{ "version": "1", "package": [ { "name": "abseil-cpp", "layer": "openembedded-layer", "version": "20260107.1", "products": [ { "product": "common_libraries", "cvesInRecord": "Yes" } ], "issue": [ { "id": "CVE-2025-0838", "status": "Patched", "link": "https://nvd.nist.gov/vuln/detail/CVE-2025-0838", "summary": "There exists a heap buffer overflow vulnerable in Abseil-cpp. The sized constructors, reserve(), and rehash() methods of absl::{flat,node}hash{set,map} did not impose an upper bound on their size argument. As a result, it was possible for a caller to pass a very large size that would cause an integer overflow when computing the size of the container's backing store, and a subsequent out-of-bounds memory write. Subsequent accesses to the container might also access out-of-bounds memory. We recommend upgrading past commit 5a0e2cb5e3958dd90bb8569a2766622cb74d90c1", "scorev2": "0.0", "scorev3": "9.8", "scorev4": "5.9", "modified": "2026-06-17T08:27:14.000", "vector": "ADJACENT", "vectorString": "CVSS:4.0/AV:A/AC:H/AT:P/PR:L/UI:A/VC:L/VI:H/VA:L/SC:L/SI:H/SA:L/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X", "detail": "fixed-version: Fixed from version 20250127.0" } ], "cpes": [ "cpe:2.3:*:abseil:common_libraries:20260107.1:*:*:*:*:*:*:*" ] }, { "name": "acl", "layer": "core", "version": "2.3.2", "products": [ { "product": "acl", "cvesInRecord": "Yes" } ], "issue": [ { "id": "CVE-2009-4411", "status": "Patched", "link": "https://nvd.nist.gov/vuln/detail/CVE-2009-4411", "summary": "The (1) setfacl and (2) getfacl commands in XFS acl 2.2.47, when running in recursive (-R) mode, follow symbolic links even when the --physical (aka -P) or -L option is specified, which might allow local users to modify the ACL for arbitrary files or directories via a symlink attack.", "scorev2": "3.7", "scorev3": "0.0", "scorev4": "0.0", "modified": "2026-06-16T23:13:36.000", "vector": "LOCAL", "vectorString": "AV:L/AC:H/Au:N/C:P/I:P/A:P", "detail": "version-not-in-range" }, { "id": "CVE-2018-25320", "status": "Patched", "link": "https://nvd.nist.gov/vuln/detail/CVE-2018-25320", "summary": "ACL Analytics versions 11.x through 13.0.0.579 contain an arbitrary code execution vulnerability that allows attackers to execute arbitrary commands by leveraging the EXECUTE function. Attackers can use bitsadmin to download malicious PowerShell scripts and execute them with system privileges to establish reverse shells and gain complete system control.", "scorev2": "0.0", "scorev3": "9.8", "scorev4": "9.3", "modified": "2026-10-01T15:19:15.000", "vector": "NETWORK", "vectorString": "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X", "detail": "version-not-in-range: Only affects 11.0 onwards" }, { "id": "CVE-2026-54369", "status": "Unpatched", "link": "https://nvd.nist.gov/vuln/detail/CVE-2026-54369", "summary": "acl before version 2.4.0 contains a symlink traversal vulnerability in the libacl pathname-based functions acl_get_file(), acl_set_file(), acl_extended_file(), and acl_delete_def_file() that allows local attackers to escalate privileges by replacing any pathname component with a symbolic link. Attackers who control any component of a pathname processed by a privileged caller can redirect ACL read or write operations to arbitrary files or directories, enabling unauthorized manipulation of access control lists and local privilege escalation.", "scorev2": "0.0", "scorev3": "7.1", "scorev4": "8.4", "modified": "2026-09-14T13:18:40.000", "vector": "LOCAL", "vectorString": "CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:N/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X", "detail": "version-in-range", "description": "Needs backporting (fixed from 2.4.0)" }, { "id": "CVE-2026-54370", "status": "Unpatched", "link": "https://nvd.nist.gov/vuln/detail/CVE-2026-54370", "summary": "acl before version 2.4.0 contains a time-of-check to time-of-use (TOCTOU) race condition vulnerability that allows local attackers to escalate privileges by replacing a pathname component with a symbolic link between an lstat() check and subsequent symlink-following operations such as stat(), chown(), chmod(), acl_get_file(), and acl_set_file(). Attackers who control a pathname component can redirect file access control list operations to arbitrary files when getfacl, setfacl, or chacl is invoked by a privileged process over an attacker-controlled path, resulting in local privilege escalation.", "scorev2": "0.0", "scorev3": "6.3", "scorev4": "7.2", "modified": "2026-07-14T21:33:49.000", "vector": "LOCAL", "vectorString": "CVSS:4.0/AV:L/AC:H/AT:N/PR:L/UI:N/VC:H/VI:H/VA:N/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X", "detail": "version-in-range", "description": "Needs backporting (fixed from 2.4.0)" } ], "cpes": [ "cpe:2.3:*:*:acl:2.3.2:*:*:*:*:*:*:*" ] }, { "name": "ade", "layer": "openembedded-layer", "version": "0.1.2e", "products": [ { "product": "ade", "cvesInRecord": "No" } ], "issue": [], "cpes": [ "cpe:2.3:*:*:ade:0.1.2e:*:*:*:*:*:*:*" ] }, { "name": "adwaita-icon-theme", "layer": "core", "version": "49.0", "products": [ { "product": "adwaita-icon-theme", "cvesInRecord": "No" } ], "issue": [], "cpes": [ "cpe:2.3:*:*:adwaita-icon-theme:49.0:*:*:*:*:*:*:*" ] }, { "name": "alsa-lib", "layer": "core", "version": "1.2.15.3", "products": [ { "product": "alsa-lib", "cvesInRecord": "Yes" } ], "issue": [ { "id": "CVE-2005-0087", "status": "Patched", "link": "https://nvd.nist.gov/vuln/detail/CVE-2005-0087", "summary": "The alsa-lib package in Red Hat Linux 4 disables stack protection for the libasound.so library, which makes it easier for attackers to execute arbitrary code if there are other vulnerabilities in the library.", "scorev2": "4.6", "scorev3": "0.0", "scorev4": "0.0", "modified": "2026-06-16T22:10:29.000", "vector": "LOCAL", "vectorString": "AV:L/AC:L/Au:N/C:P/I:P/A:P", "detail": "version-not-in-range" }, { "id": "CVE-2026-25068", "status": "Patched", "link": "https://nvd.nist.gov/vuln/detail/CVE-2026-25068", "summary": "alsa-lib versions 1.2.2 up to and including 1.2.15.2, prior to commit 5f7fe33, contain a heap-based buffer overflow in the topology mixer control decoder. The tplg_decode_control_mixer1() function reads the num_channels field from untrusted .tplg data and uses it as a loop bound without validating it against the fixed-size channel array (SND_TPLG_MAX_CHAN). A crafted topology file with an excessive num_channels value can cause out-of-bounds heap writes, leading to a crash.", "scorev2": "0.0", "scorev3": "0.0", "scorev4": "4.6", "modified": "2026-06-17T10:24:04.000", "vector": "LOCAL", "vectorString": "CVSS:4.0/AV:L/AC:L/AT:N/PR:N/UI:A/VC:N/VI:N/VA:L/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X", "detail": "fix-file-included", "patch-file": [ "/home/luan/src/yocto/wrynose/dart-mx8mp/sources/openembedded-core/meta/recipes-multimedia/alsa/alsa-lib/CVE-2026-25068.patch" ] }, { "id": "CVE-2026-56109", "status": "Unpatched", "link": "https://nvd.nist.gov/vuln/detail/CVE-2026-56109", "summary": "The Advanced Linux Sound Architecture (ALSA) library before 1.2.16.1 contains a double-free vulnerability in parse_def() in src/conf.c that allows attackers to corrupt memory by supplying maliciously crafted ALSA configuration text. When parsing nested compound or array configuration blocks, parse_def() fails to check return values before continuing, causing snd_config_delete() to be called twice on the same already-freed node, resulting in a NULL-pointer write or invalid memory read.", "scorev2": "0.0", "scorev3": "6.8", "scorev4": "7.0", "modified": "2026-07-14T22:17:18.000", "vector": "LOCAL", "vectorString": "CVSS:4.0/AV:L/AC:L/AT:N/PR:N/UI:N/VC:N/VI:L/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X", "detail": "version-in-range", "description": "May need backporting (fixed from 1.2.16.1)" }, { "id": "CVE-2026-90781", "status": "Unpatched", "link": "https://nvd.nist.gov/vuln/detail/CVE-2026-90781", "summary": "alsa-lib through 1.2.16.1 contains a stack buffer overflow in the __snd_ctl_ascii_elem_id_parse() function that writes one byte past a 64-byte buffer when parsing a name= field with 64 or more characters. Attackers can supply a long control-element identifier string through saved state files or command-line arguments to overwrite adjacent stack memory and crash the calling process.", "scorev2": "0.0", "scorev3": "4.4", "scorev4": "4.8", "modified": "2026-09-24T20:47:31.000", "vector": "LOCAL", "vectorString": "CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:N/VI:L/VA:L/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X", "detail": "version-in-range", "description": "May need backporting (fixed from >1.2.16.1)" }, { "id": "CVE-2026-96674", "status": "Unpatched", "link": "https://nvd.nist.gov/vuln/detail/CVE-2026-96674", "summary": "alsa-lib through 1.2.16.1 computes combined topology element size using 32-bit arithmetic in src/topology/ctl.c, allowing integer overflow that defeats bounds checks. Attackers can supply crafted topology files that wrap size calculations, causing the decoder to read beyond the topology buffer and potentially leak sensitive data or crash the application.", "scorev2": "0.0", "scorev3": "4.4", "scorev4": "4.8", "modified": "2026-09-24T21:08:55.000", "vector": "LOCAL", "vectorString": "CVSS:4.0/AV:L/AC:L/AT:N/PR:N/UI:P/VC:L/VI:N/VA:L/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X", "detail": "version-in-range", "description": "May need backporting (fixed from >1.2.16.1)" }, { "id": "CVE-2026-96675", "status": "Unpatched", "link": "https://nvd.nist.gov/vuln/detail/CVE-2026-96675", "summary": "alsa-lib through 1.2.16.1 contains a denial of service vulnerability in the multi PCM plugin that fails to validate sparse binding indices before array access. Attackers can supply a malicious ALSA configuration file with sparse bindings to trigger an out-of-bounds array read and assertion failure, causing the application to abort.", "scorev2": "0.0", "scorev3": "3.3", "scorev4": "4.8", "modified": "2026-09-24T21:08:55.000", "vector": "LOCAL", "vectorString": "CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:L/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X", "detail": "version-in-range", "description": "May need backporting (fixed from >1.2.16.1)" } ], "cpes": [ "cpe:2.3:*:*:alsa-lib:1.2.15.3:*:*:*:*:*:*:*" ] }, { "name": "alsa-state", "layer": "core", "version": "0.2.0", "products": [ { "product": "alsa-state", "cvesInRecord": "No" } ], "issue": [], "cpes": [ "cpe:2.3:*:*:alsa-state:0.2.0:*:*:*:*:*:*:*" ] }, { "name": "alsa-tools", "layer": "core", "version": "1.2.15", "products": [ { "product": "alsa-tools", "cvesInRecord": "No" } ], "issue": [], "cpes": [ "cpe:2.3:*:*:alsa-tools:1.2.15:*:*:*:*:*:*:*" ] }, { "name": "alsa-topology-conf", "layer": "core", "version": "1.2.5.1", "products": [ { "product": "alsa-topology-conf", "cvesInRecord": "No" } ], "issue": [], "cpes": [ "cpe:2.3:*:*:alsa-topology-conf:1.2.5.1:*:*:*:*:*:*:*" ] }, { "name": "alsa-ucm-conf", "layer": "core", "version": "1.2.15.3", "products": [ { "product": "alsa-ucm-conf", "cvesInRecord": "No" } ], "issue": [], "cpes": [ "cpe:2.3:*:*:alsa-ucm-conf:1.2.15.3:*:*:*:*:*:*:*" ] }, { "name": "alsa-utils", "layer": "core", "version": "1.2.15.2", "products": [ { "product": "alsa-utils", "cvesInRecord": "No" } ], "issue": [], "cpes": [ "cpe:2.3:*:*:alsa-utils:1.2.15.2:*:*:*:*:*:*:*" ] }, { "name": "android-tools", "layer": "openembedded-layer", "version": "5.1.1.r37", "products": [ { "product": "android-tools", "cvesInRecord": "No" } ], "issue": [], "cpes": [ "cpe:2.3:*:*:android-tools:5.1.1.r37:*:*:*:*:*:*:*" ] }, { "name": "android-tools-conf", "layer": "openembedded-layer", "version": "1.0", "products": [ { "product": "android-tools-conf", "cvesInRecord": "No" } ], "issue": [], "cpes": [ "cpe:2.3:*:*:android-tools-conf:1.0:*:*:*:*:*:*:*" ] }, { "name": "apitrace", "layer": "fsl-bsp-release", "version": "13.0.0.imx", "products": [ { "product": "apitrace", "cvesInRecord": "No" } ], "issue": [], "cpes": [ "cpe:2.3:*:*:apitrace:13.0.0.imx:*:*:*:*:*:*:*" ] }, { "name": "assimp", "layer": "fsl-bsp-release", "version": "6.0.2", "products": [ { "product": "assimp", "cvesInRecord": "Yes" } ], "issue": [ { "id": "CVE-2021-45948", "status": "Patched", "link": "https://nvd.nist.gov/vuln/detail/CVE-2021-45948", "summary": "Open Asset Import Library (aka assimp) 5.1.0 and 5.1.1 has a heap-based buffer overflow in _m3d_safestr (called from m3d_load and Assimp::M3DWrapper::M3DWrapper).", "scorev2": "4.3", "scorev3": "5.5", "scorev4": "0.0", "modified": "2026-06-17T04:14:18.000", "vector": "LOCAL", "vectorString": "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H", "detail": "version-not-in-range" }, { "id": "CVE-2022-38528", "status": "Patched", "link": "https://nvd.nist.gov/vuln/detail/CVE-2022-38528", "summary": "Open Asset Import Library (assimp) commit 3c253ca was discovered to contain a segmentation violation via the component Assimp::XFileImporter::CreateMeshes.", "scorev2": "0.0", "scorev3": "6.5", "scorev4": "0.0", "modified": "2026-06-17T04:56:46.000", "vector": "NETWORK", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H", "detail": "version-not-in-range" }, { "id": "CVE-2022-45748", "status": "Patched", "link": "https://nvd.nist.gov/vuln/detail/CVE-2022-45748", "summary": "An issue was discovered with assimp 5.1.4, a use after free occurred in function ColladaParser::ExtractDataObjectFromChannel in file /code/AssetLib/Collada/ColladaParser.cpp.", "scorev2": "0.0", "scorev3": "8.8", "scorev4": "0.0", "modified": "2026-06-17T05:10:40.000", "vector": "NETWORK", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H", "detail": "version-not-in-range" }, { "id": "CVE-2024-40724", "status": "Patched", "link": "https://nvd.nist.gov/vuln/detail/CVE-2024-40724", "summary": "Heap-based buffer overflow vulnerability in Assimp versions prior to 5.4.2 allows a local attacker to execute arbitrary code by inputting a specially crafted file into the product.", "scorev2": "0.0", "scorev3": "8.4", "scorev4": "0.0", "modified": "2026-06-17T07:46:24.000", "vector": "LOCAL", "vectorString": "CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H", "detail": "fixed-version: Fixed from version 5.4.2" }, { "id": "CVE-2024-45679", "status": "Patched", "link": "https://nvd.nist.gov/vuln/detail/CVE-2024-45679", "summary": "Heap-based buffer overflow vulnerability in Assimp versions prior to 5.4.3 allows a local attacker to execute arbitrary code by importing a specially crafted file into the product.", "scorev2": "0.0", "scorev3": "8.4", "scorev4": "0.0", "modified": "2026-06-17T07:54:39.000", "vector": "LOCAL", "vectorString": "CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H", "detail": "fixed-version: Fixed from version 5.4.3" }, { "id": "CVE-2024-46632", "status": "Patched", "link": "https://nvd.nist.gov/vuln/detail/CVE-2024-46632", "summary": "Assimp v5.4.3 is vulnerable to Buffer Overflow via the MD5Importer::LoadMD5MeshFile function.", "scorev2": "0.0", "scorev3": "4.3", "scorev4": "0.0", "modified": "2026-06-17T07:55:38.000", "vector": "NETWORK", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:L", "detail": "version-not-in-range" }, { "id": "CVE-2024-48423", "status": "Patched", "link": "https://nvd.nist.gov/vuln/detail/CVE-2024-48423", "summary": "An issue in assimp v.5.4.3 allows a local attacker to execute arbitrary code via the CallbackToLogRedirector function within the Assimp library.", "scorev2": "0.0", "scorev3": "8.4", "scorev4": "0.0", "modified": "2026-06-17T07:58:29.000", "vector": "LOCAL", "vectorString": "CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H", "detail": "version-not-in-range" }, { "id": "CVE-2024-48424", "status": "Patched", "link": "https://nvd.nist.gov/vuln/detail/CVE-2024-48424", "summary": "A heap-buffer-overflow vulnerability has been identified in the OpenDDLParser::parseStructure function within the Assimp library, specifically during the processing of OpenGEX files.", "scorev2": "0.0", "scorev3": "5.5", "scorev4": "0.0", "modified": "2026-06-17T07:58:29.000", "vector": "LOCAL", "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H", "detail": "fixed-version: Fixed from version >5.4.3" }, { "id": "CVE-2024-48425", "status": "Patched", "link": "https://nvd.nist.gov/vuln/detail/CVE-2024-48425", "summary": "A segmentation fault (SEGV) was detected in the Assimp::SplitLargeMeshesProcess_Triangle::UpdateNode function within the Assimp library during fuzz testing using AddressSanitizer. The crash occurs due to a read access violation at address 0x000000000460, which points to the zero page, indicating a null or invalid pointer dereference.", "scorev2": "0.0", "scorev3": "5.5", "scorev4": "0.0", "modified": "2026-06-17T07:58:29.000", "vector": "LOCAL", "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H", "detail": "fixed-version: Fixed from version >5.4.3" }, { "id": "CVE-2024-48426", "status": "Patched", "link": "https://nvd.nist.gov/vuln/detail/CVE-2024-48426", "summary": "A segmentation fault (SEGV) was detected in the SortByPTypeProcess::Execute function in the Assimp library during fuzz testing with AddressSanitizer. The crash occurred due to a read access to an invalid memory address (0x1000c9714971).", "scorev2": "0.0", "scorev3": "6.2", "scorev4": "0.0", "modified": "2026-06-17T07:58:29.000", "vector": "LOCAL", "vectorString": "CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H", "detail": "version-not-in-range" }, { "id": "CVE-2024-53425", "status": "Patched", "link": "https://nvd.nist.gov/vuln/detail/CVE-2024-53425", "summary": "A heap-buffer-overflow vulnerability was discovered in the SkipSpacesAndLineEnd function in Assimp v5.4.3. This issue occurs when processing certain malformed MD5 model files, leading to an out-of-bounds read and potential application crash.", "scorev2": "0.0", "scorev3": "6.2", "scorev4": "0.0", "modified": "2026-06-17T08:08:52.000", "vector": "LOCAL", "vectorString": "CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H", "detail": "version-not-in-range" }, { "id": "CVE-2025-11274", "status": "Unpatched", "link": "https://nvd.nist.gov/vuln/detail/CVE-2025-11274", "summary": "A vulnerability was determined in Open Asset Import Library Assimp 6.0.2. Affected is the function Q3DImporter::InternReadFile of the file assimp/code/AssetLib/Q3D/Q3DLoader.cpp. This manipulation causes allocation of resources. The attack is restricted to local execution. The exploit has been publicly disclosed and may be utilized.", "scorev2": "1.7", "scorev3": "5.5", "scorev4": "4.8", "modified": "2026-10-11T20:10:00.000", "vector": "LOCAL", "vectorString": "CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:L/SC:N/SI:N/SA:N/E:P", "detail": "version-in-range", "description": "Mitigation action unknown" }, { "id": "CVE-2025-11275", "status": "Unpatched", "link": "https://nvd.nist.gov/vuln/detail/CVE-2025-11275", "summary": "A vulnerability was identified in Open Asset Import Library Assimp 6.0.2. Affected by this vulnerability is the function ODDLParser::getNextSeparator in the library assimp/contrib/openddlparser/include/openddlparser/OpenDDLParserUtils.h. Such manipulation leads to heap-based buffer overflow. The attack must be carried out locally. The exploit is publicly available and might be used.", "scorev2": "4.3", "scorev3": "7.8", "scorev4": "4.8", "modified": "2026-10-11T20:10:00.000", "vector": "LOCAL", "vectorString": "CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N/E:P", "detail": "version-in-range", "description": "Mitigation action unknown" }, { "id": "CVE-2025-11277", "status": "Unpatched", "link": "https://nvd.nist.gov/vuln/detail/CVE-2025-11277", "summary": "A weakness has been identified in Open Asset Import Library Assimp 6.0.2. This affects the function Q3DImporter::InternReadFile of the file assimp/code/AssetLib/Q3D/Q3DLoader.cpp. Executing a manipulation can lead to heap-based buffer overflow. The attack needs to be launched locally. The exploit has been made available to the public and could be used for attacks.", "scorev2": "4.3", "scorev3": "7.8", "scorev4": "4.8", "modified": "2026-10-11T20:10:00.000", "vector": "LOCAL", "vectorString": "CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N/E:P", "detail": "version-in-range", "description": "Mitigation action unknown" }, { "id": "CVE-2025-15538", "status": "Unpatched", "link": "https://nvd.nist.gov/vuln/detail/CVE-2025-15538", "summary": "A security vulnerability has been detected in Open Asset Import Library Assimp up to 6.0.2. Affected by this vulnerability is the function Assimp::LWOImporter::FindUVChannels of the file /src/assimp/code/AssetLib/LWO/LWOMaterial.cpp. Such manipulation leads to use after free. The attack needs to be performed locally. The exploit has been disclosed publicly and may be used. This and similar defects are tracked and handled via issue #6128.", "scorev2": "4.3", "scorev3": "7.8", "scorev4": "4.8", "modified": "2026-06-17T08:37:58.000", "vector": "LOCAL", "vectorString": "CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N/E:P", "detail": "version-in-range", "description": "May need backporting (fixed from >6.0.2)" }, { "id": "CVE-2025-15666", "status": "Patched", "link": "https://nvd.nist.gov/vuln/detail/CVE-2025-15666", "summary": "A security vulnerability has been detected in Open Asset Import Library Assimp up to 5.4.3. Affected by this vulnerability is the function Assimp::SceneCombiner::Copy of the file code/Common/SceneCombiner.cpp of the component Model File Handler. Such manipulation of the argument width/height leads to heap-based buffer overflow. An attack has to be approached locally. The exploit has been disclosed publicly and may be used. This and similar defects are tracked and handled via issue #6128.", "scorev2": "4.3", "scorev3": "5.3", "scorev4": "4.8", "modified": "2026-10-06T22:10:00.000", "vector": "LOCAL", "vectorString": "CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N/E:P", "detail": "version-not-in-range" }, { "id": "CVE-2025-2151", "status": "Patched", "link": "https://nvd.nist.gov/vuln/detail/CVE-2025-2151", "summary": "A vulnerability classified as critical was found in Open Asset Import Library Assimp 5.4.3. This vulnerability affects the function Assimp::GetNextLine in the library ParsingUtils.h of the component File Handler. The manipulation leads to stack-based buffer overflow. The attack can be initiated remotely. The exploit has been disclosed to the public and may be used.", "scorev2": "7.5", "scorev3": "8.8", "scorev4": "5.3", "modified": "2026-06-17T09:06:25.000", "vector": "NETWORK", "vectorString": "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:P/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X", "detail": "version-not-in-range" }, { "id": "CVE-2025-2152", "status": "Patched", "link": "https://nvd.nist.gov/vuln/detail/CVE-2025-2152", "summary": "A vulnerability, which was classified as critical, has been found in Open Asset Import Library Assimp 5.4.3. This issue affects the function Assimp::BaseImporter::ConvertToUTF8 of the file BaseImporter.cpp of the component File Handler. The manipulation leads to heap-based buffer overflow. The attack may be initiated remotely. The exploit has been disclosed to the public and may be used.", "scorev2": "7.5", "scorev3": "9.8", "scorev4": "5.3", "modified": "2026-06-17T09:06:25.000", "vector": "NETWORK", "vectorString": "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:P/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X", "detail": "version-not-in-range" }, { "id": "CVE-2025-2591", "status": "Patched", "link": "https://nvd.nist.gov/vuln/detail/CVE-2025-2591", "summary": "A vulnerability classified as problematic was found in Open Asset Import Library Assimp 5.4.3. This vulnerability affects the function MDLImporter::InternReadFile_Quake1 of the file code/AssetLib/MDL/MDLLoader.cpp. The manipulation of the argument skinwidth/skinheight leads to divide by zero. The attack can be initiated remotely. The exploit has been disclosed to the public and may be used. The patch is identified as ab66a1674fcfac87aaba4c8b900b315ebc3e7dbd. It is recommended to apply a patch to fix this issue.", "scorev2": "5.0", "scorev3": "5.5", "scorev4": "5.3", "modified": "2026-06-17T09:07:14.000", "vector": "NETWORK", "vectorString": "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:P/VC:N/VI:N/VA:L/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X", "detail": "version-not-in-range" }, { "id": "CVE-2025-2592", "status": "Patched", "link": "https://nvd.nist.gov/vuln/detail/CVE-2025-2592", "summary": "A vulnerability, which was classified as critical, has been found in Open Asset Import Library Assimp 5.4.3. This issue affects the function CSMImporter::InternReadFile of the file code/AssetLib/CSM/CSMLoader.cpp. The manipulation leads to heap-based buffer overflow. The attack may be initiated remotely. The exploit has been disclosed to the public and may be used. The patch is named 2690e354da0c681db000cfd892a55226788f2743. It is recommended to apply a patch to fix this issue.", "scorev2": "7.5", "scorev3": "8.8", "scorev4": "5.3", "modified": "2026-06-17T09:07:14.000", "vector": "NETWORK", "vectorString": "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:P/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X", "detail": "version-not-in-range" }, { "id": "CVE-2025-2750", "status": "Patched", "link": "https://nvd.nist.gov/vuln/detail/CVE-2025-2750", "summary": "A vulnerability, which was classified as critical, was found in Open Asset Import Library Assimp 5.4.3. This affects the function Assimp::CSMImporter::InternReadFile of the file code/AssetLib/CSM/CSMLoader.cpp of the component CSM File Handler. The manipulation leads to out-of-bounds write. It is possible to initiate the attack remotely. The exploit has been disclosed to the public and may be used.", "scorev2": "7.5", "scorev3": "8.8", "scorev4": "5.3", "modified": "2026-06-17T09:07:33.000", "vector": "NETWORK", "vectorString": "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:P/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X", "detail": "version-not-in-range" }, { "id": "CVE-2025-2751", "status": "Patched", "link": "https://nvd.nist.gov/vuln/detail/CVE-2025-2751", "summary": "A vulnerability has been found in Open Asset Import Library Assimp 5.4.3 and classified as problematic. This vulnerability affects the function Assimp::CSMImporter::InternReadFile of the file code/AssetLib/CSM/CSMLoader.cpp of the component CSM File Handler. The manipulation of the argument na leads to out-of-bounds read. The attack can be initiated remotely. The exploit has been disclosed to the public and may be used.", "scorev2": "5.0", "scorev3": "8.8", "scorev4": "5.3", "modified": "2026-06-17T09:07:33.000", "vector": "NETWORK", "vectorString": "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:P/VC:N/VI:N/VA:L/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X", "detail": "version-not-in-range" }, { "id": "CVE-2025-2752", "status": "Patched", "link": "https://nvd.nist.gov/vuln/detail/CVE-2025-2752", "summary": "A vulnerability was found in Open Asset Import Library Assimp 5.4.3 and classified as problematic. This issue affects the function fast_atoreal_move in the library include/assimp/fast_atof.h of the component CSM File Handler. The manipulation leads to out-of-bounds read. The attack may be initiated remotely. The exploit has been disclosed to the public and may be used.", "scorev2": "5.0", "scorev3": "8.8", "scorev4": "5.3", "modified": "2026-06-17T09:07:33.000", "vector": "NETWORK", "vectorString": "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:P/VC:N/VI:N/VA:L/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X", "detail": "version-not-in-range" }, { "id": "CVE-2025-2753", "status": "Patched", "link": "https://nvd.nist.gov/vuln/detail/CVE-2025-2753", "summary": "A vulnerability was found in Open Asset Import Library Assimp 5.4.3. It has been classified as critical. Affected is the function SceneCombiner::MergeScenes of the file code/AssetLib/LWS/LWSLoader.cpp of the component LWS File Handler. The manipulation leads to out-of-bounds read. It is possible to launch the attack remotely. The exploit has been disclosed to the public and may be used.", "scorev2": "7.5", "scorev3": "8.8", "scorev4": "5.3", "modified": "2026-06-17T09:07:33.000", "vector": "NETWORK", "vectorString": "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:P/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X", "detail": "version-not-in-range" }, { "id": "CVE-2025-2754", "status": "Patched", "link": "https://nvd.nist.gov/vuln/detail/CVE-2025-2754", "summary": "A vulnerability was found in Open Asset Import Library Assimp 5.4.3. It has been declared as critical. Affected by this vulnerability is the function Assimp::AC3DImporter::ConvertObjectSection of the file code/AssetLib/AC/ACLoader.cpp of the component AC3D File Handler. The manipulation of the argument it leads to heap-based buffer overflow. The attack can be launched remotely. The exploit has been disclosed to the public and may be used.", "scorev2": "7.5", "scorev3": "8.8", "scorev4": "5.3", "modified": "2026-06-17T09:07:34.000", "vector": "NETWORK", "vectorString": "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:P/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X", "detail": "version-not-in-range" }, { "id": "CVE-2025-2755", "status": "Patched", "link": "https://nvd.nist.gov/vuln/detail/CVE-2025-2755", "summary": "A vulnerability was found in Open Asset Import Library Assimp 5.4.3. It has been rated as critical. Affected by this issue is the function Assimp::AC3DImporter::ConvertObjectSection of the file code/AssetLib/AC/ACLoader.cpp of the component AC3D File Handler. The manipulation of the argument src.entries leads to out-of-bounds read. The attack may be launched remotely. The exploit has been disclosed to the public and may be used.", "scorev2": "7.5", "scorev3": "8.8", "scorev4": "5.3", "modified": "2026-06-17T09:07:34.000", "vector": "NETWORK", "vectorString": "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:P/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X", "detail": "version-not-in-range" }, { "id": "CVE-2025-2756", "status": "Patched", "link": "https://nvd.nist.gov/vuln/detail/CVE-2025-2756", "summary": "A vulnerability classified as critical has been found in Open Asset Import Library Assimp 5.4.3. This affects the function Assimp::AC3DImporter::ConvertObjectSection of the file code/AssetLib/AC/ACLoader.cpp of the component AC3D File Handler. The manipulation of the argument tmp leads to heap-based buffer overflow. It is possible to initiate the attack remotely. The exploit has been disclosed to the public and may be used.", "scorev2": "7.5", "scorev3": "8.8", "scorev4": "5.3", "modified": "2026-06-17T09:07:34.000", "vector": "NETWORK", "vectorString": "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:P/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X", "detail": "version-not-in-range" }, { "id": "CVE-2025-2757", "status": "Patched", "link": "https://nvd.nist.gov/vuln/detail/CVE-2025-2757", "summary": "A vulnerability classified as critical was found in Open Asset Import Library Assimp 5.4.3. This vulnerability affects the function AI_MD5_PARSE_STRING_IN_QUOTATION of the file code/AssetLib/MD5/MD5Parser.cpp of the component MD5 File Handler. The manipulation of the argument data leads to heap-based buffer overflow. The attack can be initiated remotely. The exploit has been disclosed to the public and may be used.", "scorev2": "7.5", "scorev3": "8.8", "scorev4": "5.3", "modified": "2026-06-17T09:07:34.000", "vector": "NETWORK", "vectorString": "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:P/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X", "detail": "version-not-in-range" }, { "id": "CVE-2025-3015", "status": "Patched", "link": "https://nvd.nist.gov/vuln/detail/CVE-2025-3015", "summary": "A vulnerability classified as critical has been found in Open Asset Import Library Assimp 5.4.3. This affects the function Assimp::ASEImporter::BuildUniqueRepresentation of the file code/AssetLib/ASE/ASELoader.cpp of the component ASE File Handler. The manipulation of the argument mIndices leads to out-of-bounds read. It is possible to initiate the attack remotely. The exploit has been disclosed to the public and may be used. Upgrading to version 6.0 is able to address this issue. The patch is named 7c705fde418d68cca4e8eff56be01b2617b0d6fe. It is recommended to apply a patch to fix this issue.", "scorev2": "7.5", "scorev3": "8.8", "scorev4": "5.3", "modified": "2026-06-17T09:19:01.000", "vector": "NETWORK", "vectorString": "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:P/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X", "detail": "version-not-in-range" }, { "id": "CVE-2025-3016", "status": "Patched", "link": "https://nvd.nist.gov/vuln/detail/CVE-2025-3016", "summary": "A vulnerability classified as problematic was found in Open Asset Import Library Assimp 5.4.3. This vulnerability affects the function Assimp::MDLImporter::ParseTextureColorData of the file code/AssetLib/MDL/MDLMaterialLoader.cpp of the component MDL File Handler. The manipulation of the argument mWidth/mHeight leads to resource consumption. The attack can be initiated remotely. Upgrading to version 6.0 is able to address this issue. The name of the patch is 5d2a7482312db2e866439a8c05a07ce1e718bed1. It is recommended to apply a patch to fix this issue.", "scorev2": "5.0", "scorev3": "6.5", "scorev4": "5.3", "modified": "2026-06-17T09:19:01.000", "vector": "NETWORK", "vectorString": "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:P/VC:N/VI:N/VA:L/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X", "detail": "version-not-in-range" }, { "id": "CVE-2025-3158", "status": "Patched", "link": "https://nvd.nist.gov/vuln/detail/CVE-2025-3158", "summary": "A vulnerability, which was classified as critical, has been found in Open Asset Import Library Assimp 5.4.3. Affected by this issue is the function Assimp::LWO::AnimResolver::UpdateAnimRangeSetup of the file code/AssetLib/LWO/LWOAnimation.cpp of the component LWO File Handler. The manipulation leads to heap-based buffer overflow. It is possible to launch the attack on the local host. The exploit has been disclosed to the public and may be used.", "scorev2": "4.3", "scorev3": "7.8", "scorev4": "4.8", "modified": "2026-06-17T09:19:18.000", "vector": "LOCAL", "vectorString": "CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X", "detail": "version-not-in-range" }, { "id": "CVE-2025-3159", "status": "Patched", "link": "https://nvd.nist.gov/vuln/detail/CVE-2025-3159", "summary": "A vulnerability, which was classified as critical, was found in Open Asset Import Library Assimp 5.4.3. This affects the function Assimp::ASE::Parser::ParseLV4MeshBonesVertices of the file code/AssetLib/ASE/ASEParser.cpp of the component ASE File Handler. The manipulation leads to heap-based buffer overflow. The attack needs to be approached locally. The exploit has been disclosed to the public and may be used. The identifier of the patch is e8a6286542924e628e02749c4f5ac4f91fdae71b. It is recommended to apply a patch to fix this issue.", "scorev2": "4.3", "scorev3": "7.8", "scorev4": "4.8", "modified": "2026-06-17T09:19:19.000", "vector": "LOCAL", "vectorString": "CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X", "detail": "version-not-in-range" }, { "id": "CVE-2025-3160", "status": "Patched", "link": "https://nvd.nist.gov/vuln/detail/CVE-2025-3160", "summary": "A vulnerability has been found in Open Asset Import Library Assimp 5.4.3 and classified as problematic. This vulnerability affects the function Assimp::SceneCombiner::AddNodeHashes of the file code/Common/SceneCombiner.cpp of the component File Handler. The manipulation leads to out-of-bounds read. An attack has to be approached locally. The exploit has been disclosed to the public and may be used. The patch is identified as a0993658f40d8e13ff5823990c30b43c82a5daf0. It is recommended to apply a patch to fix this issue.", "scorev2": "1.7", "scorev3": "3.3", "scorev4": "4.8", "modified": "2026-06-17T09:19:19.000", "vector": "LOCAL", "vectorString": "CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:L/VI:N/VA:N/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X", "detail": "version-not-in-range" }, { "id": "CVE-2025-3196", "status": "Patched", "link": "https://nvd.nist.gov/vuln/detail/CVE-2025-3196", "summary": "A vulnerability, which was classified as critical, was found in Open Asset Import Library Assimp 5.4.3. Affected is the function Assimp::MD2Importer::InternReadFile in the library code/AssetLib/MD2/MD2Loader.cpp of the component Malformed File Handler. The manipulation of the argument Name leads to stack-based buffer overflow. The attack needs to be approached locally. The exploit has been disclosed to the public and may be used. It is recommended to upgrade the affected component.", "scorev2": "4.3", "scorev3": "5.5", "scorev4": "4.8", "modified": "2026-06-17T09:19:24.000", "vector": "LOCAL", "vectorString": "CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N/E:P", "detail": "version-not-in-range" }, { "id": "CVE-2025-3548", "status": "Patched", "link": "https://nvd.nist.gov/vuln/detail/CVE-2025-3548", "summary": "A vulnerability, which was classified as critical, has been found in Open Asset Import Library Assimp up to 5.4.3. This issue affects the function aiString::Set in the library include/assimp/types.h of the component File Handler. The manipulation leads to heap-based buffer overflow. It is possible to launch the attack on the local host. The exploit has been disclosed to the public and may be used. It is recommended to apply a patch to fix this issue.", "scorev2": "4.3", "scorev3": "5.3", "scorev4": "4.8", "modified": "2026-06-17T09:20:09.000", "vector": "LOCAL", "vectorString": "CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N/E:P", "detail": "fixed-version: Fixed from version >5.4.3" }, { "id": "CVE-2025-3549", "status": "Patched", "link": "https://nvd.nist.gov/vuln/detail/CVE-2025-3549", "summary": "A vulnerability, which was classified as critical, was found in Open Asset Import Library Assimp 5.4.3. Affected is the function Assimp::MD3Importer::ValidateSurfaceHeaderOffsets of the file code/AssetLib/MD3/MD3Loader.cpp of the component File Handler. The manipulation leads to heap-based buffer overflow. The attack needs to be approached locally. The exploit has been disclosed to the public and may be used.", "scorev2": "4.3", "scorev3": "5.3", "scorev4": "4.8", "modified": "2026-06-17T09:20:09.000", "vector": "LOCAL", "vectorString": "CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N/E:P", "detail": "version-not-in-range" }, { "id": "CVE-2025-5165", "status": "Patched", "link": "https://nvd.nist.gov/vuln/detail/CVE-2025-5165", "summary": "A vulnerability was found in Open Asset Import Library Assimp 5.4.3 and classified as problematic. This issue affects the function MDCImporter::ValidateSurfaceHeader of the file assimp/code/AssetLib/MDC/MDCLoader.cpp. The manipulation of the argument pcSurface2 leads to out-of-bounds read. Attacking locally is a requirement. The exploit has been disclosed to the public and may be used. The project decided to collect all Fuzzer bugs in a main-issue to address them in the future.", "scorev2": "1.7", "scorev3": "5.5", "scorev4": "4.8", "modified": "2026-06-17T09:47:22.000", "vector": "LOCAL", "vectorString": "CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:L/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X", "detail": "version-not-in-range" }, { "id": "CVE-2025-5166", "status": "Patched", "link": "https://nvd.nist.gov/vuln/detail/CVE-2025-5166", "summary": "A vulnerability was found in Open Asset Import Library Assimp 5.4.3. It has been classified as problematic. Affected is the function MDCImporter::InternReadFile of the file assimp/code/AssetLib/MDC/MDCLoader.cpp of the component MDC File Parser. The manipulation of the argument pcVerts leads to out-of-bounds read. It is possible to launch the attack on the local host. The exploit has been disclosed to the public and may be used. The project decided to collect all Fuzzer bugs in a main-issue to address them in the future.", "scorev2": "1.7", "scorev3": "5.5", "scorev4": "4.8", "modified": "2026-06-17T09:47:22.000", "vector": "LOCAL", "vectorString": "CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:L/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X", "detail": "version-not-in-range" }, { "id": "CVE-2025-5167", "status": "Patched", "link": "https://nvd.nist.gov/vuln/detail/CVE-2025-5167", "summary": "A vulnerability was found in Open Asset Import Library Assimp 5.4.3. It has been declared as problematic. Affected by this vulnerability is the function LWOImporter::GetS0 in the library assimp/code/AssetLib/LWO/LWOLoader.h. The manipulation of the argument out leads to out-of-bounds read. The attack needs to be approached locally. The exploit has been disclosed to the public and may be used. The project decided to collect all Fuzzer bugs in a main-issue to address them in the future.", "scorev2": "1.7", "scorev3": "5.5", "scorev4": "4.8", "modified": "2026-06-17T09:47:22.000", "vector": "LOCAL", "vectorString": "CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:L/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X", "detail": "version-not-in-range" }, { "id": "CVE-2025-5168", "status": "Patched", "link": "https://nvd.nist.gov/vuln/detail/CVE-2025-5168", "summary": "A vulnerability was found in Open Asset Import Library Assimp 5.4.3. It has been rated as problematic. Affected by this issue is the function MDLImporter::ImportUVCoordinate_3DGS_MDL345 of the file assimp/code/AssetLib/MDL/MDLLoader.cpp. The manipulation of the argument iIndex leads to out-of-bounds read. An attack has to be approached locally. The exploit has been disclosed to the public and may be used. The project decided to collect all Fuzzer bugs in a main-issue to address them in the future.", "scorev2": "1.7", "scorev3": "5.5", "scorev4": "4.8", "modified": "2026-06-17T09:47:22.000", "vector": "LOCAL", "vectorString": "CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:L/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X", "detail": "version-not-in-range" }, { "id": "CVE-2025-5169", "status": "Patched", "link": "https://nvd.nist.gov/vuln/detail/CVE-2025-5169", "summary": "A vulnerability classified as problematic has been found in Open Asset Import Library Assimp 5.4.3. This affects the function MDLImporter::InternReadFile_3DGS_MDL345 of the file assimp/code/AssetLib/MDL/MDLLoader.cpp. The manipulation leads to out-of-bounds read. Local access is required to approach this attack. The exploit has been disclosed to the public and may be used. The project decided to collect all Fuzzer bugs in a main-issue to address them in the future.", "scorev2": "1.7", "scorev3": "5.5", "scorev4": "4.8", "modified": "2026-06-17T09:47:22.000", "vector": "LOCAL", "vectorString": "CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:L/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X", "detail": "version-not-in-range" }, { "id": "CVE-2025-5200", "status": "Patched", "link": "https://nvd.nist.gov/vuln/detail/CVE-2025-5200", "summary": "A vulnerability was found in Open Asset Import Library Assimp 5.4.3 and classified as problematic. This issue affects the function MDLImporter::InternReadFile_Quake1 of the file assimp/code/AssetLib/MDL/MDLLoader.cpp. The manipulation leads to out-of-bounds read. It is possible to launch the attack on the local host. The exploit has been disclosed to the public and may be used. The project decided to collect all Fuzzer bugs in a main-issue to address them in the future.", "scorev2": "1.7", "scorev3": "7.8", "scorev4": "4.8", "modified": "2026-06-17T09:47:26.000", "vector": "LOCAL", "vectorString": "CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:L/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X", "detail": "fixed-version: Fixed from version 5.4.3" }, { "id": "CVE-2025-5201", "status": "Patched", "link": "https://nvd.nist.gov/vuln/detail/CVE-2025-5201", "summary": "A vulnerability was found in Open Asset Import Library Assimp 5.4.3. It has been classified as problematic. Affected is the function LWOImporter::CountVertsAndFacesLWO2 of the file assimp/code/AssetLib/LWO/LWOLoader.cpp. The manipulation leads to out-of-bounds read. The attack needs to be approached locally. The exploit has been disclosed to the public and may be used. The project decided to collect all Fuzzer bugs in a main-issue to address them in the future.", "scorev2": "1.7", "scorev3": "7.8", "scorev4": "4.8", "modified": "2026-06-17T09:47:26.000", "vector": "LOCAL", "vectorString": "CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:L/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X", "detail": "fixed-version: Fixed from version 5.4.3" }, { "id": "CVE-2025-5202", "status": "Patched", "link": "https://nvd.nist.gov/vuln/detail/CVE-2025-5202", "summary": "A vulnerability was found in Open Asset Import Library Assimp 5.4.3. It has been declared as problematic. Affected by this vulnerability is the function HL1MDLLoader::validate_header of the file assimp/code/AssetLib/MDL/HalfLife/HL1MDLLoader.cpp. The manipulation leads to out-of-bounds read. An attack has to be approached locally. The exploit has been disclosed to the public and may be used. The project decided to collect all Fuzzer bugs in a main-issue to address them in the future.", "scorev2": "1.7", "scorev3": "7.8", "scorev4": "4.8", "modified": "2026-06-17T09:47:26.000", "vector": "LOCAL", "vectorString": "CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:L/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X", "detail": "fixed-version: Fixed from version 5.4.3" }, { "id": "CVE-2025-5203", "status": "Patched", "link": "https://nvd.nist.gov/vuln/detail/CVE-2025-5203", "summary": "A vulnerability was found in Open Asset Import Library Assimp 5.4.3. It has been rated as problematic. Affected by this issue is the function SkipSpaces in the library assimp/include/assimp/ParsingUtils.h. The manipulation leads to out-of-bounds read. Local access is required to approach this attack. The exploit has been disclosed to the public and may be used. The project decided to collect all Fuzzer bugs in a main-issue to address them in the future.", "scorev2": "1.7", "scorev3": "7.8", "scorev4": "4.8", "modified": "2026-06-17T09:47:26.000", "vector": "LOCAL", "vectorString": "CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:L/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X", "detail": "fixed-version: Fixed from version 5.4.3" }, { "id": "CVE-2025-5204", "status": "Patched", "link": "https://nvd.nist.gov/vuln/detail/CVE-2025-5204", "summary": "A vulnerability classified as problematic has been found in Open Asset Import Library Assimp 5.4.3. This affects the function MDLImporter::ParseSkinLump_3DGS_MDL7 of the file assimp/code/AssetLib/MDL/MDLMaterialLoader.cpp. The manipulation leads to out-of-bounds read. Attacking locally is a requirement. The exploit has been disclosed to the public and may be used. The project decided to collect all Fuzzer bugs in a main-issue to address them in the future.", "scorev2": "1.7", "scorev3": "7.8", "scorev4": "4.8", "modified": "2026-06-17T09:47:26.000", "vector": "LOCAL", "vectorString": "CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:L/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X", "detail": "fixed-version: Fixed from version 5.4.3" }, { "id": "CVE-2025-6119", "status": "Patched", "link": "https://nvd.nist.gov/vuln/detail/CVE-2025-6119", "summary": "A vulnerability classified as critical has been found in Open Asset Import Library Assimp up to 5.4.3. Affected is the function Assimp::BVHLoader::ReadNodeChannels in the library assimp/code/AssetLib/BVH/BVHLoader.cpp. The manipulation of the argument pNode leads to use after free. Attacking locally is a requirement. The exploit has been disclosed to the public and may be used. The project decided to collect all Fuzzer bugs in a main-issue to address them in the future.", "scorev2": "4.3", "scorev3": "5.3", "scorev4": "4.8", "modified": "2026-06-17T10:01:11.000", "vector": "LOCAL", "vectorString": "CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N/E:P", "detail": "fixed-version: Fixed from version >5.4.3" }, { "id": "CVE-2025-6120", "status": "Patched", "link": "https://nvd.nist.gov/vuln/detail/CVE-2025-6120", "summary": "A vulnerability classified as critical was found in Open Asset Import Library Assimp up to 5.4.3. Affected by this vulnerability is the function read_meshes in the library assimp/code/AssetLib/MDL/HalfLife/HL1MDLLoader.cpp. The manipulation leads to heap-based buffer overflow. It is possible to launch the attack on the local host. The exploit has been disclosed to the public and may be used. The project decided to collect all Fuzzer bugs in a main-issue to address them in the future.", "scorev2": "4.3", "scorev3": "5.3", "scorev4": "4.8", "modified": "2026-06-17T10:01:12.000", "vector": "LOCAL", "vectorString": "CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N/E:P", "detail": "fixed-version: Fixed from version >5.4.3" }, { "id": "CVE-2026-10197", "status": "Unpatched", "link": "https://nvd.nist.gov/vuln/detail/CVE-2026-10197", "summary": "A vulnerability was detected in Assimp up to 6.0.4. Affected is the function glTF2Importer::ImportEmbeddedTextures in the library code/AssetLib/glTF2/glTF2Importer.cpp of the component TF File Handler. The manipulation results in null pointer dereference. The attack is only possible with local access. The exploit is now public and may be used. It is advisable to implement a patch to correct this issue. The pull request to fix this issue awaits acceptance.", "scorev2": "1.7", "scorev3": "3.3", "scorev4": "4.8", "modified": "2026-07-22T07:10:00.000", "vector": "LOCAL", "vectorString": "CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:L/SC:N/SI:N/SA:N/E:P", "detail": "version-in-range", "description": "Mitigation action unknown" }, { "id": "CVE-2026-10198", "status": "Unpatched", "link": "https://nvd.nist.gov/vuln/detail/CVE-2026-10198", "summary": "A flaw has been found in Assimp up to 6.0.4. Affected by this vulnerability is the function Assimp::glTFImporter::ImportMeshes of the file glTFImporter.cpp of the component glTFImporter. This manipulation causes null pointer dereference. The attack is restricted to local execution. The exploit has been published and may be used. The project tagged the reported issue as bug.", "scorev2": "1.7", "scorev3": "3.3", "scorev4": "4.8", "modified": "2026-07-22T07:10:00.000", "vector": "LOCAL", "vectorString": "CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:L/SC:N/SI:N/SA:N/E:P", "detail": "version-in-range", "description": "Mitigation