Search vulnerabilities

Results 8,163

Export CSV
CVE-2011-3067

Google Chrome before 18.0.1025.151 allows remote attackers to bypass the Same Origin Policy via vectors related to replacement of IFRAME elements.

CVSS 2.0 · 6.8 Medium EPSS 1.3% KEV · Not listed
Vendors
CVE-2011-3068

Use-after-free vulnerability in the Cascading Style Sheets (CSS) implementation in Google Chrome before 18.0.1025.151 allows remote attackers to cause a denial of service or possibly have unspecified other impact via vectors related to run-in boxes.

CVSS 2.0 · 6.8 Medium EPSS 1.9% KEV · Not listed
Vendors
Products
Iphone Os Itunes Safari and 1 more
CVE-2011-3069

Use-after-free vulnerability in the Cascading Style Sheets (CSS) implementation in Google Chrome before 18.0.1025.151 allows remote attackers to cause a denial of service or possibly have unspecified other impact via vectors related to line boxes.

CVSS 2.0 · 6.8 Medium EPSS 2.0% KEV · Not listed
Vendors
Products
Iphone Os Itunes Safari and 1 more
CVE-2011-3070

Use-after-free vulnerability in Google Chrome before 18.0.1025.151 allows remote attackers to cause a denial of service or possibly have unspecified other impact via vectors related to the Google V8 bindings.

CVSS 2.0 · 6.8 Medium EPSS 2.0% KEV · Not listed
Vendors
Products
CVE-2011-3088

Google Chrome before 19.0.1084.46 does not properly draw hairlines, which allows remote attackers to cause a denial of service (out-of-bounds read) via unspecified vectors.

CVSS 2.0 · 5.0 Medium EPSS 1.4% KEV · Not listed
Vendors
Products
CVE-2011-3065

Skia, as used in Google Chrome before 18.0.1025.142, allows remote attackers to cause a denial of service (memory corruption) or possibly have unspecified other impact via unknown vectors.

CVSS 2.0 · 6.8 Medium EPSS 1.8% KEV · Not listed
Vendors
Products
CVE-2011-3071

Use-after-free vulnerability in the HTMLMediaElement implementation in Google Chrome before 18.0.1025.151 allows remote attackers to cause a denial of service or possibly have unspecified other impact via unknown vectors.

CVSS 2.0 · 6.8 Medium EPSS 2.1% KEV · Not listed
Vendors
Products
Iphone Os Itunes Safari and 1 more
CVE-2011-3072

Google Chrome before 18.0.1025.151 allows remote attackers to bypass the Same Origin Policy via vectors related to pop-up windows.

CVSS 2.0 · 6.8 Medium EPSS 1.2% KEV · Not listed
Vendors
Products
CVE-2011-3073

Use-after-free vulnerability in Google Chrome before 18.0.1025.151 allows remote attackers to cause a denial of service or possibly have unspecified other impact via vectors related to the handling of SVG resources.

CVSS 2.0 · 6.8 Medium EPSS 2.0% KEV · Not listed
Vendors
Products
Iphone Os Itunes Safari and 1 more
CVE-2011-3074

Use-after-free vulnerability in Google Chrome before 18.0.1025.151 allows remote attackers to cause a denial of service or possibly have unspecified other impact via vectors related to the handling of media.

CVSS 2.0 · 6.8 Medium EPSS 2.0% KEV · Not listed
Vendors
Products
Iphone Os Itunes Safari and 1 more
CVE-2011-3075

Use-after-free vulnerability in Google Chrome before 18.0.1025.151 allows remote attackers to cause a denial of service or possibly have unspecified other impact via vectors related to style-application commands.

CVSS 2.0 · 6.8 Medium EPSS 2.1% KEV · Not listed
Vendors
Products
Iphone Os Itunes Safari and 1 more
CVE-2011-3076

Use-after-free vulnerability in Google Chrome before 18.0.1025.151 allows remote attackers to cause a denial of service or possibly have unspecified other impact via vectors related to focus handling.

CVSS 2.0 · 6.8 Medium EPSS 2.0% KEV · Not listed
Vendors
Products
Iphone Os Itunes Safari and 1 more
CVE-2011-3077

Use-after-free vulnerability in Google Chrome before 18.0.1025.151 allows remote attackers to cause a denial of service or possibly have unspecified other impact via vectors involving the script bindings, related to a "read-after-free" issue.

CVSS 2.0 · 6.8 Medium EPSS 1.9% KEV · Not listed
Vendors
Products
CVE-2011-3078

Webkitgtk: google chrome update [30-April-2012]

Use-after-free vulnerability in Google Chrome before 18.0.1025.168 allows remote attackers to cause a denial of service or possibly have unspecified other impact via vectors related to the floating of elements, a different vulnerability than CVE-2011-3081.

CVSS 2.0 · 6.8 Medium EPSS 2.2% KEV · Not listed
Vendors
Products
Iphone Os Itunes Safari and 1 more
CVE-2011-3080

Race condition in the Inter-process Communication (IPC) implementation in Google Chrome before 18.0.1025.168 allows attackers to bypass intended sandbox restrictions via unspecified vectors.

CVSS 2.0 · 7.6 High EPSS 1.2% KEV · Not listed
Vendors
Products
CVE-2011-3081

Webkitgtk: google chrome update [30-April-2012]

Use-after-free vulnerability in Google Chrome before 18.0.1025.168 allows remote attackers to cause a denial of service or possibly have unspecified other impact via vectors related to the floating of elements, a different vulnerability than CVE-2011-3078.

CVSS 2.0 · 9.3 Critical EPSS 3.1% KEV · Not listed
Vendors
Products
Iphone Os Itunes Safari and 1 more
CVE-2011-3083

browser/profiles/profile_impl_io_data.cc in Google Chrome before 19.0.1084.46 does not properly handle a malformed ftp URL in the SRC attribute of a VIDEO element, which allows remote attackers to cause a denial of service (NULL pointer dereference and application crash) via a crafted web page.

CVSS 2.0 · 5.0 Medium EPSS 1.3% KEV · Not listed
Vendors
Products
CVE-2011-3084

Google Chrome before 19.0.1084.46 does not use a dedicated process for the loading of links found on an internal page, which might allow attackers to bypass intended sandbox restrictions via a crafted page.

CVSS 2.0 · 7.5 High EPSS 1.3% KEV · Not listed
Vendors
Products
CVE-2011-3085

The Autofill feature in Google Chrome before 19.0.1084.46 does not properly restrict field values, which allows remote attackers to cause a denial of service (UI corruption) and possibly conduct spoofing attacks via vectors involving long values.

CVSS 2.0 · 5.0 Medium EPSS 1.4% KEV · Not listed
Vendors
Products
CVE-2011-3086

Webkitgtk: google chrome update [15-May-2012]

Use-after-free vulnerability in Google Chrome before 19.0.1084.46 allows remote attackers to cause a denial of service or possibly have unspecified other impact via vectors involving a STYLE element.

CVSS 2.0 · 10.0 Critical EPSS 3.3% KEV · Not listed
Vendors
Products