deardaniel/secdata-raw huggingface dataset:
CVE: CVE-2016-4381
Published: 2016-09-08
Description: HPE XP7 Command View Advanced Edition (CVAE) Suite 6.x through 8.x before 8.4.1-02, when Replication Manager (RepMgr) and Device Manager (DevMgr) are enabled, allows local users to bypass intended access restrictions via unspecified vectors.
CVSS Score: 4.5 (MEDIUM)
CWE: CWE-264
References: http://www.securityfocus.com/bid/92733; https://h20566.www2.hpe.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c05257711; http://www.securityfocus.com/bid/92733
CVE: CVE-2016-7175
Published: 2016-09-09
Description: epan/dissectors/packet-qnet6.c in the QNX6 QNET dissector in Wireshark 2.x before 2.0.6 mishandles MAC address data, which allows remote attackers to cause a denial of service (out-of-bounds read and application crash) via a crafted packet.
CVSS Score: 5.9 (MEDIUM)
CWE: CWE-125
References: http://www.securitytracker.com/id/1036760; https://bugs.wireshark.org/bugzilla/show_bug.cgi?id=11850; https://code.wireshark.org/review/16965
CVE: CVE-2016-7176
Published: 2016-09-09
Description: epan/dissectors/packet-h225.c in the H.225 dissector in Wireshark 2.x before 2.0.6 calls snprintf with one of its input buffers as the output buffer, which allows remote attackers to cause a denial of service (copy overlap and application crash) via a crafted packet.
CVSS Score: 5.9 (MEDIUM)
CWE: CWE-119
References: http://www.debian.org/security/2016/dsa-3671; http://www.securitytracker.com/id/1036760; https://bugs.wireshark.org/bugzilla/show_bug.cgi?id=12700
CVE: CVE-2016-7177
Published: 2016-09-09
Description: epan/dissectors/packet-catapult-dct2000.c in the Catapult DCT2000 dissector in Wireshark 2.x before 2.0.6 does not restrict the number of channels, which allows remote attackers to cause a denial of service (buffer over-read and application crash) via a crafted packet.
CVSS Score: 5.9 (MEDIUM)
CWE: CWE-119
References: http://www.debian.org/security/2016/dsa-3671; http://www.securitytracker.com/id/1036760; https://bugs.wireshark.org/bugzilla/show_bug.cgi?id=12750
CVE: CVE-2016-7178
Published: 2016-09-09
Description: epan/dissectors/packet-umts_fp.c in the UMTS FP dissector in Wireshark 2.x before 2.0.6 does not ensure that memory is allocated for certain data structures, which allows remote attackers to cause a denial of service (invalid write access and application crash) via a crafted packet.
CVSS Score: 5.9 (MEDIUM)
CWE: CWE-787
References: http://www.debian.org/security/2016/dsa-3671; http://www.securitytracker.com/id/1036760; https://bugs.wireshark.org/bugzilla/show_bug.cgi?id=12751
CVE: CVE-2016-7179
Published: 2016-09-09
Description: Stack-based buffer overflow in epan/dissectors/packet-catapult-dct2000.c in the Catapult DCT2000 dissector in Wireshark 2.x before 2.0.6 allows remote attackers to cause a denial of service (application crash) via a crafted packet.
CVSS Score: 5.9 (MEDIUM)
CWE: CWE-119
References: http://www.debian.org/security/2016/dsa-3671; http://www.securitytracker.com/id/1036760; https://bugs.wireshark.org/bugzilla/show_bug.cgi?id=12752
CVE: CVE-2016-7180
Published: 2016-09-09
Description: epan/dissectors/packet-ipmi-trace.c in the IPMI trace dissector in Wireshark 2.x before 2.0.6 does not properly consider whether a string is constant, which allows remote attackers to cause a denial of service (use-after-free and application crash) via a crafted packet.
CVSS Score: 5.9 (MEDIUM)
CWE: CWE-416
References: http://www.debian.org/security/2016/dsa-3671; http://www.securitytracker.com/id/1036760; https://bugs.wireshark.org/bugzilla/show_bug.cgi?id=12782
CVE: CVE-2016-1263
Published: 2016-09-09
Description: Juniper Junos OS before 12.1X46-D45, 12.1X46-D50, 12.1X47 before 12.1X47-D35, 12.3X48 before 12.3X48-D30, 13.3 before 13.3R9-S1, 14.1 before 14.1R7, 14.2 before 14.2R6, 15.1 before 15.1F2-S5, 15.1F4 before 15.1F4-S2, 15.1R before 15.1R2-S3, 15.1 before 15.1R3, and 15.1X49 before 15.1X49-D40 allow remote attackers to cause a denial of service (kernel crash) via a crafted UDP packet destined to the interface IP address of a 64-bit OS device.
