CVE-2014-7926

ICU: regexp engine incorrect handling of a zero length quantifier

The Regular Expressions package in International Components for Unicode (ICU) 52 before SVN revision 292944, as used in Google Chrome before 40.0.2214.91, allows remote attackers to cause a denial of service (memory corruption) or possibly have unspecified other impact via vectors related to a zero-length quantifier.

CVSS 2.0 · 7.5 High EPSS 2.2% KEV · Not listed

Vendors

Canonical Google Icu-project and 3 more

Products

Ubuntu Linux Chrome International Components For Unicode and 7 more

CVE-2014-7939

chromium-browser: same-origin-bypass in V8

Google Chrome before 40.0.2214.91, when the Harmony proxy in Google V8 is enabled, allows remote attackers to bypass the Same Origin Policy via crafted JavaScript code with Proxy.create and console.log calls, related to HTTP responses that lack an "X-Content-Type-Options: nosniff" header.

CVSS 2.0 · 4.3 Medium EPSS 2.5% KEV · Not listed

Vendors

Chromium Google Opensuse and 1 more

Products

Chromium Chrome Opensuse and 5 more

CVE-2014-7941

chromium-browser: out-of-bounds read in UI

The SelectionOwner::ProcessTarget function in ui/base/x/selection_owner.cc in the UI implementation in Google Chrome before 40.0.2214.91 uses an incorrect data type for a certain length value, which allows remote attackers to cause a denial of service (out-of-bounds read) via crafted X11 data.

CVSS 2.0 · 5.0 Medium EPSS 1.6% KEV · Not listed

Vendors

Chromium Google Opensuse and 1 more

Products

Chromium Chrome Opensuse and 5 more

CVE-2014-7942

chromium-browser: uninitialized-value in Fonts

The Fonts implementation in Google Chrome before 40.0.2214.91 does not initialize memory for a data structure, which allows remote attackers to cause a denial of service or possibly have unspecified other impact via unknown vectors.

CVSS 2.0 · 7.5 High EPSS 1.6% KEV · Not listed

Vendors

Canonical Chromium Google and 2 more

Products

Ubuntu Linux Chromium Chrome and 6 more

CVE-2014-7943

chromium-browser: out-of-bounds read in Skia

Skia, as used in Google Chrome before 40.0.2214.91, allows remote attackers to cause a denial of service (out-of-bounds read) via unspecified vectors.

CVSS 2.0 · 5.0 Medium EPSS 1.6% KEV · Not listed

Vendors

Canonical Chromium Google and 2 more

Products

Ubuntu Linux Chromium Chrome and 6 more

CVE-2015-0346

flash-plugin: multiple code execution issues fixed in APSB15-06

Double free vulnerability in Adobe Flash Player before 13.0.0.281 and 14.x through 17.x before 17.0.0.169 on Windows and OS X and before 11.2.202.457 on Linux allows attackers to execute arbitrary code via unspecified vectors, a different vulnerability than CVE-2015-0359.

CVSS 2.0 · 10.0 Critical EPSS 10.4% KEV · Not listed

Vendors

Adobe Apple Linux and 4 more

Products

Flash Player Mac Os X Linux Kernel and 9 more

CVE-2015-0347

flash-plugin: multiple code execution issues fixed in APSB15-06

Adobe Flash Player before 13.0.0.281 and 14.x through 17.x before 17.0.0.169 on Windows and OS X and before 11.2.202.457 on Linux allows attackers to execute arbitrary code or cause a denial of service (memory corruption) via unspecified vectors, a different vulnerability than CVE-2015-0350, CVE-2015-0352, CVE-2015-0353, CVE-2015-0354, CVE-2015-0355, CVE-2015-0360, CVE-2015-3038, CVE-2015-3041, CVE-2015-3042, and CVE-2015-3043.

CVSS 2.0 · 10.0 Critical EPSS 6.2% KEV · Not listed

Vendors

Adobe Apple Linux and 4 more

Products

Flash Player Mac Os X Linux Kernel and 9 more

CVE-2015-0348

flash-plugin: multiple code execution issues fixed in APSB15-06

Buffer overflow in Adobe Flash Player before 13.0.0.281 and 14.x through 17.x before 17.0.0.169 on Windows and OS X and before 11.2.202.457 on Linux allows attackers to execute arbitrary code via unspecified vectors.

