rpm package
opensuse/chromium&distro=openSUSE Tumbleweed
pkg:rpm/opensuse/chromium&distro=openSUSE%20Tumbleweed
Vulnerabilities (4,053)
| CVE | Sev | CVSS | KEV | Affected versions | Fixed in | Published | Description |
|---|---|---|---|---|---|---|---|
| CVE-2016-1615 | Med | 6.5 | < 55.0.2883.75-3.1 | 55.0.2883.75-3.1 | Jan 25, 2016 | The Omnibox implementation in Google Chrome before 48.0.2564.82 allows remote attackers to spoof a document's origin via unspecified vectors. | |
| CVE-2016-1614 | Med | 4.3 | < 55.0.2883.75-3.1 | 55.0.2883.75-3.1 | Jan 25, 2016 | The UnacceleratedImageBufferSurface class in WebKit/Source/platform/graphics/UnacceleratedImageBufferSurface.cpp in Blink, as used in Google Chrome before 48.0.2564.82, mishandles the initialization mode, which allows remote attackers to obtain sensitive information from process | |
| CVE-2016-1613 | Hig | 7.6 | < 55.0.2883.75-3.1 | 55.0.2883.75-3.1 | Jan 25, 2016 | Multiple use-after-free vulnerabilities in the formfiller implementation in PDFium, as used in Google Chrome before 48.0.2564.82, allow remote attackers to cause a denial of service or possibly have unspecified other impact via a crafted PDF document, related to improper tracking | |
| CVE-2016-1612 | Hig | 7.6 | < 55.0.2883.75-3.1 | 55.0.2883.75-3.1 | Jan 25, 2016 | The LoadIC::UpdateCaches function in ic/ic.cc in Google V8, as used in Google Chrome before 48.0.2564.82, does not ensure receiver compatibility before performing a cast of an unspecified variable, which allows remote attackers to cause a denial of service or possibly have unknow | |
| CVE-2015-6792 | Cri | 9.8 | < 55.0.2883.75-3.1 | 55.0.2883.75-3.1 | Dec 24, 2015 | The MIDI subsystem in Google Chrome before 47.0.2526.106 does not properly handle the sending of data, which allows remote attackers to execute arbitrary code or cause a denial of service (application crash) via unspecified vectors, related to midi_manager.cc, midi_manager_alsa.c | |
| CVE-2015-6791 | — | < 55.0.2883.75-3.1 | 55.0.2883.75-3.1 | Dec 14, 2015 | Multiple unspecified vulnerabilities in Google Chrome before 47.0.2526.80 allow attackers to cause a denial of service or possibly have other impact via unknown vectors. | ||
| CVE-2015-6790 | — | < 55.0.2883.75-3.1 | 55.0.2883.75-3.1 | Dec 14, 2015 | The WebPageSerializerImpl::openTagToString function in WebKit/Source/web/WebPageSerializerImpl.cpp in the page serializer in Google Chrome before 47.0.2526.80 does not properly use HTML entities, which might allow remote attackers to inject arbitrary web script or HTML via a craf | ||
| CVE-2015-6789 | — | < 55.0.2883.75-3.1 | 55.0.2883.75-3.1 | Dec 14, 2015 | Race condition in the MutationObserver implementation in Blink, as used in Google Chrome before 47.0.2526.80, allows remote attackers to cause a denial of service (use-after-free) or possibly have unspecified other impact by leveraging unanticipated object deletion. | ||
| CVE-2015-6788 | — | < 55.0.2883.75-3.1 | 55.0.2883.75-3.1 | Dec 14, 2015 | The ObjectBackedNativeHandler class in extensions/renderer/object_backed_native_handler.cc in the extensions subsystem in Google Chrome before 47.0.2526.80 improperly implements handler functions, which allows remote attackers to cause a denial of service or possibly have unspeci | ||
| CVE-2015-6787 | — | < 55.0.2883.75-3.1 | 55.0.2883.75-3.1 | Dec 6, 2015 | Multiple unspecified vulnerabilities in Google Chrome before 47.0.2526.73 allow attackers to cause a denial of service or possibly have other impact via unknown vectors. | ||