CVSS Score: 7.5 (HIGH)
CWE: CWE-20
References: http://kb.juniper.net/InfoCenter/index?page=content&id=JSA10758; http://www.securitytracker.com/id/1036304; http://kb.juniper.net/InfoCenter/index?page=content&id=JSA10758
CVE: CVE-2016-1275
Published: 2016-09-09
Description: Juniper Junos OS before 13.3R9, 14.1R6 before 14.1R6-S1, and 14.1 before 14.1R7, when configured with VPLS routing-instances, allows remote attackers to obtain sensitive mbuf information by injecting a flood of Ethernet frames with IPv6 MAC addresses directly into a connected interface.
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-399
References: http://kb.juniper.net/InfoCenter/index?page=content&id=JSA10750; http://www.securityfocus.com/bid/91758; http://www.securitytracker.com/id/1036301
CVE: CVE-2016-1277
Published: 2016-09-09
Description: Juniper Junos OS before 12.1X46-D50, 12.1X47 before 12.1X47-D40, 12.3X48 before 12.3X48-D30, 13.3 before 13.3R9, 14.1 before 14.1R8, 14.1X53 before 14.1X53-D40, 14.2 before 14.2R6, 15.1 before 15.1F6 or 15.1R3, and 15.1X49 before 15.1X49-D40, when configured with a GRE or IPIP tunnel, allow remote attackers to cause a denial of service (kernel panic) via a crafted ICMP packet.
CVSS Score: 5.9 (MEDIUM)
CWE: CWE-20
References: http://kb.juniper.net/InfoCenter/index?page=content&id=JSA10752; http://www.securityfocus.com/bid/91755; http://www.securitytracker.com/id/1036306
CVE: CVE-2016-1279
Published: 2016-09-09
Description: J-Web in Juniper Junos OS before 12.1X46-D45, 12.1X46-D50, 12.1X47 before 12.1X47-D35, 12.3 before 12.3R12, 12.3X48 before 12.3X48-D25, 13.3 before 13.3R10, 13.3R9 before 13.3R9-S1, 14.1 before 14.1R7, 14.1X53 before 14.1X53-D35, 14.2 before 14.2R6, 15.1 before 15.1A2 or 15.1F4, 15.1X49 before 15.1X49-D30, and 15.1R before 15.1R3 might allow remote attackers to obtain sensitive information and consequently gain administrative privileges via unspecified vectors.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-200, CWE-287
References: http://kb.juniper.net/InfoCenter/index?page=content&id=JSA10754; http://www.securityfocus.com/bid/91759; http://www.securitytracker.com/id/1036302
CVE: CVE-2016-1280
Published: 2016-09-09
Description: PKId in Juniper Junos OS before 12.1X44-D52, 12.1X46 before 12.1X46-D37, 12.1X47 before 12.1X47-D30, 12.3 before 12.3R12, 12.3X48 before 12.3X48-D20, 13.3 before 13.3R10, 14.1 before 14.1R8, 14.1X53 before 14.1X53-D40, 14.2 before 14.2R7, 15.1 before 15.1R4, 15.1X49 before 15.1X49-D20, 15.1X53 before 15.1X53-D60, and 16.1 before 16.1R1 allow remote attackers to bypass an intended certificate validation mechanism via a self-signed certificate with an Issuer name that matches a valid CA certificate enrolled in Junos.
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-297
References: http://kb.juniper.net/InfoCenter/index?page=content&id=JSA10755; http://www.securityfocus.com/bid/91761; http://www.securitytracker.com/id/1036303
CVE: CVE-2016-4573
Published: 2016-09-09
Description: Fortinet FortiSwitch FSW-108D-POE, FSW-124D, FSW-124D-POE, FSW-224D-POE, FSW-224D-FPOE, FSW-248D-POE, FSW-248D-FPOE, FSW-424D, FSW-424D-POE, FSW-424D-FPOE, FSW-448D, FSW-448D-POE, FSW-448D-FPOE, FSW-524D, FSW-524D-FPOE, FSW-548D, FSW-548D-FPOE, FSW-1024D, FSW-1048D, FSW-3032D, and FSW-R-112D-POE models, when in FortiLink managed mode and upgraded to 3.4.1, might allow remote attackers to bypass authentication and gain administrative access via an empty password for the rest_admin account.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-264
References: http://fortiguard.com/advisory/fortiswitch-rest-admin-account-exposed-under-specific-conditions; http://www.securityfocus.com/bid/92450; https://www.themissinglink.com.au/security/advisories/cve-2016-4573
CVE: CVE-2016-6211
Published: 2016-09-09
Description: The User module in Drupal 7.x before 7.44 allows remote authenticated users to gain privileges via vectors involving contributed or custom code that triggers a rebuild of the user profile form.
