Google

Chrome

3866 Schwachstellen gefunden.

Hinweis: Diese Liste kann unvollständig sein. Daten werden ohne Gewähr im Ursprungsformat bereitgestellt.
8.8

CVE-2016-5198

Warnung Exploit
  • EPSS 77.91%
  • Veröffentlicht 19.01.2017 05:59:00
  • Zuletzt bearbeitet 22.10.2025 00:15:54

V8 in Google Chrome prior to 54.0.2840.90 for Linux, and 54.0.2840.85 for Android, and 54.0.2840.87 for Windows and Mac included incorrect optimisation assumptions, which allowed a remote attacker to perform arbitrary read/write operations, leading t...

8.8

CVE-2016-5199

  • EPSS 0.72%
  • Veröffentlicht 19.01.2017 05:59:00
  • Zuletzt bearbeitet 20.04.2025 01:37:25

An off by one error resulting in an allocation of zero size in FFmpeg in Google Chrome prior to 54.0.2840.98 for Mac, and 54.0.2840.99 for Windows, and 54.0.2840.100 for Linux, and 55.0.2883.84 for Android allowed a remote attacker to potentially exp...

8.8

CVE-2016-5200

  • EPSS 2.67%
  • Veröffentlicht 19.01.2017 05:59:00
  • Zuletzt bearbeitet 20.04.2025 01:37:25

V8 in Google Chrome prior to 54.0.2840.98 for Mac, and 54.0.2840.99 for Windows, and 54.0.2840.100 for Linux, and 55.0.2883.84 for Android incorrectly applied type rules, which allowed a remote attacker to potentially exploit heap corruption via a cr...

6.5

CVE-2016-5201

  • EPSS 0.52%
  • Veröffentlicht 19.01.2017 05:59:00
  • Zuletzt bearbeitet 20.04.2025 01:37:25

A leak of privateClass in the extensions API in Google Chrome prior to 54.0.2840.100 for Linux, and 54.0.2840.99 for Windows, and 54.0.2840.98 for Mac allowed a remote attacker to access privileged JavaScript code via a crafted HTML page.

8.8

CVE-2016-5203

  • EPSS 0.54%
  • Veröffentlicht 19.01.2017 05:59:00
  • Zuletzt bearbeitet 20.04.2025 01:37:25

A use after free in PDFium in Google Chrome prior to 55.0.2883.75 for Mac, Windows and Linux, and 55.0.2883.84 for Android allowed a remote attacker to potentially exploit heap corruption via a crafted PDF file.

6.1

CVE-2016-5204

  • EPSS 0.22%
  • Veröffentlicht 19.01.2017 05:59:00
  • Zuletzt bearbeitet 20.04.2025 01:37:25

Leaking of an SVG shadow tree leading to corruption of the DOM tree in Blink in Google Chrome prior to 55.0.2883.75 for Mac, Windows and Linux, and 55.0.2883.84 for Android allowed a remote attacker to inject arbitrary scripts or HTML (UXSS) via a cr...

6.1

CVE-2016-5205

  • EPSS 0.25%
  • Veröffentlicht 19.01.2017 05:59:00
  • Zuletzt bearbeitet 20.04.2025 01:37:25

Blink in Google Chrome prior to 55.0.2883.75 for Linux, Windows and Mac, incorrectly handles deferred page loads, which allowed a remote attacker to inject arbitrary scripts or HTML (UXSS) via a crafted HTML page.

8.8

CVE-2016-5206

  • EPSS 0.28%
  • Veröffentlicht 19.01.2017 05:59:00
  • Zuletzt bearbeitet 20.04.2025 01:37:25

The PDF plugin in Google Chrome prior to 55.0.2883.75 for Mac, Windows and Linux, and 55.0.2883.84 for Android incorrectly followed redirects, which allowed a remote attacker to bypass the Same Origin Policy via a crafted HTML page.

6.1

CVE-2016-5207

  • EPSS 0.23%
  • Veröffentlicht 19.01.2017 05:59:00
  • Zuletzt bearbeitet 20.04.2025 01:37:25

In Blink in Google Chrome prior to 55.0.2883.75 for Mac, Windows and Linux, and 55.0.2883.84 for Android, corruption of the DOM tree could occur during the removal of a full screen element, which allowed a remote attacker to achieve arbitrary code ex...

6.1

CVE-2016-5208

  • EPSS 0.25%
  • Veröffentlicht 19.01.2017 05:59:00
  • Zuletzt bearbeitet 20.04.2025 01:37:25

Blink in Google Chrome prior to 55.0.2883.75 for Linux and Windows, and 55.0.2883.84 for Android allowed possible corruption of the DOM tree during synchronous event handling, which allowed a remote attacker to inject arbitrary scripts or HTML (UXSS)...