CVE-2016-1666
- EPSS 0.78%
- Published 14.05.2016 21:59:06
- Last modified 12.04.2025 10:46:40
Multiple unspecified vulnerabilities in Google Chrome before 50.0.2661.94 allow attackers to cause a denial of service or possibly have other impact via unknown vectors.
CVE-2016-1665
- EPSS 1.6%
- Published 14.05.2016 21:59:05
- Last modified 12.04.2025 10:46:40
The JSGenericLowering class in compiler/js-generic-lowering.cc in Google V8, as used in Google Chrome before 50.0.2661.94, mishandles comparison operators, which allows remote attackers to obtain sensitive information via crafted JavaScript code.
CVE-2016-1664
- EPSS 1.06%
- Published 14.05.2016 21:59:04
- Last modified 12.04.2025 10:46:40
The HistoryController::UpdateForCommit function in content/renderer/history_controller.cc in Google Chrome before 50.0.2661.94 mishandles the interaction between subframe forward navigations and other forward navigations, which allows remote attacker...
CVE-2016-1663
- EPSS 1.42%
- Published 14.05.2016 21:59:03
- Last modified 12.04.2025 10:46:40
The SerializedScriptValue::transferArrayBuffers function in WebKit/Source/bindings/core/v8/SerializedScriptValue.cpp in the V8 bindings in Blink, as used in Google Chrome before 50.0.2661.94, mishandles certain array-buffer data structures, which all...
- EPSS 15.29%
- Published 14.05.2016 21:59:02
- Last modified 12.04.2025 10:46:40
extensions/renderer/gc_callback.cc in Google Chrome before 50.0.2661.94 does not prevent fallback execution once the Garbage Collection callback has started, which allows remote attackers to cause a denial of service (use-after-free) or possibly have...
CVE-2016-1661
- EPSS 0.96%
- Published 14.05.2016 21:59:01
- Last modified 12.04.2025 10:46:40
Blink, as used in Google Chrome before 50.0.2661.94, does not ensure that frames satisfy a check for the same renderer process in addition to a Same Origin Policy check, which allows remote attackers to cause a denial of service (memory corruption) o...
CVE-2016-1660
- EPSS 1.24%
- Published 14.05.2016 21:59:00
- Last modified 12.04.2025 10:46:40
Blink, as used in Google Chrome before 50.0.2661.94, mishandles assertions in the WTF::BitArray and WTF::double_conversion::Vector classes, which allows remote attackers to cause a denial of service (out-of-bounds write) or possibly have unspecified ...
CVE-2016-3718
- EPSS 79.25%
- Published 05.05.2016 18:59:08
- Last modified 12.04.2025 10:46:40
The (1) HTTP and (2) FTP coders in ImageMagick before 6.9.3-10 and 7.x before 7.0.1-1 allow remote attackers to conduct server-side request forgery (SSRF) attacks via a crafted image.
CVE-2016-3717
- EPSS 26.22%
- Published 05.05.2016 18:59:07
- Last modified 12.04.2025 10:46:40
The LABEL coder in ImageMagick before 6.9.3-10 and 7.x before 7.0.1-1 allows remote attackers to read arbitrary files via a crafted image.
CVE-2016-3716
- EPSS 17.35%
- Published 05.05.2016 18:59:06
- Last modified 12.04.2025 10:46:40
The MSL coder in ImageMagick before 6.9.3-10 and 7.x before 7.0.1-1 allows remote attackers to move arbitrary files via a crafted image.