Search vulnerabilities

Results 18,405

CVE-2011-3023

Use-after-free vulnerability in Google Chrome before 17.0.963.56 allows user-assisted remote attackers to cause a denial of service or possibly have unspecified other impact via vectors related to drag-and-drop operations.

CVSS 2.0 · 6.8 Medium EPSS < 1% KEV · Not listed
Vendors
Products
CVE-2011-3032

Use-after-free vulnerability in Google Chrome before 17.0.963.65 allows remote attackers to cause a denial of service or possibly have unspecified other impact via vectors related to the handling of SVG values.

CVSS 2.0 · 6.8 Medium EPSS 1.9% KEV · Not listed
Products
Iphone Os Itunes Safari and 2 more
CVE-2011-3044

Use-after-free vulnerability in Google Chrome before 17.0.963.65 allows remote attackers to cause a denial of service or possibly have unspecified other impact via vectors involving SVG animation elements.

CVSS 2.0 · 6.8 Medium EPSS 1.8% KEV · Not listed
Products
Iphone Os Itunes Safari and 2 more
CVE-2011-3054

The WebUI privilege implementation in Google Chrome before 17.0.963.83 does not properly perform isolation, which allows remote attackers to bypass intended access restrictions via unspecified vectors.

CVSS 2.0 · 4.3 Medium EPSS 1.8% KEV · Not listed
Vendors
Products
CVE-2011-3061

Google Chrome before 18.0.1025.142 does not properly check X.509 certificates before use of a SPDY proxy, which might allow man-in-the-middle attackers to spoof servers or obtain sensitive information via a crafted certificate.

CVSS 2.0 · 5.8 Medium EPSS < 1% KEV · Not listed
Vendors
Products
CVE-2011-3063

Google Chrome before 18.0.1025.142 does not properly validate the renderer's navigation requests, which has unspecified impact and remote attack vectors.

CVSS 2.0 · 4.3 Medium EPSS 1.1% KEV · Not listed
Vendors
Products
CVE-2011-3066

Skia, as used in Google Chrome before 18.0.1025.151, does not properly perform clipping, which allows remote attackers to cause a denial of service (out-of-bounds read) via unspecified vectors.

CVSS 2.0 · 6.8 Medium EPSS 1.7% KEV · Not listed
Vendors
Products
CVE-2011-3070

Use-after-free vulnerability in Google Chrome before 18.0.1025.151 allows remote attackers to cause a denial of service or possibly have unspecified other impact via vectors related to the Google V8 bindings.

CVSS 2.0 · 6.8 Medium EPSS 2.0% KEV · Not listed
Vendors
Products
CVE-2011-3071

Use-after-free vulnerability in the HTMLMediaElement implementation in Google Chrome before 18.0.1025.151 allows remote attackers to cause a denial of service or possibly have unspecified other impact via unknown vectors.

CVSS 2.0 · 6.8 Medium EPSS 2.1% KEV · Not listed
Vendors
Products
Iphone Os Itunes Safari and 1 more
CVE-2011-3075

Use-after-free vulnerability in Google Chrome before 18.0.1025.151 allows remote attackers to cause a denial of service or possibly have unspecified other impact via vectors related to style-application commands.

CVSS 2.0 · 6.8 Medium EPSS 2.1% KEV · Not listed
Vendors
Products
Iphone Os Itunes Safari and 1 more
CVE-2011-3076

Use-after-free vulnerability in Google Chrome before 18.0.1025.151 allows remote attackers to cause a denial of service or possibly have unspecified other impact via vectors related to focus handling.

CVSS 2.0 · 6.8 Medium EPSS 2.0% KEV · Not listed
Vendors
Products
Iphone Os Itunes Safari and 1 more
CVE-2011-3077

Use-after-free vulnerability in Google Chrome before 18.0.1025.151 allows remote attackers to cause a denial of service or possibly have unspecified other impact via vectors involving the script bindings, related to a "read-after-free" issue.

CVSS 2.0 · 6.8 Medium EPSS 1.9% KEV · Not listed
Vendors
Products
CVE-2011-3081

Webkitgtk: google chrome update [30-April-2012]

Use-after-free vulnerability in Google Chrome before 18.0.1025.168 allows remote attackers to cause a denial of service or possibly have unspecified other impact via vectors related to the floating of elements, a different vulnerability than CVE-2011-3078.

CVSS 2.0 · 9.3 Critical EPSS 3.1% KEV · Not listed
Vendors
Products
Iphone Os Itunes Safari and 1 more
CVE-2011-3883

Use-after-free vulnerability in Google Chrome before 15.0.874.102 allows remote attackers to cause a denial of service or possibly have unspecified other impact via vectors related to counters.

CVSS 2.0 · 7.5 High EPSS 1.2% KEV · Not listed
Vendors
Products
CVE-2011-3884

Google Chrome before 15.0.874.102 does not properly address timing issues during DOM traversal, which allows remote attackers to cause a denial of service or possibly have unspecified other impact via a crafted document.

CVSS 2.0 · 6.8 Medium EPSS 1.2% KEV · Not listed
Vendors
Products
CVE-2011-3885

Use-after-free vulnerability in Google Chrome before 15.0.874.102 allows remote attackers to cause a denial of service or possibly have unspecified other impact via vectors related to stale Cascading Style Sheets (CSS) token-sequence data.

CVSS 2.0 · 7.5 High EPSS 2.0% KEV · Not listed
Vendors
Products
Iphone Os Itunes Safari and 1 more
CVE-2011-3887

Google Chrome before 15.0.874.102 does not properly handle javascript: URLs, which allows remote attackers to bypass intended access restrictions and read cookies via unspecified vectors.

CVSS 2.0 · 5.0 Medium EPSS 1.5% KEV · Not listed
Vendors
CVE-2011-3904

Use-after-free vulnerability in Google Chrome before 16.0.912.63 allows remote attackers to cause a denial of service or possibly have unspecified other impact via vectors related to bidirectional text (aka bidi) handling.

CVSS 2.0 · 7.5 High EPSS 1.1% KEV · Not listed
Vendors
Products
CVE-2011-3913

Use-after-free vulnerability in Google Chrome before 16.0.912.63 allows remote attackers to cause a denial of service or possibly have unspecified other impact via vectors related to Range handling.

CVSS 2.0 · 7.5 High EPSS 1.8% KEV · Not listed
Vendors
Products
Iphone Os Itunes Safari and 1 more
CVE-2011-3914

The internationalization (aka i18n) functionality in Google V8, as used in Google Chrome before 16.0.912.63, allows remote attackers to cause a denial of service or possibly have unspecified other impact via unknown vectors that trigger an out-of-bounds write.

CVSS 2.0 · 7.5 High EPSS 1.2% KEV · Not listed
Vendors
Products