Skip to contentRedhat Desktop vulnerabilities
- google chrome, debian linux, opensuse leap +5 more +7 moreThe Autofill implementation in Google Chrome before 51.0.2704.63 mishandles the interaction...CVE-2016-1690Fix available7.5 High
- google chrome, debian linux, opensuse leap +5 more +7 moreThe renderer implementation in Google Chrome before 51.0.2704.63 does not properly restrict...CVE-2016-1687Fix available6.5 Medium
- google chrome, debian linux, opensuse leap +5 more +7 moreThe CPDF_DIBSource::CreateDecoder function in core/fpdfapi/fpdf_render/fpdf_render_loadimage.cpp...CVE-2016-1686Fix available6.5 Medium
- google chrome, debian linux, opensuse leap +5 more +7 morecore/fxge/ge/fx_ge_text.cpp in PDFium, as used in Google Chrome before 51.0.2704.63,...CVE-2016-1685Fix available6.5 Medium
- google chrome, debian linux, opensuse leap +5 more +7 moreHeap-based buffer overflow in the opj_j2k_read_SPCod_SPCoc function in j2k.c in OpenJPEG, as used...CVE-2016-1681Fix available8.8 High
- google chrome, debian linux, opensuse leap +5 more +7 moreextensions/renderer/resources/binding.js in the extension bindings in Google Chrome before 51.0...CVE-2016-1676Fix available8.8 High
- google chrome, debian linux, opensuse leap +5 more +7 moreThe extensions subsystem in Google Chrome before 51.0.2704.63 allows remote attackers to bypass...CVE-2016-1674Fix available8.8 High
- google chrome, debian linux, opensuse leap +5 more +7 moreThe ModuleSystem::RequireForJsInner function in extensions/renderer/module_system.cc in the...CVE-2016-1672Fix available8.8 High
- google chrome, canonical ubuntu linux, debian linux +6 more +8 moreMultiple unspecified vulnerabilities in Google Chrome before 51.0.2704.63 allow attackers to...CVE-2016-1695Fix available8.8 High
- google chrome, canonical ubuntu linux, debian linux +6 more +8 moreWebKit/Source/core/css/StyleSheetContents.cpp in Blink, as used in Google Chrome before 51.0.2704...CVE-2016-1692Fix available5.3 Medium
- google chrome, canonical ubuntu linux, debian linux +6 more +8 moreSkia, as used in Google Chrome before 51.0.2704.63, mishandles coincidence runs, which allows...CVE-2016-1691Fix available7.5 High
- google chrome, canonical ubuntu linux, debian linux +6 more +8 moreHeap-based buffer overflow in content/renderer/media/canvas_capture_handler.cc in Google Chrome...CVE-2016-1689Fix available6.5 Medium
- google chrome, v8, canonical ubuntu linux +7 more +9 moreThe regexp (aka regular expression) implementation in Google V8 before 5.0.71.40, as used in...CVE-2016-1688Fix available6.5 Medium
- google chrome, xmlsoft libxslt, canonical ubuntu linux +7 more +9 morenumbers.c in libxslt before 1.1.29, as used in Google Chrome before 51.0.2704.63, mishandles...CVE-2016-1683Fix available7.5 High
- google chrome, canonical ubuntu linux, debian linux +6 more +8 moreThe ServiceWorkerContainer::registerServiceWorkerImpl function in WebKit/Source/modules...CVE-2016-1682Fix available6.1 Medium
- google chrome, canonical ubuntu linux, debian linux +6 more +8 moreUse-after-free vulnerability in ports/SkFontHost_FreeType.cpp in Skia, as used in Google Chrome...CVE-2016-1680Fix available8.8 High
- google chrome, canonical ubuntu linux, debian linux +6 more +8 moreThe ToV8Value function in content/child/v8_value_converter_impl.cc in the V8 bindings in Google...CVE-2016-1679Fix available8.8 High
- google chrome, v8, canonical ubuntu linux +7 more +9 moreobjects.cc in Google V8 before 5.0.71.32, as used in Google Chrome before 51.0.2704.63, does not...CVE-2016-1678Fix available8.8 High
