Skip to content
OpenAdvisories
High WID-SEC-2025-1657 19 CVEs

Google Chrome: Mehrere Schwachstellen

Published Oct 1, 2013 · Updated Jul 28, 2025 · Revision 11 · de-DE

Summary

Ein entfernter, anonymer Angreifer kann mehrere Schwachstellen in Google Chrome ausnutzen, um beliebigen Programmcode mit Benutzerrechten auszuführen, Daten einsehen oder manipulieren oder um einen Denial of Service Zustand herbeizuführen.

Product

Chrome ist ein Internet-Browser von Google.

Vulnerabilities 19

  • Unscored —

    Multiple race conditions in the Web Audio implementation in Blink, as used in Google Chrome before 30.0.1599.66, allow …

  • Unscored —

    The Window.prototype object implementation in Google Chrome before 30.0.1599.66 allows remote attackers to cause a deni…

  • Unscored —

    Google Chrome before 30.0.1599.66 uses incorrect function calls to determine the values of NavigationEntry objects, whi…

  • Unscored —

    Use-after-free vulnerability in Blink, as used in Google Chrome before 30.0.1599.66, allows remote attackers to cause a…

  • Unscored —

    Use-after-free vulnerability in modules/webaudio/AudioScheduledSourceNode.cpp in the Web Audio implementation in Blink,…

  • Unscored —

    Use-after-free vulnerability in the XSLStyleSheet::compileStyleSheet function in core/xml/XSLStyleSheetLibxslt.cpp in B…

  • Unscored —

    Use-after-free vulnerability in the PepperInProcessRouter::SendToHost function in content/renderer/pepper/pepper_in_pro…

  • Unscored —

    Use-after-free vulnerability in the XMLDocumentParser::append function in core/xml/parser/XMLDocumentParser.cpp in Blin…

  • Unscored —

    Use-after-free vulnerability in the color-chooser dialog in Google Chrome before 30.0.1599.66 on Windows allows remote …

  • Unscored —

    Google Chrome before 30.0.1599.66 preserves pending NavigationEntry objects in certain invalid circumstances, which all…

  • Unscored —

    Blink, as used in Google Chrome before 30.0.1599.66, allows remote attackers to spoof the address bar via vectors invol…

  • Unscored —

    The ReverbConvolverStage::ReverbConvolverStage function in core/platform/audio/ReverbConvolverStage.cpp in the Web Audi…

  • Unscored —

    Use-after-free vulnerability in the RenderBlock::collapseAnonymousBlockChild function in core/rendering/RenderBlock.cpp…

  • Unscored —

    Google V8, as used in Google Chrome before 30.0.1599.66, allows remote attackers to cause a denial of service (memory c…

  • Unscored —

    The DoResolveRelativeHost function in url/url_canon_relative.cc in Google Chrome before 30.0.1599.66 allows remote atta…

  • Unscored —

    Double free vulnerability in the ResourceFetcher::didLoadResource function in core/fetch/ResourceFetcher.cpp in the res…

  • Unscored —

    Use-after-free vulnerability in core/html/HTMLTemplateElement.cpp in Blink, as used in Google Chrome before 30.0.1599.6…

  • Unscored —

    Multiple unspecified vulnerabilities in Google Chrome before 30.0.1599.66 allow attackers to cause a denial of service …

  • Unscored —

    Use-after-free vulnerability in International Components for Unicode (ICU), as used in Google Chrome before 30.0.1599.6…

Revision history

  1. #11

    Neue Updates von Oracle Linux aufgenommen

  2. #10

    New remediations available

  3. #7

    New remediations available

  4. #8

    Version nicht vorhanden

  5. #9

    Version nicht vorhanden

  6. #5

    New remediations available

  7. #6

    Version nicht vorhanden

  8. #3

    New remediations available

  9. #4

    Version nicht vorhanden

  10. #1

    Initial Release

  11. #2

    Version nicht vorhanden

References