https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Fri, 02 Oct 2026 23:16:34 +0000 https://cve.radiocsirt.org/vuln/certfr-2016-avi-247 certfr-2016-avi-247 https://cve.radiocsirt.org/vuln/certfr-2016-avi-247 https://cve.radiocsirt.org/vuln/cnvd-2016-05598 cnvd-2016-05598 https://cve.radiocsirt.org/vuln/cnvd-2016-05598 https://cve.radiocsirt.org/vuln/euvd-2026-85008 EUVD-2026-85008 https://cve.radiocsirt.org/vuln/euvd-2026-85008 https://cve.radiocsirt.org/vuln/fkie_cve-2016-5132 <p>The Service Workers subsystem in Google Chrome before 52.0.2743.82 does not properly implement the Secure Contexts specification during decisions about whether to control a subframe, which allows remote attackers to bypass the Same Origin Policy via an https IFRAME element inside an http IFRAME element.</p> <p>The Service Workers subsystem in Google Chrome before 52.0.2743.82 does not properly implement the Secure Contexts specification during decisions about whether to control a subframe, which allows remote attackers to bypass the Same Origin Policy via an https IFRAME element inside an http IFRAME element.</p> https://cve.radiocsirt.org/vuln/fkie_cve-2016-5132 https://cve.radiocsirt.org/vuln/ghsa-682g-9hxq-jvvv <p>The Service Workers subsystem in Google Chrome before 52.0.2743.82 does not properly implement the Secure Contexts specification during decisions about whether to control a subframe, which allows remote attackers to bypass the Same Origin Policy via an https IFRAME element inside an http IFRAME element.</p> <p>The Service Workers subsystem in Google Chrome before 52.0.2743.82 does not properly implement the Secure Contexts specification during decisions about whether to control a subframe, which allows remote attackers to bypass the Same Origin Policy via an https IFRAME element inside an http IFRAME element.</p> https://cve.radiocsirt.org/vuln/ghsa-682g-9hxq-jvvv https://cve.radiocsirt.org/vuln/gsd-2016-5132 gsd-2016-5132 https://cve.radiocsirt.org/vuln/gsd-2016-5132 https://cve.radiocsirt.org/vuln/opensuse-su-2016:1868-1 <p>Security update for Chromium</p> <p>Security update for Chromium</p> https://cve.radiocsirt.org/vuln/opensuse-su-2016:1868-1 https://cve.radiocsirt.org/vuln/rhsa-2016:1485 <p>chromium-browser: various fixes from internal audits chromium-browser: sandbox escape in ppapi chromium-browser: use-after-free in extensions chromium-browser: heap-buffer-overflow in sfntly chromium-browser: same-origin bypass in blink chromium-browser: same-origin bypass in blink chromium-browser: use-after-free in blink chromium-browser: same-origin bypass in v8 chromium-browser: memory corruption in v8 chromium-browser: url spoofing libxml2: Use after free triggered by XPointer paths beginning with range-to chromium-browser: limited same-origin bypass in service workers chromium-browser: origin confusion in proxy authentication chromium-browser: url leakage via pac script chromium-browser: content-security-policy bypass chromium-browser: use after free in extensions chromium-browser: history sniffing with hsts and csp</p> <p>chromium-browser: various fixes from internal audits chromium-browser: sandbox escape in ppapi chromium-browser: use-after-free in extensions chromium-browser: heap-buffer-overflow in sfntly chromium-browser: same-origin bypass in blink chromium-browser: same-origin bypass in blink chromium-browser: use-after-free in blink chromium-browser: same-origin bypass in v8 chromium-browser: memory corruption in v8 chromium-browser: url spoofing libxml2: Use after free triggered by XPointer paths beginning with range-to chromium-browser: limited same-origin bypass in service workers chromium-browser: origin confusion in proxy authentication chromium-browser: url leakage via pac script chromium-browser: content-security-policy bypass chromium-browser: use after free in extensions chromium-browser: history sniffing with hsts and csp</p> https://cve.radiocsirt.org/vuln/rhsa-2016:1485 https://cve.radiocsirt.org/vuln/ubuntu-cve-2016-5132 <p><strong>Affected:</strong> Ubuntu:14.04:LTS: chromium-browser, Ubuntu:14.04:LTS: oxide-qt, Ubuntu:16.04:LTS: chromium-browser, Ubuntu:16.04:LTS: oxide-qt</p> <p>The Service Workers subsystem in Google Chrome before 52.0.2743.82 does not properly implement the Secure Contexts specification during decisions about whether to control a subframe, which allows remote attackers to bypass the Same Origin Policy via an https IFRAME element inside an http IFRAME element.</p> <p><strong>Affected:</strong> Ubuntu:14.04:LTS: chromium-browser, Ubuntu:14.04:LTS: oxide-qt, Ubuntu:16.04:LTS: chromium-browser, Ubuntu:16.04:LTS: oxide-qt</p> <p>The Service Workers subsystem in Google Chrome before 52.0.2743.82 does not properly implement the Secure Contexts specification during decisions about whether to control a subframe, which allows remote attackers to bypass the Same Origin Policy via an https IFRAME element inside an http IFRAME element.</p> https://cve.radiocsirt.org/vuln/ubuntu-cve-2016-5132