Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
CVE ID: CVE-2016-1653 State: PUBLISHED Published: 2016-04-18T10:00:00 Last Updated: 2024-08-05T23:02:12.829Z Vendors: n/a Products: n/a Problem Types: n/a Description: The LoadBuffer implementation in Google V8, as used in Google Chrome before 50.0.2661.75, mishandles data types, which allows remote attackers to cause a denial of service or possibly have unspecified other impact via crafted JavaScript code that triggers an out-of-bounds write operation, related to compiler/pipeline.cc and compiler/simplified-lowering.cc. Additional Analyst Notes: - CVE Program Container: References: - http://lists.opensuse.org/opensuse-security-announce/2016-04/msg00050.html - http://lists.opensuse.org/opens
ferences: - http://lists.opensuse.org/opensuse-security-announce/2016-04/msg00050.html - http://lists.opensuse.org/opensuse-security-announce/2016-04/msg00049.html - http://rhn.redhat.com/errata/RHSA-2016-0638.html - https://crbug.com/589792 - http://lists.opensuse.org/opensuse-security-announce/2016-04/msg00040.html - http://www.debian.org/security/2016/dsa-3549 - http://lists.opensuse.org/opensuse-security-announce/2016-04/msg00041.html - http://www.ubuntu.com/usn/USN-2955-1 - https://codereview.chromium.org/1740123002 - http://googlechromereleases.blogspot.com/2016/04/stable-channel-update_13.html - https://security.gentoo.org/glsa/201605-02
CVE ID: CVE-2016-1654 State: PUBLISHED Published: 2016-04-18T10:00:00 Last Updated: 2024-08-05T23:02:12.856Z Vendors: n/a Products: n/a Problem Types: n/a Description: The media subsystem in Google Chrome before 50.0.2661.75 does not initialize an unspecified data structure, which allows remote attackers to cause a denial of service (invalid read operation) via unknown vectors. Additional Analyst Notes: - CVE Program Container: References: - http://lists.opensuse.org/opensuse-security-announce/2016-04/msg00050.html - http://lists.opensuse.org/opensuse-security-announce/2016-04/msg00049.html - https://crbug.com/589512 - http://rhn.redhat.com/errata/RHSA-2016-0638.html - http://lists.opensuse.
-04/msg00049.html - https://crbug.com/589512 - http://rhn.redhat.com/errata/RHSA-2016-0638.html - http://lists.opensuse.org/opensuse-security-announce/2016-04/msg00040.html - http://www.debian.org/security/2016/dsa-3549 - http://lists.opensuse.org/opensuse-security-announce/2016-04/msg00041.html - http://www.ubuntu.com/usn/USN-2955-1 - http://googlechromereleases.blogspot.com/2016/04/stable-channel-update_13.html - https://security.gentoo.org/glsa/201605-02
CVE ID: CVE-2016-1655 State: PUBLISHED Published: 2016-04-18T10:00:00 Last Updated: 2024-08-05T23:02:12.893Z Vendors: n/a Products: n/a Problem Types: n/a Description: Google Chrome before 50.0.2661.75 does not properly consider that frame removal may occur during callback execution, which allows remote attackers to cause a denial of service (use-after-free) or possibly have unspecified other impact via a crafted extension. Additional Analyst Notes: - CVE Program Container: References: - http://lists.opensuse.org/opensuse-security-announce/2016-04/msg00050.html - https://codereview.chromium.org/1642283002 - http://lists.opensuse.org/opensuse-security-announce/2016-04/msg00049.html - http://r
dereview.chromium.org/1642283002 - http://lists.opensuse.org/opensuse-security-announce/2016-04/msg00049.html - http://rhn.redhat.com/errata/RHSA-2016-0638.html - http://lists.opensuse.org/opensuse-security-announce/2016-04/msg00040.html - http://www.debian.org/security/2016/dsa-3549 - http://lists.opensuse.org/opensuse-security-announce/2016-04/msg00041.html - https://crbug.com/582008 - http://www.ubuntu.com/usn/USN-2955-1 - http://googlechromereleases.blogspot.com/2016/04/stable-channel-update_13.html - https://security.gentoo.org/glsa/201605-02
