Google

Chrome

3758 Schwachstellen gefunden.

Hinweis: Diese Liste kann unvollständig sein. Daten werden ohne Gewähr im Ursprungsformat bereitgestellt.
7.5

CVE-2013-6658

  • EPSS 1.49%
  • Veröffentlicht 24.02.2014 04:48:10
  • Zuletzt bearbeitet 11.04.2025 00:51:21

Multiple use-after-free vulnerabilities in the layout implementation in Blink, as used in Google Chrome before 33.0.1750.117, allow remote attackers to cause a denial of service or possibly have unspecified other impact via vectors involving (1) runn...

6.4

CVE-2013-6659

  • EPSS 0.1%
  • Veröffentlicht 24.02.2014 04:48:10
  • Zuletzt bearbeitet 11.04.2025 00:51:21

The SSLClientSocketNSS::Core::OwnAuthCertHandler function in net/socket/ssl_client_socket_nss.cc in Google Chrome before 33.0.1750.117 does not prevent changes to server X.509 certificates during renegotiations, which allows remote SSL servers to tri...

5

CVE-2013-6660

  • EPSS 0.34%
  • Veröffentlicht 24.02.2014 04:48:10
  • Zuletzt bearbeitet 11.04.2025 00:51:21

The drag-and-drop implementation in Google Chrome before 33.0.1750.117 does not properly restrict the information in WebDropData data structures, which allows remote attackers to discover full pathnames via a crafted web site.

7.5

CVE-2013-6661

  • EPSS 0.58%
  • Veröffentlicht 24.02.2014 04:48:10
  • Zuletzt bearbeitet 11.04.2025 00:51:21

Multiple unspecified vulnerabilities in Google Chrome before 33.0.1750.117 allow attackers to bypass the sandbox protection mechanism after obtaining renderer access, or have other impact, via unknown vectors.

7.5

CVE-2013-6652

  • EPSS 0.39%
  • Veröffentlicht 24.02.2014 04:48:09
  • Zuletzt bearbeitet 11.04.2025 00:51:21

Directory traversal vulnerability in sandbox/win/src/named_pipe_dispatcher.cc in Google Chrome before 33.0.1750.117 on Windows allows attackers to bypass intended named-pipe policy restrictions in the sandbox via vectors related to (1) lack of checks...

7.5

CVE-2013-6653

  • EPSS 0.82%
  • Veröffentlicht 24.02.2014 04:48:09
  • Zuletzt bearbeitet 11.04.2025 00:51:21

Use-after-free vulnerability in the web contents implementation in Google Chrome before 33.0.1750.117 allows remote attackers to cause a denial of service or possibly have unspecified other impact via vectors involving attempted conflicting access to...

7.5

CVE-2013-6654

  • EPSS 0.89%
  • Veröffentlicht 24.02.2014 04:48:09
  • Zuletzt bearbeitet 11.04.2025 00:51:21

The SVGAnimateElement::calculateAnimatedValue function in core/svg/SVGAnimateElement.cpp in Blink, as used in Google Chrome before 33.0.1750.117, does not properly handle unexpected data types, which allows remote attackers to cause a denial of servi...

7.5

CVE-2013-6655

  • EPSS 0.89%
  • Veröffentlicht 24.02.2014 04:48:09
  • Zuletzt bearbeitet 11.04.2025 00:51:21

Use-after-free vulnerability in Blink, as used in Google Chrome before 33.0.1750.117, allows remote attackers to cause a denial of service or possibly have unspecified other impact via vectors related to improper handling of overflowchanged DOM event...

6.8

CVE-2013-6166

  • EPSS 0.63%
  • Veröffentlicht 15.02.2014 14:57:07
  • Zuletzt bearbeitet 11.04.2025 00:51:21

Google Chrome before 29 sends HTTP Cookie headers without first validating that they have the required character-set restrictions, which allows remote attackers to conduct the equivalent of a persistent Logout CSRF attack via a crafted parameter that...

10

CVE-2014-0497

Warnung
  • EPSS 93.06%
  • Veröffentlicht 05.02.2014 05:15:29
  • Zuletzt bearbeitet 22.10.2025 01:15:54

Integer underflow in Adobe Flash Player before 11.7.700.261 and 11.8.x through 12.0.x before 12.0.0.44 on Windows and Mac OS X, and before 11.2.202.336 on Linux, allows remote attackers to execute arbitrary code via unspecified vectors.