cve,link,title,description,vendor,products,score,severity,epss,cisa,article,ransomware,exploited,poc,trended,trended_no_1,published,trended_score CVE-2016-5203,https://securityvulnerability.io/vulnerability/CVE-2016-5203,,"A use after free in PDFium in Google Chrome prior to 55.0.2883.75 for Mac, Windows and Linux, and 55.0.2883.84 for Android allowed a remote attacker to potentially exploit heap corruption via a crafted PDF file.",Google,"Google Chrome Prior To 55.0.2883.75 For Mac, Windows And Linux, And 55.0.2883.84 For Android",8.8,HIGH,0.00901000015437603,false,false,false,false,,false,false,2017-01-19T05:43:00.000Z,0 CVE-2016-5204,https://securityvulnerability.io/vulnerability/CVE-2016-5204,,"Leaking of an SVG shadow tree leading to corruption of the DOM tree in Blink in Google Chrome prior to 55.0.2883.75 for Mac, Windows and Linux, and 55.0.2883.84 for Android allowed a remote attacker to inject arbitrary scripts or HTML (UXSS) via a crafted HTML page.",Google,"Google Chrome Prior To 55.0.2883.75 For Mac, Windows And Linux, And 55.0.2883.84 For Android",6.1,MEDIUM,0.0033199999015778303,false,false,false,false,,false,false,2017-01-19T05:43:00.000Z,0 CVE-2016-5206,https://securityvulnerability.io/vulnerability/CVE-2016-5206,,"The PDF plugin in Google Chrome prior to 55.0.2883.75 for Mac, Windows and Linux, and 55.0.2883.84 for Android incorrectly followed redirects, which allowed a remote attacker to bypass the Same Origin Policy via a crafted HTML page.",Google,"Google Chrome Prior To 55.0.2883.75 For Mac, Windows And Linux, And 55.0.2883.84 For Android",8.8,HIGH,0.00901000015437603,false,false,false,false,,false,false,2017-01-19T05:43:00.000Z,0 CVE-2016-5207,https://securityvulnerability.io/vulnerability/CVE-2016-5207,,"In Blink in Google Chrome prior to 55.0.2883.75 for Mac, Windows and Linux, and 55.0.2883.84 for Android, corruption of the DOM tree could occur during the removal of a full screen element, which allowed a remote attacker to achieve arbitrary code execution via a crafted HTML page.",Google,"Google Chrome Prior To 55.0.2883.75 For Mac, Windows And Linux, And 55.0.2883.84 For Android",6.1,MEDIUM,0.009820000268518925,false,false,false,false,,false,false,2017-01-19T05:43:00.000Z,0 CVE-2016-5209,https://securityvulnerability.io/vulnerability/CVE-2016-5209,,"Bad casting in bitmap manipulation in Blink in Google Chrome prior to 55.0.2883.75 for Mac, Windows and Linux, and 55.0.2883.84 for Android allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page.",Google,"Google Chrome Prior To 55.0.2883.75 For Mac, Windows And Linux, And 55.0.2883.84 For Android",8.8,HIGH,0.00901000015437603,false,false,false,false,,false,false,2017-01-19T05:43:00.000Z,0 CVE-2016-5210,https://securityvulnerability.io/vulnerability/CVE-2016-5210,,"Heap buffer overflow during TIFF image parsing in PDFium in Google Chrome prior to 55.0.2883.75 for Mac, Windows and Linux, and 55.0.2883.84 for Android allowed a remote attacker to potentially exploit heap corruption via a crafted PDF file.",Google,"Google Chrome Prior To 55.0.2883.75 For Mac, Windows And Linux, And 55.0.2883.84 For Android",8.8,HIGH,0.014139999635517597,false,false,false,false,,false,false,2017-01-19T05:43:00.000Z,0 CVE-2016-5211,https://securityvulnerability.io/vulnerability/CVE-2016-5211,,"A use after free in PDFium in Google Chrome prior to 55.0.2883.75 for Mac, Windows and Linux, and 55.0.2883.84 for Android allowed a remote attacker to potentially exploit heap corruption via a crafted PDF file.",Google,"Google Chrome Prior To 55.0.2883.75 For