| CVE-2015-6786 | — | < 55.0.2883.75-3.1 | 55.0.2883.75-3.1 | Dec 6, 2015 | The CSPSourceList::matches function in WebKit/Source/core/frame/csp/CSPSourceList.cpp in the Content Security Policy (CSP) implementation in Google Chrome before 47.0.2526.73 accepts a blob:, data:, or filesystem: URL as a match for a * pattern, which allows remote attackers to b | ||
| CVE-2015-6785 | — | < 55.0.2883.75-3.1 | 55.0.2883.75-3.1 | Dec 6, 2015 | The CSPSource::hostMatches function in WebKit/Source/core/frame/csp/CSPSource.cpp in the Content Security Policy (CSP) implementation in Google Chrome before 47.0.2526.73 accepts an x.y hostname as a match for a *.x.y pattern, which might allow remote attackers to bypass intended | ||
| CVE-2015-6784 | — | < 55.0.2883.75-3.1 | 55.0.2883.75-3.1 | Dec 6, 2015 | The page serializer in Google Chrome before 47.0.2526.73 mishandles Mark of the Web (MOTW) comments for URLs containing a "--" sequence, which might allow remote attackers to inject HTML via a crafted URL, as demonstrated by an initial http://example.com?-- substring. | ||
| CVE-2015-6783 | — | < 55.0.2883.75-3.1 | 55.0.2883.75-3.1 | Dec 6, 2015 | The FindStartOffsetOfFileInZipFile function in crazy_linker_zip.cpp in crazy_linker (aka Crazy Linker) in Android 5.x and 6.x, as used in Google Chrome before 47.0.2526.73, improperly searches for an EOCD record, which allows attackers to bypass a signature-validation requirement | ||
| CVE-2015-6782 | — | < 55.0.2883.75-3.1 | 55.0.2883.75-3.1 | Dec 6, 2015 | The Document::open function in WebKit/Source/core/dom/Document.cpp in Google Chrome before 47.0.2526.73 does not ensure that page-dismissal event handling is compatible with modal-dialog blocking, which makes it easier for remote attackers to spoof Omnibox content via a crafted w | ||
| CVE-2015-6781 | — | < 55.0.2883.75-3.1 | 55.0.2883.75-3.1 | Dec 6, 2015 | Integer overflow in the FontData::Bound function in data/font_data.cc in Google sfntly, as used in Google Chrome before 47.0.2526.73, allows remote attackers to cause a denial of service or possibly have unspecified other impact via a crafted offset or length value within font da | ||
| CVE-2015-6780 | — | < 55.0.2883.75-3.1 | 55.0.2883.75-3.1 | Dec 6, 2015 | Use-after-free vulnerability in the Infobars implementation in Google Chrome before 47.0.2526.73 allows remote attackers to cause a denial of service or possibly have unspecified other impact via a crafted web site, related to browser/ui/views/website_settings/website_settings_po | ||
| CVE-2015-6779 | — | < 55.0.2883.75-3.1 | 55.0.2883.75-3.1 | Dec 6, 2015 | PDFium, as used in Google Chrome before 47.0.2526.73, does not properly restrict use of chrome: URLs, which allows remote attackers to bypass intended scheme restrictions via a crafted PDF document, as demonstrated by a document with a link to a chrome://settings URL. | ||
| CVE-2015-6778 | — | < 55.0.2883.75-3.1 | 55.0.2883.75-3.1 | Dec 6, 2015 | The CJBig2_SymbolDict class in fxcodec/jbig2/JBig2_SymbolDict.cpp in PDFium, as used in Google Chrome before 47.0.2526.73, allows remote attackers to cause a denial of service (out-of-bounds memory access) or possibly have unspecified other impact via a PDF document containing cr | ||
| CVE-2015-6777 | — | < 55.0.2883.75-3.1 | 55.0.2883.75-3.1 | Dec 6, 2015 | Use-after-free vulnerability in the ContainerNode::notifyNodeInsertedInternal function in WebKit/Source/core/dom/ContainerNode.cpp in the DOM implementation in Google Chrome before 47.0.2526.73 allows remote attackers to cause a denial of service or possibly have unspecified othe |
- affected < 55.0.2883.75-3.1fixed 55.0.2883.75-3.1
The Omnibox implementation in Google Chrome before 48.0.2564.82 allows remote attackers to spoof a document's origin via unspecified vectors.
