.2840.59 for Windows, Mac, and Linux; 54.0.2840.85 for Android permitted execution of v8 microtasks while the DOM was in an inconsistent state, which allowed a remote attacker to injec…
TI-2016-04491 CVE-2016-5190 · GHSA-9phg-xr8m-wg28
Use after free in Chrome prior to 54.0.2840.59 for Windows, Mac, and Linux; 54.0.2840.85…
Priority LOW 30
Google Chrome prior to 54.0.2840.59 for Windows, Mac, and Linux; 54.0.2840.85 for Android incorrectly handled object lifecycles during shutdown, which allowed a remote attacker to perform an out of bounds memory read via…
TI-2016-04487 CVE-2016-5186 · GHSA-3gjx-83h4-mg3w
Out-of-bounds read in Chrome prior to 54.0.2840.59 for Windows, Mac, and Linux…
Priority LOW 25
Devtools in Google Chrome prior to 54.0.2840.59 for Windows, Mac, and Linux; 54.0.2840.85 for Android incorrectly handled objects after a tab crash, which allowed a remote attacker to perform an out of bounds memory read…
TI-2016-04494 CVE-2016-5193 · GHSA-8vpq-vv9q-59cq
Improper input validation in Chrome prior to 54.0 for iOS
Priority LOW 22
Google Chrome prior to 54.0 for iOS had insufficient validation of URLs for windows open by DOM, which allowed a remote attacker to bypass restrictions on navigation to certain URL schemes via crafted HTML pages.
TI-2016-04489 CVE-2016-5188 · GHSA-fg8g-4gxq-9wjr
Improper input validation in Chrome prior to 54.0.2840.59 for Windows, Mac, and Linux
Priority LOW 22
Multiple issues in Blink in Google Chrome prior to 54.0.2840.59 for Windows, Mac, and Linux allow a remote attacker to spoof various parts of browser UI via crafted HTML pages.