U.S. flag   An official website of the United States government
Dot gov

Official websites use .gov
A .gov website belongs to an official government organization in the United States.

Https

Secure .gov websites use HTTPS
A lock (Dot gov) or https:// means you've safely connected to the .gov website. Share sensitive information only on official, secure websites.

Search Results (Refine Search)

Search Parameters:
  • Keyword (text search): cpe:2.3:a:google:chrome:5.0.375.40:*:*:*:*:*:*:*
  • CPE Name Search: true
There are 3,206 matching records.
Displaying matches 2,501 through 2,520.
Vuln ID Summary CVSS Severity
CVE-2013-2854

Google Chrome before 27.0.1453.110 on Windows provides an incorrect handle to a renderer process in unspecified circumstances, which allows remote attackers to cause a denial of service or possibly have other impact via unknown vectors.

Published: June 04, 2013; 8:55:00 PM -0400
V3.x:(not available)
V2.0: 7.5 HIGH
CVE-2013-2849

Multiple cross-site scripting (XSS) vulnerabilities in Google Chrome before 27.0.1453.93 allow user-assisted remote attackers to inject arbitrary web script or HTML via vectors involving a (1) drag-and-drop or (2) copy-and-paste operation.

Published: May 22, 2013; 9:29:56 AM -0400
V3.x:(not available)
V2.0: 4.3 MEDIUM
CVE-2013-2848

The XSS Auditor in Google Chrome before 27.0.1453.93 might allow remote attackers to obtain sensitive information via unspecified vectors.

Published: May 22, 2013; 9:29:56 AM -0400
V3.x:(not available)
V2.0: 5.0 MEDIUM
CVE-2013-2847

Race condition in the workers implementation in Google Chrome before 27.0.1453.93 allows remote attackers to cause a denial of service (use-after-free and application crash) or possibly have unspecified other impact via unknown vectors.

Published: May 22, 2013; 9:29:56 AM -0400
V3.x:(not available)
V2.0: 6.8 MEDIUM
CVE-2013-2846

Use-after-free vulnerability in the media loader in Google Chrome before 27.0.1453.93 allows remote attackers to cause a denial of service or possibly have unspecified other impact via unknown vectors, a different vulnerability than CVE-2013-2840.

Published: May 22, 2013; 9:29:56 AM -0400
V3.x:(not available)
V2.0: 7.5 HIGH
CVE-2013-2845

The Web Audio implementation in Google Chrome before 27.0.1453.93 allows remote attackers to cause a denial of service (memory corruption) or possibly have unspecified other impact via unknown vectors.

Published: May 22, 2013; 9:29:56 AM -0400
V3.x:(not available)
V2.0: 7.5 HIGH
CVE-2013-2844

Use-after-free vulnerability in the Cascading Style Sheets (CSS) implementation in Google Chrome before 27.0.1453.93 allows remote attackers to cause a denial of service or possibly have unspecified other impact via vectors related to style resolution.

Published: May 22, 2013; 9:29:56 AM -0400
V3.x:(not available)
V2.0: 7.5 HIGH
CVE-2013-2843

Use-after-free vulnerability in Google Chrome before 27.0.1453.93 allows remote attackers to cause a denial of service or possibly have unspecified other impact via vectors related to the handling of speech data.

Published: May 22, 2013; 9:29:56 AM -0400
V3.x:(not available)
V2.0: 7.5 HIGH
CVE-2013-2842

Use-after-free vulnerability in Google Chrome before 27.0.1453.93 allows remote attackers to cause a denial of service or possibly have unspecified other impact via vectors related to the handling of widgets.

Published: May 22, 2013; 9:29:56 AM -0400
V3.x:(not available)
V2.0: 7.5 HIGH
CVE-2013-2841

Use-after-free vulnerability in Google Chrome before 27.0.1453.93 allows remote attackers to cause a denial of service or possibly have unspecified other impact via vectors related to the handling of Pepper resources.

Published: May 22, 2013; 9:29:56 AM -0400
V3.x:(not available)
V2.0: 7.5 HIGH
CVE-2013-2840

Use-after-free vulnerability in the media loader in Google Chrome before 27.0.1453.93 allows remote attackers to cause a denial of service or possibly have unspecified other impact via unknown vectors, a different vulnerability than CVE-2013-2846.

Published: May 22, 2013; 9:29:56 AM -0400
V3.x:(not available)
V2.0: 7.5 HIGH
CVE-2013-2839

Google Chrome before 27.0.1453.93 does not properly perform a cast of an unspecified variable during handling of clipboard data, which allows remote attackers to cause a denial of service or possibly have other impact via unknown vectors.

Published: May 22, 2013; 9:29:55 AM -0400
V3.x:(not available)
V2.0: 7.5 HIGH
CVE-2013-2838

Google V8, as used in Google Chrome before 27.0.1453.93, allows remote attackers to cause a denial of service (out-of-bounds read) via unspecified vectors.

Published: May 22, 2013; 9:29:55 AM -0400
V3.x:(not available)
V2.0: 5.0 MEDIUM
CVE-2013-2837

Use-after-free vulnerability in the SVG implementation in Google Chrome before 27.0.1453.93 allows remote attackers to cause a denial of service or possibly have unspecified other impact via unknown vectors.

Published: May 22, 2013; 9:29:55 AM -0400
V3.x:(not available)
V2.0: 7.5 HIGH
CVE-2013-2836

Multiple unspecified vulnerabilities in Google Chrome before 27.0.1453.93 allow attackers to cause a denial of service or possibly have other impact via unknown vectors.

Published: May 22, 2013; 9:29:55 AM -0400
V3.x:(not available)
V2.0: 7.5 HIGH
CVE-2013-0926

Google Chrome before 26.0.1410.43 does not properly handle active content in an EMBED element during a copy-and-paste operation, which allows user-assisted remote attackers to have an unspecified impact via a crafted web site.

Published: March 28, 2013; 8:18:52 AM -0400
V3.x:(not available)
V2.0: 6.8 MEDIUM
CVE-2013-0925

Google Chrome before 26.0.1410.43 does not ensure that an extension has the tabs (aka APIPermission::kTab) permission before providing a URL to this extension, which has unspecified impact and remote attack vectors.

Published: March 28, 2013; 8:18:52 AM -0400
V3.x:(not available)
V2.0: 7.5 HIGH
CVE-2013-0924

The extension functionality in Google Chrome before 26.0.1410.43 does not verify that use of the permissions API is consistent with file permissions, which has unspecified impact and attack vectors.

Published: March 28, 2013; 8:18:52 AM -0400
V3.x:(not available)
V2.0: 7.5 HIGH
CVE-2013-0923

The USB Apps API in Google Chrome before 26.0.1410.43 allows remote attackers to cause a denial of service (memory corruption) via unspecified vectors.

Published: March 28, 2013; 8:18:52 AM -0400
V3.x:(not available)
V2.0: 5.0 MEDIUM
CVE-2013-0922

Google Chrome before 26.0.1410.43 does not properly restrict brute-force access attempts against web sites that require HTTP Basic Authentication, which has unspecified impact and attack vectors.

Published: March 28, 2013; 8:18:52 AM -0400
V3.x:(not available)
V2.0: 7.5 HIGH