Search Results (Refine Search)

Search Parameters:
  • CPE Product Version: cpe:/a:google:chrome:27.0.1453.1
There are 1,446 matching records.
Displaying matches 1,381 through 1,400.
Vuln ID Summary CVSS Severity
CVE-2013-2908

Google Chrome before 30.0.1599.66 uses incorrect function calls to determine the values of NavigationEntry objects, which allows remote attackers to spoof the address bar via vectors involving a response with a 204 (aka No Content) status code.

Published: October 02, 2013; 6:35:35 AM -0400
V3.x:(not available)
V2.0: 5.0 MEDIUM
CVE-2013-2907

The Window.prototype object implementation in Google Chrome before 30.0.1599.66 allows remote attackers to cause a denial of service (out-of-bounds read) via unspecified vectors.

Published: October 02, 2013; 6:35:35 AM -0400
V3.x:(not available)
V2.0: 5.0 MEDIUM
CVE-2013-2906

Multiple race conditions in the Web Audio implementation in Blink, as used in Google Chrome before 30.0.1599.66, allow remote attackers to cause a denial of service or possibly have unspecified other impact via vectors related to threading in core/html/HTMLMediaElement.cpp, core/platform/audio/AudioDSPKernelProcessor.cpp, core/platform/audio/HRTFElevation.cpp, and modules/webaudio/ConvolverNode.cpp.

Published: October 02, 2013; 6:35:33 AM -0400
V3.x:(not available)
V2.0: 6.8 MEDIUM
CVE-2013-2905

The SharedMemory::Create function in memory/shared_memory_posix.cc in Google Chrome before 29.0.1547.57 uses weak permissions under /dev/shm/, which allows attackers to obtain sensitive information via direct access to a POSIX shared-memory file.

Published: August 21, 2013; 8:17:56 AM -0400
V3.x:(not available)
V2.0: 5.0 MEDIUM
CVE-2013-2904

Use-after-free vulnerability in the Document::finishedParsing function in core/dom/Document.cpp in Blink, as used in Google Chrome before 29.0.1547.57, allows remote attackers to cause a denial of service or possibly have unspecified other impact via an onload event that changes an IFRAME element so that its src attribute is no longer an XML document, leading to unintended garbage collection of this document.

Published: August 21, 2013; 8:17:56 AM -0400
V3.x:(not available)
V2.0: 7.5 HIGH
CVE-2013-2903

Use-after-free vulnerability in the HTMLMediaElement::didMoveToNewDocument function in core/html/HTMLMediaElement.cpp in Blink, as used in Google Chrome before 29.0.1547.57, allows remote attackers to cause a denial of service or possibly have unspecified other impact via vectors involving moving a (1) AUDIO or (2) VIDEO element between documents.

Published: August 21, 2013; 8:17:56 AM -0400
V3.x:(not available)
V2.0: 7.5 HIGH
CVE-2013-2902

Use-after-free vulnerability in the XSLT ProcessingInstruction implementation in Blink, as used in Google Chrome before 29.0.1547.57, allows remote attackers to cause a denial of service or possibly have unspecified other impact via vectors related to an applyXSLTransform call involving (1) an HTML document or (2) an xsl:processing-instruction element that is still in the process of loading.

Published: August 21, 2013; 8:17:56 AM -0400
V3.x:(not available)
V2.0: 7.5 HIGH
CVE-2013-2901

Multiple integer overflows in (1) libGLESv2/renderer/Renderer9.cpp and (2) libGLESv2/renderer/Renderer11.cpp in Almost Native Graphics Layer Engine (ANGLE), as used in Google Chrome before 29.0.1547.57, allow remote attackers to cause a denial of service or possibly have unspecified other impact via unknown vectors.

Published: August 21, 2013; 8:17:56 AM -0400
V3.x:(not available)
V2.0: 7.5 HIGH
CVE-2013-2900

The FilePath::ReferencesParent function in files/file_path.cc in Google Chrome before 29.0.1547.57 on Windows does not properly handle pathname components composed entirely of . (dot) and whitespace characters, which allows remote attackers to conduct directory traversal attacks via a crafted directory name.