Mac, Windows And Linux, And 55.0.2883.84 For Android",8.8,HIGH,0.00901000015437603,false,false,false,false,,false,false,2017-01-19T05:43:00.000Z,0 CVE-2016-5212,https://securityvulnerability.io/vulnerability/CVE-2016-5212,,"Google Chrome prior to 55.0.2883.75 for Mac, Windows and Linux, and 55.0.2883.84 for Android insufficiently sanitized DevTools URLs, which allowed a remote attacker to read local files via a crafted HTML page.",Google,"Google Chrome Prior To 55.0.2883.75 For Mac, Windows And Linux, And 55.0.2883.84 For Android",6.5,MEDIUM,0.00418000016361475,false,false,false,false,,false,false,2017-01-19T05:43:00.000Z,0 CVE-2016-5213,https://securityvulnerability.io/vulnerability/CVE-2016-5213,,"A use after free in V8 in Google Chrome prior to 55.0.2883.75 for Mac, Windows and Linux, and 55.0.2883.84 for Android allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page.",Google,"Google Chrome Prior To 55.0.2883.75 For Mac, Windows And Linux, And 55.0.2883.84 For Android",8.8,HIGH,0.00901000015437603,false,false,false,false,,false,false,2017-01-19T05:43:00.000Z,0 CVE-2016-5215,https://securityvulnerability.io/vulnerability/CVE-2016-5215,,"A use after free in webaudio in Google Chrome prior to 55.0.2883.75 for Mac, Windows and Linux, and 55.0.2883.84 for Android allowed a remote attacker to perform an out of bounds memory read via a crafted HTML page.",Google,"Google Chrome Prior To 55.0.2883.75 For Mac, Windows And Linux, And 55.0.2883.84 For Android",6.3,MEDIUM,0.004230000078678131,false,false,false,false,,false,false,2017-01-19T05:43:00.000Z,0 CVE-2016-5216,https://securityvulnerability.io/vulnerability/CVE-2016-5216,,"A use after free in PDFium in Google Chrome prior to 55.0.2883.75 for Mac, Windows and Linux, and 55.0.2883.84 for Android allowed a remote attacker to perform an out of bounds memory read via a crafted PDF file.",Google,"Google Chrome Prior To 55.0.2883.75 For Mac, Windows And Linux, And 55.0.2883.84 For Android",6.3,MEDIUM,0.0030700000934302807,false,false,false,false,,false,false,2017-01-19T05:43:00.000Z,0 CVE-2016-5217,https://securityvulnerability.io/vulnerability/CVE-2016-5217,,"The extensions API in Google Chrome prior to 55.0.2883.75 for Mac, Windows and Linux, and 55.0.2883.84 for Android incorrectly permitted access to privileged plugins, which allowed a remote attacker to bypass site isolation via a crafted HTML page.",Google,"Google Chrome Prior To 55.0.2883.75 For Mac, Windows And Linux, And 55.0.2883.84 For Android",6.5,MEDIUM,0.004970000125467777,false,false,false,false,,false,false,2017-01-19T05:43:00.000Z,0 CVE-2016-5218,https://securityvulnerability.io/vulnerability/CVE-2016-5218,,"The extensions API in Google Chrome prior to 55.0.2883.75 for Mac, Windows and Linux, and 55.0.2883.84 for Android incorrectly handled navigation within PDFs, which allowed a remote attacker to temporarily spoof the contents of the Omnibox (URL bar) via a crafted HTML page containing PDF data.",Google,"Google Chrome Prior To 55.0.2883.75 For Mac, Windows And Linux, And 55.0.2883.84 For Android",6.5,MEDIUM,0.005249999929219484,false,false,false,false,,false,false,2017-01-19T05:43:00.000Z,0 CVE-2016-5219,https://securityvulnerability.io/vulnerability/CVE-2016-5219,,"A heap use after free in V8 in Google Chrome prior to 55.0.2883.75 for Mac, Windows and Linux, and 55.0.2883.84 for Android allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page.",Google,"Google Chrome Prior To 55.0.2883.75 For Mac, Windows And Linux, And 55.0.2883.84 For Android",6.3,MEDIUM,0.005810000002384186,false,false,false,false,,false,false,2017-01-19T05:43:00.000Z,0 