CVE-2016-3679

moderate-risk

Published 2016-03-29

Multiple unspecified vulnerabilities in Google V8 before 4.9.385.33, as used in Google Chrome before 49.0.2623.108, allow attackers to cause a denial of service or possibly have other impact via unknown vectors.

Do I need to act?

0.88% chance of exploitation

EPSS score — low exploit probability

Not on CISA KEV list

No confirmed active exploitation reported to CISA

Patch status unknown

Check vendor advisories for fix availability and mitigation guidance

CVSS 8.8/10 High

NETWORK / LOW complexity

Affected Products (6)

Ubuntu Linux

Chrome

Opensuse

Affected Vendors

Canonical Google Opensuse

References (14)

Vendor Advisory http://googlechromereleases.blogspot.com/2016/03/stable-channel-update_24.html

http://lists.opensuse.org/opensuse-security-announce/2016-04/msg00000.html

http://lists.opensuse.org/opensuse-security-announce/2016-04/msg00001.html

Third Party Advisory http://lists.opensuse.org/opensuse-security-announce/2016-04/msg00039.html

http://rhn.redhat.com/errata/RHSA-2016-0525.html

http://www.securitytracker.com/id/1035423

Third Party Advisory http://www.ubuntu.com/usn/USN-2955-1

Vendor Advisory http://googlechromereleases.blogspot.com/2016/03/stable-channel-update_24.html

http://lists.opensuse.org/opensuse-security-announce/2016-04/msg00000.html

http://lists.opensuse.org/opensuse-security-announce/2016-04/msg00001.html

Third Party Advisory http://lists.opensuse.org/opensuse-security-announce/2016-04/msg00039.html

http://rhn.redhat.com/errata/RHSA-2016-0525.html

http://www.securitytracker.com/id/1035423

Third Party Advisory http://www.ubuntu.com/usn/USN-2955-1

/ 100

moderate-risk

Severity 30/34 · Critical

Exploitability 3/34 · Minimal

Exposure 13/34 · Low