Anusha64/LoanDataSet huggingface dataset:
Explain CVE-2016-1695
Multiple unspecified vulnerabilities in Google Chrome before 51.0.2704.63 allow attackers to cause a denial of service or possibly have other impact via unknown vectors.
Affected Products: n/a
References: [{'tags': ['x_refsource_CONFIRM'], 'url': 'https://crbug.com/582714'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'https://crbug.com/602185'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'https://crbug.com/614767'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'https://crbug.com/599081'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'https://crbug.com/588178'}, {'name': '90876', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/90876'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'https://crbug.com/611887'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'https://crbug.com/612132'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'https://crbug.com/610646'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'https://crbug.com/605474'}, {'name': 'openSUSE-SU-2016:1496', 'tags': ['vendor-advisory', 'x_refsource_SUSE'], 'url': 'http://lists.opensuse.org/opensuse-security-announce/2016-06/msg00005.html'}, {'name': '1035981', 'tags': ['vdb-entry', 'x_refsource_SECTRACK'], 'url': 'http://www.securitytracker.com/id/1035981'}, {'name': 'DSA-3590', 'tags': ['vendor-advisory', 'x_refsource_DEBIAN'], 'url': 'http://www.debian.org/security/2016/dsa-3590'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'https://crbug.com/602046'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'http://googlechromereleases.blogspot.com/2016/05/stable-channel-update_25.html'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'https://crbug.com/607483'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'https://crbug.com/585658'}, {'name': 'USN-2992-1', 'tags': ['vendor-advisory', 'x_refsource_UBUNTU'], 'url': 'http://www.ubuntu.com/usn/USN-2992-1'}, {'name': 'openSUSE-SU-2016:1430', 'tags': ['vendor-advisory', 'x_refsource_SUSE'], 'url': 'http://lists.opensuse.org/opensuse-security-announce/2016-05/msg00062.html'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'https://www.tenable.com/security/tns-2016-18'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'https://crbug.com/582698'}, {'name': 'RHSA-2016:1190', 'tags': ['vendor-advisory', 'x_refsource_REDHAT'], 'url': 'https://access.redhat.com/errata/RHSA-2016:1190'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'https://crbug.com/612364'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'https://crbug.com/599627'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'https://crbug.com/587897'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'https://crbug.com/609134'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'https://crbug.com/595262'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'https://crbug.com/588548'}, {'name': 'GLSA-201607-07', 'tags': ['vendor-advisory', 'x_refsource_GENTOO'], 'url': 'https://security.gentoo.org/glsa/201607-07'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'https://crbug.com/612613'}, {'name': 'openSUSE-SU-2016:1433', 'tags': ['vendor-advisory', 'x_refsource_SUSE'], 'url': 'http://lists.opensuse.org/opensuse-security-announce/2016-05/msg00063.html'}]
CVE State: PUBLISHED
Explain CVE-2016-1696
The extensions subsystem in Google Chrome before 51.0.2704.79 does not properly restrict bindings access, which allows remote attackers to bypass the Same Origin Policy via unspecified vectors.
Affected Products: n/a
References: [{'tags': ['x_refsource_CONFIRM'], 'url': 'http://googlechromereleases.blogspot.com/2016/06/stable-channel-update.html'}, {'name': 'RHSA-2016:1201', 'tags': ['vendor-advisory', 'x_refsource_REDHAT'], 'url': 'https://access.redhat.com/errata/RHSA-2016:1201'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'https://codereview.chromium.org/1866103002'}, {'name': '1036026', 'tags': ['vdb-entry', 'x_refsource_SECTRACK'], 'url': 'http://www.securitytracker.com/id/1036026'}, {'name': 'openSUSE-SU-2016:1496', 'tags': ['vendor-advisory', 'x_refsource_SUSE'], 'url': 'http://lists.opensuse.org/opensuse-security-announce/2016-06/msg00005.html'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'https://crbug.com/601073'}, {'name': 'DSA-3594', 'tags': ['vendor-advisory', 'x_refsource_DEBIAN'], 'url': 'http://www.debian.org/security/2016/dsa-3594'}, {'name': 'SUSE-SU-2016:1490', 'tags': ['vendor-advisory', 'x_refsource_SUSE'], 'url': 'http://lists.opensuse.org/opensuse-security-announce/2016-06/msg00004.html'}, {'name': 'openSUSE-SU-2016:1489', 'tags': ['vendor-advisory', 'x_refsource_SUSE'], 'url': 'http://lists.opensuse.org/opensuse-security-announce/2016-06/msg00003.html'}]
CVE State: PUBLISHED
Explain CVE-2016-1697
The FrameLoader::startLoad function in WebKit/Source/core/loader/FrameLoader.cpp in Blink, as used in Google Chrome before 51.0.2704.79, does not prevent frame navigations during DocumentLoader detach operations, which allows remote attackers to bypass the Same Origin Policy via crafted JavaScript code.
Affected Products: n/a
References: [{'tags': ['x_refsource_CONFIRM'], 'url': 'http://googlechromereleases.blogspot.com/2016/06/stable-channel-update.html'}, {'name': 'RHSA-2016:1201', 'tags': ['vendor-advisory', 'x_refsource_REDHAT'], 'url': 'https://access.redhat.com/errata/RHSA-2016:1201'}, {'name': '1036026', 'tags': ['vdb-entry', 'x_refsource_SECTRACK'], 'url': 'http://www.securitytracker.com/id/1036026'}, {'name': 'openSUSE-SU-2016:1496', 'tags': ['vendor-advisory', 'x_refsource_SUSE'], 'url': 'http://lists.opensuse.org/opensuse-security-announce/2016-06/msg00005.html'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'https://crbug.com/613266'}, {'name': 'USN-2992-1', 'tags': ['vendor-advisory', 'x_refsource_UBUNTU'], 'url': 'http://www.ubuntu.com/usn/USN-2992-1'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'https://codereview.chromium.org/2021373003'}, {'name': 'DSA-3594', 'tags': ['vendor-advisory', 'x_refsource_DEBIAN'], 'url': 'http://www.debian.org/security/2016/dsa-3594'}, {'name': 'SUSE-SU-2016:1490', 'tags': ['vendor-advisory', 'x_refsource_SUSE'], 'url': 'http://lists.opensuse.org/opensuse-security-announce/2016-06/msg00004.html'}, {'name': 'openSUSE-SU-2016:1489', 'tags': ['vendor-advisory', 'x_refsource_SUSE'], 'url': 'http://lists.opensuse.org/opensuse-security-announce/2016-06/msg00003.html'}]
CVE State: PUBLISHED
Explain CVE-2016-1698
The createCustomType function in extensions/renderer/resources/binding.js in the extension bindings in Google Chrome before 51.0.2704.79 does not validate module types, which might allow attackers to load arbitrary modules or obtain sensitive information by leveraging a poisoned definition.