CVSS 2.0 · 10.0 Critical EPSS 8.8% KEV · Not listed

Vendors

Adobe Apple Linux and 4 more

Products

Flash Player Mac Os X Linux Kernel and 9 more

CVE-2015-0349

flash-plugin: multiple code execution issues fixed in APSB15-06

Use-after-free vulnerability in Adobe Flash Player before 13.0.0.281 and 14.x through 17.x before 17.0.0.169 on Windows and OS X and before 11.2.202.457 on Linux allows attackers to execute arbitrary code via unspecified vectors, a different vulnerability than CVE-2015-0351, CVE-2015-0358, and CVE-2015-3039.

CVSS 2.0 · 10.0 Critical EPSS 8.2% KEV · Not listed

Vendors

Adobe Apple Linux and 4 more

Products

Flash Player Mac Os X Linux Kernel and 9 more

CVE-2015-0350

flash-plugin: multiple code execution issues fixed in APSB15-06

Adobe Flash Player before 13.0.0.281 and 14.x through 17.x before 17.0.0.169 on Windows and OS X and before 11.2.202.457 on Linux allows attackers to execute arbitrary code or cause a denial of service (memory corruption) via unspecified vectors, a different vulnerability than CVE-2015-0347, CVE-2015-0352, CVE-2015-0353, CVE-2015-0354, CVE-2015-0355, CVE-2015-0360, CVE-2015-3038, CVE-2015-3041, CVE-2015-3042, and CVE-2015-3043.

CVSS 2.0 · 10.0 Critical EPSS 6.0% KEV · Not listed

Vendors

Adobe Apple Linux and 4 more

Products

Flash Player Mac Os X Linux Kernel and 9 more

CVE-2015-1216

chromium-browser: Use-after-free in v8 bindings

Use-after-free vulnerability in the V8Window::namedPropertyGetterCustom function in bindings/core/v8/custom/V8WindowCustom.cpp in the V8 bindings in Blink, as used in Google Chrome before 41.0.2272.76, allows remote attackers to cause a denial of service or possibly have unspecified other impact via vectors that trigger a frame detachment.

CVSS 2.0 · 7.5 High EPSS 1.4% KEV · Not listed

Vendors

Canonical Google Redhat

Products

Ubuntu Linux Chrome Enterprise Linux Desktop Supplementary and 4 more

CVE-2015-0352

flash-plugin: multiple code execution issues fixed in APSB15-06

Adobe Flash Player before 13.0.0.281 and 14.x through 17.x before 17.0.0.169 on Windows and OS X and before 11.2.202.457 on Linux allows attackers to execute arbitrary code or cause a denial of service (memory corruption) via unspecified vectors, a different vulnerability than CVE-2015-0347, CVE-2015-0350, CVE-2015-0353, CVE-2015-0354, CVE-2015-0355, CVE-2015-0360, CVE-2015-3038, CVE-2015-3041, CVE-2015-3042, and CVE-2015-3043.

CVSS 2.0 · 10.0 Critical EPSS 6.0% KEV · Not listed

Vendors

Adobe Apple Linux and 4 more

Products

Flash Player Mac Os X Linux Kernel and 9 more

CVE-2015-0353

flash-plugin: multiple code execution issues fixed in APSB15-06

Adobe Flash Player before 13.0.0.281 and 14.x through 17.x before 17.0.0.169 on Windows and OS X and before 11.2.202.457 on Linux allows attackers to execute arbitrary code or cause a denial of service (memory corruption) via unspecified vectors, a different vulnerability than CVE-2015-0347, CVE-2015-0350, CVE-2015-0352, CVE-2015-0354, CVE-2015-0355, CVE-2015-0360, CVE-2015-3038, CVE-2015-3041, CVE-2015-3042, and CVE-2015-3043.

CVSS 2.0 · 10.0 Critical EPSS 6.0% KEV · Not listed

Vendors

Adobe Apple Linux and 4 more

Products

Flash Player Mac Os X Linux Kernel and 9 more

CVE-2015-0354

flash-plugin: multiple code execution issues fixed in APSB15-06

Adobe Flash Player before 13.0.0.281 and 14.x through 17.x before 17.0.0.169 on Windows and OS X and before 11.2.202.457 on Linux allows attackers to execute arbitrary code or cause a denial of service (memory corruption) via unspecified vectors, a different vulnerability than CVE-2015-0347, CVE-2015-0350, CVE-2015-0352, CVE-2015-0353, CVE-2015-0355, CVE-2015-0360, CVE-2015-3038, CVE-2015-3041, CVE-2015-3042, and CVE-2015-3043.