CVSS Score: 8.8 (HIGH)
CWE: CWE-264
References: http://www.debian.org/security/2016/dsa-3604; http://www.openwall.com/lists/oss-security/2016/07/13/4; http://www.openwall.com/lists/oss-security/2016/07/13/7
CVE: CVE-2016-6212
Published: 2016-09-09
Description: The Views module 7.x-3.x before 7.x-3.14 in Drupal 7.x and the Views module in Drupal 8.x before 8.1.3 might allow remote authenticated users to bypass intended access restrictions and obtain sensitive Statistics information via unspecified vectors.
CVSS Score: 5.3 (MEDIUM)
CWE: CWE-200
References: http://www.openwall.com/lists/oss-security/2016/07/13/4; http://www.openwall.com/lists/oss-security/2016/07/13/7; http://www.securityfocus.com/bid/91230
CVE: CVE-2016-5147
Published: 2016-09-11
Description: Blink, as used in Google Chrome before 53.0.2785.89 on Windows and OS X and before 53.0.2785.92 on Linux, mishandles deferred page loads, which allows remote attackers to inject arbitrary web script or HTML via a crafted web site, aka "Universal XSS (UXSS)."
CVSS Score: 6.1 (MEDIUM)
CWE: CWE-79
References: http://lists.opensuse.org/opensuse-security-announce/2016-09/msg00003.html; http://lists.opensuse.org/opensuse-security-announce/2016-09/msg00004.html; http://lists.opensuse.org/opensuse-security-announce/2016-09/msg00008.html
CVE: CVE-2016-5148
Published: 2016-09-11
Description: Cross-site scripting (XSS) vulnerability in Blink, as used in Google Chrome before 53.0.2785.89 on Windows and OS X and before 53.0.2785.92 on Linux, allows remote attackers to inject arbitrary web script or HTML via vectors related to widget updates, aka "Universal XSS (UXSS)."
CVSS Score: 6.1 (MEDIUM)
CWE: CWE-79
References: http://lists.opensuse.org/opensuse-security-announce/2016-09/msg00003.html; http://lists.opensuse.org/opensuse-security-announce/2016-09/msg00004.html; http://lists.opensuse.org/opensuse-security-announce/2016-09/msg00008.html
CVE: CVE-2016-5149
Published: 2016-09-11
Description: The extensions subsystem in Google Chrome before 53.0.2785.89 on Windows and OS X and before 53.0.2785.92 on Linux relies on an IFRAME source URL to identify an associated extension, which allows remote attackers to conduct extension-bindings injection attacks by leveraging script access to a resource that initially has the about:blank URL.
CVSS Score: 8.8 (HIGH)
CWE: CWE-94
References: http://lists.opensuse.org/opensuse-security-announce/2016-09/msg00003.html; http://lists.opensuse.org/opensuse-security-announce/2016-09/msg00004.html; http://lists.opensuse.org/opensuse-security-announce/2016-09/msg00008.html
CVE: CVE-2016-5150
Published: 2016-09-11
Description: WebKit/Source/bindings/modules/v8/V8BindingForModules.cpp in Blink, as used in Google Chrome before 53.0.2785.89 on Windows and OS X and before 53.0.2785.92 on Linux, has an Indexed Database (aka IndexedDB) API implementation that does not properly restrict key-path evaluation, which allows remote attackers to cause a denial of service (use-after-free) or possibly have unspecified other impact via crafted JavaScript code that leverages certain side effects.
CVSS Score: 8.8 (HIGH)
CWE: CWE-416
References: http://lists.opensuse.org/opensuse-security-announce/2016-09/msg00003.html; http://lists.opensuse.org/opensuse-security-announce/2016-09/msg00004.html; http://lists.opensuse.org/opensuse-security-announce/2016-09/msg00008.html
CVE: CVE-2016-5151
Published: 2016-09-11
Description: PDFium in Google Chrome before 53.0.2785.89 on Windows and OS X and before 53.0.2785.92 on Linux mishandles timers, which allows remote attackers to cause a denial of service (use-after-free) or possibly have unspecified other impact via a crafted PDF document, related to fpdfsdk/javascript/JS_Object.cpp and fpdfsdk/javascript/app.cpp.
