Published: 13/03/2016 Updated: 07/11/2023

CVSS v2 Base Score: 9.3 | Impact Score: 10 | Exploitability Score: 8.6

CVSS v3 Base Score: 8.8 | Impact Score: 5.9 | Exploitability Score: 2.8

VMScore: 828

Vector: AV:N/AC:M/Au:N/C:C/I:C/A:C

WebKit/Source/core/layout/LayoutObject.cpp in Blink, as used in Google Chrome prior to 49.0.2623.87, does not properly restrict relayout scheduling, which allows remote malicious users to cause a denial of service (use-after-free) or possibly have unspecified other impact via a crafted HTML document.

Vulnerable Product	Search on Vulmon	Subscribe to Product
google chrome

Several security issues were fixed in Oxide ...

Several vulnerabilities have been discovered in the chromium web browser CVE-2016-1643 cloudfuzzer discovered a type confusion issue in Blink/Webkit CVE-2016-1644 Atte Kettunen discovered a use-after-free issue in Blink/Webkit CVE-2016-1645 An out-of-bounds write issue was discovered in the pdfium library For the stable distributi ...

WebKit/Source/core/layout/LayoutObjectcpp in Blink, as used in Google Chrome before 490262387, does not properly restrict relayout scheduling, which allows remote attackers to cause a denial of service (use-after-free) or possibly have unspecified other impact via a crafted HTML document ...

NVD-CWE-Other http://www.securitytracker.com/id/1035259 http://www.debian.org/security/2016/dsa-3513 http://lists.opensuse.org/opensuse-security-announce/2016-03/msg00067.html http://googlechromereleases.blogspot.com/2016/03/stable-channel-update_8.html https://code.google.com/p/chromium/issues/detail?id=590620 https://codereview.chromium.org/1755543002 http://www.securityfocus.com/bid/84224 http://lists.opensuse.org/opensuse-security-announce/2016-03/msg00073.html http://lists.opensuse.org/opensuse-security-announce/2016-03/msg00066.html http://www.ubuntu.com/usn/USN-2920-1 https://usn.ubuntu.com/2920-1/https://nvd.nist.gov

CVE-2016-1644

Vulnerability Summary

Vendor Advisories

References

Vulmon Search

About

Products

Connect