Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
CVE ID: CVE-2016-5196 State: PUBLISHED Published: 2017-01-19T05:43:00 Last Updated: 2024-08-06T00:53:48.591Z Vendors: n/a Products: Google Chrome prior to 54.0.2840.85 for Android Problem Types: insufficient policy enforcement Description: The content renderer client in Google Chrome prior to 54.0.2840.85 for Android insufficiently enforced the Same Origin Policy amongst downloaded files, which allowed a remote attacker to access any downloaded file and interact with sites, including those the user was logged into, via a crafted HTML page. Additional Analyst Notes: - CVE Program Container: References: - https://chromereleases.googleblog.com/2016/10/chrome-for-android-update_31.html - https:/
ogram Container: References: - https://chromereleases.googleblog.com/2016/10/chrome-for-android-update_31.html - https://crbug.com/659492 - http://www.securityfocus.com/bid/94078
CVE ID: CVE-2016-5197 State: PUBLISHED Published: 2017-01-19T05:43:00 Last Updated: 2024-08-06T00:53:48.521Z Vendors: n/a Products: Google Chrome prior to 54.0.2840.85 for Android Problem Types: insufficient validation of untrusted input Description: The content view client in Google Chrome prior to 54.0.2840.85 for Android insufficiently validated intent URLs, which allowed a remote attacker who had compromised the renderer process to start arbitrary activity on the system via a crafted HTML page. Additional Analyst Notes: - CVE Program Container: References: - https://chromereleases.googleblog.com/2016/10/chrome-for-android-update_31.html - http://www.securityfocus.com/bid/94078 - https://
omereleases.googleblog.com/2016/10/chrome-for-android-update_31.html - http://www.securityfocus.com/bid/94078 - https://crbug.com/659477
CVE ID: CVE-2016-5198 State: PUBLISHED Published: 2017-01-19T05:43:00.000Z Last Updated: 2025-10-21T23:55:46.892Z Vendors: n/a Products: Google Chrome prior to 54.0.2840.90 for Linux, and 54.0.2840.85 for Android, and 54.0.2840.87 for Windows and Mac Problem Types: incorrect compiler optimisations Description: V8 in Google Chrome prior to 54.0.2840.90 for Linux, and 54.0.2840.85 for Android, and 54.0.2840.87 for Windows and Mac included incorrect optimisation assumptions, which allowed a remote attacker to perform arbitrary read/write operations, leading to code execution, via a crafted HTML page. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https
via a crafted HTML page. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://crbug.com/659475 - http://www.securityfocus.com/bid/94079 - http://www.securitytracker.com/id/1037224 - http://rhn.redhat.com/errata/RHSA-2016-2672.html - https://chromereleases.googleblog.com/2016/11/stable-channel-update-for-desktop.html
CVE ID: CVE-2016-5199 State: PUBLISHED Published: 2017-01-19T05:43:00 Last Updated: 2024-08-06T00:53:48.583Z Vendors: n/a Products: Google Chrome prior to 54.0.2840.98 for Mac, and 54.0.2840.99 for Windows, and 54.0.2840.100 for Linux, and 55.0.2883.84 for Android Problem Types: off by one error Description: An off by one error resulting in an allocation of zero size in FFmpeg in Google Chrome prior to 54.0.2840.98 for Mac, and 54.0.2840.99 for Windows, and 54.0.2840.100 for Linux, and 55.0.2883.84 for Android allowed a remote attacker to potentially exploit heap corruption via a crafted video file. Additional Analyst Notes: - CVE Program Container: References: - http://www.securitytracker.c
via a crafted video file. Additional Analyst Notes: - CVE Program Container: References: - http://www.securitytracker.com/id/1037273 - https://security.gentoo.org/glsa/201611-16 - https://chromereleases.googleblog.com/2016/11/stable-channel-update-for-desktop_9.html - http://www.securityfocus.com/bid/94196 - https://crbug.com/643948 - http://rhn.redhat.com/errata/RHSA-2016-2718.html