Affected Products: n/a
References: [{'tags': ['x_refsource_CONFIRM'], 'url': 'http://googlechromereleases.blogspot.com/2016/06/stable-channel-update.html'}, {'name': 'RHSA-2016:1201', 'tags': ['vendor-advisory', 'x_refsource_REDHAT'], 'url': 'https://access.redhat.com/errata/RHSA-2016:1201'}, {'name': '1036026', 'tags': ['vdb-entry', 'x_refsource_SECTRACK'], 'url': 'http://www.securitytracker.com/id/1036026'}, {'name': 'openSUSE-SU-2016:1496', 'tags': ['vendor-advisory', 'x_refsource_SUSE'], 'url': 'http://lists.opensuse.org/opensuse-security-announce/2016-06/msg00005.html'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'https://codereview.chromium.org/1912783002'}, {'name': 'DSA-3594', 'tags': ['vendor-advisory', 'x_refsource_DEBIAN'], 'url': 'http://www.debian.org/security/2016/dsa-3594'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'https://crbug.com/603725'}, {'name': 'SUSE-SU-2016:1490', 'tags': ['vendor-advisory', 'x_refsource_SUSE'], 'url': 'http://lists.opensuse.org/opensuse-security-announce/2016-06/msg00004.html'}, {'name': 'openSUSE-SU-2016:1489', 'tags': ['vendor-advisory', 'x_refsource_SUSE'], 'url': 'http://lists.opensuse.org/opensuse-security-announce/2016-06/msg00003.html'}]
CVE State: PUBLISHED
Explain CVE-2016-1699
WebKit/Source/devtools/front_end/devtools.js in the Developer Tools (aka DevTools) subsystem in Blink, as used in Google Chrome before 51.0.2704.79, does not ensure that the remoteFrontendUrl parameter is associated with a chrome-devtools-frontend.appspot.com URL, which allows remote attackers to bypass intended access restrictions via a crafted URL.
Affected Products: n/a
References: [{'tags': ['x_refsource_CONFIRM'], 'url': 'https://codereview.chromium.org/2010783002'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'http://googlechromereleases.blogspot.com/2016/06/stable-channel-update.html'}, {'name': 'RHSA-2016:1201', 'tags': ['vendor-advisory', 'x_refsource_REDHAT'], 'url': 'https://access.redhat.com/errata/RHSA-2016:1201'}, {'name': '1036026', 'tags': ['vdb-entry', 'x_refsource_SECTRACK'], 'url': 'http://www.securitytracker.com/id/1036026'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'https://crbug.com/607939'}, {'name': 'openSUSE-SU-2016:1496', 'tags': ['vendor-advisory', 'x_refsource_SUSE'], 'url': 'http://lists.opensuse.org/opensuse-security-announce/2016-06/msg00005.html'}, {'name': 'USN-2992-1', 'tags': ['vendor-advisory', 'x_refsource_UBUNTU'], 'url': 'http://www.ubuntu.com/usn/USN-2992-1'}, {'name': 'DSA-3594', 'tags': ['vendor-advisory', 'x_refsource_DEBIAN'], 'url': 'http://www.debian.org/security/2016/dsa-3594'}, {'name': 'SUSE-SU-2016:1490', 'tags': ['vendor-advisory', 'x_refsource_SUSE'], 'url': 'http://lists.opensuse.org/opensuse-security-announce/2016-06/msg00004.html'}, {'name': 'openSUSE-SU-2016:1489', 'tags': ['vendor-advisory', 'x_refsource_SUSE'], 'url': 'http://lists.opensuse.org/opensuse-security-announce/2016-06/msg00003.html'}]
CVE State: PUBLISHED
Explain CVE-2016-1700
extensions/renderer/runtime_custom_bindings.cc in Google Chrome before 51.0.2704.79 does not consider side effects during creation of an array of extension views, which allows remote attackers to cause a denial of service (use-after-free) or possibly have unspecified other impact via vectors related to extensions.
Affected Products: n/a
References: [{'tags': ['x_refsource_CONFIRM'], 'url': 'http://googlechromereleases.blogspot.com/2016/06/stable-channel-update.html'}, {'name': 'RHSA-2016:1201', 'tags': ['vendor-advisory', 'x_refsource_REDHAT'], 'url': 'https://access.redhat.com/errata/RHSA-2016:1201'}, {'name': '1036026', 'tags': ['vdb-entry', 'x_refsource_SECTRACK'], 'url': 'http://www.securitytracker.com/id/1036026'}, {'name': 'openSUSE-SU-2016:1496', 'tags': ['vendor-advisory', 'x_refsource_SUSE'], 'url': 'http://lists.opensuse.org/opensuse-security-announce/2016-06/msg00005.html'}, {'name': 'DSA-3594', 'tags': ['vendor-advisory', 'x_refsource_DEBIAN'], 'url': 'http://www.debian.org/security/2016/dsa-3594'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'https://codereview.chromium.org/1948773002'}, {'name': 'SUSE-SU-2016:1490', 'tags': ['vendor-advisory', 'x_refsource_SUSE'], 'url': 'http://lists.opensuse.org/opensuse-security-announce/2016-06/msg00004.html'}, {'name': 'openSUSE-SU-2016:1489', 'tags': ['vendor-advisory', 'x_refsource_SUSE'], 'url': 'http://lists.opensuse.org/opensuse-security-announce/2016-06/msg00003.html'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'https://crbug.com/608104'}]
CVE State: PUBLISHED
Explain CVE-2016-1701
The Autofill implementation in Google Chrome before 51.0.2704.79 mishandles the interaction between field updates and JavaScript code that triggers a frame deletion, which allows remote attackers to cause a denial of service (use-after-free) or possibly have unspecified other impact via a crafted web site, a different vulnerability than CVE-2016-1690.