CVE-2016-5220,https://securityvulnerability.io/vulnerability/CVE-2016-5220,,"PDFium in Google Chrome prior to 55.0.2883.75 for Mac, Windows and Linux, and 55.0.2883.84 for Android incorrectly handled navigation within PDFs, which allowed a remote attacker to read local files via a crafted PDF file.",Google,"Google Chrome Prior To 55.0.2883.75 For Mac, Windows And Linux, And 55.0.2883.84 For Android",6.5,MEDIUM,0.00418000016361475,false,false,false,false,,false,false,2017-01-19T05:43:00.000Z,0 CVE-2016-5221,https://securityvulnerability.io/vulnerability/CVE-2016-5221,,"Type confusion in libGLESv2 in ANGLE in Google Chrome prior to 55.0.2883.75 for Mac, Windows and Linux, and 55.0.2883.84 for Android possibly allowed a remote attacker to bypass buffer validation via a crafted HTML page.",Google,"Google Chrome Prior To 55.0.2883.75 For Mac, Windows And Linux, And 55.0.2883.84 For Android",6.3,MEDIUM,0.009600000455975533,false,false,false,false,,false,false,2017-01-19T05:43:00.000Z,0 CVE-2016-5222,https://securityvulnerability.io/vulnerability/CVE-2016-5222,,"Incorrect handling of invalid URLs in Google Chrome prior to 55.0.2883.75 for Mac, Windows and Linux, and 55.0.2883.84 for Android allowed a remote attacker to spoof the contents of the Omnibox (URL bar) via a crafted HTML page.",Google,"Google Chrome Prior To 55.0.2883.75 For Mac, Windows And Linux, And 55.0.2883.84 For Android",6.5,MEDIUM,0.005249999929219484,false,false,false,false,,false,false,2017-01-19T05:43:00.000Z,0 CVE-2016-5223,https://securityvulnerability.io/vulnerability/CVE-2016-5223,,"Integer overflow in PDFium in Google Chrome prior to 55.0.2883.75 for Mac, Windows and Linux, and 55.0.2883.84 for Android allowed a remote attacker to potentially exploit heap corruption or DoS via a crafted PDF file.",Google,"Google Chrome Prior To 55.0.2883.75 For Mac, Windows And Linux, And 55.0.2883.84 For Android",6.5,MEDIUM,0.00925000011920929,false,false,false,false,,false,false,2017-01-19T05:43:00.000Z,0 CVE-2016-5224,https://securityvulnerability.io/vulnerability/CVE-2016-5224,,"A timing attack on denormalized floating point arithmetic in SVG filters in Blink in Google Chrome prior to 55.0.2883.75 for Mac, Windows and Linux, and 55.0.2883.84 for Android allowed a remote attacker to bypass the Same Origin Policy via a crafted HTML page.",Google,"Google Chrome Prior To 55.0.2883.75 For Mac, Windows And Linux, And 55.0.2883.84 For Android",4.3,MEDIUM,0.006169999949634075,false,false,false,false,,false,false,2017-01-19T05:43:00.000Z,0 CVE-2016-5225,https://securityvulnerability.io/vulnerability/CVE-2016-5225,,"Blink in Google Chrome prior to 55.0.2883.75 for Mac, Windows and Linux, and 55.0.2883.84 for Android incorrectly handled form actions, which allowed a remote attacker to bypass Content Security Policy via a crafted HTML page.",Google,"Google Chrome Prior To 55.0.2883.75 For Mac, Windows And Linux, And 55.0.2883.84 For Android",4.3,MEDIUM,0.006169999949634075,false,false,false,false,,false,false,2017-01-19T05:43:00.000Z,0 CVE-2016-9650,https://securityvulnerability.io/vulnerability/CVE-2016-9650,,"Blink in Google Chrome prior to 55.0.2883.75 for Mac, Windows and Linux, and 55.0.2883.84 for Android incorrectly handled iframes, which allowed a remote attacker to bypass a no-referrer policy via a crafted HTML page.",Google,"Google Chrome Prior To 55.0.2883.75 For Mac, Windows And Linux, And 55.0.2883.84 For Android",4.3,MEDIUM,0.006169999949634075,false,false,false,false,,false,false,2017-01-19T05:43:00.000Z,0