CVSS Score: 8.8 (HIGH)
CWE: CWE-416
References: http://lists.opensuse.org/opensuse-security-announce/2016-09/msg00003.html; http://lists.opensuse.org/opensuse-security-announce/2016-09/msg00004.html; http://lists.opensuse.org/opensuse-security-announce/2016-09/msg00008.html
CVE: CVE-2016-5152
Published: 2016-09-11
Description: Integer overflow in the opj_tcd_get_decoded_tile_size function in tcd.c in OpenJPEG, as used in PDFium in Google Chrome before 53.0.2785.89 on Windows and OS X and before 53.0.2785.92 on Linux, allows remote attackers to cause a denial of service (heap-based buffer overflow) or possibly have unspecified other impact via crafted JPEG 2000 data.
CVSS Score: 8.8 (HIGH)
CWE: CWE-190
References: http://lists.opensuse.org/opensuse-security-announce/2016-09/msg00003.html; http://lists.opensuse.org/opensuse-security-announce/2016-09/msg00004.html; http://lists.opensuse.org/opensuse-security-announce/2016-09/msg00008.html
CVE: CVE-2016-5153
Published: 2016-09-11
Description: The Web Animations implementation in Blink, as used in Google Chrome before 53.0.2785.89 on Windows and OS X and before 53.0.2785.92 on Linux, improperly relies on list iteration, which allows remote attackers to cause a denial of service (use-after-destruction) or possibly have unspecified other impact via a crafted web site.
CVSS Score: 8.8 (HIGH)
CWE: CWE-19
References: http://lists.opensuse.org/opensuse-security-announce/2016-09/msg00003.html; http://lists.opensuse.org/opensuse-security-announce/2016-09/msg00004.html; http://lists.opensuse.org/opensuse-security-announce/2016-09/msg00008.html
CVE: CVE-2016-5154
Published: 2016-09-11
Description: Multiple heap-based buffer overflows in PDFium, as used in Google Chrome before 53.0.2785.89 on Windows and OS X and before 53.0.2785.92 on Linux, allow remote attackers to cause a denial of service or possibly have unspecified other impact via a crafted JBig2 image.
CVSS Score: 8.8 (HIGH)
CWE: CWE-119
References: http://lists.opensuse.org/opensuse-security-announce/2016-09/msg00003.html; http://lists.opensuse.org/opensuse-security-announce/2016-09/msg00004.html; http://lists.opensuse.org/opensuse-security-announce/2016-09/msg00008.html
CVE: CVE-2016-5155
Published: 2016-09-11
Description: Google Chrome before 53.0.2785.89 on Windows and OS X and before 53.0.2785.92 on Linux does not properly validate access to the initial document, which allows remote attackers to spoof the address bar via a crafted web site.
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-254
References: http://lists.opensuse.org/opensuse-security-announce/2016-09/msg00003.html; http://lists.opensuse.org/opensuse-security-announce/2016-09/msg00004.html; http://lists.opensuse.org/opensuse-security-announce/2016-09/msg00008.html
CVE: CVE-2016-5156
Published: 2016-09-11
Description: extensions/renderer/event_bindings.cc in the event bindings in Google Chrome before 53.0.2785.89 on Windows and OS X and before 53.0.2785.92 on Linux attempts to process filtered events after failure to add an event matcher, which allows remote attackers to cause a denial of service (use-after-free) or possibly have unspecified other impact via unknown vectors.
CVSS Score: 8.8 (HIGH)
CWE: CWE-416
References: http://lists.opensuse.org/opensuse-security-announce/2016-09/msg00003.html; http://lists.opensuse.org/opensuse-security-announce/2016-09/msg00004.html; http://lists.opensuse.org/opensuse-security-announce/2016-09/msg00008.html
CVE: CVE-2016-5157
Published: 2016-09-11
Description: Heap-based buffer overflow in the opj_dwt_interleave_v function in dwt.c in OpenJPEG, as used in PDFium in Google Chrome before 53.0.2785.89 on Windows and OS X and before 53.0.2785.92 on Linux, allows remote attackers to execute arbitrary code via crafted coordinate values in JPEG 2000 data.