CVE ID: CVE-2016-5200 State: PUBLISHED Published: 2017-01-19T05:43:00 Last Updated: 2024-08-06T00:53:48.611Z Vendors: n/a Products: Google Chrome prior to 54.0.2840.98 for Mac, and 54.0.2840.99 for Windows, and 54.0.2840.100 for Linux, and 55.0.2883.84 for Android Problem Types: type confusion in generated code Description: V8 in Google Chrome prior to 54.0.2840.98 for Mac, and 54.0.2840.99 for Windows, and 54.0.2840.100 for Linux, and 55.0.2883.84 for Android incorrectly applied type rules, which allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. Additional Analyst Notes: - CVE Program Container: References: - http://www.securitytracker.com/id/1037273
d HTML page. Additional Analyst Notes: - CVE Program Container: References: - http://www.securitytracker.com/id/1037273 - https://security.gentoo.org/glsa/201611-16 - https://crbug.com/658114 - https://chromereleases.googleblog.com/2016/11/stable-channel-update-for-desktop_9.html - http://www.securityfocus.com/bid/94196 - http://rhn.redhat.com/errata/RHSA-2016-2718.html
CVE ID: CVE-2016-5201 State: PUBLISHED Published: 2017-01-19T05:43:00 Last Updated: 2024-08-06T00:53:48.626Z Vendors: n/a Products: Google Chrome prior to 54.0.2840.100 for Linux, and 54.0.2840.99 for Windows, and 54.0.2840.98 for Mac Problem Types: leak of object Description: A leak of privateClass in the extensions API in Google Chrome prior to 54.0.2840.100 for Linux, and 54.0.2840.99 for Windows, and 54.0.2840.98 for Mac allowed a remote attacker to access privileged JavaScript code via a crafted HTML page. Additional Analyst Notes: - CVE Program Container: References: - http://www.securitytracker.com/id/1037273 - https://security.gentoo.org/glsa/201611-16 - https://chromereleases.google
- http://www.securitytracker.com/id/1037273 - https://security.gentoo.org/glsa/201611-16 - https://chromereleases.googleblog.com/2016/11/stable-channel-update-for-desktop_9.html - http://www.securityfocus.com/bid/94196 - http://rhn.redhat.com/errata/RHSA-2016-2718.html - https://crbug.com/660678
CVE ID: CVE-2016-5202 State: PUBLISHED Published: 2019-10-25T13:30:51 Last Updated: 2024-08-06T00:53:48.686Z Vendors: chromium-browser Products: chromium-browser Problem Types: fixes from internal audits Description: browser/extensions/api/dial/dial_registry.cc in Google Chrome before 54.0.2840.98 on macOS, before 54.0.2840.99 on Windows, and before 54.0.2840.100 on Linux neglects to copy a device ID before an erase() call, which causes the erase operation to access data that that erase operation will destroy. Additional Analyst Notes: - CVE Program Container: References: - https://security-tracker.debian.org/tracker/CVE-2016-5202 - https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2016-5202 -
https://security-tracker.debian.org/tracker/CVE-2016-5202 - https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2016-5202 - https://bugzilla.suse.com/show_bug.cgi?id=CVE-2016-5202 - http://lists.opensuse.org/opensuse-security-announce/2016-11/msg00029.html
CVE ID: CVE-2016-5203 State: PUBLISHED Published: 2017-01-19T05:43:00 Last Updated: 2024-08-06T00:53:48.667Z Vendors: n/a Products: Google Chrome prior to 55.0.2883.75 for Mac, Windows and Linux, and 55.0.2883.84 for Android Problem Types: use after free Description: A use after free in PDFium in Google Chrome prior to 55.0.2883.75 for Mac, Windows and Linux, and 55.0.2883.84 for Android allowed a remote attacker to potentially exploit heap corruption via a crafted PDF file. Additional Analyst Notes: - CVE Program Container: References: - http://rhn.redhat.com/errata/RHSA-2016-2919.html - http://www.securityfocus.com/bid/94633 - https://crbug.com/644219 - https://chromereleases.googleblog.co
016-2919.html - http://www.securityfocus.com/bid/94633 - https://crbug.com/644219 - https://chromereleases.googleblog.com/2016/12/stable-channel-update-for-desktop.html - https://security.gentoo.org/glsa/201612-11
