Search vulnerabilities

Use the Query Builder to create your own search query, or check out the documentation to learn the search syntax.

Results 86

Export CSV
CVE-2015-0360

flash-plugin: multiple code execution issues fixed in APSB15-06

Adobe Flash Player before 13.0.0.281 and 14.x through 17.x before 17.0.0.169 on Windows and OS X and before 11.2.202.457 on Linux allows attackers to execute arbitrary code or cause a denial of service (memory corruption) via unspecified vectors, a different vulnerability than CVE-2015-0347, CVE-2015-0350, CVE-2015-0352, CVE-2015-0353, CVE-2015-0354, CVE-2015-0355, CVE-2015-3038, CVE-2015-3041, CVE-2015-3042, and CVE-2015-3043.

CVSS 2.0 · 10.0 Critical EPSS 6.0% KEV · Not listed
Vendors
Adobe Apple Linux and 4 more
Products
Flash Player Mac Os X Linux Kernel and 9 more
CVE-2015-1214

chromium-browser: Out-of-bounds write in skia filters

Integer overflow in the SkAutoSTArray implementation in include/core/SkTemplates.h in the filters implementation in Skia, as used in Google Chrome before 41.0.2272.76, allows remote attackers to cause a denial of service or possibly have unspecified other impact via vectors that trigger a reset action with a large count value, leading to an out-of-bounds write operation.

CVSS 2.0 · 7.5 High EPSS 1.5% KEV · Not listed
Vendors
Canonical Google Redhat
Products
Ubuntu Linux Chrome Enterprise Linux Desktop Supplementary and 4 more
CVE-2015-1216

chromium-browser: Use-after-free in v8 bindings

Use-after-free vulnerability in the V8Window::namedPropertyGetterCustom function in bindings/core/v8/custom/V8WindowCustom.cpp in the V8 bindings in Blink, as used in Google Chrome before 41.0.2272.76, allows remote attackers to cause a denial of service or possibly have unspecified other impact via vectors that trigger a frame detachment.

CVSS 2.0 · 7.5 High EPSS 1.4% KEV · Not listed
Vendors
Canonical Google Redhat
Products
Ubuntu Linux Chrome Enterprise Linux Desktop Supplementary and 4 more
CVE-2015-1217

chromium-browser: Type confusion in v8 bindings

The V8LazyEventListener::prepareListenerObject function in bindings/core/v8/V8LazyEventListener.cpp in the V8 bindings in Blink, as used in Google Chrome before 41.0.2272.76, does not properly compile listeners, which allows remote attackers to cause a denial of service or possibly have unspecified other impact via vectors that leverage "type confusion."

CVSS 2.0 · 7.5 High EPSS 2.1% KEV · Not listed
Vendors
Canonical Google Redhat
Products
Ubuntu Linux Chrome Enterprise Linux Desktop Supplementary and 4 more
CVE-2015-1218

chromium-browser: Use-after-free in dom

Multiple use-after-free vulnerabilities in the DOM implementation in Blink, as used in Google Chrome before 41.0.2272.76, allow remote attackers to cause a denial of service or possibly have unspecified other impact via vectors that trigger movement of a SCRIPT element to different documents, related to (1) the HTMLScriptElement::didMoveToNewDocument function in core/html/HTMLScriptElement.cpp and (2) the SVGScriptElement::didMoveToNewDocument function in core/svg/SVGScriptElement.cpp.

CVSS 2.0 · 7.5 High EPSS 1.4% KEV · Not listed
Vendors
Canonical Google Redhat
Products
Ubuntu Linux Chrome Enterprise Linux Desktop Supplementary and 4 more
CVE-2015-1219

chromium-browser: Integer overflow in webgl

Integer overflow in the SkMallocPixelRef::NewAllocate function in core/SkMallocPixelRef.cpp in Skia, as used in Google Chrome before 41.0.2272.76, allows remote attackers to cause a denial of service or possibly have unspecified other impact via vectors that trigger an attempted allocation of a large amount of memory during WebGL rendering.

CVSS 2.0 · 7.5 High EPSS 1.4% KEV · Not listed
Vendors
Canonical Google Redhat
Products
Ubuntu Linux Chrome Enterprise Linux Desktop Supplementary and 4 more
CVE-2015-1220

chromium-browser: Use-after-free in gif decoder

Use-after-free vulnerability in the GIFImageReader::parseData function in platform/image-decoders/gif/GIFImageReader.cpp in Blink, as used in Google Chrome before 41.0.2272.76, allows remote attackers to cause a denial of service or possibly have unspecified other impact via a crafted frame size in a GIF image.

CVSS 2.0 · 6.8 Medium EPSS 1.9% KEV · Not listed
Vendors
Canonical Google Redhat
Products
Ubuntu Linux Chrome Enterprise Linux Desktop Supplementary and 4 more
CVE-2015-1228

chromium-browser: Uninitialized value in rendering

The RenderCounter::updateCounter function in core/rendering/RenderCounter.cpp in Blink, as used in Google Chrome before 41.0.2272.76, does not force a relayout operation and consequently does not initialize memory for a data structure, which allows remote attackers to cause a denial of service (application crash) or possibly have unspecified other impact via a crafted Cascading Style Sheets (CSS) token sequence.

CVSS 2.0 · 7.5 High EPSS 1.4% KEV · Not listed
Vendors
Canonical Google Redhat
Products
Ubuntu Linux Chrome Enterprise Linux Desktop Supplementary and 4 more
CVE-2015-1229

chromium-browser: Cookie injection in proxies

net/http/proxy_client_socket.cc in Google Chrome before 41.0.2272.76 does not properly handle a 407 (aka Proxy Authentication Required) HTTP status code accompanied by a Set-Cookie header, which allows remote proxy servers to conduct cookie-injection attacks via a crafted response.

