CVE 2016 document archive · 18
Official-source documents for RHEL 7/8/9. Full search and filters remain available in the search interface. CVE entries require collected VEX data. Search & filters →
1,572 documents · Identifier year 2016 · 18 / 32
- CVE-2016-5280Mozilla: Use-after-free in mozilla::nsTextNodeDirectionalityMap::RemoveElementFromMap (MFSA 2016-85, MFSA 2016-86)
- CVE-2016-5279Mozilla: Full local path of files is available to web pages after drag and drop (MFSA 2016-85)
- CVE-2016-5278Mozilla: Heap-buffer-overflow in nsBMPEncoder::AddImageFrame (MFSA 2016-85, MFSA 2016-86)
- CVE-2016-5277Mozilla: Heap-use-after-free in nsRefreshDriver::Tick (MFSA 2016-85, MFSA 2016-86)
- CVE-2016-5276Mozilla: Heap-use-after-free in mozilla::a11y::DocAccessible::ProcessInvalidationList (MFSA 2016-85, MFSA 2016-86)
- CVE-2016-5275Mozilla: global-buffer-overflow in mozilla::gfx::FilterSupport::ComputeSourceNeededRegions (MFSA 2016-85)
- CVE-2016-5274Mozilla: use-after-free in nsFrameManager::CaptureFrameState (MFSA 2016-85, MFSA 2016-86)
- CVE-2016-5273Mozilla: crash in mozilla::a11y::HyperTextAccessible::GetChildOffset (MFSA 2016-85)
- CVE-2016-5272Mozilla: Bad cast in nsImageGeometryMixin (MFSA 2016-85, MFSA 2016-86)
- CVE-2016-5271Mozilla: Out-of-bounds read in PropertyProvider::GetSpacingInternal (MFSA 2016-85)
- CVE-2016-5270Mozilla: Heap-buffer-overflow in nsCaseTransformTextRunFactory::TransformString (MFSA 2016-85, MFSA 2016-86)
- CVE-2016-5268Mozilla: Spoofing attack through text injection into internal error pages (MFSA 2016-83)
- CVE-2016-5266Mozilla: Information disclosure and local file manipulation through drag and drop (MFSA 2016-81)
- CVE-2016-5265Mozilla: Same-origin policy violation using local HTML file and saved shortcut file (MFSA 2016-80)
- CVE-2016-5264Mozilla: Use-after-free when applying SVG effects (MFSA 2016-79)
- CVE-2016-5263Mozilla: Type confusion in display transformation (MFSA 2016-78)
- CVE-2016-5262Mozilla: Scripts on marquee tag can execute in sandboxed iframes (MFSA 2016-76)
- CVE-2016-5261Mozilla: Integer overflow and memory corruption in WebSocketChannel (MFSA 2016-75, MFSA 2016-86)
- CVE-2016-5260Mozilla: Form input type change from password to text can store plain text password in session restore file (MFSA 2016-74)
- CVE-2016-5259Mozilla: Use-after-free in service workers with nested sync events (MFSA 2016-73)
- CVE-2016-5258Mozilla: Use-after-free in DTLS during WebRTC session shutdown (MFSA 2016-72)
- CVE-2016-5257Mozilla: Memory safety bugs fixed in Firefox ESR 45.4 (MFSA 2016-85, MFSA 2016-86)
- CVE-2016-5256Mozilla: Memory safety bugs fixed in Firefox 49 (MFSA 2016-85)
- CVE-2016-5255Mozilla: Crash in incremental garbage collection in JavaScript (MFSA 2016-71)
- CVE-2016-5254Mozilla: Use-after-free when using alt key and toplevel menus (MFSA 2016-70)
- CVE-2016-5252Mozilla: Stack underflow during 2D graphics rendering (MFSA 2016-67)
- CVE-2016-5251Mozilla: Location bar spoofing via data URLs with malformed/invalid mediatypes (MFSA 2016-66)
- CVE-2016-5250Mozilla: Resource Timing API is storing resources sent by the previous page (MFSA 2016-84, MFSA 2016-86)
- CVE-2016-5244kernel: Information leak in rds_inc_info_copy
- CVE-2016-5243kernel: Information leak in tipc_nl_compat_link_dump
- CVE-2016-5240ImageMagick: SVG converting issue resulting in DoS
- CVE-2016-5239ImageMagick,GraphicsMagick: Gnuplot delegate vulnerability allowing command injection
- CVE-2016-5238Qemu: scsi: esp: OOB write when using non-DMA mode in get_cmd
- CVE-2016-5195kernel: mm: privilege escalation via MAP_PRIVATE COW breakage
- CVE-2016-5180c-ares: Single byte out of buffer write
- CVE-2016-5159openjpeg: heap overflow in parsing of JPEG2000 code blocks
- CVE-2016-5158openjpeg: heap overflow due to unsafe use of opj_aligned_malloc
- CVE-2016-5152chromium-browser: heap overflow in pdfium
- CVE-2016-5139openjpeg: Heap overflow in parsing of JPEG2000 precincts
- CVE-2016-5131libxml2: Use after free triggered by XPointer paths beginning with range-to
- CVE-2016-5126Qemu: block: iscsi: buffer overflow in iscsi_aio_ioctl
- CVE-2016-5118ImageMagick: Remote code execution via filename
- CVE-2016-5116gd: Information leak due to stack overflow in gdCtxPrintf
- CVE-2016-5114php: out-of-bounds write in fpm_log.c
- CVE-2016-5107Qemu: scsi: megasas: out-of-bounds read in megasas_lookup_frame() function
- CVE-2016-5106Qemu: scsi: megasas: out-of-bounds write while setting controller properties
- CVE-2016-5105Qemu: scsi: megasas: stack information leakage while reading configuration
- CVE-2016-5104libimobiledevice: Sockets listening on INADDR_ANY
- CVE-2016-5102libtiff: Buffer overflow in readgifimage()
- CVE-2016-5096php: Integer underflow causing arbitrary null write in fread/gzread