https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-02T22:19:03.255776+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/bdu:2016-02051 bdu:2016-02051 2026-10-02T22:19:03.323992+00:00 bdu:2016-02051 https://cve.radiocsirt.org/vuln/certfr-2016-avi-247 certfr-2016-avi-247 — De multiples vulnérabilités ont été corrigées dans <span class="textit">Google Chrome</span>. Elles permettent à un att… 2026-10-02T22:19:03.324039+00:00 certfr-2016-avi-247 https://cve.radiocsirt.org/vuln/cnvd-2016-05480 cnvd-2016-05480 2026-10-02T22:19:03.324059+00:00 cnvd-2016-05480 https://cve.radiocsirt.org/vuln/euvd-2026-82434 EUVD-2026-82434 2026-10-02T22:19:03.324072+00:00 EUVD-2026-82434 https://cve.radiocsirt.org/vuln/fkie_cve-2016-1706 fkie_cve-2016-1706 2026-10-02T22:19:03.324082+00:00

The PPAPI implementation in Google Chrome before 52.0.2743.82 does not validate the origin of IPC messages to the plugin broker process that should have come from the browser process, which allows remote attackers to bypass a sandbox protection mechanism via an unexpected message type, related to broker_process_dispatcher.cc, ppapi_plugin_process_host.cc, ppapi_thread.cc, and render_frame_message_filter.cc.

 https://cve.radiocsirt.org/vuln/ghsa-4c3c-m7vg-64hg GHSA-4c3c-m7vg-64hg 2026-10-02T22:19:03.324112+00:00

The PPAPI implementation in Google Chrome before 52.0.2743.82 does not validate the origin of IPC messages to the plugin broker process that should have come from the browser process, which allows remote attackers to bypass a sandbox protection mechanism via an unexpected message type, related to broker_process_dispatcher.cc, ppapi_plugin_process_host.cc, ppapi_thread.cc, and render_frame_message_filter.cc.

 https://cve.radiocsirt.org/vuln/gsd-2016-1706 gsd-2016-1706 2026-10-02T22:19:03.324128+00:00 gsd-2016-1706 https://cve.radiocsirt.org/vuln/opensuse-su-2016:1868-1 openSUSE-SU-2016:1868-1 — Security update for Chromium 2026-10-02T22:19:03.324138+00:00

Security update for Chromium

 https://cve.radiocsirt.org/vuln/rhsa-2016:1485 RHSA-2016:1485 — Red Hat Security Advisory: chromium-browser security update 2026-10-02T22:19:03.324162+00:00

chromium-browser: various fixes from internal audits chromium-browser: sandbox escape in ppapi chromium-browser: use-after-free in extensions chromium-browser: heap-buffer-overflow in sfntly chromium-browser: same-origin bypass in blink chromium-browser: same-origin bypass in blink chromium-browser: use-after-free in blink chromium-browser: same-origin bypass in v8 chromium-browser: memory corruption in v8 chromium-browser: url spoofing libxml2: Use after free triggered by XPointer paths beginning with range-to chromium-browser: limited same-origin bypass in service workers chromium-browser: origin confusion in proxy authentication chromium-browser: url leakage via pac script chromium-browser: content-security-policy bypass chromium-browser: use after free in extensions chromium-browser: history sniffing with hsts and csp

 https://cve.radiocsirt.org/vuln/ubuntu-cve-2016-1706 UBUNTU-CVE-2016-1706 2026-10-02T22:19:03.324196+00:00

Affected: Ubuntu:14.04:LTS: chromium-browser, Ubuntu:14.04:LTS: oxide-qt, Ubuntu:16.04:LTS: chromium-browser, Ubuntu:16.04:LTS: oxide-qt

The PPAPI implementation in Google Chrome before 52.0.2743.82 does not validate the origin of IPC messages to the plugin broker process that should have come from the browser process, which allows remote attackers to bypass a sandbox protection mechanism via an unexpected message type, related to broker_process_dispatcher.cc, ppapi_plugin_process_host.cc, ppapi_thread.cc, and render_frame_message_filter.cc.