CVEs published January 19, 2017
39 CVEs were published on January 19, 2017: 0 critical, 1 high. 1 is now in CISA KEV.
- Published
- 39
- Critical
- 0
- High
- 1
- Medium
- 0
- Low
- 0
- Unrated
- 38
- Now in CISA KEV
- 1
- Fix available
- 2
Most affected products
- Google Chrome prior to 55.0.2883.75 for Mac, Windows and Li…
- 21
- Google Chrome prior to 54.0.2840.85 for Android
- 2
- Google Chrome prior to 54.0.2840.98 for Mac, and 54.0.2840.…
- 2
- Google Chrome prior to 55.0.2883.75 for Linux, Windows and…
- 2
- com.jcraft:jsch
- 1
- Google Chrome prior to 54.0.2840.100 for Linux, and 54.0.28…
- 1
- Google Chrome prior to 54.0.2840.90 for Linux, and 54.0.284…
- 1
- Google Chrome prior to 55.0.2883.75 for Linux and Windows,…
- 1
- Google Chrome prior to 55.0.2883.75 for Windows
- 1
- tqdm
- 1
High 1
Medium, low and unrated 38
- CVE-2016-5725Directory traversal vulnerability in JCraft JSch before 0.1.54 on Windows, when the mode is ChannelSftp.OVERWRITE, allows remote SFTP servercom.jcraft:jsch
- CVE-2015-8212CGI handling flaw in bozohttpd in NetBSD 6.0 through 6.0.6, 6.1 through 6.1.5, and 7.0 allows remote attackers to execute arbitrary code via
- CVE-2016-10075The tqdm._version module in tqdm versions 4.4.1 and 4.10 allows local users to execute arbitrary code via a crafted repo with a malicious gitqdm
- CVE-2016-7543Bash before 4.4 allows local users to execute arbitrary commands with root privileges via crafted SHELLOPTS and PS4 environment variables.
- CVE-2016-7545SELinux policycoreutils allows local users to execute arbitrary commands outside of the sandbox via a crafted TIOCSTI ioctl call.
- CVE-2016-7793sociomantic-tsunami git-hub before 0.10.3 allows remote attackers to execute arbitrary code via a crafted repository URL.
- CVE-2016-7794sociomantic-tsunami git-hub before 0.10.3 allows remote attackers to execute arbitrary code via a crafted repository name.
- CVE-2016-9016Firejail 0.9.38.4 allows local users to execute arbitrary commands outside of the sandbox via a crafted TIOCSTI ioctl call.
- CVE-2016-5196The content renderer client in Google Chrome prior to 54.0.2840.85 for Android insufficiently enforced the Same Origin Policy amongst downloGoogle Chrome prior to 54.0.2840.85 for Android
- CVE-2016-5197The content view client in Google Chrome prior to 54.0.2840.85 for Android insufficiently validated intent URLs, which allowed a remote attaGoogle Chrome prior to 54.0.2840.85 for Android
- CVE-2016-5199An off by one error resulting in an allocation of zero size in FFmpeg in Google Chrome prior to 54.0.2840.98 for Mac, and 54.0.2840.99 for WGoogle Chrome prior to 54.0.2840.98 for Mac, and 54.0.2840.…
- CVE-2016-5200V8 in Google Chrome prior to 54.0.2840.98 for Mac, and 54.0.2840.99 for Windows, and 54.0.2840.100 for Linux, and 55.0.2883.84 for Android iGoogle Chrome prior to 54.0.2840.98 for Mac, and 54.0.2840.…
- CVE-2016-5201A leak of privateClass in the extensions API in Google Chrome prior to 54.0.2840.100 for Linux, and 54.0.2840.99 for Windows, and 54.0.2840.Google Chrome prior to 54.0.2840.100 for Linux, and 54.0.28…
- CVE-2016-5203A use after free in PDFium in Google Chrome prior to 55.0.2883.75 for Mac, Windows and Linux, and 55.0.2883.84 for Android allowed a remote Google Chrome prior to 55.0.2883.75 for Mac, Windows and Li…
- CVE-2016-5204Leaking of an SVG shadow tree leading to corruption of the DOM tree in Blink in Google Chrome prior to 55.0.2883.75 for Mac, Windows and LinGoogle Chrome prior to 55.0.2883.75 for Mac, Windows and Li…
- CVE-2016-5205Blink in Google Chrome prior to 55.0.2883.75 for Linux, Windows and Mac, incorrectly handles deferred page loads, which allowed a remote attGoogle Chrome prior to 55.0.2883.75 for Linux, Windows and…
- CVE-2016-5206The PDF plugin in Google Chrome prior to 55.0.2883.75 for Mac, Windows and Linux, and 55.0.2883.84 for Android incorrectly followed redirectGoogle Chrome prior to 55.0.2883.75 for Mac, Windows and Li…
- CVE-2016-5207In Blink in Google Chrome prior to 55.0.2883.75 for Mac, Windows and Linux, and 55.0.2883.84 for Android, corruption of the DOM tree could oGoogle Chrome prior to 55.0.2883.75 for Mac, Windows and Li…