- affected < 55.0.2883.75-3.1fixed 55.0.2883.75-3.1
The UnacceleratedImageBufferSurface class in WebKit/Source/platform/graphics/UnacceleratedImageBufferSurface.cpp in Blink, as used in Google Chrome before 48.0.2564.82, mishandles the initialization mode, which allows remote attackers to obtain sensitive information from process
- affected < 55.0.2883.75-3.1fixed 55.0.2883.75-3.1
Multiple use-after-free vulnerabilities in the formfiller implementation in PDFium, as used in Google Chrome before 48.0.2564.82, allow remote attackers to cause a denial of service or possibly have unspecified other impact via a crafted PDF document, related to improper tracking
- affected < 55.0.2883.75-3.1fixed 55.0.2883.75-3.1
The LoadIC::UpdateCaches function in ic/ic.cc in Google V8, as used in Google Chrome before 48.0.2564.82, does not ensure receiver compatibility before performing a cast of an unspecified variable, which allows remote attackers to cause a denial of service or possibly have unknow
- affected < 55.0.2883.75-3.1fixed 55.0.2883.75-3.1
The MIDI subsystem in Google Chrome before 47.0.2526.106 does not properly handle the sending of data, which allows remote attackers to execute arbitrary code or cause a denial of service (application crash) via unspecified vectors, related to midi_manager.cc, midi_manager_alsa.c
- CVE-2015-6791Dec 14, 2015affected < 55.0.2883.75-3.1fixed 55.0.2883.75-3.1
Multiple unspecified vulnerabilities in Google Chrome before 47.0.2526.80 allow attackers to cause a denial of service or possibly have other impact via unknown vectors.
- CVE-2015-6790Dec 14, 2015affected < 55.0.2883.75-3.1fixed 55.0.2883.75-3.1
The WebPageSerializerImpl::openTagToString function in WebKit/Source/web/WebPageSerializerImpl.cpp in the page serializer in Google Chrome before 47.0.2526.80 does not properly use HTML entities, which might allow remote attackers to inject arbitrary web script or HTML via a craf
- CVE-2015-6789Dec 14, 2015affected < 55.0.2883.75-3.1fixed 55.0.2883.75-3.1
Race condition in the MutationObserver implementation in Blink, as used in Google Chrome before 47.0.2526.80, allows remote attackers to cause a denial of service (use-after-free) or possibly have unspecified other impact by leveraging unanticipated object deletion.
- CVE-2015-6788Dec 14, 2015affected < 55.0.2883.75-3.1fixed 55.0.2883.75-3.1
The ObjectBackedNativeHandler class in extensions/renderer/object_backed_native_handler.cc in the extensions subsystem in Google Chrome before 47.0.2526.80 improperly implements handler functions, which allows remote attackers to cause a denial of service or possibly have unspeci
- CVE-2015-6787Dec 6, 2015affected < 55.0.2883.75-3.1fixed 55.0.2883.75-3.1
Multiple unspecified vulnerabilities in Google Chrome before 47.0.2526.73 allow attackers to cause a denial of service or possibly have other impact via unknown vectors.
