Google

Chrome

6881 Schwachstellen gefunden.

Hinweis: Diese Liste kann unvollständig sein. Daten werden ohne Gewähr im Ursprungsformat bereitgestellt.
8.8

CVE-2016-5170

  • EPSS 1.12%
  • Veröffentlicht 25.09.2016 20:59:01
  • Zuletzt bearbeitet 06.05.2026 22:30:45

WebKit/Source/bindings/modules/v8/V8BindingForModules.cpp in Blink, as used in Google Chrome before 53.0.2785.113, does not properly consider getter side effects during array key conversion, which allows remote attackers to cause a denial of service ...

8.8

CVE-2016-7395

  • EPSS 1.09%
  • Veröffentlicht 11.09.2016 10:59:25
  • Zuletzt bearbeitet 06.05.2026 22:30:45

SkPath.cpp in Skia, as used in Google Chrome before 53.0.2785.89 on Windows and OS X and before 53.0.2785.92 on Linux, does not properly validate the return values of ChopMonoAtY calls, which allows remote attackers to cause a denial of service (unin...

8.8

CVE-2016-5167

  • EPSS 1.35%
  • Veröffentlicht 11.09.2016 10:59:24
  • Zuletzt bearbeitet 06.05.2026 22:30:45

Multiple unspecified vulnerabilities in Google Chrome before 53.0.2785.89 on Windows and OS X and before 53.0.2785.92 on Linux allow attackers to cause a denial of service or possibly have other impact via unknown vectors.

3.1

CVE-2016-5166

  • EPSS 1.26%
  • Veröffentlicht 11.09.2016 10:59:23
  • Zuletzt bearbeitet 06.05.2026 22:30:45

The download implementation in Google Chrome before 53.0.2785.89 on Windows and OS X and before 53.0.2785.92 on Linux does not properly restrict saving a file:// URL that is referenced by an http:// URL, which makes it easier for user-assisted remote...

6.1

CVE-2016-5165

  • EPSS 1.25%
  • Veröffentlicht 11.09.2016 10:59:22
  • Zuletzt bearbeitet 06.05.2026 22:30:45

Cross-site scripting (XSS) vulnerability in the Developer Tools (aka DevTools) subsystem in Google Chrome before 53.0.2785.89 on Windows and OS X and before 53.0.2785.92 on Linux allows remote attackers to inject arbitrary web script or HTML via the ...

6.1

CVE-2016-5164

  • EPSS 1.04%
  • Veröffentlicht 11.09.2016 10:59:20
  • Zuletzt bearbeitet 06.05.2026 22:30:45

Cross-site scripting (XSS) vulnerability in WebKit/Source/platform/v8_inspector/V8Debugger.cpp in Blink, as used in Google Chrome before 53.0.2785.89 on Windows and OS X and before 53.0.2785.92 on Linux, allows remote attackers to inject arbitrary we...

4.3

CVE-2016-5163

  • EPSS 1.22%
  • Veröffentlicht 11.09.2016 10:59:19
  • Zuletzt bearbeitet 06.05.2026 22:30:45

The bidirectional-text implementation in Google Chrome before 53.0.2785.89 on Windows and OS X and before 53.0.2785.92 on Linux does not ensure left-to-right (LTR) rendering of URLs, which allows remote attackers to spoof the address bar via crafted ...

6.5

CVE-2016-5162

  • EPSS 1.39%
  • Veröffentlicht 11.09.2016 10:59:18
  • Zuletzt bearbeitet 06.05.2026 22:30:45

The AllowCrossRendererResourceLoad function in extensions/browser/url_request_util.cc in Google Chrome before 53.0.2785.89 on Windows and OS X and before 53.0.2785.92 on Linux does not properly use an extension's manifest.json web_accessible_resource...

8.8

CVE-2016-5161

  • EPSS 1.4%
  • Veröffentlicht 11.09.2016 10:59:17
  • Zuletzt bearbeitet 06.05.2026 22:30:45

The EditingStyle::mergeStyle function in WebKit/Source/core/editing/EditingStyle.cpp in Blink, as used in Google Chrome before 53.0.2785.89 on Windows and OS X and before 53.0.2785.92 on Linux, mishandles custom properties, which allows remote attack...

6.5

CVE-2016-5160

  • EPSS 1.47%
  • Veröffentlicht 11.09.2016 10:59:16
  • Zuletzt bearbeitet 06.05.2026 22:30:45

The AllowCrossRendererResourceLoad function in extensions/browser/url_request_util.cc in Google Chrome before 53.0.2785.89 on Windows and OS X and before 53.0.2785.92 on Linux does not properly use an extension's manifest.json web_accessible_resource...