action unknown" }, { "id": "CVE-2026-10199", "status": "Unpatched", "link": "https://nvd.nist.gov/vuln/detail/CVE-2026-10199", "summary": "A vulnerability has been found in Assimp up to 6.0.4. Affected by this issue is the function glTF2::LazyDict in the library glTF2Asset.h. Such manipulation of the argument operator[] leads to null pointer dereference. The attack must be carried out locally. The exploit has been disclosed to the public and may be used. The name of the patch is d24b85319bd70c65883a2b96613e07e23fb95981. It is best practice to apply a patch to resolve this issue.", "scorev2": "1.7", "scorev3": "3.3", "scorev4": "4.8", "modified": "2026-07-22T07:10:00.000", "vector": "LOCAL", "vectorString": "CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:L/SC:N/SI:N/SA:N/E:P", "detail": "version-in-range", "description": "Mitigation action unknown" }, { "id": "CVE-2026-10200", "status": "Unpatched", "link": "https://nvd.nist.gov/vuln/detail/CVE-2026-10200", "summary": "A vulnerability was found in Assimp up to 6.0.4. This affects the function glTFCommon::CopyValue in the library glTFCommon.h of the component 4x4 Matrix Parser. Performing a manipulation results in heap-based buffer overflow. The attack must be initiated from a local position. The exploit has been made public and could be used. The project tagged the reported issue as bug.", "scorev2": "4.3", "scorev3": "5.3", "scorev4": "4.8", "modified": "2026-07-22T07:10:00.000", "vector": "LOCAL", "vectorString": "CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N/E:P", "detail": "version-in-range", "description": "Mitigation action unknown" }, { "id": "CVE-2026-10201", "status": "Unpatched", "link": "https://nvd.nist.gov/vuln/detail/CVE-2026-10201", "summary": "A vulnerability was determined in Assimp up to 6.0.4. This vulnerability affects the function FBXExporter::WriteObjects of the file FBXExporter.cpp of the component UV Channel Handler. Executing a manipulation can lead to divide by zero. The attack needs to be launched locally. The exploit has been publicly disclosed and may be utilized. Applying a patch is advised to resolve this issue. The project tagged the reported issue as bug.", "scorev2": "1.7", "scorev3": "3.3", "scorev4": "4.8", "modified": "2026-07-22T07:10:00.000", "vector": "LOCAL", "vectorString": "CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:L/SC:N/SI:N/SA:N/E:P", "detail": "version-in-range", "description": "Mitigation action unknown" }, { "id": "CVE-2026-10229", "status": "Unpatched", "link": "https://nvd.nist.gov/vuln/detail/CVE-2026-10229", "summary": "A vulnerability was determined in Assimp up to 6.0.4. This affects the function HL1MDLLoader::read_meshes of the file HL1MDLLoader.cpp of the component Half-Life 1 MDL Loader. This manipulation causes heap-based buffer overflow. The attack is restricted to local execution. The exploit has been publicly disclosed and may be utilized. The project tagged the reported issue as bug.", "scorev2": "4.3", "scorev3": "5.3", "scorev4": "4.8", "modified": "2026-07-22T07:10:00.000", "vector": "LOCAL", "vectorString": "CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N/E:P", "detail": "version-in-range", "description": "Mitigation action unknown" }, { "id": "CVE-2026-10230", "status": "Unpatched", "link": "https://nvd.nist.gov/vuln/detail/CVE-2026-10230", "summary": "A vulnerability was identified in Assimp up to 6.0.4. This impacts the function Assimp::MDL::HalfLife::HL1MDLLoader::read_animations of the file HL1MDLLoader.cpp of the component Half-Life 1 MDL Loader. Such manipulation leads to heap-based buffer overflow. The attack must be carried out locally. The exploit is publicly available and might be used. The project tagged the reported issue as bug.", "scorev2": "4.3", "scorev3": "5.3", "scorev4": "4.8", "modified": "2026-07-22T07:10:00.000", "vector": "LOCAL", "vectorString": "CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N/E:P", "detail": "version-in-range", "description": "Mitigation action unknown" }, { "id": "CVE-2026-10231", "status": "Unpatched", "link": "https://nvd.nist.gov/vuln/detail/CVE-2026-10231", "summary": "A security flaw has been discovered in Assimp up to 6.0.4. Affected is the function HL1MDLLoader::extract_anim_value of the file HL1MDLLoader.cpp of the component Half-Life 1 MDL Loader. Performing a manipulation of the argument num.total results in heap-based buffer overflow. The attack must be initiated from a local position. The exploit has been released to the public and may be used for attacks. The project tagged the reported issue as bug.", "scorev2": "4.3", "scorev3": "5.3", "scorev4": "4.8", "modified": "2026-07-22T07:10:00.000", "vector": "LOCAL", "vectorString": "CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N/E:P", "detail": "version-in-range", "description": "Mitigation action unknown" }, { "id": "CVE-2026-10232", "status": "Unpatched", "link": "https://nvd.nist.gov/vuln/detail/CVE-2026-10232", "summary": "A weakness has been identified in Assimp up to 6.0.4. Affected by this vulnerability is the function aiNode::~aiNode of the file scene.cpp of the component ASE File Parser. Executing a manipulation can lead to use after free. The attack needs to be launched locally. The exploit has been made available to the public and could be used for attacks. The project tagged the reported issue as bug.", "scorev2": "4.3", "scorev3": "5.3", "scorev4": "4.8", "modified": "2026-07-22T07:10:00.000", "vector": "LOCAL", "vectorString": "CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N/E:P", "detail": "version-in-range", "description": "Mitigation action unknown" }, { "id": "CVE-2026-10233", "status": "Unpatched", "link": "https://nvd.nist.gov/vuln/detail/CVE-2026-10233", "summary": "A security vulnerability has been detected in Assimp up to 6.0.4. Affected by this issue is the function HL1MDLLoader::read_sequence_infos of the file HL1MDLLoader.cpp of the component Half-Life 1 MDL Loader. The manipulation of the argument aiString leads to out-of-bounds read. The attack needs to be performed locally. The exploit has been disclosed publicly and may be used. The project tagged the reported issue as bug.", "scorev2": "1.7", "scorev3": "3.3", "scorev4": "4.8", "modified": "2026-07-22T07:10:00.000", "vector": "LOCAL", "vectorString": "CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:L/VI:N/VA:N/SC:N/SI:N/SA:N/E:P", "detail": "version-in-range", "description": "Mitigation action unknown" }, { "id": "CVE-2026-108573", "status": "Unpatched", "link": "https://nvd.nist.gov/vuln/detail/CVE-2026-108573", "summary": "A vulnerability was detected in Open Asset Import Library Assimp up to 6.0.5. Affected by this vulnerability is the function IOStreamBuffer::getNextBlock of the component PLY File Handler. Performing a manipulation results in out-of-bounds read. It is possible to initiate the attack remotely. The vendor was contacted early about this disclosure but did not respond in any way.", "scorev2": "6.5", "scorev3": "5.5", "scorev4": "5.1", "modified": "2026-10-11T12:16:52.000", "vector": "NETWORK", "vectorString": "CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:P/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X", "detail": "version-in-range", "description": "Mitigation action unknown" }, { "id": "CVE-2026-14604", "status": "Unpatched", "link": "https://nvd.nist.gov/vuln/detail/CVE-2026-14604", "summary": "A vulnerability was determined in Open Asset Import Library Assimp up to 6.0.4. Affected is the function Assimp::Exporter::ExportToBlob of the file code/AssetLib/Ply/PlyLoader.cpp of the component PLY Model Handler. This manipulation causes double free. The attack can be initiated remotely. The exploit has been publicly disclosed and may be utilized. The project was informed of the problem early through an issue report.", "scorev2": "6.5", "scorev3": "6.3", "scorev4": "5.3", "modified": "2026-07-06T18:02:49.000", "vector": "NETWORK", "vectorString": "CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N/E:P", "detail": "version-in-range", "description": "Mitigation action unknown" }, { "id": "CVE-2026-14610", "status": "Unpatched", "link": "https://nvd.nist.gov/vuln/detail/CVE-2026-14610", "summary": "A flaw has been found in Open Asset Import Library Assimp up to 6.0.5. Impacted is the function Assimp::CSMImporter::InternReadFile of the file code/AssetLib/CSM/CSMLoader.cpp of the component CSM File Handler. This manipulation causes heap-based buffer overflow. The attack is restricted to local execution. The exploit has been published and may be used. Patch name: eb84eec580d3f4ba2f0fd87409b7d0744620f11e. Applying a patch is the recommended action to fix this issue.", "scorev2": "4.3", "scorev3": "5.3", "scorev4": "4.8", "modified": "2026-07-06T18:02:49.000", "vector": "LOCAL", "vectorString": "CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N/E:P", "detail": "version-in-range", "description": "Mitigation action unknown" }, { "id": "CVE-2026-19967", "status": "Patched", "link": "https://nvd.nist.gov/vuln/detail/CVE-2026-19967", "summary": "A security flaw has been discovered in Open Asset Import Library Assimp 17c12da. Impacted is the function Assimp::Compression::decompressBlock of the file code/Common/Compression.cpp of the component File Parser. Performing a manipulation results in heap-based buffer overflow. The attack may be initiated remotely. The exploit has been released to the public and may be used for attacks. The project was informed of the problem early through an issue report but has not responded yet.", "scorev2": "7.5", "scorev3": "6.3", "scorev4": "5.3", "modified": "2026-08-20T12:48:10.000", "vector": "NETWORK", "vectorString": "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:P/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N/E:P", "detail": "version-not-in-range: Only affects 17c12da onwards" }, { "id": "CVE-2026-19968", "status": "Patched", "link": "https://nvd.nist.gov/vuln/detail/CVE-2026-19968", "summary": "A weakness has been identified in Open Asset Import Library Assimp 17c12da. The affected element is the function Assimp::MDLImporter::ReadFaces_3DGS_MDL7 in the library code/AssetLib/LWO/LWOLoader.h of the component 3DGS MDL7 Model Parser. Executing a manipulation can lead to heap-based buffer overflow. The attack may be launched remotely. The exploit has been made available to the public and could be used for attacks. This patch is called ee77bb09a42a49843ac85ef64c14d2328b251df1. Applying a patch is advised to resolve this issue.", "scorev2": "5.0", "scorev3": "4.3", "scorev4": "5.3", "modified": "2026-08-20T12:48:10.000", "vector": "NETWORK", "vectorString": "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:P/VC:N/VI:N/VA:L/SC:N/SI:N/SA:N/E:P", "detail": "version-not-in-range: Only affects 17c12da onwards" }, { "id": "CVE-2026-19969", "status": "Patched", "link": "https://nvd.nist.gov/vuln/detail/CVE-2026-19969", "summary": "A security vulnerability has been detected in Open Asset Import Library Assimp 17c12da. The impacted element is the function Assimp::MDLImporter::GenerateOutputMeshes_3DGS_MDL7 of the file code/AssetLib/MDL/MDLLoader.cpp of the component 3DGS MDL7 Model Output Mesh Generator. The manipulation leads to buffer overflow. Remote exploitation of the attack is possible. The exploit has been disclosed publicly and may be used. The project was informed of the problem early through an issue report but has not responded yet.", "scorev2": "6.4", "scorev3": "5.4", "scorev4": "5.3", "modified": "2026-08-20T12:48:10.000", "vector": "NETWORK", "vectorString": "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:P/VC:N/VI:L/VA:L/SC:N/SI:N/SA:N/E:P", "detail": "version-not-in-range: Only affects 17c12da onwards" }, { "id": "CVE-2026-19970", "status": "Patched", "link": "https://nvd.nist.gov/vuln/detail/CVE-2026-19970", "summary": "A vulnerability was detected in Open Asset Import Library Assimp 17c12da. This affects the function Assimp::MDLImporter::AddBonesToNodeGraph_3DGS_MDL7 of the file code/AssetLib/MDL/MDLLoader.cpp of the component Node Parser. The manipulation of the argument bones_num results in heap-based buffer overflow. The attack can be executed remotely. The exploit is now public and may be used. The project was informed of the problem early through an issue report but has not responded yet.", "scorev2": "7.5", "scorev3": "6.3", "scorev4": "5.3", "modified": "2026-08-20T12:48:31.000", "vector": "NETWORK", "vectorString": "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:P/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N/E:P", "detail": "version-not-in-range: Only affects 17c12da onwards" }, { "id": "CVE-2026-19999", "status": "Patched", "link": "https://nvd.nist.gov/vuln/detail/CVE-2026-19999", "summary": "A security vulnerability has been detected in Open Asset Import Library Assimp Assimp 17c12da. The affected element is the function Assimp::MDLImporter::ParseBoneTrafoKeys_3DGS_MDL7 of the file code/AssetLib/MDL/MDLLoader.cpp of the component 3DGS MDL7 Bone Transformation Key Parser. The manipulation of the argument transmatrix_count/pcBoneTransforms leads to buffer overflow. It is possible to initiate the attack remotely. The exploit has been disclosed publicly and may be used. The identifier of the patch is 50d767984e78d51b53e2020fdf0967fd624bc377. It is recommended to apply a patch to fix this issue.", "scorev2": "7.5", "scorev3": "6.3", "scorev4": "5.3", "modified": "2026-08-20T12:48:31.000", "vector": "NETWORK", "vectorString": "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:P/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N/E:P", "detail": "version-not-in-range: Only affects 17c12da onwards" }, { "id": "CVE-2026-82591", "status": "Unpatched", "link": "https://nvd.nist.gov/vuln/detail/CVE-2026-82591", "summary": "A security vulnerability has been detected in Open Asset Import Library Assimp up to 6.0.2. The impacted element is the function MD5Importer::MakeDataUnique of the file code/AssetLib/MD5/MD5Loader.cpp. The manipulation of the argument iNewIndex leads to heap-based buffer overflow. The attack can only be performed from a local environment. The identifier of the patch is bf9dabb617c46e5133dac65cca6bff177917afcb. Applying a patch is the recommended action to fix this issue.", "scorev2": "4.3", "scorev3": "5.3", "scorev4": "4.8", "modified": "2026-09-01T20:48:22.000", "vector": "LOCAL", "vectorString": "CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X", "detail": "version-in-range", "description": "Mitigation action unknown" } ], "cpes": [ "cpe:2.3:*:*:assimp:6.0.2:*:*:*:*:*:*:*" ] }, { "name": "at", "layer": "core", "version": "3.2.5", "products": [ { "product": "at", "cvesInRecord": "No" } ], "issue": [], "cpes": [ "cpe:2.3:*:*:at:3.2.5:*:*:*:*:*:*:*" ] }, { "name": "at-spi2-core", "layer": "core", "version": "2.60.0", "products": [ { "product": "at-spi2-atk", "cvesInRecord": "Yes" } ], "issue": [ { "id": "CVE-2012-3378", "status": "Patched", "link": "https://nvd.nist.gov/vuln/detail/CVE-2012-3378", "summary": "The register_application function in atk-adaptor/bridge.c in GNOME at-spi2-atk 2.5.2 does not seed the random number generator and generates predictable temporary file names, which makes it easier for local users to create or truncate files via a symlink attack on a temporary socket file in /tmp/at-spi2.", "scorev2": "3.3", "scorev3": "0.0", "scorev4": "0.0", "modified": "2026-06-16T23:43:06.000", "vector": "LOCAL", "vectorString": "AV:L/AC:M/Au:N/C:N/I:P/A:P", "detail": "version-not-in-range" } ], "cpes": [ "cpe:2.3:*:*:at-spi2-atk:2.60.0:*:*:*:*:*:*:*" ] }, { "name": "attr", "layer": "core", "version": "2.5.2", "products": [ { "product": "attr", "cvesInRecord": "Yes" } ], "issue": [ { "id": "CVE-2026-54371", "status": "Unpatched", "link": "https://nvd.nist.gov/vuln/detail/CVE-2026-54371", "summary": "attr before version 2.6.0 contains a symlink traversal vulnerability in the getfattr and setfattr utilities that allows local attackers to escalate privileges by replacing a pathname component with a symbolic link during directory hierarchy traversal. Attackers who control a pathname component can redirect getfattr and setfattr operations to arbitrary files by substituting a symlink, leading to local privilege escalation when getfattr or setfattr is invoked by a privileged process over an attacker-controlled path.", "scorev2": "0.0", "scorev3": "7.1", "scorev4": "8.4", "modified": "2026-09-11T13:18:15.000", "vector": "LOCAL", "vectorString": "CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:N/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X", "detail": "version-in-range", "description": "Needs backporting (fixed from 2.6.0)" } ], "cpes": [ "cpe:2.3:*:*:attr:2.5.2:*:*:*:*:*:*:*" ] }, { "name": "autoconf-archive", "layer": "core", "version": "2024.10.16", "products": [ { "product": "autoconf-archive", "cvesInRecord": "No" } ], "issue": [], "cpes": [ "cpe:2.3:*:*:autoconf-archive:2024.10.16:*:*:*:*:*:*:*" ] }, { "name": "avahi", "layer": "core", "version": "0.8", "products": [ { "product": "avahi", "cvesInRecord": "Yes" } ], "issue": [ { "id": "CVE-2006-2288", "status": "Patched", "link": "https://nvd.nist.gov/vuln/detail/CVE-2006-2288", "summary": "Avahi before 0.6.10 allows local users to cause a denial of service (mDNS/DNS-SD service disconnect) via unspecified mDNS name conflicts.", "scorev2": "3.6", "scorev3": "0.0", "scorev4": "0.0", "modified": "2026-06-16T22:24:43.000", "vector": "LOCAL", "vectorString": "AV:L/AC:L/Au:N/C:N/I:P/A:P", "detail": "version-not-in-range" }, { "id": "CVE-2006-2289", "status": "Patched", "link": "https://nvd.nist.gov/vuln/detail/CVE-2006-2289", "summary": "Buffer overflow in avahi-core in Avahi before 0.6.10 allows local users to execute arbitrary code via unknown vectors.", "scorev2": "2.1", "scorev3": "0.0", "scorev4": "0.0", "modified": "2026-06-16T22:24:43.000", "vector": "LOCAL", "vectorString": "AV:L/AC:L/Au:N/C:N/I:P/A:N", "detail": "version-not-in-range" }, { "id": "CVE-2006-5461", "status": "Patched", "link": "https://nvd.nist.gov/vuln/detail/CVE-2006-5461", "summary": "Avahi before 0.6.15 does not verify the sender identity of netlink messages to ensure that they come from the kernel instead of another process, which allows local users to spoof network changes to Avahi.", "scorev2": "2.1", "scorev3": "0.0", "scorev4": "0.0", "modified": "2026-06-16T22:31:14.000", "vector": "LOCAL", "vectorString": "AV:L/AC:L/Au:N/C:N/I:P/A:N", "detail": "fixed-version: Fixed from version >0.6.14" }, { "id": "CVE-2006-6870", "status": "Patched", "link": "https://nvd.nist.gov/vuln/detail/CVE-2006-6870", "summary": "The consume_labels function in avahi-core/dns.c in Avahi before 0.6.16 allows remote attackers to cause a denial of service (infinite loop) via a crafted compressed DNS response with a label that points to itself.", "scorev2": "5.0", "scorev3": "0.0", "scorev4": "0.0", "modified": "2026-06-16T22:33:57.000", "vector": "NETWORK", "vectorString": "AV:N/AC:L/Au:N/C:N/I:N/A:P", "detail": "version-not-in-range" }, { "id": "CVE-2007-3372", "status": "Patched", "link": "https://nvd.nist.gov/vuln/detail/CVE-2007-3372", "summary": "The Avahi daemon in Avahi before 0.6.20 allows attackers to cause a denial of service (exit) via empty TXT data over D-Bus, which triggers an assert error.", "scorev2": "2.1", "scorev3": "0.0", "scorev4": "0.0", "modified": "2026-06-16T22:41:51.000", "vector": "LOCAL", "vectorString": "AV:L/AC:L/Au:N/C:N/I:N/A:P", "detail": "fixed-version: Fixed from version >0.6.19" }, { "id": "CVE-2008-5081", "status": "Patched", "link": "https://nvd.nist.gov/vuln/detail/CVE-2008-5081", "summary": "The originates_from_local_legacy_unicast_socket function (avahi-core/server.c) in avahi-daemon in Avahi before 0.6.24 allows remote attackers to cause a denial of service (crash) via a crafted mDNS packet with a source port of 0, which triggers an assertion failure.", "scorev2": "5.0", "scorev3": "0.0", "scorev4": "0.0", "modified": "2026-06-16T22:59:13.000", "vector": "NETWORK", "vectorString": "AV:N/AC:L/Au:N/C:N/I:N/A:P", "detail": "fixed-version: Fixed from version >0.6.23" }, { "id": "CVE-2010-2244", "status": "Patched", "link": "https://nvd.nist.gov/vuln/detail/CVE-2010-2244", "summary": "The AvahiDnsPacket function in avahi-core/socket.c in avahi-daemon in Avahi 0.6.16 and 0.6.25 allows remote attackers to cause a denial of service (assertion failure and daemon exit) via a DNS packet with an invalid checksum followed by a DNS packet with a valid checksum, a different vulnerability than CVE-2008-5081.", "scorev2": "4.3", "scorev3": "0.0", "scorev4": "0.0", "modified": "2026-06-16T23:20:22.000", "vector": "NETWORK", "vectorString": "AV:N/AC:M/Au:N/C:N/I:N/A:P", "detail": "version-not-in-range" }, { "id": "CVE-2011-1002", "status": "Patched", "link": "https://nvd.nist.gov/vuln/detail/CVE-2011-1002", "summary": "avahi-core/socket.c in avahi-daemon in Avahi before 0.6.29 allows remote attackers to cause a denial of service (infinite loop) via an empty mDNS (1) IPv4 or (2) IPv6 UDP packet to port 5353. NOTE: this vulnerability exists because of an incorrect fix for CVE-2010-2244.", "scorev2": "5.0", "scorev3": "0.0", "scorev4": "0.0", "modified": "2026-06-16T23:28:31.000", "vector": "NETWORK", "vectorString": "AV:N/AC:L/Au:N/C:N/I:N/A:P", "detail": "fixed-version: Fixed from version >0.6.28" }, { "id": "CVE-2017-6519", "status": "Patched", "link": "https://nvd.nist.gov/vuln/detail/CVE-2017-6519", "summary": "avahi-daemon in Avahi through 0.6.32 and 0.7 inadvertently responds to IPv6 unicast queries with source addresses that are not on-link, which allows remote attackers to cause a denial of service (traffic amplification) and may cause information leakage by obtaining potentially sensitive information from the responding device via port-5353 UDP packets. NOTE: this may overlap CVE-2015-2809.", "scorev2": "6.4", "scorev3": "9.1", "scorev4": "0.0", "modified": "2026-06-17T01:22:29.000", "vector": "NETWORK", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:H", "detail": "fixed-version: Fixed from version >0.6.32" }, { "id": "CVE-2021-26720", "status": "Ignored", "link": "https://nvd.nist.gov/vuln/detail/CVE-2021-26720", "summary": "avahi-daemon-check-dns.sh in the Debian avahi package through 0.8-4 is executed as root via /etc/network/if-up.d/avahi-daemon, and allows a local attacker to cause a denial of service or create arbitrary empty files via a symlink attack on files under /run/avahi-daemon. NOTE: this only affects the packaging for Debian GNU/Linux (used indirectly by SUSE), not the upstream Avahi product.", "scorev2": "4.6", "scorev3": "7.8", "scorev4": "0.0", "modified": "2026-06-17T03:43:43.000", "vector": "LOCAL", "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H", "detail": "not-applicable-platform", "description": "vulnerable_code_not_in_execute_path: Issue only affects Debian/SUSE" }, { "id": "CVE-2021-3468", "status": "Patched", "link": "https://nvd.nist.gov/vuln/detail/CVE-2021-3468", "summary": "A flaw was found in avahi in versions 0.6 up to 0.8. The event used to signal the termination of the client connection on the avahi Unix socket is not correctly handled in the client_work function, allowing a local attacker to trigger an infinite loop. The highest threat from this vulnerability is to the availability of the avahi service, which becomes unresponsive after this flaw is triggered.", "scorev2": "2.1", "scorev3": "5.5", "scorev4": "0.0", "modified": "2026-06-17T04:05:09.000", "vector": "LOCAL", "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H", "detail": "fix-file-included", "patch-file": [ "/home/luan/src/yocto/wrynose/dart-mx8mp/sources/openembedded-core/meta/recipes-connectivity/avahi/files/handle-hup.patch" ] }, { "id": "CVE-2021-3502", "status": "Patched", "link": "https://nvd.nist.gov/vuln/detail/CVE-2021-3502", "summary": "A flaw was found in avahi 0.8-5. A reachable assertion is present in avahi_s_host_name_resolver_start function allowing a local attacker to crash the avahi service by requesting hostname resolutions through the avahi socket or dbus methods for invalid hostnames. The highest threat from this vulnerability is to the service availability.", "scorev2": "2.1", "scorev3": "5.5", "scorev4": "0.0", "modified": "2026-06-17T04:05:14.000", "vector": "LOCAL", "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H", "detail": "fix-file-included", "patch-file": [ "/home/luan/src/yocto/wrynose/dart-mx8mp/sources/openembedded-core/meta/recipes-connectivity/avahi/files/local-ping.patch" ] }, { "id": "CVE-2023-1981", "status": "Patched", "link": "https://nvd.nist.gov/vuln/detail/CVE-2023-1981", "summary": "A vulnerability was found in the avahi library. This flaw allows an unprivileged user to make a dbus call, causing the avahi daemon to crash.", "scorev2": "0.0", "scorev3": "5.5", "scorev4": "0.0", "modified": "2026-06-17T05:29:11.000", "vector": "LOCAL", "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H", "detail": "fix-file-included", "patch-file": [ "/home/luan/src/yocto/wrynose/dart-mx8mp/sources/openembedded-core/meta/recipes-connectivity/avahi/files/CVE-2023-1981.patch" ] }, { "id": "CVE-2023-38469", "status": "Patched", "link": "https://nvd.nist.gov/vuln/detail/CVE-2023-38469", "summary": "A vulnerability was found in Avahi, where a reachable assertion exists in avahi_dns_packet_append_record.", "scorev2": "0.0", "scorev3": "6.2", "scorev4": "0.0", "modified": "2026-06-17T06:10:14.000", "vector": "LOCAL", "vectorString": "CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H", "detail": "fix-file-included", "patch-file": [ "/home/luan/src/yocto/wrynose/dart-mx8mp/sources/openembedded-core/meta/recipes-connectivity/avahi/files/CVE-2023-38469-1.patch", "/home/luan/src/yocto/wrynose/dart-mx8mp/sources/openembedded-core/meta/recipes-connectivity/avahi/files/CVE-2023-38469-2.patch" ] }, { "id": "CVE-2023-38470", "status": "Patched", "link": "https://nvd.nist.gov/vuln/detail/CVE-2023-38470", "summary": "A vulnerability was found in Avahi. A reachable assertion exists in the avahi_escape_label() function.", "scorev2": "0.0", "scorev3": "6.2", "scorev4": "0.0", "modified": "2026-06-17T06:10:14.000", "vector": "LOCAL", "vectorString": "CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H", "detail": "fix-file-included", "patch-file": [ "/home/luan/src/yocto/wrynose/dart-mx8mp/sources/openembedded-core/meta/recipes-connectivity/avahi/files/CVE-2023-38470-1.patch", "/home/luan/src/yocto/wrynose/dart-mx8mp/sources/openembedded-core/meta/recipes-connectivity/avahi/files/CVE-2023-38470-2.patch" ] }, { "id": "CVE-2023-38471", "status": "Patched", "link": "https://nvd.nist.gov/vuln/detail/CVE-2023-38471", "summary": "A vulnerability was found in Avahi. A reachable assertion exists in the dbus_set_host_name function.", "scorev2": "0.0", "scorev3": "6.2", "scorev4": "0.0", "modified": "2026-06-17T06:10:14.000", "vector": "LOCAL", "vectorString": "CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H", "detail": "fix-file-included", "patch-file": [ "/home/luan/src/yocto/wrynose/dart-mx8mp/sources/openembedded-core/meta/recipes-connectivity/avahi/files/CVE-2023-38471-1.patch", "/home/luan/src/yocto/wrynose/dart-mx8mp/sources/openembedded-core/meta/recipes-connectivity/avahi/files/CVE-2023-38471-2.patch" ] }, { "id": "CVE-2023-38472", "status": "Patched", "link": "https://nvd.nist.gov/vuln/detail/CVE-2023-38472", "summary": "A vulnerability was found in Avahi. A reachable assertion exists in the avahi_rdata_parse() function.", "scorev2": "0.0", "scorev3": "6.2", "scorev4": "0.0", "modified": "2026-06-17T06:10:15.000", "vector": "LOCAL", "vectorString": "CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H", "detail": "fix-file-included", "patch-file": [ "/home/luan/src/yocto/wrynose/dart-mx8mp/sources/openembedded-core/meta/recipes-connectivity/avahi/files/CVE-2023-38472.patch" ] }, { "id": "CVE-2023-38473", "status": "Patched", "link": "https://nvd.nist.gov/vuln/detail/CVE-2023-38473", "summary": "A vulnerability was found in Avahi. A reachable assertion exists in the avahi_alternative_host_name() function.", "scorev2": "0.0", "scorev3": "6.2", "scorev4": "0.0", "modified": "2026-06-17T06:10:15.000", "vector": "LOCAL", "vectorString": "CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H", "detail": "fix-file-included", "patch-file": [ "/home/luan/src/yocto/wrynose/dart-mx8mp/sources/openembedded-core/meta/recipes-connectivity/avahi/files/CVE-2023-38473.patch" ] }, { "id": "CVE-2024-52615", "status": "Patched", "link": "https://nvd.nist.gov/vuln/detail/CVE-2024-52615", "summary": "A flaw was found in Avahi-daemon, which relies on fixed source ports for wide-area DNS queries. This issue simplifies attacks where malicious DNS responses are injected.", "scorev2": "0.0", "scorev3": "5.3", "scorev4": "0.0", "modified": "2026-06-29T23:16:41.000", "vector": "NETWORK", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N", "detail": "fix-file-included", "patch-file": [ "/home/luan/src/yocto/wrynose/dart-mx8mp/sources/openembedded-core/meta/recipes-connectivity/avahi/files/CVE-2024-52615.patch" ] }, { "id": "CVE-2024-52616", "status": "Patched", "link": "https://nvd.nist.gov/vuln/detail/CVE-2024-52616", "summary": "A flaw was found in the Avahi-daemon, where it initializes DNS transaction IDs randomly only once at startup, incrementing them sequentially after that. This predictable behavior facilitates DNS spoofing attacks, allowing attackers to guess transaction IDs.", "scorev2": "0.0", "scorev3": "5.3", "scorev4": "0.0", "modified": "2026-06-29T23:16:42.000", "vector": "NETWORK", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N", "detail": "fix-file-included", "patch-file": [ "/home/luan/src/yocto/wrynose/dart-mx8mp/sources/openembedded-core/meta/recipes-connectivity/avahi/files/CVE-2024-52616.patch" ] }, { "id": "CVE-2025-59529", "status": "Unpatched", "link": "https://nvd.nist.gov/vuln/detail/CVE-2025-59529", "summary": "Avahi is a system which facilitates service discovery on a local network via the mDNS/DNS-SD protocol suite. In versions up to and including 0.9-rc2, the simple protocol server ignores the documented client limit and accepts unlimited connections, allowing for easy local DoS. Although `CLIENTS_MAX` is defined, `server_work()` unconditionally `accept()`s and `client_new()` always appends the new client and increments `n_clients`. There is no check against the limit. When client cannot be accepted as a result of maximal socket number of avahi-daemon, it logs unconditionally error per each connection. Unprivileged local users can exhaust daemon memory and file descriptors, causing a denial of service system-wide for mDNS/DNS-SD. Exhausting local file descriptors causes increased system load caused by logging errors of each of request. Overloading prevents glibc calls using nss-mdns plugins to resolve `*.local.` names and link-local addresses. As of time of publication, no known patched versions are available, but a candidate fix is available in pull request 808, and some workarounds are available. Simple clients are offered for nss-mdns package functionality. It is not possible to disable the unix socket `/run/avahi-daemon/socket`, but resolution requests received via DBus are not affected directly. Tools avahi-resolve, avahi-resolve-address and avahi-resolve-host-name are not affected, they use DBus interface. It is possible to change permissions of unix socket after avahi-daemon is started. But avahi-daemon does not provide any configuration for it. Additional access restrictions like SELinux can also prevent unwanted tools to access the socket and keep resolution working for trusted users.", "scorev2": "0.0", "scorev3": "5.5", "scorev4": "0.0", "modified": "2026-06-17T09:46:20.000", "vector": "LOCAL", "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H", "detail": "version-in-range", "description": "Needs backporting (fixed from 0.9)" }, { "id": "CVE-2025-68276", "status": "Patched", "link": "https://nvd.nist.gov/vuln/detail/CVE-2025-68276", "summary": "Avahi is a system which facilitates service discovery on a local network via the mDNS/DNS-SD protocol suite. In 0.9-rc2 and earlier, an unprivileged local users can crash avahi-daemon (with wide-area disabled) by creating record browsers with the AVAHI_LOOKUP_USE_WIDE_AREA flag set via D-Bus. This can be done by either calling\nthe RecordBrowserNew method directly or creating hostname/address/service resolvers/browsers that create those browsers internally themselves.", "scorev2": "0.0", "scorev3": "5.5", "scorev4": "0.0", "modified": "2026-06-17T09:58:51.000", "vector": "LOCAL", "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H", "detail": "fix-file-included", "patch-file": [ "/home/luan/src/yocto/wrynose/dart-mx8mp/sources/openembedded-core/meta/recipes-connectivity/avahi/files/CVE-2025-68276.patch" ] }, { "id": "CVE-2025-68468", "status": "Patched", "link": "https://nvd.nist.gov/vuln/detail/CVE-2025-68468", "summary": "Avahi is a system which facilitates service discovery on a local network via the mDNS/DNS-SD protocol suite. In 0.9-rc2 and earlier, avahi-daemon can be crashed by sending unsolicited announcements containing CNAME resource records pointing it to resource records with short TTLs. As soon as they expire avahi-daemon crashes.", "scorev2": "0.0", "scorev3": "6.5", "scorev4": "0.0", "modified": "2026-06-17T09:59:06.000", "vector": "NETWORK", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H", "detail": "fix-file-included", "patch-file": [ "/home/luan/src/yocto/wrynose/dart-mx8mp/sources/openembedded-core/meta/recipes-connectivity/avahi/files/CVE-2025-68468.patch" ] }, { "id": "CVE-2025-68471", "status": "Patched", "link": "https://nvd.nist.gov/vuln/detail/CVE-2025-68471", "summary": "Avahi is a system which facilitates service discovery on a local network via the mDNS/DNS-SD protocol suite. In 0.9-rc2 and earlier, avahi-daemon can be crashed by sending 2 unsolicited announcements with CNAME resource records 2 seconds apart.", "scorev2": "0.0", "scorev3": "6.5", "scorev4": "0.0", "modified": "2026-06-17T09:59:07.000", "vector": "NETWORK", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H", "detail": "fix-file-included", "patch-file": [ "/home/luan/src/yocto/wrynose/dart-mx8mp/sources/openembedded-core/meta/recipes-connectivity/avahi/files/CVE-2025-68471.patch" ] }, { "id": "CVE-2026-24401", "status": "Patched", "link": "https://nvd.nist.gov/vuln/detail/CVE-2026-24401", "summary": "Avahi is a system which facilitates service discovery on a local network via the mDNS/DNS-SD protocol suite. In versions 0.9rc2 and below, avahi-daemon can be crashed via a segmentation fault by sending an unsolicited mDNS response containing a recursive CNAME record, where the alias and canonical name point to the same domain (e.g., \"h.local\" as a CNAME for \"h.local\"). This causes unbounded recursion in the lookup_handle_cname function, leading to stack exhaustion. The vulnerability affects record browsers where AVAHI_LOOKUP_USE_MULTICAST is set explicitly, which includes record browsers created by resolvers used by nss-mdns. This issue is patched in commit 78eab31128479f06e30beb8c1cbf99dd921e2524.", "scorev2": "0.0", "scorev3": "6.5", "scorev4": "0.0", "modified": "2026-06-17T10:23:00.000", "vector": "NETWORK", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H", "detail": "fix-file-included", "patch-file": [ "/home/luan/src/yocto/wrynose/dart-mx8mp/sources/openembedded-core/meta/recipes-connectivity/avahi/files/CVE-2026-24401.patch" ] }, { "id": "CVE-2026-34933", "status": "Patched", "link": "https://nvd.nist.gov/vuln/detail/CVE-2026-34933", "summary": "Avahi is a system which facilitates service discovery on a local network via the mDNS/DNS-SD protocol suite. Prior to version 0.9-rc4, any unprivileged local user can crash avahi-daemon by sending a single D-Bus method call with conflicting publish flags. This issue has been patched in version 0.9-rc4.", "scorev2": "0.0", "scorev3": "5.5", "scorev4": "0.0", "modified": "2026-07-24T22:10:00.000", "vector": "LOCAL", "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H", "detail": "fix-file-included", "patch-file": [ "/home/luan/src/yocto/wrynose/dart-mx8mp/sources/openembedded-core/meta/recipes-connectivity/avahi/files/CVE-2026-34933-1.patch", "/home/luan/src/yocto/wrynose/dart-mx8mp/sources/openembedded-core/meta/recipes-connectivity/avahi/files/CVE-2026-34933-2.patch" ] } ], "cpes": [ "cpe:2.3:*:*:avahi:0.8:*:*:*:*:*:*:*" ] }, { "name": "avahi-libnss-mdns", "layer": "core", "version": "0.15.1", "products": [ { "product": "avahi-libnss-mdns", "cvesInRecord": "No" } ], "issue": [], "cpes": [ "cpe:2.3:*:*:avahi-libnss-mdns:0.15.1:*:*:*:*:*:*:*" ] }, { "name": "base-files", "layer": "core", "version": "3.0.14", "products": [ { "product": "base-files", "cvesInRecord": "Yes" } ], "issue": [ { "id": "CVE-2018-6557", "status": "Ignored", "link": "https://nvd.nist.gov/vuln/detail/CVE-2018-6557", "summary": "The MOTD update script in the base-files package in Ubuntu 18.04 LTS before 10.1ubuntu2.2, and Ubuntu 18.10 before 10.1ubuntu6 incorrectly handled temporary files. A local attacker could use this issue to cause a denial of service, or possibly escalate privileges if kernel symlink restrictions were disabled.", "scorev2": "4.4", "scorev3": "7.0", "scorev4": "0.0", "modified": "2026-06-17T02:02:01.000", "vector": "LOCAL", "vectorString": "CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H", "detail": "not-applicable-platform", "description": "vulnerable_code_not_in_execute_path: Ubuntu specific motd update code" } ], "cpes": [ "cpe:2.3:*:*:base-files:3.0.14:*:*:*:*:*:*:*" ] }, { "name": "base-passwd", "layer": "core", "version": "3.6.8", "products": [ { "product": "base-passwd", "cvesInRecord": "No" } ], "issue": [], "cpes": [ "cpe:2.3:*:*:base-passwd:3.6.8:*:*:*:*:*:*:*" ] }, { "name": "bash", "layer": "core", "version": "5.3", "products": [ { "product": "bash", "cvesInRecord": "Yes" } ], "issue": [ { "id": "CVE-1999-0491", "status": "Patched", "link": "https://nvd.nist.gov/vuln/detail/CVE-1999-0491", "summary": "The prompt parsing in bash allows a local user to execute commands as another user by creating a directory with the name of the command to execute.", "scorev2": "4.6", "scorev3": "0.0", "scorev4": "0.0", "modified": "2026-06-16T21:48:30.000", "vector": "LOCAL", "vectorString": "AV:L/AC:L/Au:N/C:P/I:P/A:P", "detail": "fixed-version: Fixed from version >2.04" }, { "id": "CVE-1999-1383", "status": "Patched", "link": "https://nvd.nist.gov/vuln/detail/CVE-1999-1383", "summary": "(1) bash before 1.14.7, and (2) tcsh 6.05 allow local users to gain privileges via directory names that contain shell metacharacters (` back-tick), which can cause the commands enclosed in the directory name to be executed when the shell expands filenames using the \\w option in the PS1 variable.", "scorev2": "4.6", "scorev3": "0.0", "scorev4": "0.0", "modified": "2026-06-16T21:50:19.000", "vector": "LOCAL", "vectorString": "AV:L/AC:L/Au:N/C:P/I:P/A:P", "detail": "fixed-version: Fixed from version >1.14.6" }, { "id": "CVE-2010-0002", "status": "Patched", "link": "https://nvd.nist.gov/vuln/detail/CVE-2010-0002", "summary": "The /etc/profile.d/60alias.sh script in the Mandriva bash package for Bash 2.05b, 3.0, 3.2, 3.2.48, and 4.0 enables the --show-control-chars option in LS_OPTIONS, which allows local users to send escape sequences to terminal emulators, or hide the existence of a file, via a crafted filename.", "scorev2": "2.1", "scorev3": "0.0", "scorev4": "0.0", "modified": "2026-06-16T23:15:12.000", "vector": "LOCAL", "vectorString": "AV:L/AC:L/Au:N/C:N/I:N/A:P", "detail": "version-not-in-range" }, { "id": "CVE-2012-3410", "status": "Patched", "link": "https://nvd.nist.gov/vuln/detail/CVE-2012-3410", "summary": "Stack-based buffer overflow in lib/sh/eaccess.c in GNU Bash before 4.2 patch 33 might allow local users to bypass intended restricted shell access via a long filename in /dev/fd, which is not properly handled when expanding the /dev/fd prefix.", "scorev2": "4.6", "scorev3": "0.0", "scorev4": "0.0", "modified": "2026-06-16T23:43:10.000", "vector": "LOCAL", "vectorString": "AV:L/AC:L/Au:N/C:P/I:P/A:P", "detail": "version-not-in-range" }, { "id": "CVE-2012-6711", "status": "Patched", "link": "https://nvd.nist.gov/vuln/detail/CVE-2012-6711", "summary": "A heap-based buffer overflow exists in GNU Bash before 4.3 when wide characters, not supported by the current locale set in the LC_CTYPE environment variable, are printed through the echo built-in function. A local attacker, who can provide data to print through the \"echo -e\" built-in function, may use this flaw to crash a script or execute code with the privileges of the bash process. This occurs because ansicstr() in lib/sh/strtrans.c mishandles u32cconv().", "scorev2": "4.6", "scorev3": "7.8", "scorev4": "0.0", "modified": "2026-06-16T23:48:39.000", "vector": "LOCAL", "vectorString": "CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H", "detail": "fixed-version: Fixed from version >4.3" }, { "id": "CVE-2014-6271", "status": "Patched", "link": "https://nvd.nist.gov/vuln/detail/CVE-2014-6271", "summary": "GNU Bash through 4.3 processes trailing strings after function definitions in the values of environment variables, which allows remote attackers to execute arbitrary code via a crafted environment, as demonstrated by vectors involving the ForceCommand feature in OpenSSH sshd, the mod_cgi and mod_cgid modules in the Apache HTTP Server, scripts executed by unspecified DHCP clients, and other situations in which setting the environment occurs across a privilege boundary from Bash execution, aka \"ShellShock.\" NOTE: the original fix for this issue was incorrect; CVE-2014-7169 has been assigned to cover the vulnerability that is still present after the incorrect fix.", "scorev2": "10.0", "scorev3": "9.8", "scorev4": "0.0", "modified": "2026-06-17T00:12:48.000", "vector": "NETWORK", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H", "detail": "fixed-version: Fixed from version >4.3" }, { "id": "CVE-2014-6277", "status": "Patched", "link": "https://nvd.nist.gov/vuln/detail/CVE-2014-6277", "summary": "GNU Bash through 4.3 bash43-026 does not properly parse function definitions in the values of environment variables, which allows remote attackers to execute arbitrary code or cause a denial of service (uninitialized memory access, and untrusted-pointer read and write operations) via a crafted environment, as demonstrated by vectors involving the ForceCommand feature in OpenSSH sshd, the mod_cgi and mod_cgid modules in the Apache HTTP Server, scripts executed by unspecified DHCP clients, and other situations in which setting the environment occurs across a privilege boundary from Bash execution. NOTE: this vulnerability exists because of an incomplete fix for CVE-2014-6271 and CVE-2014-7169.", "scorev2": "10.0", "scorev3": "0.0", "scorev4": "0.0", "modified": "2026-06-17T00:12:49.000", "vector": "NETWORK", "vectorString": "AV:N/AC:L/Au:N/C:C/I:C/A:C", "detail": "version-not-in-range" }, { "id": "CVE-2014-6278", "status": "Patched", "link": "https://nvd.nist.gov/vuln/detail/CVE-2014-6278", "summary": "GNU Bash through 4.3 bash43-026 does not properly parse function definitions in the values of environment variables, which allows remote attackers to execute arbitrary commands via a crafted environment, as demonstrated by vectors involving the ForceCommand feature in OpenSSH sshd, the mod_cgi and mod_cgid modules in the Apache HTTP Server, scripts executed by unspecified DHCP clients, and other situations in which setting the environment occurs across a privilege boundary from Bash execution. NOTE: this vulnerability exists because of an incomplete fix for CVE-2014-6271, CVE-2014-7169, and CVE-2014-6277.", "scorev2": "10.0", "scorev3": "8.8", "scorev4": "0.0", "modified": "2026-06-17T00:12:50.000", "vector": "NETWORK", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H", "detail": "version-not-in-range" }, { "id": "CVE-2014-7169", "status": "Patched", "link": "https://nvd.nist.gov/vuln/detail/CVE-2014-7169", "summary": "GNU Bash through 4.3 bash43-025 processes trailing strings after certain malformed function definitions in the values of environment variables, which allows remote attackers to write to files or possibly have unknown other impact via a crafted environment, as demonstrated by vectors involving the ForceCommand feature in OpenSSH sshd, the mod_cgi and mod_cgid modules in the Apache HTTP Server, scripts executed by unspecified DHCP clients, and other situations in which setting the environment occurs across a privilege boundary from Bash execution. NOTE: this vulnerability exists because of an incomplete fix for CVE-2014-6271.", "scorev2": "10.0", "scorev3": "9.8", "scorev4": "0.0", "modified": "2026-06-17T00:14:28.000", "vector": "NETWORK", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H", "detail": "fixed-version: Fixed from version >4.3" }, { "id": "CVE-2014-7186", "status": "Patched", "link": "https://nvd.nist.gov/vuln/detail/CVE-2014-7186", "summary": "The redirection implementation in parse.y in GNU Bash through 4.3 bash43-026 allows remote attackers to cause a denial of service (out-of-bounds array access and application crash) or possibly have unspecified other impact via crafted use of here documents, aka the \"redir_stack\" issue.", "scorev2": "10.0", "scorev3": "0.0", "scorev4": "0.0", "modified": "2026-06-17T00:14:30.000", "vector": "NETWORK", "vectorString": "AV:N/AC:L/Au:N/C:C/I:C/A:C", "detail": "version-not-in-range" }, { "id": "CVE-2014-7187", "status": "Patched", "link": "https://nvd.nist.gov/vuln/detail/CVE-2014-7187", "summary": "Off-by-one error in the read_token_word function in parse.y in GNU Bash through 4.3 bash43-026 allows remote attackers to cause a denial of service (out-of-bounds array access and application crash) or possibly have unspecified other impact via deeply nested for loops, aka the \"word_lineno\" issue.", "scorev2": "10.0", "scorev3": "0.0", "scorev4": "0.0", "modified": "2026-06-17T00:14:31.000", "vector": "NETWORK", "vectorString": "AV:N/AC:L/Au:N/C:C/I:C/A:C", "detail": "version-not-in-range" }, { "id": "CVE-2016-0634", "status": "Patched", "link": "https://nvd.nist.gov/vuln/detail/CVE-2016-0634", "summary": "The expansion of '\\h' in the prompt string in bash 4.3 allows remote authenticated users to execute arbitrary code via shell metacharacters placed in 'hostname' of a machine.", "scorev2": "6.0", "scorev3": "7.5", "scorev4": "0.0", "modified": "2026-06-17T00:37:53.000", "vector": "NETWORK", "vectorString": "CVSS:3.0/AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H", "detail": "version-not-in-range" }, { "id": "CVE-2016-7543", "status": "Patched", "link": "https://nvd.nist.gov/vuln/detail/CVE-2016-7543", "summary": "Bash before 4.4 allows local users to execute arbitrary commands with root privileges via crafted SHELLOPTS and PS4 environment variables.", "scorev2": "7.2", "scorev3": "8.4", "scorev4": "0.0", "modified": "2026-06-17T00:53:13.000", "vector": "LOCAL", "vectorString": "CVSS:3.0/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H", "detail": "fixed-version: Fixed from version >4.3" }, { "id": "CVE-2016-9401", "status": "Patched", "link": "https://nvd.nist.gov/vuln/detail/CVE-2016-9401", "summary": "popd in bash might allow local users to bypass the restricted shell and cause a use-after-free via a crafted address.", "scorev2": "2.1", "scorev3": "6.2", "scorev4": "0.0", "modified": "2026-06-17T00:55:57.000", "vector": "LOCAL", "vectorString": "CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H", "detail": "fixed-version: Fixed from version 4.4" }, { "id": "CVE-2017-5932", "status": "Patched", "link": "https://nvd.nist.gov/vuln/detail/CVE-2017-5932", "summary": "The path autocompletion feature in Bash 4.4 allows local users to gain privileges via a crafted filename starting with a \" (double quote) character and a command substitution metacharacter.", "scorev2": "4.6", "scorev3": "7.8", "scorev4": "0.0", "modified": "2026-06-17T01:21:27.000", "vector": "LOCAL", "vectorString": "CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H", "detail": "version-not-in-range" }, { "id": "CVE-2019-18276", "status": "Patched", "link": "https://nvd.nist.gov/vuln/detail/CVE-2019-18276", "summary": "An issue was discovered in disable_priv_mode in shell.c in GNU Bash through 5.0 patch 11. By default, if Bash is run with its effective UID not equal to its real UID, it will drop privileges by setting its effective UID to its real UID. However, it does so incorrectly. On Linux and other systems that support \"saved UID\" functionality, the saved UID is not dropped. An attacker with command execution in the shell can use \"enable -f\" for runtime loading of a new builtin, which can be a shared object that calls setuid() and therefore regains privileges. However, binaries running with an effective UID of 0 are unaffected.", "scorev2": "7.2", "scorev3": "7.8", "scorev4": "0.0", "modified": "2026-06-17T02:24:44.000", "vector": "LOCAL", "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H", "detail": "fixed-version: Fixed from version >5.0" }, { "id": "CVE-2019-9924", "status": "Patched", "link": "https://nvd.nist.gov/vuln/detail/CVE-2019-9924", "summary": "rbash in Bash before 4.4-beta2 did not prevent the shell user from modifying BASH_CMDS, thus allowing the user to execute any command with the permissions of the shell.", "scorev2": "7.2", "scorev3": "7.8", "scorev4": "0.0", "modified": "2026-06-17T02:44:51.000", "vector": "LOCAL", "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H", "detail": "fixed-version: Fixed from version 4.4" }, { "id": "CVE-2022-3715", "status": "Patched", "link": "https://nvd.nist.gov/vuln/detail/CVE-2022-3715", "summary": "A flaw was found in the bash package, where a heap-buffer overflow can occur in valid parameter_transform. This issue may lead to memory problems.", "scorev2": "0.0", "scorev3": "7.8", "scorev4": "0.0", "modified": "2026-06-17T05:00:10.000", "vector": "LOCAL", "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H", "detail": "fixed-version: Fixed from version 5.1.8" } ], "cpes": [ "cpe:2.3:*:*:bash:5.3:*:*:*:*:*:*:*" ] }, { "name": "bash-completion", "layer": "core", "version": "2.17.0", "products": [ { "product": "bash-completion", "cvesInRecord": "No" } ], "issue": [], "cpes": [ "cpe:2.3:*:*:bash-completion:2.17.0:*:*:*:*:*:*:*" ] }, { "name": "basler-camera", "layer": "fsl-bsp-release", "version": "4.2.2.26.1", "products": [ { "product": "basler-camera", "cvesInRecord": "No" } ], "issue": [], "cpes": [ "cpe:2.3:*:*:basler-camera:4.2.2.26.1:*:*:*:*:*:*:*" ] }, { "name": "bc", "layer": "core", "version": "1.08.2", "products": [ { "product": "bc", "cvesInRecord": "No" } ], "issue": [], "cpes": [ "cpe:2.3:*:gnu:bc:1.08.2:*:*:*:*:*:*:*" ] }, { "name": "bcm43xx-utils", "layer": "variscite-bsp-common", "version": "1.0", "products": [ { "product": "bcm43xx-utils", "cvesInRecord": "No" } ], "issue": [], "cpes": [ "cpe:2.3:*:*:bcm43xx-utils:1.0:*:*:*:*:*:*:*" ] }, { "name": "binutils", "layer": "core", "version": "2.46.1", "products": [ { "product": "binutils", "cvesInRecord": "Yes" } ], "issue": [ { "id": "CVE-2005-4807", "status": "Patched", "link": "https://nvd.nist.gov/vuln/detail/CVE-2005-4807", "summary": "Stack-based buffer overflow in the as_bad function in messages.c in the GNU as (gas) assembler in Free Software Foundation GNU Binutils before 20050721 allows attackers to execute arbitrary code via a .c file with crafted inline assembly code.", "scorev2": "7.5", "scorev3": "0.0", "scorev4": "0.0", "modified": "2026-06-16T22:19:29.000", "vector": "NETWORK", "vectorString": "AV:N/AC:L/Au:N/C:P/I:P/A:P", "detail": "fixed-version: Fixed from version 2.17" }, { "id": "CVE-2005-4808", "status": "Patched", "link": "https://nvd.nist.gov/vuln/detail/CVE-2005-4808", "summary": "Buffer overflow in reset_vars in config/tc-crx.c in the GNU as (gas) assembler in Free Software Foundation GNU Binutils before 20050714 allows user-assisted attackers to have an unknown impact via a crafted .s file.", "scorev2": "7.6", "scorev3": "0.0", "scorev4": "0.0", "modified": "2026-06-16T22:19:29.000", "vector": "NETWORK", "vectorString": "AV:N/AC:H/Au:N/C:C/I:C/A:C", "detail": "fixed-version: Fixed from version 2.17" }, { "id": "CVE-2006-2362", "status": "Patched", "link": "https://nvd.nist.gov/vuln/detail/CVE-2006-2362", "summary": "Buffer overflow in getsym in tekhex.c in libbfd in Free Software Foundation GNU Binutils before 20060423, as used by GNU strings, allows context-dependent attackers to cause a denial of service (application crash) and possibly execute arbitrary code via a file with a crafted Tektronix Hex Format (TekHex) record in which the length character is not a valid hexadecimal character.", "scorev2": "7.5", "scorev3": "7.3", "scorev4": "0.0", "modified": "2026-06-16T22:24:51.000", "vector": "NETWORK", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L", "detail": "fixed-version: Fixed from version 2.17" }, { "id": "CVE-2012-3509", "status": "Patched", "link": "https://nvd.nist.gov/vuln/detail/CVE-2012-3509", "summary": "Multiple integer overflows in the (1) _objalloc_alloc function in objalloc.c and (2) objalloc_alloc macro in include/objalloc.h in GNU libiberty, as used by binutils 2.22, allow remote attackers to cause a denial of service (crash) via vectors related to the \"addition of CHUNK_HEADER_SIZE to the length,\" which triggers a heap-based buffer overflow.", "scorev2": "5.0", "scorev3": "0.0", "scorev4": "0.0", "modified": "2026-06-16T23:43:22.000", "vector": "NETWORK", "vectorString": "AV:N/AC:L/Au:N/C:N/I:N/A:P", "detail": "fixed-version: Fixed from version 2.24" }, { "id": "CVE-2014-8484", "status": "Patched", "link": "https://nvd.nist.gov/vuln/detail/CVE-2014-8484", "summary": "The srec_scan function in bfd/srec.c in libdbfd in GNU binutils before 2.25 allows remote attackers to cause a denial of service (out-of-bounds read) via a small S-record.", "scorev2": "5.0", "scorev3": "0.0", "scorev4": "0.0", "modified": "2026-06-17T00:16:47.000", "vector": "NETWORK", "vectorString": "AV:N/AC:L/Au:N/C:N/I:N/A:P", "detail": "fixed-version: Fixed from version >2.24" }, { "id": "CVE-2014-8485", "status": "Patched", "link": "https://nvd.nist.gov/vuln/detail/CVE-2014-8485", "summary": "The setup_group function in bfd/elf.c in libbfd in GNU binutils 2.24 and earlier allows remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via crafted section group headers in an ELF file.", "scorev2": "7.5", "scorev3": "0.0", "scorev4": "0.0", "modified": "2026-06-17T00:16:47.000", "vector": "NETWORK", "vectorString": "AV:N/AC:L/Au:N/C:P/I:P/A:P", "detail": "fixed-version: Fixed from version >2.24" }, { "id": "CVE-2014-8501", "status": "Patched", "link": "https://nvd.nist.gov/vuln/detail/CVE-2014-8501", "summary": "The _bfd_XXi_swap_aouthdr_in function in bfd/peXXigen.c in GNU binutils 2.24 and earlier allows remote attackers to cause a denial of service (out-of-bounds write) and possibly have other unspecified impact via a crafted NumberOfRvaAndSizes field in the AOUT header in a PE executable.", "scorev2": "7.5", "scorev3": "0.0", "scorev4": "0.0", "modified": "2026-06-17T00:16:49.000", "vector": "NETWORK", "vectorString": "AV:N/AC:L/Au:N/C:P/I:P/A:P", "detail": "fixed-version: Fixed from version >2.24" }, { "id": "CVE-2014-8502", "status": "Patched", "link": "https://nvd.nist.gov/vuln/detail/CVE-2014-8502", "summary": "Heap-based buffer overflow in the pe_print_edata function in bfd/peXXigen.c in GNU binutils 2.24 and earlier allows remote attackers to cause a denial of service (crash) and possibly have other unspecified impact via a truncated export table in a PE file.", "scorev2": "7.5", "scorev3": "0.0", "scorev4": "0.0", "modified": "2026-06-17T00:16:49.000", "vector": "NETWORK", "vectorString": "AV:N/AC:L/Au:N/C:P/I:P/A:P", "detail": "fixed-version: Fixed from version >2.24" }, { "id": "CVE-2014-8503", "status": "Patched", "link": "https://nvd.nist.gov/vuln/detail/CVE-2014-8503", "summary": "Stack-based buffer overflow in the ihex_scan function in bfd/ihex.c in GNU binutils 2.24 and earlier allows remote attackers to cause a denial of service (crash) and possibly have other unspecified impact via a crafted ihex file.", "scorev2": "7.5", "scorev3": "0.0", "scorev4": "0.0", "modified": "2026-06-17T00:16:49.000", "vector": "NETWORK", "vectorString": "AV:N/AC:L/Au:N/C:P/I:P/A:P", "detail": "fixed-version: Fixed from version >2.24" }, { "id": "CVE-2014-8504", "status": "Patched", "link": "https://nvd.nist.gov/vuln/detail/CVE-2014-8504", "summary": "Stack-based buffer overflow in the srec_scan function in bfd/srec.c in GNU binutils 2.24 and earlier allows remote attackers to cause a denial of service (crash) and possibly have other unspecified impact via a crafted file.", "scorev2": "7.5", "scorev3": "0.0", "scorev4": "0.0", "modified": "2026-06-17T00:16:49.000", "vector": "NETWORK", "vectorString": "AV:N/AC:L/Au:N/C:P/I:P/A:P", "detail": "fixed-version: Fixed from version >2.24" }, { "id": "CVE-2014-8737", "status": "Patched", "link": "https://nvd.nist.gov/vuln/detail/CVE-2014-8737", "summary": "Multiple directory traversal vulnerabilities in GNU binutils 2.24 and earlier allow local users to delete arbitrary files via a .. (dot dot) or full path name in an archive to (1) strip or (2) objcopy or create arbitrary files via (3) a .. (dot dot) or full path name in an archive to ar.", "scorev2": "3.6", "scorev3": "0.0", "scorev4": "0.0", "modified": "2026-06-17T00:17:14.000", "vector": "LOCAL", "vectorString": "AV:L/AC:L/Au:N/C:N/I:P/A:P", "detail": "fixed-version: Fixed from version >2.24" }, { "id": "CVE-2014-8738", "status": "Patched", "link": "https://nvd.nist.gov/vuln/detail/CVE-2014-8738", "summary": "The _bfd_slurp_extended_name_table function in bfd/archive.c in GNU binutils 2.24 and earlier allows remote attackers to cause a denial of service (invalid write, segmentation fault, and crash) via a crafted extended name table in an archive.", "scorev2": "5.0", "scorev3": "0.0", "scorev4": "0.0", "modified": "2026-06-17T00:17:15.000", "vector": "NETWORK", "vectorString": "AV:N/AC:L/Au:N/C:N/I:N/A:P", "detail": "fixed-version: Fixed from version >2.24" }, { "id": "CVE-2014-9939", "status": "Patched", "link": "https://nvd.nist.gov/vuln/detail/CVE-2014-9939", "summary": "ihex.c in GNU Binutils before 2.26 contains a stack buffer overflow when printing bad bytes in Intel Hex objects.", "scorev2": "7.5", "scorev3": "9.8", "scorev4": "0.0", "modified": "2026-06-17T00:19:16.000", "vector": "NETWORK", "vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H", "detail": "fixed-version: Fixed from version >2.25" }, { "id": "CVE-2017-12448", "status": "Patched", "link": "https://nvd.nist.gov/vuln/detail/CVE-2017-12448", "summary": "The bfd_cache_close function in bfd/cache.c in the Binary File Descriptor (BFD) library (aka libbfd), as distributed in GNU Binutils 2.29 and earlier, allows remote attackers to cause a heap use after free and possibly achieve code execution via a crafted nested archive file. This issue occurs because incorrect functions are called during an attempt to release memory. The issue can be addressed by better input validation in the bfd_generic_archive_p function in bfd/archive.c.", "scorev2": "6.8", "scorev3": "7.8", "scorev4": "0.0", "modified": "2026-06-17T01:03:19.000", "vector": "LOCAL", "vectorString": "CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H", "detail": "fixed-version: Fixed from version >2.29" }, { "id": "CVE-2017-12449", "status": "Patched", "link": "https://nvd.nist.gov/vuln/detail/CVE-2017-12449", "summary": "The _bfd_vms_save_sized_string function in vms-misc.c in the Binary File Descriptor (BFD) library (aka libbfd), as distributed in GNU Binutils 2.29 and earlier, allows remote attackers to cause an out of bounds heap read via a crafted vms file.", "scorev2": "6.8", "scorev3": "7.8", "scorev4": "0.0", "modified": "2026-06-17T01:03:19.000", "vector": "LOCAL", "vectorString": "CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H", "detail": "fixed-version: Fixed from version >2.29" }, { "id": "CVE-2017-12450", "status": "Patched", "link": "https://nvd.nist.gov/vuln/detail/CVE-2017-12450", "summary": "The alpha_vms_object_p function in bfd/vms-alpha.c in the Binary File Descriptor (BFD) library (aka libbfd), as distributed in GNU Binutils 2.29 and earlier, allows remote attackers to cause an out of bounds heap write and possibly achieve code execution via a crafted vms alpha file.", "scorev2": "6.8", "scorev3": "7.8", "scorev4": "0.0", "modified": "2026-06-17T01:03:19.000", "vector": "LOCAL", "vectorString": "CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H", "detail": "fixed-version: Fixed from version >2.29" }, { "id": "CVE-2017-12451", "status": "Patched", "link": "https://nvd.nist.gov/vuln/detail/CVE-2017-12451", "summary": "The _bfd_xcoff_read_ar_hdr function in bfd/coff-rs6000.c and bfd/coff64-rs6000.c in the Binary File Descriptor (BFD) library (aka libbfd), as distributed in GNU Binutils 2.29 and earlier, allows remote attackers to cause an out of bounds stack read via a crafted COFF image file.", "scorev2": "6.8", "scorev3": "7.8", "scorev4": "0.0", "modified": "2026-06-17T01:03:19.000", "vector": "LOCAL", "vectorString": "CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H", "detail": "fixed-version: Fixed from version >2.29" }, { "id": "CVE-2017-12452", "status": "Patched", "link": "https://nvd.nist.gov/vuln/detail/CVE-2017-12452", "summary": "The bfd_mach_o_i386_canonicalize_one_reloc function in bfd/mach-o-i386.c in the Binary File Descriptor (BFD) library (aka libbfd), as distributed in GNU Binutils 2.29 and earlier, allows remote attackers to cause an out of bounds heap read via a crafted mach-o file.", "scorev2": "6.8", "scorev3": "7.8", "scorev4": "0.0", "modified": "2026-06-17T01:03:19.000", "vector": "LOCAL", "vectorString": "CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H", "detail": "fixed-version: Fixed from version >2.29" }, { "id": "CVE-2017-12453", "status": "Patched", "link": "https://nvd.nist.gov/vuln/detail/CVE-2017-12453", "summary": "The _bfd_vms_slurp_eeom function in libbfd.c in the Binary File Descriptor (BFD) library (aka libbfd), as distributed in GNU Binutils 2.29 and earlier, allows remote attackers to cause an out of bounds heap read via a crafted vms alpha file.", "scorev2": "6.8", "scorev3": "7.8", "scorev4": "0.0", "modified": "2026-06-17T01:03:19.000", "vector": "LOCAL", "vectorString": "CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H", "detail": "fixed-version: Fixed from version >2.29" }, { "id": "CVE-2017-12454", "status": "Patched", "link": "https://nvd.nist.gov/vuln/detail/CVE-2017-12454", "summary": "The _bfd_vms_slurp_egsd function in bfd/vms-alpha.c in the Binary File Descriptor (BFD) library (aka libbfd), as distributed in GNU Binutils 2.29 and earlier, allows remote attackers to cause an arbitrary memory read via a crafted vms alpha file.", "scorev2": "6.8", "scorev3": "7.8", "scorev4": "0.0", "modified": "2026-06-17T01:03:19.000", "vector": "LOCAL", "vectorString": "CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H", "detail": "fixed-version: Fixed from version >2.29" }, { "id": "CVE-2017-12455", "status": "Patched", "link": "https://nvd.nist.gov/vuln/detail/CVE-2017-12455", "summary": "The evax_bfd_print_emh function in vms-alpha.c in the Binary File Descriptor (BFD) library (aka libbfd), as distributed in GNU Binutils 2.29 and earlier, allows remote attackers to cause an out of bounds heap read via a crafted vms alpha file.", "scorev2": "6.8", "scorev3": "7.8", "scorev4": "0.0", "modified": "2026-06-17T01:03:20.000", "vector": "LOCAL", "vectorString": "CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H", "detail": "fixed-version: Fixed from version >2.29" }, { "id": "CVE-2017-12456", "status": "Patched", "link": "https://nvd.nist.gov/vuln/detail/CVE-2017-12456", "summary": "The read_symbol_stabs_debugging_info function in rddbg.c in GNU Binutils 2.29 and earlier allows remote attackers to cause an out of bounds heap read via a crafted binary file.", "scorev2": "6.8", "scorev3": "7.8", "scorev4": "0.0", "modified": "2026-06-17T01:03:20.000", "vector": "LOCAL", "vectorString": "CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H", "detail": "fixed-version: Fixed from version >2.29" }, { "id": "CVE-2017-12457", "status": "Patched", "link": "https://nvd.nist.gov/vuln/detail/CVE-2017-12457", "summary": "The bfd_make_section_with_flags function in section.c in the Binary File Descriptor (BFD) library (aka libbfd), as distributed in GNU Binutils 2.29 and earlier, allows remote attackers to cause a NULL dereference via a crafted file.", "scorev2": "6.8", "scorev3": "7.8", "scorev4": "0.0", "modified": "2026-06-17T01:03:20.000", "vector": "LOCAL", "vectorString": "CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H", "detail": "fixed-version: Fixed from version >2.29" }, { "id": "CVE-2017-12458", "status": "Patched", "link": "https://nvd.nist.gov/vuln/detail/CVE-2017-12458", "summary": "The nlm_swap_auxiliary_headers_in function in bfd/nlmcode.h in the Binary File Descriptor (BFD) library (aka libbfd), as distributed in GNU Binutils 2.29 and earlier, allows remote attackers to cause an out of bounds heap read via a crafted nlm file.", "scorev2": "6.8", "scorev3": "7.8", "scorev4": "0.0", "modified": "2026-06-17T01:03:20.000", "vector": "LOCAL", "vectorString": "CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H", "detail": "fixed-version: Fixed from version >2.29" }, { "id": "CVE-2017-12459", "status": "Patched", "link": "https://nvd.nist.gov/vuln/detail/CVE-2017-12459", "summary": "The bfd_mach_o_read_symtab_strtab function in bfd/mach-o.c in the Binary File Descriptor (BFD) library (aka libbfd), as distributed in GNU Binutils 2.29 and earlier, allows remote attackers to cause an out of bounds heap write and possibly achieve code execution via a crafted mach-o file.", "scorev2": "6.8", "scorev3": "7.8", "scorev4": "0.0", "modified": "2026-06-17T01:03:20.000", "vector": "LOCAL", "vectorString": "CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H", "detail": "fixed-version: Fixed from version >2.29" }, { "id": "CVE-2017-12799", "status": "Patched", "link": "https://nvd.nist.gov/vuln/detail/CVE-2017-12799", "summary": "The elf_read_notesfunction in bfd/elf.c in GNU Binutils 2.29 allows remote attackers to cause a denial of service (buffer overflow and application crash) or possibly have unspecified other impact via a crafted binary file.", "scorev2": "6.8", "scorev3": "7.8", "scorev4": "0.0", "modified": "2026-06-17T01:03:57.000", "vector": "LOCAL", "vectorString": "CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H", "detail": "version-not-in-range" }, { "id": "CVE-2017-12967", "status": "Patched", "link": "https://nvd.nist.gov/vuln/detail/CVE-2017-12967", "summary": "The getsym function in tekhex.c in the Binary File Descriptor (BFD) library (aka libbfd), as distributed in GNU Binutils 2.29, allows remote attackers to cause a denial of service (stack-based buffer over-read and application crash) via a malformed tekhex binary.", "scorev2": "4.3", "scorev3": "6.5", "scorev4": "0.0", "modified": "2026-06-17T01:04:13.000", "vector": "NETWORK", "vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H", "detail": "version-not-in-range" }, { "id": "CVE-2017-13710", "status": "Patched", "link": "https://nvd.nist.gov/vuln/detail/CVE-2017-13710", "summary": "The setup_group function in elf.c in the Binary File Descriptor (BFD) library (aka libbfd), as distributed in GNU Binutils 2.29, allows remote attackers to cause a denial of service (NULL pointer dereference and application crash) via a group section that is too small.", "scorev2": "5.0", "scorev3": "7.5", "scorev4": "0.0", "modified": "2026-06-17T01:05:01.000", "vector": "NETWORK", "vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H", "detail": "version-not-in-range" }, { "id": "CVE-2017-13716", "status": "Patched", "link": "https://nvd.nist.gov/vuln/detail/CVE-2017-13716", "summary": "The C++ symbol demangler routine in cplus-dem.c in libiberty, as distributed in GNU Binutils 2.29, allows remote attackers to cause a denial of service (excessive memory allocation and application crash) via a crafted file, as demonstrated by a call from the Binary File Descriptor (BFD) library (aka libbfd).", "scorev2": "7.1", "scorev3": "5.5", "scorev4": "0.0", "modified": "2026-06-17T01:05:02.000", "vector": "LOCAL", "vectorString": "CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H", "detail": "version-not-in-range" }, { "id": "CVE-2017-13757", "status": "Patched", "link": "https://nvd.nist.gov/vuln/detail/CVE-2017-13757", "summary": "The Binary File Descriptor (BFD) library (aka libbfd), as distributed in GNU Binutils 2.29, does not validate the PLT section size, which allows remote attackers to cause a denial of service (heap-based buffer over-read and application crash) via a crafted ELF file, related to elf_i386_get_synthetic_symtab in elf32-i386.c and elf_x86_64_get_synthetic_symtab in elf64-x86-64.c.", "scorev2": "4.3", "scorev3": "5.5", "scorev4": "0.0", "modified": "2026-06-17T01:05:07.000", "vector": "LOCAL", "vectorString": "CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H", "detail": "version-not-in-range" }, { "id": "CVE-2017-14128", "status": "Patched", "link": "https://nvd.nist.gov/vuln/detail/CVE-2017-14128", "summary": "The decode_line_info function in dwarf2.c in the Binary File Descriptor (BFD) library (aka libbfd), as distributed in GNU Binutils 2.29, allows remote attackers to cause a denial of service (read_1_byte heap-based buffer over-read and application crash) via a crafted ELF file.", "scorev2": "4.3", "scorev3": "5.5", "scorev4": "0.0", "modified": "2026-06-17T01:05:39.000", "vector": "LOCAL", "vectorString": "CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H", "detail": "version-not-in-range" }, { "id": "CVE-2017-14129", "status": "Patched", "link": "https://nvd.nist.gov/vuln/detail/CVE-2017-14129", "summary": "The read_section function in dwarf2.c in the Binary File Descriptor (BFD) library (aka libbfd), as distributed in GNU Binutils 2.29, allows remote attackers to cause a denial of service (parse_comp_unit heap-based buffer over-read and application crash) via a crafted ELF file.", "scorev2": "4.3", "scorev3": "5.5", "scorev4": "0.0", "modified": "2026-06-17T01:05:39.000", "vector": "LOCAL", "vectorString": "CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H", "detail": "version-not-in-range" }, { "id": "CVE-2017-14130", "status": "Patched", "link": "https://nvd.nist.gov/vuln/detail/CVE-2017-14130", "summary": "The _bfd_elf_parse_attributes function in elf-attrs.c in the Binary File Descriptor (BFD) library (aka libbfd), as distributed in GNU Binutils 2.29, allows remote attackers to cause a denial of service (_bfd_elf_attr_strdup heap-based buffer over-read and application crash) via a crafted ELF file.", "scorev2": "4.3", "scorev3": "5.5", "scorev4": "0.0", "modified": "2026-06-17T01:05:39.000", "vector": "LOCAL", "vectorString": "CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H", "detail": "version-not-in-range" }, { "id": "CVE-2017-14333", "status": "Patched", "link": "https://nvd.nist.gov/vuln/detail/CVE-2017-14333", "summary": "The process_version_sections function in readelf.c in GNU Binutils 2.29 allows attackers to cause a denial of service (Integer Overflow, and hang because of a time-consuming loop) or possibly have unspecified other impact via a crafted binary file with invalid values of ent.vn_next, during \"readelf -a\" execution.", "scorev2": "4.3", "scorev3": "7.8", "scorev4": "0.0", "modified": "2026-06-17T01:05:58.000", "vector": "LOCAL", "vectorString": "CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H", "detail": "version-not-in-range" }, { "id": "CVE-2017-14529", "status": "Patched", "link": "https://nvd.nist.gov/vuln/detail/CVE-2017-14529", "summary": "The pe_print_idata function in peXXigen.c in the Binary File Descriptor (BFD) library (aka libbfd), as distributed in GNU Binutils 2.29, mishandles HintName vector entries, which allows remote attackers to cause a denial of service (heap-based buffer over-read and application crash) via a crafted PE file, related to the bfd_getl16 function.", "scorev2": "4.3", "scorev3": "5.5", "scorev4": "0.0", "modified": "2026-06-17T01:06:19.000", "vector": "LOCAL", "vectorString": "CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H", "detail": "version-not-in-range" }, { "id": "CVE-2017-14729", "status": "Patched", "link": "https://nvd.nist.gov/vuln/detail/CVE-2017-14729", "summary": "The *_get_synthetic_symtab functions in the Binary File Descriptor (BFD) library (aka libbfd), as distributed in GNU Binutils 2.29, do not ensure a unique PLT entry for a symbol, which allows remote attackers to cause a denial of service (heap-based buffer overflow and application crash) or possibly have unspecified other impact via a crafted ELF file, related to elf32-i386.c and elf64-x86-64.c.", "scorev2": "6.8", "scorev3": "7.8", "scorev4": "0.0", "modified": "2026-06-17T01:06:41.000", "vector": "LOCAL", "vectorString": "CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H", "detail": "version-not-in-range" }, { "id": "CVE-2017-14745", "status": "Patched", "link": "https://nvd.nist.gov/vuln/detail/CVE-2017-14745", "summary": "The *_get_synthetic_symtab functions in the Binary File Descriptor (BFD) library (aka libbfd), as distributed in GNU Binutils 2.29, interpret a -1 value as a sorting count instead of an error flag, which allows remote attackers to cause a denial of service (integer overflow and application crash) or possibly have unspecified other impact via a crafted ELF file, related to elf32-i386.c and elf64-x86-64.c.", "scorev2": "6.8", "scorev3": "7.8", "scorev4": "0.0", "modified": "2026-06-17T01:06:43.000", "vector": "LOCAL", "vectorString": "CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H", "detail": "version-not-in-range" }, { "id": "CVE-2017-14930", "status": "Patched", "link": "https://nvd.nist.gov/vuln/detail/CVE-2017-14930", "summary": "Memory leak in decode_line_info in dwarf2.c in the Binary File Descriptor (BFD) library (aka libbfd), as distributed in GNU Binutils 2.29, allows remote attackers to cause a denial of service (memory consumption) via a crafted ELF file.", "scorev2": "7.1", "scorev3": "5.5", "scorev4": "0.0", "modified": "2026-06-17T01:07:00.000", "vector": "LOCAL", "vectorString": "CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H", "detail": "version-not-in-range" }, { "id": "CVE-2017-14932", "status": "Patched", "link": "https://nvd.nist.gov/vuln/detail/CVE-2017-14932", "summary": "decode_line_info in dwarf2.c in the Binary File Descriptor (BFD) library (aka libbfd), as distributed in GNU Binutils 2.29, allows remote attackers to cause a denial of service (infinite loop) via a crafted ELF file.", "scorev2": "4.3", "scorev3": "5.5", "scorev4": "0.0", "modified": "2026-06-17T01:07:00.000", "vector": "LOCAL", "vectorString": "CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H", "detail": "version-not-in-range" }, { "id": "CVE-2017-14933", "status": "Patched", "link": "https://nvd.nist.gov/vuln/detail/CVE-2017-14933", "summary": "read_formatted_entries in dwarf2.c in the Binary File Descriptor (BFD) library (aka libbfd), as distributed in GNU Binutils 2.29, allows remote attackers to cause a denial of service (infinite loop) via a crafted ELF file.", "scorev2": "4.3", "scorev3": "5.5", "scorev4": "0.0", "modified": "2026-06-17T01:07:00.000", "vector": "LOCAL", "vectorString": "CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H", "detail": "version-not-in-range" }, { "id": "CVE-2017-14934", "status": "Patched", "link": "https://nvd.nist.gov/vuln/detail/CVE-2017-14934", "summary": "process_debug_info in dwarf.c in the Binary File Descriptor (BFD) library (aka libbfd), as distributed in GNU Binutils 2.29, allows remote attackers to cause a denial of service (infinite loop) via a crafted ELF file that contains a negative size value in a CU structure.", "scorev2": "4.3", "scorev3": "5.5", "scorev4": "0.0", "modified": "2026-06-17T01:07:00.000", "vector": "LOCAL", "vectorString": "CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H", "detail": "version-not-in-range" }, { "id": "CVE-2017-14938", "status": "Patched", "link": "https://nvd.nist.gov/vuln/detail/CVE-2017-14938", "summary": "_bfd_elf_slurp_version_tables in elf.c in the Binary File Descriptor (BFD) library (aka libbfd), as distributed in GNU Binutils 2.29, allows remote attackers to cause a denial of service (excessive memory allocation and application crash) via a crafted ELF file.", "scorev2": "4.3", "scorev3": "5.5", "scorev4": "0.0", "modified": "2026-06-17T01:07:00.000", "vector": "LOCAL", "vectorString": "CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H", "detail": "version-not-in-range" }, { "id": "CVE-2017-14939", "status": "Patched", "link": "https://nvd.nist.gov/vuln/detail/CVE-2017-14939", "summary": "decode_line_info in dwarf2.c in the Binary File Descriptor (BFD) library (aka libbfd), as distributed in GNU Binutils 2.29, mishandles a length calculation, which allows remote attackers to cause a denial of service (heap-based buffer over-read and application crash) via a crafted ELF file, related to read_1_byte.", "scorev2": "4.3", "scorev3": "5.5", "scorev4": "0.0", "modified": "2026-06-17T01:07:01.000", "vector": "LOCAL", "vectorString": "CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H", "detail": "version-not-in-range" }, { "id": "CVE-2017-14940", "status": "Patched", "link": "https://nvd.nist.gov/vuln/detail/CVE-2017-14940", "summary": "scan_unit_for_symbols in dwarf2.c in the Binary File Descriptor (BFD) library (aka libbfd), as distributed in GNU Binutils 2.29, allows remote attackers to cause a denial of service (NULL pointer dereference and application crash) via a crafted ELF file.", "scorev2": "4.3", "scorev3": "5.5", "scorev4": "0.0", "modified": "2026-06-17T01:07:01.000", "vector": "LOCAL", "vectorString": "CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H", "detail": "version-not-in-range" }, { "id": "CVE-2017-14974", "status": "Patched", "link": "https://nvd.nist.gov/vuln/detail/CVE-2017-14974", "summary": "The *_get_synthetic_symtab functions in the Binary File Descriptor (BFD) library (aka libbfd), as distributed in GNU Binutils 2.29, mishandle the failure of a certain canonicalization step, which allows remote attackers to cause a denial of service (NULL pointer dereference and application crash) via a crafted ELF file, related to elf32-i386.c and elf64-x86-64.c.", "scorev2": "4.3", "scorev3": "5.5", "scorev4": "0.0", "modified": "2026-06-17T01:07:05.000", "vector": "LOCAL", "vectorString": "CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H", "detail": "version-not-in-range" }, { "id": "CVE-2017-15020", "status": "Patched", "link": "https://nvd.nist.gov/vuln/detail/CVE-2017-15020", "summary": "dwarf1.c in the Binary File Descriptor (BFD) library (aka libbfd), as distributed in GNU Binutils 2.29, mishandles pointers, which allows remote attackers to cause a denial of service (application crash) or possibly have unspecified other impact via a crafted ELF file, related to parse_die and parse_line_table, as demonstrated by a parse_die heap-based buffer over-read.", "scorev2": "6.8", "scorev3": "7.8", "scorev4": "0.0", "modified": "2026-06-17T01:07:08.000", "vector": "LOCAL", "vectorString": "CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H", "detail": "version-not-in-range" }, { "id": "CVE-2017-15021", "status": "Patched", "link": "https://nvd.nist.gov/vuln/detail/CVE-2017-15021", "summary": "bfd_get_debug_link_info_1 in opncls.c in the Binary File Descriptor (BFD) library (aka libbfd), as distributed in GNU Binutils 2.29, allows remote attackers to cause a denial of service (heap-based buffer over-read and application crash) via a crafted ELF file, related to bfd_getl32.", "scorev2": "4.3", "scorev3": "5.5", "scorev4": "0.0", "modified": "2026-06-17T01:07:09.000", "vector": "LOCAL", "vectorString": "CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H", "detail": "version-not-in-range" }, { "id": "CVE-2017-15022", "status": "Patched", "link": "https://nvd.nist.gov/vuln/detail/CVE-2017-15022", "summary": "dwarf2.c in the Binary File Descriptor (BFD) library (aka libbfd), as distributed in GNU Binutils 2.29, does not validate the DW_AT_name data type, which allows remote attackers to cause a denial of service (bfd_hash_hash NULL pointer dereference, or out-of-bounds access, and application crash) via a crafted ELF file, related to scan_unit_for_symbols and parse_comp_unit.", "scorev2": "4.3", "scorev3": "5.5", "scorev4": "0.0", "modified": "2026-06-17T01:07:09.000", "vector": "LOCAL", "vectorString": "CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H", "detail": "version-not-in-range" }, { "id": "CVE-2017-15023", "status": "Patched", "link": "https://nvd.nist.gov/vuln/detail/CVE-2017-15023", "summary": "read_formatted_entries in dwarf2.c in the Binary File Descriptor (BFD) library (aka libbfd), as distributed in GNU Binutils 2.29, does not properly validate the format count, which allows remote attackers to cause a denial of service (NULL pointer dereference and application crash) via a crafted ELF file, related to concat_filename.", "scorev2": "4.3", "scorev3": "5.5", "scorev4": "0.0", "modified": "2026-06-17T01:07:09.000", "vector": "LOCAL", "vectorString": "CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H", "detail": "version-not-in-range" }, { "id": "CVE-2017-15024", "status": "Patched", "link": "https://nvd.nist.gov/vuln/detail/CVE-2017-15024", "summary": "find_abstract_instance_name in dwarf2.c in the Binary File Descriptor (BFD) library (aka libbfd), as distributed in GNU Binutils 2.29, allows remote attackers to cause a denial of service (infinite recursion and application crash) via a crafted ELF file.", "scorev2": "4.3", "scorev3": "5.5", "scorev4": "0.0", "modified": "2026-06-17T01:07:09.000", "vector": "LOCAL", "vectorString": "CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H", "detail": "version-not-in-range" }, { "id": "CVE-2017-15025", "status": "Patched", "link": "https://nvd.nist.gov/vuln/detail/CVE-2017-15025", "summary": "decode_line_info in dwarf2.c in the Binary File Descriptor (BFD) library (aka libbfd), as distributed in GNU Binutils 2.29, allows remote attackers to cause a denial of service (divide-by-zero error and application crash) via a crafted ELF file.", "scorev2": "4.3", "scorev3": "5.5", "scorev4": "0.0", "modified": "2026-06-17T01:07:09.000", "vector": "LOCAL", "vectorString": "CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H", "detail": "version-not-in-range" }, { "id": "CVE-2017-15225", "status": "Patched", "link": "https://nvd.nist.gov/vuln/detail/CVE-2017-15225", "summary": "_bfd_dwarf2_cleanup_debug_info in dwarf2.c in the Binary File Descriptor (BFD) library (aka libbfd), as distributed in GNU Binutils 2.29, allows remote attackers to cause a denial of service (memory leak) via a crafted ELF file.", "scorev2": "4.3", "scorev3": "5.5", "scorev4": "0.0", "modified": "2026-06-17T01:07:24.000", "vector": "LOCAL", "vectorString": "CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H", "detail": "version-not-in-range" }, { "id": "CVE-2017-15938", "status": "Patched", "link": "https://nvd.nist.gov/vuln/detail/CVE-2017-15938", "summary": "dwarf2.c in the Binary File Descriptor (BFD) library (aka libbfd), as distributed in GNU Binutils 2.29, miscalculates DW_FORM_ref_addr die refs in the case of a relocatable object file, which allows remote attackers to cause a denial of service (find_abstract_instance_name invalid memory read, segmentation fault, and application crash).", "scorev2": "5.0", "scorev3": "7.5", "scorev4": "0.0", "modified": "2026-06-17T01:08:30.000", "vector": "NETWORK", "vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H", "detail": "version-not-in-range" }, { "id": "CVE-2017-15939", "status": "Patched", "link": "https://nvd.nist.gov/vuln/detail/CVE-2017-15939", "summary": "dwarf2.c in the Binary File Descriptor (BFD) library (aka libbfd), as distributed in GNU Binutils 2.29, mishandles NULL files in a .debug_line file table, which allows remote attackers to cause a denial of service (NULL pointer dereference and application crash) via a crafted ELF file, related to concat_filename. NOTE: this issue is caused by an incomplete fix for CVE-2017-15023.", "scorev2": "4.3", "scorev3": "5.5", "scorev4": "0.0", "modified": "2026-06-17T01:08:30.000", "vector": "LOCAL", "vectorString": "CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H", "detail": "version-not-in-range" }, { "id": "CVE-2017-15996", "status": "Patched", "link": "https://nvd.nist.gov/vuln/detail/CVE-2017-15996", "summary": "elfcomm.c in readelf in GNU Binutils 2.29 allows remote attackers to cause a denial of service (excessive memory allocation) or possibly have unspecified other impact via a crafted ELF file that triggers a \"buffer overflow on fuzzed archive header,\" related to an uninitialized variable, an improper conditional jump, and the get_archive_member_name, process_archive_index_and_symbols, and setup_archive functions.", "scorev2": "6.8", "scorev3": "7.8", "scorev4": "0.0", "modified": "2026-06-17T01:08:37.000", "vector": "LOCAL", "vectorString": "CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H", "detail": "version-not-in-range" }, { "id": "CVE-2017-16826", "status": "Patched", "link": "https://nvd.nist.gov/vuln/detail/CVE-2017-16826", "summary": "The coff_slurp_line_table function in coffcode.h in the Binary File Descriptor (BFD) library (aka libbfd), as distributed in GNU Binutils 2.29.1, allows remote attackers to cause a denial of service (invalid memory access and application crash) or possibly have unspecified other impact via a crafted PE file.", "scorev2": "6.8", "scorev3": "7.8", "scorev4": "0.0", "modified": "2026-06-17T01:09:58.000", "vector": "LOCAL", "vectorString": "CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H", "detail": "version-not-in-range" }, { "id": "CVE-2017-16827", "status": "Patched", "link": "https://nvd.nist.gov/vuln/detail/CVE-2017-16827", "summary": "The aout_get_external_symbols function in aoutx.h in the Binary File Descriptor (BFD) library (aka libbfd), as distributed in GNU Binutils 2.29.1, allows remote attackers to cause a denial of service (slurp_symtab invalid free and application crash) or possibly have unspecified other impact via a crafted ELF file.", "scorev2": "6.8", "scorev3": "7.8", "scorev4": "0.0", "modified": "2026-06-17T01:09:58.000", "vector": "LOCAL", "vectorString": "CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H", "detail": "version-not-in-range" }, { "id": "CVE-2017-16828", "status": "Patched", "link": "https://nvd.nist.gov/vuln/detail/CVE-2017-16828", "summary": "The display_debug_frames function in dwarf.c in GNU Binutils 2.29.1 allows remote attackers to cause a denial of service (integer overflow and heap-based buffer over-read, and application crash) or possibly have unspecified other impact via a crafted ELF file, related to print_debug_frame.", "scorev2": "6.8", "scorev3": "7.8", "scorev4": "0.0", "modified": "2026-06-17T01:09:58.000", "vector": "LOCAL", "vectorString": "CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H", "detail": "version-not-in-range" }, { "id": "CVE-2017-16829", "status": "Patched", "link": "https://nvd.nist.gov/vuln/detail/CVE-2017-16829", "summary": "The _bfd_elf_parse_gnu_properties function in elf-properties.c in the Binary File Descriptor (BFD) library (aka libbfd), as distributed in GNU Binutils 2.29.1, does not prevent negative pointers, which allows remote attackers to cause a denial of service (out-of-bounds read and application crash) or possibly have unspecified other impact via a crafted ELF file.", "scorev2": "6.8", "scorev3": "7.8", "scorev4": "0.0", "modified": "2026-06-17T01:09:59.000", "vector": "LOCAL", "vectorString": "CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H", "detail": "version-not-in-range" }, { "id": "CVE-2017-16830", "status": "Patched", "link": "https://nvd.nist.gov/vuln/detail/CVE-2017-16830", "summary": "The print_gnu_property_note function in readelf.c in GNU Binutils 2.29.1 does not have integer-overflow protection on 32-bit platforms, which allows remote attackers to cause a denial of service (segmentation violation and application crash) or possibly have unspecified other impact via a crafted ELF file.", "scorev2": "6.8", "scorev3": "7.8", "scorev4": "0.0", "modified": "2026-06-17T01:09:59.000", "vector": "LOCAL", "vectorString": "CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H", "detail": "version-not-in-range" }, { "id": "CVE-2017-16831", "status": "Patched", "link": "https://nvd.nist.gov/vuln/detail/CVE-2017-16831", "summary": "coffgen.c in the Binary File Descriptor (BFD) library (aka libbfd), as distributed in GNU Binutils 2.29.1, does not validate the symbol count, which allows remote attackers to cause a denial of service (integer overflow and application crash, or excessive memory allocation) or possibly have unspecified other impact via a crafted PE file.", "scorev2": "6.8", "scorev3": "7.8", "scorev4": "0.0", "modified": "2026-06-17T01:09:59.000", "vector": "LOCAL", "vectorString": "CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H", "detail": "version-not-in-range" }, { "id": "CVE-2017-16832", "status": "Patched", "link": "https://nvd.nist.gov/vuln/detail/CVE-2017-16832", "summary": "The pe_bfd_read_buildid function in peicode.h in the Binary File Descriptor (BFD) library (aka libbfd), as distributed in GNU Binutils 2.29.1, does not validate size and offset values in the data dictionary, which allows remote attackers to cause a denial of service (segmentation violation and application crash) or possibly have unspecified other impact via a crafted PE file.", "scorev2": "6.8", "scorev3": "7.8", "scorev4": "0.0", "modified": "2026-06-17T01:09:59.000", "vector": "LOCAL", "vectorString": "CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H", "detail": "version-not-in-range" }, { "id": "CVE-2017-17080", "status": "Patched", "link": "https://nvd.nist.gov/vuln/detail/CVE-2017-17080", "summary": "elf.c in the Binary File Descriptor (BFD) library (aka libbfd), as distributed in GNU Binutils 2.29.1, does not validate sizes of core notes, which allows remote attackers to cause a denial of service (bfd_getl32 heap-based buffer over-read and application crash) via a crafted object file, related to elfcore_grok_netbsd_procinfo, elfcore_grok_openbsd_procinfo, and elfcore_grok_nto_status.", "scorev2": "4.3", "scorev3": "5.5", "scorev4": "0.0", "modified": "2026-06-17T01:10:18.000", "vector": "LOCAL", "vectorString": "CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H", "detail": "version-not-in-range" }, { "id": "CVE-2017-17121", "status": "Patched", "link": "https://nvd.nist.gov/vuln/detail/CVE-2017-17121", "summary": "The Binary File Descriptor (BFD) library (aka libbfd), as distributed in GNU Binutils 2.29.1, allows remote attackers to cause a denial of service (memory access violation) or possibly have unspecified other impact via a COFF binary in which a relocation refers to a location after the end of the to-be-relocated section.", "scorev2": "6.8", "scorev3": "7.8", "scorev4": "0.0", "modified": "2026-06-17T01:10:22.000", "vector": "LOCAL", "vectorString": "CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H", "detail": "version-not-in-range" }, { "id": "CVE-2017-17122", "status": "Patched", "link": "https://nvd.nist.gov/vuln/detail/CVE-2017-17122", "summary": "The dump_relocs_in_section function in objdump.c in GNU Binutils 2.29.1 does not check for reloc count integer overflows, which allows remote attackers to cause a denial of service (excessive memory allocation, or heap-based buffer overflow and application crash) or possibly have unspecified other impact via a crafted PE file.", "scorev2": "6.8", "scorev3": "7.8", "scorev4": "0.0", "modified": "2026-06-17T01:10:22.000", "vector": "LOCAL", "vectorString": "CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H", "detail": "version-not-in-range" }, { "id": "CVE-2017-17123", "status": "Patched", "link": "https://nvd.nist.gov/vuln/detail/CVE-2017-17123", "summary": "The coff_slurp_reloc_table function in coffcode.h in the Binary File Descriptor (BFD) library (aka libbfd), as distributed in GNU Binutils 2.29.1, allows remote attackers to cause a denial of service (NULL pointer dereference and application crash) via a crafted COFF based file.", "scorev2": "4.3", "scorev3": "5.5", "scorev4": "0.0", "modified": "2026-06-17T01:10:22.000", "vector": "LOCAL", "vectorString": "CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H", "detail": "version-not-in-range" }, { "id": "CVE-2017-17124", "status": "Patched", "link": "https://nvd.nist.gov/vuln/detail/CVE-2017-17124", "summary": "The _bfd_coff_read_string_table function in coffgen.c in the Binary File Descriptor (BFD) library (aka libbfd), as distributed in GNU Binutils 2.29.1, does not properly validate the size of the external string table, which allows remote attackers to cause a denial of service (excessive memory consumption, or heap-based buffer overflow and application crash) or possibly have unspecified other impact via a crafted COFF binary.", "scorev2": "6.8", "scorev3": "7.8", "scorev4": "0.0", "modified": "2026-06-17T01:10:22.000", "vector": "LOCAL", "vectorString": "CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H", "detail": "version-not-in-range" }, { "id": "CVE-2017-17125", "status": "Patched", "link": "https://nvd.nist.gov/vuln/detail/CVE-2017-17125", "summary": "nm.c and objdump.c in GNU Binutils 2.29.1 mishandle certain global symbols, which allows remote attackers to cause a denial of service (_bfd_elf_get_symbol_version_string buffer over-read and application crash) or possibly have unspecified other impact via a crafted ELF file.", "scorev2": "6.8", "scorev3": "7.8", "scorev4": "0.0", "modified": "2026-06-17T01:10:22.000", "vector": "LOCAL", "vectorString": "CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H", "detail": "version-not-in-range" }, { "id": "CVE-2017-17126", "status": "Patched", "link": "https://nvd.nist.gov/vuln/detail/CVE-2017-17126", "summary": "The load_debug_section function in readelf.c in GNU Binutils 2.29.1 allows remote attackers to cause a denial of service (invalid memory access and application crash) or possibly have unspecified other impact via an ELF file that lacks section headers.", "scorev2": "6.8", "scorev3": "7.8", "scorev4": "0.0", "modified": "2026-06-17T01:10:22.000", "vector": "LOCAL", "vectorString": "CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H", "detail": "version-not-in-range" }, { "id": "CVE-2017-6965", "status": "Patched", "link": "https://nvd.nist.gov/vuln/detail/CVE-2017-6965", "summary": "readelf in GNU Binutils 2.28 writes to illegal addresses while processing corrupt input files containing symbol-difference relocations, leading to a heap-based buffer overflow.", "scorev2": "4.3", "scorev3": "5.5", "scorev4": "0.0", "modified": "2026-06-17T01:23:23.000", "vector": "LOCAL", "vectorString": "CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H", "detail": "version-not-in-range" }, { "id": "CVE-2017-6966", "status": "Patched", "link": "https://nvd.nist.gov/vuln/detail/CVE-2017-6966", "summary": "readelf in GNU Binutils 2.28 has a use-after-free (specifically read-after-free) error while processing multiple, relocated sections in an MSP430 binary. This is caused by mishandling of an invalid symbol index, and mishandling of state across invocations.", "scorev2": "4.3", "scorev3": "5.5", "scorev4": "0.0", "modified": "2026-06-17T01:23:23.000", "vector": "LOCAL", "vectorString": "CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H", "detail": "version-not-in-range" }, { "id": "CVE-2017-6969", "status": "Patched", "link": "https://nvd.nist.gov/vuln/detail/CVE-2017-6969", "summary": "readelf in GNU Binutils 2.28 is vulnerable to a heap-based buffer over-read while processing corrupt RL78 binaries. The vulnerability can trigger program crashes. It may lead to an information leak as well.", "scorev2": "6.4", "scorev3": "9.1", "scorev4": "0.0", "modified": "2026-06-17T01:23:24.000", "vector": "NETWORK", "vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:H", "detail": "version-not-in-range" }, { "id": "CVE-2017-7209", "status": "Patched", "link": "https://nvd.nist.gov/vuln/detail/CVE-2017-7209", "summary": "The dump_section_as_bytes function in readelf in GNU Binutils 2.28 accesses a NULL pointer while reading section contents in a corrupt binary, leading to a program crash.", "scorev2": "4.3", "scorev3": "5.5", "scorev4": "0.0", "modified": "2026-06-17T01:23:51.000", "vector": "LOCAL", "vectorString": "CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H", "detail": "version-not-in-range" }, { "id": "CVE-2017-7210", "status": "Patched", "link": "https://nvd.nist.gov/vuln/detail/CVE-2017-7210", "summary": "objdump in GNU Binutils 2.28 is vulnerable to multiple heap-based buffer over-reads (of size 1 and size 8) while handling corrupt STABS enum type strings in a crafted object file, leading to program crash.", "scorev2": "4.3", "scorev3": "5.5", "scorev4": "0.0", "modified": "2026-06-17T01:23:51.000", "vector": "LOCAL", "vectorString": "CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H", "detail": "version-not-in-range" }, { "id": "CVE-2017-7223", "status": "Patched", "link": "https://nvd.nist.gov/vuln/detail/CVE-2017-7223", "summary": "GNU assembler in GNU Binutils 2.28 is vulnerable to a global buffer overflow (of size 1) while attempting to unget an EOF character from the input stream, potentially leading to a program crash.", "scorev2": "5.0", "scorev3": "7.5", "scorev4": "0.0", "modified": "2026-06-17T01:23:53.000", "vector": "NETWORK", "vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H", "detail": "version-not-in-range" }, { "id": "CVE-2017-7224", "status": "Patched", "link": "https://nvd.nist.gov/vuln/detail/CVE-2017-7224", "summary": "The find_nearest_line function in objdump in GNU Binutils 2.28 is vulnerable to an invalid write (of size 1) while disassembling a corrupt binary that contains an empty function name, leading to a program crash.", "scorev2": "4.3", "scorev3": "5.5", "scorev4": "0.0", "modified": "2026-06-17T01:23:53.000", "vector": "LOCAL", "vectorString": "CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H", "detail": "version-not-in-range" }, { "id": "CVE-2017-7225", "status": "Patched", "link": "https://nvd.nist.gov/vuln/detail/CVE-2017-7225", "summary": "The find_nearest_line function in addr2line in GNU Binutils 2.28 does not handle the case where the main file name and the directory name are both empty, triggering a NULL pointer dereference and an invalid write, and leading to a program crash.", "scorev2": "5.0", "scorev3": "7.5", "scorev4": "0.0", "modified": "2026-06-17T01:23:53.000", "vector": "NETWORK", "vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H", "detail": "version-not-in-range" }, { "id": "CVE-2017-7226", "status": "Patched", "link": "https://nvd.nist.gov/vuln/detail/CVE-2017-7226", "summary": "The pe_ILF_object_p function in the Binary File Descriptor (BFD) library (aka libbfd), as distributed in GNU Binutils 2.28, is vulnerable to a heap-based buffer over-read of size 4049 because it uses the strlen function instead of strnlen, leading to program crashes in several utilities such as addr2line, size, and strings. It could lead to information disclosure as well.", "scorev2": "6.4", "scorev3": "9.1", "scorev4": "0.0", "modified": "2026-06-17T01:23:53.000", "vector": "NETWORK", "vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:H", "detail": "version-not-in-range" }, { "id": "CVE-2017-7227", "status": "Patched", "link": "https://nvd.nist.gov/vuln/detail/CVE-2017-7227", "summary": "GNU linker (ld) in GNU Binutils 2.28 is vulnerable to a heap-based buffer overflow while processing a bogus input script, leading to a program crash. This relates to lack of '\\0' termination of a name field in ldlex.l.", "scorev2": "5.0", "scorev3": "7.5", "scorev4": "0.0", "modified": "2026-06-17T01:23:53.000", "vector": "NETWORK", "vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H", "detail": "version-not-in-range" }, { "id": "CVE-2017-7299", "status": "Patched", "link": "https://nvd.nist.gov/vuln/detail/CVE-2017-7299", "summary": "The Binary File Descriptor (BFD) library (aka libbfd), as distributed in GNU Binutils 2.28, has an invalid read (of size 8) because the code to emit relocs (bfd_elf_final_link function in bfd/elflink.c) does not check the format of the input file before trying to read the ELF reloc section header. The vulnerability leads to a GNU linker (ld) program crash.", "scorev2": "4.3", "scorev3": "5.5", "scorev4": "0.0", "modified": "2026-06-17T01:24:05.000", "vector": "LOCAL", "vectorString": "CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H", "detail": "version-not-in-range" }, { "id": "CVE-2017-7300", "status": "Patched", "link": "https://nvd.nist.gov/vuln/detail/CVE-2017-7300", "summary": "The Binary File Descriptor (BFD) library (aka libbfd), as distributed in GNU Binutils 2.28, has an aout_link_add_symbols function in bfd/aoutx.h that is vulnerable to a heap-based buffer over-read (off-by-one) because of an incomplete check for invalid string offsets while