CVSS 2.0 · 10.0 Critical EPSS 6.0% KEV · Not listed

Vendors

Adobe Apple Linux and 4 more

Products

Flash Player Mac Os X Linux Kernel and 9 more

CVE-2015-0355

flash-plugin: multiple code execution issues fixed in APSB15-06

Adobe Flash Player before 13.0.0.281 and 14.x through 17.x before 17.0.0.169 on Windows and OS X and before 11.2.202.457 on Linux allows attackers to execute arbitrary code or cause a denial of service (memory corruption) via unspecified vectors, a different vulnerability than CVE-2015-0347, CVE-2015-0350, CVE-2015-0352, CVE-2015-0353, CVE-2015-0354, CVE-2015-0360, CVE-2015-3038, CVE-2015-3041, CVE-2015-3042, and CVE-2015-3043.

CVSS 2.0 · 10.0 Critical EPSS 6.0% KEV · Not listed

Vendors

Adobe Apple Linux and 4 more

Products

Flash Player Mac Os X Linux Kernel and 9 more

CVE-2015-0358

flash-plugin: multiple code execution issues fixed in APSB15-06

Use-after-free vulnerability in Adobe Flash Player before 13.0.0.281 and 14.x through 17.x before 17.0.0.169 on Windows and OS X and before 11.2.202.457 on Linux allows attackers to execute arbitrary code via unspecified vectors, a different vulnerability than CVE-2015-0349, CVE-2015-0351, and CVE-2015-3039.

CVSS 2.0 · 10.0 Critical EPSS 10.4% KEV · Not listed

Vendors

Adobe Apple Linux and 4 more

Products

Flash Player Mac Os X Linux Kernel and 9 more

CVE-2015-0360

flash-plugin: multiple code execution issues fixed in APSB15-06

Adobe Flash Player before 13.0.0.281 and 14.x through 17.x before 17.0.0.169 on Windows and OS X and before 11.2.202.457 on Linux allows attackers to execute arbitrary code or cause a denial of service (memory corruption) via unspecified vectors, a different vulnerability than CVE-2015-0347, CVE-2015-0350, CVE-2015-0352, CVE-2015-0353, CVE-2015-0354, CVE-2015-0355, CVE-2015-3038, CVE-2015-3041, CVE-2015-3042, and CVE-2015-3043.

CVSS 2.0 · 10.0 Critical EPSS 6.0% KEV · Not listed

Vendors

Adobe Apple Linux and 4 more

Products

Flash Player Mac Os X Linux Kernel and 9 more

CVE-2015-1214

chromium-browser: Out-of-bounds write in skia filters

Integer overflow in the SkAutoSTArray implementation in include/core/SkTemplates.h in the filters implementation in Skia, as used in Google Chrome before 41.0.2272.76, allows remote attackers to cause a denial of service or possibly have unspecified other impact via vectors that trigger a reset action with a large count value, leading to an out-of-bounds write operation.

CVSS 2.0 · 7.5 High EPSS 1.5% KEV · Not listed

Vendors

Canonical Google Redhat

Products

Ubuntu Linux Chrome Enterprise Linux Desktop Supplementary and 4 more

CVE-2015-1218

chromium-browser: Use-after-free in dom

Multiple use-after-free vulnerabilities in the DOM implementation in Blink, as used in Google Chrome before 41.0.2272.76, allow remote attackers to cause a denial of service or possibly have unspecified other impact via vectors that trigger movement of a SCRIPT element to different documents, related to (1) the HTMLScriptElement::didMoveToNewDocument function in core/html/HTMLScriptElement.cpp and (2) the SVGScriptElement::didMoveToNewDocument function in core/svg/SVGScriptElement.cpp.

CVSS 2.0 · 7.5 High EPSS 1.4% KEV · Not listed

Vendors

Canonical Google Redhat

Products

Ubuntu Linux Chrome Enterprise Linux Desktop Supplementary and 4 more

CVE-2015-1229

chromium-browser: Cookie injection in proxies

net/http/proxy_client_socket.cc in Google Chrome before 41.0.2272.76 does not properly handle a 407 (aka Proxy Authentication Required) HTTP status code accompanied by a Set-Cookie header, which allows remote proxy servers to conduct cookie-injection attacks via a crafted response.

CVSS 2.0 · 5.0 Medium EPSS < 1% KEV · Not listed

Vendors

Canonical Google Redhat

Products

Ubuntu Linux Chrome Enterprise Linux Desktop Supplementary and 4 more