Affected Products: n/a
References: [{'tags': ['x_refsource_CONFIRM'], 'url': 'https://crbug.com/608101'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'http://googlechromereleases.blogspot.com/2016/06/stable-channel-update.html'}, {'name': 'RHSA-2016:1201', 'tags': ['vendor-advisory', 'x_refsource_REDHAT'], 'url': 'https://access.redhat.com/errata/RHSA-2016:1201'}, {'name': '1036026', 'tags': ['vdb-entry', 'x_refsource_SECTRACK'], 'url': 'http://www.securitytracker.com/id/1036026'}, {'name': 'openSUSE-SU-2016:1496', 'tags': ['vendor-advisory', 'x_refsource_SUSE'], 'url': 'http://lists.opensuse.org/opensuse-security-announce/2016-06/msg00005.html'}, {'name': 'DSA-3594', 'tags': ['vendor-advisory', 'x_refsource_DEBIAN'], 'url': 'http://www.debian.org/security/2016/dsa-3594'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'https://codereview.chromium.org/1960023002'}, {'name': 'SUSE-SU-2016:1490', 'tags': ['vendor-advisory', 'x_refsource_SUSE'], 'url': 'http://lists.opensuse.org/opensuse-security-announce/2016-06/msg00004.html'}, {'name': 'openSUSE-SU-2016:1489', 'tags': ['vendor-advisory', 'x_refsource_SUSE'], 'url': 'http://lists.opensuse.org/opensuse-security-announce/2016-06/msg00003.html'}]
CVE State: PUBLISHED
Explain CVE-2016-1702
The SkRegion::readFromMemory function in core/SkRegion.cpp in Skia, as used in Google Chrome before 51.0.2704.79, does not validate the interval count, which allows remote attackers to cause a denial of service (out-of-bounds read) via crafted serialized data.
Affected Products: n/a
References: [{'tags': ['x_refsource_CONFIRM'], 'url': 'http://googlechromereleases.blogspot.com/2016/06/stable-channel-update.html'}, {'name': 'RHSA-2016:1201', 'tags': ['vendor-advisory', 'x_refsource_REDHAT'], 'url': 'https://access.redhat.com/errata/RHSA-2016:1201'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'https://codereview.chromium.org/1961463003'}, {'name': '1036026', 'tags': ['vdb-entry', 'x_refsource_SECTRACK'], 'url': 'http://www.securitytracker.com/id/1036026'}, {'name': 'openSUSE-SU-2016:1496', 'tags': ['vendor-advisory', 'x_refsource_SUSE'], 'url': 'http://lists.opensuse.org/opensuse-security-announce/2016-06/msg00005.html'}, {'name': 'USN-2992-1', 'tags': ['vendor-advisory', 'x_refsource_UBUNTU'], 'url': 'http://www.ubuntu.com/usn/USN-2992-1'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'https://crbug.com/609260'}, {'name': 'DSA-3594', 'tags': ['vendor-advisory', 'x_refsource_DEBIAN'], 'url': 'http://www.debian.org/security/2016/dsa-3594'}, {'name': 'SUSE-SU-2016:1490', 'tags': ['vendor-advisory', 'x_refsource_SUSE'], 'url': 'http://lists.opensuse.org/opensuse-security-announce/2016-06/msg00004.html'}, {'name': 'openSUSE-SU-2016:1489', 'tags': ['vendor-advisory', 'x_refsource_SUSE'], 'url': 'http://lists.opensuse.org/opensuse-security-announce/2016-06/msg00003.html'}]
CVE State: PUBLISHED
Explain CVE-2016-1703
Multiple unspecified vulnerabilities in Google Chrome before 51.0.2704.79 allow attackers to cause a denial of service or possibly have other impact via unknown vectors.
Affected Products: n/a
References: [{'tags': ['x_refsource_CONFIRM'], 'url': 'http://googlechromereleases.blogspot.com/2016/06/stable-channel-update.html'}, {'name': 'RHSA-2016:1201', 'tags': ['vendor-advisory', 'x_refsource_REDHAT'], 'url': 'https://access.redhat.com/errata/RHSA-2016:1201'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'https://crbug.com/616539'}, {'name': '1036026', 'tags': ['vdb-entry', 'x_refsource_SECTRACK'], 'url': 'http://www.securitytracker.com/id/1036026'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'https://crbug.com/610400'}, {'name': 'openSUSE-SU-2016:1496', 'tags': ['vendor-advisory', 'x_refsource_SUSE'], 'url': 'http://lists.opensuse.org/opensuse-security-announce/2016-06/msg00005.html'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'https://crbug.com/582702'}, {'name': 'USN-2992-1', 'tags': ['vendor-advisory', 'x_refsource_UBUNTU'], 'url': 'http://www.ubuntu.com/usn/USN-2992-1'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'https://crbug.com/608156'}, {'name': 'DSA-3594', 'tags': ['vendor-advisory', 'x_refsource_DEBIAN'], 'url': 'http://www.debian.org/security/2016/dsa-3594'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'https://crbug.com/602276'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'https://crbug.com/592361'}, {'name': 'SUSE-SU-2016:1490', 'tags': ['vendor-advisory', 'x_refsource_SUSE'], 'url': 'http://lists.opensuse.org/opensuse-security-announce/2016-06/msg00004.html'}, {'name': 'openSUSE-SU-2016:1489', 'tags': ['vendor-advisory', 'x_refsource_SUSE'], 'url': 'http://lists.opensuse.org/opensuse-security-announce/2016-06/msg00003.html'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'https://crbug.com/613917'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'https://crbug.com/612049'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'https://crbug.com/590621'}]
CVE State: PUBLISHED
Explain CVE-2016-1704
Multiple unspecified vulnerabilities in Google Chrome before 51.0.2704.103 allow attackers to cause a denial of service or possibly have other impact via unknown vectors.
Affected Products: n/a
References: [{'name': 'RHSA-2016:1262', 'tags': ['vendor-advisory', 'x_refsource_REDHAT'], 'url': 'https://access.redhat.com/errata/RHSA-2016:1262'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'http://googlechromereleases.blogspot.com/2016/06/stable-channel-update_16.html'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'https://crbug.com/620742'}, {'name': 'openSUSE-SU-2016:1626', 'tags': ['vendor-advisory', 'x_refsource_SUSE'], 'url': 'http://lists.opensuse.org/opensuse-security-announce/2016-06/msg00039.html'}, {'name': 'openSUSE-SU-2016:1624', 'tags': ['vendor-advisory', 'x_refsource_SUSE'], 'url': 'http://lists.opensuse.org/opensuse-security-announce/2016-06/msg00037.html'}, {'name': 'openSUSE-SU-2016:1655', 'tags': ['vendor-advisory', 'x_refsource_SUSE'], 'url': 'http://lists.opensuse.org/opensuse-security-announce/2016-06/msg00048.html'}, {'name': 'openSUSE-SU-2016:1623', 'tags': ['vendor-advisory', 'x_refsource_SUSE'], 'url': 'http://lists.opensuse.org/opensuse-security-announce/2016-06/msg00036.html'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'https://crbug.com/613915'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'https://crbug.com/613698'}, {'name': 'USN-3015-1', 'tags': ['vendor-advisory', 'x_refsource_UBUNTU'], 'url': 'http://www.ubuntu.com/usn/USN-3015-1'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'https://crbug.com/610799'}, {'name': 'DSA-3637', 'tags': ['vendor-advisory', 'x_refsource_DEBIAN'], 'url': 'http://www.debian.org/security/2016/dsa-3637'}]
CVE State: PUBLISHED
Explain CVE-2016-1705
Multiple unspecified vulnerabilities in Google Chrome before 52.0.2743.82 allow attackers to cause a denial of service or possibly have other impact via unknown vectors.