Published: August 21, 2013; 8:17:56 AM -0400
V3.x:(not available)
V2.0: 7.5 HIGH
CVE-2013-2887

Multiple unspecified vulnerabilities in Google Chrome before 29.0.1547.57 allow attackers to cause a denial of service or possibly have other impact via unknown vectors.

Published: August 21, 2013; 8:17:53 AM -0400
V3.x:(not available)
V2.0: 7.5 HIGH
CVE-2013-2886

Multiple unspecified vulnerabilities in Google Chrome before 28.0.1500.95 allow attackers to cause a denial of service or possibly have other impact via unknown vectors.

Published: July 31, 2013; 9:20:14 AM -0400
V3.x:(not available)
V2.0: 7.5 HIGH
CVE-2013-2885

Use-after-free vulnerability in Google Chrome before 28.0.1500.95 allows remote attackers to cause a denial of service or possibly have unspecified other impact via vectors related to not properly considering focus during the processing of JavaScript events in the presence of a multiple-fields input type.

Published: July 31, 2013; 9:20:13 AM -0400
V3.x:(not available)
V2.0: 7.5 HIGH
CVE-2013-2884

Use-after-free vulnerability in the DOM implementation in Google Chrome before 28.0.1500.95 allows remote attackers to cause a denial of service or possibly have unspecified other impact via vectors related to improper tracking of which document owns an Attr object.

Published: July 31, 2013; 9:20:13 AM -0400
V3.x:(not available)
V2.0: 7.5 HIGH
CVE-2013-2883

Use-after-free vulnerability in Google Chrome before 28.0.1500.95 allows remote attackers to cause a denial of service or possibly have unspecified other impact via vectors related to deleting the registration of a MutationObserver object.

Published: July 31, 2013; 9:20:13 AM -0400
V3.x:(not available)
V2.0: 7.5 HIGH
CVE-2013-2882

Google V8, as used in Google Chrome before 28.0.1500.95, allows remote attackers to cause a denial of service or possibly have unspecified other impact via vectors that leverage "type confusion."

Published: July 31, 2013; 9:20:13 AM -0400
V3.x:(not available)
V2.0: 7.5 HIGH
CVE-2013-2881

Google Chrome before 28.0.1500.95 does not properly handle frames, which allows remote attackers to bypass the Same Origin Policy via a crafted web site.

Published: July 31, 2013; 9:20:13 AM -0400
V3.x:(not available)
V2.0: 5.8 MEDIUM
CVE-2013-2880

Multiple unspecified vulnerabilities in Google Chrome before 28.0.1500.71 allow attackers to cause a denial of service or possibly have other impact via unknown vectors.

Published: July 10, 2013; 6:55:02 AM -0400
V3.x:(not available)
V2.0: 7.5 HIGH
CVE-2013-2879

Google Chrome before 28.0.1500.71 does not properly determine the circumstances in which a renderer process can be considered a trusted process for sign-in and subsequent sync operations, which makes it easier for remote attackers to conduct phishing attacks via a crafted web site.

Published: July 10, 2013; 6:55:02 AM -0400
V3.x:(not available)
V2.0: 5.8 MEDIUM
CVE-2013-2878

Google Chrome before 28.0.1500.71 allows remote attackers to cause a denial of service (out-of-bounds read) via vectors related to the handling of text.

Published: July 10, 2013; 6:55:02 AM -0400
V3.x:(not available)
V2.0: 5.0 MEDIUM
CVE-2013-2877

parser.c in libxml2 before 2.9.0, as used in Google Chrome before 28.0.1500.71 and other products, allows remote attackers to cause a denial of service (out-of-bounds read) via a document that ends abruptly, related to the lack of certain checks for the XML_PARSER_EOF state.

Published: July 10, 2013; 6:55:02 AM -0400
V3.x:(not available)
V2.0: 5.0 MEDIUM