# CVEs published 2016-03-06

16 CVEs were published on March 6, 2016: 0 critical, 0 high. Days are UTC.

- [CVE-2016-1630](https://cve.now/CVE-2016-1630.md): The ContainerNode::parserRemoveChild function in WebKit/Source/core/dom/ContainerNode.cpp in Blink, as used in Google Chrome before 49.0.262 (no CVSS)
- [CVE-2016-1631](https://cve.now/CVE-2016-1631.md): The PPB\_Flash\_MessageLoop\_Impl::InternalRun function in content/renderer/pepper/ppb\_flash\_message\_loop\_impl.cc in the Pepper plugin in Googl (no CVSS)
- [CVE-2016-1632](https://cve.now/CVE-2016-1632.md): The Extensions subsystem in Google Chrome before 49.0.2623.75 does not properly maintain own properties, which allows remote attackers to by (no CVSS)
- [CVE-2016-1633](https://cve.now/CVE-2016-1633.md): Use-after-free vulnerability in Blink, as used in Google Chrome before 49.0.2623.75, allows remote attackers to cause a denial of service or (no CVSS)
- [CVE-2016-1634](https://cve.now/CVE-2016-1634.md): Use-after-free vulnerability in the StyleResolver::appendCSSStyleSheet function in WebKit/Source/core/css/resolver/StyleResolver.cpp in Blin (no CVSS)
- [CVE-2016-1635](https://cve.now/CVE-2016-1635.md): extensions/renderer/render\_frame\_observer\_natives.cc in Google Chrome before 49.0.2623.75 does not properly consider object lifetimes and re (no CVSS)
- [CVE-2016-1636](https://cve.now/CVE-2016-1636.md): The PendingScript::notifyFinished function in WebKit/Source/core/dom/PendingScript.cpp in Google Chrome before 49.0.2623.75 relies on memory (no CVSS)
- [CVE-2016-1637](https://cve.now/CVE-2016-1637.md): The SkATan2\_255 function in effects/gradients/SkSweepGradient.cpp in Skia, as used in Google Chrome before 49.0.2623.75, mishandles arctange (no CVSS)
- [CVE-2016-1638](https://cve.now/CVE-2016-1638.md): extensions/renderer/resources/platform\_app.js in the Extensions subsystem in Google Chrome before 49.0.2623.75 does not properly restrict us (no CVSS)
- [CVE-2016-1639](https://cve.now/CVE-2016-1639.md): Use-after-free vulnerability in browser/extensions/api/webrtc\_audio\_private/webrtc\_audio\_private\_api.cc in the WebRTC Audio Private API impl (no CVSS)
- [CVE-2016-1640](https://cve.now/CVE-2016-1640.md): The Web Store inline-installer implementation in the Extensions UI in Google Chrome before 49.0.2623.75 does not block installations upon de (no CVSS)
- [CVE-2016-1641](https://cve.now/CVE-2016-1641.md): Use-after-free vulnerability in content/browser/web\_contents/web\_contents\_impl.cc in Google Chrome before 49.0.2623.75 allows remote attacke (no CVSS)
- [CVE-2016-1642](https://cve.now/CVE-2016-1642.md): Multiple unspecified vulnerabilities in Google Chrome before 49.0.2623.75 allow attackers to cause a denial of service or possibly have othe (no CVSS)
- [CVE-2016-2843](https://cve.now/CVE-2016-2843.md): Multiple unspecified vulnerabilities in Google V8 before 4.9.385.26, as used in Google Chrome before 49.0.2623.75, allow attackers to cause (no CVSS)
- [CVE-2016-2844](https://cve.now/CVE-2016-2844.md): WebKit/Source/core/layout/LayoutBlock.cpp in Blink, as used in Google Chrome before 49.0.2623.75, does not properly determine when anonymous (no CVSS)
- [CVE-2016-2845](https://cve.now/CVE-2016-2845.md): The Content Security Policy (CSP) implementation in Blink, as used in Google Chrome before 49.0.2623.75, does not ignore a URL's path compon (no CVSS)

---

Source: cve.now, built and run by Sazabi (AI-native observability and security)
Page: https://cve.now/daily/2016-03-06
Site guide for agents: https://cve.now/llms.txt
Uses NVD data; not endorsed by NVD.