CVE ID: CVE-2016-1656 State: PUBLISHED Published: 2016-04-18T10:00:00 Last Updated: 2024-08-05T23:02:12.473Z Vendors: n/a Products: n/a Problem Types: n/a Description: The download implementation in Google Chrome before 50.0.2661.75 on Android allows remote attackers to bypass intended pathname restrictions via unspecified vectors. Additional Analyst Notes: - CVE Program Container: References: - http://lists.opensuse.org/opensuse-security-announce/2016-04/msg00050.html - https://crbug.com/570750 - http://lists.opensuse.org/opensuse-security-announce/2016-04/msg00049.html - http://rhn.redhat.com/errata/RHSA-2016-0638.html - http://lists.opensuse.org/opensuse-security-announce/2016-04/msg00040
http://rhn.redhat.com/errata/RHSA-2016-0638.html - http://lists.opensuse.org/opensuse-security-announce/2016-04/msg00040.html - http://lists.opensuse.org/opensuse-security-announce/2016-04/msg00041.html - http://googlechromereleases.blogspot.com/2016/04/stable-channel-update_13.html - https://security.gentoo.org/glsa/201605-02
CVE ID: CVE-2016-1657 State: PUBLISHED Published: 2016-04-18T10:00:00 Last Updated: 2024-08-05T23:02:12.504Z Vendors: n/a Products: n/a Problem Types: n/a Description: The WebContentsImpl::FocusLocationBarByDefault function in content/browser/web_contents/web_contents_impl.cc in Google Chrome before 50.0.2661.75 mishandles focus for certain about:blank pages, which allows remote attackers to spoof the address bar via a crafted URL. Additional Analyst Notes: - CVE Program Container: References: - https://crbug.com/567445 - http://lists.opensuse.org/opensuse-security-announce/2016-04/msg00050.html - http://lists.opensuse.org/opensuse-security-announce/2016-04/msg00049.html - http://rhn.redhat.
/2016-04/msg00050.html - http://lists.opensuse.org/opensuse-security-announce/2016-04/msg00049.html - http://rhn.redhat.com/errata/RHSA-2016-0638.html - https://codereview.chromium.org/1678233003/ - http://lists.opensuse.org/opensuse-security-announce/2016-04/msg00040.html - http://www.debian.org/security/2016/dsa-3549 - http://lists.opensuse.org/opensuse-security-announce/2016-04/msg00041.html - http://googlechromereleases.blogspot.com/2016/04/stable-channel-update_13.html - https://security.gentoo.org/glsa/201605-02
CVE ID: CVE-2016-1658 State: PUBLISHED Published: 2016-04-18T10:00:00 Last Updated: 2024-08-05T23:02:12.825Z Vendors: n/a Products: n/a Problem Types: n/a Description: The Extensions subsystem in Google Chrome before 50.0.2661.75 incorrectly relies on GetOrigin method calls for origin comparisons, which allows remote attackers to bypass the Same Origin Policy and obtain sensitive information via a crafted extension. Additional Analyst Notes: - CVE Program Container: References: - http://lists.opensuse.org/opensuse-security-announce/2016-04/msg00050.html - https://codereview.chromium.org/1658913002 - http://lists.opensuse.org/opensuse-security-announce/2016-04/msg00049.html - http://rhn.redha
.chromium.org/1658913002 - http://lists.opensuse.org/opensuse-security-announce/2016-04/msg00049.html - http://rhn.redhat.com/errata/RHSA-2016-0638.html - http://lists.opensuse.org/opensuse-security-announce/2016-04/msg00040.html - http://www.debian.org/security/2016/dsa-3549 - http://lists.opensuse.org/opensuse-security-announce/2016-04/msg00041.html - http://googlechromereleases.blogspot.com/2016/04/stable-channel-update_13.html - https://security.gentoo.org/glsa/201605-02 - https://crbug.com/573317
CVE ID: CVE-2016-1659 State: PUBLISHED Published: 2016-04-18T10:00:00 Last Updated: 2024-08-05T23:02:12.477Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple unspecified vulnerabilities in Google Chrome before 50.0.2661.75 allow attackers to cause a denial of service or possibly have other impact via unknown vectors. Additional Analyst Notes: - CVE Program Container: References: - http://lists.opensuse.org/opensuse-security-announce/2016-04/msg00050.html - https://crbug.com/602697 - http://lists.opensuse.org/opensuse-security-announce/2016-04/msg00049.html - http://rhn.redhat.com/errata/RHSA-2016-0638.html - http://lists.opensuse.org/opensuse-security-announce/2016-04/msg0