CVE ID: CVE-2016-5204 State: PUBLISHED Published: 2017-01-19T05:43:00 Last Updated: 2024-08-06T00:53:48.708Z Vendors: n/a Products: Google Chrome prior to 55.0.2883.75 for Mac, Windows and Linux, and 55.0.2883.84 for Android Problem Types: object corruption Description: Leaking of an SVG shadow tree leading to corruption of the DOM tree in Blink in Google Chrome prior to 55.0.2883.75 for Mac, Windows and Linux, and 55.0.2883.84 for Android allowed a remote attacker to inject arbitrary scripts or HTML (UXSS) via a crafted HTML page. Additional Analyst Notes: - CVE Program Container: References: - http://rhn.redhat.com/errata/RHSA-2016-2919.html - https://crbug.com/630870 - http://www.security
ntainer: References: - http://rhn.redhat.com/errata/RHSA-2016-2919.html - https://crbug.com/630870 - http://www.securityfocus.com/bid/94633 - https://chromereleases.googleblog.com/2016/12/stable-channel-update-for-desktop.html - https://security.gentoo.org/glsa/201612-11
CVE ID: CVE-2016-5205 State: PUBLISHED Published: 2017-01-19T05:43:00 Last Updated: 2024-08-06T00:53:48.526Z Vendors: n/a Products: Google Chrome prior to 55.0.2883.75 for Linux, Windows and Mac Problem Types: insufficient policy enforcement Description: Blink in Google Chrome prior to 55.0.2883.75 for Linux, Windows and Mac, incorrectly handles deferred page loads, which allowed a remote attacker to inject arbitrary scripts or HTML (UXSS) via a crafted HTML page. Additional Analyst Notes: - CVE Program Container: References: - http://rhn.redhat.com/errata/RHSA-2016-2919.html - https://crbug.com/646610 - http://www.securityfocus.com/bid/94633 - https://chromereleases.googleblog.com/2016/12/s
ml - https://crbug.com/646610 - http://www.securityfocus.com/bid/94633 - https://chromereleases.googleblog.com/2016/12/stable-channel-update-for-desktop.html - https://security.gentoo.org/glsa/201612-11
CVE ID: CVE-2016-5206 State: PUBLISHED Published: 2017-01-19T05:43:00 Last Updated: 2024-08-06T00:53:48.811Z Vendors: n/a Products: Google Chrome prior to 55.0.2883.75 for Mac, Windows and Linux, and 55.0.2883.84 for Android Problem Types: insufficient policy enforcement Description: The PDF plugin in Google Chrome prior to 55.0.2883.75 for Mac, Windows and Linux, and 55.0.2883.84 for Android incorrectly followed redirects, which allowed a remote attacker to bypass the Same Origin Policy via a crafted HTML page. Additional Analyst Notes: - CVE Program Container: References: - http://rhn.redhat.com/errata/RHSA-2016-2919.html - http://www.securityfocus.com/bid/94633 - https://crbug.com/653749
- http://rhn.redhat.com/errata/RHSA-2016-2919.html - http://www.securityfocus.com/bid/94633 - https://crbug.com/653749 - https://chromereleases.googleblog.com/2016/12/stable-channel-update-for-desktop.html - https://security.gentoo.org/glsa/201612-11
CVE ID: CVE-2016-5207 State: PUBLISHED Published: 2017-01-19T05:43:00 Last Updated: 2024-08-06T00:53:48.623Z Vendors: n/a Products: Google Chrome prior to 55.0.2883.75 for Mac, Windows and Linux, and 55.0.2883.84 for Android Problem Types: object corruption Description: In Blink in Google Chrome prior to 55.0.2883.75 for Mac, Windows and Linux, and 55.0.2883.84 for Android, corruption of the DOM tree could occur during the removal of a full screen element, which allowed a remote attacker to achieve arbitrary code execution via a crafted HTML page. Additional Analyst Notes: - CVE Program Container: References: - http://rhn.redhat.com/errata/RHSA-2016-2919.html - http://www.securityfocus.com/b
- CVE Program Container: References: - http://rhn.redhat.com/errata/RHSA-2016-2919.html - http://www.securityfocus.com/bid/94633 - https://crbug.com/655904 - https://chromereleases.googleblog.com/2016/12/stable-channel-update-for-desktop.html - https://security.gentoo.org/glsa/201612-11
CVE ID: CVE-2016-5208 State: PUBLISHED Published: 2017-01-19T05:43:00 Last Updated: 2024-08-06T00:53:48.690Z Vendors: n/a Products: Google Chrome prior to 55.0.2883.75 for Linux and Windows, and 55.0.2883.84 for Android Problem Types: object corruption Description: Blink in Google Chrome prior to 55.0.2883.75 for Linux and Windows, and 55.0.2883.84 for Android allowed possible corruption of the DOM tree during synchronous event handling, which allowed a remote attacker to inject arbitrary scripts or HTML (UXSS) via a crafted HTML page. Additional Analyst Notes: - CVE Program Container: References: - http://rhn.redhat.com/errata/RHSA-2016-2919.html - http://www.securityfocus.com/bid/94633 - h
