# CVEs published 2015-12-06 32 CVEs were published on December 6, 2015: 0 critical, 0 high. Days are UTC. - [CVE-2015-6764](https://cve.now/CVE-2015-6764.md): The BasicJsonStringifier::SerializeJSArray function in json-stringifier.h in the JSON stringifier in Google V8, as used in Google Chrome bef (no CVSS) - [CVE-2015-6765](https://cve.now/CVE-2015-6765.md): Use-after-free vulnerability in content/browser/appcache/appcache\_update\_job.cc in Google Chrome before 47.0.2526.73 allows remote attackers (no CVSS) - [CVE-2015-6766](https://cve.now/CVE-2015-6766.md): Use-after-free vulnerability in the AppCache implementation in Google Chrome before 47.0.2526.73 allows remote attackers with renderer acces (no CVSS) - [CVE-2015-6767](https://cve.now/CVE-2015-6767.md): Use-after-free vulnerability in content/browser/appcache/appcache\_dispatcher\_host.cc in the AppCache implementation in Google Chrome before (no CVSS) - [CVE-2015-6768](https://cve.now/CVE-2015-6768.md): The DOM implementation in Google Chrome before 47.0.2526.73 allows remote attackers to bypass the Same Origin Policy via unspecified vectors (no CVSS) - [CVE-2015-6769](https://cve.now/CVE-2015-6769.md): The provisional-load commit implementation in WebKit/Source/bindings/core/v8/WindowProxy.cpp in Google Chrome before 47.0.2526.73 allows rem (no CVSS) - [CVE-2015-6770](https://cve.now/CVE-2015-6770.md): The DOM implementation in Google Chrome before 47.0.2526.73 allows remote attackers to bypass the Same Origin Policy via unspecified vectors (no CVSS) - [CVE-2015-6771](https://cve.now/CVE-2015-6771.md): js/array.js in Google V8, as used in Google Chrome before 47.0.2526.73, improperly implements certain map and filter operations for arrays, (no CVSS) - [CVE-2015-6772](https://cve.now/CVE-2015-6772.md): The DOM implementation in Blink, as used in Google Chrome before 47.0.2526.73, does not prevent javascript: URL navigation while a document (no CVSS) - [CVE-2015-6773](https://cve.now/CVE-2015-6773.md): The convolution implementation in Skia, as used in Google Chrome before 47.0.2526.73, does not properly constrain row lengths, which allows (no CVSS) - [CVE-2015-6774](https://cve.now/CVE-2015-6774.md): Use-after-free vulnerability in the GetLoadTimes function in renderer/loadtimes\_extension\_bindings.cc in the Extensions implementation in Go (no CVSS) - [CVE-2015-6775](https://cve.now/CVE-2015-6775.md): fpdfsdk/src/jsapi/fxjs\_v8.cpp in PDFium, as used in Google Chrome before 47.0.2526.73, does not use signatures, which allows remote attacker (no CVSS) - [CVE-2015-6776](https://cve.now/CVE-2015-6776.md): The opj\_dwt\_decode\_1\* functions in dwt.c in OpenJPEG, as used in PDFium in Google Chrome before 47.0.2526.73, allow remote attackers to caus (no CVSS) - [CVE-2015-6777](https://cve.now/CVE-2015-6777.md): Use-after-free vulnerability in the ContainerNode::notifyNodeInsertedInternal function in WebKit/Source/core/dom/ContainerNode.cpp in the DO (no CVSS) - [CVE-2015-6778](https://cve.now/CVE-2015-6778.md): The CJBig2\_SymbolDict class in fxcodec/jbig2/JBig2\_SymbolDict.cpp in PDFium, as used in Google Chrome before 47.0.2526.73, allows remote att (no CVSS) - [CVE-2015-6779](https://cve.now/CVE-2015-6779.md): PDFium, as used in Google Chrome before 47.0.2526.73, does not properly restrict use of chrome: URLs, which allows remote attackers to bypas (no CVSS) - [CVE-2015-6780](https://cve.now/CVE-2015-6780.md): Use-after-free