CVE-2013-6661
- EPSS 0.58%
- Published 24.02.2014 04:48:10
- Last modified 11.04.2025 00:51:21
Multiple unspecified vulnerabilities in Google Chrome before 33.0.1750.117 allow attackers to bypass the sandbox protection mechanism after obtaining renderer access, or have other impact, via unknown vectors.
CVE-2013-6652
- EPSS 0.39%
- Published 24.02.2014 04:48:09
- Last modified 11.04.2025 00:51:21
Directory traversal vulnerability in sandbox/win/src/named_pipe_dispatcher.cc in Google Chrome before 33.0.1750.117 on Windows allows attackers to bypass intended named-pipe policy restrictions in the sandbox via vectors related to (1) lack of checks...
CVE-2013-6653
- EPSS 0.82%
- Published 24.02.2014 04:48:09
- Last modified 11.04.2025 00:51:21
Use-after-free vulnerability in the web contents implementation in Google Chrome before 33.0.1750.117 allows remote attackers to cause a denial of service or possibly have unspecified other impact via vectors involving attempted conflicting access to...
CVE-2013-6654
- EPSS 0.89%
- Published 24.02.2014 04:48:09
- Last modified 11.04.2025 00:51:21
The SVGAnimateElement::calculateAnimatedValue function in core/svg/SVGAnimateElement.cpp in Blink, as used in Google Chrome before 33.0.1750.117, does not properly handle unexpected data types, which allows remote attackers to cause a denial of servi...
CVE-2013-6655
- EPSS 0.89%
- Published 24.02.2014 04:48:09
- Last modified 11.04.2025 00:51:21
Use-after-free vulnerability in Blink, as used in Google Chrome before 33.0.1750.117, allows remote attackers to cause a denial of service or possibly have unspecified other impact via vectors related to improper handling of overflowchanged DOM event...
CVE-2013-6166
- EPSS 0.63%
- Published 15.02.2014 14:57:07
- Last modified 11.04.2025 00:51:21
Google Chrome before 29 sends HTTP Cookie headers without first validating that they have the required character-set restrictions, which allows remote attackers to conduct the equivalent of a persistent Logout CSRF attack via a crafted parameter that...
- EPSS 93.02%
- Published 05.02.2014 05:15:29
- Last modified 11.04.2025 00:51:21
Integer underflow in Adobe Flash Player before 11.7.700.261 and 11.8.x through 12.0.x before 12.0.0.44 on Windows and Mac OS X, and before 11.2.202.336 on Linux, allows remote attackers to execute arbitrary code via unspecified vectors.
CVE-2013-6650
- EPSS 2.38%
- Published 28.01.2014 14:30:39
- Last modified 11.04.2025 00:51:21
The StoreBuffer::ExemptPopularPages function in store-buffer.cc in Google V8 before 3.22.24.16, as used in Google Chrome before 32.0.1700.102, allows remote attackers to cause a denial of service (memory corruption) or possibly have unspecified other...
- EPSS 0.32%
- Published 28.01.2014 14:30:39
- Last modified 11.04.2025 00:51:21
Multiple unspecified vulnerabilities in Google Chrome before 32.0.1700.102 have unknown impact and attack vectors, related to 12 "security fixes [that were not] either contributed by external researchers or particularly interesting."
CVE-2013-6649
- EPSS 0.93%
- Published 28.01.2014 14:30:33
- Last modified 11.04.2025 00:51:21
Use-after-free vulnerability in the RenderSVGImage::paint function in core/rendering/svg/RenderSVGImage.cpp in Blink, as used in Google Chrome before 32.0.1700.102, allows remote attackers to cause a denial of service or possibly have unspecified oth...