m Container: References: - http://rhn.redhat.com/errata/RHSA-2016-2919.html - http://www.securityfocus.com/bid/94633 - https://chromereleases.googleblog.com/2016/12/stable-channel-update-for-desktop.html - https://crbug.com/658535 - https://security.gentoo.org/glsa/201612-11
CVE ID: CVE-2016-5209 State: PUBLISHED Published: 2017-01-19T05:43:00 Last Updated: 2024-08-06T00:53:48.690Z Vendors: n/a Products: Google Chrome prior to 55.0.2883.75 for Mac, Windows and Linux, and 55.0.2883.84 for Android Problem Types: bad cast Description: Bad casting in bitmap manipulation in Blink in Google Chrome prior to 55.0.2883.75 for Mac, Windows and Linux, and 55.0.2883.84 for Android allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. Additional Analyst Notes: - CVE Program Container: References: - http://rhn.redhat.com/errata/RHSA-2016-2919.html - http://www.securityfocus.com/bid/94633 - https://crbug.com/664139 - https://chromereleases.g
rrata/RHSA-2016-2919.html - http://www.securityfocus.com/bid/94633 - https://crbug.com/664139 - https://chromereleases.googleblog.com/2016/12/stable-channel-update-for-desktop.html - https://security.gentoo.org/glsa/201612-11
CVE ID: CVE-2016-5210 State: PUBLISHED Published: 2017-01-19T05:43:00 Last Updated: 2024-08-06T00:53:48.613Z Vendors: n/a Products: Google Chrome prior to 55.0.2883.75 for Mac, Windows and Linux, and 55.0.2883.84 for Android Problem Types: heap buffer overflow Description: Heap buffer overflow during TIFF image parsing in PDFium in Google Chrome prior to 55.0.2883.75 for Mac, Windows and Linux, and 55.0.2883.84 for Android allowed a remote attacker to potentially exploit heap corruption via a crafted PDF file. Additional Analyst Notes: - CVE Program Container: References: - http://rhn.redhat.com/errata/RHSA-2016-2919.html - http://www.securityfocus.com/bid/94633 - https://crbug.com/654183 -
http://rhn.redhat.com/errata/RHSA-2016-2919.html - http://www.securityfocus.com/bid/94633 - https://crbug.com/654183 - https://chromereleases.googleblog.com/2016/12/stable-channel-update-for-desktop.html - https://security.gentoo.org/glsa/201612-11
CVE ID: CVE-2016-5211 State: PUBLISHED Published: 2017-01-19T05:43:00 Last Updated: 2024-08-06T00:53:48.517Z Vendors: n/a Products: Google Chrome prior to 55.0.2883.75 for Mac, Windows and Linux, and 55.0.2883.84 for Android Problem Types: use after free Description: A use after free in PDFium in Google Chrome prior to 55.0.2883.75 for Mac, Windows and Linux, and 55.0.2883.84 for Android allowed a remote attacker to potentially exploit heap corruption via a crafted PDF file. Additional Analyst Notes: - CVE Program Container: References: - http://rhn.redhat.com/errata/RHSA-2016-2919.html - http://www.securityfocus.com/bid/94633 - https://chromereleases.googleblog.com/2016/12/stable-channel-up
016-2919.html - http://www.securityfocus.com/bid/94633 - https://chromereleases.googleblog.com/2016/12/stable-channel-update-for-desktop.html - https://crbug.com/649229 - https://security.gentoo.org/glsa/201612-11
CVE ID: CVE-2016-5212 State: PUBLISHED Published: 2017-01-19T05:43:00 Last Updated: 2024-08-06T00:53:48.693Z Vendors: n/a Products: Google Chrome prior to 55.0.2883.75 for Mac, Windows and Linux, and 55.0.2883.84 for Android Problem Types: insufficient validation of untrusted input Description: Google Chrome prior to 55.0.2883.75 for Mac, Windows and Linux, and 55.0.2883.84 for Android insufficiently sanitized DevTools URLs, which allowed a remote attacker to read local files via a crafted HTML page. Additional Analyst Notes: - CVE Program Container: References: - http://rhn.redhat.com/errata/RHSA-2016-2919.html - https://crbug.com/653134 - http://www.securityfocus.com/bid/94633 - https://ch
n.redhat.com/errata/RHSA-2016-2919.html - https://crbug.com/653134 - http://www.securityfocus.com/bid/94633 - https://chromereleases.googleblog.com/2016/12/stable-channel-update-for-desktop.html - https://security.gentoo.org/glsa/201612-11