loading symbols, leading to a GNU linker (ld) program crash.", "scorev2": "5.0", "scorev3": "7.5", "scorev4": "0.0", "modified": "2026-06-17T01:24:05.000", "vector": "NETWORK", "vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H", "detail": "version-not-in-range" }, { "id": "CVE-2017-7301", "status": "Patched", "link": "https://nvd.nist.gov/vuln/detail/CVE-2017-7301", "summary": "The Binary File Descriptor (BFD) library (aka libbfd), as distributed in GNU Binutils 2.28, has an aout_link_add_symbols function in bfd/aoutx.h that has an off-by-one vulnerability because it does not carefully check the string offset. The vulnerability could lead to a GNU linker (ld) program crash.", "scorev2": "5.0", "scorev3": "7.5", "scorev4": "0.0", "modified": "2026-06-17T01:24:05.000", "vector": "NETWORK", "vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H", "detail": "version-not-in-range" }, { "id": "CVE-2017-7302", "status": "Patched", "link": "https://nvd.nist.gov/vuln/detail/CVE-2017-7302", "summary": "The Binary File Descriptor (BFD) library (aka libbfd), as distributed in GNU Binutils 2.28, has a swap_std_reloc_out function in bfd/aoutx.h that is vulnerable to an invalid read (of size 4) because of missing checks for relocs that could not be recognised. This vulnerability causes Binutils utilities like strip to crash.", "scorev2": "5.0", "scorev3": "7.5", "scorev4": "0.0", "modified": "2026-06-17T01:24:05.000", "vector": "NETWORK", "vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H", "detail": "version-not-in-range" }, { "id": "CVE-2017-7303", "status": "Patched", "link": "https://nvd.nist.gov/vuln/detail/CVE-2017-7303", "summary": "The Binary File Descriptor (BFD) library (aka libbfd), as distributed in GNU Binutils 2.28, is vulnerable to an invalid read (of size 4) because of missing a check (in the find_link function) for null headers before attempting to match them. This vulnerability causes Binutils utilities like strip to crash.", "scorev2": "5.0", "scorev3": "7.5", "scorev4": "0.0", "modified": "2026-06-17T01:24:06.000", "vector": "NETWORK", "vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H", "detail": "version-not-in-range" }, { "id": "CVE-2017-7304", "status": "Patched", "link": "https://nvd.nist.gov/vuln/detail/CVE-2017-7304", "summary": "The Binary File Descriptor (BFD) library (aka libbfd), as distributed in GNU Binutils 2.28, is vulnerable to an invalid read (of size 8) because of missing a check (in the copy_special_section_fields function) for an invalid sh_link field before attempting to follow it. This vulnerability causes Binutils utilities like strip to crash.", "scorev2": "5.0", "scorev3": "7.5", "scorev4": "0.0", "modified": "2026-06-17T01:24:06.000", "vector": "NETWORK", "vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H", "detail": "version-not-in-range" }, { "id": "CVE-2017-7614", "status": "Patched", "link": "https://nvd.nist.gov/vuln/detail/CVE-2017-7614", "summary": "elflink.c in the Binary File Descriptor (BFD) library (aka libbfd), as distributed in GNU Binutils 2.28, has a \"member access within null pointer\" undefined behavior issue, which might allow remote attackers to cause a denial of service (application crash) or possibly have unspecified other impact via an \"int main() {return 0;}\" program.", "scorev2": "7.5", "scorev3": "9.8", "scorev4": "0.0", "modified": "2026-06-17T01:24:47.000", "vector": "NETWORK", "vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H", "detail": "version-not-in-range" }, { "id": "CVE-2017-8392", "status": "Patched", "link": "https://nvd.nist.gov/vuln/detail/CVE-2017-8392", "summary": "The Binary File Descriptor (BFD) library (aka libbfd), as distributed in GNU Binutils 2.28, is vulnerable to an invalid read of size 8 because of missing a check to determine whether symbols are NULL in the _bfd_dwarf2_find_nearest_line function. This vulnerability causes programs that conduct an analysis of binary programs using the libbfd library, such as objdump, to crash.", "scorev2": "5.0", "scorev3": "7.5", "scorev4": "0.0", "modified": "2026-06-17T01:26:18.000", "vector": "NETWORK", "vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H", "detail": "version-not-in-range" }, { "id": "CVE-2017-8393", "status": "Patched", "link": "https://nvd.nist.gov/vuln/detail/CVE-2017-8393", "summary": "The Binary File Descriptor (BFD) library (aka libbfd), as distributed in GNU Binutils 2.28, is vulnerable to a global buffer over-read error because of an assumption made by code that runs for objcopy and strip, that SHT_REL/SHR_RELA sections are always named starting with a .rel/.rela prefix. This vulnerability causes programs that conduct an analysis of binary programs using the libbfd library, such as objcopy and strip, to crash.", "scorev2": "5.0", "scorev3": "7.5", "scorev4": "0.0", "modified": "2026-06-17T01:26:18.000", "vector": "NETWORK", "vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H", "detail": "version-not-in-range" }, { "id": "CVE-2017-8394", "status": "Patched", "link": "https://nvd.nist.gov/vuln/detail/CVE-2017-8394", "summary": "The Binary File Descriptor (BFD) library (aka libbfd), as distributed in GNU Binutils 2.28, is vulnerable to an invalid read of size 4 due to NULL pointer dereferencing of _bfd_elf_large_com_section. This vulnerability causes programs that conduct an analysis of binary programs using the libbfd library, such as objcopy, to crash.", "scorev2": "5.0", "scorev3": "7.5", "scorev4": "0.0", "modified": "2026-06-17T01:26:18.000", "vector": "NETWORK", "vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H", "detail": "version-not-in-range" }, { "id": "CVE-2017-8395", "status": "Patched", "link": "https://nvd.nist.gov/vuln/detail/CVE-2017-8395", "summary": "The Binary File Descriptor (BFD) library (aka libbfd), as distributed in GNU Binutils 2.28, is vulnerable to an invalid write of size 8 because of missing a malloc() return-value check to see if memory had actually been allocated in the _bfd_generic_get_section_contents function. This vulnerability causes programs that conduct an analysis of binary programs using the libbfd library, such as objcopy, to crash.", "scorev2": "5.0", "scorev3": "7.5", "scorev4": "0.0", "modified": "2026-06-17T01:26:18.000", "vector": "NETWORK", "vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H", "detail": "version-not-in-range" }, { "id": "CVE-2017-8396", "status": "Patched", "link": "https://nvd.nist.gov/vuln/detail/CVE-2017-8396", "summary": "The Binary File Descriptor (BFD) library (aka libbfd), as distributed in GNU Binutils 2.28, is vulnerable to an invalid read of size 1 because the existing reloc offset range tests didn't catch small negative offsets less than the size of the reloc field. This vulnerability causes programs that conduct an analysis of binary programs using the libbfd library, such as objdump, to crash.", "scorev2": "5.0", "scorev3": "7.5", "scorev4": "0.0", "modified": "2026-06-17T01:26:18.000", "vector": "NETWORK", "vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H", "detail": "version-not-in-range" }, { "id": "CVE-2017-8397", "status": "Patched", "link": "https://nvd.nist.gov/vuln/detail/CVE-2017-8397", "summary": "The Binary File Descriptor (BFD) library (aka libbfd), as distributed in GNU Binutils 2.28, is vulnerable to an invalid read of size 1 and an invalid write of size 1 during processing of a corrupt binary containing reloc(s) with negative addresses. This vulnerability causes programs that conduct an analysis of binary programs using the libbfd library, such as objdump, to crash.", "scorev2": "5.0", "scorev3": "7.5", "scorev4": "0.0", "modified": "2026-06-17T01:26:18.000", "vector": "NETWORK", "vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H", "detail": "version-not-in-range" }, { "id": "CVE-2017-8398", "status": "Patched", "link": "https://nvd.nist.gov/vuln/detail/CVE-2017-8398", "summary": "dwarf.c in GNU Binutils 2.28 is vulnerable to an invalid read of size 1 during dumping of debug information from a corrupt binary. This vulnerability causes programs that conduct an analysis of binary programs, such as objdump and readelf, to crash.", "scorev2": "5.0", "scorev3": "7.5", "scorev4": "0.0", "modified": "2026-06-17T01:26:19.000", "vector": "NETWORK", "vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H", "detail": "version-not-in-range" }, { "id": "CVE-2017-8421", "status": "Patched", "link": "https://nvd.nist.gov/vuln/detail/CVE-2017-8421", "summary": "The function coff_set_alignment_hook in coffcode.h in Binary File Descriptor (BFD) library (aka libbfd), as distributed in GNU Binutils 2.28, has a memory leak vulnerability which can cause memory exhaustion in objdump via a crafted PE file. Additional validation in dump_relocs_in_section in objdump.c can resolve this.", "scorev2": "7.1", "scorev3": "5.5", "scorev4": "0.0", "modified": "2026-06-17T01:26:21.000", "vector": "LOCAL", "vectorString": "CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H", "detail": "version-not-in-range" }, { "id": "CVE-2017-9038", "status": "Patched", "link": "https://nvd.nist.gov/vuln/detail/CVE-2017-9038", "summary": "GNU Binutils 2.28 allows remote attackers to cause a denial of service (heap-based buffer over-read and application crash) via a crafted ELF file, related to the byte_get_little_endian function in elfcomm.c, the get_unwind_section_word function in readelf.c, and ARM unwind information that contains invalid word offsets.", "scorev2": "4.3", "scorev3": "5.5", "scorev4": "0.0", "modified": "2026-06-17T01:27:22.000", "vector": "LOCAL", "vectorString": "CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H", "detail": "version-not-in-range" }, { "id": "CVE-2017-9039", "status": "Patched", "link": "https://nvd.nist.gov/vuln/detail/CVE-2017-9039", "summary": "GNU Binutils 2.28 allows remote attackers to cause a denial of service (memory consumption) via a crafted ELF file with many program headers, related to the get_program_headers function in readelf.c.", "scorev2": "4.3", "scorev3": "5.5", "scorev4": "0.0", "modified": "2026-06-17T01:27:22.000", "vector": "LOCAL", "vectorString": "CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H", "detail": "version-not-in-range" }, { "id": "CVE-2017-9040", "status": "Patched", "link": "https://nvd.nist.gov/vuln/detail/CVE-2017-9040", "summary": "GNU Binutils 2017-04-03 allows remote attackers to cause a denial of service (NULL pointer dereference and application crash), related to the process_mips_specific function in readelf.c, via a crafted ELF file that triggers a large memory-allocation attempt.", "scorev2": "4.3", "scorev3": "5.5", "scorev4": "0.0", "modified": "2026-06-17T01:27:22.000", "vector": "LOCAL", "vectorString": "CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H", "detail": "version-not-in-range" }, { "id": "CVE-2017-9041", "status": "Patched", "link": "https://nvd.nist.gov/vuln/detail/CVE-2017-9041", "summary": "GNU Binutils 2.28 allows remote attackers to cause a denial of service (heap-based buffer over-read and application crash) via a crafted ELF file, related to MIPS GOT mishandling in the process_mips_specific function in readelf.c.", "scorev2": "4.3", "scorev3": "5.5", "scorev4": "0.0", "modified": "2026-06-17T01:27:22.000", "vector": "LOCAL", "vectorString": "CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H", "detail": "version-not-in-range" }, { "id": "CVE-2017-9042", "status": "Patched", "link": "https://nvd.nist.gov/vuln/detail/CVE-2017-9042", "summary": "readelf.c in GNU Binutils 2017-04-12 has a \"cannot be represented in type long\" issue, which might allow remote attackers to cause a denial of service (application crash) or possibly have unspecified other impact via a crafted ELF file.", "scorev2": "6.8", "scorev3": "7.8", "scorev4": "0.0", "modified": "2026-06-17T01:27:22.000", "vector": "LOCAL", "vectorString": "CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H", "detail": "version-not-in-range" }, { "id": "CVE-2017-9043", "status": "Patched", "link": "https://nvd.nist.gov/vuln/detail/CVE-2017-9043", "summary": "readelf.c in GNU Binutils 2017-04-12 has a \"shift exponent too large for type unsigned long\" issue, which might allow remote attackers to cause a denial of service (application crash) or possibly have unspecified other impact via a crafted ELF file.", "scorev2": "6.8", "scorev3": "7.8", "scorev4": "0.0", "modified": "2026-06-17T01:27:22.000", "vector": "LOCAL", "vectorString": "CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H", "detail": "version-not-in-range" }, { "id": "CVE-2017-9044", "status": "Patched", "link": "https://nvd.nist.gov/vuln/detail/CVE-2017-9044", "summary": "The print_symbol_for_build_attribute function in readelf.c in GNU Binutils 2017-04-12 allows remote attackers to cause a denial of service (invalid read and SEGV) via a crafted ELF file.", "scorev2": "4.3", "scorev3": "5.5", "scorev4": "0.0", "modified": "2026-06-17T01:27:23.000", "vector": "LOCAL", "vectorString": "CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H", "detail": "version-not-in-range" }, { "id": "CVE-2017-9742", "status": "Patched", "link": "https://nvd.nist.gov/vuln/detail/CVE-2017-9742", "summary": "The score_opcodes function in opcodes/score7-dis.c in GNU Binutils 2.28 allows remote attackers to cause a denial of service (buffer overflow and application crash) or possibly have unspecified other impact via a crafted binary file, as demonstrated by mishandling of this file during \"objdump -D\" execution.", "scorev2": "6.8", "scorev3": "7.8", "scorev4": "0.0", "modified": "2026-06-17T01:28:48.000", "vector": "LOCAL", "vectorString": "CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H", "detail": "version-not-in-range" }, { "id": "CVE-2017-9743", "status": "Patched", "link": "https://nvd.nist.gov/vuln/detail/CVE-2017-9743", "summary": "The print_insn_score32 function in opcodes/score7-dis.c:552 in GNU Binutils 2.28 allows remote attackers to cause a denial of service (buffer overflow and application crash) or possibly have unspecified other impact via a crafted binary file, as demonstrated by mishandling of this file during \"objdump -D\" execution.", "scorev2": "6.8", "scorev3": "7.8", "scorev4": "0.0", "modified": "2026-06-17T01:28:48.000", "vector": "LOCAL", "vectorString": "CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H", "detail": "version-not-in-range" }, { "id": "CVE-2017-9744", "status": "Patched", "link": "https://nvd.nist.gov/vuln/detail/CVE-2017-9744", "summary": "The sh_elf_set_mach_from_flags function in bfd/elf32-sh.c in the Binary File Descriptor (BFD) library (aka libbfd), as distributed in GNU Binutils 2.28, allows remote attackers to cause a denial of service (buffer overflow and application crash) or possibly have unspecified other impact via a crafted binary file, as demonstrated by mishandling of this file during \"objdump -D\" execution.", "scorev2": "6.8", "scorev3": "7.8", "scorev4": "0.0", "modified": "2026-06-17T01:28:49.000", "vector": "LOCAL", "vectorString": "CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H", "detail": "version-not-in-range" }, { "id": "CVE-2017-9745", "status": "Patched", "link": "https://nvd.nist.gov/vuln/detail/CVE-2017-9745", "summary": "The _bfd_vms_slurp_etir function in bfd/vms-alpha.c in the Binary File Descriptor (BFD) library (aka libbfd), as distributed in GNU Binutils 2.28, allows remote attackers to cause a denial of service (buffer overflow and application crash) or possibly have unspecified other impact via a crafted binary file, as demonstrated by mishandling of this file during \"objdump -D\" execution.", "scorev2": "6.8", "scorev3": "7.8", "scorev4": "0.0", "modified": "2026-06-17T01:28:49.000", "vector": "LOCAL", "vectorString": "CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H", "detail": "version-not-in-range" }, { "id": "CVE-2017-9746", "status": "Patched", "link": "https://nvd.nist.gov/vuln/detail/CVE-2017-9746", "summary": "The disassemble_bytes function in objdump.c in GNU Binutils 2.28 allows remote attackers to cause a denial of service (buffer overflow and application crash) or possibly have unspecified other impact via a crafted binary file, as demonstrated by mishandling of rae insns printing for this file during \"objdump -D\" execution.", "scorev2": "6.8", "scorev3": "7.8", "scorev4": "0.0", "modified": "2026-06-17T01:28:49.000", "vector": "LOCAL", "vectorString": "CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H", "detail": "version-not-in-range" }, { "id": "CVE-2017-9747", "status": "Patched", "link": "https://nvd.nist.gov/vuln/detail/CVE-2017-9747", "summary": "The ieee_archive_p function in bfd/ieee.c in the Binary File Descriptor (BFD) library (aka libbfd), as distributed in GNU Binutils 2.28, might allow remote attackers to cause a denial of service (buffer overflow and application crash) or possibly have unspecified other impact via a crafted binary file, as demonstrated by mishandling of this file during \"objdump -D\" execution. NOTE: this may be related to a compiler bug.", "scorev2": "6.8", "scorev3": "7.8", "scorev4": "0.0", "modified": "2026-06-17T01:28:49.000", "vector": "LOCAL", "vectorString": "CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H", "detail": "version-not-in-range" }, { "id": "CVE-2017-9748", "status": "Patched", "link": "https://nvd.nist.gov/vuln/detail/CVE-2017-9748", "summary": "The ieee_object_p function in bfd/ieee.c in the Binary File Descriptor (BFD) library (aka libbfd), as distributed in GNU Binutils 2.28, might allow remote attackers to cause a denial of service (buffer overflow and application crash) or possibly have unspecified other impact via a crafted binary file, as demonstrated by mishandling of this file during \"objdump -D\" execution. NOTE: this may be related to a compiler bug.", "scorev2": "6.8", "scorev3": "7.8", "scorev4": "0.0", "modified": "2026-06-17T01:28:49.000", "vector": "LOCAL", "vectorString": "CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H", "detail": "version-not-in-range" }, { "id": "CVE-2017-9749", "status": "Patched", "link": "https://nvd.nist.gov/vuln/detail/CVE-2017-9749", "summary": "The *regs* macros in opcodes/bfin-dis.c in GNU Binutils 2.28 allow remote attackers to cause a denial of service (buffer overflow and application crash) or possibly have unspecified other impact via a crafted binary file, as demonstrated by mishandling of this file during \"objdump -D\" execution.", "scorev2": "6.8", "scorev3": "7.8", "scorev4": "0.0", "modified": "2026-06-17T01:28:49.000", "vector": "LOCAL", "vectorString": "CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H", "detail": "version-not-in-range" }, { "id": "CVE-2017-9750", "status": "Patched", "link": "https://nvd.nist.gov/vuln/detail/CVE-2017-9750", "summary": "opcodes/rx-decode.opc in GNU Binutils 2.28 lacks bounds checks for certain scale arrays, which allows remote attackers to cause a denial of service (buffer overflow and application crash) or possibly have unspecified other impact via a crafted binary file, as demonstrated by mishandling of this file during \"objdump -D\" execution.", "scorev2": "6.8", "scorev3": "7.8", "scorev4": "0.0", "modified": "2026-06-17T01:28:49.000", "vector": "LOCAL", "vectorString": "CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H", "detail": "version-not-in-range" }, { "id": "CVE-2017-9751", "status": "Patched", "link": "https://nvd.nist.gov/vuln/detail/CVE-2017-9751", "summary": "opcodes/rl78-decode.opc in GNU Binutils 2.28 has an unbounded GETBYTE macro, which allows remote attackers to cause a denial of service (buffer overflow and application crash) or possibly have unspecified other impact via a crafted binary file, as demonstrated by mishandling of this file during \"objdump -D\" execution.", "scorev2": "6.8", "scorev3": "7.8", "scorev4": "0.0", "modified": "2026-06-17T01:28:50.000", "vector": "LOCAL", "vectorString": "CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H", "detail": "version-not-in-range" }, { "id": "CVE-2017-9752", "status": "Patched", "link": "https://nvd.nist.gov/vuln/detail/CVE-2017-9752", "summary": "bfd/vms-alpha.c in the Binary File Descriptor (BFD) library (aka libbfd), as distributed in GNU Binutils 2.28, allows remote attackers to cause a denial of service (buffer overflow and application crash) or possibly have unspecified other impact via a crafted binary file, as demonstrated by mishandling of this file in the _bfd_vms_get_value and _bfd_vms_slurp_etir functions during \"objdump -D\" execution.", "scorev2": "6.8", "scorev3": "7.8", "scorev4": "0.0", "modified": "2026-06-17T01:28:50.000", "vector": "LOCAL", "vectorString": "CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H", "detail": "version-not-in-range" }, { "id": "CVE-2017-9753", "status": "Patched", "link": "https://nvd.nist.gov/vuln/detail/CVE-2017-9753", "summary": "The versados_mkobject function in bfd/versados.c in the Binary File Descriptor (BFD) library (aka libbfd), as distributed in GNU Binutils 2.28, does not initialize a certain data structure, which allows remote attackers to cause a denial of service (buffer overflow and application crash) or possibly have unspecified other impact via a crafted binary file, as demonstrated by mishandling of this file during \"objdump -D\" execution.", "scorev2": "6.8", "scorev3": "7.8", "scorev4": "0.0", "modified": "2026-06-17T01:28:50.000", "vector": "LOCAL", "vectorString": "CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H", "detail": "version-not-in-range" }, { "id": "CVE-2017-9754", "status": "Patched", "link": "https://nvd.nist.gov/vuln/detail/CVE-2017-9754", "summary": "The process_otr function in bfd/versados.c in the Binary File Descriptor (BFD) library (aka libbfd), as distributed in GNU Binutils 2.28, does not validate a certain offset, which allows remote attackers to cause a denial of service (buffer overflow and application crash) or possibly have unspecified other impact via a crafted binary file, as demonstrated by mishandling of this file during \"objdump -D\" execution.", "scorev2": "6.8", "scorev3": "7.8", "scorev4": "0.0", "modified": "2026-06-17T01:28:50.000", "vector": "LOCAL", "vectorString": "CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H", "detail": "version-not-in-range" }, { "id": "CVE-2017-9755", "status": "Patched", "link": "https://nvd.nist.gov/vuln/detail/CVE-2017-9755", "summary": "opcodes/i386-dis.c in GNU Binutils 2.28 does not consider the number of registers for bnd mode, which allows remote attackers to cause a denial of service (buffer overflow and application crash) or possibly have unspecified other impact via a crafted binary file, as demonstrated by mishandling of this file during \"objdump -D\" execution.", "scorev2": "6.8", "scorev3": "7.8", "scorev4": "0.0", "modified": "2026-06-17T01:28:50.000", "vector": "LOCAL", "vectorString": "CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H", "detail": "version-not-in-range" }, { "id": "CVE-2017-9756", "status": "Patched", "link": "https://nvd.nist.gov/vuln/detail/CVE-2017-9756", "summary": "The aarch64_ext_ldst_reglist function in opcodes/aarch64-dis.c in GNU Binutils 2.28 allows remote attackers to cause a denial of service (buffer overflow and application crash) or possibly have unspecified other impact via a crafted binary file, as demonstrated by mishandling of this file during \"objdump -D\" execution.", "scorev2": "6.8", "scorev3": "7.8", "scorev4": "0.0", "modified": "2026-06-17T01:28:50.000", "vector": "LOCAL", "vectorString": "CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H", "detail": "version-not-in-range" }, { "id": "CVE-2017-9954", "status": "Patched", "link": "https://nvd.nist.gov/vuln/detail/CVE-2017-9954", "summary": "The getvalue function in tekhex.c in the Binary File Descriptor (BFD) library (aka libbfd), as distributed in GNU Binutils 2.28, allows remote attackers to cause a denial of service (stack-based buffer over-read and application crash) via a crafted tekhex file, as demonstrated by mishandling within the nm program.", "scorev2": "4.3", "scorev3": "5.5", "scorev4": "0.0", "modified": "2026-06-17T01:29:16.000", "vector": "LOCAL", "vectorString": "CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H", "detail": "version-not-in-range" }, { "id": "CVE-2017-9955", "status": "Patched", "link": "https://nvd.nist.gov/vuln/detail/CVE-2017-9955", "summary": "The get_build_id function in opncls.c in the Binary File Descriptor (BFD) library (aka libbfd), as distributed in GNU Binutils 2.28, allows remote attackers to cause a denial of service (heap-based buffer over-read and application crash) via a crafted file in which a certain size field is larger than a corresponding data field, as demonstrated by mishandling within the objdump program.", "scorev2": "4.3", "scorev3": "5.5", "scorev4": "0.0", "modified": "2026-06-17T01:29:16.000", "vector": "LOCAL", "vectorString": "CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H", "detail": "version-not-in-range" }, { "id": "CVE-2018-1000876", "status": "Patched", "link": "https://nvd.nist.gov/vuln/detail/CVE-2018-1000876", "summary": "binutils version 2.32 and earlier contains a Integer Overflow vulnerability in objdump, bfd_get_dynamic_reloc_upper_bound,bfd_canonicalize_dynamic_reloc that can result in Integer overflow trigger heap overflow. Successful exploitation allows execution of arbitrary code.. This attack appear to be exploitable via Local. This vulnerability appears to have been fixed in after commit 3a551c7a1b80fca579461774860574eabfd7f18f.", "scorev2": "4.6", "scorev3": "7.8", "scorev4": "0.0", "modified": "2026-06-17T01:33:14.000", "vector": "LOCAL", "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H", "detail": "fixed-version: Fixed from version 2.32" }, { "id": "CVE-2018-10372", "status": "Patched", "link": "https://nvd.nist.gov/vuln/detail/CVE-2018-10372", "summary": "process_cu_tu_index in dwarf.c in GNU Binutils 2.30 allows remote attackers to cause a denial of service (heap-based buffer over-read and application crash) via a crafted binary file, as demonstrated by readelf.", "scorev2": "4.3", "scorev3": "5.5", "scorev4": "0.0", "modified": "2026-06-17T01:33:55.000", "vector": "LOCAL", "vectorString": "CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H", "detail": "version-not-in-range" }, { "id": "CVE-2018-10373", "status": "Patched", "link": "https://nvd.nist.gov/vuln/detail/CVE-2018-10373", "summary": "concat_filename in dwarf2.c in the Binary File Descriptor (BFD) library (aka libbfd), as distributed in GNU Binutils 2.30, allows remote attackers to cause a denial of service (NULL pointer dereference and application crash) via a crafted binary file, as demonstrated by nm-new.", "scorev2": "4.3", "scorev3": "6.5", "scorev4": "0.0", "modified": "2026-06-17T01:33:55.000", "vector": "NETWORK", "vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H", "detail": "version-not-in-range" }, { "id": "CVE-2018-10534", "status": "Patched", "link": "https://nvd.nist.gov/vuln/detail/CVE-2018-10534", "summary": "The _bfd_XX_bfd_copy_private_bfd_data_common function in peXXigen.c in the Binary File Descriptor (BFD) library (aka libbfd), as distributed in GNU Binutils 2.30, processes a negative Data Directory size with an unbounded loop that increases the value of (external_IMAGE_DEBUG_DIRECTORY) *edd so that the address exceeds its own memory region, resulting in an out-of-bounds memory write, as demonstrated by objcopy copying private info with _bfd_pex64_bfd_copy_private_bfd_data_common in pex64igen.c.", "scorev2": "4.3", "scorev3": "5.5", "scorev4": "0.0", "modified": "2026-06-17T01:34:07.000", "vector": "LOCAL", "vectorString": "CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H", "detail": "version-not-in-range" }, { "id": "CVE-2018-10535", "status": "Patched", "link": "https://nvd.nist.gov/vuln/detail/CVE-2018-10535", "summary": "The ignore_section_sym function in elf.c in the Binary File Descriptor (BFD) library (aka libbfd), as distributed in GNU Binutils 2.30, does not validate the output_section pointer in the case of a symtab entry with a \"SECTION\" type that has a \"0\" value, which allows remote attackers to cause a denial of service (NULL pointer dereference and application crash) via a crafted file, as demonstrated by objcopy.", "scorev2": "4.3", "scorev3": "5.5", "scorev4": "0.0", "modified": "2026-06-17T01:34:07.000", "vector": "LOCAL", "vectorString": "CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H", "detail": "version-not-in-range" }, { "id": "CVE-2018-12641", "status": "Patched", "link": "https://nvd.nist.gov/vuln/detail/CVE-2018-12641", "summary": "An issue was discovered in arm_pt in cplus-dem.c in GNU libiberty, as distributed in GNU Binutils 2.30. Stack Exhaustion occurs in the C++ demangling functions provided by libiberty, and there are recursive stack frames: demangle_arm_hp_template, demangle_class_name, demangle_fund_type, do_type, do_arg, demangle_args, and demangle_nested_args. This can occur during execution of nm-new.", "scorev2": "4.3", "scorev3": "5.5", "scorev4": "0.0", "modified": "2026-06-17T01:38:06.000", "vector": "LOCAL", "vectorString": "CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H", "detail": "version-not-in-range" }, { "id": "CVE-2018-12697", "status": "Patched", "link": "https://nvd.nist.gov/vuln/detail/CVE-2018-12697", "summary": "A NULL pointer dereference (aka SEGV on unknown address 0x000000000000) was discovered in work_stuff_copy_to_from in cplus-dem.c in GNU libiberty, as distributed in GNU Binutils 2.30. This can occur during execution of objdump.", "scorev2": "5.0", "scorev3": "7.5", "scorev4": "0.0", "modified": "2026-06-17T01:38:11.000", "vector": "NETWORK", "vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H", "detail": "version-not-in-range" }, { "id": "CVE-2018-12698", "status": "Patched", "link": "https://nvd.nist.gov/vuln/detail/CVE-2018-12698", "summary": "demangle_template in cplus-dem.c in GNU libiberty, as distributed in GNU Binutils 2.30, allows attackers to trigger excessive memory consumption (aka OOM) during the \"Create an array for saving the template argument values\" XNEWVEC call. This can occur during execution of objdump.", "scorev2": "5.0", "scorev3": "7.5", "scorev4": "0.0", "modified": "2026-06-17T01:38:11.000", "vector": "NETWORK", "vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H", "detail": "version-not-in-range" }, { "id": "CVE-2018-12699", "status": "Patched", "link": "https://nvd.nist.gov/vuln/detail/CVE-2018-12699", "summary": "finish_stab in stabs.c in GNU Binutils 2.30 allows attackers to cause a denial of service (heap-based buffer overflow) or possibly have unspecified other impact, as demonstrated by an out-of-bounds write of 8 bytes. This can occur during execution of objdump.", "scorev2": "7.5", "scorev3": "9.8", "scorev4": "0.0", "modified": "2026-06-17T01:38:11.000", "vector": "NETWORK", "vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H", "detail": "version-not-in-range" }, { "id": "CVE-2018-12934", "status": "Patched", "link": "https://nvd.nist.gov/vuln/detail/CVE-2018-12934", "summary": "remember_Ktype in cplus-dem.c in GNU libiberty, as distributed in GNU Binutils 2.30, allows attackers to trigger excessive memory consumption (aka OOM). This can occur during execution of cxxfilt.", "scorev2": "5.0", "scorev3": "7.5", "scorev4": "0.0", "modified": "2026-06-17T01:38:36.000", "vector": "NETWORK", "vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H", "detail": "version-not-in-range" }, { "id": "CVE-2018-13033", "status": "Patched", "link": "https://nvd.nist.gov/vuln/detail/CVE-2018-13033", "summary": "The Binary File Descriptor (BFD) library (aka libbfd), as distributed in GNU Binutils 2.30, allows remote attackers to cause a denial of service (excessive memory allocation and application crash) via a crafted ELF file, as demonstrated by _bfd_elf_parse_attributes in elf-attrs.c and bfd_malloc in libbfd.c. This can occur during execution of nm.", "scorev2": "4.3", "scorev3": "5.5", "scorev4": "0.0", "modified": "2026-06-17T01:38:43.000", "vector": "LOCAL", "vectorString": "CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H", "detail": "version-not-in-range" }, { "id": "CVE-2018-17358", "status": "Patched", "link": "https://nvd.nist.gov/vuln/detail/CVE-2018-17358", "summary": "An issue was discovered in the Binary File Descriptor (BFD) library (aka libbfd), as distributed in GNU Binutils 2.31. An invalid memory access exists in _bfd_stab_section_find_nearest_line in syms.c. Attackers could leverage this vulnerability to cause a denial of service (application crash) via a crafted ELF file.", "scorev2": "4.3", "scorev3": "5.5", "scorev4": "0.0", "modified": "2026-06-17T01:45:41.000", "vector": "LOCAL", "vectorString": "CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H", "detail": "version-not-in-range" }, { "id": "CVE-2018-17359", "status": "Patched", "link": "https://nvd.nist.gov/vuln/detail/CVE-2018-17359", "summary": "An issue was discovered in the Binary File Descriptor (BFD) library (aka libbfd), as distributed in GNU Binutils 2.31. An invalid memory access exists in bfd_zalloc in opncls.c. Attackers could leverage this vulnerability to cause a denial of service (application crash) via a crafted ELF file.", "scorev2": "4.3", "scorev3": "5.5", "scorev4": "0.0", "modified": "2026-06-17T01:45:41.000", "vector": "LOCAL", "vectorString": "CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H", "detail": "version-not-in-range" }, { "id": "CVE-2018-17360", "status": "Patched", "link": "https://nvd.nist.gov/vuln/detail/CVE-2018-17360", "summary": "An issue was discovered in the Binary File Descriptor (BFD) library (aka libbfd), as distributed in GNU Binutils 2.31. a heap-based buffer over-read in bfd_getl32 in libbfd.c allows an attacker to cause a denial of service through a crafted PE file. This vulnerability can be triggered by the executable objdump.", "scorev2": "4.3", "scorev3": "5.5", "scorev4": "0.0", "modified": "2026-06-17T01:45:41.000", "vector": "LOCAL", "vectorString": "CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H", "detail": "version-not-in-range" }, { "id": "CVE-2018-17794", "status": "Patched", "link": "https://nvd.nist.gov/vuln/detail/CVE-2018-17794", "summary": "An issue was discovered in cplus-dem.c in GNU libiberty, as distributed in GNU Binutils 2.31. There is a NULL pointer dereference in work_stuff_copy_to_from when called from iterate_demangle_function.", "scorev2": "4.3", "scorev3": "6.5", "scorev4": "0.0", "modified": "2026-06-17T01:46:20.000", "vector": "NETWORK", "vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H", "detail": "version-not-in-range" }, { "id": "CVE-2018-17985", "status": "Patched", "link": "https://nvd.nist.gov/vuln/detail/CVE-2018-17985", "summary": "An issue was discovered in cp-demangle.c in GNU libiberty, as distributed in GNU Binutils 2.31. There is a stack consumption problem caused by the cplus_demangle_type function making recursive calls to itself in certain scenarios involving many 'P' characters.", "scorev2": "4.3", "scorev3": "5.5", "scorev4": "0.0", "modified": "2026-06-17T01:46:38.000", "vector": "LOCAL", "vectorString": "CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H", "detail": "version-not-in-range" }, { "id": "CVE-2018-18309", "status": "Patched", "link": "https://nvd.nist.gov/vuln/detail/CVE-2018-18309", "summary": "An issue was discovered in the Binary File Descriptor (BFD) library (aka libbfd), as distributed in GNU Binutils 2.31. An invalid memory address dereference was discovered in read_reloc in reloc.c. The vulnerability causes a segmentation fault and application crash, which leads to denial of service, as demonstrated by objdump, because of missing _bfd_clear_contents bounds checking.", "scorev2": "4.3", "scorev3": "5.5", "scorev4": "0.0", "modified": "2026-06-17T01:46:57.000", "vector": "LOCAL", "vectorString": "CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H", "detail": "version-not-in-range" }, { "id": "CVE-2018-18483", "status": "Patched", "link": "https://nvd.nist.gov/vuln/detail/CVE-2018-18483", "summary": "The get_count function in cplus-dem.c in GNU libiberty, as distributed in GNU Binutils 2.31, allows remote attackers to cause a denial of service (malloc called with the result of an integer-overflowing calculation) or possibly have unspecified other impact via a crafted string, as demonstrated by c++filt.", "scorev2": "6.8", "scorev3": "7.8", "scorev4": "0.0", "modified": "2026-06-17T01:47:22.000", "vector": "LOCAL", "vectorString": "CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H", "detail": "version-not-in-range" }, { "id": "CVE-2018-18484", "status": "Patched", "link": "https://nvd.nist.gov/vuln/detail/CVE-2018-18484", "summary": "An issue was discovered in cp-demangle.c in GNU libiberty, as distributed in GNU Binutils 2.31. Stack Exhaustion occurs in the C++ demangling functions provided by libiberty, and there is a stack consumption problem caused by recursive stack frames: cplus_demangle_type, d_bare_function_type, d_function_type.", "scorev2": "4.3", "scorev3": "5.5", "scorev4": "0.0", "modified": "2026-06-17T01:47:22.000", "vector": "LOCAL", "vectorString": "CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H", "detail": "version-not-in-range" }, { "id": "CVE-2018-18605", "status": "Patched", "link": "https://nvd.nist.gov/vuln/detail/CVE-2018-18605", "summary": "A heap-based buffer over-read issue was discovered in the function sec_merge_hash_lookup in merge.c in the Binary File Descriptor (BFD) library (aka libbfd), as distributed in GNU Binutils 2.31, because _bfd_add_merge_section mishandles section merges when size is not a multiple of entsize. A specially crafted ELF allows remote attackers to cause a denial of service, as demonstrated by ld.", "scorev2": "4.3", "scorev3": "5.5", "scorev4": "0.0", "modified": "2026-06-17T01:47:34.000", "vector": "LOCAL", "vectorString": "CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H", "detail": "version-not-in-range" }, { "id": "CVE-2018-18606", "status": "Patched", "link": "https://nvd.nist.gov/vuln/detail/CVE-2018-18606", "summary": "An issue was discovered in the merge_strings function in merge.c in the Binary File Descriptor (BFD) library (aka libbfd), as distributed in GNU Binutils 2.31. There is a NULL pointer dereference in _bfd_add_merge_section when attempting to merge sections with large alignments. A specially crafted ELF allows remote attackers to cause a denial of service, as demonstrated by ld.", "scorev2": "4.3", "scorev3": "5.5", "scorev4": "0.0", "modified": "2026-06-17T01:47:34.000", "vector": "LOCAL", "vectorString": "CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H", "detail": "version-not-in-range" }, { "id": "CVE-2018-18607", "status": "Patched", "link": "https://nvd.nist.gov/vuln/detail/CVE-2018-18607", "summary": "An issue was discovered in elf_link_input_bfd in elflink.c in the Binary File Descriptor (BFD) library (aka libbfd), as distributed in GNU Binutils 2.31. There is a NULL pointer dereference in elf_link_input_bfd when used for finding STT_TLS symbols without any TLS section. A specially crafted ELF allows remote attackers to cause a denial of service, as demonstrated by ld.", "scorev2": "4.3", "scorev3": "5.5", "scorev4": "0.0", "modified": "2026-06-17T01:47:35.000", "vector": "LOCAL", "vectorString": "CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H", "detail": "version-not-in-range" }, { "id": "CVE-2018-18700", "status": "Patched", "link": "https://nvd.nist.gov/vuln/detail/CVE-2018-18700", "summary": "An issue was discovered in cp-demangle.c in GNU libiberty, as distributed in GNU Binutils 2.31. There is a stack consumption vulnerability resulting from infinite recursion in the functions d_name(), d_encoding(), and d_local_name() in cp-demangle.c. Remote attackers could leverage this vulnerability to cause a denial-of-service via an ELF file, as demonstrated by nm.", "scorev2": "4.3", "scorev3": "5.5", "scorev4": "0.0", "modified": "2026-06-17T01:47:42.000", "vector": "LOCAL", "vectorString": "CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H", "detail": "version-not-in-range" }, { "id": "CVE-2018-18701", "status": "Patched", "link": "https://nvd.nist.gov/vuln/detail/CVE-2018-18701", "summary": "An issue was discovered in cp-demangle.c in GNU libiberty, as distributed in GNU Binutils 2.31. There is a stack consumption vulnerability resulting from infinite recursion in the functions next_is_type_qual() and cplus_demangle_type() in cp-demangle.c. Remote attackers could leverage this vulnerability to cause a denial-of-service via an ELF file, as demonstrated by nm.", "scorev2": "4.3", "scorev3": "5.5", "scorev4": "0.0", "modified": "2026-06-17T01:47:43.000", "vector": "LOCAL", "vectorString": "CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H", "detail": "version-not-in-range" }, { "id": "CVE-2018-19931", "status": "Patched", "link": "https://nvd.nist.gov/vuln/detail/CVE-2018-19931", "summary": "An issue was discovered in the Binary File Descriptor (BFD) library (aka libbfd), as distributed in GNU Binutils through 2.31. There is a heap-based buffer overflow in bfd_elf32_swap_phdr_in in elfcode.h because the number of program headers is not restricted.", "scorev2": "6.8", "scorev3": "7.8", "scorev4": "0.0", "modified": "2026-06-17T01:50:07.000", "vector": "LOCAL", "vectorString": "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H", "detail": "fixed-version: Fixed from version >2.31" }, { "id": "CVE-2018-19932", "status": "Patched", "link": "https://nvd.nist.gov/vuln/detail/CVE-2018-19932", "summary": "An issue was discovered in the Binary File Descriptor (BFD) library (aka libbfd), as distributed in GNU Binutils through 2.31. There is an integer overflow and infinite loop caused by the IS_CONTAINED_BY_LMA macro in elf.c.", "scorev2": "4.3", "scorev3": "5.5", "scorev4": "0.0", "modified": "2026-06-17T01:50:08.000", "vector": "LOCAL", "vectorString": "CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H", "detail": "fixed-version: Fixed from version >2.31" }, { "id": "CVE-2018-20002", "status": "Patched", "link": "https://nvd.nist.gov/vuln/detail/CVE-2018-20002", "summary": "The _bfd_generic_read_minisymbols function in syms.c in the Binary File Descriptor (BFD) library (aka libbfd), as distributed in GNU Binutils 2.31, has a memory leak via a crafted ELF file, leading to a denial of service (memory consumption), as demonstrated by nm.", "scorev2": "4.3", "scorev3": "5.5", "scorev4": "0.0", "modified": "2026-06-17T01:52:08.000", "vector": "LOCAL", "vectorString": "CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H", "detail": "version-not-in-range" }, { "id": "CVE-2018-20623", "status": "Patched", "link": "https://nvd.nist.gov/vuln/detail/CVE-2018-20623", "summary": "In GNU Binutils 2.31.1, there is a use-after-free in the error function in elfcomm.c when called from the process_archive function in readelf.c via a crafted ELF file.", "scorev2": "4.3", "scorev3": "5.5", "scorev4": "0.0", "modified": "2026-06-17T01:53:12.000", "vector": "LOCAL", "vectorString": "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H", "detail": "version-not-in-range" }, { "id": "CVE-2018-20651", "status": "Patched", "link": "https://nvd.nist.gov/vuln/detail/CVE-2018-20651", "summary": "A NULL pointer dereference was discovered in elf_link_add_object_symbols in elflink.c in the Binary File Descriptor (BFD) library (aka libbfd), as distributed in GNU Binutils 2.31.1. This occurs for a crafted ET_DYN with no program headers. A specially crafted ELF file allows remote attackers to cause a denial of service, as demonstrated by ld.", "scorev2": "4.3", "scorev3": "5.5", "scorev4": "0.0", "modified": "2026-06-17T01:53:16.000", "vector": "LOCAL", "vectorString": "CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H", "detail": "version-not-in-range" }, { "id": "CVE-2018-20657", "status": "Patched", "link": "https://nvd.nist.gov/vuln/detail/CVE-2018-20657", "summary": "The demangle_template function in cplus-dem.c in GNU libiberty, as distributed in GNU Binutils 2.31.1, has a memory leak via a crafted string, leading to a denial of service (memory consumption), as demonstrated by cxxfilt, a related issue to CVE-2018-12698.", "scorev2": "5.0", "scorev3": "7.5", "scorev4": "0.0", "modified": "2026-06-17T01:53:16.000", "vector": "NETWORK", "vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H", "detail": "version-not-in-range" }, { "id": "CVE-2018-20671", "status": "Patched", "link": "https://nvd.nist.gov/vuln/detail/CVE-2018-20671", "summary": "load_specific_debug_section in objdump.c in GNU Binutils through 2.31.1 contains an integer overflow vulnerability that can trigger a heap-based buffer overflow via a crafted section size.", "scorev2": "4.3", "scorev3": "5.5", "scorev4": "0.0", "modified": "2026-06-17T01:53:17.000", "vector": "LOCAL", "vectorString": "CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H", "detail": "fixed-version: Fixed from version >2.31.1" }, { "id": "CVE-2018-20673", "status": "Patched", "link": "https://nvd.nist.gov/vuln/detail/CVE-2018-20673", "summary": "The demangle_template function in cplus-dem.c in GNU libiberty, as distributed in GNU Binutils 2.31.1, contains an integer overflow vulnerability (for \"Create an array for saving the template argument values\") that can trigger a heap-based buffer overflow, as demonstrated by nm.", "scorev2": "4.3", "scorev3": "5.5", "scorev4": "0.0", "modified": "2026-06-17T01:53:17.000", "vector": "LOCAL", "vectorString": "CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H", "detail": "version-not-in-range" }, { "id": "CVE-2018-20712", "status": "Patched", "link": "https://nvd.nist.gov/vuln/detail/CVE-2018-20712", "summary": "A heap-based buffer over-read exists in the function d_expression_1 in cp-demangle.c in GNU libiberty, as distributed in GNU Binutils 2.31.1. A crafted input can cause segmentation faults, leading to denial-of-service, as demonstrated by c++filt.", "scorev2": "4.3", "scorev3": "6.5", "scorev4": "0.0", "modified": "2026-06-17T01:53:20.000", "vector": "NETWORK", "vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H", "detail": "version-not-in-range" }, { "id": "CVE-2018-6323", "status": "Patched", "link": "https://nvd.nist.gov/vuln/detail/CVE-2018-6323", "summary": "The elf_object_p function in elfcode.h in the Binary File Descriptor (BFD) library (aka libbfd), as distributed in GNU Binutils 2.29.1, has an unsigned integer overflow because bfd_size_type multiplication is not used. A crafted ELF file allows remote attackers to cause a denial of service (application crash) or possibly have unspecified other impact.", "scorev2": "6.8", "scorev3": "7.8", "scorev4": "0.0", "modified": "2026-06-17T02:01:39.000", "vector": "LOCAL", "vectorString": "CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H", "detail": "version-not-in-range" }, { "id": "CVE-2018-6543", "status": "Patched", "link": "https://nvd.nist.gov/vuln/detail/CVE-2018-6543", "summary": "In GNU Binutils 2.30, there's an integer overflow in the function load_specific_debug_section() in objdump.c, which results in `malloc()` with 0 size. A crafted ELF file allows remote attackers to cause a denial of service (application crash) or possibly have unspecified other impact.", "scorev2": "6.8", "scorev3": "7.8", "scorev4": "0.0", "modified": "2026-06-17T02:01:59.000", "vector": "LOCAL", "vectorString": "CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H", "detail": "version-not-in-range" }, { "id": "CVE-2018-6759", "status": "Patched", "link": "https://nvd.nist.gov/vuln/detail/CVE-2018-6759", "summary": "The bfd_get_debug_link_info_1 function in opncls.c in the Binary File Descriptor (BFD) library (aka libbfd), as distributed in GNU Binutils 2.30, has an unchecked strnlen operation. Remote attackers could leverage this vulnerability to cause a denial of service (segmentation fault) via a crafted ELF file.", "scorev2": "4.3", "scorev3": "5.5", "scorev4": "0.0", "modified": "2026-06-17T02:02:14.000", "vector": "LOCAL", "vectorString": "CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H", "detail": "version-not-in-range" }, { "id": "CVE-2018-6872", "status": "Patched", "link": "https://nvd.nist.gov/vuln/detail/CVE-2018-6872", "summary": "The elf_parse_notes function in elf.c in the Binary File Descriptor (BFD) library (aka libbfd), as distributed in GNU Binutils 2.30, allows remote attackers to cause a denial of service (out-of-bounds read and segmentation violation) via a note with a large alignment.", "scorev2": "4.3", "scorev3": "5.5", "scorev4": "0.0", "modified": "2026-06-17T02:02:23.000", "vector": "LOCAL", "vectorString": "CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H", "detail": "version-not-in-range" }, { "id": "CVE-2018-7208", "status": "Patched", "link": "https://nvd.nist.gov/vuln/detail/CVE-2018-7208", "summary": "In the coff_pointerize_aux function in coffgen.c in the Binary File Descriptor (BFD) library (aka libbfd), as distributed in GNU Binutils 2.30, an index is not validated, which allows remote attackers to cause a denial of service (segmentation fault) or possibly have unspecified other impact via a crafted file, as demonstrated by objcopy of a COFF object.", "scorev2": "6.8", "scorev3": "7.8", "scorev4": "0.0", "modified": "2026-06-17T02:02:47.000", "vector": "LOCAL", "vectorString": "CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H", "detail": "version-not-in-range" }, { "id": "CVE-2018-7568", "status": "Patched", "link": "https://nvd.nist.gov/vuln/detail/CVE-2018-7568", "summary": "The parse_die function in dwarf1.c in the Binary File Descriptor (BFD) library (aka libbfd), as distributed in GNU Binutils 2.30, allows remote attackers to cause a denial of service (integer overflow and application crash) via an ELF file with corrupt dwarf1 debug information, as demonstrated by nm.", "scorev2": "4.3", "scorev3": "5.5", "scorev4": "0.0", "modified": "2026-06-17T02:03:23.000", "vector": "LOCAL", "vectorString": "CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H", "detail": "version-not-in-range" }, { "id": "CVE-2018-7569", "status": "Patched", "link": "https://nvd.nist.gov/vuln/detail/CVE-2018-7569", "summary": "dwarf2.c in the Binary File Descriptor (BFD) library (aka libbfd), as distributed in GNU Binutils 2.30, allows remote attackers to cause a denial of service (integer underflow or overflow, and application crash) via an ELF file with a corrupt DWARF FORM block, as demonstrated by nm.", "scorev2": "4.3", "scorev3": "5.5", "scorev4": "0.0", "modified": "2026-06-17T02:03:23.000", "vector": "LOCAL", "vectorString": "CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H", "detail": "version-not-in-range" }, { "id": "CVE-2018-7570", "status": "Patched", "link": "https://nvd.nist.gov/vuln/detail/CVE-2018-7570", "summary": "The