CVE-2015-8664
- EPSS 5.23%
- Veröffentlicht 24.12.2015 03:59:01
- Zuletzt bearbeitet 06.05.2026 22:30:45
Integer overflow in the WebCursor::Deserialize function in content/common/cursors/webcursor.cc in Google Chrome before 47.0.2526.106 allows remote attackers to cause a denial of service or possibly have unspecified other impact via an RGBA pixel arra...
- EPSS 3.96%
- Veröffentlicht 24.12.2015 03:59:00
- Zuletzt bearbeitet 06.05.2026 22:30:45
The MIDI subsystem in Google Chrome before 47.0.2526.106 does not properly handle the sending of data, which allows remote attackers to execute arbitrary code or cause a denial of service (application crash) via unspecified vectors, related to midi_m...
- EPSS 1.2%
- Veröffentlicht 14.12.2015 11:59:04
- Zuletzt bearbeitet 06.05.2026 22:30:45
Multiple unspecified vulnerabilities in Google V8 before 4.7.80.23, as used in Google Chrome before 47.0.2526.80, allow attackers to cause a denial of service or possibly have other impact via unknown vectors, a different issue than CVE-2015-8478.
CVE-2015-6790
- EPSS 1.36%
- Veröffentlicht 14.12.2015 11:59:03
- Zuletzt bearbeitet 06.05.2026 22:30:45
The WebPageSerializerImpl::openTagToString function in WebKit/Source/web/WebPageSerializerImpl.cpp in the page serializer in Google Chrome before 47.0.2526.80 does not properly use HTML entities, which might allow remote attackers to inject arbitrary...
- EPSS 1.6%
- Veröffentlicht 14.12.2015 11:59:03
- Zuletzt bearbeitet 06.05.2026 22:30:45
Multiple unspecified vulnerabilities in Google Chrome before 47.0.2526.80 allow attackers to cause a denial of service or possibly have other impact via unknown vectors.
CVE-2015-6789
- EPSS 1.71%
- Veröffentlicht 14.12.2015 11:59:01
- Zuletzt bearbeitet 06.05.2026 22:30:45
Race condition in the MutationObserver implementation in Blink, as used in Google Chrome before 47.0.2526.80, allows remote attackers to cause a denial of service (use-after-free) or possibly have unspecified other impact by leveraging unanticipated ...
- EPSS 3.2%
- Veröffentlicht 14.12.2015 11:59:00
- Zuletzt bearbeitet 06.05.2026 22:30:45
The ObjectBackedNativeHandler class in extensions/renderer/object_backed_native_handler.cc in the extensions subsystem in Google Chrome before 47.0.2526.80 improperly implements handler functions, which allows remote attackers to cause a denial of se...
- EPSS 1.35%
- Veröffentlicht 06.12.2015 01:59:27
- Zuletzt bearbeitet 06.05.2026 22:30:45
The VideoFramePool::PoolImpl::CreateFrame function in media/base/video_frame_pool.cc in Google Chrome before 47.0.2526.73 does not initialize memory for a video-frame data structure, which might allow remote attackers to cause a denial of service (ou...
CVE-2015-8479
- EPSS 0.63%
- Veröffentlicht 06.12.2015 01:59:26
- Zuletzt bearbeitet 06.05.2026 22:30:45
Use-after-free vulnerability in the AudioOutputDevice::OnDeviceAuthorized function in media/audio/audio_output_device.cc in Google Chrome before 47.0.2526.73 allows attackers to cause a denial of service (heap memory corruption) or possibly have unsp...
CVE-2015-8478
- EPSS 0.63%
- Veröffentlicht 06.12.2015 01:59:25
- Zuletzt bearbeitet 06.05.2026 22:30:45
Multiple unspecified vulnerabilities in Google V8 before 4.7.80.23, as used in Google Chrome before 47.0.2526.73, allow attackers to cause a denial of service or possibly have other impact via unknown vectors.