CVSS 2.0 · 5.0 Medium EPSS < 1% KEV · Not listed
Vendors
Canonical Google Redhat
Products
Ubuntu Linux Chrome Enterprise Linux Desktop Supplementary and 4 more
CVE-2015-1230

chromium-browser: Type confusion in v8

The getHiddenProperty function in bindings/core/v8/V8EventListenerList.h in Blink, as used in Google Chrome before 41.0.2272.76, has a name conflict with the AudioContext class, which allows remote attackers to cause a denial of service or possibly have unspecified other impact via JavaScript code that adds an AudioContext event listener and triggers "type confusion."

CVSS 2.0 · 7.5 High EPSS 2.0% KEV · Not listed
Vendors
Canonical Google Redhat
Products
Ubuntu Linux Chrome Enterprise Linux Desktop Supplementary and 4 more
CVE-2015-1243

chromium-browser: use-after-free in DOM

Use-after-free vulnerability in the MutationObserver::disconnect function in core/dom/MutationObserver.cpp in the DOM implementation in Blink, as used in Google Chrome before 42.0.2311.135, allows remote attackers to cause a denial of service or possibly have unspecified other impact by triggering an attempt to unregister a MutationObserver object that is not currently registered.

CVSS 2.0 · 7.5 High EPSS 2.0% KEV · Not listed
Vendors
Canonical Debian Google and 1 more
Products
Ubuntu Linux Debian Linux Chrome and 5 more
CVE-2015-1250

chromium-browser: various unspecified flaws

Multiple unspecified vulnerabilities in Google Chrome before 42.0.2311.135 allow attackers to cause a denial of service or possibly have other impact via unknown vectors.

CVSS 2.0 · 7.5 High EPSS 1.5% KEV · Not listed
Vendors
Canonical Debian Google and 1 more
Products
Ubuntu Linux Debian Linux Chrome and 5 more
CVE-2015-1270

ICU: Uninitialized memory read fixed in Chrome 44.0.2403.89

The ucnv_io_getConverterName function in common/ucnv_io.cpp in International Components for Unicode (ICU), as used in Google Chrome before 44.0.2403.89, mishandles converter names with initial x- substrings, which allows remote attackers to cause a denial of service (read of uninitialized memory) or possibly have unspecified other impact via a crafted file.

CVSS 2.0 · 6.8 Medium EPSS 2.7% KEV · Not listed
Vendors
Debian Google Opensuse and 2 more
Products
Debian Linux Chrome Opensuse and 6 more
CVE-2015-1271

chromium-browser: Heap-buffer-overflow in pdfium

PDFium, as used in Google Chrome before 44.0.2403.89, does not properly handle certain out-of-memory conditions, which allows remote attackers to cause a denial of service (heap-based buffer overflow) or possibly have unspecified other impact via a crafted PDF document that triggers a large memory allocation.

CVSS 2.0 · 6.8 Medium EPSS 1.8% KEV · Not listed
Vendors
Debian Google Opensuse and 1 more
Products
Debian Linux Chrome Opensuse and 5 more
CVE-2015-1272

chromium-browser: Use-after-free related to unexpected GPU process termination in unspecified

Use-after-free vulnerability in the GPU process implementation in Google Chrome before 44.0.2403.89 allows remote attackers to cause a denial of service or possibly have unspecified other impact by leveraging the continued availability of a GPUChannelHost data structure during Blink shutdown, related to content/browser/gpu/browser_gpu_channel_host_factory.cc and content/renderer/render_thread_impl.cc.

CVSS 2.0 · 7.5 High EPSS 1.6% KEV · Not listed
Vendors
Debian Google Opensuse and 1 more
Products
Debian Linux Chrome Opensuse and 5 more
CVE-2015-1273

chromium-browser: Heap-buffer-overflow in pdfium.

Heap-based buffer overflow in j2k.c in OpenJPEG before r3002, as used in PDFium in Google Chrome before 44.0.2403.89, allows remote attackers to cause a denial of service or possibly have unspecified other impact via invalid JPEG2000 data in a PDF document.

CVSS 2.0 · 6.8 Medium EPSS 1.5% KEV · Not listed
Vendors
Debian Google Opensuse and 1 more
Products
Debian Linux Chrome Opensuse and 5 more
CVE-2015-1274

chromium-browser: Settings allowed executable files to run immediately after download in unsepcified

Google Chrome before 44.0.2403.89 does not ensure that the auto-open list omits all dangerous file types, which makes it easier for remote attackers to execute arbitrary code by providing a crafted file and leveraging a user's previous "Always open files of this type" choice, related to download_commands.cc and download_prefs.cc.

CVSS 2.0 · 6.8 Medium EPSS 3.9% KEV · Not listed
Vendors
Debian Google Opensuse and 1 more
Products
Debian Linux Chrome Opensuse and 4 more
CVE-2015-1276

chromium-browser: Use-after-free in IndexedDB.

Use-after-free vulnerability in content/browser/indexed_db/indexed_db_backing_store.cc in the IndexedDB implementation in Google Chrome before 44.0.2403.89 allows remote attackers to cause a denial of service or possibly have unspecified other impact by leveraging an abort action before a certain write operation.

CVSS 3.0 · 9.8 Critical EPSS 1.6% KEV · Not listed
Vendors
Debian Google Opensuse and 1 more
Products
Debian Linux Chrome Opensuse and 5 more