CVE-2015-1250
Multiple unspecified vulnerabilities in Google Chrome before 42.0.2311.135 allow attackers to cause a denial of service or possibly have other impact via unknown vectors.
- Обновитесь до 1.6.6-0ubuntu0.14.04.1
Опубликовано Обновлено
PatchFirst · Свежие уязвимости
Уязвимости oxide-qt · Страница 12
За последние 30 дней в oxide-qt опубликовано уязвимостей: 0; в каталоге KEV: 0.
Уязвимостей: 324
CVE-2015-1243
Use-after-free vulnerability in the MutationObserver::disconnect function in core/dom/MutationObserver.cpp in the DOM implementation in Blink, as used in Google Chrome before 42.0.2311.135, allows remote attackers to cause a denial of service or possibly have unspecified other impact by triggering an attempt to unregister a MutationObserver object that is not currently registered.
- Обновитесь до 1.6.6-0ubuntu0.14.04.1
Опубликовано ОбновленоCVE-2015-1321
Use-after-free vulnerability in the file picker implementation in Oxide before 1.6.5 allows remote attackers to cause a denial of service (crash) or possibly execute arbitrary code via a crafted webpage.
- Обновитесь до 1.6.5-0ubuntu0.14.04.1
Опубликовано ОбновленоCVE-2015-3333
Multiple unspecified vulnerabilities in Google V8 before 4.2.77.14, as used in Google Chrome before 42.0.2311.90, allow attackers to cause a denial of service or possibly have other impact via unknown vectors.
- Обновитесь до 1.6.5-0ubuntu0.14.04.1
Опубликовано ОбновленоCVE-2015-1249
Multiple unspecified vulnerabilities in Google Chrome before 42.0.2311.90 allow attackers to cause a denial of service or possibly have other impact via unknown vectors.
- Обновитесь до 1.6.5-0ubuntu0.14.04.1
Опубликовано ОбновленоCVE-2015-1246
Blink, as used in Google Chrome before 42.0.2311.90, allows remote attackers to cause a denial of service (out-of-bounds read) via unspecified vectors.
- Обновитесь до 1.6.5-0ubuntu0.14.04.1
Опубликовано ОбновленоCVE-2015-1244
The URLRequest::GetHSTSRedirect function in url_request/url_request.cc in Google Chrome before 42.0.2311.90 does not replace the ws scheme with the wss scheme whenever an HSTS Policy is active, which makes it easier for remote attackers to obtain sensitive information by sniffing the network for WebSocket traffic.
- Обновитесь до 1.6.5-0ubuntu0.14.04.1
Опубликовано ОбновленоCVE-2015-1242
The ReduceTransitionElementsKind function in hydrogen-check-elimination.cc in Google V8 before 4.2.77.8, as used in Google Chrome before 42.0.2311.90, allows remote attackers to cause a denial of service or possibly have unspecified other impact via crafted JavaScript code that leverages "type confusion" in the check-elimination optimization.
- Обновитесь до 1.6.5-0ubuntu0.14.04.1
Опубликовано ОбновленоCVE-2015-1241
Google Chrome before 42.0.2311.90 does not properly consider the interaction of page navigation with the handling of touch events and gesture events, which allows remote attackers to trigger unintended UI actions via a crafted web site that conducts a "tapjacking" attack.
- Обновитесь до 1.6.5-0ubuntu0.14.04.1
Опубликовано ОбновленоCVE-2015-1240
gpu/blink/webgraphicscontext3d_impl.cc in the WebGL implementation in Google Chrome before 42.0.2311.90 allows remote attackers to cause a denial of service (out-of-bounds read) via a crafted WebGL program that triggers a state inconsistency.
- Обновитесь до 1.6.5-0ubuntu0.14.04.1
Опубликовано ОбновленоCVE-2015-1238
Skia, as used in Google Chrome before 42.0.2311.90, allows remote attackers to cause a denial of service (out-of-bounds write) or possibly have unspecified other impact via unknown vectors.
- Обновитесь до 1.6.5-0ubuntu0.14.04.1
Опубликовано ОбновленоCVE-2015-1237
Use-after-free vulnerability in the RenderFrameImpl::OnMessageReceived function in content/renderer/render_frame_impl.cc in Google Chrome before 42.0.2311.90 allows remote attackers to cause a denial of service or possibly have unspecified other impact via vectors that trigger renderer IPC messages during a detach operation.
- Обновитесь до 1.6.5-0ubuntu0.14.04.1
Опубликовано ОбновленоCVE-2015-1236
The MediaElementAudioSourceNode::process function in modules/webaudio/MediaElementAudioSourceNode.cpp in the Web Audio API implementation in Blink, as used in Google Chrome before 42.0.2311.90, allows remote attackers to bypass the Same Origin Policy and obtain sensitive audio sample values via a crafted web site containing a media element.
- Обновитесь до 1.6.5-0ubuntu0.14.04.1
Опубликовано ОбновленоCVE-2015-1235
The ContainerNode::parserRemoveChild function in core/dom/ContainerNode.cpp in the HTML parser in Blink, as used in Google Chrome before 42.0.2311.90, allows remote attackers to bypass the Same Origin Policy via a crafted HTML document with an IFRAME element.
- Обновитесь до 1.6.5-0ubuntu0.14.04.1
Опубликовано ОбновленоCVE-2015-1317
Use-after-free vulnerability in Oxide before 1.5.6 and 1.6.x before 1.6.1 allows remote attackers to cause a denial of service (crash) or possibly execute arbitrary code by deleting all WebContents while a RenderProcessHost instance still exists.
- Обновитесь до 1.5.6-0ubuntu0.14.04.2
Опубликовано ОбновленоCVE-2015-1234
Race condition in gpu/command_buffer/service/gles2_cmd_decoder.cc in Google Chrome before 41.0.2272.118 allows remote attackers to cause a denial of service (buffer overflow) or possibly have unspecified other impact by manipulating OpenGL ES commands.
- Обновитесь до 1.5.6-0ubuntu0.14.04.2
Опубликовано ОбновленоCVE-2015-1233
Google Chrome before 41.0.2272.118 does not properly handle the interaction of IPC, the Gamepad API, and Google V8, which allows remote attackers to execute arbitrary code via unspecified vectors.
- Обновитесь до 1.5.6-0ubuntu0.14.04.2
Опубликовано ОбновленоCVE-2015-2238
Multiple unspecified vulnerabilities in Google V8 before 4.1.0.21, as used in Google Chrome before 41.0.2272.76, allow attackers to cause a denial of service or possibly have other impact via unknown vectors.
- Обновитесь до 1.5.5-0ubuntu0.14.04.3
Опубликовано ОбновленоCVE-2015-1231
Multiple unspecified vulnerabilities in Google Chrome before 41.0.2272.76 allow attackers to cause a denial of service or possibly have other impact via unknown vectors.
- Обновитесь до 1.5.5-0ubuntu0.14.04.3
Опубликовано ОбновленоCVE-2015-1230
The getHiddenProperty function in bindings/core/v8/V8EventListenerList.h in Blink, as used in Google Chrome before 41.0.2272.76, has a name conflict with the AudioContext class, which allows remote attackers to cause a denial of service or possibly have unspecified other impact via JavaScript code that adds an AudioContext event listener and triggers "type confusion."
- Обновитесь до 1.5.5-0ubuntu0.14.04.3
Опубликовано Обновлено
Проверьте свой сервер
Сопоставьте установленный стек и версии со свежими базами уязвимостей.