CVE-2012-2872
- EPSS 0.36%
- Veröffentlicht 31.08.2012 19:55:01
- Zuletzt bearbeitet 11.04.2025 00:51:21
Cross-site scripting (XSS) vulnerability in an SSL interstitial page in Google Chrome before 21.0.1180.89 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors.
CVE-2012-2865
- EPSS 0.97%
- Veröffentlicht 31.08.2012 19:55:00
- Zuletzt bearbeitet 11.04.2025 00:51:21
Google Chrome before 21.0.1180.89 does not properly perform line breaking, which allows remote attackers to cause a denial of service (out-of-bounds read) via a crafted document.
CVE-2012-2866
- EPSS 1.62%
- Veröffentlicht 31.08.2012 19:55:00
- Zuletzt bearbeitet 11.04.2025 00:51:21
Google Chrome before 21.0.1180.89 does not properly perform a cast of an unspecified variable during handling of run-in elements, which allows remote attackers to cause a denial of service or possibly have unknown other impact via a crafted document.
- EPSS 1.38%
- Veröffentlicht 31.08.2012 19:55:00
- Zuletzt bearbeitet 11.04.2025 00:51:21
The SPDY implementation in Google Chrome before 21.0.1180.89 allows remote attackers to cause a denial of service (application crash) via unspecified vectors.
CVE-2012-2868
- EPSS 0.92%
- Veröffentlicht 31.08.2012 19:55:00
- Zuletzt bearbeitet 11.04.2025 00:51:21
Race condition in Google Chrome before 21.0.1180.89 allows remote attackers to cause a denial of service or possibly have unspecified other impact via vectors involving improper interaction between worker processes and an XMLHttpRequest (aka XHR) obj...
CVE-2012-2862
- EPSS 0.97%
- Veröffentlicht 09.08.2012 10:29:47
- Zuletzt bearbeitet 11.04.2025 00:51:21
Use-after-free vulnerability in the PDF functionality in Google Chrome before 21.0.1180.75 allows remote attackers to cause a denial of service or possibly have unspecified other impact via a crafted document.
CVE-2012-2863
- EPSS 0.71%
- Veröffentlicht 09.08.2012 10:29:47
- Zuletzt bearbeitet 11.04.2025 00:51:21
The PDF functionality in Google Chrome before 21.0.1180.75 allows remote attackers to cause a denial of service or possibly have unspecified other impact via vectors that trigger out-of-bounds write operations.
CVE-2012-2860
- EPSS 0.45%
- Veröffentlicht 06.08.2012 15:55:02
- Zuletzt bearbeitet 11.04.2025 00:51:21
The date-picker implementation in Google Chrome before 21.0.1180.57 on Mac OS X and Linux, and before 21.0.1180.60 on Windows and Chrome Frame, allows user-assisted remote attackers to cause a denial of service or possibly have unspecified other impa...
- EPSS 0.31%
- Veröffentlicht 06.08.2012 15:55:01
- Zuletzt bearbeitet 11.04.2025 00:51:21
Google Chrome before 21.0.1180.57 on Linux does not properly isolate renderer processes, which allows remote attackers to cause a denial of service (cross-process interference) via unspecified vectors.
CVE-2012-2847
- EPSS 0.46%
- Veröffentlicht 06.08.2012 15:55:01
- Zuletzt bearbeitet 11.04.2025 00:51:21
Google Chrome before 21.0.1180.57 on Mac OS X and Linux, and before 21.0.1180.60 on Windows and Chrome Frame, does not request user confirmation before continuing a large series of downloads, which allows user-assisted remote attackers to cause a den...