CVSS Score: 8.8 (HIGH)
CWE: CWE-119
References: http://lists.opensuse.org/opensuse-security-announce/2016-09/msg00003.html; http://lists.opensuse.org/opensuse-security-announce/2016-09/msg00004.html; http://lists.opensuse.org/opensuse-security-announce/2016-09/msg00008.html
CVE: CVE-2016-5158
Published: 2016-09-11
Description: Multiple integer overflows in the opj_tcd_init_tile function in tcd.c in OpenJPEG, as used in PDFium in Google Chrome before 53.0.2785.89 on Windows and OS X and before 53.0.2785.92 on Linux, allow remote attackers to cause a denial of service (heap-based buffer overflow) or possibly have unspecified other impact via crafted JPEG 2000 data.
CVSS Score: 8.8 (HIGH)
CWE: CWE-190
References: http://lists.opensuse.org/opensuse-security-announce/2016-09/msg00003.html; http://lists.opensuse.org/opensuse-security-announce/2016-09/msg00004.html; http://lists.opensuse.org/opensuse-security-announce/2016-09/msg00008.html
CVE: CVE-2016-5159
Published: 2016-09-11
Description: Multiple integer overflows in OpenJPEG, as used in PDFium in Google Chrome before 53.0.2785.89 on Windows and OS X and before 53.0.2785.92 on Linux, allow remote attackers to cause a denial of service (heap-based buffer overflow) or possibly have unspecified other impact via crafted JPEG 2000 data that is mishandled during opj_aligned_malloc calls in dwt.c and t1.c.
CVSS Score: 8.8 (HIGH)
CWE: CWE-190
References: http://lists.opensuse.org/opensuse-security-announce/2016-09/msg00003.html; http://lists.opensuse.org/opensuse-security-announce/2016-09/msg00004.html; http://lists.opensuse.org/opensuse-security-announce/2016-09/msg00008.html
CVE: CVE-2016-5160
Published: 2016-09-11
Description: The AllowCrossRendererResourceLoad function in extensions/browser/url_request_util.cc in Google Chrome before 53.0.2785.89 on Windows and OS X and before 53.0.2785.92 on Linux does not properly use an extension's manifest.json web_accessible_resources field for restrictions on IFRAME elements, which makes it easier for remote attackers to conduct clickjacking attacks, and trick users into changing extension settings, via a crafted web site, a different vulnerability than CVE-2016-5162.
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-254
References: http://lists.opensuse.org/opensuse-security-announce/2016-09/msg00003.html; http://lists.opensuse.org/opensuse-security-announce/2016-09/msg00004.html; http://lists.opensuse.org/opensuse-security-announce/2016-09/msg00008.html
CVE: CVE-2016-5161
Published: 2016-09-11
Description: The EditingStyle::mergeStyle function in WebKit/Source/core/editing/EditingStyle.cpp in Blink, as used in Google Chrome before 53.0.2785.89 on Windows and OS X and before 53.0.2785.92 on Linux, mishandles custom properties, which allows remote attackers to cause a denial of service or possibly have unspecified other impact via a crafted web site that leverages "type confusion" in the StylePropertySerializer class.
CVSS Score: 8.8 (HIGH)
CWE: CWE-704
References: http://lists.opensuse.org/opensuse-security-announce/2016-09/msg00003.html; http://lists.opensuse.org/opensuse-security-announce/2016-09/msg00004.html; http://lists.opensuse.org/opensuse-security-announce/2016-09/msg00008.html
CVE: CVE-2016-5162
Published: 2016-09-11
Description: The AllowCrossRendererResourceLoad function in extensions/browser/url_request_util.cc in Google Chrome before 53.0.2785.89 on Windows and OS X and before 53.0.2785.92 on Linux does not properly use an extension's manifest.json web_accessible_resources field for restrictions on IFRAME elements, which makes it easier for remote attackers to conduct clickjacking attacks, and trick users into changing extension settings, via a crafted web site, a different vulnerability than CVE-2016-5160.
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-254
References: http://lists.opensuse.org/opensuse-security-announce/2016-09/msg00003.html; http://lists.opensuse.org/opensuse-security-announce/2016-09/msg00004.html; http://lists.opensuse.org/opensuse-security-announce/2016-09/msg00008.html
CVE: CVE-2016-5163
Published: 2016-09-11
Description: The bidirectional-text implementation in Google Chrome before 53.0.2785.89 on Windows and OS X and before 53.0.2785.92 on Linux does not ensure left-to-right (LTR) rendering of URLs, which allows remote attackers to spoof the address bar via crafted right-to-left (RTL) Unicode text, related to omnibox/SuggestionView.java and omnibox/UrlBar.java in Chrome for Android.