- google chrome, v8, canonical ubuntu linux +7 more +9 moreuri.js in Google V8 before 5.1.281.26, as used in Google Chrome before 51.0.2704.63, uses an...CVE-2016-1677Fix available6.5 Medium
- google chrome, canonical ubuntu linux, debian linux +6 more +8 moreBlink, as used in Google Chrome before 51.0.2704.63, allows remote attackers to bypass the Same...CVE-2016-1675Fix available8.8 High
- google chrome, canonical ubuntu linux, debian linux +6 more +8 moreBlink, as used in Google Chrome before 51.0.2704.63, allows remote attackers to bypass the Same...CVE-2016-1673Fix available8.8 High
- debian linux, linux kernel, canonical ubuntu linux +8 more +10 moresound/core/timer.c in the Linux kernel through 4.6 does not initialize certain r1 data structures...CVE-2016-4578Public exploitFix available5.5 Medium
- redhat enterprise linux desktop, enterprise linux hpc node, enterprise linux server +1 more +3 moremod_ns in Red Hat Enterprise Linux Desktop 7, Red Hat Enterprise Linux HPC Node 7, Red Hat...CVE-2016-3099Fix available7.5 High
- apple tvos, watchos, xmlsoft libxml2 +11 more +13 moreHeap-based buffer overflow in the xmlFAParsePosCharGroup function in libxml2 before 2.9.4, as...CVE-2016-1840Fix available7.8 High
- apple tvos, watchos, xmlsoft libxml2 +11 more +13 moreThe xmlDictAddString function in libxml2 before 2.9.4, as used in Apple iOS before 9.3.2, OS X...CVE-2016-1839Public exploitFix available5.5 Medium
- apple tvos, watchos, xmlsoft libxml2 +11 more +13 moreThe xmlPArserPrintFileContextInternal function in libxml2 before 2.9.4, as used in Apple iOS...CVE-2016-1838Public exploitFix available5.5 Medium
- apple tvos, watchos, xmlsoft libxml2 +11 more +13 moreMultiple use-after-free vulnerabilities in the (1) htmlPArsePubidLiteral and (2)...CVE-2016-1837Fix available5.5 Medium
- apple tvos, watchos, xmlsoft libxml2 +11 more +13 moreUse-after-free vulnerability in the xmlDictComputeFastKey function in libxml2 before 2.9.4, as...CVE-2016-1836Fix available5.5 Medium
- apple tvos, watchos, xmlsoft libxml2 +11 more +13 moreHeap-based buffer overflow in the xmlStrncat function in libxml2 before 2.9.4, as used in Apple...CVE-2016-1834Public exploitFix available7.8 High
- apple tvos, watchos, xmlsoft libxml2 +11 more +13 moreThe htmlCurrentChar function in libxml2 before 2.9.4, as used in Apple iOS before 9.3.2, OS X...CVE-2016-1833Fix available5.5 Medium
- libndp, canonical ubuntu linux, debian linux +7 more +9 morelibndp before 1.6, as used in NetworkManager, does not properly validate the origin of Neighbor...CVE-2016-3698Fix available8.1 High
- ibm java sdk, novell suse linux enterprise module for legacy software, suse linux enterprise server +10 more +12 moreThe com.ibm.rmi.io.SunSerializableFactory class in IBM SDK, Java Technology Edition 6 before SR16...CVE-2016-03768.1 High
- ibm java sdk, novell suse linux enterprise module for legacy software, suse linux enterprise server +10 more +12 moreThe com.ibm.CORBA.iiop.ClientDelegate class in IBM SDK, Java Technology Edition 6 before SR16...CVE-2016-03638.1 High
- ibm java sdk, redhat enterprise linux desktop, enterprise linux hpc node supplementary +9 more +11 moreBuffer overflow in the Java Virtual Machine (JVM) in IBM SDK, Java Technology Edition 6 before...CVE-2016-02645.6 Medium