l - http://rhn.redhat.com/errata/RHSA-2016-0638.html - http://lists.opensuse.org/opensuse-security-announce/2016-04/msg00040.html - http://www.debian.org/security/2016/dsa-3549 - http://lists.opensuse.org/opensuse-security-announce/2016-04/msg00041.html - http://www.ubuntu.com/usn/USN-2955-1 - http://googlechromereleases.blogspot.com/2016/04/stable-channel-update_13.html - https://security.gentoo.org/glsa/201605-02
CVE ID: CVE-2016-1660 State: PUBLISHED Published: 2016-05-14T21:00:00 Last Updated: 2024-08-05T23:02:12.851Z Vendors: n/a Products: n/a Problem Types: n/a Description: Blink, as used in Google Chrome before 50.0.2661.94, mishandles assertions in the WTF::BitArray and WTF::double_conversion::Vector classes, which allows remote attackers to cause a denial of service (out-of-bounds write) or possibly have unspecified other impact via a crafted web site. Additional Analyst Notes: - CVE Program Container: References: - http://lists.opensuse.org/opensuse-security-announce/2016-05/msg00003.html - https://crbug.com/574802 - http://www.debian.org/security/2016/dsa-3564 - http://lists.opensuse.org/ope
/msg00003.html - https://crbug.com/574802 - http://www.debian.org/security/2016/dsa-3564 - http://lists.opensuse.org/opensuse-security-announce/2016-06/msg00048.html - http://lists.opensuse.org/opensuse-security-announce/2016-05/msg00004.html - http://www.ubuntu.com/usn/USN-2960-1 - https://codereview.chromium.org/1677363002 - http://www.securityfocus.com/bid/89106 - http://lists.opensuse.org/opensuse-security-announce/2016-05/msg00002.html - http://googlechromereleases.blogspot.com/2016/04/stable-channel-update_28.html - http://rhn.redhat.com/errata/RHSA-2016-0707.html - https://security.gentoo.org/glsa/201605-02 - https://codereview.chromium.org/1672603002
CVE ID: CVE-2016-1661 State: PUBLISHED Published: 2016-05-14T21:00:00 Last Updated: 2024-08-05T23:02:12.442Z Vendors: n/a Products: n/a Problem Types: n/a Description: Blink, as used in Google Chrome before 50.0.2661.94, does not ensure that frames satisfy a check for the same renderer process in addition to a Same Origin Policy check, which allows remote attackers to cause a denial of service (memory corruption) or possibly have unspecified other impact via a crafted web site, related to BindingSecurity.cpp and DOMWindow.cpp. Additional Analyst Notes: - CVE Program Container: References: - http://lists.opensuse.org/opensuse-security-announce/2016-05/msg00003.html - http://www.debian.org/sec
er: References: - http://lists.opensuse.org/opensuse-security-announce/2016-05/msg00003.html - http://www.debian.org/security/2016/dsa-3564 - http://lists.opensuse.org/opensuse-security-announce/2016-06/msg00048.html - http://lists.opensuse.org/opensuse-security-announce/2016-05/msg00004.html - http://www.ubuntu.com/usn/USN-2960-1 - https://codereview.chromium.org/1887553002/ - http://www.securityfocus.com/bid/89106 - https://crbug.com/601629 - http://lists.opensuse.org/opensuse-security-announce/2016-05/msg00002.html - http://googlechromereleases.blogspot.com/2016/04/stable-channel-update_28.html - http://rhn.redhat.com/errata/RHSA-2016-0707.html - https://security.gentoo.org/glsa/201605-02
CVE ID: CVE-2016-1662 State: PUBLISHED Published: 2016-05-14T21:00:00 Last Updated: 2024-08-05T23:02:12.361Z Vendors: n/a Products: n/a Problem Types: n/a Description: extensions/renderer/gc_callback.cc in Google Chrome before 50.0.2661.94 does not prevent fallback execution once the Garbage Collection callback has started, which allows remote attackers to cause a denial of service (use-after-free) or possibly have unspecified other impact via unknown vectors. Additional Analyst Notes: - CVE Program Container: References: - http://lists.opensuse.org/opensuse-security-announce/2016-05/msg00003.html - https://codereview.chromium.org/1887423002 - http://www.debian.org/security/2016/dsa-3564 - h