CVSS Score: 4.3 (MEDIUM)
CWE: CWE-254
References: http://lists.opensuse.org/opensuse-security-announce/2016-09/msg00003.html; http://lists.opensuse.org/opensuse-security-announce/2016-09/msg00004.html; http://lists.opensuse.org/opensuse-security-announce/2016-09/msg00008.html
CVE: CVE-2016-5164
Published: 2016-09-11
Description: Cross-site scripting (XSS) vulnerability in WebKit/Source/platform/v8_inspector/V8Debugger.cpp in Blink, as used in Google Chrome before 53.0.2785.89 on Windows and OS X and before 53.0.2785.92 on Linux, allows remote attackers to inject arbitrary web script or HTML into the Developer Tools (aka DevTools) subsystem via a crafted web site, aka "Universal XSS (UXSS)."
CVSS Score: 6.1 (MEDIUM)
CWE: CWE-79
References: http://lists.opensuse.org/opensuse-security-announce/2016-09/msg00003.html; http://lists.opensuse.org/opensuse-security-announce/2016-09/msg00004.html; http://lists.opensuse.org/opensuse-security-announce/2016-09/msg00008.html
CVE: CVE-2016-5165
Published: 2016-09-11
Description: Cross-site scripting (XSS) vulnerability in the Developer Tools (aka DevTools) subsystem in Google Chrome before 53.0.2785.89 on Windows and OS X and before 53.0.2785.92 on Linux allows remote attackers to inject arbitrary web script or HTML via the settings parameter in a chrome-devtools-frontend.appspot.com URL's query string.
CVSS Score: 6.1 (MEDIUM)
CWE: CWE-79
References: http://lists.opensuse.org/opensuse-security-announce/2016-09/msg00003.html; http://lists.opensuse.org/opensuse-security-announce/2016-09/msg00004.html; http://lists.opensuse.org/opensuse-security-announce/2016-09/msg00008.html
CVE: CVE-2016-5166
Published: 2016-09-11
Description: The download implementation in Google Chrome before 53.0.2785.89 on Windows and OS X and before 53.0.2785.92 on Linux does not properly restrict saving a file:// URL that is referenced by an http:// URL, which makes it easier for user-assisted remote attackers to discover NetNTLM hashes and conduct SMB relay attacks via a crafted web page that is accessed with the "Save page as" menu choice.
CVSS Score: 3.1 (LOW)
CWE: CWE-200
References: http://lists.opensuse.org/opensuse-security-announce/2016-09/msg00003.html; http://lists.opensuse.org/opensuse-security-announce/2016-09/msg00004.html; http://lists.opensuse.org/opensuse-security-announce/2016-09/msg00008.html
CVE: CVE-2016-5167
Published: 2016-09-11
Description: Multiple unspecified vulnerabilities in Google Chrome before 53.0.2785.89 on Windows and OS X and before 53.0.2785.92 on Linux allow attackers to cause a denial of service or possibly have other impact via unknown vectors.
CVSS Score: 8.8 (HIGH)
References: http://lists.opensuse.org/opensuse-updates/2016-09/msg00073.html; http://rhn.redhat.com/errata/RHSA-2016-1854.html; http://www.debian.org/security/2016/dsa-3660
CVE: CVE-2016-7395
Published: 2016-09-11
Description: SkPath.cpp in Skia, as used in Google Chrome before 53.0.2785.89 on Windows and OS X and before 53.0.2785.92 on Linux, does not properly validate the return values of ChopMonoAtY calls, which allows remote attackers to cause a denial of service (uninitialized memory access and application crash) or possibly have unspecified other impact via crafted graphics data.
CVSS Score: 8.8 (HIGH)
CWE: CWE-19
References: http://www.debian.org/security/2016/dsa-3667; http://www.securityfocus.com/bid/92717; https://codereview.chromium.org/[PII_REDACTED]
CVE: CVE-2016-3858
Published: 2016-09-11
Description: Buffer overflow in drivers/soc/qcom/subsystem_restart.c in the Qualcomm subsystem driver in Android before 2016-09-05 on Nexus 5X and 6P devices allows attackers to gain privileges via a crafted application that provides a long string, aka Android internal bug 28675151 and Qualcomm internal bug CR1022641.
CVSS Score: 7.8 (HIGH)
CWE: CWE-119
References: http://source.android.com/security/bulletin/2016-09-01.html; http://www.securityfocus.com/bid/92873; http://www.securitytracker.com/id/1036763