Affected Products: n/a
References: [{'name': 'openSUSE-SU-2016:1868', 'tags': ['vendor-advisory', 'x_refsource_SUSE'], 'url': 'http://lists.opensuse.org/opensuse-security-announce/2016-07/msg00021.html'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'http://crbug.com/612939'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'http://crbug.com/600953'}, {'name': 'openSUSE-SU-2016:1869', 'tags': ['vendor-advisory', 'x_refsource_SUSE'], 'url': 'http://lists.opensuse.org/opensuse-security-announce/2016-07/msg00022.html'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'http://crbug.com/614989'}, {'name': '92053', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/92053'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'http://crbug.com/613869'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'http://googlechromereleases.blogspot.com/2016/07/stable-channel-update.html'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'http://crbug.com/620737'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'http://crbug.com/622522'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'http://crbug.com/621843'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'http://crbug.com/614701'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'http://crbug.com/609286'}, {'name': 'USN-3041-1', 'tags': ['vendor-advisory', 'x_refsource_UBUNTU'], 'url': 'http://www.ubuntu.com/usn/USN-3041-1'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'http://crbug.com/619378'}, {'name': 'openSUSE-SU-2016:1918', 'tags': ['vendor-advisory', 'x_refsource_SUSE'], 'url': 'http://lists.opensuse.org/opensuse-security-announce/2016-07/msg00028.html'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'http://crbug.com/615820'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'http://crbug.com/619382'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'http://crbug.com/613971'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'https://crbug.com/629852'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'http://crbug.com/614405'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'http://crbug.com/590619'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'http://crbug.com/599458'}, {'name': 'openSUSE-SU-2016:1865', 'tags': ['vendor-advisory', 'x_refsource_SUSE'], 'url': 'http://lists.opensuse.org/opensuse-security-announce/2016-07/msg00020.html'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'http://crbug.com/620952'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'http://crbug.com/611959'}, {'name': 'RHSA-2016:1485', 'tags': ['vendor-advisory', 'x_refsource_REDHAT'], 'url': 'http://rhn.redhat.com/errata/RHSA-2016-1485.html'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'http://crbug.com/620694'}, {'name': '1036428', 'tags': ['vdb-entry', 'x_refsource_SECTRACK'], 'url': 'http://www.securitytracker.com/id/1036428'}, {'name': 'DSA-3637', 'tags': ['vendor-advisory', 'x_refsource_DEBIAN'], 'url': 'http://www.debian.org/security/2016/dsa-3637'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'http://crbug.com/620858'}]
CVE State: PUBLISHED
Explain CVE-2016-1706
The PPAPI implementation in Google Chrome before 52.0.2743.82 does not validate the origin of IPC messages to the plugin broker process that should have come from the browser process, which allows remote attackers to bypass a sandbox protection mechanism via an unexpected message type, related to broker_process_dispatcher.cc, ppapi_plugin_process_host.cc, ppapi_thread.cc, and render_frame_message_filter.cc.
Affected Products: n/a
References: [{'name': 'openSUSE-SU-2016:1868', 'tags': ['vendor-advisory', 'x_refsource_SUSE'], 'url': 'http://lists.opensuse.org/opensuse-security-announce/2016-07/msg00021.html'}, {'name': 'openSUSE-SU-2016:1869', 'tags': ['vendor-advisory', 'x_refsource_SUSE'], 'url': 'http://lists.opensuse.org/opensuse-security-announce/2016-07/msg00022.html'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'http://googlechromereleases.blogspot.com/2016/07/stable-channel-update.html'}, {'name': 'USN-3041-1', 'tags': ['vendor-advisory', 'x_refsource_UBUNTU'], 'url': 'http://www.ubuntu.com/usn/USN-3041-1'}, {'name': 'openSUSE-SU-2016:1918', 'tags': ['vendor-advisory', 'x_refsource_SUSE'], 'url': 'http://lists.opensuse.org/opensuse-security-announce/2016-07/msg00028.html'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'https://crbug.com/610600'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'https://codereview.chromium.org/2069853002/'}, {'name': 'openSUSE-SU-2016:1865', 'tags': ['vendor-advisory', 'x_refsource_SUSE'], 'url': 'http://lists.opensuse.org/opensuse-security-announce/2016-07/msg00020.html'}, {'name': 'RHSA-2016:1485', 'tags': ['vendor-advisory', 'x_refsource_REDHAT'], 'url': 'http://rhn.redhat.com/errata/RHSA-2016-1485.html'}, {'name': '1036428', 'tags': ['vdb-entry', 'x_refsource_SECTRACK'], 'url': 'http://www.securitytracker.com/id/1036428'}, {'name': 'DSA-3637', 'tags': ['vendor-advisory', 'x_refsource_DEBIAN'], 'url': 'http://www.debian.org/security/2016/dsa-3637'}]
CVE State: PUBLISHED
Explain CVE-2016-1707
ios/web/web_state/ui/crw_web_controller.mm in Google Chrome before 52.0.2743.82 on iOS does not ensure that an invalid URL is replaced with the about:blank URL, which allows remote attackers to spoof the URL display via a crafted web site.
Affected Products: n/a
References: [{'name': 'openSUSE-SU-2016:1868', 'tags': ['vendor-advisory', 'x_refsource_SUSE'], 'url': 'http://lists.opensuse.org/opensuse-security-announce/2016-07/msg00021.html'}, {'name': 'openSUSE-SU-2016:1869', 'tags': ['vendor-advisory', 'x_refsource_SUSE'], 'url': 'http://lists.opensuse.org/opensuse-security-announce/2016-07/msg00022.html'}, {'name': '92053', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/92053'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'http://googlechromereleases.blogspot.com/2016/07/stable-channel-update.html'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'https://codereview.chromium.org/2086333003'}, {'name': 'openSUSE-SU-2016:1918', 'tags': ['vendor-advisory', 'x_refsource_SUSE'], 'url': 'http://lists.opensuse.org/opensuse-security-announce/2016-07/msg00028.html'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'https://crbug.com/622183'}, {'name': 'openSUSE-SU-2016:1865', 'tags': ['vendor-advisory', 'x_refsource_SUSE'], 'url': 'http://lists.opensuse.org/opensuse-security-announce/2016-07/msg00020.html'}, {'name': '1036428', 'tags': ['vdb-entry', 'x_refsource_SECTRACK'], 'url': 'http://www.securitytracker.com/id/1036428'}, {'name': 'DSA-3637', 'tags': ['vendor-advisory', 'x_refsource_DEBIAN'], 'url': 'http://www.debian.org/security/2016/dsa-3637'}]
CVE State: PUBLISHED
Explain CVE-2016-1708
The Chrome Web Store inline-installation implementation in the Extensions subsystem in Google Chrome before 52.0.2743.82 does not properly consider object lifetimes during progress observation, which allows remote attackers to cause a denial of service (use-after-free) or possibly have unspecified other impact via a crafted web site.