ce/2016-05/msg00003.html - https://codereview.chromium.org/1887423002 - http://www.debian.org/security/2016/dsa-3564 - http://lists.opensuse.org/opensuse-security-announce/2016-06/msg00048.html - http://lists.opensuse.org/opensuse-security-announce/2016-05/msg00004.html - http://www.securityfocus.com/bid/89106 - http://lists.opensuse.org/opensuse-security-announce/2016-05/msg00002.html - http://googlechromereleases.blogspot.com/2016/04/stable-channel-update_28.html - http://rhn.redhat.com/errata/RHSA-2016-0707.html - https://crbug.com/603732 - https://security.gentoo.org/glsa/201605-02
CVE ID: CVE-2016-1663 State: PUBLISHED Published: 2016-05-14T21:00:00 Last Updated: 2024-08-05T23:02:12.880Z Vendors: n/a Products: n/a Problem Types: n/a Description: The SerializedScriptValue::transferArrayBuffers function in WebKit/Source/bindings/core/v8/SerializedScriptValue.cpp in the V8 bindings in Blink, as used in Google Chrome before 50.0.2661.94, mishandles certain array-buffer data structures, which allows remote attackers to cause a denial of service (use-after-free) or possibly have unspecified other impact via a crafted web site. Additional Analyst Notes: - CVE Program Container: References: - https://crbug.com/603987 - http://lists.opensuse.org/opensuse-security-announce/2016
VE Program Container: References: - https://crbug.com/603987 - http://lists.opensuse.org/opensuse-security-announce/2016-05/msg00003.html - http://www.debian.org/security/2016/dsa-3564 - http://lists.opensuse.org/opensuse-security-announce/2016-06/msg00048.html - http://lists.opensuse.org/opensuse-security-announce/2016-05/msg00004.html - http://www.ubuntu.com/usn/USN-2960-1 - https://codereview.chromium.org/1904913002/ - http://www.securityfocus.com/bid/89106 - http://lists.opensuse.org/opensuse-security-announce/2016-05/msg00002.html - http://googlechromereleases.blogspot.com/2016/04/stable-channel-update_28.html - http://rhn.redhat.com/errata/RHSA-2016-0707.html - https://security.gentoo.
.com/2016/04/stable-channel-update_28.html - http://rhn.redhat.com/errata/RHSA-2016-0707.html - https://security.gentoo.org/glsa/201605-02
CVE ID: CVE-2016-1664 State: PUBLISHED Published: 2016-05-14T21:00:00 Last Updated: 2024-08-05T23:02:12.369Z Vendors: n/a Products: n/a Problem Types: n/a Description: The HistoryController::UpdateForCommit function in content/renderer/history_controller.cc in Google Chrome before 50.0.2661.94 mishandles the interaction between subframe forward navigations and other forward navigations, which allows remote attackers to spoof the address bar via a crafted web site. Additional Analyst Notes: - CVE Program Container: References: - http://lists.opensuse.org/opensuse-security-announce/2016-05/msg00003.html - https://crbug.com/597322 - http://www.debian.org/security/2016/dsa-3564 - http://lists.op
nounce/2016-05/msg00003.html - https://crbug.com/597322 - http://www.debian.org/security/2016/dsa-3564 - http://lists.opensuse.org/opensuse-security-announce/2016-06/msg00048.html - https://codereview.chromium.org/1848813005/ - http://lists.opensuse.org/opensuse-security-announce/2016-05/msg00004.html - http://www.securityfocus.com/bid/89106 - http://lists.opensuse.org/opensuse-security-announce/2016-05/msg00002.html - http://googlechromereleases.blogspot.com/2016/04/stable-channel-update_28.html - http://rhn.redhat.com/errata/RHSA-2016-0707.html - https://security.gentoo.org/glsa/201605-02
CVE ID: CVE-2016-1665 State: PUBLISHED Published: 2016-05-14T21:00:00 Last Updated: 2024-08-05T23:02:12.872Z Vendors: n/a Products: n/a Problem Types: n/a Description: The JSGenericLowering class in compiler/js-generic-lowering.cc in Google V8, as used in Google Chrome before 50.0.2661.94, mishandles comparison operators, which allows remote attackers to obtain sensitive information via crafted JavaScript code. Additional Analyst Notes: - CVE Program Container: References: - http://lists.opensuse.org/opensuse-security-announce/2016-05/msg00003.html - https://crbug.com/606181 - https://codereview.chromium.org/1925463003 - http://www.debian.org/security/2016/dsa-3564 - http://lists.opensuse.or