assign_file_positions_for_non_load_sections function in elf.c in the Binary File Descriptor (BFD) library (aka libbfd), as distributed in GNU Binutils 2.30, allows remote attackers to cause a denial of service (NULL pointer dereference and application crash) via an ELF file with a RELRO segment that lacks a matching LOAD segment, as demonstrated by objcopy.", "scorev2": "4.3", "scorev3": "5.5", "scorev4": "0.0", "modified": "2026-06-17T02:03:23.000", "vector": "LOCAL", "vectorString": "CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H", "detail": "version-not-in-range" }, { "id": "CVE-2018-7642", "status": "Patched", "link": "https://nvd.nist.gov/vuln/detail/CVE-2018-7642", "summary": "The swap_std_reloc_in function in aoutx.h in the Binary File Descriptor (BFD) library (aka libbfd), as distributed in GNU Binutils 2.30, allows remote attackers to cause a denial of service (aout_32_swap_std_reloc_out NULL pointer dereference and application crash) via a crafted ELF file, as demonstrated by objcopy.", "scorev2": "4.3", "scorev3": "5.5", "scorev4": "0.0", "modified": "2026-06-17T02:03:27.000", "vector": "LOCAL", "vectorString": "CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H", "detail": "version-not-in-range" }, { "id": "CVE-2018-7643", "status": "Patched", "link": "https://nvd.nist.gov/vuln/detail/CVE-2018-7643", "summary": "The display_debug_ranges function in dwarf.c in GNU Binutils 2.30 allows remote attackers to cause a denial of service (integer overflow and application crash) or possibly have unspecified other impact via a crafted ELF file, as demonstrated by objdump.", "scorev2": "6.8", "scorev3": "7.8", "scorev4": "0.0", "modified": "2026-06-17T02:03:28.000", "vector": "LOCAL", "vectorString": "CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H", "detail": "version-not-in-range" }, { "id": "CVE-2018-8945", "status": "Patched", "link": "https://nvd.nist.gov/vuln/detail/CVE-2018-8945", "summary": "The bfd_section_from_shdr function in elf.c in the Binary File Descriptor (BFD) library (aka libbfd), as distributed in GNU Binutils 2.30, allows remote attackers to cause a denial of service (segmentation fault) via a large attribute section.", "scorev2": "4.3", "scorev3": "5.5", "scorev4": "0.0", "modified": "2026-06-17T02:05:42.000", "vector": "LOCAL", "vectorString": "CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H", "detail": "version-not-in-range" }, { "id": "CVE-2018-9138", "status": "Patched", "link": "https://nvd.nist.gov/vuln/detail/CVE-2018-9138", "summary": "An issue was discovered in cplus-dem.c in GNU libiberty, as distributed in GNU Binutils 2.29 and 2.30. Stack Exhaustion occurs in the C++ demangling functions provided by libiberty, and there are recursive stack frames: demangle_nested_args, demangle_args, do_arg, and do_type.", "scorev2": "4.3", "scorev3": "5.5", "scorev4": "0.0", "modified": "2026-06-17T02:06:08.000", "vector": "LOCAL", "vectorString": "CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H", "detail": "version-not-in-range" }, { "id": "CVE-2018-9996", "status": "Patched", "link": "https://nvd.nist.gov/vuln/detail/CVE-2018-9996", "summary": "An issue was discovered in cplus-dem.c in GNU libiberty, as distributed in GNU Binutils 2.30. Stack Exhaustion occurs in the C++ demangling functions provided by libiberty, and there are recursive stack frames: demangle_template_value_parm, demangle_integral_value, and demangle_expression.", "scorev2": "4.3", "scorev3": "5.5", "scorev4": "0.0", "modified": "2026-06-17T02:07:28.000", "vector": "LOCAL", "vectorString": "CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H", "detail": "version-not-in-range" }, { "id": "CVE-2019-1010204", "status": "Patched", "link": "https://nvd.nist.gov/vuln/detail/CVE-2019-1010204", "summary": "GNU binutils gold gold v1.11-v1.16 (GNU binutils v2.21-v2.31.1) is affected by: Improper Input Validation, Signed/Unsigned Comparison, Out-of-bounds Read. The impact is: Denial of service. The component is: gold/fileread.cc:497, elfcpp/elfcpp_file.h:644. The attack vector is: An ELF file with an invalid e_shoff header field must be opened.", "scorev2": "4.3", "scorev3": "5.5", "scorev4": "0.0", "modified": "2026-06-17T02:09:51.000", "vector": "LOCAL", "vectorString": "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H", "detail": "fixed-version: Fixed from version >2.31.1" }, { "id": "CVE-2019-12972", "status": "Patched", "link": "https://nvd.nist.gov/vuln/detail/CVE-2019-12972", "summary": "An issue was discovered in the Binary File Descriptor (BFD) library (aka libbfd), as distributed in GNU Binutils 2.32. There is a heap-based buffer over-read in _bfd_doprnt in bfd.c because elf_object_p in elfcode.h mishandles an e_shstrndx section of type SHT_GROUP by omitting a trailing '\\0' character.", "scorev2": "4.3", "scorev3": "5.5", "scorev4": "0.0", "modified": "2026-10-08T22:16:49.000", "vector": "LOCAL", "vectorString": "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H", "detail": "version-not-in-range" }, { "id": "CVE-2019-14250", "status": "Patched", "link": "https://nvd.nist.gov/vuln/detail/CVE-2019-14250", "summary": "An issue was discovered in GNU libiberty, as distributed in GNU Binutils 2.32. simple_object_elf_match in simple-object-elf.c does not check for a zero shstrndx value, leading to an integer overflow and resultant heap-based buffer overflow.", "scorev2": "4.3", "scorev3": "5.5", "scorev4": "0.0", "modified": "2026-10-08T21:17:12.000", "vector": "LOCAL", "vectorString": "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H", "detail": "version-not-in-range" }, { "id": "CVE-2019-14444", "status": "Patched", "link": "https://nvd.nist.gov/vuln/detail/CVE-2019-14444", "summary": "apply_relocations in readelf.c in GNU Binutils 2.32 contains an integer overflow that allows attackers to trigger a write access violation (in byte_put_little_endian function in elfcomm.c) via an ELF file, as demonstrated by readelf.", "scorev2": "4.3", "scorev3": "5.5", "scorev4": "0.0", "modified": "2026-06-17T02:18:26.000", "vector": "LOCAL", "vectorString": "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H", "detail": "version-not-in-range" }, { "id": "CVE-2019-17450", "status": "Patched", "link": "https://nvd.nist.gov/vuln/detail/CVE-2019-17450", "summary": "find_abstract_instance in dwarf2.c in the Binary File Descriptor (BFD) library (aka libbfd), as distributed in GNU Binutils 2.32, allows remote attackers to cause a denial of service (infinite recursion and application crash) via a crafted ELF file.", "scorev2": "4.3", "scorev3": "6.5", "scorev4": "0.0", "modified": "2026-06-17T02:23:58.000", "vector": "NETWORK", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H", "detail": "version-not-in-range" }, { "id": "CVE-2019-17451", "status": "Patched", "link": "https://nvd.nist.gov/vuln/detail/CVE-2019-17451", "summary": "An issue was discovered in the Binary File Descriptor (BFD) library (aka libbfd), as distributed in GNU Binutils 2.32. It is an integer overflow leading to a SEGV in _bfd_dwarf2_find_nearest_line in dwarf2.c, as demonstrated by nm.", "scorev2": "4.3", "scorev3": "6.5", "scorev4": "0.0", "modified": "2026-06-17T02:23:58.000", "vector": "NETWORK", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H", "detail": "version-not-in-range" }, { "id": "CVE-2019-9070", "status": "Patched", "link": "https://nvd.nist.gov/vuln/detail/CVE-2019-9070", "summary": "An issue was discovered in GNU libiberty, as distributed in GNU Binutils 2.32. It is a heap-based buffer over-read in d_expression_1 in cp-demangle.c after many recursive calls.", "scorev2": "6.8", "scorev3": "7.8", "scorev4": "0.0", "modified": "2026-06-17T02:43:00.000", "vector": "LOCAL", "vectorString": "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H", "detail": "version-not-in-range" }, { "id": "CVE-2019-9071", "status": "Patched", "link": "https://nvd.nist.gov/vuln/detail/CVE-2019-9071", "summary": "An issue was discovered in GNU libiberty, as distributed in GNU Binutils 2.32. It is a stack consumption issue in d_count_templates_scopes in cp-demangle.c after many recursive calls.", "scorev2": "4.3", "scorev3": "5.5", "scorev4": "0.0", "modified": "2026-06-17T02:43:01.000", "vector": "LOCAL", "vectorString": "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H", "detail": "version-not-in-range" }, { "id": "CVE-2019-9072", "status": "Patched", "link": "https://nvd.nist.gov/vuln/detail/CVE-2019-9072", "summary": "An issue was discovered in the Binary File Descriptor (BFD) library (aka libbfd), as distributed in GNU Binutils 2.32. It is an attempted excessive memory allocation in setup_group in elf.c.", "scorev2": "4.3", "scorev3": "5.5", "scorev4": "0.0", "modified": "2026-06-17T02:43:01.000", "vector": "LOCAL", "vectorString": "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H", "detail": "version-not-in-range" }, { "id": "CVE-2019-9073", "status": "Patched", "link": "https://nvd.nist.gov/vuln/detail/CVE-2019-9073", "summary": "An issue was discovered in the Binary File Descriptor (BFD) library (aka libbfd), as distributed in GNU Binutils 2.32. It is an attempted excessive memory allocation in _bfd_elf_slurp_version_tables in elf.c.", "scorev2": "4.3", "scorev3": "5.5", "scorev4": "0.0", "modified": "2026-06-17T02:43:01.000", "vector": "LOCAL", "vectorString": "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H", "detail": "version-not-in-range" }, { "id": "CVE-2019-9074", "status": "Patched", "link": "https://nvd.nist.gov/vuln/detail/CVE-2019-9074", "summary": "An issue was discovered in the Binary File Descriptor (BFD) library (aka libbfd), as distributed in GNU Binutils 2.32. It is an out-of-bounds read leading to a SEGV in bfd_getl32 in libbfd.c, when called from pex64_get_runtime_function in pei-x86_64.c.", "scorev2": "4.3", "scorev3": "5.5", "scorev4": "0.0", "modified": "2026-06-17T02:43:01.000", "vector": "LOCAL", "vectorString": "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H", "detail": "version-not-in-range" }, { "id": "CVE-2019-9075", "status": "Patched", "link": "https://nvd.nist.gov/vuln/detail/CVE-2019-9075", "summary": "An issue was discovered in the Binary File Descriptor (BFD) library (aka libbfd), as distributed in GNU Binutils 2.32. It is a heap-based buffer overflow in _bfd_archive_64_bit_slurp_armap in archive64.c.", "scorev2": "6.8", "scorev3": "7.8", "scorev4": "0.0", "modified": "2026-06-17T02:43:01.000", "vector": "LOCAL", "vectorString": "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H", "detail": "version-not-in-range" }, { "id": "CVE-2019-9076", "status": "Patched", "link": "https://nvd.nist.gov/vuln/detail/CVE-2019-9076", "summary": "An issue was discovered in the Binary File Descriptor (BFD) library (aka libbfd), as distributed in GNU Binutils 2.32. It is an attempted excessive memory allocation in elf_read_notes in elf.c.", "scorev2": "4.3", "scorev3": "5.5", "scorev4": "0.0", "modified": "2026-06-17T02:43:01.000", "vector": "LOCAL", "vectorString": "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H", "detail": "version-not-in-range" }, { "id": "CVE-2019-9077", "status": "Patched", "link": "https://nvd.nist.gov/vuln/detail/CVE-2019-9077", "summary": "An issue was discovered in GNU Binutils 2.32. It is a heap-based buffer overflow in process_mips_specific in readelf.c via a malformed MIPS option section.", "scorev2": "6.8", "scorev3": "7.8", "scorev4": "0.0", "modified": "2026-06-17T02:43:01.000", "vector": "LOCAL", "vectorString": "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H", "detail": "version-not-in-range" }, { "id": "CVE-2020-16590", "status": "Patched", "link": "https://nvd.nist.gov/vuln/detail/CVE-2020-16590", "summary": "A double free vulnerability exists in the Binary File Descriptor (BFD) (aka libbrd) in GNU Binutils 2.35 in the process_symbol_table, as demonstrated in readelf, via a crafted file.", "scorev2": "4.3", "scorev3": "5.5", "scorev4": "0.0", "modified": "2026-06-17T02:58:03.000", "vector": "LOCAL", "vectorString": "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H", "detail": "version-not-in-range" }, { "id": "CVE-2020-16591", "status": "Patched", "link": "https://nvd.nist.gov/vuln/detail/CVE-2020-16591", "summary": "A Denial of Service vulnerability exists in the Binary File Descriptor (BFD) in GNU Binutils 2.35 due to an invalid read in process_symbol_table, as demonstrated in readeif.", "scorev2": "4.3", "scorev3": "5.5", "scorev4": "0.0", "modified": "2026-06-17T02:58:03.000", "vector": "LOCAL", "vectorString": "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H", "detail": "version-not-in-range" }, { "id": "CVE-2020-16592", "status": "Patched", "link": "https://nvd.nist.gov/vuln/detail/CVE-2020-16592", "summary": "A use after free issue exists in the Binary File Descriptor (BFD) library (aka libbfd) in GNU Binutils 2.34 in bfd_hash_lookup, as demonstrated in nm-new, that can cause a denial of service via a crafted file.", "scorev2": "4.3", "scorev3": "5.5", "scorev4": "0.0", "modified": "2026-06-17T02:58:03.000", "vector": "LOCAL", "vectorString": "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H", "detail": "version-not-in-range" }, { "id": "CVE-2020-16593", "status": "Patched", "link": "https://nvd.nist.gov/vuln/detail/CVE-2020-16593", "summary": "A Null Pointer Dereference vulnerability exists in the Binary File Descriptor (BFD) library (aka libbfd), as distributed in GNU Binutils 2.35, in scan_unit_for_symbols, as demonstrated in addr2line, that can cause a denial of service via a crafted file.", "scorev2": "4.3", "scorev3": "5.5", "scorev4": "0.0", "modified": "2026-06-17T02:58:03.000", "vector": "LOCAL", "vectorString": "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H", "detail": "version-not-in-range" }, { "id": "CVE-2020-16599", "status": "Patched", "link": "https://nvd.nist.gov/vuln/detail/CVE-2020-16599", "summary": "A Null Pointer Dereference vulnerability exists in the Binary File Descriptor (BFD) library (aka libbfd), as distributed in GNU Binutils 2.35, in _bfd_elf_get_symbol_version_string, as demonstrated in nm-new, that can cause a denial of service via a crafted file.", "scorev2": "4.3", "scorev3": "5.5", "scorev4": "0.0", "modified": "2026-06-17T02:58:03.000", "vector": "LOCAL", "vectorString": "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H", "detail": "version-not-in-range" }, { "id": "CVE-2020-19724", "status": "Patched", "link": "https://nvd.nist.gov/vuln/detail/CVE-2020-19724", "summary": "A memory consumption issue in get_data function in binutils/nm.c in GNU nm before 2.34 allows attackers to cause a denial of service via crafted command.", "scorev2": "0.0", "scorev3": "5.5", "scorev4": "0.0", "modified": "2026-06-17T02:59:56.000", "vector": "LOCAL", "vectorString": "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H", "detail": "fixed-version: Fixed from version 2.34" }, { "id": "CVE-2020-19726", "status": "Patched", "link": "https://nvd.nist.gov/vuln/detail/CVE-2020-19726", "summary": "An issue was discovered in binutils libbfd.c 2.36 relating to the auxiliary symbol data allows attackers to read or write to system memory or cause a denial of service.", "scorev2": "0.0", "scorev3": "8.8", "scorev4": "0.0", "modified": "2026-06-17T02:59:56.000", "vector": "NETWORK", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H", "detail": "version-not-in-range" }, { "id": "CVE-2020-21490", "status": "Patched", "link": "https://nvd.nist.gov/vuln/detail/CVE-2020-21490", "summary": "An issue was discovered in GNU Binutils 2.34. It is a memory leak when process microblaze-dis.c. This one will consume memory on each insn disassembled.", "scorev2": "0.0", "scorev3": "5.5", "scorev4": "0.0", "modified": "2026-06-17T03:03:43.000", "vector": "LOCAL", "vectorString": "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H", "detail": "fixed-version: Fixed from version 2.34" }, { "id": "CVE-2020-35342", "status": "Patched", "link": "https://nvd.nist.gov/vuln/detail/CVE-2020-35342", "summary": "GNU Binutils before 2.34 has an uninitialized-heap vulnerability in function tic4x_print_cond (file opcodes/tic4x-dis.c) which could allow attackers to make an information leak.", "scorev2": "0.0", "scorev3": "7.5", "scorev4": "0.0", "modified": "2026-06-17T03:13:39.000", "vector": "NETWORK", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N", "detail": "fixed-version: Fixed from version 2.34" }, { "id": "CVE-2020-35448", "status": "Patched", "link": "https://nvd.nist.gov/vuln/detail/CVE-2020-35448", "summary": "An issue was discovered in the Binary File Descriptor (BFD) library (aka libbfd), as distributed in GNU Binutils 2.35.1. A heap-based buffer over-read can occur in bfd_getl_signed_32 in libbfd.c because sh_entsize is not validated in _bfd_elf_slurp_secondary_reloc_section in elf.c.", "scorev2": "4.3", "scorev3": "3.3", "scorev4": "0.0", "modified": "2026-06-17T03:13:43.000", "vector": "LOCAL", "vectorString": "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:N", "detail": "version-not-in-range" }, { "id": "CVE-2020-35493", "status": "Patched", "link": "https://nvd.nist.gov/vuln/detail/CVE-2020-35493", "summary": "A flaw exists in binutils in bfd/pef.c. An attacker who is able to submit a crafted PEF file to be parsed by objdump could cause a heap buffer overflow -> out-of-bounds read that could lead to an impact to application availability. This flaw affects binutils versions prior to 2.34.", "scorev2": "4.3", "scorev3": "5.5", "scorev4": "0.0", "modified": "2026-10-08T22:16:59.000", "vector": "LOCAL", "vectorString": "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H", "detail": "fixed-version: Fixed from version 2.34" }, { "id": "CVE-2020-35494", "status": "Patched", "link": "https://nvd.nist.gov/vuln/detail/CVE-2020-35494", "summary": "There's a flaw in binutils /opcodes/tic4x-dis.c. An attacker who is able to submit a crafted input file to be processed by binutils could cause usage of uninitialized memory. The highest threat is to application availability with a lower threat to data confidentiality. This flaw affects binutils versions prior to 2.34.", "scorev2": "5.8", "scorev3": "6.1", "scorev4": "0.0", "modified": "2026-10-08T22:16:59.000", "vector": "LOCAL", "vectorString": "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:H", "detail": "fixed-version: Fixed from version 2.34" }, { "id": "CVE-2020-35495", "status": "Patched", "link": "https://nvd.nist.gov/vuln/detail/CVE-2020-35495", "summary": "There's a flaw in binutils /bfd/pef.c. An attacker who is able to submit a crafted input file to be processed by the objdump program could cause a null pointer dereference. The greatest threat from this flaw is to application availability. This flaw affects binutils versions prior to 2.34.", "scorev2": "4.3", "scorev3": "5.5", "scorev4": "0.0", "modified": "2026-10-08T22:16:59.000", "vector": "LOCAL", "vectorString": "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H", "detail": "fixed-version: Fixed from version 2.34" }, { "id": "CVE-2020-35496", "status": "Patched", "link": "https://nvd.nist.gov/vuln/detail/CVE-2020-35496", "summary": "There's a flaw in bfd_pef_scan_start_address() of bfd/pef.c in binutils which could allow an attacker who is able to submit a crafted file to be processed by objdump to cause a NULL pointer dereference. The greatest threat of this flaw is to application availability. This flaw affects binutils versions prior to 2.34.", "scorev2": "4.3", "scorev3": "5.5", "scorev4": "0.0", "modified": "2026-10-08T22:17:00.000", "vector": "LOCAL", "vectorString": "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H", "detail": "fixed-version: Fixed from version 2.34" }, { "id": "CVE-2020-35507", "status": "Patched", "link": "https://nvd.nist.gov/vuln/detail/CVE-2020-35507", "summary": "There's a flaw in bfd_pef_parse_function_stubs of bfd/pef.c in binutils in versions prior to 2.34 which could allow an attacker who is able to submit a crafted file to be processed by objdump to cause a NULL pointer dereference. The greatest threat of this flaw is to application availability.", "scorev2": "4.3", "scorev3": "5.5", "scorev4": "0.0", "modified": "2026-10-08T22:17:00.000", "vector": "LOCAL", "vectorString": "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H", "detail": "fixed-version: Fixed from version 2.34" }, { "id": "CVE-2021-20197", "status": "Patched", "link": "https://nvd.nist.gov/vuln/detail/CVE-2021-20197", "summary": "There is an open race window when writing output in the following utilities in GNU binutils version 2.35 and earlier:ar, objcopy, strip, ranlib. When these utilities are run as a privileged user (presumably as part of a script updating binaries across different users), an unprivileged user can trick these utilities into getting ownership of arbitrary files through a symlink.", "scorev2": "3.3", "scorev3": "6.3", "scorev4": "0.0", "modified": "2026-06-17T03:33:27.000", "vector": "LOCAL", "vectorString": "CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:N", "detail": "fixed-version: Fixed from version >2.35" }, { "id": "CVE-2021-20284", "status": "Patched", "link": "https://nvd.nist.gov/vuln/detail/CVE-2021-20284", "summary": "A flaw was found in GNU Binutils 2.35.1, where there is a heap-based buffer overflow in _bfd_elf_slurp_secondary_reloc_section in elf.c due to the number of symbols not calculated correctly. The highest threat from this vulnerability is to system availability.", "scorev2": "4.3", "scorev3": "5.5", "scorev4": "0.0", "modified": "2026-06-17T03:33:36.000", "vector": "LOCAL", "vectorString": "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H", "detail": "version-not-in-range" }, { "id": "CVE-2021-20294", "status": "Patched", "link": "https://nvd.nist.gov/vuln/detail/CVE-2021-20294", "summary": "A flaw was found in binutils readelf 2.35 program. An attacker who is able to convince a victim using readelf to read a crafted file could trigger a stack buffer overflow, out-of-bounds write of arbitrary data supplied by the attacker. The highest impact of this flaw is to confidentiality, integrity, and availability.", "scorev2": "6.8", "scorev3": "7.8", "scorev4": "0.0", "modified": "2026-06-17T03:33:37.000", "vector": "LOCAL", "vectorString": "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H", "detail": "fixed-version: Fixed from version 2.35.2" }, { "id": "CVE-2021-32256", "status": "Patched", "link": "https://nvd.nist.gov/vuln/detail/CVE-2021-32256", "summary": "An issue was discovered in GNU libiberty, as distributed in GNU Binutils 2.36. It is a stack-overflow issue in demangle_type in rust-demangle.c.", "scorev2": "0.0", "scorev3": "6.5", "scorev4": "0.0", "modified": "2026-06-17T03:52:50.000", "vector": "NETWORK", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H", "detail": "version-not-in-range" }, { "id": "CVE-2021-3530", "status": "Patched", "link": "https://nvd.nist.gov/vuln/detail/CVE-2021-3530", "summary": "A flaw was discovered in GNU libiberty within demangle_path() in rust-demangle.c, as distributed in GNU Binutils version 2.36. A crafted symbol can cause stack memory to be exhausted leading to a crash.", "scorev2": "5.0", "scorev3": "7.5", "scorev4": "0.0", "modified": "2026-06-17T04:05:18.000", "vector": "NETWORK", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H", "detail": "version-not-in-range" }, { "id": "CVE-2021-3549", "status": "Patched", "link": "https://nvd.nist.gov/vuln/detail/CVE-2021-3549", "summary": "An out of bounds flaw was found in GNU binutils objdump utility version 2.36. An attacker could use this flaw and pass a large section to avr_elf32_load_records_from_section() probably resulting in a crash or in some cases memory corruption. The highest threat from this vulnerability is to integrity as well as system availability.", "scorev2": "5.8", "scorev3": "7.1", "scorev4": "0.0", "modified": "2026-06-17T04:05:19.000", "vector": "LOCAL", "vectorString": "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:H", "detail": "version-not-in-range" }, { "id": "CVE-2021-37322", "status": "Patched", "link": "https://nvd.nist.gov/vuln/detail/CVE-2021-37322", "summary": "GCC c++filt v2.26 was discovered to contain a use-after-free vulnerability via the component cplus-dem.c.", "scorev2": "6.8", "scorev3": "7.8", "scorev4": "0.0", "modified": "2026-06-17T04:00:22.000", "vector": "LOCAL", "vectorString": "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H", "detail": "fixed-version: Fixed from version 2.32" }, { "id": "CVE-2021-45078", "status": "Patched", "link": "https://nvd.nist.gov/vuln/detail/CVE-2021-45078", "summary": "stab_xcoff_builtin_type in stabs.c in GNU Binutils through 2.37 allows attackers to cause a denial of service (heap-based buffer overflow) or possibly have unspecified other impact, as demonstrated by an out-of-bounds write. NOTE: this issue exists because of an incorrect fix for CVE-2018-12699.", "scorev2": "6.8", "scorev3": "7.8", "scorev4": "0.0", "modified": "2026-06-17T04:13:08.000", "vector": "LOCAL", "vectorString": "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H", "detail": "fixed-version: Fixed from version >2.37" }, { "id": "CVE-2021-46174", "status": "Patched", "link": "https://nvd.nist.gov/vuln/detail/CVE-2021-46174", "summary": "Heap-based Buffer Overflow in function bfd_getl32 in Binutils objdump 3.37.", "scorev2": "0.0", "scorev3": "7.5", "scorev4": "0.0", "modified": "2026-06-17T04:14:37.000", "vector": "NETWORK", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H", "detail": "fixed-version: Fixed from version 2.38" }, { "id": "CVE-2022-35205", "status": "Patched", "link": "https://nvd.nist.gov/vuln/detail/CVE-2022-35205", "summary": "An issue was discovered in Binutils readelf 2.38.50, reachable assertion failure in function display_debug_names allows attackers to cause a denial of service.", "scorev2": "0.0", "scorev3": "5.5", "scorev4": "0.0", "modified": "2026-06-17T04:51:34.000", "vector": "LOCAL", "vectorString": "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H", "detail": "version-not-in-range" }, { "id": "CVE-2022-35206", "status": "Patched", "link": "https://nvd.nist.gov/vuln/detail/CVE-2022-35206", "summary": "Null pointer dereference vulnerability in Binutils readelf 2.38.50 via function read_and_display_attr_value in file dwarf.c.", "scorev2": "0.0", "scorev3": "5.5", "scorev4": "0.0", "modified": "2026-06-17T04:51:34.000", "vector": "LOCAL", "vectorString": "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H", "detail": "version-not-in-range" }, { "id": "CVE-2022-38533", "status": "Patched", "link": "https://nvd.nist.gov/vuln/detail/CVE-2022-38533", "summary": "In GNU Binutils before 2.40, there is a heap-buffer-overflow in the error function bfd_getl32 when called from the strip_main function in strip-new via a crafted file.", "scorev2": "0.0", "scorev3": "5.5", "scorev4": "0.0", "modified": "2026-06-17T04:56:47.000", "vector": "LOCAL", "vectorString": "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H", "detail": "fixed-version: Fixed from version >2.39" }, { "id": "CVE-2022-4285", "status": "Patched", "link": "https://nvd.nist.gov/vuln/detail/CVE-2022-4285", "summary": "An illegal memory access flaw was found in the binutils package. Parsing an ELF file containing corrupt symbol version information may result in a denial of service. This issue is the result of an incomplete fix for CVE-2020-16599.", "scorev2": "0.0", "scorev3": "5.5", "scorev4": "0.0", "modified": "2026-06-17T05:20:29.000", "vector": "LOCAL", "vectorString": "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H", "detail": "fixed-version: Fixed from version 2.39-7" }, { "id": "CVE-2022-44840", "status": "Patched", "link": "https://nvd.nist.gov/vuln/detail/CVE-2022-44840", "summary": "Heap buffer overflow vulnerability in binutils readelf before 2.40 via function find_section_in_set in file readelf.c.", "scorev2": "0.0", "scorev3": "7.8", "scorev4": "0.0", "modified": "2026-06-17T05:08:59.000", "vector": "LOCAL", "vectorString": "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H", "detail": "fixed-version: Fixed from version 2.40" }, { "id": "CVE-2022-45703", "status": "Patched", "link": "https://nvd.nist.gov/vuln/detail/CVE-2022-45703", "summary": "Heap buffer overflow vulnerability in binutils readelf before 2.40 via function display_debug_section in file readelf.c.", "scorev2": "0.0", "scorev3": "7.8", "scorev4": "0.0", "modified": "2026-06-17T05:10:36.000", "vector": "LOCAL", "vectorString": "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H", "detail": "fixed-version: Fixed from version 2.40" }, { "id": "CVE-2022-47007", "status": "Patched", "link": "https://nvd.nist.gov/vuln/detail/CVE-2022-47007", "summary": "An issue was discovered function stab_demangle_v3_arg in stabs.c in Binutils 2.34 thru 2.38, allows attackers to cause a denial of service due to memory leaks.", "scorev2": "0.0", "scorev3": "5.5", "scorev4": "0.0", "modified": "2026-06-17T05:12:46.000", "vector": "LOCAL", "vectorString": "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H", "detail": "fixed-version: Fixed from version >2.38" }, { "id": "CVE-2022-47008", "status": "Patched", "link": "https://nvd.nist.gov/vuln/detail/CVE-2022-47008", "summary": "An issue was discovered function make_tempdir, and make_tempname in bucomm.c in Binutils 2.34 thru 2.38, allows attackers to cause a denial of service due to memory leaks.", "scorev2": "0.0", "scorev3": "5.5", "scorev4": "0.0", "modified": "2026-06-17T05:12:46.000", "vector": "LOCAL", "vectorString": "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H", "detail": "fixed-version: Fixed from version >2.38" }, { "id": "CVE-2022-47010", "status": "Patched", "link": "https://nvd.nist.gov/vuln/detail/CVE-2022-47010", "summary": "An issue was discovered function pr_function_type in prdbg.c in Binutils 2.34 thru 2.38, allows attackers to cause a denial of service due to memory leaks.", "scorev2": "0.0", "scorev3": "5.5", "scorev4": "0.0", "modified": "2026-06-17T05:12:46.000", "vector": "LOCAL", "vectorString": "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H", "detail": "fixed-version: Fixed from version >2.38" }, { "id": "CVE-2022-47011", "status": "Patched", "link": "https://nvd.nist.gov/vuln/detail/CVE-2022-47011", "summary": "An issue was discovered function parse_stab_struct_fields in stabs.c in Binutils 2.34 thru 2.38, allows attackers to cause a denial of service due to memory leaks.", "scorev2": "0.0", "scorev3": "5.5", "scorev4": "0.0", "modified": "2026-06-17T05:12:46.000", "vector": "LOCAL", "vectorString": "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H", "detail": "fixed-version: Fixed from version >2.38" }, { "id": "CVE-2022-47673", "status": "Patched", "link": "https://nvd.nist.gov/vuln/detail/CVE-2022-47673", "summary": "An issue was discovered in Binutils addr2line before 2.39.3, function parse_module contains multiple out of bound reads which may cause a denial of service or other unspecified impacts.", "scorev2": "0.0", "scorev3": "7.8", "scorev4": "0.0", "modified": "2026-06-17T05:14:16.000", "vector": "LOCAL", "vectorString": "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H", "detail": "fixed-version: Fixed from version 2.39.3" }, { "id": "CVE-2022-47695", "status": "Patched", "link": "https://nvd.nist.gov/vuln/detail/CVE-2022-47695", "summary": "An issue was discovered Binutils objdump before 2.39.3 allows attackers to cause a denial of service or other unspecified impacts via function bfd_mach_o_get_synthetic_symtab in match-o.c.", "scorev2": "0.0", "scorev3": "7.8", "scorev4": "0.0", "modified": "2026-06-17T05:14:17.000", "vector": "LOCAL", "vectorString": "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H", "detail": "fixed-version: Fixed from version 2.39.3" }, { "id": "CVE-2022-47696", "status": "Patched", "link": "https://nvd.nist.gov/vuln/detail/CVE-2022-47696", "summary": "An issue was discovered Binutils objdump before 2.39.3 allows attackers to cause a denial of service or other unspecified impacts via function compare_symbols.", "scorev2": "0.0", "scorev3": "7.8", "scorev4": "0.0", "modified": "2026-06-17T05:14:17.000", "vector": "LOCAL", "vectorString": "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H", "detail": "fixed-version: Fixed from version 2.39.3" }, { "id": "CVE-2022-48063", "status": "Patched", "link": "https://nvd.nist.gov/vuln/detail/CVE-2022-48063", "summary": "GNU Binutils before 2.40 was discovered to contain an excessive memory consumption vulnerability via the function load_separate_debug_files at dwarf2.c. The attacker could supply a crafted ELF file and cause a DNS attack.", "scorev2": "0.0", "scorev3": "5.5", "scorev4": "0.0", "modified": "2026-06-17T05:14:35.000", "vector": "LOCAL", "vectorString": "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H", "detail": "fixed-version: Fixed from version 2.40" }, { "id": "CVE-2022-48064", "status": "Patched", "link": "https://nvd.nist.gov/vuln/detail/CVE-2022-48064", "summary": "GNU Binutils before 2.40 was discovered to contain an excessive memory consumption vulnerability via the function bfd_dwarf2_find_nearest_line_with_alt at dwarf2.c. The attacker could supply a crafted ELF file and cause a DNS attack.", "scorev2": "0.0", "scorev3": "5.5", "scorev4": "0.0", "modified": "2026-06-17T05:14:35.000", "vector": "LOCAL", "vectorString": "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H", "detail": "fixed-version: Fixed from version 2.40" }, { "id": "CVE-2022-48065", "status": "Patched", "link": "https://nvd.nist.gov/vuln/detail/CVE-2022-48065", "summary": "GNU Binutils before 2.40 was discovered to contain a memory leak vulnerability var the function find_abstract_instance in dwarf2.c.", "scorev2": "0.0", "scorev3": "5.5", "scorev4": "0.0", "modified": "2026-06-17T05:14:35.000", "vector": "LOCAL", "vectorString": "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H", "detail": "fixed-version: Fixed from version 2.40" }, { "id": "CVE-2023-1579", "status": "Patched", "link": "https://nvd.nist.gov/vuln/detail/CVE-2023-1579", "summary": "Heap based buffer overflow in binutils-gdb/bfd/libbfd.c in bfd_getl64.", "scorev2": "0.0", "scorev3": "7.8", "scorev4": "0.0", "modified": "2026-06-17T05:28:18.000", "vector": "LOCAL", "vectorString": "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H", "detail": "version-not-in-range" }, { "id": "CVE-2023-1972", "status": "Patched", "link": "https://nvd.nist.gov/vuln/detail/CVE-2023-1972", "summary": "A potential heap based buffer overflow was found in _bfd_elf_slurp_version_tables() in bfd/elf.c. This may lead to loss of availability.", "scorev2": "0.0", "scorev3": "6.5", "scorev4": "0.0", "modified": "2026-06-17T05:29:10.000", "vector": "NETWORK", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H", "detail": "fixed-version: Fixed from version >2.40" }, { "id": "CVE-2023-25584", "status": "Patched", "link": "https://nvd.nist.gov/vuln/detail/CVE-2023-25584", "summary": "An out-of-bounds read flaw was found in the parse_module function in bfd/vms-alpha.c in Binutils.", "scorev2": "0.0", "scorev3": "7.1", "scorev4": "0.0", "modified": "2026-06-17T05:41:32.000", "vector": "LOCAL", "vectorString": "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:H", "detail": "fixed-version: Fixed from version 2.40" }, { "id": "CVE-2023-25585", "status": "Patched", "link": "https://nvd.nist.gov/vuln/detail/CVE-2023-25585", "summary": "A flaw was found in Binutils. The use of an uninitialized field in the struct module *module may lead to application crash and local denial of service.", "scorev2": "0.0", "scorev3": "5.5", "scorev4": "0.0", "modified": "2026-06-17T05:41:32.000", "vector": "LOCAL", "vectorString": "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H", "detail": "version-not-in-range" }, { "id": "CVE-2023-25586", "status": "Patched", "link": "https://nvd.nist.gov/vuln/detail/CVE-2023-25586", "summary": "A flaw was found in Binutils. A logic fail in the bfd_init_section_decompress_status function may lead to the use of an uninitialized variable that can cause a crash and local denial of service.", "scorev2": "0.0", "scorev3": "5.5", "scorev4": "0.0", "modified": "2026-06-17T05:41:33.000", "vector": "LOCAL", "vectorString": "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H", "detail": "version-not-in-range" }, { "id": "CVE-2023-25588", "status": "Patched", "link": "https://nvd.nist.gov/vuln/detail/CVE-2023-25588", "summary": "A flaw was found in Binutils. The field `the_bfd` of `asymbol`struct is uninitialized in the `bfd_mach_o_get_synthetic_symtab` function, which may lead to an application crash and local denial of service.", "scorev2": "0.0", "scorev3": "5.5", "scorev4": "0.0", "modified": "2026-06-17T05:41:33.000", "vector": "LOCAL", "vectorString": "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H", "detail": "version-not-in-range" }, { "id": "CVE-2025-0840", "status": "Patched", "link": "https://nvd.nist.gov/vuln/detail/CVE-2025-0840", "summary": "A vulnerability, which was classified as problematic, was found in GNU Binutils up to 2.43. This affects the function disassemble_bytes of the file binutils/objdump.c. The manipulation of the argument buf leads to stack-based buffer overflow. It is possible to initiate the attack remotely. The complexity of an attack is rather high. The exploitability is told to be difficult. The exploit has been disclosed to the public and may be used. Upgrading to version 2.44 is able to address this issue. The identifier of the patch is baac6c221e9d69335bf41366a1c7d87d8ab2f893. It is recommended to upgrade the affected component.", "scorev2": "5.1", "scorev3": "7.5", "scorev4": "6.3", "modified": "2026-06-17T08:27:14.000", "vector": "NETWORK", "vectorString": "CVSS:4.0/AV:N/AC:H/AT:N/PR:N/UI:N/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X", "detail": "fixed-version: Fixed from version 2.44" }, { "id": "CVE-2025-11081", "status": "Patched", "link": "https://nvd.nist.gov/vuln/detail/CVE-2025-11081", "summary": "A vulnerability was detected in GNU Binutils 2.45. This issue affects the function dump_dwarf_section of the file binutils/objdump.c. Performing manipulation results in out-of-bounds read. The attack is only possible with local access. The exploit is now public and may be used. The patch is named f87a66db645caf8cc0e6fc87b0c28c78a38af59b. It is suggested to install a patch to address this issue.", "scorev2": "1.7", "scorev3": "5.5", "scorev4": "4.8", "modified": "2026-10-09T10:10:00.000", "vector": "LOCAL", "vectorString": "CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:L/SC:N/SI:N/SA:N/E:P", "detail": "version-not-in-range" }, { "id": "CVE-2025-11082", "status": "Patched", "link": "https://nvd.nist.gov/vuln/detail/CVE-2025-11082", "summary": "A flaw has been found in GNU Binutils 2.45. Impacted is the function _bfd_elf_parse_eh_frame of the file bfd/elf-eh-frame.c of the component Linker. Executing manipulation can lead to heap-based buffer overflow. The attack is restricted to local execution. The exploit has been published and may be used. This patch is called ea1a0737c7692737a644af0486b71e4a392cbca8. A patch should be applied to remediate this issue. The code maintainer replied with \"[f]ixed for 2.46\".", "scorev2": "4.3", "scorev3": "7.8", "scorev4": "4.8", "modified": "2026-10-09T10:10:00.000", "vector": "LOCAL", "vectorString": "CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N/E:P", "detail": "version-not-in-range" }, { "id": "CVE-2025-11083", "status": "Patched", "link": "https://nvd.nist.gov/vuln/detail/CVE-2025-11083", "summary": "A vulnerability has been found in GNU Binutils 2.45. The affected element is the function elf_swap_shdr in the library bfd/elfcode.h of the component Linker. The manipulation leads to heap-based buffer overflow. The attack must be carried out locally. The exploit has been disclosed to the public and may be used. The identifier of the patch is 9ca499644a21ceb3f946d1c179c38a83be084490. To fix this issue, it is recommended to deploy a patch. The code maintainer replied with \"[f]ixed for 2.46\".", "scorev2": "4.3", "scorev3": "7.8", "scorev4": "4.8", "modified": "2026-10-09T10:10:00.000", "vector": "LOCAL", "vectorString": "CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N/E:P", "detail": "version-not-in-range" }, { "id": "CVE-2025-11412", "status": "Patched", "link": "https://nvd.nist.gov/vuln/detail/CVE-2025-11412", "summary": "A vulnerability has been found in GNU Binutils 2.45. This impacts the function bfd_elf_gc_record_vtentry of the file bfd/elflink.c of the component Linker. The manipulation leads to out-of-bounds read. Local access is required to approach this attack. The exploit has been disclosed to the public and may be used. The identifier of the patch is 047435dd988a3975d40c6626a8f739a0b2e154bc. To fix this issue, it is recommended to deploy a patch.", "scorev2": "1.7", "scorev3": "5.5", "scorev4": "4.8", "modified": "2026-10-08T13:10:00.000", "vector": "LOCAL", "vectorString": "CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:L/SC:N/SI:N/SA:N/E:P", "detail": "version-not-in-range" }, { "id": "CVE-2025-11413", "status": "Patched", "link": "https://nvd.nist.gov/vuln/detail/CVE-2025-11413", "summary": "A vulnerability was found in GNU Binutils 2.45. Affected is the function elf_link_add_object_symbols of the file bfd/elflink.c of the component Linker. The manipulation results in out-of-bounds read. The attack needs to be approached locally. The exploit has been made public and could be used. Upgrading to version 2.46 is able to address this issue. The patch is identified as 72efdf166aa0ed72ecc69fc2349af6591a7a19c0. Upgrading the affected component is advised.", "scorev2": "1.7", "scorev3": "5.5", "scorev4": "4.8", "modified": "2026-10-08T13:10:00.000", "vector": "LOCAL", "vectorString": "CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:L/SC:N/SI:N/SA:N/E:P", "detail": "version-not-in-range" }, { "id": "CVE-2025-11414", "status": "Patched", "link": "https://nvd.nist.gov/vuln/detail/CVE-2025-11414", "summary": "A vulnerability was determined in GNU Binutils 2.45. Affected by this vulnerability is the function get_link_hash_entry of the file bfd/elflink.c of the component Linker. This manipulation causes out-of-bounds read. The attack can only be executed locally. The exploit has been publicly disclosed and may be utilized. Upgrading to version 2.46 addresses this issue. Patch name: aeaaa9af6359c8e394ce9cf24911fec4f4d23703. It is advisable to upgrade the affected component.", "scorev2": "1.7", "scorev3": "5.5", "scorev4": "4.8", "modified": "2026-10-08T13:10:00.000", "vector": "LOCAL", "vectorString": "CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:L/SC:N/SI:N/SA:N/E:P", "detail": "version-not-in-range" }, { "id": "CVE-2025-1147", "status": "Patched", "link": "https://nvd.nist.gov/vuln/detail/CVE-2025-1147", "summary": "A vulnerability has been found in GNU Binutils 2.43 and classified as problematic. Affected by this vulnerability is the function __sanitizer::internal_strlen of the file binutils/nm.c of the component nm. The manipulation of the argument const leads to buffer overflow. The attack can be launched remotely. The complexity of an attack is rather high. The exploitation appears to be difficult. The exploit has been disclosed to the public and may be used.", "scorev2": "2.6", "scorev3": "5.3", "scorev4": "2.3", "modified": "2026-06-17T08:38:27.000", "vector": "NETWORK", "vectorString": "CVSS:4.0/AV:N/AC:H/AT:N/PR:N/UI:P/VC:N/VI:N/VA:L/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X", "detail": "version-not-in-range" }, { "id": "CVE-2025-1148", "status": "Patched", "link": "https://nvd.nist.gov/vuln/detail/CVE-2025-1148", "summary": "A vulnerability was found in GNU Binutils 2.43 and classified as problematic. Affected by this issue is the function link_order_scan of the file ld/ldelfgen.c of the component ld. The manipulation leads to memory leak. The attack may be launched remotely. The complexity of an attack is rather high. The exploitation is known to be difficult. The exploit has been disclosed to the public and may be used. It is recommended to apply a patch to fix this issue. The code maintainer explains: \"I'm not going to commit some of the leak fixes I've been working on to the 2.44 branch due to concern that would destabilise ld. All of the reported leaks in this bugzilla have been fixed on binutils master.\"", "scorev2": "2.6", "scorev3": "3.1", "scorev4": "2.3", "modified": "2026-06-17T08:38:27.000", "vector": "NETWORK", "vectorString": "CVSS:4.0/AV:N/AC:H/AT:N/PR:N/UI:P/VC:N/VI:N/VA:L/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X", "detail": "version-not-in-range" }, { "id": "CVE-2025-1149", "status": "Patched", "link": "https://nvd.nist.gov/vuln/detail/CVE-2025-1149", "summary": "A vulnerability was found in GNU Binutils 2.43. It has been classified as problematic. This affects the function xstrdup of the file libiberty/xmalloc.c of the component ld. The manipulation leads to memory leak. It is possible to initiate the attack remotely. The complexity of an attack is rather high. The exploitability is told to be difficult. The exploit has been disclosed to the public and may be used. It is recommended to apply a patch to fix this issue. The code maintainer explains: \"I'm not going to commit some of the leak fixes I've been working on to the 2.44 branch due to concern that would destabilise ld. All of the reported leaks in this bugzilla have been fixed on binutils master.\"", "scorev2": "2.6", "scorev3": "3.1", "scorev4": "2.3", "modified": "2026-06-17T08:38:28.000", "vector": "NETWORK", "vectorString": "CVSS:4.0/AV:N/AC:H/AT:N/PR:N/UI:P/VC:N/VI:N/VA:L/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X", "detail": "version-not-in-range" }, { "id": "CVE-2025-11494", "status": "Patched", "link": "https://nvd.nist.gov/vuln/detail/CVE-2025-11494", "summary": "A vulnerability was found in GNU Binutils 2.45. Impacted is the function _bfd_x86_elf_late_size_sections of the file bfd/elfxx-x86.c of the component Linker. The manipulation results in out-of-bounds read. The attack needs to be approached locally. The exploit has been made public and could be used. The patch is identified as b6ac5a8a5b82f0ae6a4642c8d7149b325f4cc60a. A patch should be applied to remediate this issue.", "scorev2": "1.7", "scorev3": "5.5", "scorev4": "4.8", "modified": "2026-10-08T13:10:00.000", "vector": "LOCAL", "vectorString": "CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:L/SC:N/SI:N/SA:N/E:P", "detail": "version-not-in-range" }, { "id": "CVE-2025-11495", "status": "Patched", "link": "https://nvd.nist.gov/vuln/detail/CVE-2025-11495", "summary": "A vulnerability was determined in GNU Binutils 2.45. The affected element is the function elf_x86_64_relocate_section of the file elf64-x86-64.c of the component Linker. This manipulation causes heap-based buffer overflow. The attack can only be executed locally. The exploit has been publicly disclosed and may be utilized. Patch name: 6b21c8b2ecfef5c95142cbc2c32f185cb1c26ab0. To fix this issue, it is recommended to deploy a patch.", "scorev2": "1.7", "scorev3": "5.5", "scorev4": "4.8", "modified": "2026-10-08T13:10:00.000", "vector": "LOCAL", "vectorString": "CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:L/SC:N/SI:N/SA:N/E:P", "detail": "version-not-in-range" }, { "id": "CVE-2025-1150", "status": "Patched", "link": "https://nvd.nist.gov/vuln/detail/CVE-2025-1150", "summary": "A vulnerability was found in GNU Binutils 2.43. It has been declared as problematic. This vulnerability affects the function bfd_malloc of the file libbfd.c of the component ld. The manipulation leads to memory leak. The attack can be initiated remotely. The complexity of an attack is rather high. The exploitation appears to be difficult. The exploit has been disclosed to the public and may be used. It is recommended to apply a patch to fix this issue. The code maintainer explains: \"I'm not going to commit some of the leak fixes I've been working on to the 2.44 branch due to concern that would destabilise ld. All of the reported leaks in this bugzilla have been fixed on binutils master.\"", "scorev2": "2.6", "scorev3": "3.1", "scorev4": "2.3", "modified": "2026-06-17T08:38:28.000", "vector": "NETWORK", "vectorString": "CVSS:4.0/AV:N/AC:H/AT:N/PR:N/UI:P/VC:N/VI:N/VA:L/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X", "detail": "version-not-in-range" }, { "id": "CVE-2025-1151", "status": "Patched", "link": "https://nvd.nist.gov/vuln/detail/CVE-2025-1151", "summary": "A vulnerability was found in GNU Binutils 2.43. It has been rated as problematic. This issue affects the function xmemdup of the file xmemdup.c of the component ld. The manipulation leads to memory leak. The attack may be initiated remotely. The complexity of an attack is rather high. The exploitation is known to be difficult. The exploit has been disclosed to the public and may be used. It is recommended to apply a patch to fix this issue. The code maintainer explains: \"I'm not going to commit some of the leak fixes I've been working on to the 2.44 branch due to concern that would destabilise ld. All of the reported leaks in this bugzilla have been fixed on binutils master.\"", "scorev2": "2.6", "scorev3": "3.1", "scorev4": "2.3", "modified": "2026-06-17T08:38:28.000", "vector": "NETWORK", "vectorString": "CVSS:4.0/AV:N/AC:H/AT:N/PR:N/UI:P/VC:N/VI:N/VA:L/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X", "detail": "version-not-in-range" }, { "id": "CVE-2025-1152", "status": "Patched", "link": "https://nvd.nist.gov/vuln/detail/CVE-2025-1152", "summary": "A vulnerability classified as problematic has been found in GNU Binutils 2.43. Affected is the function xstrdup of the file xstrdup.c of the component ld. The manipulation leads to memory leak. It is possible to launch the attack remotely. The complexity of an attack is rather high. The exploitability is told to be difficult. The exploit has been disclosed to the public and may be used. It is recommended to apply a patch to fix this issue. The code maintainer explains: \"I'm not going to commit some of the leak fixes I've been working on to the 2.44 branch due to concern that would destabilise ld. All of the reported leaks in this bugzilla have been fixed on binutils master.