CRITICAL10.0
Уязвимости браузера Google Chrome, позволяющие нарушителю оказать другое воздействие или вызвать отказ в обслуживании
CVSS 2.0CRITICAL 10.0
CVSS:2.0/AV:N/AC:L/Au:N/C:C/I:C/A:CReferences
Severity:
Closed issues (8)
CRITICAL10.0
Уязвимость браузера Google Chrome, позволяющая нарушителю вызвать отказ в обслуживании или оказать другое воздействие
CVSS 2.0CRITICAL 10.0
CVSS:2.0/AV:N/AC:L/Au:N/C:C/I:C/A:CReferences
CRITICAL9.3
Уязвимость браузера Google Chrome, позволяющая нарушителю вызвать отказ в обслуживании или оказать другое воздействие
CVSS 2.0CRITICAL 9.3
CVSS:2.0/AV:N/AC:M/Au:N/C:C/I:C/A:CReferences
MEDIUM4.3
Уязвимость браузера Google Chrome, позволяющая нарушителю внедрить произвольный Веб- или HTML-код
CVSS 2.0MEDIUM 4.3
CVSS:2.0/AV:N/AC:M/Au:N/C:N/I:P/A:NReferences
CRITICAL10.0
The ObjectBackedNativeHandler class in extensions/renderer/object_backed_native_handler.cc in the extensions subsystem in Google Chrome before 47.0.2526.80 improperly implements handler functions, which allows remote attackers to cause a denial of service or possibly have unspecified other impact via vectors that leverage "type confusion."
CVSS 2.0CRITICAL 10.0
CVSS:2.0/AV:N/AC:L/Au:N/C:C/I:C/A:CReferences
- http://googlechromereleases.blogspot.com/2015/12/stable-channel-update_8.html
- http://lists.opensuse.org/opensuse-security-announce/2015-12/msg00016.html
- http://lists.opensuse.org/opensuse-security-announce/2015-12/msg00017.html
- http://rhn.redhat.com/errata/RHSA-2015-2618.html
- http://www.debian.org/security/2015/dsa-3418
- http://www.securityfocus.com/bid/78734
- https://code.google.com/p/chromium/issues/detail?id=548273
- https://codereview.chromium.org/1422383003/
- https://security.gentoo.org/glsa/201603-09
- http://googlechromereleases.blogspot.com/2015/12/stable-channel-update_8.html
- http://lists.opensuse.org/opensuse-security-announce/2015-12/msg00016.html
- http://lists.opensuse.org/opensuse-security-announce/2015-12/msg00017.html
- http://rhn.redhat.com/errata/RHSA-2015-2618.html
- http://www.debian.org/security/2015/dsa-3418
- http://www.securityfocus.com/bid/78734
- https://code.google.com/p/chromium/issues/detail?id=548273
- https://codereview.chromium.org/1422383003/
- https://security.gentoo.org/glsa/201603-09
CRITICAL9.3
Race condition in the MutationObserver implementation in Blink, as used in Google Chrome before 47.0.2526.80, allows remote attackers to cause a denial of service (use-after-free) or possibly have unspecified other impact by leveraging unanticipated object deletion.
CVSS 2.0CRITICAL 9.3
CVSS:2.0/AV:N/AC:M/Au:N/C:C/I:C/A:CReferences
- http://googlechromereleases.blogspot.com/2015/12/stable-channel-update_8.html
- http://lists.opensuse.org/opensuse-security-announce/2015-12/msg00016.html
- http://lists.opensuse.org/opensuse-security-announce/2015-12/msg00017.html
- http://rhn.redhat.com/errata/RHSA-2015-2618.html
- http://www.debian.org/security/2015/dsa-3418
- http://www.securityfocus.com/bid/78734
- http://www.ubuntu.com/usn/USN-2860-1
- https://code.google.com/p/chromium/issues/detail?id=557981
- https://codereview.chromium.org/1463433002/
- https://security.gentoo.org/glsa/201603-09
- http://googlechromereleases.blogspot.com/2015/12/stable-channel-update_8.html
- http://lists.opensuse.org/opensuse-security-announce/2015-12/msg00016.html
- http://lists.opensuse.org/opensuse-security-announce/2015-12/msg00017.html
- http://rhn.redhat.com/errata/RHSA-2015-2618.html
- http://www.debian.org/security/2015/dsa-3418
- http://www.securityfocus.com/bid/78734
- http://www.ubuntu.com/usn/USN-2860-1
- https://code.google.com/p/chromium/issues/detail?id=557981
- https://codereview.chromium.org/1463433002/
- https://security.gentoo.org/glsa/201603-09
MEDIUM4.3
The WebPageSerializerImpl::openTagToString function in WebKit/Source/web/WebPageSerializerImpl.cpp in the page serializer in Google Chrome before 47.0.2526.80 does not properly use HTML entities, which might allow remote attackers to inject arbitrary web script or HTML via a crafted document, as demonstrated by a double-quote character inside a single-quoted string.