- CVE-2016-5208Blink in Google Chrome prior to 55.0.2883.75 for Linux and Windows, and 55.0.2883.84 for Android allowed possible corruption of the DOM treeGoogle Chrome prior to 55.0.2883.75 for Linux and Windows,…
- CVE-2016-5209Bad casting in bitmap manipulation in Blink in Google Chrome prior to 55.0.2883.75 for Mac, Windows and Linux, and 55.0.2883.84 for Android Google Chrome prior to 55.0.2883.75 for Mac, Windows and Li…
- CVE-2016-5210Heap buffer overflow during TIFF image parsing in PDFium in Google Chrome prior to 55.0.2883.75 for Mac, Windows and Linux, and 55.0.2883.84Google Chrome prior to 55.0.2883.75 for Mac, Windows and Li…
- CVE-2016-5211A use after free in PDFium in Google Chrome prior to 55.0.2883.75 for Mac, Windows and Linux, and 55.0.2883.84 for Android allowed a remote Google Chrome prior to 55.0.2883.75 for Mac, Windows and Li…
- CVE-2016-5212Google Chrome prior to 55.0.2883.75 for Mac, Windows and Linux, and 55.0.2883.84 for Android insufficiently sanitized DevTools URLs, which aGoogle Chrome prior to 55.0.2883.75 for Mac, Windows and Li…
- CVE-2016-5213A use after free in V8 in Google Chrome prior to 55.0.2883.75 for Mac, Windows and Linux, and 55.0.2883.84 for Android allowed a remote attaGoogle Chrome prior to 55.0.2883.75 for Mac, Windows and Li…
- CVE-2016-5214Google Chrome prior to 55.0.2883.75 for Windows mishandled downloaded files, which allowed a remote attacker to prevent the downloaded file Google Chrome prior to 55.0.2883.75 for Windows
- CVE-2016-5215A use after free in webaudio in Google Chrome prior to 55.0.2883.75 for Mac, Windows and Linux, and 55.0.2883.84 for Android allowed a remotGoogle Chrome prior to 55.0.2883.75 for Mac, Windows and Li…
- CVE-2016-5216A use after free in PDFium in Google Chrome prior to 55.0.2883.75 for Mac, Windows and Linux, and 55.0.2883.84 for Android allowed a remote Google Chrome prior to 55.0.2883.75 for Mac, Windows and Li…
- CVE-2016-5217The extensions API in Google Chrome prior to 55.0.2883.75 for Mac, Windows and Linux, and 55.0.2883.84 for Android incorrectly permitted accGoogle Chrome prior to 55.0.2883.75 for Mac, Windows and Li…
- CVE-2016-5218The extensions API in Google Chrome prior to 55.0.2883.75 for Mac, Windows and Linux, and 55.0.2883.84 for Android incorrectly handled navigGoogle Chrome prior to 55.0.2883.75 for Mac, Windows and Li…
- CVE-2016-5219A heap use after free in V8 in Google Chrome prior to 55.0.2883.75 for Mac, Windows and Linux, and 55.0.2883.84 for Android allowed a remoteGoogle Chrome prior to 55.0.2883.75 for Mac, Windows and Li…
- CVE-2016-5220PDFium in Google Chrome prior to 55.0.2883.75 for Mac, Windows and Linux, and 55.0.2883.84 for Android incorrectly handled navigation withinGoogle Chrome prior to 55.0.2883.75 for Mac, Windows and Li…
- CVE-2016-5221Type confusion in libGLESv2 in ANGLE in Google Chrome prior to 55.0.2883.75 for Mac, Windows and Linux, and 55.0.2883.84 for Android possiblGoogle Chrome prior to 55.0.2883.75 for Mac, Windows and Li…
- CVE-2016-5222Incorrect handling of invalid URLs in Google Chrome prior to 55.0.2883.75 for Mac, Windows and Linux, and 55.0.2883.84 for Android allowed aGoogle Chrome prior to 55.0.2883.75 for Mac, Windows and Li…
- CVE-2016-5223Integer overflow in PDFium in Google Chrome prior to 55.0.2883.75 for Mac, Windows and Linux, and 55.0.2883.84 for Android allowed a remote Google Chrome prior to 55.0.2883.75 for Mac, Windows and Li…
- CVE-2016-5224A timing attack on denormalized floating point arithmetic in SVG filters in Blink in Google Chrome prior to 55.0.2883.75 for Mac, Windows anGoogle Chrome prior to 55.0.2883.75 for Mac, Windows and Li…
- CVE-2016-5225Blink in Google Chrome prior to 55.0.2883.75 for Mac, Windows and Linux, and 55.0.2883.84 for Android incorrectly handled form actions, whicGoogle Chrome prior to 55.0.2883.75 for Mac, Windows and Li…
- CVE-2016-5226Blink in Google Chrome prior to 55.0.2883.75 for Linux, Windows and Mac executed javascript: URLs entered in the URL bar in the context of tGoogle Chrome prior to 55.0.2883.75 for Linux, Windows and…
- CVE-2016-9650Blink in Google Chrome prior to 55.0.2883.75 for Mac, Windows and Linux, and 55.0.2883.84 for Android incorrectly handled iframes, which allGoogle Chrome prior to 55.0.2883.75 for Mac, Windows and Li…