- linux kernel, canonical ubuntu linux, redhat enterprise linux desktop +6 more +8 moreInteger overflow in lib/asn1_decoder.c in the Linux kernel before 4.6 allows local users to gain...CVE-2016-0758Fix available7.8 High
- adobe flash player, opensuse evergreen, opensuse +6 more +8 moreAdobe Flash Player 21.0.0.226 and earlier allows remote attackers to execute arbitrary code via...CVE-2016-4117In KEVPublic exploitFix availableEPSS 94.3%9.8 Critical
- qemu, canonical ubuntu linux, citrix xenserver +8 more +10 moreInteger overflow in the VGA module in QEMU allows local guest OS users to cause a denial of...CVE-2016-3712Fix available5.5 Medium
- qemu, canonical ubuntu linux, citrix xenserver +11 more +13 moreThe VGA module in QEMU improperly performs bounds checking on banked access to video memory,...CVE-2016-3710Fix available8.8 High
- imagemagick, canonical ubuntu linux, opensuse leap +27 more +29 moreThe (1) HTTP and (2) FTP coders in ImageMagick before 6.9.3-10 and 7.x before 7.0.1-1 allow...CVE-2016-3718In KEVPublic exploitFix availableEPSS 75.6%5.5 Medium
- imagemagick, canonical ubuntu linux, redhat enterprise linux desktop +7 more +9 moreThe LABEL coder in ImageMagick before 6.9.3-10 and 7.x before 7.0.1-1 allows remote attackers to...CVE-2016-3717Public exploitFix availableEPSS 20.4%5.5 Medium
- imagemagick, canonical ubuntu linux, redhat enterprise linux desktop +7 more +9 moreThe MSL coder in ImageMagick before 6.9.3-10 and 7.x before 7.0.1-1 allows remote attackers to...CVE-2016-3716Public exploitFix availableEPSS 11.3%3.3 Low
- imagemagick, canonical ubuntu linux, opensuse leap +27 more +29 moreThe EPHEMERAL coder in ImageMagick before 6.9.3-10 and 7.x before 7.0.1-1 allows remote attackers...CVE-2016-3715In KEVPublic exploitFix availableEPSS 75.3%5.5 Medium
- xmlsoft libxml2, canonical ubuntu linux, debian linux +11 more +13 moreThe xmlStringGetNodeList function in tree.c in libxml2 2.9.3 and earlier, when used in recovery...CVE-2016-3627Public exploitFix available7.5 High
- openssl, google android, redhat enterprise linux desktop +6 more +8 moreThe ASN.1 implementation in OpenSSL before 1.0.1o and 1.0.2 before 1.0.2c allows remote attackers...CVE-2016-2108Fix availableEPSS 77.9%9.8 Critical
- openssl, canonical ubuntu linux, debian linux +12 more +14 moreThe AES-NI implementation in OpenSSL before 1.0.1t and 1.0.2 before 1.0.2h does not consider...CVE-2016-2107Public exploitFix availableEPSS 89.1%5.9 Medium
- openssl, redhat enterprise linux desktop, enterprise linux hpc node +5 more +7 moreInteger overflow in the EVP_EncryptUpdate function in crypto/evp/evp_enc.c in OpenSSL before 1.0...CVE-2016-2106Fix availableEPSS 27.3%7.5 High
- openssl, apple mac os x, canonical ubuntu linux +12 more +14 moreInteger overflow in the EVP_EncodeUpdate function in crypto/evp/encode.c in OpenSSL before 1.0.1t...CVE-2016-2105Fix availableEPSS 39.6%7.5 High
- google chrome, opensuse, redhat enterprise linux desktop supplementary +3 more +5 moreThe HistoryController::UpdateForCommit function in content/renderer/history_controller.cc in...CVE-2016-1664Fix available4.3 Medium
- google chrome, opensuse, redhat enterprise linux desktop supplementary +3 more +5 moreextensions/renderer/gc_callback.cc in Google Chrome before 50.0.2661.94 does not prevent fallback...CVE-2016-1662Fix available9.8 Critical
- ntp, debian linux, freebsd +13 more +15 moreThe MATCH_ASSOC function in NTP before version 4.2.8p9 and 4.3.x before 4.3.92 allows remote...CVE-2016-2518Fix availableEPSS 15.1%5.3 Medium
- Show moreLoading…