CVE

Id
88511  
CVE No.
CVE-2016-1692  
Status
Candidate  
Description
WebKit/Source/core/css/StyleSheetContents.cpp in Blink, as used in Google Chrome before 51.0.2704.63, permits cross-origin loading of CSS stylesheets by a ServiceWorker even when the stylesheet download has an incorrect MIME type, which allows remote attackers to bypass the Same Origin Policy via a crafted web site.  
Phase
Assigned (20160112)  
Votes
None (candidate not yet proposed)  
Comments
 

Actions

Related CVE References

Id CVE Id CVE No. Reference Actions
768819 88511 CVE-2016-1692 CONFIRM:http://googlechromereleases.blogspot.com/2016/05/stable-channel-update_25.html  View
768820 88511 CVE-2016-1692 CONFIRM:https://codereview.chromium.org/1861243002  View
768821 88511 CVE-2016-1692 CONFIRM:https://crbug.com/598077  View
768822 88511 CVE-2016-1692 DEBIAN:DSA-3590  View
768823 88511 CVE-2016-1692 URL:http://www.debian.org/security/2016/dsa-3590  View
768824 88511 CVE-2016-1692 REDHAT:RHSA-2016:1190  View
768825 88511 CVE-2016-1692 URL:https://access.redhat.com/errata/RHSA-2016:1190  View
768826 88511 CVE-2016-1692 SUSE:openSUSE-SU-2016:1430  View
768827 88511 CVE-2016-1692 URL:http://lists.opensuse.org/opensuse-security-announce/2016-05/msg00062.html  View
768828 88511 CVE-2016-1692 SUSE:openSUSE-SU-2016:1433  View
768829 88511 CVE-2016-1692 URL:http://lists.opensuse.org/opensuse-security-announce/2016-05/msg00063.html  View
768830 88511 CVE-2016-1692 SUSE:openSUSE-SU-2016:1496  View
768831 88511 CVE-2016-1692 URL:http://lists.opensuse.org/opensuse-security-announce/2016-06/msg00005.html  View
768832 88511 CVE-2016-1692 UBUNTU:USN-2992-1  View
768833 88511 CVE-2016-1692 URL:http://www.ubuntu.com/usn/USN-2992-1  View
768834 88511 CVE-2016-1692 BID:90876  View
768835 88511 CVE-2016-1692 URL:http://www.securityfocus.com/bid/90876  View
768836 88511 CVE-2016-1692 SECTRACK:1035981  View

Related JVN

Id JVN No. Title Summary CVE No. CVE Id CVSS_v2 CVSS_v3 JVN URL Actions
1563 JVNDB-2016-002336 HPE Data Protector における任意のコードを実行される脆弱性 HPE Data Protector には、任意のコードを実行される脆弱性が存在します。 CVE-2016-2005 88511 10 9.8 http://jvndb.jvn.jp/ja/contents/2016/JVNDB-2016-002336.html  View