1 - https://codereview.chromium.org/1925463003 - http://www.debian.org/security/2016/dsa-3564 - http://lists.opensuse.org/opensuse-security-announce/2016-06/msg00048.html - http://lists.opensuse.org/opensuse-security-announce/2016-05/msg00004.html - http://www.ubuntu.com/usn/USN-2960-1 - http://www.securityfocus.com/bid/89106 - http://lists.opensuse.org/opensuse-security-announce/2016-05/msg00002.html - http://googlechromereleases.blogspot.com/2016/04/stable-channel-update_28.html - http://rhn.redhat.com/errata/RHSA-2016-0707.html - https://security.gentoo.org/glsa/201605-02
CVE ID: CVE-2016-1666 State: PUBLISHED Published: 2016-05-14T21:00:00 Last Updated: 2024-08-05T23:02:12.843Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple unspecified vulnerabilities in Google Chrome before 50.0.2661.94 allow attackers to cause a denial of service or possibly have other impact via unknown vectors. Additional Analyst Notes: - CVE Program Container: References: - https://bugs.chromium.org/p/chromium/issues/detail?id=601001 - http://lists.opensuse.org/opensuse-security-announce/2016-05/msg00003.html - http://www.debian.org/security/2016/dsa-3564 - http://lists.opensuse.org/opensuse-security-announce/2016-06/msg00048.html - https://bugs.chromium.org/p/chrom
sa-3564 - http://lists.opensuse.org/opensuse-security-announce/2016-06/msg00048.html - https://bugs.chromium.org/p/chromium/issues/detail?id=605491 - https://crbug.com/607652 - http://lists.opensuse.org/opensuse-security-announce/2016-05/msg00004.html - http://www.ubuntu.com/usn/USN-2960-1 - http://www.securityfocus.com/bid/89106 - http://lists.opensuse.org/opensuse-security-announce/2016-05/msg00002.html - http://googlechromereleases.blogspot.com/2016/04/stable-channel-update_28.html - http://rhn.redhat.com/errata/RHSA-2016-0707.html - https://security.gentoo.org/glsa/201605-02
CVE ID: CVE-2016-1667 State: PUBLISHED Published: 2016-05-14T21:00:00 Last Updated: 2024-08-05T23:02:12.510Z Vendors: n/a Products: n/a Problem Types: n/a Description: The TreeScope::adoptIfNeeded function in WebKit/Source/core/dom/TreeScope.cpp in the DOM implementation in Blink, as used in Google Chrome before 50.0.2661.102, does not prevent script execution during node-adoption operations, which allows remote attackers to bypass the Same Origin Policy via a crafted web site. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/90584 - http://www.securitytracker.com/id/1035872 - http://rhn.redhat.com/errata/RHSA-2016-1080.html - http://lists.ope
/90584 - http://www.securitytracker.com/id/1035872 - http://rhn.redhat.com/errata/RHSA-2016-1080.html - http://lists.opensuse.org/opensuse-security-announce/2016-05/msg00043.html - https://codereview.chromium.org/1953323002/ - http://lists.opensuse.org/opensuse-security-announce/2016-06/msg00048.html - http://www.debian.org/security/2016/dsa-3590 - http://www.ubuntu.com/usn/USN-2960-1 - https://crbug.com/605766 - http://googlechromereleases.blogspot.com/2016/05/stable-channel-update.html - http://lists.opensuse.org/opensuse-security-announce/2016-05/msg00050.html - https://security.gentoo.org/glsa/201605-02
CVE ID: CVE-2016-1668 State: PUBLISHED Published: 2016-05-14T21:00:00 Last Updated: 2024-08-05T23:02:12.880Z Vendors: n/a Products: n/a Problem Types: n/a Description: The forEachForBinding function in WebKit/Source/bindings/core/v8/Iterable.h in the V8 bindings in Blink, as used in Google Chrome before 50.0.2661.102, uses an improper creation context, which allows remote attackers to bypass the Same Origin Policy via a crafted web site. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/90584 - https://codereview.chromium.org/1960013002 - http://www.securitytracker.com/id/1035872 - http://rhn.redhat.com/errata/RHSA-2016-1080.html - http://lists
