Google

Chrome

3675 vulnerabilities found.

Hinweis: Diese Liste kann unvollständig sein. Daten werden ohne Gewähr im Ursprungsformat bereitgestellt.
7.5

CVE-2013-6664

  • EPSS 0.89%
  • Published 05.03.2014 05:11:22
  • Last modified 12.04.2025 10:46:40

Use-after-free vulnerability in the FormAssociatedElement::formRemovedFromTree function in core/html/FormAssociatedElement.cpp in Blink, as used in Google Chrome before 33.0.1750.146, allows remote attackers to cause a denial of service or possibly h...

7.5

CVE-2013-6665

  • EPSS 0.97%
  • Published 05.03.2014 05:11:22
  • Last modified 12.04.2025 10:46:40

Heap-based buffer overflow in the ResourceProvider::InitializeSoftware function in cc/resources/resource_provider.cc in Google Chrome before 33.0.1750.146 allows remote attackers to cause a denial of service or possibly have unspecified other impact ...

5.8

CVE-2013-6666

  • EPSS 0.27%
  • Published 05.03.2014 05:11:22
  • Last modified 12.04.2025 10:46:40

The PepperFlashRendererHost::OnNavigate function in renderer/pepper/pepper_flash_renderer_host.cc in Google Chrome before 33.0.1750.146 does not verify that all headers are Cross-Origin Resource Sharing (CORS) simple headers before proceeding with a ...

7.5

CVE-2013-6667

  • EPSS 0.53%
  • Published 05.03.2014 05:11:22
  • Last modified 12.04.2025 10:46:40

Multiple unspecified vulnerabilities in Google Chrome before 33.0.1750.146 allow attackers to cause a denial of service or possibly have other impact via unknown vectors.

7.5

CVE-2013-6668

  • EPSS 12.82%
  • Published 05.03.2014 05:11:22
  • Last modified 12.04.2025 10:46:40

Multiple unspecified vulnerabilities in Google V8 before 3.24.35.10, as used in Google Chrome before 33.0.1750.146, allow attackers to cause a denial of service or possibly have other impact via unknown vectors.

5

CVE-2013-6656

  • EPSS 0.38%
  • Published 24.02.2014 04:48:10
  • Last modified 11.04.2025 00:51:21

The XSSAuditor::init function in core/html/parser/XSSAuditor.cpp in the XSS auditor in Blink, as used in Google Chrome before 33.0.1750.117, processes POST requests by using the body of a redirecting page instead of the body of a redirect target, whi...

6.4

CVE-2013-6657

  • EPSS 0.27%
  • Published 24.02.2014 04:48:10
  • Last modified 11.04.2025 00:51:21

core/html/parser/XSSAuditor.cpp in the XSS auditor in Blink, as used in Google Chrome before 33.0.1750.117, inserts the about:blank URL during certain blocking of FORM elements within HTTP requests, which allows remote attackers to bypass the Same Or...

7.5

CVE-2013-6658

  • EPSS 1.49%
  • Published 24.02.2014 04:48:10
  • Last modified 11.04.2025 00:51:21

Multiple use-after-free vulnerabilities in the layout implementation in Blink, as used in Google Chrome before 33.0.1750.117, allow remote attackers to cause a denial of service or possibly have unspecified other impact via vectors involving (1) runn...

6.4

CVE-2013-6659

  • EPSS 0.1%
  • Published 24.02.2014 04:48:10
  • Last modified 11.04.2025 00:51:21

The SSLClientSocketNSS::Core::OwnAuthCertHandler function in net/socket/ssl_client_socket_nss.cc in Google Chrome before 33.0.1750.117 does not prevent changes to server X.509 certificates during renegotiations, which allows remote SSL servers to tri...

5

CVE-2013-6660

  • EPSS 0.34%
  • Published 24.02.2014 04:48:10
  • Last modified 11.04.2025 00:51:21

The drag-and-drop implementation in Google Chrome before 33.0.1750.117 does not properly restrict the information in WebDropData data structures, which allows remote attackers to discover full pathnames via a crafted web site.