CVE ID: CVE-2016-5213 State: PUBLISHED Published: 2017-01-19T05:43:00 Last Updated: 2024-08-06T00:53:48.695Z Vendors: n/a Products: Google Chrome prior to 55.0.2883.75 for Mac, Windows and Linux, and 55.0.2883.84 for Android Problem Types: use after free Description: A use after free in V8 in Google Chrome prior to 55.0.2883.75 for Mac, Windows and Linux, and 55.0.2883.84 for Android allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. Additional Analyst Notes: - CVE Program Container: References: - http://rhn.redhat.com/errata/RHSA-2016-2919.html - http://www.securityfocus.com/bid/94633 - https://crbug.com/652548 - https://chromereleases.googleblog.com/2
-2919.html - http://www.securityfocus.com/bid/94633 - https://crbug.com/652548 - https://chromereleases.googleblog.com/2016/12/stable-channel-update-for-desktop.html - https://security.gentoo.org/glsa/201612-11
CVE ID: CVE-2016-5214 State: PUBLISHED Published: 2017-01-19T05:43:00 Last Updated: 2024-08-06T00:53:48.685Z Vendors: n/a Products: Google Chrome prior to 55.0.2883.75 for Windows Problem Types: insufficient policy enforcement Description: Google Chrome prior to 55.0.2883.75 for Windows mishandled downloaded files, which allowed a remote attacker to prevent the downloaded file from receiving the Mark of the Web via a crafted HTML page. Additional Analyst Notes: - CVE Program Container: References: - http://rhn.redhat.com/errata/RHSA-2016-2919.html - http://www.securityfocus.com/bid/94633 - https://chromereleases.googleblog.com/2016/12/stable-channel-update-for-desktop.html - https://security
.com/bid/94633 - https://chromereleases.googleblog.com/2016/12/stable-channel-update-for-desktop.html - https://security.gentoo.org/glsa/201612-11 - https://crbug.com/601538
CVE ID: CVE-2016-5215 State: PUBLISHED Published: 2017-01-19T05:43:00 Last Updated: 2024-08-06T00:53:48.696Z Vendors: n/a Products: Google Chrome prior to 55.0.2883.75 for Mac, Windows and Linux, and 55.0.2883.84 for Android Problem Types: use after free Description: A use after free in webaudio in Google Chrome prior to 55.0.2883.75 for Mac, Windows and Linux, and 55.0.2883.84 for Android allowed a remote attacker to perform an out of bounds memory read via a crafted HTML page. Additional Analyst Notes: - CVE Program Container: References: - http://rhn.redhat.com/errata/RHSA-2016-2919.html - http://www.securityfocus.com/bid/94633 - https://chromereleases.googleblog.com/2016/12/stable-channe
SA-2016-2919.html - http://www.securityfocus.com/bid/94633 - https://chromereleases.googleblog.com/2016/12/stable-channel-update-for-desktop.html - https://crbug.com/619463 - https://security.gentoo.org/glsa/201612-11
CVE ID: CVE-2016-5216 State: PUBLISHED Published: 2017-01-19T05:43:00 Last Updated: 2024-08-06T00:53:48.575Z Vendors: n/a Products: Google Chrome prior to 55.0.2883.75 for Mac, Windows and Linux, and 55.0.2883.84 for Android Problem Types: use after free Description: A use after free in PDFium in Google Chrome prior to 55.0.2883.75 for Mac, Windows and Linux, and 55.0.2883.84 for Android allowed a remote attacker to perform an out of bounds memory read via a crafted PDF file. Additional Analyst Notes: - CVE Program Container: References: - http://rhn.redhat.com/errata/RHSA-2016-2919.html - http://www.securityfocus.com/bid/94633 - https://crbug.com/653090 - https://chromereleases.googleblog.c
2016-2919.html - http://www.securityfocus.com/bid/94633 - https://crbug.com/653090 - https://chromereleases.googleblog.com/2016/12/stable-channel-update-for-desktop.html
CVE ID: CVE-2016-5217 State: PUBLISHED Published: 2017-01-19T05:43:00 Last Updated: 2024-08-06T00:53:48.700Z Vendors: n/a Products: Google Chrome prior to 55.0.2883.75 for Mac, Windows and Linux, and 55.0.2883.84 for Android Problem Types: insufficient policy enforcement Description: The extensions API in Google Chrome prior to 55.0.2883.75 for Mac, Windows and Linux, and 55.0.2883.84 for Android incorrectly permitted access to privileged plugins, which allowed a remote attacker to bypass site isolation via a crafted HTML page. Additional Analyst Notes: - CVE Program Container: References: - http://rhn.redhat.com/errata/RHSA-2016-2919.html - http://www.securityfocus.com/bid/94633 - https://c
