CVEs published December 18, 2016
13 CVEs were published on December 18, 2016: 0 critical, 0 high.
- Published
- 13
- Critical
- 0
- High
- 0
- Medium
- 0
- Low
- 0
- Unrated
- 13
- Now in CISA KEV
- 0
- Fix available
- 0
Most affected products
- Chrome prior to 54.0.2840.59 for Windows, Mac, and Linux; 5…
- 9
- Chrome prior to 54.0 for iOS
- 1
- Chrome prior to 54.0.2840.59 for Windows
- 1
- Chrome prior to 54.0.2840.59 for Windows, Mac, and Linux
- 1
- Chrome prior to 54.0.2840.85 for Android
- 1
Medium, low and unrated 13
- CVE-2016-5181Blink in Google Chrome prior to 54.0.2840.59 for Windows, Mac, and Linux; 54.0.2840.85 for Android permitted execution of v8 microtasks whilChrome prior to 54.0.2840.59 for Windows, Mac, and Linux; 5…
- CVE-2016-5182Blink in Google Chrome prior to 54.0.2840.59 for Windows, Mac, and Linux; 54.0.2840.85 for Android had insufficient validation in bitmap hanChrome prior to 54.0.2840.59 for Windows, Mac, and Linux; 5…
- CVE-2016-5183A heap use after free in PDFium in Google Chrome prior to 54.0.2840.59 for Windows, Mac, and Linux; 54.0.2840.85 for Android allows a remoteChrome prior to 54.0.2840.59 for Windows, Mac, and Linux; 5…
- CVE-2016-5184PDFium in Google Chrome prior to 54.0.2840.59 for Windows, Mac, and Linux; 54.0.2840.85 for Android incorrectly handled object lifecycles inChrome prior to 54.0.2840.59 for Windows, Mac, and Linux; 5…
- CVE-2016-5185Blink in Google Chrome prior to 54.0.2840.59 for Windows, Mac, and Linux; 54.0.2840.85 for Android incorrectly allowed reentrance of FrameViChrome prior to 54.0.2840.59 for Windows, Mac, and Linux; 5…
- CVE-2016-5186Devtools in Google Chrome prior to 54.0.2840.59 for Windows, Mac, and Linux; 54.0.2840.85 for Android incorrectly handled objects after a taChrome prior to 54.0.2840.59 for Windows, Mac, and Linux; 5…
- CVE-2016-5187Google Chrome prior to 54.0.2840.85 for Android incorrectly handled rapid transition into and out of full screen mode, which allowed a remotChrome prior to 54.0.2840.85 for Android
- CVE-2016-5188Multiple issues in Blink in Google Chrome prior to 54.0.2840.59 for Windows, Mac, and Linux allow a remote attacker to spoof various parts oChrome prior to 54.0.2840.59 for Windows, Mac, and Linux
- CVE-2016-5189Google Chrome prior to 54.0.2840.59 for Windows, Mac, and Linux; 54.0.2840.85 for Android permitted navigation to blob URLs with non-canonicChrome prior to 54.0.2840.59 for Windows, Mac, and Linux; 5…
- CVE-2016-5190Google Chrome prior to 54.0.2840.59 for Windows, Mac, and Linux; 54.0.2840.85 for Android incorrectly handled object lifecycles during shutdChrome prior to 54.0.2840.59 for Windows, Mac, and Linux; 5…
- CVE-2016-5191Bookmark handling in Google Chrome prior to 54.0.2840.59 for Windows, Mac, and Linux; 54.0.2840.85 for Android had insufficient validation oChrome prior to 54.0.2840.59 for Windows, Mac, and Linux; 5…
- CVE-2016-5192Blink in Google Chrome prior to 54.0.2840.59 for Windows missed a CORS check on redirect in TextTrackLoader, which allowed a remote attackerChrome prior to 54.0.2840.59 for Windows
- CVE-2016-5193Google Chrome prior to 54.0 for iOS had insufficient validation of URLs for windows open by DOM, which allowed a remote attacker to bypass rChrome prior to 54.0 for iOS