- CVE-2015-6786Dec 6, 2015affected < 55.0.2883.75-3.1fixed 55.0.2883.75-3.1
The CSPSourceList::matches function in WebKit/Source/core/frame/csp/CSPSourceList.cpp in the Content Security Policy (CSP) implementation in Google Chrome before 47.0.2526.73 accepts a blob:, data:, or filesystem: URL as a match for a * pattern, which allows remote attackers to b
- CVE-2015-6785Dec 6, 2015affected < 55.0.2883.75-3.1fixed 55.0.2883.75-3.1
The CSPSource::hostMatches function in WebKit/Source/core/frame/csp/CSPSource.cpp in the Content Security Policy (CSP) implementation in Google Chrome before 47.0.2526.73 accepts an x.y hostname as a match for a *.x.y pattern, which might allow remote attackers to bypass intended
- CVE-2015-6784Dec 6, 2015affected < 55.0.2883.75-3.1fixed 55.0.2883.75-3.1
The page serializer in Google Chrome before 47.0.2526.73 mishandles Mark of the Web (MOTW) comments for URLs containing a "--" sequence, which might allow remote attackers to inject HTML via a crafted URL, as demonstrated by an initial http://example.com?-- substring.
- CVE-2015-6783Dec 6, 2015affected < 55.0.2883.75-3.1fixed 55.0.2883.75-3.1
The FindStartOffsetOfFileInZipFile function in crazy_linker_zip.cpp in crazy_linker (aka Crazy Linker) in Android 5.x and 6.x, as used in Google Chrome before 47.0.2526.73, improperly searches for an EOCD record, which allows attackers to bypass a signature-validation requirement
- CVE-2015-6782Dec 6, 2015affected < 55.0.2883.75-3.1fixed 55.0.2883.75-3.1
The Document::open function in WebKit/Source/core/dom/Document.cpp in Google Chrome before 47.0.2526.73 does not ensure that page-dismissal event handling is compatible with modal-dialog blocking, which makes it easier for remote attackers to spoof Omnibox content via a crafted w
- CVE-2015-6781Dec 6, 2015affected < 55.0.2883.75-3.1fixed 55.0.2883.75-3.1
Integer overflow in the FontData::Bound function in data/font_data.cc in Google sfntly, as used in Google Chrome before 47.0.2526.73, allows remote attackers to cause a denial of service or possibly have unspecified other impact via a crafted offset or length value within font da
- CVE-2015-6780Dec 6, 2015affected < 55.0.2883.75-3.1fixed 55.0.2883.75-3.1
Use-after-free vulnerability in the Infobars implementation in Google Chrome before 47.0.2526.73 allows remote attackers to cause a denial of service or possibly have unspecified other impact via a crafted web site, related to browser/ui/views/website_settings/website_settings_po
- CVE-2015-6779Dec 6, 2015affected < 55.0.2883.75-3.1fixed 55.0.2883.75-3.1
PDFium, as used in Google Chrome before 47.0.2526.73, does not properly restrict use of chrome: URLs, which allows remote attackers to bypass intended scheme restrictions via a crafted PDF document, as demonstrated by a document with a link to a chrome://settings URL.
- CVE-2015-6778Dec 6, 2015affected < 55.0.2883.75-3.1fixed 55.0.2883.75-3.1
The CJBig2_SymbolDict class in fxcodec/jbig2/JBig2_SymbolDict.cpp in PDFium, as used in Google Chrome before 47.0.2526.73, allows remote attackers to cause a denial of service (out-of-bounds memory access) or possibly have unspecified other impact via a PDF document containing cr
- CVE-2015-6777Dec 6, 2015affected < 55.0.2883.75-3.1fixed 55.0.2883.75-3.1
Use-after-free vulnerability in the ContainerNode::notifyNodeInsertedInternal function in WebKit/Source/core/dom/ContainerNode.cpp in the DOM implementation in Google Chrome before 47.0.2526.73 allows remote attackers to cause a denial of service or possibly have unspecified othe
Page 177 of 203