# CVEs published 2016-02-14

6 CVEs were published on February 14, 2016: 0 critical, 0 high. Days are UTC.

- [CVE-2016-1622](https://cve.now/CVE-2016-1622.md): The Extensions subsystem in Google Chrome before 48.0.2564.109 does not prevent use of the Object.defineProperty method to override intended (no CVSS)
- [CVE-2016-1623](https://cve.now/CVE-2016-1623.md): The DOM implementation in Google Chrome before 48.0.2564.109 does not properly restrict frame-attach operations from occurring during or aft (no CVSS)
- [CVE-2016-1624](https://cve.now/CVE-2016-1624.md): Integer underflow in the ProcessCommandsInternal function in dec/decode.c in Brotli, as used in Google Chrome before 48.0.2564.109, allows r (no CVSS)
- [CVE-2016-1625](https://cve.now/CVE-2016-1625.md): The Chrome Instant feature in Google Chrome before 48.0.2564.109 does not ensure that a New Tab Page (NTP) navigation target is on the most- (no CVSS)
- [CVE-2016-1626](https://cve.now/CVE-2016-1626.md): The opj\_pi\_update\_decode\_poc function in pi.c in OpenJPEG, as used in PDFium in Google Chrome before 48.0.2564.109, miscalculates a certain (no CVSS)
- [CVE-2016-1627](https://cve.now/CVE-2016-1627.md): The Developer Tools (aka DevTools) subsystem in Google Chrome before 48.0.2564.109 does not validate URL schemes and ensure that the remoteB (no CVSS)

---

Source: cve.now, built and run by Sazabi (AI-native observability and security)
Page: https://cve.now/daily/2016-02-14
Site guide for agents: https://cve.now/llms.txt
Uses NVD data; not endorsed by NVD.