# CVEs published 2016-03-06

16 CVEs were published on March 6, 2016: 0 critical, 0 high. Days are UTC.

- [CVE-2016-1630](https://cve.now/CVE-2016-1630.md): The ContainerNode::parserRemoveChild function in WebKit/Source/core/dom/ContainerNode.cpp in Blink, as used in Google Chrome before… (no CVSS)
- [CVE-2016-1631](https://cve.now/CVE-2016-1631.md): The PPB\_Flash\_MessageLoop\_Impl::InternalRun function in content/renderer/pepper/ppb\_flash\_message\_loop\_impl.cc in the Pepper plugin in… (no CVSS)
- [CVE-2016-1632](https://cve.now/CVE-2016-1632.md): The Extensions subsystem in Google Chrome before 49.0.2623.75 does not properly maintain own properties, which allows remote attackers to… (no CVSS)
- [CVE-2016-1633](https://cve.now/CVE-2016-1633.md): Use-after-free vulnerability in Blink, as used in Google Chrome before 49.0.2623.75, allows remote attackers to cause a denial of service… (no CVSS)
- [CVE-2016-1634](https://cve.now/CVE-2016-1634.md): Use-after-free vulnerability in the StyleResolver::appendCSSStyleSheet function in WebKit/Source/core/css/resolver/StyleResolver.cpp in… (no CVSS)
- [CVE-2016-1635](https://cve.now/CVE-2016-1635.md): extensions/renderer/render\_frame\_observer\_natives.cc in Google Chrome before 49.0.2623.75 does not properly consider object lifetimes and… (no CVSS)
- [CVE-2016-1636](https://cve.now/CVE-2016-1636.md): The PendingScript::notifyFinished function in WebKit/Source/core/dom/PendingScript.cpp in Google Chrome before 49.0.2623.75 relies on… (no CVSS)
- [CVE-2016-1637](https://cve.now/CVE-2016-1637.md): The SkATan2\_255 function in effects/gradients/SkSweepGradient.cpp in Skia, as used in Google Chrome before 49.0.2623.75, mishandles… (no CVSS)
- [CVE-2016-1638](https://cve.now/CVE-2016-1638.md): extensions/renderer/resources/platform\_app.js in the Extensions subsystem in Google Chrome before 49.0.2623.75 does not properly restrict… (no CVSS)
- [CVE-2016-1639](https://cve.now/CVE-2016-1639.md): Use-after-free vulnerability in browser/extensions/api/webrtc\_audio\_private/webrtc\_audio\_private\_api.cc in the WebRTC Audio Private API… (no CVSS)
- [CVE-2016-1640](https://cve.now/CVE-2016-1640.md): The Web Store inline-installer implementation in the Extensions UI in Google Chrome before 49.0.2623.75 does not block installations upon… (no CVSS)
- [CVE-2016-1641](https://cve.now/CVE-2016-1641.md): Use-after-free vulnerability in content/browser/web\_contents/web\_contents\_impl.cc in Google Chrome before 49.0.2623.75 allows remote… (no CVSS)
- [CVE-2016-1642](https://cve.now/CVE-2016-1642.md): Multiple unspecified vulnerabilities in Google Chrome before 49.0.2623.75 allow attackers to cause a denial of service or possibly have… (no CVSS)
- [CVE-2016-2843](https://cve.now/CVE-2016-2843.md): Multiple unspecified vulnerabilities in Google V8 before 4.9.385.26, as used in Google Chrome before 49.0.2623.75, allow attackers to… (no CVSS)
- [CVE-2016-2844](https://cve.now/CVE-2016-2844.md): WebKit/Source/core/layout/LayoutBlock.cpp in Blink, as used in Google Chrome before 49.0.2623.75, does not properly determine when… (no CVSS)
- [CVE-2016-2845](https://cve.now/CVE-2016-2845.md): The Content Security Policy (CSP) implementation in Blink, as used in Google Chrome before 49.0.2623.75, does not ignore a URL's path… (no CVSS)

---

Source: cve.now
Built by [Sazabi](https://www.sazabi.com/?utm_source=cve-now&utm_medium=markdown), AI-native observability and security: automatic issue detection, plain-language log search and live dashboards.
Page: https://cve.now/archive/2016-03-06
Site guide for agents: https://cve.now/llms.txt
Uses NVD data; not endorsed by NVD.