CVE-2013-6621
- EPSS 1.48%
- Published 13.11.2013 15:55:04
- Last modified 11.04.2025 00:51:21
Use-after-free vulnerability in Google Chrome before 31.0.1650.48 allows remote attackers to cause a denial of service or possibly have unspecified other impact via vectors related to the x-webkit-speech attribute in a text INPUT element.
CVE-2013-6622
- EPSS 1.61%
- Published 13.11.2013 15:55:04
- Last modified 11.04.2025 00:51:21
Use-after-free vulnerability in the HTMLMediaElement::didMoveToNewDocument function in core/html/HTMLMediaElement.cpp in Blink, as used in Google Chrome before 31.0.1650.48, allows remote attackers to cause a denial of service or possibly have unspec...
CVE-2013-6623
- EPSS 1.55%
- Published 13.11.2013 15:55:04
- Last modified 11.04.2025 00:51:21
The SVG implementation in Blink, as used in Google Chrome before 31.0.1650.48, allows remote attackers to cause a denial of service (out-of-bounds read) by leveraging the use of tree order, rather than transitive dependency order, for layout.
CVE-2013-6624
- EPSS 1.46%
- Published 13.11.2013 15:55:04
- Last modified 11.04.2025 00:51:21
Use-after-free vulnerability in Google Chrome before 31.0.1650.48 allows remote attackers to cause a denial of service or possibly have unspecified other impact via vectors involving the string values of id attributes.
CVE-2013-6625
- EPSS 1.51%
- Published 13.11.2013 15:55:04
- Last modified 11.04.2025 00:51:21
Use-after-free vulnerability in core/dom/ContainerNode.cpp in Blink, as used in Google Chrome before 31.0.1650.48, allows remote attackers to cause a denial of service or possibly have unspecified other impact by leveraging improper handling of DOM r...
CVE-2013-6626
- EPSS 0.65%
- Published 13.11.2013 15:55:04
- Last modified 11.04.2025 00:51:21
The WebContentsImpl::AttachInterstitialPage function in content/browser/web_contents/web_contents_impl.cc in Google Chrome before 31.0.1650.48 does not cancel JavaScript dialogs upon generating an interstitial warning, which allows remote attackers t...
- EPSS 5.54%
- Published 13.11.2013 15:55:04
- Last modified 11.04.2025 00:51:21
net/http/http_stream_parser.cc in Google Chrome before 31.0.1650.48 does not properly process HTTP Informational (aka 1xx) status codes, which allows remote web servers to cause a denial of service (out-of-bounds read) via a crafted response.
CVE-2013-6628
- EPSS 0.32%
- Published 13.11.2013 15:55:04
- Last modified 11.04.2025 00:51:21
net/socket/ssl_client_socket_nss.cc in the TLS implementation in Google Chrome before 31.0.1650.48 does not ensure that a server's X.509 certificate is the same during renegotiation as it was before renegotiation, which might allow remote web servers...
- EPSS 1.78%
- Published 13.11.2013 15:55:03
- Last modified 11.04.2025 00:51:21
Multiple unspecified vulnerabilities in Google Chrome before 31.0.1650.48 allow attackers to execute arbitrary code or possibly have other impact via unknown vectors.
CVE-2013-2926
- EPSS 1.51%
- Published 16.10.2013 20:55:06
- Last modified 11.04.2025 00:51:21
Use-after-free vulnerability in the IndentOutdentCommand::tryIndentingAsListItem function in core/editing/IndentOutdentCommand.cpp in Blink, as used in Google Chrome before 30.0.1599.101, allows user-assisted remote attackers to cause a denial of ser...