\"", "scorev2": "2.6", "scorev3": "3.7", "scorev4": "2.3", "modified": "2026-06-17T08:38:28.000", "vector": "NETWORK", "vectorString": "CVSS:4.0/AV:N/AC:H/AT:N/PR:N/UI:P/VC:N/VI:N/VA:L/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X", "detail": "version-not-in-range" }, { "id": "CVE-2025-1153", "status": "Patched", "link": "https://nvd.nist.gov/vuln/detail/CVE-2025-1153", "summary": "A vulnerability classified as problematic was found in GNU Binutils 2.43/2.44. Affected by this vulnerability is the function bfd_set_format of the file format.c. The manipulation leads to memory corruption. The attack can be launched remotely. The complexity of an attack is rather high. The exploitation appears to be difficult. Upgrading to version 2.45 is able to address this issue. The identifier of the patch is 8d97c1a53f3dc9fd8e1ccdb039b8a33d50133150. It is recommended to upgrade the affected component.", "scorev2": "2.6", "scorev3": "5.9", "scorev4": "2.3", "modified": "2026-06-17T08:38:28.000", "vector": "NETWORK", "vectorString": "CVSS:4.0/AV:N/AC:H/AT:N/PR:N/UI:P/VC:N/VI:N/VA:L/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X", "detail": "version-not-in-range" }, { "id": "CVE-2025-1176", "status": "Patched", "link": "https://nvd.nist.gov/vuln/detail/CVE-2025-1176", "summary": "A vulnerability was found in GNU Binutils 2.43 and classified as critical. This issue affects the function _bfd_elf_gc_mark_rsec of the file elflink.c of the component ld. The manipulation leads to heap-based buffer overflow. The attack may be initiated remotely. The complexity of an attack is rather high. The exploitation is known to be difficult. The exploit has been disclosed to the public and may be used. The patch is named f9978defb6fab0bd8583942d97c112b0932ac814. It is recommended to apply a patch to fix this issue.", "scorev2": "5.1", "scorev3": "5.0", "scorev4": "2.3", "modified": "2026-06-17T08:38:31.000", "vector": "NETWORK", "vectorString": "CVSS:4.0/AV:N/AC:H/AT:N/PR:N/UI:P/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X", "detail": "version-not-in-range" }, { "id": "CVE-2025-1178", "status": "Patched", "link": "https://nvd.nist.gov/vuln/detail/CVE-2025-1178", "summary": "A vulnerability was found in GNU Binutils 2.43. It has been declared as problematic. Affected by this vulnerability is the function bfd_putl64 of the file libbfd.c of the component ld. The manipulation leads to memory corruption. The attack can be launched remotely. The complexity of an attack is rather high. The exploitation appears to be difficult. The exploit has been disclosed to the public and may be used. The identifier of the patch is 75086e9de1707281172cc77f178e7949a4414ed0. It is recommended to apply a patch to fix this issue.", "scorev2": "5.1", "scorev3": "5.6", "scorev4": "6.3", "modified": "2026-06-17T08:38:32.000", "vector": "NETWORK", "vectorString": "CVSS:4.0/AV:N/AC:H/AT:N/PR:N/UI:N/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X", "detail": "version-not-in-range" }, { "id": "CVE-2025-1179", "status": "Patched", "link": "https://nvd.nist.gov/vuln/detail/CVE-2025-1179", "summary": "A vulnerability was found in GNU Binutils 2.43. It has been rated as critical. Affected by this issue is the function bfd_putl64 of the file bfd/libbfd.c of the component ld. The manipulation leads to memory corruption. The attack may be launched remotely. The complexity of an attack is rather high. The exploitation is known to be difficult. The exploit has been disclosed to the public and may be used. Upgrading to version 2.44 is able to address this issue. It is recommended to upgrade the affected component. The code maintainer explains, that \"[t]his bug has been fixed at some point between the 2.43 and 2.44 releases\".", "scorev2": "5.1", "scorev3": "7.5", "scorev4": "2.3", "modified": "2026-06-17T08:38:32.000", "vector": "NETWORK", "vectorString": "CVSS:4.0/AV:N/AC:H/AT:N/PR:N/UI:P/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X", "detail": "version-not-in-range" }, { "id": "CVE-2025-1180", "status": "Patched", "link": "https://nvd.nist.gov/vuln/detail/CVE-2025-1180", "summary": "A vulnerability classified as problematic has been found in GNU Binutils 2.43. This affects the function _bfd_elf_write_section_eh_frame of the file bfd/elf-eh-frame.c of the component ld. The manipulation leads to memory corruption. It is possible to initiate the attack remotely. The complexity of an attack is rather high. The exploitability is told to be difficult. The exploit has been disclosed to the public and may be used. It is recommended to apply a patch to fix this issue.", "scorev2": "2.6", "scorev3": "3.1", "scorev4": "2.3", "modified": "2026-06-17T08:38:32.000", "vector": "NETWORK", "vectorString": "CVSS:4.0/AV:N/AC:H/AT:N/PR:N/UI:P/VC:N/VI:N/VA:L/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X", "detail": "version-not-in-range" }, { "id": "CVE-2025-1181", "status": "Patched", "link": "https://nvd.nist.gov/vuln/detail/CVE-2025-1181", "summary": "A vulnerability classified as critical was found in GNU Binutils 2.43. This vulnerability affects the function _bfd_elf_gc_mark_rsec of the file bfd/elflink.c of the component ld. The manipulation leads to memory corruption. The attack can be initiated remotely. The complexity of an attack is rather high. The exploitation appears to be difficult. The exploit has been disclosed to the public and may be used. The name of the patch is 931494c9a89558acb36a03a340c01726545eef24. It is recommended to apply a patch to fix this issue.", "scorev2": "5.1", "scorev3": "5.0", "scorev4": "2.3", "modified": "2026-06-17T08:38:32.000", "vector": "NETWORK", "vectorString": "CVSS:4.0/AV:N/AC:H/AT:N/PR:N/UI:P/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X", "detail": "version-not-in-range" }, { "id": "CVE-2025-1182", "status": "Patched", "link": "https://nvd.nist.gov/vuln/detail/CVE-2025-1182", "summary": "A vulnerability, which was classified as critical, was found in GNU Binutils 2.43. Affected is the function bfd_elf_reloc_symbol_deleted_p of the file bfd/elflink.c of the component ld. The manipulation leads to memory corruption. It is possible to launch the attack remotely. The complexity of an attack is rather high. The exploitability is told to be difficult. The exploit has been disclosed to the public and may be used. The patch is identified as b425859021d17adf62f06fb904797cf8642986ad. It is recommended to apply a patch to fix this issue.", "scorev2": "5.1", "scorev3": "5.0", "scorev4": "2.3", "modified": "2026-06-17T08:38:32.000", "vector": "NETWORK", "vectorString": "CVSS:4.0/AV:N/AC:H/AT:N/PR:N/UI:P/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X", "detail": "version-not-in-range" }, { "id": "CVE-2025-11839", "status": "Patched", "link": "https://nvd.nist.gov/vuln/detail/CVE-2025-11839", "summary": "A security flaw has been discovered in GNU Binutils 2.45. Impacted is the function tg_tag_type of the file prdbg.c. Performing a manipulation results in unchecked return value. The attack needs to be approached locally. The exploit has been released to the public and may be used for attacks.", "scorev2": "1.7", "scorev3": "5.5", "scorev4": "4.8", "modified": "2026-10-09T10:10:00.000", "vector": "LOCAL", "vectorString": "CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:L/SC:N/SI:N/SA:N/E:P", "detail": "version-not-in-range" }, { "id": "CVE-2025-11840", "status": "Patched", "link": "https://nvd.nist.gov/vuln/detail/CVE-2025-11840", "summary": "A weakness has been identified in GNU Binutils 2.45. The affected element is the function vfinfo of the file ldmisc.c. Executing a manipulation can lead to out-of-bounds read. The attack can only be executed locally. The exploit has been made available to the public and could be used for attacks. This patch is called 16357. It is best practice to apply a patch to resolve this issue.", "scorev2": "1.7", "scorev3": "5.5", "scorev4": "4.8", "modified": "2026-10-09T10:10:00.000", "vector": "LOCAL", "vectorString": "CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:L/SC:N/SI:N/SA:N/E:P", "detail": "version-not-in-range" }, { "id": "CVE-2025-3198", "status": "Patched", "link": "https://nvd.nist.gov/vuln/detail/CVE-2025-3198", "summary": "A vulnerability has been found in GNU Binutils 2.43/2.44 and classified as problematic. Affected by this vulnerability is the function display_info of the file binutils/bucomm.c of the component objdump. The manipulation leads to memory leak. An attack has to be approached locally. The exploit has been disclosed to the public and may be used. The patch is named ba6ad3a18cb26b79e0e3b84c39f707535bbc344d. It is recommended to apply a patch to fix this issue.", "scorev2": "1.7", "scorev3": "5.5", "scorev4": "4.8", "modified": "2026-07-14T12:39:00.000", "vector": "LOCAL", "vectorString": "CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:L/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X", "detail": "version-not-in-range" }, { "id": "CVE-2025-5244", "status": "Patched", "link": "https://nvd.nist.gov/vuln/detail/CVE-2025-5244", "summary": "A vulnerability was found in GNU Binutils up to 2.44. It has been rated as critical. Affected by this issue is the function elf_gc_sweep of the file bfd/elflink.c of the component ld. The manipulation leads to memory corruption. An attack has to be approached locally. The exploit has been disclosed to the public and may be used. Upgrading to version 2.45 is able to address this issue. It is recommended to upgrade the affected component.", "scorev2": "4.3", "scorev3": "7.8", "scorev4": "4.8", "modified": "2026-07-14T12:39:05.000", "vector": "LOCAL", "vectorString": "CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X", "detail": "fixed-version: Fixed from version 2.45" }, { "id": "CVE-2025-5245", "status": "Patched", "link": "https://nvd.nist.gov/vuln/detail/CVE-2025-5245", "summary": "A vulnerability classified as critical has been found in GNU Binutils up to 2.44. This affects the function debug_type_samep of the file /binutils/debug.c of the component objdump. The manipulation leads to memory corruption. Local access is required to approach this attack. The exploit has been disclosed to the public and may be used. It is recommended to apply a patch to fix this issue.", "scorev2": "4.3", "scorev3": "7.8", "scorev4": "4.8", "modified": "2026-07-14T12:39:06.000", "vector": "LOCAL", "vectorString": "CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X", "detail": "fixed-version: Fixed from version 2.45" }, { "id": "CVE-2025-66861", "status": "Patched", "link": "https://nvd.nist.gov/vuln/detail/CVE-2025-66861", "summary": "An issue was discovered in function d_unqualified_name in file cp-demangle.c in BinUtils 2.26 allowing attackers to cause a denial of service via crafted PE file.", "scorev2": "0.0", "scorev3": "2.5", "scorev4": "0.0", "modified": "2026-06-17T09:57:16.000", "vector": "LOCAL", "vectorString": "CVSS:3.1/AV:L/AC:H/PR:N/UI:R/S:U/C:N/I:N/A:L", "detail": "version-not-in-range" }, { "id": "CVE-2025-66862", "status": "Patched", "link": "https://nvd.nist.gov/vuln/detail/CVE-2025-66862", "summary": "A buffer overflow vulnerability in function gnu_special in file cplus-dem.c in BinUtils 2.26 allows attackers to cause a denial of service via crafted PE file.", "scorev2": "0.0", "scorev3": "7.5", "scorev4": "0.0", "modified": "2026-10-07T12:10:00.000", "vector": "NETWORK", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H", "detail": "version-not-in-range" }, { "id": "CVE-2025-66863", "status": "Patched", "link": "https://nvd.nist.gov/vuln/detail/CVE-2025-66863", "summary": "An issue was discovered in function d_discriminator in file cp-demangle.c in BinUtils 2.26 allows attackers to cause a denial of service via crafted PE file.", "scorev2": "0.0", "scorev3": "7.5", "scorev4": "0.0", "modified": "2026-06-17T09:57:17.000", "vector": "NETWORK", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H", "detail": "version-not-in-range" }, { "id": "CVE-2025-66864", "status": "Patched", "link": "https://nvd.nist.gov/vuln/detail/CVE-2025-66864", "summary": "An issue was discovered in function d_print_comp_inner in file cp-demangle.c in BinUtils 2.26 allows attackers to cause a denial of service via crafted PE file.", "scorev2": "0.0", "scorev3": "7.5", "scorev4": "0.0", "modified": "2026-06-17T09:57:17.000", "vector": "NETWORK", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H", "detail": "version-not-in-range" }, { "id": "CVE-2025-66865", "status": "Patched", "link": "https://nvd.nist.gov/vuln/detail/CVE-2025-66865", "summary": "An issue was discovered in function d_print_comp_inner in file cp-demangle.c in BinUtils 2.26 allows attackers to cause a denial of service via crafted PE file.", "scorev2": "0.0", "scorev3": "7.5", "scorev4": "0.0", "modified": "2026-06-17T09:57:17.000", "vector": "NETWORK", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H", "detail": "version-not-in-range" }, { "id": "CVE-2025-66866", "status": "Patched", "link": "https://nvd.nist.gov/vuln/detail/CVE-2025-66866", "summary": "An issue was discovered in function d_abi_tags in file cp-demangle.c in BinUtils 2.26 allows attackers to cause a denial of service via crafted PE file.", "scorev2": "0.0", "scorev3": "7.5", "scorev4": "0.0", "modified": "2026-06-17T09:57:17.000", "vector": "NETWORK", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H", "detail": "version-not-in-range" }, { "id": "CVE-2025-69644", "status": "Patched", "link": "https://nvd.nist.gov/vuln/detail/CVE-2025-69644", "summary": "An issue was discovered in Binutils before 2.46. The objdump contains a denial-of-service vulnerability when processing a crafted binary with malformed debug information. A logic flaw in the handling of DWARF location list headers can cause objdump to enter an unbounded loop and produce endless output until manually interrupted. This issue affects versions prior to the upstream fix and allows a local attacker to cause excessive resource consumption by supplying a malicious input file.", "scorev2": "0.0", "scorev3": "5.0", "scorev4": "0.0", "modified": "2026-06-17T10:00:47.000", "vector": "LOCAL", "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:U/C:N/I:N/A:H", "detail": "fixed-version: Fixed from version 2.46" }, { "id": "CVE-2025-69645", "status": "Patched", "link": "https://nvd.nist.gov/vuln/detail/CVE-2025-69645", "summary": "Binutils objdump contains a denial-of-service vulnerability when processing a crafted binary with malformed DWARF debug information. A logic error in the handling of DWARF compilation units can result in an invalid offset_size value being used inside byte_get_little_endian, leading to an abort (SIGABRT). The issue was observed in binutils 2.44. A local attacker can trigger the crash by supplying a malicious input file.", "scorev2": "0.0", "scorev3": "5.5", "scorev4": "0.0", "modified": "2026-06-17T10:00:47.000", "vector": "LOCAL", "vectorString": "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H", "detail": "version-not-in-range" }, { "id": "CVE-2025-69646", "status": "Patched", "link": "https://nvd.nist.gov/vuln/detail/CVE-2025-69646", "summary": "Binutils objdump contains a denial-of-service vulnerability when processing a crafted binary with malformed DWARF debug_rnglists data. A logic error in the handling of the debug_rnglists header can cause objdump to repeatedly print the same warning message and fail to terminate, resulting in an unbounded logging loop until the process is interrupted. The issue was observed in binutils 2.44. A local attacker can exploit this vulnerability by supplying a malicious input file, leading to excessive CPU and I/O usage and preventing completion of the objdump analysis.", "scorev2": "0.0", "scorev3": "5.5", "scorev4": "0.0", "modified": "2026-06-17T10:00:47.000", "vector": "LOCAL", "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H", "detail": "version-not-in-range" }, { "id": "CVE-2025-69647", "status": "Patched", "link": "https://nvd.nist.gov/vuln/detail/CVE-2025-69647", "summary": "GNU Binutils thru 2.45.1 readelf contains a denial-of-service vulnerability when processing a crafted binary with malformed DWARF loclists data. A logic flaw in the DWARF parsing code can cause readelf to repeatedly print the same table output without making forward progress, resulting in an unbounded output loop that never terminates unless externally interrupted. A local attacker can trigger this behavior by supplying a malicious input file, causing excessive CPU and I/O usage and preventing readelf from completing its analysis.", "scorev2": "0.0", "scorev3": "6.2", "scorev4": "0.0", "modified": "2026-06-17T10:00:48.000", "vector": "LOCAL", "vectorString": "CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H", "detail": "fixed-version: Fixed from version >2.45.1" }, { "id": "CVE-2025-69648", "status": "Patched", "link": "https://nvd.nist.gov/vuln/detail/CVE-2025-69648", "summary": "GNU Binutils thru 2.45.1 readelf contains a denial-of-service vulnerability when processing a crafted binary with malformed DWARF .debug_rnglists data. A logic flaw in the DWARF parsing path causes readelf to repeatedly print the same warning message without making forward progress, resulting in a non-terminating output loop that requires manual interruption. No evidence of memory corruption or code execution was observed.", "scorev2": "0.0", "scorev3": "6.2", "scorev4": "0.0", "modified": "2026-06-17T10:00:48.000", "vector": "LOCAL", "vectorString": "CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H", "detail": "fixed-version: Fixed from version >2.45.1" }, { "id": "CVE-2025-69649", "status": "Patched", "link": "https://nvd.nist.gov/vuln/detail/CVE-2025-69649", "summary": "GNU Binutils thru 2.46 readelf contains a null pointer dereference vulnerability when processing a crafted ELF binary with malformed header fields. During relocation processing, an invalid or null section pointer may be passed into display_relocations(), resulting in a segmentation fault (SIGSEGV) and abrupt termination. No evidence of memory corruption beyond the null pointer dereference, nor any possibility of code execution, was observed.", "scorev2": "0.0", "scorev3": "7.5", "scorev4": "0.0", "modified": "2026-06-17T10:00:48.000", "vector": "NETWORK", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H", "detail": "fixed-version: Fixed from version 2.46" }, { "id": "CVE-2025-69650", "status": "Ignored", "link": "https://nvd.nist.gov/vuln/detail/CVE-2025-69650", "summary": "GNU Binutils thru 2.46 readelf contains a double free vulnerability when processing a crafted ELF binary with malformed relocation data. During GOT relocation handling, dump_relocations may return early without initializing the all_relocations array. As a result, process_got_section_contents() may pass an uninitialized r_symbol pointer to free(), leading to a double free and terminating the program with SIGABRT. No evidence of exploitable memory corruption or code execution was observed; the impact is limited to denial of service. NOTE: this is disputed by third parties because the observed behavior occurred only in pre-release code and did not affect any tagged version.", "scorev2": "0.0", "scorev3": "7.5", "scorev4": "0.0", "modified": "2026-06-17T10:00:48.000", "vector": "NETWORK", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H", "detail": "disputed", "description": "vulnerable_code_not_present: observed behavior only in pre-release code, does not affect any tagged version" }, { "id": "CVE-2025-69651", "status": "Ignored", "link": "https://nvd.nist.gov/vuln/detail/CVE-2025-69651", "summary": "GNU Binutils thru 2.46 readelf contains a vulnerability that leads to an invalid pointer free when processing a crafted ELF binary with malformed relocation or symbol data. If dump_relocations returns early due to parsing errors, the internal all_relocations array may remain partially uninitialized. Later, process_got_section_contents() may attempt to free an invalid r_symbol pointer, triggering memory corruption checks in glibc and causing the program to terminate with SIGABRT. No evidence of further memory corruption or code execution was observed; the impact is limited to denial of service. NOTE: this is disputed by third parties because the observed behavior occurred only in pre-release code and did not affect any tagged version.", "scorev2": "0.0", "scorev3": "5.5", "scorev4": "0.0", "modified": "2026-06-17T10:00:48.000", "vector": "LOCAL", "vectorString": "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H", "detail": "disputed", "description": "vulnerable_code_not_present: observed behavior only in pre-release code, does not affect any tagged version" }, { "id": "CVE-2025-69652", "status": "Patched", "link": "https://nvd.nist.gov/vuln/detail/CVE-2025-69652", "summary": "GNU Binutils thru 2.46 readelf contains a vulnerability that leads to an abort (SIGABRT) when processing a crafted ELF binary with malformed DWARF abbrev or debug information. Due to incomplete state cleanup in process_debug_info(), an invalid debug_info_p state may propagate into DWARF attribute parsing routines. When certain malformed attributes result in an unexpected data length of zero, byte_get_little_endian() triggers a fatal abort. No evidence of memory corruption or code execution was observed; the impact is limited to denial of service.", "scorev2": "0.0", "scorev3": "6.2", "scorev4": "0.0", "modified": "2026-06-17T10:00:48.000", "vector": "LOCAL", "vectorString": "CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H", "detail": "fixed-version: Fixed from version 2.46" }, { "id": "CVE-2025-7545", "status": "Patched", "link": "https://nvd.nist.gov/vuln/detail/CVE-2025-7545", "summary": "A vulnerability classified as problematic was found in GNU Binutils 2.45. Affected by this vulnerability is the function copy_section of the file binutils/objcopy.c. The manipulation leads to heap-based buffer overflow. Attacking locally is a requirement. The exploit has been disclosed to the public and may be used. The patch is named 08c3cbe5926e4d355b5cb70bbec2b1eeb40c2944. It is recommended to apply a patch to fix this issue.", "scorev2": "4.3", "scorev3": "7.8", "scorev4": "4.8", "modified": "2026-07-14T12:39:12.000", "vector": "LOCAL", "vectorString": "CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N/E:P", "detail": "version-not-in-range" }, { "id": "CVE-2025-7546", "status": "Patched", "link": "https://nvd.nist.gov/vuln/detail/CVE-2025-7546", "summary": "A vulnerability, which was classified as problematic, has been found in GNU Binutils 2.45. Affected by this issue is the function bfd_elf_set_group_contents of the file bfd/elf.c. The manipulation leads to out-of-bounds write. It is possible to launch the attack on the local host. The exploit has been disclosed to the public and may be used. The name of the patch is 41461010eb7c79fee7a9d5f6209accdaac66cc6b. It is recommended to apply a patch to fix this issue.", "scorev2": "4.3", "scorev3": "7.8", "scorev4": "4.8", "modified": "2026-07-14T12:39:13.000", "vector": "LOCAL", "vectorString": "CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N/E:P", "detail": "version-not-in-range" }, { "id": "CVE-2025-8224", "status": "Patched", "link": "https://nvd.nist.gov/vuln/detail/CVE-2025-8224", "summary": "A vulnerability has been found in GNU Binutils 2.44 and classified as problematic. This vulnerability affects the function bfd_elf_get_str_section of the file bfd/elf.c of the component BFD Library. The manipulation leads to null pointer dereference. Local access is required to approach this attack. The exploit has been disclosed to the public and may be used. The name of the patch is db856d41004301b3a56438efd957ef5cabb91530. It is recommended to apply a patch to fix this issue.", "scorev2": "1.7", "scorev3": "5.5", "scorev4": "4.8", "modified": "2026-07-14T12:39:14.000", "vector": "LOCAL", "vectorString": "CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:L/SC:N/SI:N/SA:N/E:P", "detail": "version-not-in-range" }, { "id": "CVE-2025-8225", "status": "Patched", "link": "https://nvd.nist.gov/vuln/detail/CVE-2025-8225", "summary": "A vulnerability was found in GNU Binutils 2.44 and classified as problematic. This issue affects the function process_debug_info of the file binutils/dwarf.c of the component DWARF Section Handler. The manipulation leads to memory leak. Attacking locally is a requirement. The identifier of the patch is e51fdff7d2e538c0e5accdd65649ac68e6e0ddd4. It is recommended to apply a patch to fix this issue.", "scorev2": "1.7", "scorev3": "3.3", "scorev4": "4.8", "modified": "2026-06-17T10:06:33.000", "vector": "LOCAL", "vectorString": "CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:L/SC:N/SI:N/SA:N/E:P", "detail": "version-not-in-range" }, { "id": "CVE-2026-3441", "status": "Unpatched", "link": "https://nvd.nist.gov/vuln/detail/CVE-2026-3441", "summary": "A flaw was found in GNU Binutils. This heap-based buffer overflow vulnerability, specifically an out-of-bounds read in the bfd linker, allows an attacker to gain access to sensitive information. By convincing a user to process a specially crafted XCOFF object file, an attacker can trigger this flaw, potentially leading to information disclosure or an application level denial of service.", "scorev2": "0.0", "scorev3": "7.1", "scorev4": "0.0", "modified": "2026-09-01T13:19:17.000", "vector": "LOCAL", "vectorString": "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:H", "detail": "no-version-ranges", "description": "Check package version" }, { "id": "CVE-2026-3442", "status": "Unpatched", "link": "https://nvd.nist.gov/vuln/detail/CVE-2026-3442", "summary": "A flaw was found in GNU Binutils. This vulnerability, a heap-based buffer overflow, specifically an out-of-bounds read, exists in the bfd linker component. An attacker could exploit this by convincing a user to process a specially crafted malicious XCOFF object file. Successful exploitation may lead to the disclosure of sensitive information or cause the application to crash, resulting in an application level denial of service.", "scorev2": "0.0", "scorev3": "7.1", "scorev4": "0.0", "modified": "2026-09-01T13:19:17.000", "vector": "LOCAL", "vectorString": "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:H", "detail": "no-version-ranges", "description": "Check package version" }, { "id": "CVE-2026-4647", "status": "Patched", "link": "https://nvd.nist.gov/vuln/detail/CVE-2026-4647", "summary": "A flaw was found in the GNU Binutils BFD library, a widely used component for handling binary files such as object files and executables. The issue occurs when processing specially crafted XCOFF object files, where a relocation type value is not properly validated before being used. This can cause the program to read memory outside of intended bounds. As a result, affected tools may crash or expose unintended memory contents, leading to denial-of-service or limited information disclosure risks.", "scorev2": "0.0", "scorev3": "6.1", "scorev4": "0.0", "modified": "2026-09-01T13:19:40.000", "vector": "LOCAL", "vectorString": "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:H", "detail": "fix-file-included", "patch-file": [ "/home/luan/src/yocto/wrynose/dart-mx8mp/sources/openembedded-core/meta/recipes-devtools/binutils/binutils/CVE-2026-4647.patch" ] }, { "id": "CVE-2026-6844", "status": "Unpatched", "link": "https://nvd.nist.gov/vuln/detail/CVE-2026-6844", "summary": "A flaw was found in the `readelf` utility of the binutils package. A local attacker could exploit two Denial of Service (DoS) vulnerabilities by providing a specially crafted Executable and Linkable Format (ELF) file. One vulnerability, a resource exhaustion (CWE-400), can lead to an out-of-memory condition. The other, a null pointer dereference (CWE-476), can cause a segmentation fault. Both issues can result in the `readelf` utility becoming unresponsive or crashing, leading to a denial of service.", "scorev2": "0.0", "scorev3": "5.5", "scorev4": "0.0", "modified": "2026-09-01T12:17:44.000", "vector": "LOCAL", "vectorString": "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H", "detail": "no-version-ranges", "description": "Check package version" }, { "id": "CVE-2026-6845", "status": "Unpatched", "link": "https://nvd.nist.gov/vuln/detail/CVE-2026-6845", "summary": "A flaw was found in binutils, specifically within the `readelf` utility. This vulnerability allows a local attacker to cause a Denial of Service (DoS) by tricking a user into processing a specially crafted Executable and Linkable Format (ELF) file. The exploitation of this flaw can lead to the system becoming unresponsive due to excessive resource consumption or a program crash.", "scorev2": "0.0", "scorev3": "5.0", "scorev4": "0.0", "modified": "2026-09-01T12:17:45.000", "vector": "LOCAL", "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:U/C:N/I:N/A:H", "detail": "no-version-ranges", "description": "Check package version" }, { "id": "CVE-2026-6846", "status": "Patched", "link": "https://nvd.nist.gov/vuln/detail/CVE-2026-6846", "summary": "A flaw was found in binutils. A heap-buffer-overflow vulnerability exists when processing a specially crafted XCOFF (Extended Common Object File Format) object file during linking. A local attacker could trick a user into processing this malicious file, which could lead to arbitrary code execution, allowing the attacker to run unauthorized commands, or cause a denial of service, making the system unavailable.", "scorev2": "0.0", "scorev3": "7.8", "scorev4": "0.0", "modified": "2026-09-01T12:17:45.000", "vector": "LOCAL", "vectorString": "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H", "detail": "fix-file-included", "patch-file": [ "/home/luan/src/yocto/wrynose/dart-mx8mp/sources/openembedded-core/meta/recipes-devtools/binutils/binutils/CVE-2026-6846.patch" ] }, { "id": "CVE-2026-90801", "status": "Patched", "link": "https://nvd.nist.gov/vuln/detail/CVE-2026-90801", "summary": "A security flaw has been discovered in GNU Binutils 2.47. This impacts the function cache_bwrite of the file bfd/cache.c of the component ld. The manipulation of the argument nbytes results in buffer overflow. The attack requires a local approach. The exploit has been released to the public and may be used for attacks. The project was informed of the problem early through a bug report but has not responded yet.", "scorev2": "4.3", "scorev3": "6.6", "scorev4": "4.8", "modified": "2026-09-18T14:42:27.000", "vector": "LOCAL", "vectorString": "CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N/E:P", "detail": "version-not-in-range: Only affects 2.47 onwards" }, { "id": "CVE-2026-90802", "status": "Patched", "link": "https://nvd.nist.gov/vuln/detail/CVE-2026-90802", "summary": "A weakness has been identified in GNU Binutils 2.47. Affected is the function bfd_putl64 of the file bfd/libbfd.c of the component ld. This manipulation causes null pointer dereference. The attack requires local access. The exploit has been made available to the public and could be used for attacks. The project was informed of the problem early through a bug report but has not responded yet.", "scorev2": "3.2", "scorev3": "4.4", "scorev4": "4.8", "modified": "2026-09-18T14:42:16.000", "vector": "LOCAL", "vectorString": "CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:N/VI:L/VA:L/SC:N/SI:N/SA:N/E:P", "detail": "version-not-in-range: Only affects 2.47 onwards" }, { "id": "CVE-2026-90803", "status": "Patched", "link": "https://nvd.nist.gov/vuln/detail/CVE-2026-90803", "summary": "A security vulnerability has been detected in GNU Binutils 2.47. Affected by this vulnerability is the function elf_x86_64_relocate_section of the file bfd/elf64-x86-64.c of the component ld. Such manipulation of the argument roff leads to buffer overflow. An attack has to be approached locally. The exploit has been disclosed publicly and may be used. Upgrading to version 2.48 addresses this issue. The name of the patch is 471130b39c03623ec6d78ece377ff4da3f6bfe7b. It is recommended to upgrade the affected component.", "scorev2": "4.3", "scorev3": "6.8", "scorev4": "4.8", "modified": "2026-09-18T14:41:59.000", "vector": "LOCAL", "vectorString": "CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N/E:P", "detail": "version-not-in-range: Only affects 2.47 onwards" }, { "id": "CVE-2026-90804", "status": "Patched", "link": "https://nvd.nist.gov/vuln/detail/CVE-2026-90804", "summary": "A vulnerability was detected in GNU Binutils 2.47. Affected by this issue is the function _bfd_elf_write_section_eh_frame of the file bfd/elf-eh-frame.c of the component Eh Frame Section Handler. Performing a manipulation of the argument cie_length/fde_length/augmentation_data_size/write_offset results in buffer overflow. Attacking locally is a requirement. The exploit is now public and may be used. The project was informed of the problem early through a bug report but has not responded yet.", "scorev2": "4.3", "scorev3": "6.1", "scorev4": "2.4", "modified": "2026-09-18T14:42:39.000", "vector": "LOCAL", "vectorString": "CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:P/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N/E:P", "detail": "version-not-in-range: Only affects 2.47 onwards" }, { "id": "CVE-2026-90828", "status": "Patched", "link": "https://nvd.nist.gov/vuln/detail/CVE-2026-90828", "summary": "A security flaw has been discovered in GNU Binutils 2.47. This vulnerability affects the function elf_orphan_compatible of the file ld/ldelf.c of the component ELF Orphan Section Handler. Performing a manipulation results in null pointer dereference. The attack must be initiated from a local position. The exploit has been released to the public and may be used for attacks. The project was informed of the problem early through a bug report but has not responded yet.", "scorev2": "4.3", "scorev3": "6.6", "scorev4": "4.8", "modified": "2026-09-21T17:49:28.000", "vector": "LOCAL", "vectorString": "CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N/E:P", "detail": "version-not-in-range: Only affects 2.47 onwards" }, { "id": "CVE-2026-90829", "status": "Patched", "link": "https://nvd.nist.gov/vuln/detail/CVE-2026-90829", "summary": "A weakness has been identified in GNU Binutils 2.47. This issue affects the function bfd_elf_set_group_contents of the file bfd/elf.c of the component SHT_GROUP Section Handler. Executing a manipulation can lead to null pointer dereference. The attack needs to be launched locally. The exploit has been made available to the public and could be used for attacks. The project was informed of the problem early through a bug report but has not responded yet.", "scorev2": "4.3", "scorev3": "5.3", "scorev4": "4.8", "modified": "2026-09-16T15:28:15.000", "vector": "LOCAL", "vectorString": "CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N/E:P", "detail": "version-not-in-range: Only affects 2.47 onwards" }, { "id": "CVE-2026-90830", "status": "Patched", "link": "https://nvd.nist.gov/vuln/detail/CVE-2026-90830", "summary": "A security vulnerability has been detected in GNU Binutils 2.47. Impacted is the function _bfd_write_merged_section of the file bfd/merge.c of the component Section Merge. The manipulation leads to null pointer dereference. The attack needs to be performed locally. The exploit has been disclosed publicly and may be used. The project was informed of the problem early through a bug report but has not responded yet.", "scorev2": "4.3", "scorev3": "5.3", "scorev4": "4.8", "modified": "2026-09-16T15:28:03.000", "vector": "LOCAL", "vectorString": "CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N/E:P", "detail": "version-not-in-range: Only affects 2.47 onwards" }, { "id": "CVE-2026-90831", "status": "Patched", "link": "https://nvd.nist.gov/vuln/detail/CVE-2026-90831", "summary": "A vulnerability was detected in GNU Binutils 2.47. The affected element is the function _bfd_elf_strtab_delref of the file bfd/elf-strtab.c of the component ELF String Table. The manipulation results in memory corruption. The attack requires a local approach. The exploit is now public and may be used. The project was informed of the problem early through a bug report but has not responded yet.", "scorev2": "4.3", "scorev3": "5.3", "scorev4": "4.8", "modified": "2026-09-16T17:18:18.000", "vector": "LOCAL", "vectorString": "CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N/E:P", "detail": "version-not-in-range: Only affects 2.47 onwards" }, { "id": "CVE-2026-91779", "status": "Patched", "link": "https://nvd.nist.gov/vuln/detail/CVE-2026-91779", "summary": "A security flaw has been discovered in GNU Binutils 2.47. This affects the function _bfd_elf_eh_frame_section_offset of the file bfd/elf-eh-frame.c of the component Eh Frame Handler. Performing a manipulation results in null pointer dereference. The attack must be initiated from a local position. The exploit has been released to the public and may be used for attacks. The project was informed of the problem early through a bug report but has not responded yet.", "scorev2": "1.7", "scorev3": "3.3", "scorev4": "4.8", "modified": "2026-09-16T15:28:26.000", "vector": "LOCAL", "vectorString": "CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:L/SC:N/SI:N/SA:N/E:P", "detail": "version-not-in-range: Only affects 2.47 onwards" }, { "id": "CVE-2026-91780", "status": "Patched", "link": "https://nvd.nist.gov/vuln/detail/CVE-2026-91780", "summary": "A weakness has been identified in GNU Binutils 2.47. This impacts the function elf_link_add_object_symbols of the file bfd/elflink.c. Executing a manipulation can lead to null pointer dereference. The attack needs to be launched locally. The exploit has been made available to the public and could be used for attacks. The project was informed of the problem early through a bug report but has not responded yet.", "scorev2": "1.7", "scorev3": "3.3", "scorev4": "4.8", "modified": "2026-09-16T15:28:30.000", "vector": "LOCAL", "vectorString": "CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:L/SC:N/SI:N/SA:N/E:P", "detail": "version-not-in-range: Only affects 2.47 onwards" }, { "id": "CVE-2026-91781", "status": "Patched", "link": "https://nvd.nist.gov/vuln/detail/CVE-2026-91781", "summary": "A security vulnerability has been detected in GNU Binutils 2.47. Affected is the function elf_x86_64_common_section_index of the file bfd/elf64-x86-64.c of the component ELF Section Handler. The manipulation leads to null pointer dereference. The attack needs to be performed locally. The exploit has been disclosed publicly and may be used. Upgrading to version 2.48 is able to address this issue. The identifier of the patch is 7322e9bc30cb282575a701c307851fd3d66fee68. It is suggested to upgrade the affected component.", "scorev2": "1.7", "scorev3": "3.3", "scorev4": "4.8", "modified": "2026-09-16T15:28:36.000", "vector": "LOCAL", "vectorString": "CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:L/SC:N/SI:N/SA:N/E:P", "detail": "version-not-in-range: Only affects 2.47 onwards" }, { "id": "CVE-2026-91782", "status": "Patched", "link": "https://nvd.nist.gov/vuln/detail/CVE-2026-91782", "summary": "A vulnerability was detected in GNU Binutils 2.47. Affected by this vulnerability is the function elf_x86_allocate_dynrelocs of the file bfd/elfxx-x86.c of the component Dynamic Relocation Allocation. The manipulation results in null pointer dereference. The attack requires a local approach. The exploit is now public and may be used. Upgrading to version 2.48 addresses this issue. The patch is identified as d1268210b6f6/471130b39c0/283d3198bed/0a84e560216/a692a633d40. Upgrading the affected component is recommended.", "scorev2": "1.7", "scorev3": "3.3", "scorev4": "4.8", "modified": "2026-09-17T14:17:54.000", "vector": "LOCAL", "vectorString": "CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:L/SC:N/SI:N/SA:N/E:P", "detail": "version-not-in-range: Only affects 2.47 onwards" } ], "cpes": [ "cpe:2.3:*:*:binutils:2.46.1:*:*:*:*:*:*:*" ] }, { "name": "bluealsa", "layer": "multimedia-layer", "version": "4.3.0", "products": [ { "product": "bluealsa", "cvesInRecord": "No" } ], "issue": [], "cpes": [ "cpe:2.3:*:*:bluealsa:4.3.0:*:*:*:*:*:*:*" ] }, { "name": "bluez5", "layer": "core", "version": "5.86", "products": [ { "product": "bluez", "cvesInRecord": "Yes" } ], "issue": [ { "id": "CVE-2005-2547", "status": "Patched", "link": "https://nvd.nist.gov/vuln/detail/CVE-2005-2547", "summary": "security.c in hcid for BlueZ 2.16, 2.17, and 2.18 allows remote attackers to execute arbitrary commands via shell metacharacters in the Bluetooth device name when invoking the PIN helper.", "scorev2": "7.5", "scorev3": "0.0", "scorev4": "0.0", "modified": "2026-06-16T22:15:10.000", "vector": "NETWORK", "vectorString": "AV:N/AC:L/Au:N/C:P/I:P/A:P", "detail": "version-not-in-range" }, { "id": "CVE-2006-6899", "status": "Patched", "link": "https://nvd.nist.gov/vuln/detail/CVE-2006-6899", "summary": "hidd in BlueZ (bluez-utils) before 2.25 allows remote attackers to obtain control of the (1) Mouse and (2) Keyboard Human Interface Device (HID) via a certain configuration of two HID (PSM) endpoints, operating as a server, aka HidAttack.", "scorev2": "5.4", "scorev3": "0.0", "scorev4": "0.0", "modified": "2026-06-16T22:34:00.000", "vector": "ADJACENT_NETWORK", "vectorString": "AV:A/AC:M/Au:N/C:P/I:P/A:P", "detail": "fixed-version: Fixed from version >2.24" }, { "id": "CVE-2016-7837", "status": "Patched", "link": "https://nvd.nist.gov/vuln/detail/CVE-2016-7837", "summary": "Buffer overflow in BlueZ 5.41 and earlier allows an attacker to execute arbitrary code via the parse_line function used in some userland utilities.", "scorev2": "4.6", "scorev3": "7.8", "scorev4": "0.0", "modified": "2026-06-17T00:53:35.000", "vector": "LOCAL", "vectorString": "CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H", "detail": "fixed-version: Fixed from version >5.41" }, { "id": "CVE-2016-9797", "status": "Patched", "link": "https://nvd.nist.gov/vuln/detail/CVE-2016-9797", "summary": "In BlueZ 5.42, a buffer over-read was observed in \"l2cap_dump\" function in \"tools/parser/l2cap.c\" source file. This issue can be triggered by processing a corrupted dump file and will result in hcidump crash.", "scorev2": "5.0", "scorev3": "5.3", "scorev4": "0.0", "modified": "2026-06-17T00:56:33.000", "vector": "NETWORK", "vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L", "detail": "version-not-in-range" }, { "id": "CVE-2016-9798", "status": "Patched", "link": "https://nvd.nist.gov/vuln/detail/CVE-2016-9798", "summary": "In BlueZ 5.42, a use-after-free was identified in \"conf_opt\" function in \"tools/parser/l2cap.c\" source file. This issue can be triggered by processing a corrupted dump file and will result in hcidump crash.", "scorev2": "5.0", "scorev3": "5.3", "scorev4": "0.0", "modified": "2026-06-17T00:56:33.000", "vector": "NETWORK", "vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L", "detail": "version-not-in-range" }, { "id": "CVE-2016-9799", "status": "Patched", "link": "https://nvd.nist.gov/vuln/detail/CVE-2016-9799", "summary": "In BlueZ 5.42, a buffer overflow was observed in \"pklg_read_hci\" function in \"btsnoop.c\" source file. This issue can be triggered by processing a corrupted dump file and will result in btmon crash.", "scorev2": "5.0", "scorev3": "5.3", "scorev4": "0.0", "modified": "2026-06-17T00:56:33.000", "vector": "NETWORK", "vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L", "detail": "version-not-in-range" }, { "id": "CVE-2016-9800", "status": "Patched", "link": "https://nvd.nist.gov/vuln/detail/CVE-2016-9800", "summary": "In BlueZ 5.42, a buffer overflow was observed in \"pin_code_reply_dump\" function in \"tools/parser/hci.c\" source file. The issue exists because \"pin\" array is overflowed by supplied parameter due to lack of boundary checks on size of the buffer from frame \"pin_code_reply_cp *cp\" parameter.", "scorev2": "5.0", "scorev3": "5.3", "scorev4": "0.0", "modified": "2026-06-17T00:56:33.000", "vector": "NETWORK", "vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L", "detail": "version-not-in-range" }, { "id": "CVE-2016-9801", "status": "Patched", "link": "https://nvd.nist.gov/vuln/detail/CVE-2016-9801", "summary": "In BlueZ 5.42, a buffer overflow was observed in \"set_ext_ctrl\" function in \"tools/parser/l2cap.c\" source file when processing corrupted dump file.", "scorev2": "5.0", "scorev3": "5.3", "scorev4": "0.0", "modified": "2026-06-17T00:56:34.000", "vector": "NETWORK", "vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L", "detail": "version-not-in-range" }, { "id": "CVE-2016-9802", "status": "Patched", "link": "https://nvd.nist.gov/vuln/detail/CVE-2016-9802", "summary": "In BlueZ 5.42, a buffer over-read was identified in \"l2cap_packet\" function in \"monitor/packet.c\" source file. This issue can be triggered by processing a corrupted dump file and will result in btmon crash.", "scorev2": "5.0", "scorev3": "5.3", "scorev4": "0.0", "modified": "2026-06-17T00:56:34.000", "vector": "NETWORK", "vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L", "detail": "version-not-in-range" }, { "id": "CVE-2016-9803", "status": "Patched", "link": "https://nvd.nist.gov/vuln/detail/CVE-2016-9803", "summary": "In BlueZ 5.42, an out-of-bounds read was observed in \"le_meta_ev_dump\" function in \"tools/parser/hci.c\" source file. This issue exists because 'subevent' (which is used to read correct element from 'ev_le_meta_str' array) is overflowed.", "scorev2": "5.0", "scorev3": "5.3", "scorev4": "0.0", "modified": "2026-06-17T00:56:34.000", "vector": "NETWORK", "vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L", "detail": "version-not-in-range" }, { "id": "CVE-2016-9804", "status": "Patched", "link": "https://nvd.nist.gov/vuln/detail/CVE-2016-9804", "summary": "In BlueZ 5.42, a buffer overflow was observed in \"commands_dump\" function in \"tools/parser/csr.c\" source file. The issue exists because \"commands\" array is overflowed by supplied parameter due to lack of boundary checks on size of the buffer from frame \"frm->ptr\" parameter. This issue can be triggered by processing a corrupted dump file and will result in hcidump crash.", "scorev2": "5.0", "scorev3": "5.3", "scorev4": "0.0", "modified": "2026-06-17T00:56:34.000", "vector": "NETWORK", "vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L", "detail": "version-not-in-range" }, { "id": "CVE-2016-9917", "status": "Patched", "link": "https://nvd.nist.gov/vuln/detail/CVE-2016-9917", "summary": "In BlueZ 5.42, a buffer overflow was observed in \"read_n\" function in \"tools/hcidump.c\" source file. This issue can be triggered by processing a corrupted dump file and will result in hcidump crash.", "scorev2": "5.0", "scorev3": "7.5", "scorev4": "0.0", "modified": "2026-06-17T00:56:46.000", "vector": "NETWORK", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H", "detail": "version-not-in-range" }, { "id": "CVE-2016-9918", "status": "Patched", "link": "https://nvd.nist.gov/vuln/detail/CVE-2016-9918", "summary": "In BlueZ 5.42, an out-of-bounds read was identified in \"packet_hexdump\" function in \"monitor/packet.c\" source file. This issue can be triggered by processing a corrupted dump file and will result in btmon crash.", "scorev2": "5.0", "scorev3": "7.5", "scorev4": "0.0", "modified": "2026-06-17T00:56:46.000", "vector": "NETWORK", "vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H", "detail": "version-not-in-range" }, { "id": "CVE-2017-1000250", "status": "Patched", "link": "https://nvd.nist.gov/vuln/detail/CVE-2017-1000250", "summary": "All versions of the SDP server in BlueZ 5.46 and earlier are vulnerable to an information disclosure vulnerability which allows remote attackers to obtain sensitive information from the bluetoothd process memory. This vulnerability lies in the processing of SDP search attribute requests.", "scorev2": "3.3", "scorev3": "6.5", "scorev4": "0.0", "modified": "2026-06-17T00:58:58.000", "vector": "ADJACENT_NETWORK", "vectorString": "CVSS:3.0/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N", "detail": "fixed-version: Fixed from version >5.46" }, { "id": "CVE-2018-10910", "status": "Patched", "link": "https://nvd.nist.gov/vuln/detail/CVE-2018-10910", "summary": "A bug in Bluez may allow for the Bluetooth Discoverable state being set to on when no Bluetooth agent is registered with the system. This situation could lead to the unauthorized pairing of certain Bluetooth devices without any form of authentication. Versions before bluez 5.51 are vulnerable.", "scorev2": "2.1", "scorev3": "4.5", "scorev4": "0.0", "modified": "2026-06-17T01:34:53.000", "vector": "LOCAL", "vectorString": "CVSS:3.0/AV:L/AC:H/PR:N/UI:R/S:U/C:L/I:L/A:L", "detail": "fixed-version: Fixed from version 5.51" }, { "id": "CVE-2019-8921", "status": "Patched", "link": "https://nvd.nist.gov/vuln/detail/CVE-2019-8921", "summary": "An issue was discovered in bluetoothd in BlueZ through 5.48. The vulnerability lies in the handling of a SVC_ATTR_REQ by the SDP implementation. By crafting a malicious CSTATE, it is possible to trick the server into returning more bytes than the buffer actually holds, resulting in leaking arbitrary heap data. The root cause can be found in the function service_attr_req of sdpd-request.c. The server does not check whether the CSTATE data is the same in consecutive requests, and instead simply trusts that it is the same.", "scorev2": "3.3", "scorev3": "6.5", "scorev4": "0.0", "modified": "2026-06-17T02:42:47.000", "vector": "ADJACENT_NETWORK", "vectorString": "CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N", "detail": "fixed-version: Fixed from version >5.48" }, { "id": "CVE-2019-8922", "status": "Patched", "link": "https://nvd.nist.gov/vuln/detail/CVE-2019-8922", "summary": "A heap-based buffer overflow was discovered in bluetoothd in BlueZ through 5.48. There isn't any check on whether there is enough space in the destination buffer. The function simply appends all data passed to it. The values of all attributes that are requested are appended to the output buffer. There are no size checks whatsoever, resulting in a simple heap overflow if one can craft a request where the response is large enough to overflow the preallocated buffer. This issue exists in service_attr_req gets called by process_request (in sdpd-request.c), which also allocates the response buffer.", "scorev2": "5.8", "scorev3": "8.8", "scorev4": "0.0", "modified": "2026-06-17T02:42:47.000", "vector": "ADJACENT_NETWORK", "vectorString": "CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H", "detail": "fixed-version: Fixed from version >5.48" }, { "id": "CVE-2020-0556", "status": "Patched", "link": "https://nvd.nist.gov/vuln/detail/CVE-2020-0556", "summary": "Improper access control in subsystem for BlueZ before version 5.54 may allow an unauthenticated user to potentially enable escalation of privilege and denial of service via adjacent access", "scorev2": "5.8", "scorev3": "7.1", "scorev4": "0.0", "modified": "2026-06-17T02:46:03.000", "vector": "ADJACENT_NETWORK", "vectorString": "CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:C/C:L/I:L/A:L", "detail": "fixed-version: Fixed from version 5.54" }, { "id": "CVE-2020-12351", "status": "Ignored", "link": "https://nvd.nist.gov/vuln/detail/CVE-2020-12351", "summary": "Improper input validation in BlueZ may allow an unauthenticated user to potentially enable escalation of privilege