CVSS 2.0MEDIUM 4.3
CVSS:2.0/AV:N/AC:M/Au:N/C:N/I:P/A:NReferences
- http://googlechromereleases.blogspot.com/2015/12/stable-channel-update_8.html
- http://lists.opensuse.org/opensuse-security-announce/2015-12/msg00016.html
- http://lists.opensuse.org/opensuse-security-announce/2015-12/msg00017.html
- http://rhn.redhat.com/errata/RHSA-2015-2618.html
- http://www.debian.org/security/2015/dsa-3418
- http://www.securityfocus.com/bid/78734
- http://www.ubuntu.com/usn/USN-2860-1
- https://code.google.com/p/chromium/issues/detail?id=542054
- https://codereview.chromium.org/1398453005
- https://security.gentoo.org/glsa/201603-09
- http://googlechromereleases.blogspot.com/2015/12/stable-channel-update_8.html
- http://lists.opensuse.org/opensuse-security-announce/2015-12/msg00016.html
- http://lists.opensuse.org/opensuse-security-announce/2015-12/msg00017.html
- http://rhn.redhat.com/errata/RHSA-2015-2618.html
- http://www.debian.org/security/2015/dsa-3418
- http://www.securityfocus.com/bid/78734
- http://www.ubuntu.com/usn/USN-2860-1
- https://code.google.com/p/chromium/issues/detail?id=542054
- https://codereview.chromium.org/1398453005
- https://security.gentoo.org/glsa/201603-09
CRITICAL10.0
Multiple unspecified vulnerabilities in Google Chrome before 47.0.2526.80 allow attackers to cause a denial of service or possibly have other impact via unknown vectors.
CVSS 2.0CRITICAL 10.0
CVSS:2.0/AV:N/AC:L/Au:N/C:C/I:C/A:CReferences
- http://googlechromereleases.blogspot.com/2015/12/stable-channel-update_8.html
- http://lists.opensuse.org/opensuse-security-announce/2015-12/msg00016.html
- http://lists.opensuse.org/opensuse-security-announce/2015-12/msg00017.html
- http://rhn.redhat.com/errata/RHSA-2015-2618.html
- http://www.debian.org/security/2015/dsa-3418
- http://www.securityfocus.com/bid/78734
- http://www.ubuntu.com/usn/USN-2860-1
- https://code.google.com/p/chromium/issues/detail?id=534994
- https://code.google.com/p/chromium/issues/detail?id=555784
- https://code.google.com/p/chromium/issues/detail?id=558840
- https://code.google.com/p/chromium/issues/detail?id=559310
- https://code.google.com/p/chromium/issues/detail?id=567513
- https://security.gentoo.org/glsa/201603-09
- http://googlechromereleases.blogspot.com/2015/12/stable-channel-update_8.html
- http://lists.opensuse.org/opensuse-security-announce/2015-12/msg00016.html
- http://lists.opensuse.org/opensuse-security-announce/2015-12/msg00017.html
- http://rhn.redhat.com/errata/RHSA-2015-2618.html
- http://www.debian.org/security/2015/dsa-3418
- http://www.securityfocus.com/bid/78734
- http://www.ubuntu.com/usn/USN-2860-1
- https://code.google.com/p/chromium/issues/detail?id=534994
- https://code.google.com/p/chromium/issues/detail?id=555784
- https://code.google.com/p/chromium/issues/detail?id=558840
- https://code.google.com/p/chromium/issues/detail?id=559310
- https://code.google.com/p/chromium/issues/detail?id=567513
- https://security.gentoo.org/glsa/201603-09