Affected Products: n/a
References: [{'name': 'openSUSE-SU-2016:1868', 'tags': ['vendor-advisory', 'x_refsource_SUSE'], 'url': 'http://lists.opensuse.org/opensuse-security-announce/2016-07/msg00021.html'}, {'name': 'openSUSE-SU-2016:1869', 'tags': ['vendor-advisory', 'x_refsource_SUSE'], 'url': 'http://lists.opensuse.org/opensuse-security-announce/2016-07/msg00022.html'}, {'name': '92053', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/92053'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'http://googlechromereleases.blogspot.com/2016/07/stable-channel-update.html'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'https://crbug.com/613949'}, {'name': 'openSUSE-SU-2016:1918', 'tags': ['vendor-advisory', 'x_refsource_SUSE'], 'url': 'http://lists.opensuse.org/opensuse-security-announce/2016-07/msg00028.html'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'https://codereview.chromium.org/2103663002'}, {'name': 'openSUSE-SU-2016:1865', 'tags': ['vendor-advisory', 'x_refsource_SUSE'], 'url': 'http://lists.opensuse.org/opensuse-security-announce/2016-07/msg00020.html'}, {'name': 'RHSA-2016:1485', 'tags': ['vendor-advisory', 'x_refsource_REDHAT'], 'url': 'http://rhn.redhat.com/errata/RHSA-2016-1485.html'}, {'name': '1036428', 'tags': ['vdb-entry', 'x_refsource_SECTRACK'], 'url': 'http://www.securitytracker.com/id/1036428'}, {'name': 'DSA-3637', 'tags': ['vendor-advisory', 'x_refsource_DEBIAN'], 'url': 'http://www.debian.org/security/2016/dsa-3637'}]
CVE State: PUBLISHED
Explain CVE-2016-1709
Heap-based buffer overflow in the ByteArray::Get method in data/byte_array.cc in Google sfntly before 2016-06-10, as used in Google Chrome before 52.0.2743.82, allows remote attackers to cause a denial of service or possibly have unspecified other impact via a crafted SFNT font.
Affected Products: n/a
References: [{'name': 'openSUSE-SU-2016:1868', 'tags': ['vendor-advisory', 'x_refsource_SUSE'], 'url': 'http://lists.opensuse.org/opensuse-security-announce/2016-07/msg00021.html'}, {'name': 'openSUSE-SU-2016:1869', 'tags': ['vendor-advisory', 'x_refsource_SUSE'], 'url': 'http://lists.opensuse.org/opensuse-security-announce/2016-07/msg00022.html'}, {'name': '92053', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/92053'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'https://github.com/googlei18n/sfntly/commit/468cad540fa1b0027cad60456f53feabecdce2bc'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'http://googlechromereleases.blogspot.com/2016/07/stable-channel-update.html'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'https://github.com/googlei18n/sfntly/pull/56'}, {'name': 'openSUSE-SU-2016:1918', 'tags': ['vendor-advisory', 'x_refsource_SUSE'], 'url': 'http://lists.opensuse.org/opensuse-security-announce/2016-07/msg00028.html'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'https://github.com/googlei18n/sfntly/commit/c56b85408bab232efd7e650f0994272a174e3b92'}, {'name': 'openSUSE-SU-2016:1865', 'tags': ['vendor-advisory', 'x_refsource_SUSE'], 'url': 'http://lists.opensuse.org/opensuse-security-announce/2016-07/msg00020.html'}, {'name': 'RHSA-2016:1485', 'tags': ['vendor-advisory', 'x_refsource_REDHAT'], 'url': 'http://rhn.redhat.com/errata/RHSA-2016-1485.html'}, {'name': '1036428', 'tags': ['vdb-entry', 'x_refsource_SECTRACK'], 'url': 'http://www.securitytracker.com/id/1036428'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'https://crbug.com/614934'}, {'name': 'DSA-3637', 'tags': ['vendor-advisory', 'x_refsource_DEBIAN'], 'url': 'http://www.debian.org/security/2016/dsa-3637'}]
CVE State: PUBLISHED
Explain CVE-2016-1710
The ChromeClientImpl::createWindow method in WebKit/Source/web/ChromeClientImpl.cpp in Blink, as used in Google Chrome before 52.0.2743.82, does not prevent window creation by a deferred frame, which allows remote attackers to bypass the Same Origin Policy via a crafted web site.
Affected Products: n/a
References: [{'name': 'openSUSE-SU-2016:1868', 'tags': ['vendor-advisory', 'x_refsource_SUSE'], 'url': 'http://lists.opensuse.org/opensuse-security-announce/2016-07/msg00021.html'}, {'name': 'openSUSE-SU-2016:1869', 'tags': ['vendor-advisory', 'x_refsource_SUSE'], 'url': 'http://lists.opensuse.org/opensuse-security-announce/2016-07/msg00022.html'}, {'name': '92053', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/92053'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'http://googlechromereleases.blogspot.com/2016/07/stable-channel-update.html'}, {'name': 'USN-3041-1', 'tags': ['vendor-advisory', 'x_refsource_UBUNTU'], 'url': 'http://www.ubuntu.com/usn/USN-3041-1'}, {'name': 'openSUSE-SU-2016:1918', 'tags': ['vendor-advisory', 'x_refsource_SUSE'], 'url': 'http://lists.opensuse.org/opensuse-security-announce/2016-07/msg00028.html'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'https://codereview.chromium.org/2035973002/'}, {'name': 'openSUSE-SU-2016:1865', 'tags': ['vendor-advisory', 'x_refsource_SUSE'], 'url': 'http://lists.opensuse.org/opensuse-security-announce/2016-07/msg00020.html'}, {'name': 'RHSA-2016:1485', 'tags': ['vendor-advisory', 'x_refsource_REDHAT'], 'url': 'http://rhn.redhat.com/errata/RHSA-2016-1485.html'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'https://crbug.com/616907'}, {'name': '1036428', 'tags': ['vdb-entry', 'x_refsource_SECTRACK'], 'url': 'http://www.securitytracker.com/id/1036428'}, {'name': 'DSA-3637', 'tags': ['vendor-advisory', 'x_refsource_DEBIAN'], 'url': 'http://www.debian.org/security/2016/dsa-3637'}]
CVE State: PUBLISHED
Explain CVE-2016-1711
WebKit/Source/core/loader/FrameLoader.cpp in Blink, as used in Google Chrome before 52.0.2743.82, does not disable frame navigation during a detach operation on a DocumentLoader object, which allows remote attackers to bypass the Same Origin Policy via a crafted web site.