via adjacent access.", "scorev2": "5.8", "scorev3": "8.8", "scorev4": "0.0", "modified": "2026-06-17T02:51:40.000", "vector": "ADJACENT_NETWORK", "vectorString": "CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H", "detail": "cpe-incorrect", "description": "component_not_present: This issue has kernel fixes rather than bluez fixes" }, { "id": "CVE-2020-12352", "status": "Ignored", "link": "https://nvd.nist.gov/vuln/detail/CVE-2020-12352", "summary": "Improper access control in BlueZ may allow an unauthenticated user to potentially enable information disclosure via adjacent access.", "scorev2": "3.3", "scorev3": "6.5", "scorev4": "0.0", "modified": "2026-06-17T02:51:40.000", "vector": "ADJACENT_NETWORK", "vectorString": "CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N", "detail": "cpe-incorrect", "description": "component_not_present: This issue has kernel fixes rather than bluez fixes" }, { "id": "CVE-2020-24490", "status": "Ignored", "link": "https://nvd.nist.gov/vuln/detail/CVE-2020-24490", "summary": "Improper buffer restrictions in BlueZ may allow an unauthenticated user to potentially enable denial of service via adjacent access. This affects all Linux kernel versions that support BlueZ.", "scorev2": "3.3", "scorev3": "6.5", "scorev4": "0.0", "modified": "2026-06-17T03:05:40.000", "vector": "ADJACENT_NETWORK", "vectorString": "CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H", "detail": "cpe-incorrect", "description": "component_not_present: This issue has kernel fixes rather than bluez fixes" }, { "id": "CVE-2020-27153", "status": "Patched", "link": "https://nvd.nist.gov/vuln/detail/CVE-2020-27153", "summary": "In BlueZ before 5.55, a double free was found in the gatttool disconnect_cb() routine from shared/att.c. A remote attacker could potentially cause a denial of service or code execution, during service discovery, due to a redundant disconnect MGMT event.", "scorev2": "7.5", "scorev3": "8.6", "scorev4": "0.0", "modified": "2026-06-17T03:08:52.000", "vector": "NETWORK", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:H", "detail": "fixed-version: Fixed from version 5.55" }, { "id": "CVE-2021-0129", "status": "Patched", "link": "https://nvd.nist.gov/vuln/detail/CVE-2021-0129", "summary": "Improper access control in BlueZ may allow an authenticated user to potentially enable information disclosure via adjacent access.", "scorev2": "2.7", "scorev3": "5.7", "scorev4": "0.0", "modified": "2026-06-17T03:29:16.000", "vector": "ADJACENT_NETWORK", "vectorString": "CVSS:3.1/AV:A/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N", "detail": "fixed-version: Fixed from version 5.57" }, { "id": "CVE-2021-3588", "status": "Patched", "link": "https://nvd.nist.gov/vuln/detail/CVE-2021-3588", "summary": "The cli_feat_read_cb() function in src/gatt-database.c does not perform bounds checks on the 'offset' variable before using it as an index into an array for reading.", "scorev2": "2.1", "scorev3": "3.3", "scorev4": "0.0", "modified": "2026-06-17T04:05:23.000", "vector": "LOCAL", "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N", "detail": "fixed-version: Fixed from version 5.56" }, { "id": "CVE-2021-3658", "status": "Patched", "link": "https://nvd.nist.gov/vuln/detail/CVE-2021-3658", "summary": "bluetoothd from bluez incorrectly saves adapters' Discoverable status when a device is powered down, and restores it when powered up. If a device is powered down while discoverable, it will be discoverable when powered on again. This could lead to inadvertent exposure of the bluetooth stack to physically nearby attackers.", "scorev2": "3.3", "scorev3": "6.5", "scorev4": "0.0", "modified": "2026-06-17T04:05:31.000", "vector": "ADJACENT_NETWORK", "vectorString": "CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N", "detail": "fixed-version: Fixed from version 5.61" }, { "id": "CVE-2021-41229", "status": "Patched", "link": "https://nvd.nist.gov/vuln/detail/CVE-2021-41229", "summary": "BlueZ is a Bluetooth protocol stack for Linux. In affected versions a vulnerability exists in sdp_cstate_alloc_buf which allocates memory which will always be hung in the singly linked list of cstates and will not be freed. This will cause a memory leak over time. The data can be a very large object, which can be caused by an attacker continuously sending sdp packets and this may cause the service of the target device to crash.", "scorev2": "3.3", "scorev3": "6.5", "scorev4": "0.0", "modified": "2026-06-17T04:08:08.000", "vector": "ADJACENT_NETWORK", "vectorString": "CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H", "detail": "version-not-in-range" }, { "id": "CVE-2021-43400", "status": "Patched", "link": "https://nvd.nist.gov/vuln/detail/CVE-2021-43400", "summary": "An issue was discovered in gatt-database.c in BlueZ 5.61. A use-after-free can occur when a client disconnects during D-Bus processing of a WriteValue call.", "scorev2": "6.4", "scorev3": "9.1", "scorev4": "0.0", "modified": "2026-06-17T04:10:55.000", "vector": "NETWORK", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N", "detail": "version-not-in-range" }, { "id": "CVE-2022-0204", "status": "Patched", "link": "https://nvd.nist.gov/vuln/detail/CVE-2022-0204", "summary": "A heap overflow vulnerability was found in bluez in versions prior to 5.63. An attacker with local network access could pass specially crafted files causing an application to halt or crash, leading to a denial of service.", "scorev2": "5.8", "scorev3": "8.8", "scorev4": "0.0", "modified": "2026-06-17T04:20:08.000", "vector": "ADJACENT_NETWORK", "vectorString": "CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H", "detail": "fixed-version: Fixed from version 5.63" }, { "id": "CVE-2022-3563", "status": "Patched", "link": "https://nvd.nist.gov/vuln/detail/CVE-2022-3563", "summary": "A vulnerability classified as problematic has been found in Linux Kernel. Affected is the function read_50_controller_cap_complete of the file tools/mgmt-tester.c of the component BlueZ. The manipulation of the argument cap_len leads to null pointer dereference. It is recommended to apply a patch to fix this issue. VDB-211086 is the identifier assigned to this vulnerability.", "scorev2": "0.0", "scorev3": "5.7", "scorev4": "0.0", "modified": "2026-06-17T04:59:45.000", "vector": "ADJACENT_NETWORK", "vectorString": "CVSS:3.1/AV:A/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H", "detail": "fixed-version: Fixed from version 5.65" }, { "id": "CVE-2022-3637", "status": "Patched", "link": "https://nvd.nist.gov/vuln/detail/CVE-2022-3637", "summary": "A vulnerability has been found in Linux Kernel and classified as problematic. This vulnerability affects the function jlink_init of the file monitor/jlink.c of the component BlueZ. The manipulation leads to denial of service. It is recommended to apply a patch to fix this issue. The identifier of this vulnerability is VDB-211936.", "scorev2": "0.0", "scorev3": "5.5", "scorev4": "0.0", "modified": "2026-06-17T04:59:55.000", "vector": "LOCAL", "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H", "detail": "fixed-version: Fixed from version 5.65" }, { "id": "CVE-2022-39176", "status": "Patched", "link": "https://nvd.nist.gov/vuln/detail/CVE-2022-39176", "summary": "BlueZ before 5.59 allows physically proximate attackers to obtain sensitive information because profiles/audio/avrcp.c does not validate params_len.", "scorev2": "0.0", "scorev3": "8.8", "scorev4": "0.0", "modified": "2026-06-17T04:57:51.000", "vector": "ADJACENT_NETWORK", "vectorString": "CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H", "detail": "fixed-version: Fixed from version 5.59" }, { "id": "CVE-2022-39177", "status": "Patched", "link": "https://nvd.nist.gov/vuln/detail/CVE-2022-39177", "summary": "BlueZ before 5.59 allows physically proximate attackers to cause a denial of service because malformed and invalid capabilities can be processed in profiles/audio/avdtp.c.", "scorev2": "0.0", "scorev3": "8.8", "scorev4": "0.0", "modified": "2026-06-17T04:57:51.000", "vector": "ADJACENT_NETWORK", "vectorString": "CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H", "detail": "fixed-version: Fixed from version 5.59" }, { "id": "CVE-2023-27349", "status": "Patched", "link": "https://nvd.nist.gov/vuln/detail/CVE-2023-27349", "summary": "BlueZ Audio Profile AVRCP Improper Validation of Array Index Remote Code Execution Vulnerability. This vulnerability allows network-adjacent attackers to execute arbitrary code via Bluetooth on affected installations of BlueZ. User interaction is required to exploit this vulnerability in that the target must connect to a malicious device.\n\nThe specific flaw exists within the handling of the AVRCP protocol. The issue results from the lack of proper validation of user-supplied data, which can result in a write past the end of an allocated buffer. An attacker can leverage this vulnerability to execute code in the context of root. Was ZDI-CAN-19908.", "scorev2": "0.0", "scorev3": "8.0", "scorev4": "0.0", "modified": "2026-06-17T05:44:50.000", "vector": "ADJACENT_NETWORK", "vectorString": "CVSS:3.1/AV:A/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H", "detail": "version-not-in-range" }, { "id": "CVE-2023-44431", "status": "Patched", "link": "https://nvd.nist.gov/vuln/detail/CVE-2023-44431", "summary": "BlueZ Audio Profile AVRCP Stack-based Buffer Overflow Remote Code Execution Vulnerability. This vulnerability allows network-adjacent attackers to execute arbitrary code via Bluetooth on affected installations of BlueZ. User interaction is required to exploit this vulnerability in that the target must connect to a malicious device.\n\nThe specific flaw exists within the handling of the AVRCP protocol. The issue results from the lack of proper validation of the length of user-supplied data prior to copying it to a fixed-length stack-based buffer. An attacker can leverage this vulnerability to execute code in the context of root. Was ZDI-CAN-19909.", "scorev2": "0.0", "scorev3": "8.0", "scorev4": "0.0", "modified": "2026-06-17T06:27:38.000", "vector": "ADJACENT_NETWORK", "vectorString": "CVSS:3.1/AV:A/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H", "detail": "version-not-in-range" }, { "id": "CVE-2023-50229", "status": "Patched", "link": "https://nvd.nist.gov/vuln/detail/CVE-2023-50229", "summary": "BlueZ Phone Book Access Profile Heap-based Buffer Overflow Remote Code Execution Vulnerability. This vulnerability allows network-adjacent attackers to execute arbitrary code on affected installations of BlueZ. User interaction is required to exploit this vulnerability in that the target must connect to a malicious Bluetooth device.\n\nThe specific flaw exists within the handling of the Phone Book Access profile. The issue results from the lack of proper validation of the length of user-supplied data prior to copying it to a fixed-length heap-based buffer. An attacker can leverage this vulnerability to execute code in the context of root. Was ZDI-CAN-20936.", "scorev2": "0.0", "scorev3": "8.0", "scorev4": "0.0", "modified": "2026-06-17T06:39:20.000", "vector": "ADJACENT_NETWORK", "vectorString": "CVSS:3.1/AV:A/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H", "detail": "fixed-version: Fixed from version 5.70" }, { "id": "CVE-2023-50230", "status": "Patched", "link": "https://nvd.nist.gov/vuln/detail/CVE-2023-50230", "summary": "BlueZ Phone Book Access Profile Heap-based Buffer Overflow Remote Code Execution Vulnerability. This vulnerability allows network-adjacent attackers to execute arbitrary code on affected installations of BlueZ. User interaction is required to exploit this vulnerability in that the target must connect to a malicious Bluetooth device.\n\nThe specific flaw exists within the handling of the Phone Book Access profile. The issue results from the lack of proper validation of the length of user-supplied data prior to copying it to a fixed-length heap-based buffer. An attacker can leverage this vulnerability to execute code in the context of root. Was ZDI-CAN-20938.", "scorev2": "0.0", "scorev3": "8.0", "scorev4": "0.0", "modified": "2026-06-17T06:39:20.000", "vector": "ADJACENT_NETWORK", "vectorString": "CVSS:3.1/AV:A/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H", "detail": "fixed-version: Fixed from version 5.70" }, { "id": "CVE-2023-51580", "status": "Patched", "link": "https://nvd.nist.gov/vuln/detail/CVE-2023-51580", "summary": "BlueZ Audio Profile AVRCP avrcp_parse_attribute_list Out-Of-Bounds Read Information Disclosure Vulnerability. This vulnerability allows network-adjacent attackers to disclose sensitive information via Bluetooth on affected installations of BlueZ. User interaction is required to exploit this vulnerability in that the target must connect to a malicious device.\n\nThe specific flaw exists within the handling of the AVRCP protocol. The issue results from the lack of proper validation of user-supplied data, which can result in a read past the end of an allocated buffer. An attacker can leverage this in conjunction with other vulnerabilities to execute arbitrary code in the context of root. Was ZDI-CAN-20852.", "scorev2": "0.0", "scorev3": "5.7", "scorev4": "0.0", "modified": "2026-06-17T06:41:15.000", "vector": "ADJACENT_NETWORK", "vectorString": "CVSS:3.1/AV:A/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N", "detail": "version-not-in-range" }, { "id": "CVE-2023-51589", "status": "Patched", "link": "https://nvd.nist.gov/vuln/detail/CVE-2023-51589", "summary": "BlueZ Audio Profile AVRCP parse_media_element Out-Of-Bounds Read Information Disclosure Vulnerability. This vulnerability allows network-adjacent attackers to disclose sensitive information via Bluetooth on affected installations of BlueZ. User interaction is required to exploit this vulnerability in that the target must connect to a malicious device.\n\nThe specific flaw exists within the handling of the AVRCP protocol. The issue results from the lack of proper validation of user-supplied data, which can result in a read past the end of an allocated buffer. An attacker can leverage this in conjunction with other vulnerabilities to execute arbitrary code in the context of root. Was ZDI-CAN-20853.", "scorev2": "0.0", "scorev3": "5.7", "scorev4": "0.0", "modified": "2026-06-17T06:41:16.000", "vector": "ADJACENT_NETWORK", "vectorString": "CVSS:3.1/AV:A/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N", "detail": "version-not-in-range" }, { "id": "CVE-2023-51592", "status": "Patched", "link": "https://nvd.nist.gov/vuln/detail/CVE-2023-51592", "summary": "BlueZ Audio Profile AVRCP parse_media_folder Out-Of-Bounds Read Information Disclosure Vulnerability. This vulnerability allows network-adjacent attackers to disclose sensitive information via Bluetooth on affected installations of BlueZ. User interaction is required to exploit this vulnerability in that the target must connect to a malicious device.\n\nThe specific flaw exists within the handling of the AVRCP protocol. The issue results from the lack of proper validation of user-supplied data, which can result in a read past the end of an allocated buffer. An attacker can leverage this in conjunction with other vulnerabilities to execute arbitrary code in the context of root. Was ZDI-CAN-20854.", "scorev2": "0.0", "scorev3": "5.7", "scorev4": "0.0", "modified": "2026-06-17T06:41:16.000", "vector": "ADJACENT_NETWORK", "vectorString": "CVSS:3.1/AV:A/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N", "detail": "version-not-in-range" }, { "id": "CVE-2023-51594", "status": "Patched", "link": "https://nvd.nist.gov/vuln/detail/CVE-2023-51594", "summary": "BlueZ OBEX Library Out-Of-Bounds Read Information Disclosure Vulnerability. This vulnerability allows network-adjacent attackers to disclose sensitive information on affected installations of BlueZ. User interaction is required to exploit this vulnerability in that the target must connect to a malicious Bluetooth device.\n\nThe specific flaw exists within the handling of OBEX protocol parameters. The issue results from the lack of proper validation of user-supplied data, which can result in a read past the end of an allocated buffer. An attacker can leverage this in conjunction with other vulnerabilities to execute arbitrary code in the context of root. Was ZDI-CAN-20937.", "scorev2": "0.0", "scorev3": "5.7", "scorev4": "0.0", "modified": "2026-06-17T06:41:17.000", "vector": "ADJACENT_NETWORK", "vectorString": "CVSS:3.1/AV:A/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N", "detail": "version-not-in-range" }, { "id": "CVE-2023-51596", "status": "Patched", "link": "https://nvd.nist.gov/vuln/detail/CVE-2023-51596", "summary": "BlueZ Phone Book Access Profile Heap-based Buffer Overflow Remote Code Execution Vulnerability. This vulnerability allows network-adjacent attackers to execute arbitrary code on affected installations of BlueZ. User interaction is required to exploit this vulnerability in that the target must connect to a malicious Bluetooth device.\n\nThe specific flaw exists within the handling of the Phone Book Access profile. The issue results from the lack of proper validation of the length of user-supplied data prior to copying it to a fixed-length heap-based buffer. An attacker can leverage this vulnerability to execute code in the context of root. Was ZDI-CAN-20939.", "scorev2": "0.0", "scorev3": "7.1", "scorev4": "0.0", "modified": "2026-06-17T06:41:17.000", "vector": "ADJACENT_NETWORK", "vectorString": "CVSS:3.0/AV:A/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H", "detail": "version-not-in-range" }, { "id": "CVE-2024-8805", "status": "Patched", "link": "https://nvd.nist.gov/vuln/detail/CVE-2024-8805", "summary": "BlueZ HID over GATT Profile Improper Access Control Remote Code Execution Vulnerability. This vulnerability allows network-adjacent attackers to execute arbitrary code on affected installations of BlueZ. Authentication is not required to exploit this vulnerability.\n\nThe specific flaw exists within the implementation of the HID over GATT Profile. The issue results from the lack of authorization prior to allowing access to functionality. An attacker can leverage this vulnerability to execute code in the context of the current user. Was ZDI-CAN-25177.", "scorev2": "0.0", "scorev3": "8.8", "scorev4": "0.0", "modified": "2026-06-17T08:23:20.000", "vector": "ADJACENT_NETWORK", "vectorString": "CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H", "detail": "version-not-in-range" }, { "id": "CVE-2026-19774", "status": "Unpatched", "link": "https://nvd.nist.gov/vuln/detail/CVE-2026-19774", "summary": "BlueZ A2DP Stack-based Buffer Overflow Remote Code Execution Vulnerability. This vulnerability allows network-adjacent attackers to execute arbitrary code on affected installations of BlueZ. An attacker must first obtain the ability to pair a malicious Bluetooth device with the target system in order to exploit this vulnerability.\n\nThe specific flaw exists within the handling of the stream endpoints. The issue results from the lack of proper validation of the length of user-supplied data prior to copying it to a fixed-length stack-based buffer. An attacker can leverage this vulnerability to execute code in the context of root. Was ZDI-CAN-29429.", "scorev2": "0.0", "scorev3": "7.1", "scorev4": "0.0", "modified": "2026-09-18T19:10:46.000", "vector": "ADJACENT_NETWORK", "vectorString": "CVSS:3.0/AV:A/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H", "detail": "no-version-ranges", "description": "Check package version" } ], "cpes": [ "cpe:2.3:*:*:bluez:5.86:*:*:*:*:*:*:*" ] }, { "name": "bonnie++", "layer": "openembedded-layer", "version": "2.00a", "products": [ { "product": "bonnie++", "cvesInRecord": "No" } ], "issue": [], "cpes": [ "cpe:2.3:*:*:bonnie\\+\\+:2.00a:*:*:*:*:*:*:*" ] }, { "name": "boost", "layer": "core", "version": "1.90.0", "products": [ { "product": "boost", "cvesInRecord": "Yes" } ], "issue": [ { "id": "CVE-2008-0171", "status": "Patched", "link": "https://nvd.nist.gov/vuln/detail/CVE-2008-0171", "summary": "regex/v4/perl_matcher_non_recursive.hpp in the Boost regex library (aka Boost.Regex) in Boost 1.33 and 1.34 allows context-dependent attackers to cause a denial of service (failed assertion and crash) via an invalid regular expression.", "scorev2": "5.0", "scorev3": "0.0", "scorev4": "0.0", "modified": "2026-06-16T22:49:04.000", "vector": "NETWORK", "vectorString": "AV:N/AC:L/Au:N/C:N/I:N/A:P", "detail": "version-not-in-range" }, { "id": "CVE-2008-0172", "status": "Patched", "link": "https://nvd.nist.gov/vuln/detail/CVE-2008-0172", "summary": "The get_repeat_type function in basic_regex_creator.hpp in the Boost regex library (aka Boost.Regex) in Boost 1.33 and 1.34 allows context-dependent attackers to cause a denial of service (NULL dereference and crash) via an invalid regular expression.", "scorev2": "5.0", "scorev3": "0.0", "scorev4": "0.0", "modified": "2026-06-16T22:49:04.000", "vector": "NETWORK", "vectorString": "AV:N/AC:L/Au:N/C:N/I:N/A:P", "detail": "version-not-in-range" }, { "id": "CVE-2013-0252", "status": "Patched", "link": "https://nvd.nist.gov/vuln/detail/CVE-2013-0252", "summary": "boost::locale::utf::utf_traits in the Boost.Locale library in Boost 1.48 through 1.52 does not properly detect certain invalid UTF-8 sequences, which might allow remote attackers to bypass input validation protection mechanisms via crafted trailing bytes.", "scorev2": "5.0", "scorev3": "0.0", "scorev4": "0.0", "modified": "2026-06-16T23:49:03.000", "vector": "NETWORK", "vectorString": "AV:N/AC:L/Au:N/C:N/I:P/A:N", "detail": "version-not-in-range" }, { "id": "CVE-2016-9840", "status": "Patched", "link": "https://nvd.nist.gov/vuln/detail/CVE-2016-9840", "summary": "inftrees.c in zlib 1.2.8 might allow context-dependent attackers to have unspecified impact by leveraging improper pointer arithmetic.", "scorev2": "6.8", "scorev3": "8.8", "scorev4": "0.0", "modified": "2026-10-08T22:16:39.000", "vector": "NETWORK", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H", "detail": "fixed-version: Fixed from version 1.78.0" } ], "cpes": [ "cpe:2.3:*:boost:boost:1.90.0:*:*:*:*:*:*:*" ] }, { "name": "brcm-patchram-plus", "layer": "variscite-bsp-common", "version": "1.0", "products": [ { "product": "brcm-patchram-plus", "cvesInRecord": "No" } ], "issue": [], "cpes": [ "cpe:2.3:*:*:brcm-patchram-plus:1.0:*:*:*:*:*:*:*" ] }, { "name": "bridge-utils", "layer": "networking-layer", "version": "1.7.1", "products": [ { "product": "bridge-utils", "cvesInRecord": "No" } ], "issue": [], "cpes": [ "cpe:2.3:*:kernel:bridge-utils:1.7.1:*:*:*:*:*:*:*" ] }, { "name": "btrfs-tools", "layer": "core", "version": "6.19.1", "products": [ { "product": "btrfs-tools", "cvesInRecord": "No" } ], "issue": [], "cpes": [ "cpe:2.3:*:*:btrfs-tools:6.19.1:*:*:*:*:*:*:*" ] }, { "name": "busybox", "layer": "core", "version": "1.37.0", "products": [ { "product": "busybox", "cvesInRecord": "Yes" } ], "issue": [ { "id": "CVE-2006-1058", "status": "Patched", "link": "https://nvd.nist.gov/vuln/detail/CVE-2006-1058", "summary": "BusyBox 1.1.1 does not use a salt when generating passwords, which makes it easier for local users to guess passwords from a stolen password file using techniques such as rainbow tables.", "scorev2": "2.1", "scorev3": "5.5", "scorev4": "0.0", "modified": "2026-06-16T22:21:56.000", "vector": "LOCAL", "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N", "detail": "version-not-in-range" }, { "id": "CVE-2006-5050", "status": "Patched", "link": "https://nvd.nist.gov/vuln/detail/CVE-2006-5050", "summary": "Directory traversal vulnerability in httpd in Rob Landley BusyBox allows remote attackers to read arbitrary files via URL-encoded \"%2e%2e/\" sequences in the URI.", "scorev2": "5.0", "scorev3": "0.0", "scorev4": "0.0", "modified": "2026-06-16T22:30:24.000", "vector": "NETWORK", "vectorString": "AV:N/AC:L/Au:N/C:P/I:N/A:N", "detail": "version-not-in-range" }, { "id": "CVE-2011-2716", "status": "Patched", "link": "https://nvd.nist.gov/vuln/detail/CVE-2011-2716", "summary": "The DHCP client (udhcpc) in BusyBox before 1.20.0 allows remote DHCP servers to execute arbitrary commands via shell metacharacters in the (1) HOST_NAME, (2) DOMAIN_NAME, (3) NIS_DOMAIN, and (4) TFTP_SERVER_NAME host name options.", "scorev2": "6.8", "scorev3": "0.0", "scorev4": "0.0", "modified": "2026-06-16T23:31:51.000", "vector": "ADJACENT_NETWORK", "vectorString": "AV:A/AC:H/Au:N/C:C/I:C/A:C", "detail": "fixed-version: Fixed from version >1.19.4" }, { "id": "CVE-2011-5325", "status": "Patched", "link": "https://nvd.nist.gov/vuln/detail/CVE-2011-5325", "summary": "Directory traversal vulnerability in the BusyBox implementation of tar before 1.22.0 v5 allows remote attackers to point to files outside the current working directory via a symlink.", "scorev2": "5.0", "scorev3": "7.5", "scorev4": "0.0", "modified": "2026-06-16T23:36:21.000", "vector": "NETWORK", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N", "detail": "fixed-version: Fixed from version >1.21.1" }, { "id": "CVE-2013-1813", "status": "Patched", "link": "https://nvd.nist.gov/vuln/detail/CVE-2013-1813", "summary": "util-linux/mdev.c in BusyBox before 1.21.0 uses 0777 permissions for parent directories when creating nested directories under /dev/, which allows local users to have unknown impact and attack vectors.", "scorev2": "7.2", "scorev3": "0.0", "scorev4": "0.0", "modified": "2026-06-16T23:52:10.000", "vector": "LOCAL", "vectorString": "AV:L/AC:L/Au:N/C:C/I:C/A:C", "detail": "fixed-version: Fixed from version >1.20.2" }, { "id": "CVE-2014-9645", "status": "Patched", "link": "https://nvd.nist.gov/vuln/detail/CVE-2014-9645", "summary": "The add_probe function in modutils/modprobe.c in BusyBox before 1.23.0 allows local users to bypass intended restrictions on loading kernel modules via a / (slash) character in a module name, as demonstrated by an \"ifconfig /usbserial up\" command or a \"mount -t /snd_pcm none /\" command.", "scorev2": "2.1", "scorev3": "5.5", "scorev4": "0.0", "modified": "2026-06-17T00:18:42.000", "vector": "LOCAL", "vectorString": "CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:N", "detail": "fixed-version: Fixed from version >1.22.1" }, { "id": "CVE-2015-9261", "status": "Patched", "link": "https://nvd.nist.gov/vuln/detail/CVE-2015-9261", "summary": "huft_build in archival/libarchive/decompress_gunzip.c in BusyBox before 1.27.2 misuses a pointer, causing segfaults and an application crash during an unzip operation on a specially crafted ZIP file.", "scorev2": "4.3", "scorev3": "5.5", "scorev4": "0.0", "modified": "2026-06-17T00:36:09.000", "vector": "LOCAL", "vectorString": "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H", "detail": "fixed-version: Fixed from version 1.27.2" }, { "id": "CVE-2016-2147", "status": "Patched", "link": "https://nvd.nist.gov/vuln/detail/CVE-2016-2147", "summary": "Integer overflow in the DHCP client (udhcpc) in BusyBox before 1.25.0 allows remote attackers to cause a denial of service (crash) via a malformed RFC1035-encoded domain name, which triggers an out-of-bounds heap write.", "scorev2": "5.0", "scorev3": "7.5", "scorev4": "0.0", "modified": "2026-06-17T00:43:31.000", "vector": "NETWORK", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H", "detail": "fixed-version: Fixed from version >1.24.2" }, { "id": "CVE-2016-2148", "status": "Patched", "link": "https://nvd.nist.gov/vuln/detail/CVE-2016-2148", "summary": "Heap-based buffer overflow in the DHCP client (udhcpc) in BusyBox before 1.25.0 allows remote attackers to have unspecified impact via vectors involving OPTION_6RD parsing.", "scorev2": "7.5", "scorev3": "9.8", "scorev4": "0.0", "modified": "2026-06-17T00:43:31.000", "vector": "NETWORK", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H", "detail": "fixed-version: Fixed from version >1.24.2" }, { "id": "CVE-2016-6301", "status": "Patched", "link": "https://nvd.nist.gov/vuln/detail/CVE-2016-6301", "summary": "The recv_and_process_client_pkt function in networking/ntpd.c in busybox allows remote attackers to cause a denial of service (CPU and bandwidth consumption) via a forged NTP packet, which triggers a communication loop.", "scorev2": "7.8", "scorev3": "7.5", "scorev4": "0.0", "modified": "2026-06-17T00:50:46.000", "vector": "NETWORK", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H", "detail": "fixed-version: Fixed from version 1.25.1" }, { "id": "CVE-2017-15873", "status": "Patched", "link": "https://nvd.nist.gov/vuln/detail/CVE-2017-15873", "summary": "The get_next_block function in archival/libarchive/decompress_bunzip2.c in BusyBox 1.27.2 has an Integer Overflow that may lead to a write access violation.", "scorev2": "4.3", "scorev3": "5.5", "scorev4": "0.0", "modified": "2026-06-17T01:08:24.000", "vector": "LOCAL", "vectorString": "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H", "detail": "version-not-in-range" }, { "id": "CVE-2017-15874", "status": "Patched", "link": "https://nvd.nist.gov/vuln/detail/CVE-2017-15874", "summary": "archival/libarchive/decompress_unlzma.c in BusyBox 1.27.2 has an Integer Underflow that leads to a read access violation.", "scorev2": "4.3", "scorev3": "5.5", "scorev4": "0.0", "modified": "2026-06-17T01:08:24.000", "vector": "LOCAL", "vectorString": "CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H", "detail": "version-not-in-range" }, { "id": "CVE-2017-16544", "status": "Patched", "link": "https://nvd.nist.gov/vuln/detail/CVE-2017-16544", "summary": "In the add_match function in libbb/lineedit.c in BusyBox through 1.27.2, the tab autocomplete feature of the shell, used to get a list of filenames in a directory, does not sanitize filenames and results in executing any escape sequence in the terminal. This could potentially result in code execution, arbitrary file writes, or other attacks.", "scorev2": "6.5", "scorev3": "8.8", "scorev4": "0.0", "modified": "2026-06-17T01:09:26.000", "vector": "NETWORK", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H", "detail": "fixed-version: Fixed from version >1.27.2" }, { "id": "CVE-2018-1000500", "status": "Patched", "link": "https://nvd.nist.gov/vuln/detail/CVE-2018-1000500", "summary": "Busybox contains a Missing SSL certificate validation vulnerability in The \"busybox wget\" applet that can result in arbitrary code execution. This attack appear to be exploitable via Simply download any file over HTTPS using \"busybox wget https://compromised-domain.com/important-file\".", "scorev2": "6.8", "scorev3": "8.1", "scorev4": "0.0", "modified": "2026-06-17T01:32:47.000", "vector": "NETWORK", "vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H", "detail": "fixed-version: Fixed from version 1.32.0" }, { "id": "CVE-2018-1000517", "status": "Patched", "link": "https://nvd.nist.gov/vuln/detail/CVE-2018-1000517", "summary": "BusyBox project BusyBox wget version prior to commit 8e2174e9bd836e53c8b9c6e00d1bc6e2a718686e contains a Buffer Overflow vulnerability in Busybox wget that can result in heap buffer overflow. This attack appear to be exploitable via network connectivity. This vulnerability appears to have been fixed in after commit 8e2174e9bd836e53c8b9c6e00d1bc6e2a718686e.", "scorev2": "7.5", "scorev3": "9.8", "scorev4": "0.0", "modified": "2026-06-17T01:32:49.000", "vector": "NETWORK", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H", "detail": "fixed-version: Fixed from version 1.29.0" }, { "id": "CVE-2018-20679", "status": "Patched", "link": "https://nvd.nist.gov/vuln/detail/CVE-2018-20679", "summary": "An issue was discovered in BusyBox before 1.30.0. An out of bounds read in udhcp components (consumed by the DHCP server, client, and relay) allows a remote attacker to leak sensitive information from the stack by sending a crafted DHCP message. This is related to verification in udhcp_get_option() in networking/udhcp/common.c that 4-byte options are indeed 4 bytes.", "scorev2": "5.0", "scorev3": "7.5", "scorev4": "0.0", "modified": "2026-06-17T01:53:18.000", "vector": "NETWORK", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N", "detail": "fixed-version: Fixed from version 1.30.0" }, { "id": "CVE-2019-5747", "status": "Patched", "link": "https://nvd.nist.gov/vuln/detail/CVE-2019-5747", "summary": "An issue was discovered in BusyBox through 1.30.0. An out of bounds read in udhcp components (consumed by the DHCP client, server, and/or relay) might allow a remote attacker to leak sensitive information from the stack by sending a crafted DHCP message. This is related to assurance of a 4-byte length when decoding DHCP_SUBNET. NOTE: this issue exists because of an incomplete fix for CVE-2018-20679.", "scorev2": "5.0", "scorev3": "7.5", "scorev4": "0.0", "modified": "2026-06-17T02:38:08.000", "vector": "NETWORK", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N", "detail": "fixed-version: Fixed from version >1.30.0" }, { "id": "CVE-2021-28831", "status": "Patched", "link": "https://nvd.nist.gov/vuln/detail/CVE-2021-28831", "summary": "decompress_gunzip.c in BusyBox through 1.32.1 mishandles the error bit on the huft_build result pointer, with a resultant invalid free or segmentation fault, via malformed gzip data.", "scorev2": "5.0", "scorev3": "7.5", "scorev4": "0.0", "modified": "2026-06-17T03:46:57.000", "vector": "NETWORK", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H", "detail": "fixed-version: Fixed from version >1.32.1" }, { "id": "CVE-2021-42373", "status": "Patched", "link": "https://nvd.nist.gov/vuln/detail/CVE-2021-42373", "summary": "A NULL pointer dereference in Busybox's man applet leads to denial of service when a section name is supplied but no page argument is given", "scorev2": "2.1", "scorev3": "5.5", "scorev4": "0.0", "modified": "2026-06-17T04:09:42.000", "vector": "LOCAL", "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H", "detail": "fixed-version: Fixed from version 1.34.0" }, { "id": "CVE-2021-42374", "status": "Patched", "link": "https://nvd.nist.gov/vuln/detail/CVE-2021-42374", "summary": "An out-of-bounds heap read in Busybox's unlzma applet leads to information leak and denial of service when crafted LZMA-compressed input is decompressed. This can be triggered by any applet/format that", "scorev2": "3.3", "scorev3": "5.3", "scorev4": "0.0", "modified": "2026-06-17T04:09:42.000", "vector": "LOCAL", "vectorString": "CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:L/I:N/A:H", "detail": "fixed-version: Fixed from version 1.34.0" }, { "id": "CVE-2021-42375", "status": "Patched", "link": "https://nvd.nist.gov/vuln/detail/CVE-2021-42375", "summary": "An incorrect handling of a special element in Busybox's ash applet leads to denial of service when processing a crafted shell command, due to the shell mistaking specific characters for reserved characters. This may be used for DoS under rare conditions of filtered command input.", "scorev2": "1.9", "scorev3": "5.5", "scorev4": "0.0", "modified": "2026-06-17T04:09:43.000", "vector": "LOCAL", "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H", "detail": "fixed-version: Fixed from version 1.34.0" }, { "id": "CVE-2021-42376", "status": "Patched", "link": "https://nvd.nist.gov/vuln/detail/CVE-2021-42376", "summary": "A NULL pointer dereference in Busybox's hush applet leads to denial of service when processing a crafted shell command, due to missing validation after a \\x03 delimiter character. This may be used for DoS under very rare conditions of filtered command input.", "scorev2": "1.9", "scorev3": "5.5", "scorev4": "0.0", "modified": "2026-06-17T04:09:43.000", "vector": "LOCAL", "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H", "detail": "fixed-version: Fixed from version 1.34.0" }, { "id": "CVE-2021-42377", "status": "Patched", "link": "https://nvd.nist.gov/vuln/detail/CVE-2021-42377", "summary": "An attacker-controlled pointer free in Busybox's hush applet leads to denial of service and possible code execution when processing a crafted shell command, due to the shell mishandling the &&& string. This may be used for remote code execution under rare conditions of filtered command input.", "scorev2": "6.8", "scorev3": "9.8", "scorev4": "0.0", "modified": "2026-06-17T04:09:43.000", "vector": "NETWORK", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H", "detail": "fixed-version: Fixed from version 1.34.0" }, { "id": "CVE-2021-42378", "status": "Patched", "link": "https://nvd.nist.gov/vuln/detail/CVE-2021-42378", "summary": "A use-after-free in Busybox's awk applet leads to denial of service and possibly code execution when processing a crafted awk pattern in the getvar_i function", "scorev2": "6.5", "scorev3": "7.2", "scorev4": "0.0", "modified": "2026-06-17T04:09:43.000", "vector": "NETWORK", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H", "detail": "fixed-version: Fixed from version 1.34.0" }, { "id": "CVE-2021-42379", "status": "Patched", "link": "https://nvd.nist.gov/vuln/detail/CVE-2021-42379", "summary": "A use-after-free in Busybox's awk applet leads to denial of service and possibly code execution when processing a crafted awk pattern in the next_input_file function", "scorev2": "6.5", "scorev3": "7.2", "scorev4": "0.0", "modified": "2026-06-17T04:09:43.000", "vector": "NETWORK", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H", "detail": "fixed-version: Fixed from version 1.34.0" }, { "id": "CVE-2021-42380", "status": "Patched", "link": "https://nvd.nist.gov/vuln/detail/CVE-2021-42380", "summary": "A use-after-free in Busybox's awk applet leads to denial of service and possibly code execution when processing a crafted awk pattern in the clrvar function", "scorev2": "6.5", "scorev3": "7.2", "scorev4": "0.0", "modified": "2026-06-17T04:09:43.000", "vector": "NETWORK", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H", "detail": "fixed-version: Fixed from version 1.34.0" }, { "id": "CVE-2021-42381", "status": "Patched", "link": "https://nvd.nist.gov/vuln/detail/CVE-2021-42381", "summary": "A use-after-free in Busybox's awk applet leads to denial of service and possibly code execution when processing a crafted awk pattern in the hash_init function", "scorev2": "6.5", "scorev3": "7.2", "scorev4": "0.0", "modified": "2026-06-17T04:09:43.000", "vector": "NETWORK", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H", "detail": "fixed-version: Fixed from version 1.34.0" }, { "id": "CVE-2021-42382", "status": "Patched", "link": "https://nvd.nist.gov/vuln/detail/CVE-2021-42382", "summary": "A use-after-free in Busybox's awk applet leads to denial of service and possibly code execution when processing a crafted awk pattern in the getvar_s function", "scorev2": "6.5", "scorev3": "7.2", "scorev4": "0.0", "modified": "2026-06-17T04:09:44.000", "vector": "NETWORK", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H", "detail": "fixed-version: Fixed from version 1.34.0" }, { "id": "CVE-2021-42383", "status": "Patched", "link": "https://nvd.nist.gov/vuln/detail/CVE-2021-42383", "summary": "A use-after-free in Busybox's awk applet leads to denial of service and possibly code execution when processing a crafted awk pattern in the evaluate function", "scorev2": "6.5", "scorev3": "7.2", "scorev4": "0.0", "modified": "2026-06-17T04:09:44.000", "vector": "NETWORK", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H", "detail": "fixed-version: Fixed from version 1.34.0" }, { "id": "CVE-2021-42384", "status": "Patched", "link": "https://nvd.nist.gov/vuln/detail/CVE-2021-42384", "summary": "A use-after-free in Busybox's awk applet leads to denial of service and possibly code execution when processing a crafted awk pattern in the handle_special function", "scorev2": "6.5", "scorev3": "7.2", "scorev4": "0.0", "modified": "2026-06-17T04:09:44.000", "vector": "NETWORK", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H", "detail": "fixed-version: Fixed from version 1.34.0" }, { "id": "CVE-2021-42385", "status": "Patched", "link": "https://nvd.nist.gov/vuln/detail/CVE-2021-42385", "summary": "A use-after-free in Busybox's awk applet leads to denial of service and possibly code execution when processing a crafted awk pattern in the evaluate function", "scorev2": "6.5", "scorev3": "7.2", "scorev4": "0.0", "modified": "2026-06-17T04:09:44.000", "vector": "NETWORK", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H", "detail": "fixed-version: Fixed from version 1.34.0" }, { "id": "CVE-2021-42386", "status": "Patched", "link": "https://nvd.nist.gov/vuln/detail/CVE-2021-42386", "summary": "A use-after-free in Busybox's awk applet leads to denial of service and possibly code execution when processing a crafted awk pattern in the nvalloc function", "scorev2": "6.5", "scorev3": "7.2", "scorev4": "0.0", "modified": "2026-06-17T04:09:44.000", "vector": "NETWORK", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H", "detail": "fixed-version: Fixed from version 1.34.0" }, { "id": "CVE-2022-28391", "status": "Patched", "link": "https://nvd.nist.gov/vuln/detail/CVE-2022-28391", "summary": "BusyBox through 1.35.0 allows remote attackers to execute arbitrary code if netstat is used to print a DNS PTR record's value to a VT compatible terminal. Alternatively, the attacker could choose to change the terminal's colors.", "scorev2": "6.8", "scorev3": "8.8", "scorev4": "0.0", "modified": "2026-06-17T04:38:29.000", "vector": "NETWORK", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H", "detail": "fix-file-included", "patch-file": [ "/home/luan/src/yocto/wrynose/dart-mx8mp/sources/openembedded-core/meta/recipes-core/busybox/busybox/0001-libbb-sockaddr2str-ensure-only-printable-characters-.patch", "/home/luan/src/yocto/wrynose/dart-mx8mp/sources/openembedded-core/meta/recipes-core/busybox/busybox/0002-nslookup-sanitize-all-printed-strings-with-printable.patch" ] }, { "id": "CVE-2022-30065", "status": "Patched", "link": "https://nvd.nist.gov/vuln/detail/CVE-2022-30065", "summary": "A use-after-free in Busybox 1.35-x's awk applet leads to denial of service and possibly code execution when processing a crafted awk pattern in the copyvar function.", "scorev2": "6.8", "scorev3": "7.8", "scorev4": "0.0", "modified": "2026-07-07T19:16:47.000", "vector": "LOCAL", "vectorString": "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H", "detail": "version-not-in-range" }, { "id": "CVE-2022-48174", "status": "Patched", "link": "https://nvd.nist.gov/vuln/detail/CVE-2022-48174", "summary": "There is a stack overflow vulnerability in ash.c:6030 in busybox before 1.35. In the environment of Internet of Vehicles, this vulnerability can be executed from command to arbitrary code execution.", "scorev2": "0.0", "scorev3": "9.8", "scorev4": "0.0", "modified": "2026-07-14T12:16:48.000", "vector": "NETWORK", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H", "detail": "fixed-version: Fixed from version >1.36.1" }, { "id": "CVE-2023-39810", "status": "Patched", "link": "https://nvd.nist.gov/vuln/detail/CVE-2023-39810", "summary": "An issue in the CPIO command of Busybox v1.33.2 allows attackers to execute a directory traversal.", "scorev2": "0.0", "scorev3": "7.8", "scorev4": "0.0", "modified": "2026-07-09T01:18:36.000", "vector": "LOCAL", "vectorString": "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H", "detail": "fix-file-included", "patch-file": [ "/home/luan/src/yocto/wrynose/dart-mx8mp/sources/openembedded-core/meta/recipes-core/busybox/busybox/0001-archival-disallow-path-traversals-CVE-2023-39810.patch" ] }, { "id": "CVE-2023-42363", "status": "Patched", "link": "https://nvd.nist.gov/vuln/detail/CVE-2023-42363", "summary": "A use-after-free vulnerability was discovered in xasprintf function in xfuncs_printf.c:344 in BusyBox v.1.36.1.", "scorev2": "0.0", "scorev3": "5.5", "scorev4": "0.0", "modified": "2026-06-17T06:23:46.000", "vector": "LOCAL", "vectorString": "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H", "detail": "version-not-in-range" }, { "id": "CVE-2023-42364", "status": "Patched", "link": "https://nvd.nist.gov/vuln/detail/CVE-2023-42364", "summary": "A use-after-free vulnerability in BusyBox v.1.36.1 allows attackers to cause a denial of service via a crafted awk pattern in the awk.c evaluate function.", "scorev2": "0.0", "scorev3": "5.5", "scorev4": "0.0", "modified": "2026-06-17T06:23:46.000", "vector": "LOCAL", "vectorString": "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H", "detail": "version-not-in-range" }, { "id": "CVE-2023-42365", "status": "Patched", "link": "https://nvd.nist.gov/vuln/detail/CVE-2023-42365", "summary": "A use-after-free vulnerability was discovered in BusyBox v.1.36.1 via a crafted awk pattern in the awk.c copyvar function.", "scorev2": "0.0", "scorev3": "5.5", "scorev4": "0.0", "modified": "2026-06-17T06:23:46.000", "vector": "LOCAL", "vectorString": "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H", "detail": "version-not-in-range" }, { "id": "CVE-2023-42366", "status": "Patched", "link": "https://nvd.nist.gov/vuln/detail/CVE-2023-42366", "summary": "A heap-buffer-overflow was discovered in BusyBox v.1.36.1 in the next_token function at awk.c:1159.", "scorev2": "0.0", "scorev3": "5.5", "scorev4": "0.0", "modified": "2026-10-08T22:17:24.000", "vector": "LOCAL", "vectorString": "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H", "detail": "version-not-in-range" }, { "id": "CVE-2024-58251", "status": "Patched", "link": "https://nvd.nist.gov/vuln/detail/CVE-2024-58251", "summary": "In netstat in BusyBox through 1.37.0, local users can launch of network application with an argv[0] containing an ANSI terminal escape sequence, leading to a denial of service (terminal locked up) when netstat is used by a victim.", "scorev2": "0.0", "scorev3": "2.5", "scorev4": "0.0", "modified": "2026-06-17T08:14:42.000", "vector": "LOCAL", "vectorString": "CVSS:3.1/AV:L/AC:H/PR:N/UI:R/S:U/C:N/I:N/A:L", "detail": "fix-file-included", "patch-file": [ "/home/luan/src/yocto/wrynose/dart-mx8mp/sources/openembedded-core/meta/recipes-core/busybox/busybox/CVE-2024-58251.patch" ] }, { "id": "CVE-2025-46394", "status": "Patched", "link": "https://nvd.nist.gov/vuln/detail/CVE-2025-46394", "summary": "In tar in BusyBox through 1.37.0, a TAR archive can have filenames hidden from a listing through the use of terminal escape sequences.", "scorev2": "0.0", "scorev3": "3.3", "scorev4": "0.0", "modified": "2026-06-17T09:26:20.000", "vector": "LOCAL", "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:N", "detail": "fix-file-included", "patch-file": [ "/home/luan/src/yocto/wrynose/dart-mx8mp/sources/openembedded-core/meta/recipes-core/busybox/busybox/CVE-2025-46394-01.patch", "/home/luan/src/yocto/wrynose/dart-mx8mp/sources/openembedded-core/meta/recipes-core/busybox/busybox/CVE-2025-46394-02.patch" ] }, { "id": "CVE-2025-60876", "status": "Patched", "link": "https://nvd.nist.gov/vuln/detail/CVE-2025-60876", "summary": "BusyBox wget thru 1.3.7 accepted raw CR (0x0D)/LF (0x0A) and other C0 control bytes in the HTTP request-target (path/query), allowing the request line to be split and attacker-controlled headers to be injected. To preserve the HTTP/1.1 request-line shape METHOD SP request-target SP HTTP/1.1, a raw space (0x20) in the request-target must also be rejected (clients should use %20).", "scorev2": "0.0", "scorev3": "6.5", "scorev4": "0.0", "modified": "2026-06-17T09:50:10.000", "vector": "NETWORK", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:N", "detail": "fix-file-included", "patch-file": [ "/home/luan/src/yocto/wrynose/dart-mx8mp/sources/openembedded-core/meta/recipes-core/busybox/busybox/CVE-2025-60876.patch" ] }, { "id": "CVE-2026-26157", "status": "Patched", "link": "https://nvd.nist.gov/vuln/detail/CVE-2026-26157", "summary": "A flaw was found in BusyBox. Incomplete path sanitization in its archive extraction utilities allows an attacker to craft malicious archives that when extracted, and under specific conditions, may write to files outside the intended directory. This can lead to arbitrary file overwrite, potentially enabling code execution through the modification of sensitive system files.", "scorev2": "0.0", "scorev3": "7.0", "scorev4": "0.0", "modified": "2026-07-15T02:19:00.000", "vector": "LOCAL", "vectorString": "CVSS:3.1/AV:L/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H", "detail": "fix-file-included", "patch-file": [ "/home/luan/src/yocto/wrynose/dart-mx8mp/sources/openembedded-core/meta/recipes-core/busybox/busybox/0001-tar-strip-unsafe-hardlink-components-GNU-tar-does-th.patch", "/home/luan/src/yocto/wrynose/dart-mx8mp/sources/openembedded-core/meta/recipes-core/busybox/busybox/0002-tar-only-strip-unsafe-components-from-hardlinks-not-.patch" ] }, { "id": "CVE-2026-26158", "status": "Patched", "link": "https://nvd.nist.gov/vuln/detail/CVE-2026-26158", "summary": "A flaw was found in BusyBox. This vulnerability allows an attacker to modify files outside of the intended extraction directory by crafting a malicious tar archive containing unvalidated hardlink or symlink entries. If the tar archive is extracted with elevated privileges, this flaw can lead to privilege escalation, enabling an attacker to gain unauthorized access to critical system files.", "scorev2": "0.0", "scorev3": "7.0", "scorev4": "0.0", "modified": "2026-07-15T02:19:00.000", "vector": "LOCAL", "vectorString": "CVSS:3.1/AV:L/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H", "detail": "fix-file-included", "patch-file": [ "/home/luan/src/yocto/wrynose/dart-mx8mp/sources/openembedded-core/meta/recipes-core/busybox/busybox/0001-tar-strip-unsafe-hardlink-components-GNU-tar-does-th.patch", "/home/luan/src/yocto/wrynose/dart-mx8mp/sources/openembedded-core/meta/recipes-core/busybox/busybox/0002-tar-only-strip-unsafe-components-from-hardlinks-not-.patch" ] }, { "id": "CVE-2026-29004", "status": "Patched", "link": "https://nvd.nist.gov/vuln/detail/CVE-2026-29004", "summary": "BusyBox before commit 42202bf contains a heap buffer overflow vulnerability in the DHCPv6 client (udhcpc6) DNS_SERVERS option handler in networking/udhcp/d6_dhcpc.c that allows network-adjacent attackers to trigger memory corruption by sending a crafted DHCPv6 response with a malformed D6_OPT_DNS_SERVERS option. Attackers can exploit incorrect heap buffer allocation calculations in the option_to_env() function to cause denial of service or achieve arbitrary code execution on embedded systems without heap hardening.", "scorev2": "0.0", "scorev3": "8.8", "scorev4": "7.2", "modified": "2026-07-15T02:19:20.000", "vector": "ADJACENT", "vectorString": "CVSS:4.0/AV:A/AC:L/AT:N/PR:N/UI:N/VC:N/VI:H/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X", "detail": "fix-file-included", "patch-file": [ "/home/luan/src/yocto/wrynose/dart-mx8mp/sources/openembedded-core/meta/recipes-core/busybox/busybox/CVE-2026-29004-01.patch", "/home/luan/src/yocto/wrynose/dart-mx8mp/sources/openembedded-core/meta/recipes-core/busybox/busybox/CVE-2026-29004-02.patch" ] }, { "id": "CVE-2026-38752", "status": "Unpatched", "link": "https://nvd.nist.gov/vuln/detail/CVE-2026-38752", "summary": "A