9.8crit
CVE-2016-9652in critical feed
Multiple unspecified vulnerabilities in Google Chrome before 55.0.2883.75.
Published 6 y ago · modified 4 mo ago · JSON
CVSS
9.8
v3.1 · NVD
CISA KEV
No
not known exploited
EPSS
2.1%
percentile 81%
Public exploits
0
none known
Summary
Multiple unspecified vulnerabilities in Google Chrome before 55.0.2883.75.
Exploit prediction (EPSS)
2.05% probability of exploitation in the next 30 days, higher than 81% of all scored CVEs.
CVSS scores
| Assigned by | Version | Score | Vector |
|---|---|---|---|
| NVD | 3.1 | 9.8 | CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H |
| NVD | 2.0 | 10.0 | AV:N/AC:L/Au:N/C:C/I:C/A:C |
Affected products
- Google Chrome
Classification
- Technology feeds
- Google Chrome (RSS, critical only)
References
- chromereleases.googleblog.com /2016/12/stable-channel-update-for-desktop.html · x_refsource_CONFIRM, x_transferred
- debian.org /security/2016/dsa-3731 · x_refsource_MISC, x_transferred
- securityfocus.com /bid/94633 · x_refsource_MISC, x_transferred
- rhn.redhat.com /errata/RHSA-2016-2919.html · x_refsource_MISC, x_transferred
- lists.fedoraproject.org /archives/list/package-announce%40lists.fedoraproject.org/message/LV2U7SINGF3SBK7HVKSWFOYL · x_refsource_MISC, x_transferred
- lists.opensuse.org /opensuse-security-announce/2017-02/msg00042.html · x_refsource_MISC, x_transferred
- lists.fedoraproject.org /archives/list/package-announce%40lists.fedoraproject.org/message/7LGZO2VOGJOZUUXNQITD6YMI · x_refsource_MISC, x_transferred
- lists.opensuse.org /opensuse-security-announce/2016-12/msg00050.html · x_refsource_MISC, x_transferred
- security.gentoo.org /glsa/201612-11 · x_refsource_MISC, x_transferred
- ubuntu.com /usn/USN-3153-1 · x_refsource_MISC, x_transferred
- lists.fedoraproject.org /archives/list/package-announce%40lists.fedoraproject.org/message/ZZECS3A7ULG4B4YXBKUZMA3N · x_refsource_MISC, x_transferred
- bugs.chromium.org /p/chromium/issues/detail?id=669928 · x_refsource_CONFIRM, x_transferred
Sources
- CVE List: CVE-2016-9652
- NVD: CVE-2016-9652
vulnwire keeps one entry per vulnerability: the CVE id wins, then GHSA; records that alias each other are merged. Machine-readable: JSON.