Affected Products: n/a
References: [{'name': 'openSUSE-SU-2016:1868', 'tags': ['vendor-advisory', 'x_refsource_SUSE'], 'url': 'http://lists.opensuse.org/opensuse-security-announce/2016-07/msg00021.html'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'https://codereview.chromium.org/2079473002'}, {'name': 'openSUSE-SU-2016:1869', 'tags': ['vendor-advisory', 'x_refsource_SUSE'], 'url': 'http://lists.opensuse.org/opensuse-security-announce/2016-07/msg00022.html'}, {'name': '92053', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/92053'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'http://googlechromereleases.blogspot.com/2016/07/stable-channel-update.html'}, {'name': 'USN-3041-1', 'tags': ['vendor-advisory', 'x_refsource_UBUNTU'], 'url': 'http://www.ubuntu.com/usn/USN-3041-1'}, {'name': 'openSUSE-SU-2016:1918', 'tags': ['vendor-advisory', 'x_refsource_SUSE'], 'url': 'http://lists.opensuse.org/opensuse-security-announce/2016-07/msg00028.html'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'https://crbug.com/617495'}, {'name': 'openSUSE-SU-2016:1865', 'tags': ['vendor-advisory', 'x_refsource_SUSE'], 'url': 'http://lists.opensuse.org/opensuse-security-announce/2016-07/msg00020.html'}, {'name': 'RHSA-2016:1485', 'tags': ['vendor-advisory', 'x_refsource_REDHAT'], 'url': 'http://rhn.redhat.com/errata/RHSA-2016-1485.html'}, {'name': '1036428', 'tags': ['vdb-entry', 'x_refsource_SECTRACK'], 'url': 'http://www.securitytracker.com/id/1036428'}, {'name': 'DSA-3637', 'tags': ['vendor-advisory', 'x_refsource_DEBIAN'], 'url': 'http://www.debian.org/security/2016/dsa-3637'}]
CVE State: PUBLISHED
Explain CVE-2016-1712
Palo Alto Networks PAN-OS before 5.0.19, 5.1.x before 5.1.12, 6.0.x before 6.0.14, 6.1.x before 6.1.12, and 7.0.x before 7.0.8 might allow local users to gain privileges by leveraging improper sanitization of the root_reboot local invocation.
Affected Products: n/a
References: [{'name': '1036326', 'tags': ['vdb-entry', 'x_refsource_SECTRACK'], 'url': 'http://www.securitytracker.com/id/1036326'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'https://security.paloaltonetworks.com/CVE-2016-1712'}]
CVE State: PUBLISHED
Explain CVE-2016-1713
Unrestricted file upload vulnerability in the Settings_Vtiger_CompanyDetailsSave_Action class in modules/Settings/Vtiger/actions/CompanyDetailsSave.php in Vtiger CRM 6.4.0 allows remote authenticated users to execute arbitrary code by uploading a crafted image file with an executable extension, then accessing it via a direct request to the file in test/logo/.  NOTE: this vulnerability exists because of an incomplete fix for CVE-2015-6000.
Affected Products: n/a
References: [{'name': '[oss-security] 20160112 Re: CVE Request: Vtiger CRM 6.4 Authenticated Remote Code Execution', 'tags': ['mailing-list', 'x_refsource_MLIST'], 'url': 'http://www.openwall.com/lists/oss-security/2016/01/12/7'}, {'name': '[oss-security] 20160112 CVE Request: Vtiger CRM 6.4 Authenticated Remote Code Execution', 'tags': ['mailing-list', 'x_refsource_MLIST'], 'url': 'http://www.openwall.com/lists/oss-security/2016/01/12/4'}, {'tags': ['x_refsource_MISC'], 'url': 'http://b.fl7.de/2016/01/vtiger-crm-6.4-auth-rce.html'}, {'name': '44379', 'tags': ['exploit', 'x_refsource_EXPLOIT-DB'], 'url': 'https://www.exploit-db.com/exploits/44379/'}]
CVE State: PUBLISHED
Explain CVE-2016-1715
The swin.sys kernel driver in McAfee Application Control (MAC) 6.1.0 before build 706, 6.1.1 before build 404, 6.1.2 before build 449, 6.1.3 before build 441, and 6.2.0 before build 505 on 32-bit Windows platforms allows local users to cause a denial of service (memory corruption and system crash) or gain privileges via a 768 syscall, which triggers a zero to be written to an arbitrary kernel memory location.
Affected Products: n/a
References: [{'tags': ['x_refsource_CONFIRM'], 'url': 'https://kc.mcafee.com/corporate/index?page=content&id=SB10145'}, {'tags': ['x_refsource_MISC'], 'url': 'http://www.zerodayinitiative.com/advisories/ZDI-16-007'}]
CVE State: PUBLISHED
Explain CVE-2016-1716
AppleGraphicsPowerManagement in Apple OS X before 10.11.3 allows local users to gain privileges or cause a denial of service (memory corruption) via unspecified vectors.
Affected Products: n/a
References: [{'tags': ['x_refsource_CONFIRM'], 'url': 'https://support.apple.com/HT205731'}, {'name': '1034736', 'tags': ['vdb-entry', 'x_refsource_SECTRACK'], 'url': 'http://www.securitytracker.com/id/1034736'}, {'name': 'APPLE-SA-2016-01-19-2', 'tags': ['vendor-advisory', 'x_refsource_APPLE'], 'url': 'http://lists.apple.com/archives/security-announce/2016/Jan/msg00003.html'}]
CVE State: PUBLISHED
Explain CVE-2016-1717
The Disk Images component in Apple iOS before 9.2.1, OS X before 10.11.3, and tvOS before 9.1.1 allows local users to gain privileges or cause a denial of service (memory corruption) via unspecified vectors.
