Skip to content
OpenAdvisories
Unscored DSA-2905-1 14 CVEs

chromium-browser - security update

Published Apr 15, 2014 · Updated Mar 9, 2026

Fixed packages 1

ReleasePackageFixed in
Debian · 7 chromium-browser 34.0.1847.116-1~deb7u1

Vulnerabilities 14

  • Unscored —

    Cross-site scripting (XSS) vulnerability in the Runtime_SetPrototype function in runtime.cc in Google V8, as used in Go…

  • Unscored —

    Google V8, as used in Google Chrome before 34.0.1847.116, does not properly use numeric casts during handling of typed …

  • Unscored —

    Integer overflow in the SoftwareFrameManager::SwapToNewFrame function in content/browser/renderer_host/software_frame_m…

  • Unscored —

    Use-after-free vulnerability in the WebSharedWorkerStub::OnTerminateWorkerContext function in content/worker/websharedw…

  • Unscored —

    Use-after-free vulnerability in the HTMLBodyElement::insertedInto function in core/html/HTMLBodyElement.cpp in Blink, a…

  • Unscored —

    Google V8, as used in Google Chrome before 34.0.1847.116, does not properly implement lazy deoptimization, which allows…

  • Unscored —

    Use-after-free vulnerability in the RenderBlock::addChildIgnoringAnonymousColumnBlocks function in core/rendering/Rende…

  • Unscored —

    The UnescapeURLWithOffsetsImpl function in net/base/escape.cc in Google Chrome before 34.0.1847.116 does not properly h…

  • Unscored —

    Use-after-free vulnerability in Free(b)soft Laboratory Speech Dispatcher 0.7.1, as used in Google Chrome before 34.0.18…

  • Unscored —

    The base64DecodeInternal function in wtf/text/Base64.cpp in Blink, as used in Google Chrome before 34.0.1847.116, does …

  • Unscored —

    The drag implementation in Google Chrome before 34.0.1847.116 allows user-assisted remote attackers to bypass the Same …

  • Unscored —

    Use-after-free vulnerability in content/renderer/renderer_webcolorchooser_impl.h in Google Chrome before 34.0.1847.116 …

  • Unscored —

    Multiple unspecified vulnerabilities in Google Chrome before 34.0.1847.116 allow attackers to cause a denial of service…

  • Unscored —

    Multiple unspecified vulnerabilities in Google V8 before 3.24.35.22, as used in Google Chrome before 34.0.1847.116, all…