ner: References: - http://rhn.redhat.com/errata/RHSA-2016-2919.html - http://www.securityfocus.com/bid/94633 - https://crbug.com/654280 - https://chromereleases.googleblog.com/2016/12/stable-channel-update-for-desktop.html - https://security.gentoo.org/glsa/201612-11
CVE ID: CVE-2016-5218 State: PUBLISHED Published: 2017-01-19T05:43:00 Last Updated: 2024-08-06T00:53:48.912Z Vendors: n/a Products: Google Chrome prior to 55.0.2883.75 for Mac, Windows and Linux, and 55.0.2883.84 for Android Problem Types: insufficient policy enforcement Description: The extensions API in Google Chrome prior to 55.0.2883.75 for Mac, Windows and Linux, and 55.0.2883.84 for Android incorrectly handled navigation within PDFs, which allowed a remote attacker to temporarily spoof the contents of the Omnibox (URL bar) via a crafted HTML page containing PDF data. Additional Analyst Notes: - CVE Program Container: References: - http://rhn.redhat.com/errata/RHSA-2016-2919.html - http
Additional Analyst Notes: - CVE Program Container: References: - http://rhn.redhat.com/errata/RHSA-2016-2919.html - https://crbug.com/660498 - http://www.securityfocus.com/bid/94633 - https://chromereleases.googleblog.com/2016/12/stable-channel-update-for-desktop.html - https://security.gentoo.org/glsa/201612-11
CVE ID: CVE-2016-5219 State: PUBLISHED Published: 2017-01-19T05:43:00 Last Updated: 2024-08-06T00:53:48.594Z Vendors: n/a Products: Google Chrome prior to 55.0.2883.75 for Mac, Windows and Linux, and 55.0.2883.84 for Android Problem Types: use after free Description: A heap use after free in V8 in Google Chrome prior to 55.0.2883.75 for Mac, Windows and Linux, and 55.0.2883.84 for Android allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. Additional Analyst Notes: - CVE Program Container: References: - https://crbug.com/657568 - http://rhn.redhat.com/errata/RHSA-2016-2919.html - http://www.securityfocus.com/bid/94633 - https://chromereleases.googleblog.
/rhn.redhat.com/errata/RHSA-2016-2919.html - http://www.securityfocus.com/bid/94633 - https://chromereleases.googleblog.com/2016/12/stable-channel-update-for-desktop.html - https://security.gentoo.org/glsa/201612-11
CVE ID: CVE-2016-5220 State: PUBLISHED Published: 2017-01-19T05:43:00 Last Updated: 2024-08-06T00:53:48.859Z Vendors: n/a Products: Google Chrome prior to 55.0.2883.75 for Mac, Windows and Linux, and 55.0.2883.84 for Android Problem Types: insufficient policy enforcement Description: PDFium in Google Chrome prior to 55.0.2883.75 for Mac, Windows and Linux, and 55.0.2883.84 for Android incorrectly handled navigation within PDFs, which allowed a remote attacker to read local files via a crafted PDF file. Additional Analyst Notes: - CVE Program Container: References: - http://rhn.redhat.com/errata/RHSA-2016-2919.html - http://www.securityfocus.com/bid/94633 - https://chromereleases.googleblog.c
rhn.redhat.com/errata/RHSA-2016-2919.html - http://www.securityfocus.com/bid/94633 - https://chromereleases.googleblog.com/2016/12/stable-channel-update-for-desktop.html - https://crbug.com/654279 - https://security.gentoo.org/glsa/201612-11
CVE ID: CVE-2016-5221 State: PUBLISHED Published: 2017-01-19T05:43:00 Last Updated: 2024-08-06T00:53:48.613Z Vendors: n/a Products: Google Chrome prior to 55.0.2883.75 for Mac, Windows and Linux, and 55.0.2883.84 for Android Problem Types: type confusion Description: Type confusion in libGLESv2 in ANGLE in Google Chrome prior to 55.0.2883.75 for Mac, Windows and Linux, and 55.0.2883.84 for Android possibly allowed a remote attacker to bypass buffer validation via a crafted HTML page. Additional Analyst Notes: - CVE Program Container: References: - http://rhn.redhat.com/errata/RHSA-2016-2919.html - http://www.securityfocus.com/bid/94633 - https://crbug.com/660854 - https://chromereleases.goog