CVE-2016-9652
Multiple unspecified vulnerabilities in Google Chrome before 55.0.2883.75.
- Mettez à jour vers 1.19.4-0ubuntu0.14.04.1
Publication Mise à jour
PatchFirst · Vulnérabilités récentes
Vulnérabilités de oxide-qt
Vulnérabilité publiée pour oxide-qt au cours des 30 derniers jours : 0. Dans le catalogue KEV : 0.
Vulnérabilités : 324
CVE-2016-5194
Unspecified vulnerabilities in Google Chrome before 54.0.2840.59.
- Mettez à jour vers 1.18.3-0ubuntu0.14.04.1
Publication Mise à jourCVE-2016-5202
browser/extensions/api/dial/dial_registry.cc in Google Chrome before 54.0.2840.98 on macOS, before 54.0.2840.99 on Windows, and before 54.0.2840.100 on Linux neglects to copy a device ID before an erase() call, which causes the erase operation to access data that that erase operation will destroy.
- Mettez à jour vers 1.18.5-0ubuntu0.14.04.1
Publication Mise à jourCVE-2016-1586
A malicious webview could install long-lived unload handlers that re-use an incognito BrowserContext that is queued for destruction in versions of Oxide before 1.18.3.
- Mettez à jour vers 1.18.3-0ubuntu0.14.04.1
Publication Mise à jourCVE-2016-9651
A missing check for whether a property of a JS object is private in V8 in Google Chrome prior to 55.0.2883.75 allowed a remote attacker to execute arbitrary code inside a sandbox via a crafted HTML page.
- Mettez à jour vers 1.19.4-0ubuntu0.14.04.1
Publication Mise à jourCVE-2015-1329
Use-after-free vulnerability in oxide::qt::URLRequestDelegatedJob in oxide-qt in Ubuntu 15.04 and 14.04 LTS might allow remote attackers to execute arbitrary code.
- Mettez à jour vers 1.8.4-0ubuntu0.14.04.2
Publication Mise à jourCVE-2015-1332
The oxide::JavaScriptDialogManager function in oxide-qt before 1.9.1 as packaged in Ubuntu 15.04 and Ubuntu 14.04 allows remote attackers to cause a denial of service (application crash) or execute arbitrary code via a crafted website.
- Mettez à jour vers 1.9.1-0ubuntu0.14.04.2
Publication Mise à jourCVE-2016-5178
Multiple unspecified vulnerabilities in Google Chrome before 53.0.2785.143 allow remote attackers to cause a denial of service or possibly have other impact via unknown vectors.
- Mettez à jour vers 1.17.9-0ubuntu0.14.04.1
Publication Mise à jourCVE-2016-5177
Use-after-free vulnerability in V8 in Google Chrome before 53.0.2785.143 allows remote attackers to cause a denial of service (crash) or possibly have unspecified other impact via unknown vectors.
- Mettez à jour vers 1.17.9-0ubuntu0.14.04.1
Publication Mise à jourCVE-2017-5046
V8 in Google Chrome prior to 57.0.2987.98 for Mac, Windows, and Linux and 57.0.2987.108 for Android had insufficient policy enforcement, which allowed a remote attacker to spoof the location object via a crafted HTML page, related to Blink information disclosure.
- Mettez à jour vers 1.21.5-0ubuntu0.14.04.1
Publication Mise à jourCVE-2017-5045
XSS Auditor in Google Chrome prior to 57.0.2987.98 for Mac, Windows, and Linux and 57.0.2987.108 for Android allowed detection of a blocked iframe load, which allowed a remote attacker to brute force JavaScript variables via a crafted HTML page.
- Mettez à jour vers 1.21.5-0ubuntu0.14.04.1
Publication Mise à jourCVE-2017-5044
Heap buffer overflow in filter processing in Skia in Google Chrome prior to 57.0.2987.98 for Mac, Windows, and Linux and 57.0.2987.108 for Android allowed a remote attacker to perform an out of bounds memory read via a crafted HTML page.
- Mettez à jour vers 1.21.5-0ubuntu0.14.04.1
Publication Mise à jourCVE-2017-5041
Google Chrome prior to 57.0.2987.100 incorrectly handled back-forward navigation, which allowed a remote attacker to display incorrect information for a site via a crafted HTML page.
- Mettez à jour vers 1.21.5-0ubuntu0.14.04.1
Publication Mise à jourCVE-2017-5040
V8 in Google Chrome prior to 57.0.2987.98 for Mac, Windows, and Linux and 57.0.2987.108 for Android was missing a neutering check, which allowed a remote attacker to read values in memory via a crafted HTML page.
- Mettez à jour vers 1.21.5-0ubuntu0.14.04.1
Publication Mise à jourCVE-2017-5037
An integer overflow in FFmpeg in Google Chrome prior to 57.0.2987.98 for Mac, Windows, and Linux and 57.0.2987.108 for Android allowed a remote attacker to perform an out of bounds memory write via a crafted video file, related to ChunkDemuxer.
- Mettez à jour vers 1.21.5-0ubuntu0.14.04.1
Publication Mise à jourCVE-2017-5035
Google Chrome prior to 57.0.2987.98 for Windows and Mac had a race condition, which could cause Chrome to display incorrect certificate information for a site.
- Mettez à jour vers 1.21.5-0ubuntu0.14.04.1
Publication Mise à jourCVE-2017-5033
Blink in Google Chrome prior to 57.0.2987.98 for Mac, Windows, and Linux and 57.0.2987.108 for Android failed to correctly propagate CSP restrictions to local scheme pages, which allowed a remote attacker to bypass content security policy via a crafted HTML page, related to the unsafe-inline keyword.
- Mettez à jour vers 1.21.5-0ubuntu0.14.04.1
Publication Mise à jourCVE-2017-5031
A use after free in ANGLE in Google Chrome prior to 57.0.2987.98 for Windows allowed a remote attacker to perform an out of bounds memory read via a crafted HTML page.
- Mettez à jour vers 1.21.5-0ubuntu0.14.04.1
Publication Mise à jourCVE-2017-5030
Incorrect handling of complex species in V8 in Google Chrome prior to 57.0.2987.98 for Linux, Windows, and Mac and 57.0.2987.108 for Android allowed a remote attacker to execute arbitrary code via a crafted HTML page.
- Mettez à jour vers 1.21.5-0ubuntu0.14.04.1
Publication Mise à jourCVE-2017-5029
The xsltAddTextString function in transform.c in libxslt 1.1.29, as used in Blink in Google Chrome prior to 57.0.2987.98 for Mac, Windows, and Linux and 57.0.2987.108 for Android, lacked a check for integer overflow during a size calculation, which allowed a remote attacker to perform an out of bounds memory write via a crafted HTML page.
- Mettez à jour vers 1.21.5-0ubuntu0.14.04.1
Publication Mise à jour
Vérifiez votre serveur
Comparez votre pile et les versions installées aux bases de vulnérabilités actuelles.