CVE-2016-9652
Multiple unspecified vulnerabilities in Google Chrome before 55.0.2883.75.
- Update to 1.19.4-0ubuntu0.14.04.1
Published Updated
PatchFirst · Latest vulnerabilities
oxide-qt vulnerabilities
Vulnerabilities published for oxide-qt in the last 30 days: 0. Listed in the KEV catalogue: 0.
Vulnerabilities: 324
CVE-2016-5194
Unspecified vulnerabilities in Google Chrome before 54.0.2840.59.
- Update to 1.18.3-0ubuntu0.14.04.1
Published UpdatedCVE-2016-5202
browser/extensions/api/dial/dial_registry.cc in Google Chrome before 54.0.2840.98 on macOS, before 54.0.2840.99 on Windows, and before 54.0.2840.100 on Linux neglects to copy a device ID before an erase() call, which causes the erase operation to access data that that erase operation will destroy.
- Update to 1.18.5-0ubuntu0.14.04.1
Published UpdatedCVE-2016-1586
A malicious webview could install long-lived unload handlers that re-use an incognito BrowserContext that is queued for destruction in versions of Oxide before 1.18.3.
- Update to 1.18.3-0ubuntu0.14.04.1
Published UpdatedCVE-2016-9651
A missing check for whether a property of a JS object is private in V8 in Google Chrome prior to 55.0.2883.75 allowed a remote attacker to execute arbitrary code inside a sandbox via a crafted HTML page.
- Update to 1.19.4-0ubuntu0.14.04.1
Published UpdatedCVE-2015-1329
Use-after-free vulnerability in oxide::qt::URLRequestDelegatedJob in oxide-qt in Ubuntu 15.04 and 14.04 LTS might allow remote attackers to execute arbitrary code.
- Update to 1.8.4-0ubuntu0.14.04.2
Published UpdatedCVE-2015-1332
The oxide::JavaScriptDialogManager function in oxide-qt before 1.9.1 as packaged in Ubuntu 15.04 and Ubuntu 14.04 allows remote attackers to cause a denial of service (application crash) or execute arbitrary code via a crafted website.
- Update to 1.9.1-0ubuntu0.14.04.2
Published UpdatedCVE-2016-5178
Multiple unspecified vulnerabilities in Google Chrome before 53.0.2785.143 allow remote attackers to cause a denial of service or possibly have other impact via unknown vectors.
- Update to 1.17.9-0ubuntu0.14.04.1
Published UpdatedCVE-2016-5177
Use-after-free vulnerability in V8 in Google Chrome before 53.0.2785.143 allows remote attackers to cause a denial of service (crash) or possibly have unspecified other impact via unknown vectors.
- Update to 1.17.9-0ubuntu0.14.04.1
Published UpdatedCVE-2017-5046
V8 in Google Chrome prior to 57.0.2987.98 for Mac, Windows, and Linux and 57.0.2987.108 for Android had insufficient policy enforcement, which allowed a remote attacker to spoof the location object via a crafted HTML page, related to Blink information disclosure.
- Update to 1.21.5-0ubuntu0.14.04.1
Published UpdatedCVE-2017-5045
XSS Auditor in Google Chrome prior to 57.0.2987.98 for Mac, Windows, and Linux and 57.0.2987.108 for Android allowed detection of a blocked iframe load, which allowed a remote attacker to brute force JavaScript variables via a crafted HTML page.
- Update to 1.21.5-0ubuntu0.14.04.1
Published UpdatedCVE-2017-5044
Heap buffer overflow in filter processing in Skia in Google Chrome prior to 57.0.2987.98 for Mac, Windows, and Linux and 57.0.2987.108 for Android allowed a remote attacker to perform an out of bounds memory read via a crafted HTML page.
- Update to 1.21.5-0ubuntu0.14.04.1
Published UpdatedCVE-2017-5041
Google Chrome prior to 57.0.2987.100 incorrectly handled back-forward navigation, which allowed a remote attacker to display incorrect information for a site via a crafted HTML page.
- Update to 1.21.5-0ubuntu0.14.04.1
Published UpdatedCVE-2017-5040
V8 in Google Chrome prior to 57.0.2987.98 for Mac, Windows, and Linux and 57.0.2987.108 for Android was missing a neutering check, which allowed a remote attacker to read values in memory via a crafted HTML page.
- Update to 1.21.5-0ubuntu0.14.04.1
Published UpdatedCVE-2017-5037
An integer overflow in FFmpeg in Google Chrome prior to 57.0.2987.98 for Mac, Windows, and Linux and 57.0.2987.108 for Android allowed a remote attacker to perform an out of bounds memory write via a crafted video file, related to ChunkDemuxer.
- Update to 1.21.5-0ubuntu0.14.04.1
Published UpdatedCVE-2017-5035
Google Chrome prior to 57.0.2987.98 for Windows and Mac had a race condition, which could cause Chrome to display incorrect certificate information for a site.
- Update to 1.21.5-0ubuntu0.14.04.1
Published UpdatedCVE-2017-5033
Blink in Google Chrome prior to 57.0.2987.98 for Mac, Windows, and Linux and 57.0.2987.108 for Android failed to correctly propagate CSP restrictions to local scheme pages, which allowed a remote attacker to bypass content security policy via a crafted HTML page, related to the unsafe-inline keyword.
- Update to 1.21.5-0ubuntu0.14.04.1
Published UpdatedCVE-2017-5031
A use after free in ANGLE in Google Chrome prior to 57.0.2987.98 for Windows allowed a remote attacker to perform an out of bounds memory read via a crafted HTML page.
- Update to 1.21.5-0ubuntu0.14.04.1
Published UpdatedCVE-2017-5030
Incorrect handling of complex species in V8 in Google Chrome prior to 57.0.2987.98 for Linux, Windows, and Mac and 57.0.2987.108 for Android allowed a remote attacker to execute arbitrary code via a crafted HTML page.
- Update to 1.21.5-0ubuntu0.14.04.1
Published UpdatedCVE-2017-5029
The xsltAddTextString function in transform.c in libxslt 1.1.29, as used in Blink in Google Chrome prior to 57.0.2987.98 for Mac, Windows, and Linux and 57.0.2987.108 for Android, lacked a check for integer overflow during a size calculation, which allowed a remote attacker to perform an out of bounds memory write via a crafted HTML page.
- Update to 1.21.5-0ubuntu0.14.04.1
Published Updated
Check your server
Check your installed stack and versions against the current vulnerability feeds.