Summary
Ein entfernter, anonymer Angreifer kann mehrere Schwachstellen in Google Chrome ausnutzen, um beliebigen Programmcode mit Benutzerrechten auszuführen, Daten einsehen oder manipulieren oder um einen Denial of Service Zustand herbeizuführen.
Product
Chrome ist ein Internet-Browser von Google.
Vulnerabilities 19
-
Unscored —
Multiple race conditions in the Web Audio implementation in Blink, as used in Google Chrome before 30.0.1599.66, allow …
-
Unscored —
The Window.prototype object implementation in Google Chrome before 30.0.1599.66 allows remote attackers to cause a deni…
-
Unscored —
Google Chrome before 30.0.1599.66 uses incorrect function calls to determine the values of NavigationEntry objects, whi…
-
Unscored —
Use-after-free vulnerability in Blink, as used in Google Chrome before 30.0.1599.66, allows remote attackers to cause a…
-
Unscored —
Use-after-free vulnerability in modules/webaudio/AudioScheduledSourceNode.cpp in the Web Audio implementation in Blink,…
-
Unscored —
Use-after-free vulnerability in the XSLStyleSheet::compileStyleSheet function in core/xml/XSLStyleSheetLibxslt.cpp in B…
-
Unscored —
Use-after-free vulnerability in the PepperInProcessRouter::SendToHost function in content/renderer/pepper/pepper_in_pro…
-
Unscored —
Use-after-free vulnerability in the XMLDocumentParser::append function in core/xml/parser/XMLDocumentParser.cpp in Blin…
-
Unscored —
Use-after-free vulnerability in the color-chooser dialog in Google Chrome before 30.0.1599.66 on Windows allows remote …
-
Unscored —
Google Chrome before 30.0.1599.66 preserves pending NavigationEntry objects in certain invalid circumstances, which all…
-
Unscored —
Blink, as used in Google Chrome before 30.0.1599.66, allows remote attackers to spoof the address bar via vectors invol…
-
Unscored —
The ReverbConvolverStage::ReverbConvolverStage function in core/platform/audio/ReverbConvolverStage.cpp in the Web Audi…
-
Unscored —
Use-after-free vulnerability in the RenderBlock::collapseAnonymousBlockChild function in core/rendering/RenderBlock.cpp…
-
Unscored —
Google V8, as used in Google Chrome before 30.0.1599.66, allows remote attackers to cause a denial of service (memory c…
-
Unscored —
The DoResolveRelativeHost function in url/url_canon_relative.cc in Google Chrome before 30.0.1599.66 allows remote atta…
-
Unscored —
Double free vulnerability in the ResourceFetcher::didLoadResource function in core/fetch/ResourceFetcher.cpp in the res…
-
Unscored —
Use-after-free vulnerability in core/html/HTMLTemplateElement.cpp in Blink, as used in Google Chrome before 30.0.1599.6…
-
Unscored —
Multiple unspecified vulnerabilities in Google Chrome before 30.0.1599.66 allow attackers to cause a denial of service …
-
Unscored —
Use-after-free vulnerability in International Components for Unicode (ICU), as used in Google Chrome before 30.0.1599.6…
Revision history
-
#11
Neue Updates von Oracle Linux aufgenommen
-
#10
New remediations available
-
#7
New remediations available
-
#8
Version nicht vorhanden
-
#9
Version nicht vorhanden
-
#5
New remediations available
-
#6
Version nicht vorhanden
-
#3
New remediations available
-
#4
Version nicht vorhanden
-
#1
Initial Release
-
#2
Version nicht vorhanden
References
-
Chrome Releases - Stable Channel Update vom 2013-10-01
http://googlechromereleases.blogspot.de/2013/10/stable-channel-update.html
-
Ubuntu Security Notice USN-1989-1 vom 2013-10-15
http://www.ubuntu.com/usn/usn-1989-1/
-
Debian Security Advisory DSA-2785-1 vom 2013-10-26
http://www.debian.org/security/2013/dsa-2785
-
Mandriva Security Advisory MDVSA-2013:258 vom 2013-10-28
http://www.mandriva.com/de/support/security/advisories/advisory/MDVSA-2013:258/
-
Debian Security Advisory DSA-2786-1 vom 2013-10-28
http://www.debian.org/security/2013/dsa-2786
-
Gentoo Linux Security Advisory GLSA 201402-14 vom 2014-02-15
http://security.gentoo.org/glsa/glsa-201402-14.xml
-
Oracle Linux Security Advisory ELSA-2025-11888 vom 2025-07-29
http://linux.oracle.com/errata/ELSA-2025-11888.html