CVE-2010-4206
Published Nov 6, 2010Array index error in the FEBlend::apply function in WebCore/platform/graphics/filters/FEBlend.cpp in WebKit, as used in Google Chrome before 7.0.517.44, webkitgtk before 1.2.6, an…
Vendor/product archive
google / chrome CVEs
Beta · best-effort5,454 CVEs tagged to google / chrome — 438 Critical, 2,709 High, 2,239 Medium, 68 Low, 0 Unrated.
CVE-2010-4205
Published Nov 6, 2010Google Chrome before 7.0.517.44 does not properly handle the data types of event objects, which allows remote attackers to cause a denial of service or possibly have unspecified o…
CVE-2010-4204
Published Nov 6, 2010WebKit, as used in Google Chrome before 7.0.517.44, webkitgtk before 1.2.6, and other products, accesses a frame object after this object has been destroyed, which allows remote a…
CVE-2010-4203
Published Nov 6, 2010WebM libvpx (aka the VP8 Codec SDK) before 0.9.5, as used in Google Chrome before 7.0.517.44, allows remote attackers to cause a denial of service (memory corruption) or possibly…
CVE-2010-4202
Published Nov 6, 2010Multiple integer overflows in Google Chrome before 7.0.517.44 on Linux allow remote attackers to cause a denial of service or possibly have unspecified other impact via a crafted…
CVE-2010-4201
Published Nov 6, 2010Use-after-free vulnerability in Google Chrome before 7.0.517.44 allows remote attackers to cause a denial of service or possibly have unspecified other impact via vectors involvin…
CVE-2010-4199
Published Nov 6, 2010Google Chrome before 7.0.517.44 does not properly perform a cast of an unspecified variable during processing of an SVG use element, which allows remote attackers to cause a denia…
CVE-2010-4198
Published Nov 6, 2010WebKit, as used in Google Chrome before 7.0.517.44, webkitgtk before 1.2.6, and other products, does not properly handle large text areas, which allows remote attackers to cause a…
CVE-2010-4197
Published Nov 6, 2010Use-after-free vulnerability in WebKit, as used in Google Chrome before 7.0.517.44, webkitgtk before 1.2.6, and other products, allows remote attackers to cause a denial of servic…
CVE-2010-4042
Published Oct 21, 2010Google Chrome before 7.0.517.41 does not properly handle element maps, which allows remote attackers to cause a denial of service or possibly have unspecified other impact via vec…
CVE-2010-4041
Published Oct 21, 2010The sandbox implementation in Google Chrome before 7.0.517.41 on Linux does not properly constrain worker processes, which might allow remote attackers to bypass intended access r…
CVE-2010-4040
Published Oct 21, 2010Google Chrome before 7.0.517.41 does not properly handle animated GIF images, which allows remote attackers to cause a denial of service (memory corruption) or possibly have unspe…
CVE-2010-4039
Published Oct 21, 2010Google Chrome before 7.0.517.41 on Linux does not properly set the PATH environment variable, which has unspecified impact and attack vectors.
CVE-2010-4038
Published Oct 21, 2010The Web Sockets implementation in Google Chrome before 7.0.517.41 does not properly handle a shutdown action, which allows remote attackers to cause a denial of service (applicati…
CVE-2010-4037
Published Oct 21, 2010Unspecified vulnerability in Google Chrome before 7.0.517.41 allows remote attackers to bypass the pop-up blocker via unknown vectors.
CVE-2010-4036
Published Oct 21, 2010Google Chrome before 7.0.517.41 does not properly handle the unloading of a page, which allows remote attackers to spoof URLs via unspecified vectors.
CVE-2010-4035
Published Oct 21, 2010Google Chrome before 7.0.517.41 does not properly perform autofill operations for forms, which allows remote attackers to cause a denial of service (application crash) or possibly…
CVE-2010-4034
Published Oct 21, 2010Google Chrome before 7.0.517.41 does not properly handle forms, which allows remote attackers to cause a denial of service (application crash) or possibly have unspecified other i…
CVE-2010-4033
Published Oct 21, 2010Google Chrome before 7.0.517.41 does not properly implement the autofill and autocomplete functionality, which allows remote attackers to conduct "profile spamming" attacks via un…
CVE-2010-3730
Published Oct 5, 2010Google Chrome before 6.0.472.62 does not properly use information about the origin of a document to manage properties, which allows remote attackers to have an unspecified impact…
CVE-2010-3729
Published Oct 5, 2010The SPDY protocol implementation in Google Chrome before 6.0.472.62 does not properly manage buffers, which might allow remote attackers to execute arbitrary code via unspecified…
CVE-2010-1822
Published Oct 4, 2010WebKit, as used in Apple Safari before 4.1.3 and 5.0.x before 5.0.3 and Google Chrome before 6.0.472.62, does not properly perform a cast of an unspecified variable, which allows…
CVE-2010-1825
Published Sep 24, 2010Use-after-free vulnerability in WebKit, as used in Google Chrome before 6.0.472.59, allows remote attackers to cause a denial of service or possibly have unspecified other impact…
CVE-2010-1824
Published Sep 24, 2010Use-after-free vulnerability in WebKit, as used in Apple iTunes before 10.2 on Windows, Apple Safari, and Google Chrome before 6.0.472.59, allows remote attackers to execute arbit…
CVE-2010-1823
Published Sep 24, 2010Use-after-free vulnerability in WebKit before r65958, as used in Google Chrome before 6.0.472.59, allows remote attackers to cause a denial of service or possibly have unspecified…
Showing 5,276-5,300 of 5,454 CVEsPage 212 of 219