CVE-2019-13730

all versions

Type confusion in JavaScript in Google Chrome prior to 79.0.3945.79 allowed a remote attacker to potentially exploit heap corrupti

8.8HIGH

CVE-2019-9811

all versions

As part of a winning Pwn2Own entry, a researcher demonstrated a sandbox escape by installing a malicious language pack and then op

8.3HIGH

CVE-2019-11717

all versions

A vulnerability exists where the caret ("^") character is improperly escaped constructing some URIs due to it being used as a sepa

5.3MEDIUM

CVE-2019-11338

all versions

libavcodec/hevcdec.c in FFmpeg 3.4 and 4.1.2 mishandles detection of duplicate first slices, which allows remote attackers to caus

8.8HIGH

CVE-2017-8932

all versions

A bug in the standard library ScalarMult implementation of curve P-256 for amd64 architectures in Go before 1.7.6 and 1.8.x before

5.9MEDIUM

CVE-2016-4303

all versions

The parse_string function in cjson.c in the cJSON library mishandles UTF8/16 strings, which allows remote attackers to cause a den

9.8CRITICAL

CVE-2016-1704

all versions

Multiple unspecified vulnerabilities in Google Chrome before 51.0.2704.103 allow attackers to cause a denial of service or possibl

8.8HIGH

CVE-2016-2818

all versions

Multiple unspecified vulnerabilities in the browser engine in Mozilla Firefox before 47.0 and Firefox ESR 45.x before 45.2 allow r

8.8HIGH

CVE-2016-1658

all versions

The Extensions subsystem in Google Chrome before 50.0.2661.75 incorrectly relies on GetOrigin method calls for origin comparisons,

4.3MEDIUM

CVE-2016-1657

all versions

The WebContentsImpl::FocusLocationBarByDefault function in content/browser/web_contents/web_contents_impl.cc in Google Chrome befo

4.3MEDIUM

CVE-2016-1957

all versions

Memory leak in libstagefright in Mozilla Firefox before 45.0 and Firefox ESR 38.x before 38.7 allows remote attackers to cause a d

4.3MEDIUM

CVE-2016-1956

all versions

Mozilla Firefox before 45.0 on Linux, when an Intel video driver is used, allows remote attackers to cause a denial of service (me

6.5MEDIUM

CVE-2016-1955

all versions

Mozilla Firefox before 45.0 allows remote attackers to bypass the Same Origin Policy and obtain sensitive information by reading a

4.3MEDIUM

CVE-2016-1954

all versions

The nsCSPContext::SendReports function in dom/security/nsCSPContext.cpp in Mozilla Firefox before 45.0 and Firefox ESR 38.x before

8.8HIGH

CVE-2016-1953

all versions

Multiple unspecified vulnerabilities in the browser engine in Mozilla Firefox before 45.0 allow remote attackers to cause a denial

8.8HIGH

CVE-2016-1952

all versions

Multiple unspecified vulnerabilities in the browser engine in Mozilla Firefox before 45.0 and Firefox ESR 38.x before 38.7 allow r

8.8HIGH

CVE-2016-1629

all versions

Google Chrome before 48.0.2564.116 allows remote attackers to bypass the Blink Same Origin Policy and a sandbox protection mechani

9.8CRITICAL