Google » Chrome : Security Vulnerabilities

CVSS Scores Greater Than: 0 1 2 3 4 5 6 7 8 9

Sort Results By : Cve Number Descending Cve Number Ascending CVSS Score Descending Number Of Exploits Descending

Copy Results Download Results Select Table

#	CVE ID	CWE ID	# of Exploits	Vulnerability Type(s)	Publish Date	Update Date	Score	Gained Access Level	Access	Complexity	Authentication	Conf.	Integ.	Avail.
1	CVE-2010-1029	399	2	DoS Exec Code	2010-03-19	2012-01-26	5.0	None	Remote	Low	Not required	None	None	Partial
Stack consumption vulnerability in the WebCore::CSSSelector function in WebKit, as used in Apple Safari 4.0.4, Apple Safari on iPhone OS and iPhone OS for iPod touch, and Google Chrome 4.0.249, allows remote attackers to cause a denial of service (application crash) or possibly execute arbitrary code via a STYLE element composed of a large number of *> sequences.
2	CVE-2009-1514	399	1	DoS	2009-05-04	2009-05-05	5.0	None	Remote	Low	Not required	None	None	Partial
Google Chrome 1.0.154.53 allows remote attackers to cause a denial of service (NULL pointer dereference and application crash) via a throw statement with a long exception value.
3	CVE-2009-0374		1		2009-01-30	2009-02-02	4.3	None	Remote	Medium	Not required	None	Partial	None
DISPUTED Google Chrome 1.0.154.43 allows remote attackers to trick a user into visiting an arbitrary URL via an onclick action that moves a crafted element to the current mouse position, related to a "Clickjacking" vulnerability. NOTE: a third party disputes the relevance of this issue, stating that "every sufficiently featured browser is and likely will remain susceptible to the behavior known as clickjacking," and adding that the exploit code "is not a valid demonstration of the issue."
4	CVE-2008-6998	119	1	Exec Code Overflow	2009-08-19	2009-08-21	9.3	Admin	Remote	Medium	Not required	Complete	Complete	Complete
Stack-based buffer overflow in chrome/common/gfx/url_elider.cc in Google Chrome 0.2.149.27 and other versions before 0.2.149.29 might allow user-assisted remote attackers to execute arbitrary code via a link target (href attribute) with a large number of path elements, which triggers the overflow when the status bar is updated after the user hovers over the link.
5	CVE-2008-6997		1	DoS	2009-08-19	2009-08-21	4.3	None	Remote	Medium	Not required	None	None	Partial
Google Chrome 0.2.149.27 allows user-assisted remote attackers to cause a denial of service (browser crash) via an IMG tag with a long src attribute, which triggers the crash when the victim performs an "Inspect Element" action.
6	CVE-2008-6996		1	DoS	2009-08-19	2009-08-19	5.0	None	Remote	Low	Not required	None	None	Partial
Google Chrome BETA (0.2.149.27) does not prompt the user before saving an executable file, which makes it easier for remote attackers or malware to cause a denial of service (disk consumption) or exploit other vulnerabilities via a URL that references an executable file, possibly related to the "ask where to save each file before downloading" setting.
7	CVE-2008-6995	189	1	DoS	2009-08-19	2009-09-01	4.3	None	Remote	Medium	Not required	None	None	Partial
Integer underflow in net/base/escape.cc in chrome.dll in Google Chrome 0.2.149.27 allows remote attackers to cause a denial of service (browser crash) via a URI with an invalid handler followed by a "%" (percent) character, which triggers a buffer over-read, as demonstrated using an "about:%" URI.
8	CVE-2008-6994	119	2	Exec Code Overflow	2009-08-19	2009-09-01	9.3	None	Remote	Medium	Not required	Complete	Complete	Complete
Stack-based buffer overflow in the SaveAs feature (SaveFileAsWithFilter function) in win_util.cc in Google Chrome 0.2.149.27 allows user-assisted remote attackers to execute arbitrary code via a web page with a long TITLE element, which triggers the overflow when the user saves the page and a long filename is generated. NOTE: it might be possible to exploit this issue via an HTTP response that includes a long filename in a Content-Disposition header.
9	CVE-2008-5749	94	1	Exec Code	2008-12-29	2010-07-13	6.8	User	Remote	Medium	Not required	Partial	Partial	Partial
DISPUTED Argument injection vulnerability in Google Chrome 1.0.154.36 on Windows XP SP3 allows remote attackers to execute arbitrary commands via the --renderer-path option in a chromehtml: URI. NOTE: a third party disputes this issue, stating that Chrome "will ask for user permission" and "cannot launch the applet even [if] you have given out the permission."
10	CVE-2008-4340	20	1	DoS	2008-09-30	2009-08-19	4.3	None	Remote	Medium	Not required	None	None	Partial
Google Chrome 0.2.149.29 and 0.2.149.30 allows remote attackers to cause a denial of service (memory consumption) via an HTML document containing a carriage return ("\r\n\r\n") argument to the window.open function.

Total number of vulnerabilities : 10 Page : 1 (This Page)