1960013002 - http://www.securitytracker.com/id/1035872 - http://rhn.redhat.com/errata/RHSA-2016-1080.html - http://lists.opensuse.org/opensuse-security-announce/2016-05/msg00043.html - https://crbug.com/605910 - http://lists.opensuse.org/opensuse-security-announce/2016-06/msg00048.html - http://www.debian.org/security/2016/dsa-3590 - http://www.ubuntu.com/usn/USN-2960-1 - http://googlechromereleases.blogspot.com/2016/05/stable-channel-update.html - http://lists.opensuse.org/opensuse-security-announce/2016-05/msg00050.html - https://security.gentoo.org/glsa/201605-02
CVE ID: CVE-2016-1669 State: PUBLISHED Published: 2016-05-14T21:00:00 Last Updated: 2024-08-05T23:02:12.888Z Vendors: n/a Products: n/a Problem Types: n/a Description: The Zone::New function in zone.cc in Google V8 before 5.0.71.47, as used in Google Chrome before 50.0.2661.102, does not properly determine when to expand certain memory allocations, which allows remote attackers to cause a denial of service (buffer overflow) or possibly have unspecified other impact via crafted JavaScript code. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/90584 - https://access.redhat.com/errata/RHSA-2017:0880 - http://www.securitytracker.com/id/1035872 - h
ityfocus.com/bid/90584 - https://access.redhat.com/errata/RHSA-2017:0880 - http://www.securitytracker.com/id/1035872 - http://rhn.redhat.com/errata/RHSA-2016-1080.html - http://lists.opensuse.org/opensuse-security-announce/2016-05/msg00043.html - https://access.redhat.com/errata/RHSA-2017:0881 - https://codereview.chromium.org/1945313002 - https://access.redhat.com/errata/RHSA-2018:0336 - https://access.redhat.com/errata/RHSA-2017:0882 - http://lists.opensuse.org/opensuse-security-announce/2016-06/msg00048.html - http://www.debian.org/security/2016/dsa-3590 - http://www.ubuntu.com/usn/USN-2960-1 - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/messag
ntu.com/usn/USN-2960-1 - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/CITS5GIUTNWVSUXMSORIAJJLQBEGL2CK/ - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/ZPTKXI62OPCJCJGCSFMST4HIBQ27J72W/ - https://crbug.com/606115 - https://h20566.www2.hpe.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c05347541 - https://access.redhat.com/errata/RHSA-2017:0879 - http://googlechromereleases.blogspot.com/2016/05/stable-channel-update.html - http://lists.opensuse.org/opensuse-updates/2016-07/msg00063.html - http://rhn.redhat.com/errata/RHSA-2017-0002.html - http://lists.opensuse.org/opensuse-security-a
2016-07/msg00063.html - http://rhn.redhat.com/errata/RHSA-2017-0002.html - http://lists.opensuse.org/opensuse-security-announce/2016-05/msg00050.html - https://security.gentoo.org/glsa/201605-02
CVE ID: CVE-2016-1670 State: PUBLISHED Published: 2016-05-14T21:00:00 Last Updated: 2024-08-05T23:02:12.981Z Vendors: n/a Products: n/a Problem Types: n/a Description: Race condition in the ResourceDispatcherHostImpl::BeginRequest function in content/browser/loader/resource_dispatcher_host_impl.cc in Google Chrome before 50.0.2661.102 allows remote attackers to make arbitrary HTTP requests by leveraging access to a renderer process and reusing a request ID. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/90584 - http://www.securitytracker.com/id/1035872 - http://rhn.redhat.com/errata/RHSA-2016-1080.html - http://lists.opensuse.org/opensuse-se
ecuritytracker.com/id/1035872 - http://rhn.redhat.com/errata/RHSA-2016-1080.html - http://lists.opensuse.org/opensuse-security-announce/2016-05/msg00043.html - http://lists.opensuse.org/opensuse-security-announce/2016-06/msg00048.html - http://www.debian.org/security/2016/dsa-3590 - http://www.ubuntu.com/usn/USN-2960-1 - https://crbug.com/578882 - http://googlechromereleases.blogspot.com/2016/05/stable-channel-update.html - https://codereview.chromium.org/1608573002 - http://lists.opensuse.org/opensuse-security-announce/2016-05/msg00050.html - https://security.gentoo.org/glsa/201605-02