Affected Products: n/a
References: [{'tags': ['x_refsource_CONFIRM'], 'url': 'https://support.apple.com/HT206168'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'https://support.apple.com/HT205731'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'https://support.apple.com/HT205729'}, {'name': 'APPLE-SA-2016-01-25-1', 'tags': ['vendor-advisory', 'x_refsource_APPLE'], 'url': 'http://lists.apple.com/archives/security-announce/2016/Jan/msg00005.html'}, {'name': '1034736', 'tags': ['vdb-entry', 'x_refsource_SECTRACK'], 'url': 'http://www.securitytracker.com/id/1034736'}, {'name': 'APPLE-SA-2016-01-19-2', 'tags': ['vendor-advisory', 'x_refsource_APPLE'], 'url': 'http://lists.apple.com/archives/security-announce/2016/Jan/msg00003.html'}, {'name': 'APPLE-SA-2016-03-21-2', 'tags': ['vendor-advisory', 'x_refsource_APPLE'], 'url': 'http://lists.apple.com/archives/security-announce/2016/Mar/msg00001.html'}, {'name': 'APPLE-SA-2016-01-19-1', 'tags': ['vendor-advisory', 'x_refsource_APPLE'], 'url': 'http://lists.apple.com/archives/security-announce/2016/Jan/msg00002.html'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'https://support.apple.com/HT205732'}]
CVE State: PUBLISHED
Explain CVE-2016-1718
The IOAcceleratorFamily2 interface in IOAcceleratorFamily in Apple OS X before 10.11.3 allows local users to gain privileges or cause a denial of service (memory corruption) via unspecified vectors.
Affected Products: n/a
References: [{'tags': ['x_refsource_CONFIRM'], 'url': 'https://support.apple.com/HT205731'}, {'name': '1034736', 'tags': ['vdb-entry', 'x_refsource_SECTRACK'], 'url': 'http://www.securitytracker.com/id/1034736'}, {'name': 'APPLE-SA-2016-01-19-2', 'tags': ['vendor-advisory', 'x_refsource_APPLE'], 'url': 'http://lists.apple.com/archives/security-announce/2016/Jan/msg00003.html'}, {'tags': ['x_refsource_MISC'], 'url': 'http://zerodayinitiative.com/advisories/ZDI-16-020/'}]
CVE State: PUBLISHED
Explain CVE-2016-1720
IOKit in Apple iOS before 9.2.1, OS X before 10.11.3, and tvOS before 9.1.1 allows local users to gain privileges or cause a denial of service (memory corruption) via unspecified vectors.
Affected Products: n/a
References: [{'tags': ['x_refsource_CONFIRM'], 'url': 'https://support.apple.com/HT206168'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'https://support.apple.com/HT205731'}, {'tags': ['x_refsource_MISC'], 'url': 'http://packetstormsecurity.com/files/135435/IOKit-Methods-Being-Called-Without-Locks-From-IOServiceClose.html'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'https://support.apple.com/HT205729'}, {'name': '39367', 'tags': ['exploit', 'x_refsource_EXPLOIT-DB'], 'url': 'https://www.exploit-db.com/exploits/39367/'}, {'tags': ['x_refsource_MISC'], 'url': 'https://code.google.com/p/google-security-research/issues/detail?id=597'}, {'name': 'APPLE-SA-2016-01-25-1', 'tags': ['vendor-advisory', 'x_refsource_APPLE'], 'url': 'http://lists.apple.com/archives/security-announce/2016/Jan/msg00005.html'}, {'name': '1034736', 'tags': ['vdb-entry', 'x_refsource_SECTRACK'], 'url': 'http://www.securitytracker.com/id/1034736'}, {'name': 'APPLE-SA-2016-01-19-2', 'tags': ['vendor-advisory', 'x_refsource_APPLE'], 'url': 'http://lists.apple.com/archives/security-announce/2016/Jan/msg00003.html'}, {'name': 'APPLE-SA-2016-03-21-2', 'tags': ['vendor-advisory', 'x_refsource_APPLE'], 'url': 'http://lists.apple.com/archives/security-announce/2016/Mar/msg00001.html'}, {'name': 'APPLE-SA-2016-01-19-1', 'tags': ['vendor-advisory', 'x_refsource_APPLE'], 'url': 'http://lists.apple.com/archives/security-announce/2016/Jan/msg00002.html'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'https://support.apple.com/HT205732'}]
CVE State: PUBLISHED
Explain CVE-2016-1721
The kernel in Apple iOS before 9.2.1, OS X before 10.11.3, and tvOS before 9.1.1 allows local users to gain privileges or cause a denial of service (memory corruption) via unspecified vectors.
Affected Products: n/a
References: [{'tags': ['x_refsource_CONFIRM'], 'url': 'https://support.apple.com/HT206168'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'https://support.apple.com/HT205731'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'https://support.apple.com/HT205729'}, {'name': 'APPLE-SA-2016-01-25-1', 'tags': ['vendor-advisory', 'x_refsource_APPLE'], 'url': 'http://lists.apple.com/archives/security-announce/2016/Jan/msg00005.html'}, {'tags': ['x_refsource_MISC'], 'url': 'http://packetstormsecurity.com/files/135444/iOS-OS-X-Kernel-Uninitialized-Variable-Code-Execution.html'}, {'name': '1034736', 'tags': ['vdb-entry', 'x_refsource_SECTRACK'], 'url': 'http://www.securitytracker.com/id/1034736'}, {'name': 'APPLE-SA-2016-01-19-2', 'tags': ['vendor-advisory', 'x_refsource_APPLE'], 'url': 'http://lists.apple.com/archives/security-announce/2016/Jan/msg00003.html'}, {'name': 'APPLE-SA-2016-03-21-2', 'tags': ['vendor-advisory', 'x_refsource_APPLE'], 'url': 'http://lists.apple.com/archives/security-announce/2016/Mar/msg00001.html'}, {'name': '39358', 'tags': ['exploit', 'x_refsource_EXPLOIT-DB'], 'url': 'https://www.exploit-db.com/exploits/39358/'}, {'name': 'APPLE-SA-2016-01-19-1', 'tags': ['vendor-advisory', 'x_refsource_APPLE'], 'url': 'http://lists.apple.com/archives/security-announce/2016/Jan/msg00002.html'}, {'tags': ['x_refsource_MISC'], 'url': 'https://code.google.com/p/google-security-research/issues/detail?id=618'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'https://support.apple.com/HT205732'}]
CVE State: PUBLISHED
Explain CVE-2016-1722
syslog in Apple iOS before 9.2.1, OS X before 10.11.3, and tvOS before 9.1.1 allows local users to gain privileges or cause a denial of service (memory corruption) via unspecified vectors.
