https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-03T06:07:09.563128+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/bdu:2016-00656 bdu:2016-00656 2026-10-03T06:07:09.570054+00:00 bdu:2016-00656 https://cve.radiocsirt.org/vuln/cnvd-2016-01502 cnvd-2016-01502 2026-10-03T06:07:09.570087+00:00 cnvd-2016-01502 https://cve.radiocsirt.org/vuln/euvd-2026-83208 EUVD-2026-83208 2026-10-03T06:07:09.570102+00:00 EUVD-2026-83208 https://cve.radiocsirt.org/vuln/fkie_cve-2016-2845 fkie_cve-2016-2845 2026-10-03T06:07:09.570114+00:00

The Content Security Policy (CSP) implementation in Blink, as used in Google Chrome before 49.0.2623.75, does not ignore a URL's path component in the case of a ServiceWorker fetch, which allows remote attackers to obtain sensitive information about visited web pages by reading CSP violation reports, related to FrameFetchContext.cpp and ResourceFetcher.cpp.

 https://cve.radiocsirt.org/vuln/ghsa-gpvp-v7vw-rjmm GHSA-gpvp-v7vw-rjmm 2026-10-03T06:07:09.570148+00:00

The Content Security Policy (CSP) implementation in Blink, as used in Google Chrome before 49.0.2623.75, does not ignore a URL's path component in the case of a ServiceWorker fetch, which allows remote attackers to obtain sensitive information about visited web pages by reading CSP violation reports, related to FrameFetchContext.cpp and ResourceFetcher.cpp.

 https://cve.radiocsirt.org/vuln/gsd-2016-2845 gsd-2016-2845 2026-10-03T06:07:09.570168+00:00 gsd-2016-2845 https://cve.radiocsirt.org/vuln/rhsa-2016:0359 RHSA-2016:0359 — Red Hat Security Advisory: chromium-browser security update 2026-10-03T06:07:09.570180+00:00

chromium-browser: same-origin bypass in Blink chromium-browser: same-origin bypass in Pepper Plugin chromium-browser: bad cast in Extensions chromium-browser: use-after-free in Blink chromium-browser: use-after-free in Blink chromium-browser: use-after-free in Blink chromium-browser: SRI Validation Bypass chromium-browser: information leak in Skia chromium-browser: WebAPI Bypass chromium-browser: use-after-free in WebRTC chromium-browser: origin confusion in Extensions UI chromium-browser: use-after-free in Favicon chromium-browser: various fixes from internal audits chromium-browser: Multiple unspecified vulnerabilities in V8 before 4.9.385.26 chromium-browser: LayoutBlock.cpp in Blink does not properly determine when anonymous block wrappers may exist chromium-browser: CSP implementation in Blink does not ignore a URL's path component in the case of a ServiceWorker fetch

 https://cve.radiocsirt.org/vuln/ubuntu-cve-2016-2845 UBUNTU-CVE-2016-2845 2026-10-03T06:07:09.570215+00:00

Affected: Ubuntu:14.04:LTS: chromium-browser, Ubuntu:14.04:LTS: oxide-qt

The Content Security Policy (CSP) implementation in Blink, as used in Google Chrome before 49.0.2623.75, does not ignore a URL's path component in the case of a ServiceWorker fetch, which allows remote attackers to obtain sensitive information about visited web pages by reading CSP violation reports, related to FrameFetchContext.cpp and ResourceFetcher.cpp.