Google

Chrome

3770 Schwachstellen gefunden.

Hinweis: Diese Liste kann unvollständig sein. Daten werden ohne Gewähr im Ursprungsformat bereitgestellt.
10

CVE-2011-3091

  • EPSS 3.45%
  • Veröffentlicht 16.05.2012 00:55:02
  • Zuletzt bearbeitet 11.04.2025 00:51:21

Use-after-free vulnerability in the IndexedDB implementation in Google Chrome before 19.0.1084.46 allows remote attackers to cause a denial of service or possibly have unspecified other impact via unknown vectors.

10

CVE-2011-3092

  • EPSS 2.94%
  • Veröffentlicht 16.05.2012 00:55:02
  • Zuletzt bearbeitet 11.04.2025 00:51:21

The regex implementation in Google V8, as used in Google Chrome before 19.0.1084.46, allows remote attackers to cause a denial of service (invalid write operation) or possibly have unspecified other impact via unknown vectors.

5

CVE-2011-3093

  • EPSS 1.17%
  • Veröffentlicht 16.05.2012 00:55:02
  • Zuletzt bearbeitet 11.04.2025 00:51:21

Google Chrome before 19.0.1084.46 does not properly handle glyphs, which allows remote attackers to cause a denial of service (out-of-bounds read) via unspecified vectors.

5

CVE-2011-3094

  • EPSS 1.46%
  • Veröffentlicht 16.05.2012 00:55:02
  • Zuletzt bearbeitet 11.04.2025 00:51:21

Google Chrome before 19.0.1084.46 does not properly handle Tibetan text, which allows remote attackers to cause a denial of service (out-of-bounds read) via unspecified vectors.

10

CVE-2011-3095

  • EPSS 3.02%
  • Veröffentlicht 16.05.2012 00:55:02
  • Zuletzt bearbeitet 11.04.2025 00:51:21

The OGG container in Google Chrome before 19.0.1084.46 allows remote attackers to cause a denial of service or possibly have unspecified other impact via unknown vectors that trigger an out-of-bounds write.

5

CVE-2011-3083

  • EPSS 2.17%
  • Veröffentlicht 16.05.2012 00:55:01
  • Zuletzt bearbeitet 11.04.2025 00:51:21

browser/profiles/profile_impl_io_data.cc in Google Chrome before 19.0.1084.46 does not properly handle a malformed ftp URL in the SRC attribute of a VIDEO element, which allows remote attackers to cause a denial of service (NULL pointer dereference a...

7.5

CVE-2011-3084

  • EPSS 0.42%
  • Veröffentlicht 16.05.2012 00:55:01
  • Zuletzt bearbeitet 11.04.2025 00:51:21

Google Chrome before 19.0.1084.46 does not use a dedicated process for the loading of links found on an internal page, which might allow attackers to bypass intended sandbox restrictions via a crafted page.

5

CVE-2011-3085

  • EPSS 1.46%
  • Veröffentlicht 16.05.2012 00:55:01
  • Zuletzt bearbeitet 11.04.2025 00:51:21

The Autofill feature in Google Chrome before 19.0.1084.46 does not properly restrict field values, which allows remote attackers to cause a denial of service (UI corruption) and possibly conduct spoofing attacks via vectors involving long values.

10

CVE-2011-3086

  • EPSS 7.53%
  • Veröffentlicht 16.05.2012 00:55:01
  • Zuletzt bearbeitet 11.04.2025 00:51:21

Use-after-free vulnerability in Google Chrome before 19.0.1084.46 allows remote attackers to cause a denial of service or possibly have unspecified other impact via vectors involving a STYLE element.

10

CVE-2011-3087

  • EPSS 0.85%
  • Veröffentlicht 16.05.2012 00:55:01
  • Zuletzt bearbeitet 11.04.2025 00:51:21

Google Chrome before 19.0.1084.46 does not properly perform window navigation, which has unspecified impact and remote attack vectors.