Affected Products: n/a
References: [{'tags': ['x_refsource_CONFIRM'], 'url': 'https://support.apple.com/HT206168'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'https://support.apple.com/HT205731'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'https://support.apple.com/HT205729'}, {'name': 'APPLE-SA-2016-01-25-1', 'tags': ['vendor-advisory', 'x_refsource_APPLE'], 'url': 'http://lists.apple.com/archives/security-announce/2016/Jan/msg00005.html'}, {'name': '1034736', 'tags': ['vdb-entry', 'x_refsource_SECTRACK'], 'url': 'http://www.securitytracker.com/id/1034736'}, {'name': 'APPLE-SA-2016-01-19-2', 'tags': ['vendor-advisory', 'x_refsource_APPLE'], 'url': 'http://lists.apple.com/archives/security-announce/2016/Jan/msg00003.html'}, {'name': 'APPLE-SA-2016-03-21-2', 'tags': ['vendor-advisory', 'x_refsource_APPLE'], 'url': 'http://lists.apple.com/archives/security-announce/2016/Mar/msg00001.html'}, {'name': 'APPLE-SA-2016-01-19-1', 'tags': ['vendor-advisory', 'x_refsource_APPLE'], 'url': 'http://lists.apple.com/archives/security-announce/2016/Jan/msg00002.html'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'https://support.apple.com/HT205732'}]
CVE State: PUBLISHED
Explain CVE-2016-1723
WebKit, as used in Apple iOS before 9.2.1 and Safari before 9.0.3, allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted web site, a different vulnerability than CVE-2016-1725 and CVE-2016-1726.
Affected Products: n/a
References: [{'tags': ['x_refsource_MISC'], 'url': 'http://packetstormsecurity.com/files/136227/WebKitGTK-Memory-Corruption-Denial-Of-Service.html'}, {'name': '81263', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/81263'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'https://support.apple.com/HT206168'}, {'name': '20160311 WebKitGTK+ Security Advisory WSA-2016-0002', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://www.securityfocus.com/archive/1/537771/100/0/threaded'}, {'name': '1034737', 'tags': ['vdb-entry', 'x_refsource_SECTRACK'], 'url': 'http://www.securitytracker.com/id/1034737'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'https://support.apple.com/HT205730'}, {'name': 'APPLE-SA-2016-03-21-2', 'tags': ['vendor-advisory', 'x_refsource_APPLE'], 'url': 'http://lists.apple.com/archives/security-announce/2016/Mar/msg00001.html'}, {'name': 'APPLE-SA-2016-01-19-1', 'tags': ['vendor-advisory', 'x_refsource_APPLE'], 'url': 'http://lists.apple.com/archives/security-announce/2016/Jan/msg00002.html'}, {'name': 'GLSA-201706-15', 'tags': ['vendor-advisory', 'x_refsource_GENTOO'], 'url': 'https://security.gentoo.org/glsa/201706-15'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'https://support.apple.com/HT205732'}, {'name': 'APPLE-SA-2016-01-19-3', 'tags': ['vendor-advisory', 'x_refsource_APPLE'], 'url': 'http://lists.apple.com/archives/security-announce/2016/Jan/msg00004.html'}]
CVE State: PUBLISHED
Explain CVE-2016-1724
WebKit, as used in Apple iOS before 9.2.1, Safari before 9.0.3, and tvOS before 9.1.1, allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted web site, a different vulnerability than CVE-2016-1727.
Affected Products: n/a
References: [{'tags': ['x_refsource_MISC'], 'url': 'http://packetstormsecurity.com/files/136227/WebKitGTK-Memory-Corruption-Denial-Of-Service.html'}, {'name': '81263', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/81263'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'https://support.apple.com/HT206168'}, {'name': '20160311 WebKitGTK+ Security Advisory WSA-2016-0002', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://www.securityfocus.com/archive/1/537771/100/0/threaded'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'https://support.apple.com/HT205729'}, {'name': '1034737', 'tags': ['vdb-entry', 'x_refsource_SECTRACK'], 'url': 'http://www.securitytracker.com/id/1034737'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'https://support.apple.com/HT205730'}, {'name': 'APPLE-SA-2016-01-25-1', 'tags': ['vendor-advisory', 'x_refsource_APPLE'], 'url': 'http://lists.apple.com/archives/security-announce/2016/Jan/msg00005.html'}, {'name': 'APPLE-SA-2016-03-21-2', 'tags': ['vendor-advisory', 'x_refsource_APPLE'], 'url': 'http://lists.apple.com/archives/security-announce/2016/Mar/msg00001.html'}, {'name': 'APPLE-SA-2016-01-19-1', 'tags': ['vendor-advisory', 'x_refsource_APPLE'], 'url': 'http://lists.apple.com/archives/security-announce/2016/Jan/msg00002.html'}, {'name': 'GLSA-201706-15', 'tags': ['vendor-advisory', 'x_refsource_GENTOO'], 'url': 'https://security.gentoo.org/glsa/201706-15'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'https://support.apple.com/HT205732'}, {'name': 'APPLE-SA-2016-01-19-3', 'tags': ['vendor-advisory', 'x_refsource_APPLE'], 'url': 'http://lists.apple.com/archives/security-announce/2016/Jan/msg00004.html'}]
CVE State: PUBLISHED
Explain CVE-2016-1725
WebKit, as used in Apple iOS before 9.2.1 and Safari before 9.0.3, allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted web site, a different vulnerability than CVE-2016-1723 and CVE-2016-1726.
Affected Products: n/a
References: [{'tags': ['x_refsource_MISC'], 'url': 'http://packetstormsecurity.com/files/136227/WebKitGTK-Memory-Corruption-Denial-Of-Service.html'}, {'name': '81263', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/81263'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'https://support.apple.com/HT206168'}, {'name': '20160311 WebKitGTK+ Security Advisory WSA-2016-0002', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://www.securityfocus.com/archive/1/537771/100/0/threaded'}, {'name': '1034737', 'tags': ['vdb-entry', 'x_refsource_SECTRACK'], 'url': 'http://www.securitytracker.com/id/1034737'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'https://support.apple.com/HT205730'}, {'name': 'APPLE-SA-2016-03-21-2', 'tags': ['vendor-advisory', 'x_refsource_APPLE'], 'url': 'http://lists.apple.com/archives/security-announce/2016/Mar/msg00001.html'}, {'name': 'APPLE-SA-2016-01-19-1', 'tags': ['vendor-advisory', 'x_refsource_APPLE'], 'url': 'http://lists.apple.com/archives/security-announce/2016/Jan/msg00002.html'}, {'name': 'GLSA-201706-15', 'tags': ['vendor-advisory', 'x_refsource_GENTOO'], 'url': 'https://security.gentoo.org/glsa/201706-15'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'https://support.apple.com/HT205732'}, {'name': 'APPLE-SA-2016-01-19-3', 'tags': ['vendor-advisory', 'x_refsource_APPLE'], 'url': 'http://lists.apple.com/archives/security-announce/2016/Jan/msg00004.html'}]
CVE State: PUBLISHED