vulnerability in the Infobars implementation in Google Chrome before 47.0.2526.73 allows remote attackers to cause a denial o (no CVSS) - [CVE-2015-6781](https://cve.now/CVE-2015-6781.md): Integer overflow in the FontData::Bound function in data/font\_data.cc in Google sfntly, as used in Google Chrome before 47.0.2526.73, allows (no CVSS) - [CVE-2015-6782](https://cve.now/CVE-2015-6782.md): The Document::open function in WebKit/Source/core/dom/Document.cpp in Google Chrome before 47.0.2526.73 does not ensure that page-dismissal (no CVSS) - [CVE-2015-6783](https://cve.now/CVE-2015-6783.md): The FindStartOffsetOfFileInZipFile function in crazy\_linker\_zip.cpp in crazy\_linker (aka Crazy Linker) in Android 5.x and 6.x, as used in Go (no CVSS) - [CVE-2015-6784](https://cve.now/CVE-2015-6784.md): The page serializer in Google Chrome before 47.0.2526.73 mishandles Mark of the Web (MOTW) comments for URLs containing a "--" sequence, whi (no CVSS) - [CVE-2015-6785](https://cve.now/CVE-2015-6785.md): The CSPSource::hostMatches function in WebKit/Source/core/frame/csp/CSPSource.cpp in the Content Security Policy (CSP) implementation in Goo (no CVSS) - [CVE-2015-6786](https://cve.now/CVE-2015-6786.md): The CSPSourceList::matches function in WebKit/Source/core/frame/csp/CSPSourceList.cpp in the Content Security Policy (CSP) implementation in (no CVSS) - [CVE-2015-6787](https://cve.now/CVE-2015-6787.md): Multiple unspecified vulnerabilities in Google Chrome before 47.0.2526.73 allow attackers to cause a denial of service or possibly have othe (no CVSS) - [CVE-2015-8478](https://cve.now/CVE-2015-8478.md): Multiple unspecified vulnerabilities in Google V8 before 4.7.80.23, as used in Google Chrome before 47.0.2526.73, allow attackers to cause a (no CVSS) - [CVE-2015-8479](https://cve.now/CVE-2015-8479.md): Use-after-free vulnerability in the AudioOutputDevice::OnDeviceAuthorized function in media/audio/audio\_output\_device.cc in Google Chrome be (no CVSS) - [CVE-2015-8480](https://cve.now/CVE-2015-8480.md): The VideoFramePool::PoolImpl::CreateFrame function in media/base/video\_frame\_pool.cc in Google Chrome before 47.0.2526.73 does not initializ (no CVSS) - [CVE-2015-1794](https://cve.now/CVE-2015-1794.md): The ssl3\_get\_key\_exchange function in ssl/s3\_clnt.c in OpenSSL 1.0.2 before 1.0.2e allows remote servers to cause a denial of service (segme (no CVSS) - [CVE-2015-3193](https://cve.now/CVE-2015-3193.md): The Montgomery squaring implementation in crypto/bn/asm/x86\_64-mont5.pl in OpenSSL 1.0.2 before 1.0.2e on the x86\_64 platform, as used by th (no CVSS) - [CVE-2015-3194](https://cve.now/CVE-2015-3194.md): crypto/rsa/rsa\_ameth.c in OpenSSL 1.0.1 before 1.0.1q and 1.0.2 before 1.0.2e allows remote attackers to cause a denial of service (NULL poi (no CVSS) - [CVE-2015-3195](https://cve.now/CVE-2015-3195.md): The ASN1\_TFLG\_COMBINE implementation in crypto/asn1/tasn\_dec.c in OpenSSL before 0.9.8zh, 1.0.0 before 1.0.0t, 1.0.1 before 1.0.1q, and 1.0. (no CVSS) - [CVE-2015-3196](https://cve.now/CVE-2015-3196.md): ssl/s3\_clnt.c in OpenSSL 1.0.0 before 1.0.0t, 1.0.1 before 1.0.1p, and 1.0.2 before 1.0.2d, when used for a multi-threaded client, writes th (no CVSS) --- Source: cve.now, built and run by Sazabi (AI-native observability and security) Page: https://cve.now/daily/2015-12-06 Site guide for agents: https://cve.now/llms.txt Uses NVD data; not endorsed by NVD.