stack overflow in the evaluate() function (editors/awk.c) of BusyBox commit 371fe9 allows attackers to cause a Denial of Service (DoS) via supplying a crafted AWK script.", "scorev2": "0.0", "scorev3": "7.5", "scorev4": "0.0", "modified": "2026-07-20T16:16:58.000", "vector": "NETWORK", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H", "detail": "version-in-range", "description": "Needs backporting (fixed from >1.38.0)" }, { "id": "CVE-2026-38753", "status": "Unpatched", "link": "https://nvd.nist.gov/vuln/detail/CVE-2026-38753", "summary": "A use-after-free in the awk_sub() function (editors/awk.c) of Busybox v1.38.0 allows attackers to cause a Denial of Service (DoS) via supplying a crafted AWK script.", "scorev2": "0.0", "scorev3": "7.5", "scorev4": "0.0", "modified": "2026-07-20T16:16:58.000", "vector": "NETWORK", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H", "detail": "version-in-range", "description": "Needs backporting (fixed from >1.38.0)" }, { "id": "CVE-2026-38754", "status": "Unpatched", "link": "https://nvd.nist.gov/vuln/detail/CVE-2026-38754", "summary": "A heap overflow in the ifsbreakup() function (shell/ash.c) of Busybox v1.38.0 allows attackers to cause a Denial of Service (DoS) via supplying a crafted input.", "scorev2": "0.0", "scorev3": "7.5", "scorev4": "0.0", "modified": "2026-07-22T15:16:54.000", "vector": "NETWORK", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H", "detail": "version-in-range", "description": "Needs backporting (fixed from >1.38.0)" }, { "id": "CVE-2026-38755", "status": "Unpatched", "link": "https://nvd.nist.gov/vuln/detail/CVE-2026-38755", "summary": "A heap overflow in the evalcommand() function (shell/ash.c) of Busybox v1.38.0 allows attackers to cause a Denial of Service (DoS) via supplying a crafted input.", "scorev2": "0.0", "scorev3": "7.5", "scorev4": "0.0", "modified": "2026-07-20T16:16:59.000", "vector": "NETWORK", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H", "detail": "version-in-range", "description": "Needs backporting (fixed from >1.38.0)" }, { "id": "CVE-2026-76014", "status": "Patched", "link": "https://nvd.nist.gov/vuln/detail/CVE-2026-76014", "summary": "A vulnerability has been found in BusyBox up to 1.30.1. This vulnerability affects unknown code of the file networking/wget.c of the component FEATURE_WGET_TIMEOUT Handler. Such manipulation of the argument -T leads to null pointer dereference. Local access is required to approach this attack. The exploit has been disclosed to the public and may be used. The name of the patch is 83a40bf7a93c8ac093d33ab452222dd5b9eb57ff. A patch should be applied to remediate this issue.", "scorev2": "1.7", "scorev3": "3.3", "scorev4": "4.8", "modified": "2026-08-25T03:16:57.000", "vector": "LOCAL", "vectorString": "CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:L/SC:N/SI:N/SA:N/E:P", "detail": "version-not-in-range" } ], "cpes": [ "cpe:2.3:*:*:busybox:1.37.0:*:*:*:*:*:*:*" ] }, { "name": "bzip2", "layer": "core", "version": "1.0.8", "products": [ { "product": "bzip2", "cvesInRecord": "Yes" } ], "issue": [ { "id": "CVE-2002-0759", "status": "Patched", "link": "https://nvd.nist.gov/vuln/detail/CVE-2002-0759", "summary": "bzip2 before 1.0.2 in FreeBSD 4.5 and earlier, OpenLinux 3.1 and 3.1.1, and possibly other operating systems, does not use the O_EXCL flag to create files during decompression and does not warn the user if an existing file would be overwritten, which could allow attackers to overwrite files via a bzip2 archive.", "scorev2": "5.0", "scorev3": "0.0", "scorev4": "0.0", "modified": "2026-06-16T21:58:04.000", "vector": "NETWORK", "vectorString": "AV:N/AC:L/Au:N/C:N/I:P/A:N", "detail": "version-not-in-range" }, { "id": "CVE-2002-0760", "status": "Patched", "link": "https://nvd.nist.gov/vuln/detail/CVE-2002-0760", "summary": "Race condition in bzip2 before 1.0.2 in FreeBSD 4.5 and earlier, OpenLinux 3.1 and 3.1.1, and possibly other operating systems, decompresses files with world-readable permissions before setting the permissions to what is specified in the bzip2 archive, which could allow local users to read the files as they are being decompressed.", "scorev2": "1.2", "scorev3": "0.0", "scorev4": "0.0", "modified": "2026-06-16T21:58:04.000", "vector": "LOCAL", "vectorString": "AV:L/AC:H/Au:N/C:P/I:N/A:N", "detail": "version-not-in-range" }, { "id": "CVE-2002-0761", "status": "Patched", "link": "https://nvd.nist.gov/vuln/detail/CVE-2002-0761", "summary": "bzip2 before 1.0.2 in FreeBSD 4.5 and earlier, OpenLinux 3.1 and 3.1.1, and possibly systems, uses the permissions of symbolic links instead of the actual files when creating an archive, which could cause the files to be extracted with less restrictive permissions than intended.", "scorev2": "2.1", "scorev3": "0.0", "scorev4": "0.0", "modified": "2026-06-16T21:58:05.000", "vector": "LOCAL", "vectorString": "AV:L/AC:L/Au:N/C:P/I:N/A:N", "detail": "version-not-in-range" }, { "id": "CVE-2005-0953", "status": "Patched", "link": "https://nvd.nist.gov/vuln/detail/CVE-2005-0953", "summary": "Race condition in bzip2 1.0.2 and earlier allows local users to modify permissions of arbitrary files via a hard link attack on a file while it is being decompressed, whose permissions are changed by bzip2 after the decompression is complete.", "scorev2": "3.7", "scorev3": "0.0", "scorev4": "0.0", "modified": "2026-06-16T22:12:06.000", "vector": "LOCAL", "vectorString": "AV:L/AC:H/Au:N/C:P/I:P/A:P", "detail": "version-not-in-range" }, { "id": "CVE-2005-1260", "status": "Patched", "link": "https://nvd.nist.gov/vuln/detail/CVE-2005-1260", "summary": "bzip2 allows remote attackers to cause a denial of service (hard drive consumption) via a crafted bzip2 file that causes an infinite loop (a.k.a \"decompression bomb\").", "scorev2": "5.0", "scorev3": "0.0", "scorev4": "0.0", "modified": "2026-06-16T22:12:44.000", "vector": "NETWORK", "vectorString": "AV:N/AC:L/Au:N/C:N/I:N/A:P", "detail": "fixed-version: Fixed from version 1.0.3" }, { "id": "CVE-2008-1372", "status": "Patched", "link": "https://nvd.nist.gov/vuln/detail/CVE-2008-1372", "summary": "bzlib.c in bzip2 before 1.0.5 allows user-assisted remote attackers to cause a denial of service (crash) via a crafted file that triggers a buffer over-read, as demonstrated by the PROTOS GENOME test suite for Archive Formats.", "scorev2": "4.3", "scorev3": "0.0", "scorev4": "0.0", "modified": "2026-06-16T22:51:35.000", "vector": "NETWORK", "vectorString": "AV:N/AC:M/Au:N/C:N/I:N/A:P", "detail": "version-not-in-range" }, { "id": "CVE-2010-0405", "status": "Patched", "link": "https://nvd.nist.gov/vuln/detail/CVE-2010-0405", "summary": "Integer overflow in the BZ2_decompress function in decompress.c in bzip2 and libbzip2 before 1.0.6 allows context-dependent attackers to cause a denial of service (application crash) or possibly execute arbitrary code via a crafted compressed file.", "scorev2": "5.1", "scorev3": "0.0", "scorev4": "0.0", "modified": "2026-06-16T23:16:05.000", "vector": "NETWORK", "vectorString": "AV:N/AC:H/Au:N/C:P/I:P/A:P", "detail": "fixed-version: Fixed from version >1.0.5" }, { "id": "CVE-2011-4089", "status": "Patched", "link": "https://nvd.nist.gov/vuln/detail/CVE-2011-4089", "summary": "The bzexe command in bzip2 1.0.5 and earlier generates compressed executables that do not properly handle temporary files during extraction, which allows local users to execute arbitrary code by precreating a temporary directory.", "scorev2": "4.6", "scorev3": "0.0", "scorev4": "0.0", "modified": "2026-06-16T23:34:24.000", "vector": "LOCAL", "vectorString": "AV:L/AC:L/Au:N/C:P/I:P/A:P", "detail": "fixed-version: Fixed from version >1.0.4" }, { "id": "CVE-2016-3189", "status": "Patched", "link": "https://nvd.nist.gov/vuln/detail/CVE-2016-3189", "summary": "Use-after-free vulnerability in bzip2recover in bzip2 1.0.6 allows remote attackers to cause a denial of service (crash) via a crafted bzip2 file, related to block ends set to before the start of the block.", "scorev2": "4.3", "scorev3": "6.5", "scorev4": "0.0", "modified": "2026-06-17T00:45:15.000", "vector": "NETWORK", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H", "detail": "version-not-in-range" }, { "id": "CVE-2019-12900", "status": "Patched", "link": "https://nvd.nist.gov/vuln/detail/CVE-2019-12900", "summary": "BZ2_decompress in decompress.c in bzip2 through 1.0.6 has an out-of-bounds write when there are many selectors.", "scorev2": "7.5", "scorev3": "9.8", "scorev4": "0.0", "modified": "2026-06-17T02:15:41.000", "vector": "NETWORK", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H", "detail": "fixed-version: Fixed from version >1.0.6" }, { "id": "CVE-2026-42250", "status": "Patched", "link": "https://nvd.nist.gov/vuln/detail/CVE-2026-42250", "summary": "bzip2 contains an off\u2011by\u2011one error in the bzip2recover utility. When processing a specially crafted file, the application performs an out\u2011of\u2011bounds write to a global buffer, resulting in memory corruption and a crash (denial of service).\n\nThis issue was fixed in bzip2 patch\u00a035d122a3df8b0cc4082a4d89fdc6ee99f375fe67", "scorev2": "0.0", "scorev3": "0.0", "scorev4": "4.8", "modified": "2026-06-17T10:47:34.000", "vector": "LOCAL", "vectorString": "CVSS:4.0/AV:L/AC:L/AT:N/PR:N/UI:P/VC:N/VI:N/VA:L/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X", "detail": "fix-file-included", "patch-file": [ "/home/luan/src/yocto/wrynose/dart-mx8mp/sources/openembedded-core/meta/recipes-extended/bzip2/bzip2/CVE-2026-42250.patch" ] } ], "cpes": [ "cpe:2.3:*:bzip:bzip2:1.0.8:*:*:*:*:*:*:*" ] }, { "name": "ca-certificates", "layer": "core", "version": "20260601", "products": [ { "product": "ca-certificates", "cvesInRecord": "Yes" } ], "issue": [ { "id": "CVE-2023-32803", "status": "Patched", "link": "https://nvd.nist.gov/vuln/detail/CVE-2023-32803", "summary": "The ca-certificates package before ca-certificates-2021.2.50-72 for Amazon Linux 2 (AL2) does not properly remove certain TrustCor root certificates from the root store. NOTE: this issue exists because of an incorrect fix for CVE-2022-23491.", "scorev2": "0.0", "scorev3": "7.5", "scorev4": "0.0", "modified": "2026-09-22T19:56:19.000", "vector": "NETWORK", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N", "detail": "fixed-version: Fixed from version 2021.2.50-72" } ], "cpes": [ "cpe:2.3:*:*:ca-certificates:20260601:*:*:*:*:*:*:*" ] }, { "name": "cairo", "layer": "core", "version": "1.18.4", "products": [ { "product": "cairo", "cvesInRecord": "Yes" } ], "issue": [ { "id": "CVE-2007-5503", "status": "Patched", "link": "https://nvd.nist.gov/vuln/detail/CVE-2007-5503", "summary": "Multiple integer overflows in Cairo before 1.4.12 might allow remote attackers to execute arbitrary code, as demonstrated using a crafted PNG image with large width and height values, which is not properly handled by the read_png function.", "scorev2": "6.8", "scorev3": "0.0", "scorev4": "0.0", "modified": "2026-06-16T22:46:17.000", "vector": "NETWORK", "vectorString": "AV:N/AC:M/Au:N/C:P/I:P/A:P", "detail": "fixed-version: Fixed from version >1.4.10" }, { "id": "CVE-2014-5116", "status": "Patched", "link": "https://nvd.nist.gov/vuln/detail/CVE-2014-5116", "summary": "The cairo_image_surface_get_data function in Cairo 1.10.2, as used in GTK+ and Wireshark, allows context-dependent attackers to cause a denial of service (NULL pointer dereference) via a large string.", "scorev2": "5.0", "scorev3": "0.0", "scorev4": "0.0", "modified": "2026-06-17T00:11:05.000", "vector": "NETWORK", "vectorString": "AV:N/AC:L/Au:N/C:N/I:N/A:P", "detail": "version-not-in-range" }, { "id": "CVE-2016-3190", "status": "Patched", "link": "https://nvd.nist.gov/vuln/detail/CVE-2016-3190", "summary": "The fill_xrgb32_lerp_opaque_spans function in cairo-image-compositor.c in cairo before 1.14.2 allows remote attackers to cause a denial of service (out-of-bounds read and application crash) via a negative span length.", "scorev2": "5.0", "scorev3": "7.5", "scorev4": "0.0", "modified": "2026-06-17T00:45:16.000", "vector": "NETWORK", "vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H", "detail": "fixed-version: Fixed from version >1.12.16" }, { "id": "CVE-2016-9082", "status": "Patched", "link": "https://nvd.nist.gov/vuln/detail/CVE-2016-9082", "summary": "Integer overflow in the write_png function in cairo 1.14.6 allows remote attackers to cause a denial of service (invalid pointer dereference) via a large svg file.", "scorev2": "4.3", "scorev3": "5.5", "scorev4": "0.0", "modified": "2026-06-17T00:55:29.000", "vector": "LOCAL", "vectorString": "CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H", "detail": "version-not-in-range" }, { "id": "CVE-2017-7475", "status": "Patched", "link": "https://nvd.nist.gov/vuln/detail/CVE-2017-7475", "summary": "Cairo version 1.15.4 is vulnerable to a NULL pointer dereference related to the FT_Load_Glyph and FT_Render_Glyph resulting in an application crash.", "scorev2": "4.3", "scorev3": "5.5", "scorev4": "0.0", "modified": "2026-06-17T01:24:25.000", "vector": "LOCAL", "vectorString": "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H", "detail": "fix-file-included", "patch-file": [ "/home/luan/src/yocto/wrynose/dart-mx8mp/sources/openembedded-core/meta/recipes-graphics/cairo/cairo/cairo-get_bitmap_surface-bsc1036789-CVE-2017-7475.diff" ] }, { "id": "CVE-2017-9814", "status": "Patched", "link": "https://nvd.nist.gov/vuln/detail/CVE-2017-9814", "summary": "cairo-truetype-subset.c in cairo 1.15.6 and earlier allows remote attackers to cause a denial of service (out-of-bounds read) because of mishandling of an unexpected malloc(0) call.", "scorev2": "5.0", "scorev3": "7.5", "scorev4": "0.0", "modified": "2026-06-17T01:28:58.000", "vector": "NETWORK", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H", "detail": "fixed-version: Fixed from version >1.15.6" }, { "id": "CVE-2018-18064", "status": "Patched", "link": "https://nvd.nist.gov/vuln/detail/CVE-2018-18064", "summary": "cairo through 1.15.14 has an out-of-bounds stack-memory write during processing of a crafted document by WebKitGTK+ because of the interaction between cairo-rectangular-scan-converter.c (the generate and render_rows functions) and cairo-image-compositor.c (the _cairo_image_spans_and_zero function).", "scorev2": "4.3", "scorev3": "6.5", "scorev4": "0.0", "modified": "2026-06-17T01:46:43.000", "vector": "NETWORK", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H", "detail": "fixed-version: Fixed from version >1.15.14" }, { "id": "CVE-2018-19876", "status": "Patched", "link": "https://nvd.nist.gov/vuln/detail/CVE-2018-19876", "summary": "cairo 1.16.0, in cairo_ft_apply_variations() in cairo-ft-font.c, would free memory using a free function incompatible with WebKit's fastMalloc, leading to an application crash with a \"free(): invalid pointer\" error.", "scorev2": "4.3", "scorev3": "6.5", "scorev4": "0.0", "modified": "2026-06-17T01:50:02.000", "vector": "NETWORK", "vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H", "detail": "version-not-in-range" }, { "id": "CVE-2019-6461", "status": "Patched", "link": "https://nvd.nist.gov/vuln/detail/CVE-2019-6461", "summary": "An issue was discovered in cairo 1.16.0. There is an assertion problem in the function _cairo_arc_in_direction in the file cairo-arc.c.", "scorev2": "4.3", "scorev3": "6.5", "scorev4": "0.0", "modified": "2026-06-17T02:39:05.000", "vector": "NETWORK", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H", "detail": "version-not-in-range" }, { "id": "CVE-2019-6462", "status": "Patched", "link": "https://nvd.nist.gov/vuln/detail/CVE-2019-6462", "summary": "An issue was discovered in cairo 1.16.0. There is an infinite loop in the function _arc_error_normalized in the file cairo-arc.c, related to _arc_max_angle_for_tolerance_normalized.", "scorev2": "4.3", "scorev3": "6.5", "scorev4": "0.0", "modified": "2026-06-17T02:39:05.000", "vector": "NETWORK", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H", "detail": "version-not-in-range" }, { "id": "CVE-2020-35492", "status": "Patched", "link": "https://nvd.nist.gov/vuln/detail/CVE-2020-35492", "summary": "A flaw was found in cairo's image-compositor.c in all versions prior to 1.17.4. This flaw allows an attacker who can provide a crafted input file to cairo's image-compositor (for example, by convincing a user to open a file in an application using cairo, or if an application uses cairo on untrusted input) to cause a stack buffer overflow -> out-of-bounds WRITE. The highest impact from this vulnerability is to confidentiality, integrity, as well as system availability.", "scorev2": "6.8", "scorev3": "7.8", "scorev4": "0.0", "modified": "2026-06-17T03:13:48.000", "vector": "LOCAL", "vectorString": "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H", "detail": "fixed-version: Fixed from version 1.17.4" }, { "id": "CVE-2025-50422", "status": "Unpatched", "link": "https://nvd.nist.gov/vuln/detail/CVE-2025-50422", "summary": "Cairo through 1.18.4, as used in Poppler through 25.08.0, has an \"unscaled->face == NULL\" assertion failure for _cairo_ft_unscaled_font_fini in cairo-ft-font.c.", "scorev2": "0.0", "scorev3": "2.9", "scorev4": "0.0", "modified": "2026-06-17T09:35:04.000", "vector": "LOCAL", "vectorString": "CVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:L", "detail": "version-in-range", "description": "May need backporting (fixed from >1.18.4)" } ], "cpes": [ "cpe:2.3:*:*:cairo:1.18.4:*:*:*:*:*:*:*" ] }, { "name": "can-utils", "layer": "openembedded-layer", "version": "2025.01", "products": [ { "product": "can-utils", "cvesInRecord": "No" } ], "issue": [], "cpes": [ "cpe:2.3:*:*:can-utils:2025.01:*:*:*:*:*:*:*" ] }, { "name": "catch2", "layer": "openembedded-layer", "version": "3.14.0", "products": [ { "product": "catch2", "cvesInRecord": "No" } ], "issue": [], "cpes": [ "cpe:2.3:*:*:catch2:3.14.0:*:*:*:*:*:*:*" ] }, { "name": "chromium-ozone-wayland", "layer": "chromium-browser-layer", "version": "142.0.7444.175", "products": [ { "product": "chrome", "cvesInRecord": "Yes" }, { "product": "chromium", "cvesInRecord": "Yes" } ], "issue": [ { "id": "CVE-2005-4900", "status": "Patched", "link": "https://nvd.nist.gov/vuln/detail/CVE-2005-4900", "summary": "SHA-1 is not collision resistant, which makes it easier for context-dependent attackers to conduct spoofing attacks, as demonstrated by attacks on the use of SHA-1 in TLS 1.2. NOTE: this CVE exists to provide a common identifier for referencing this SHA-1 issue; the existence of an identifier is not, by itself, a technology recommendation.", "scorev2": "4.3", "scorev3": "5.9", "scorev4": "0.0", "modified": "2026-06-16T22:19:40.000", "vector": "NETWORK", "vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N", "detail": "fixed-version: Fixed from version >47.0.2526.111" }, { "id": "CVE-2008-4340", "status": "Patched", "link": "https://nvd.nist.gov/vuln/detail/CVE-2008-4340", "summary": "Google Chrome 0.2.149.29 and 0.2.149.30 allows remote attackers to cause a denial of service (memory consumption) via an HTML document containing a carriage return (\"\\r\\n\\r\\n\") argument to the window.open function.", "scorev2": "4.3", "scorev3": "0.0", "scorev4": "0.0", "modified": "2026-06-16T22:57:38.000", "vector": "NETWORK", "vectorString": "AV:N/AC:M/Au:N/C:N/I:N/A:P", "detail": "version-not-in-range" }, { "id": "CVE-2008-4724", "status": "Patched", "link": "https://nvd.nist.gov/vuln/detail/CVE-2008-4724", "summary": "Multiple cross-site scripting (XSS) vulnerabilities in Google Chrome 0.2.149.30 allow remote attackers to inject arbitrary web script or HTML via an ftp:// URL for an HTML document within a (1) JPG, (2) PDF, or (3) TXT file. NOTE: the provenance of this information is unknown; the details are obtained solely from third party information.", "scorev2": "4.3", "scorev3": "0.0", "scorev4": "0.0", "modified": "2026-06-16T22:58:23.000", "vector": "NETWORK", "vectorString": "AV:N/AC:M/Au:N/C:N/I:P/A:N", "detail": "version-not-in-range" }, { "id": "CVE-2008-5749", "status": "Patched", "link": "https://nvd.nist.gov/vuln/detail/CVE-2008-5749", "summary": "Argument injection vulnerability in Google Chrome 1.0.154.36 on Windows XP SP3 allows remote attackers to execute arbitrary commands via the --renderer-path option in a chromehtml: URI. NOTE: a third party disputes this issue, stating that Chrome \"will ask for user permission\" and \"cannot launch the applet even [if] you have given out the permission.", "scorev2": "6.8", "scorev3": "0.0", "scorev4": "0.0", "modified": "2026-06-16T23:00:55.000", "vector": "NETWORK", "vectorString": "AV:N/AC:M/Au:N/C:P/I:P/A:P", "detail": "version-not-in-range" }, { "id": "CVE-2008-5915", "status": "Unpatched", "link": "https://nvd.nist.gov/vuln/detail/CVE-2008-5915", "summary": "An unspecified function in the JavaScript implementation in Google Chrome creates and exposes a \"temporary footprint\" when there is a current login to a web site, which makes it easier for remote attackers to trick a user into acting upon a spoofed pop-up message, aka an \"in-session phishing attack.\" NOTE: as of 20090116, the only disclosure is a vague pre-advisory with no actionable information. However, because it is from a well-known researcher, it is being assigned a CVE identifier for tracking purposes.", "scorev2": "2.1", "scorev3": "0.0", "scorev4": "0.0", "modified": "2026-06-16T23:01:13.000", "vector": "NETWORK", "vectorString": "AV:N/AC:H/Au:S/C:N/I:P/A:N", "detail": "no-version-ranges", "description": "Check package version" }, { "id": "CVE-2008-6994", "status": "Patched", "link": "https://nvd.nist.gov/vuln/detail/CVE-2008-6994", "summary": "Stack-based buffer overflow in the SaveAs feature (SaveFileAsWithFilter function) in win_util.cc in Google Chrome 0.2.149.27 allows user-assisted remote attackers to execute arbitrary code via a web page with a long TITLE element, which triggers the overflow when the user saves the page and a long filename is generated. NOTE: it might be possible to exploit this issue via an HTTP response that includes a long filename in a Content-Disposition header.", "scorev2": "9.3", "scorev3": "0.0", "scorev4": "0.0", "modified": "2026-06-16T23:03:23.000", "vector": "NETWORK", "vectorString": "AV:N/AC:M/Au:N/C:C/I:C/A:C", "detail": "version-not-in-range" }, { "id": "CVE-2008-6995", "status": "Patched", "link": "https://nvd.nist.gov/vuln/detail/CVE-2008-6995", "summary": "Integer underflow in net/base/escape.cc in chrome.dll in Google Chrome 0.2.149.27 allows remote attackers to cause a denial of service (browser crash) via a URI with an invalid handler followed by a \"%\" (percent) character, which triggers a buffer over-read, as demonstrated using an \"about:%\" URI.", "scorev2": "4.3", "scorev3": "0.0", "scorev4": "0.0", "modified": "2026-06-16T23:03:23.000", "vector": "NETWORK", "vectorString": "AV:N/AC:M/Au:N/C:N/I:N/A:P", "detail": "version-not-in-range" }, { "id": "CVE-2008-6996", "status": "Patched", "link": "https://nvd.nist.gov/vuln/detail/CVE-2008-6996", "summary": "Google Chrome BETA (0.2.149.27) does not prompt the user before saving an executable file, which makes it easier for remote attackers or malware to cause a denial of service (disk consumption) or exploit other vulnerabilities via a URL that references an executable file, possibly related to the \"ask where to save each file before downloading\" setting.", "scorev2": "5.0", "scorev3": "0.0", "scorev4": "0.0", "modified": "2026-06-16T23:03:23.000", "vector": "NETWORK", "vectorString": "AV:N/AC:L/Au:N/C:N/I:N/A:P", "detail": "version-not-in-range" }, { "id": "CVE-2008-6997", "status": "Patched", "link": "https://nvd.nist.gov/vuln/detail/CVE-2008-6997", "summary": "Google Chrome 0.2.149.27 allows user-assisted remote attackers to cause a denial of service (browser crash) via an IMG tag with a long src attribute, which triggers the crash when the victim performs an \"Inspect Element\" action.", "scorev2": "4.3", "scorev3": "0.0", "scorev4": "0.0", "modified": "2026-06-16T23:03:23.000", "vector": "NETWORK", "vectorString": "AV:N/AC:M/Au:N/C:N/I:N/A:P", "detail": "version-not-in-range" }, { "id": "CVE-2008-6998", "status": "Patched", "link": "https://nvd.nist.gov/vuln/detail/CVE-2008-6998", "summary": "Stack-based buffer overflow in chrome/common/gfx/url_elider.cc in Google Chrome 0.2.149.27 and other versions before 0.2.149.29 might allow user-assisted remote attackers to execute arbitrary code via a link target (href attribute) with a large number of path elements, which triggers the overflow when the status bar is updated after the user hovers over the link.", "scorev2": "9.3", "scorev3": "0.0", "scorev4": "0.0", "modified": "2026-06-16T23:03:23.000", "vector": "NETWORK", "vectorString": "AV:N/AC:M/Au:N/C:C/I:C/A:C", "detail": "version-not-in-range" }, { "id": "CVE-2008-7061", "status": "Patched", "link": "https://nvd.nist.gov/vuln/detail/CVE-2008-7061", "summary": "The tooltip manager (chrome/views/tooltip_manager.cc) in Google Chrome 0.2.149.29 Build 1798 and possibly other versions before 0.2.149.30 allows remote attackers to cause a denial of service (CPU consumption or crash) via a tag with a long title attribute, which is not properly handled when displaying a tooltip, a different vulnerability than CVE-2008-6994. NOTE: there is inconsistent information about the environments under which this issue exists.", "scorev2": "4.3", "scorev3": "0.0", "scorev4": "0.0", "modified": "2026-06-16T23:03:31.000", "vector": "NETWORK", "vectorString": "AV:N/AC:M/Au:N/C:N/I:N/A:P", "detail": "version-not-in-range" }, { "id": "CVE-2008-7246", "status": "Patched", "link": "https://nvd.nist.gov/vuln/detail/CVE-2008-7246", "summary": "Google Chrome 0.2.149.29 and earlier allows remote attackers to cause a denial of service (unusable browser) by calling the window.print function in a loop, aka a \"printing DoS attack,\" possibly a related issue to CVE-2009-0821.", "scorev2": "5.0", "scorev3": "0.0", "scorev4": "0.0", "modified": "2026-06-16T23:03:54.000", "vector": "NETWORK", "vectorString": "AV:N/AC:L/Au:N/C:N/I:N/A:P", "detail": "fixed-version: Fixed from version >0.2.149.29" }, { "id": "CVE-2008-7294", "status": "Patched", "link": "https://nvd.nist.gov/vuln/detail/CVE-2008-7294", "summary": "Google Chrome before 4.0.211.0 cannot properly restrict modifications to cookies established in HTTPS sessions, which allows man-in-the-middle attackers to overwrite or delete arbitrary cookies via a Set-Cookie header in an HTTP response, related to lack of the HTTP Strict Transport Security (HSTS) includeSubDomains feature, aka a \"cookie forcing\" issue.", "scorev2": "5.8", "scorev3": "0.0", "scorev4": "0.0", "modified": "2026-06-16T23:04:00.000", "vector": "NETWORK", "vectorString": "AV:N/AC:M/Au:N/C:N/I:P/A:P", "detail": "fixed-version: Fixed from version >3.0.195.38" }, { "id": "CVE-2009-0276", "status": "Patched", "link": "https://nvd.nist.gov/vuln/detail/CVE-2009-0276", "summary": "Cross-domain vulnerability in the V8 JavaScript engine in Google Chrome before 1.0.154.46 allows remote attackers to bypass the Same Origin Policy via a crafted script that accesses another frame and reads its full URL and possibly other sensitive information, or modifies the URL of this frame.", "scorev2": "5.0", "scorev3": "0.0", "scorev4": "0.0", "modified": "2026-06-16T23:04:38.000", "vector": "NETWORK", "vectorString": "AV:N/AC:L/Au:N/C:P/I:N/A:N", "detail": "fixed-version: Fixed from version >1.0.154.43" }, { "id": "CVE-2009-0374", "status": "Patched", "link": "https://nvd.nist.gov/vuln/detail/CVE-2009-0374", "summary": "Google Chrome 1.0.154.43 allows remote attackers to trick a user into visiting an arbitrary URL via an onclick action that moves a crafted element to the current mouse position, related to a \"Clickjacking\" vulnerability. NOTE: a third party disputes the relevance of this issue, stating that \"every sufficiently featured browser is and likely will remain susceptible to the behavior known as clickjacking,\" and adding that the exploit code \"is not a valid demonstration of the issue.", "scorev2": "4.3", "scorev3": "0.0", "scorev4": "0.0", "modified": "2026-06-16T23:04:53.000", "vector": "NETWORK", "vectorString": "AV:N/AC:M/Au:N/C:N/I:P/A:N", "detail": "version-not-in-range" }, { "id": "CVE-2009-0411", "status": "Patched", "link": "https://nvd.nist.gov/vuln/detail/CVE-2009-0411", "summary": "Google Chrome before 1.0.154.46 does not properly restrict access from web pages to the (1) Set-Cookie and (2) Set-Cookie2 HTTP response headers, which allows remote attackers to obtain sensitive information from cookies via XMLHttpRequest calls and other web script.", "scorev2": "5.0", "scorev3": "0.0", "scorev4": "0.0", "modified": "2026-06-16T23:04:59.000", "vector": "NETWORK", "vectorString": "AV:N/AC:L/Au:N/C:P/I:N/A:N", "detail": "fixed-version: Fixed from version >1.0.154.43" }, { "id": "CVE-2009-1412", "status": "Patched", "link": "https://nvd.nist.gov/vuln/detail/CVE-2009-1412", "summary": "Argument injection vulnerability in the chromehtml: protocol handler in Google Chrome before 1.0.154.59, when invoked by Internet Explorer, allows remote attackers to determine the existence of files, and open tabs for URLs that do not satisfy the IsWebSafeScheme restriction, via a web page that sets document.location to a chromehtml: value, as demonstrated by use of a (1) javascript: or (2) data: URL. NOTE: this can be leveraged for Universal XSS by exploiting certain behavior involving persistence across page transitions.", "scorev2": "7.8", "scorev3": "0.0", "scorev4": "0.0", "modified": "2026-06-16T23:07:12.000", "vector": "NETWORK", "vectorString": "AV:N/AC:L/Au:N/C:C/I:N/A:N", "detail": "fixed-version: Fixed from version >1.0.154.53" }, { "id": "CVE-2009-1413", "status": "Patched", "link": "https://nvd.nist.gov/vuln/detail/CVE-2009-1413", "summary": "Google Chrome 1.0.x does not cancel timeouts upon a page transition, which makes it easier for attackers to conduct Universal XSS attacks by calling setTimeout to trigger future execution of JavaScript code, and then modifying document.location to arrange for JavaScript execution in the context of an arbitrary web site. NOTE: this can be leveraged for a remote attack by exploiting a chromehtml: argument-injection vulnerability.", "scorev2": "4.3", "scorev3": "0.0", "scorev4": "0.0", "modified": "2026-06-16T23:07:13.000", "vector": "NETWORK", "vectorString": "AV:N/AC:M/Au:N/C:N/I:P/A:N", "detail": "version-not-in-range" }, { "id": "CVE-2009-1414", "status": "Patched", "link": "https://nvd.nist.gov/vuln/detail/CVE-2009-1414", "summary": "Google Chrome 2.0.x lets modifications to the global object persist across a page transition, which makes it easier for attackers to conduct Universal XSS attacks via unspecified vectors.", "scorev2": "4.3", "scorev3": "0.0", "scorev4": "0.0", "modified": "2026-06-16T23:07:13.000", "vector": "NETWORK", "vectorString": "AV:N/AC:M/Au:N/C:N/I:P/A:N", "detail": "version-not-in-range" }, { "id": "CVE-2009-1441", "status": "Patched", "link": "https://nvd.nist.gov/vuln/detail/CVE-2009-1441", "summary": "Heap-based buffer overflow in the ParamTraits::Read function in Google Chrome before 1.0.154.64 allows attackers to leverage renderer access to cause a denial of service (application crash) or possibly execute arbitrary code via vectors related to a large bitmap that arrives over the IPC channel.", "scorev2": "9.3", "scorev3": "0.0", "scorev4": "0.0", "modified": "2026-06-16T23:07:17.000", "vector": "NETWORK", "vectorString": "AV:N/AC:M/Au:N/C:C/I:C/A:C", "detail": "fixed-version: Fixed from version >1.0.154.53" }, { "id": "CVE-2009-1442", "status": "Patched", "link": "https://nvd.nist.gov/vuln/detail/CVE-2009-1442", "summary": "Multiple integer overflows in Skia, as used in Google Chrome 1.x before 1.0.154.64 and 2.x, and possibly Android, might allow remote attackers to execute arbitrary code in the renderer process via a crafted (1) image or (2) canvas.", "scorev2": "6.8", "scorev3": "0.0", "scorev4": "0.0", "modified": "2026-06-16T23:07:17.000", "vector": "NETWORK", "vectorString": "AV:N/AC:M/Au:N/C:P/I:P/A:P", "detail": "fixed-version: Fixed from version >1.0.154.53" }, { "id": "CVE-2009-1514", "status": "Patched", "link": "https://nvd.nist.gov/vuln/detail/CVE-2009-1514", "summary": "Google Chrome 1.0.154.53 allows remote attackers to cause a denial of service (NULL pointer dereference and application crash) via a throw statement with a long exception value.", "scorev2": "5.0", "scorev3": "0.0", "scorev4": "0.0", "modified": "2026-06-16T23:07:25.000", "vector": "NETWORK", "vectorString": "AV:N/AC:L/Au:N/C:N/I:N/A:P", "detail": "version-not-in-range" }, { "id": "CVE-2009-1598", "status": "Unpatched", "link": "https://nvd.nist.gov/vuln/detail/CVE-2009-1598", "summary": "Google Chrome executes DOM calls in response to a javascript: URI in the target attribute of a submit element within a form contained in an inline PDF file, which might allow remote attackers to bypass intended Adobe Acrobat JavaScript restrictions on accessing the document object, as demonstrated by a web site that permits PDF uploads by untrusted users, and therefore has a shared document.domain between the web site and this javascript: URI. NOTE: the researcher reports that Adobe's position is \"a PDF file is active content.\"", "scorev2": "9.3", "scorev3": "0.0", "scorev4": "0.0", "modified": "2026-06-16T23:07:36.000", "vector": "NETWORK", "vectorString": "AV:N/AC:M/Au:N/C:C/I:C/A:C", "detail": "no-version-ranges", "description": "Check package version" }, { "id": "CVE-2009-1690", "status": "Patched", "link": "https://nvd.nist.gov/vuln/detail/CVE-2009-1690", "summary": "Use-after-free vulnerability in WebKit, as used in Apple Safari before 4.0, iPhone OS 1.0 through 2.2.1, iPhone OS for iPod touch 1.1 through 2.2.1, Google Chrome 1.0.154.53, and possibly other products, allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption and application crash) by setting an unspecified property of an HTML tag that causes child elements to be freed and later accessed when an HTML error occurs, related to \"recursion in certain DOM event handlers.\"", "scorev2": "9.3", "scorev3": "0.0", "scorev4": "0.0", "modified": "2026-06-16T23:07:50.000", "vector": "NETWORK", "vectorString": "AV:N/AC:M/Au:N/C:C/I:C/A:C", "detail": "version-not-in-range" }, { "id": "CVE-2009-2060", "status": "Patched", "link": "https://nvd.nist.gov/vuln/detail/CVE-2009-2060", "summary": "src/net/http/http_transaction_winhttp.cc in Google Chrome before 1.0.154.53 uses the HTTP Host header to determine the context of a document provided in a (1) 4xx or (2) 5xx CONNECT response from a proxy server, which allows man-in-the-middle attackers to execute arbitrary web script by modifying this CONNECT response, aka an \"SSL tampering\" attack.", "scorev2": "5.8", "scorev3": "0.0", "scorev4": "0.0", "modified": "2026-06-16T23:08:40.000", "vector": "NETWORK", "vectorString": "AV:N/AC:M/Au:N/C:P/I:P/A:N", "detail": "fixed-version: Fixed from version >1.0.154.52" }, { "id": "CVE-2009-2071", "status": "Patched", "link": "https://nvd.nist.gov/vuln/detail/CVE-2009-2071", "summary": "Google Chrome before 1.0.154.53 displays a cached certificate for a (1) 4xx or (2) 5xx CONNECT response page returned by a proxy server, which allows man-in-the-middle attackers to spoof an arbitrary https site by letting a browser obtain a valid certificate from this site during one request, and then sending the browser a crafted 502 response page upon a subsequent request.", "scorev2": "6.8", "scorev3": "0.0", "scorev4": "0.0", "modified": "2026-06-16T23:08:42.000", "vector": "NETWORK", "vectorString": "AV:N/AC:M/Au:N/C:P/I:P/A:P", "detail": "fixed-version: Fixed from version >1.0.154.52" }, { "id": "CVE-2009-2121", "status": "Patched", "link": "https://nvd.nist.gov/vuln/detail/CVE-2009-2121", "summary": "Buffer overflow in the browser kernel in Google Chrome before 2.0.172.33 allows remote HTTP servers to cause a denial of service (application crash) or possibly execute arbitrary code via a crafted response.", "scorev2": "9.3", "scorev3": "0.0", "scorev4": "0.0", "modified": "2026-06-16T23:08:49.000", "vector": "NETWORK", "vectorString": "AV:N/AC:M/Au:N/C:C/I:C/A:C", "detail": "fixed-version: Fixed from version >2.0.172" }, { "id": "CVE-2009-2352", "status": "Patched", "link": "https://nvd.nist.gov/vuln/detail/CVE-2009-2352", "summary": "Google Chrome 1.0.154.48 and earlier does not block javascript: URIs in Refresh headers in HTTP responses, which allows remote attackers to conduct cross-site scripting (XSS) attacks via vectors related to (1) injecting a Refresh header or (2) specifying the content of a Refresh header, a related issue to CVE-2009-1312. NOTE: it was later reported that 2.0.172.28, 2.0.172.37, and 3.0.193.2 Beta are also affected.", "scorev2": "4.3", "scorev3": "0.0", "scorev4": "0.0", "modified": "2026-06-16T23:09:16.000", "vector": "NETWORK", "vectorString": "AV:N/AC:M/Au:N/C:N/I:P/A:N", "detail": "fixed-version: Fixed from version >1.0.154.48" }, { "id": "CVE-2009-2416", "status": "Patched", "link": "https://nvd.nist.gov/vuln/detail/CVE-2009-2416", "summary": "Multiple use-after-free vulnerabilities in libxml2 2.5.10, 2.6.16, 2.6.26, 2.6.27, and 2.6.32, and libxml 1.8.17, allow context-dependent attackers to cause a denial of service (application crash) via crafted (1) Notation or (2) Enumeration attribute types in an XML file, as demonstrated by the Codenomicon XML fuzzing framework.", "scorev2": "4.3", "scorev3": "6.5", "scorev4": "0.0", "modified": "2026-06-16T23:09:24.000", "vector": "NETWORK", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H", "detail": "fixed-version: Fixed from version 2.0.172.43" }, { "id": "CVE-2009-2555", "status": "Patched", "link": "https://nvd.nist.gov/vuln/detail/CVE-2009-2555", "summary": "Heap-based buffer overflow in src/jsregexp.cc in Google V8 before 1.1.10.14, as used in Google Chrome before 2.0.172.37, allows remote attackers to execute arbitrary code in the Chrome sandbox via a crafted JavaScript regular expression.", "scorev2": "9.3", "scorev3": "0.0", "scorev4": "0.0", "modified": "2026-06-16T23:09:41.000", "vector": "NETWORK", "vectorString": "AV:N/AC:M/Au:N/C:C/I:C/A:C", "detail": "fixed-version: Fixed from version >2.0.172.33" }, { "id": "CVE-2009-2556", "status": "Patched", "link": "https://nvd.nist.gov/vuln/detail/CVE-2009-2556", "summary": "Google Chrome before 2.0.172.37 allows attackers to leverage renderer access to cause a denial of service (memory corruption and application crash) or possibly execute arbitrary code via unspecified vectors that trigger excessive memory allocation.", "scorev2": "9.3", "scorev3": "0.0", "scorev4": "0.0", "modified": "2026-06-16T23:09:42.000", "vector": "NETWORK", "vectorString": "AV:N/AC:M/Au:N/C:C/I:C/A:C", "detail": "fixed-version: Fixed from version >2.0.172.33" }, { "id": "CVE-2009-2578", "status": "Patched", "link": "https://nvd.nist.gov/vuln/detail/CVE-2009-2578", "summary": "Google Chrome 2.x through 2.0.172 allows remote attackers to cause a denial of service (application crash) via a long Unicode string argument to the write method, a related issue to CVE-2009-2479.", "scorev2": "5.0", "scorev3": "0.0", "scorev4": "0.0", "modified": "2026-06-16T23:09:44.000", "vector": "NETWORK", "vectorString": "AV:N/AC:L/Au:N/C:N/I:N/A:P", "detail": "version-not-in-range" }, { "id": "CVE-2009-2816", "status": "Patched", "link": "https://nvd.nist.gov/vuln/detail/CVE-2009-2816", "summary": "The implementation of Cross-Origin Resource Sharing (CORS) in WebKit, as used in Apple Safari before 4.0.4 and Google Chrome before 3.0.195.33, includes certain custom HTTP headers in the OPTIONS request during cross-origin operations with preflight, which makes it easier for remote attackers to conduct cross-site request forgery (CSRF) attacks via a crafted web page.", "scorev2": "6.8", "scorev3": "0.0", "scorev4": "0.0", "modified": "2026-06-16T23:10:16.000", "vector": "NETWORK", "vectorString": "AV:N/AC:M/Au:N/C:P/I:P/A:P", "detail": "fixed-version: Fixed from version 3.0.195.33" }, { "id": "CVE-2009-2935", "status": "Patched", "link": "https://nvd.nist.gov/vuln/detail/CVE-2009-2935", "summary": "Google V8, as used in Google Chrome before 2.0.172.43, allows remote attackers to bypass intended restrictions on reading memory, and possibly obtain sensitive information or execute arbitrary code in the Chrome sandbox, via crafted JavaScript.", "scorev2": "10.0", "scorev3": "0.0", "scorev4": "0.0", "modified": "2026-06-16T23:10:32.000", "vector": "NETWORK", "vectorString": "AV:N/AC:L/Au:N/C:C/I:C/A:C", "detail": "fixed-version: Fixed from version >2.0.172.37" }, { "id": "CVE-2009-2955", "status": "Patched", "link": "https://nvd.nist.gov/vuln/detail/CVE-2009-2955", "summary": "Google Chrome 1.0.154.48 and earlier allows remote attackers to cause a denial of service (CPU consumption and application hang) via JavaScript code with a long string value for the hash property (aka location.hash), a related issue to CVE-2008-5715.", "scorev2": "5.0", "scorev3": "0.0", "scorev4": "0.0", "modified": "2026-06-16T23:10:36.000", "vector": "NETWORK", "vectorString": "AV:N/AC:L/Au:N/C:N/I:N/A:P", "detail": "fixed-version: Fixed from version >1.0.154.48" }, { "id": "CVE-2009-2973", "status": "Patched", "link": "https://nvd.nist.gov/vuln/detail/CVE-2009-2973", "summary": "Google Chrome before 2.0.172.43 does not prevent SSL connections to a site with an X.509 certificate signed with the (1) MD2 or (2) MD4 algorithm, which makes it easier for man-in-the-middle attackers to spoof arbitrary HTTPS servers via a crafted certificate, a related issue to CVE-2009-2409.", "scorev2": "6.4", "scorev3": "0.0", "scorev4": "0.0", "modified": "2026-06-16T23:10:38.000", "vector": "NETWORK", "vectorString": "AV:N/AC:L/Au:N/C:N/I:P/A:P", "detail": "fixed-version: Fixed from version >2.0.172.37" }, { "id": "CVE-2009-2974", "status": "Patched", "link": "https://nvd.nist.gov/vuln/detail/CVE-2009-2974", "summary": "Google Chrome 1.0.154.65, 1.0.154.48, and earlier allows remote attackers to (1) cause a denial of service (application hang) via vectors involving a chromehtml: URI value for the document.location property or (2) cause a denial of service (application hang and CPU consumption) via vectors involving a series of function calls that set a chromehtml: URI value for the document.location property.", "scorev2": "5.0", "scorev3": "0.0", "scorev4": "0.0", "modified": "2026-06-16T23:10:38.000", "vector": "NETWORK", "vectorString": "AV:N/AC:L/Au:N/C:N/I:N/A:P", "detail": "fixed-version: Fixed from version >1.0.154.48" }, { "id": "CVE-2009-3011", "status": "Patched", "link": "https://nvd.nist.gov/vuln/detail/CVE-2009-3011", "summary": "Google Chrome 1.0.154.48 and earlier, 2.0.172.28, 2.0.172.37, and 3.0.193.2 Beta does not properly block data: URIs in Refresh headers in HTTP responses, which allows remote attackers to conduct cross-site scripting (XSS) attacks via vectors related to (1) injecting a Refresh header that contains JavaScript sequences in a data:text/html URI or (2) entering a data:text/html URI with JavaScript sequences when specifying the content of a Refresh header. NOTE: the JavaScript executes outside of the context of the HTTP site.", "scorev2": "4.3", "scorev3": "0.0", "scorev4": "0.0", "modified": "2026-06-16T23:10:43.000", "vector": "NETWORK", "vectorString": "AV:N/AC:M/Au:N/C:N/I:P/A:N", "detail": "fixed-version: Fixed from version >1.0.154.48" }, { "id": "CVE-2009-3263", "status": "Patched", "link": "https://nvd.nist.gov/vuln/detail/CVE-2009-3263", "summary": "Cross-site scripting (XSS) vulnerability in Google Chrome 2.x and 3.x before 3.0.195.21 allows remote attackers to inject arbitrary web script or HTML via a (1) RSS or (2) Atom feed, related to the rendering of the application/rss+xml content type as XML \"active content.\"", "scorev2": "4.3", "scorev3": "0.0", "scorev4": "0.0", "modified": "2026-06-16T23:11:15.000", "vector": "NETWORK", "vectorString": "AV:N/AC:M/Au:N/C:N/I:P/A:N", "detail": "version-not-in-range" }, { "id": "CVE-2009-3264", "status": "Patched", "link": "https://nvd.nist.gov/vuln/detail/CVE-2009-3264", "summary": "The getSVGDocument method in Google Chrome before 3.0.195.21 omits an unspecified \"access check,\" which allows remote web servers to bypass the Same Origin Policy and conduct cross-site scripting attacks via unknown vectors, related to a user's visit to a different web server that hosts an SVG document.", "scorev2": "4.3", "scorev3": "0.0", "scorev4": "0.0", "modified": "2026-06-16T23:11:15.000", "vector": "NETWORK", "vectorString": "AV:N/AC:M/Au:N/C:N/I:P/A:N", "detail": "fixed-version: Fixed from version >3.0.193.2" }, { "id": "CVE-2009-3268", "status": "Patched", "link": "https://nvd.nist.gov/vuln/detail/CVE-2009-3268", "summary": "Google Chrome 1.0.154.48 and earlier allows remote attackers to cause a denial of service (CPU consumption) via an automatically submitted form containing a KEYGEN element, a related issue to CVE-2009-1828.", "scorev2": "5.0", "scorev3": "0.0", "scorev4": "0.0", "modified": "2026-06-16T23:11:16.000", "vector": "NETWORK", "vectorString": "AV:N/AC:L/Au:N/C:N/I:N/A:P", "detail": "fixed-version: Fixed from version >1.0.154.48" }, { "id": "CVE-2009-3456", "status": "Patched", "link": "https://nvd.nist.gov/vuln/detail/CVE-2009-3456", "summary": "Google Chrome, possibly 3.0.195.21 and earlier, does not properly handle a '\\0' character in a domain name in the subject's Common Name (CN) field of an X.509 certificate, which allows man-in-the-middle attackers to spoof arbitrary SSL servers via a crafted certificate issued by a legitimate Certification Authority, a related issue to CVE-2009-2408. NOTE: the provenance of this information is unknown; the details are obtained solely from third party information.", "scorev2": "7.5", "scorev3": "0.0", "scorev4": "0.0", "modified": "2026-06-16T23:11:38.000", "vector": "NETWORK", "vectorString": "AV:N/AC:L/Au:N/C:P/I:P/A:P", "detail": "fixed-version: Fixed from version >3.0.195.21" }, { "id": "CVE-2009-3931", "status": "Patched", "link": "https://nvd.nist.gov/vuln/detail/CVE-2009-3931", "summary": "Incomplete blacklist vulnerability in browser/download/download_exe.cc in Google Chrome before 3.0.195.32 allows remote attackers to force the download of certain dangerous files via a \"Content-Disposition: attachment\" designation, as demonstrated by (1) .mht and (2) .mhtml files, which are automatically executed by Internet Explorer 6; (3) .svg files, which are automatically executed by Safari; (4) .xml files; (5) .htt files; (6) .xsl files; (7) .xslt files; and (8) image files that are forbidden by the victim's site policy.", "scorev2": "9.3", "scorev3": "0.0", "scorev4": "0.0", "modified": "2026-06-16T23:12:38.000", "vector": "NETWORK", "vectorString": "AV:N/AC:M/Au:N/C:C/I:C/A:C", "detail": "fixed-version: Fixed from version >3.0.195.21" }, { "id": "CVE-2009-3932", "status": "Patched", "link": "https://nvd.nist.gov/vuln/detail/CVE-2009-3932", "summary": "The Gears plugin in Google Chrome before 3.0.195.32 allows user-assisted remote attackers to cause a denial of service (memory corruption and plugin crash) or possibly execute arbitrary code via unspecified use of the Gears SQL API, related to putting \"SQL metadata into a bad state.\"", "scorev2": "9.3", "scorev3": "0.0", "scorev4": "0.0", "modified": "2026-06-16T23:12:39.000", "vector": "NETWORK", "vectorString": "AV:N/AC:M/Au:N/C:C/I:C/A:C", "detail": "fixed-version: Fixed from version >3.0.195.21" }, { "id": "CVE-2009-3934", "status": "Patched", "link": "https://nvd.nist.gov/vuln/detail/CVE-2009-3934", "summary": "The WebFrameLoaderClient::dispatchDidChangeLocationWithinPage function in src/webkit/glue/webframeloaderclient_impl.cc in Google Chrome before 3.0.195.32 allows user-assisted remote attackers to cause a denial of service via a page-local link, related to an \"empty redirect chain,\" as demonstrated by a message in Yahoo! Mail.", "scorev2": "4.3", "scorev3": "0.0", "scorev4": "0.0", "modified": "2026-06-16T23:12:39.000", "vector": "NETWORK", "vectorString": "AV:N/AC:M/Au:N/C:N/I:N/A:P", "detail": "fixed-version: Fixed from version >3.0.195.21" }, { "id": "CVE-2010-0315", "status": "Patched", "link": "https://nvd.nist.gov/vuln/detail/CVE-2010-0315", "summary": "WebKit before r53607, as used in Google Chrome before 4.0.249.89, allows remote attackers to discover a redirect's target URL, for the session of a specific user of a web site, by placing the site's URL in the HREF attribute of a stylesheet LINK element, and then reading the document.styleSheets[0].href property value, related to an IFRAME element.", "scorev2": "5.0", "scorev3": "0.0", "scorev4": "0.0", "modified": "2026-06-16T23:15:55.000", "vector": "NETWORK", "vectorString": "AV:N/AC:L/Au:N/C:P/I:N/A:N", "detail": "fixed-version: Fixed from version >4.0.249.78" }, { "id": "CVE-2010-0556", "status": "Patched", "link": "https://nvd.nist.gov/vuln/detail/CVE-2010-0556", "summary": "browser/login/login_prompt.cc in Google Chrome before 4.0.249.89 populates an authentication dialog with credentials that were stored by Password Manager for a different web site, which allows user-assisted remote HTTP servers to obtain sensitive information via a URL that requires authentication, as demonstrated by a URL in the SRC attribute of an IMG element.", "scorev2": "4.3", "scorev3": "0.0", "scorev4": "0.0", "modified": "2026-06-16T23:16:23.000", "vector": "NETWORK", "vectorString": "AV:N/AC:M/Au:N/C:N/I:P/A:N", "detail": "fixed-version: Fixed from version >4.0.249.78" }, { "id": "CVE-2010-0643", "status": "Patched", "link": "https://nvd.nist.gov/vuln/detail/CVE-2010-0643", "summary": "Google Chrome before 4.0.249.89 attempts to make direct connections to web sites when all configured proxy servers are unavailable, which allows remote HTTP servers to obtain potentially sensitive information about the identity of a client user via standard HTTP logging, as demonstrated by a proxy server that was configured for the purpose of anonymity.", "scorev2": "4.3", "scorev3": "0.0", "scorev4": "0.0", "modified": "2026-06-16T23:16:33.000", "vector": "NETWORK", "vectorString": "AV:N/AC:M/Au:N/C:P/I:N/A:N", "detail": "fixed-version: Fixed from version >4.0.249.78" }, { "id": "CVE-2010-0644", "status": "Patched", "link": "https://nvd.nist.gov/vuln/detail/CVE-2010-0644", "summary": "Google Chrome before 4.0.249.89, when a SOCKS 5 proxy server is configured, sends DNS queries directly, which allows remote DNS servers to obtain potentially sensitive information about the identity of a client user via request logging, as demonstrated by a proxy server that was configured for the purpose of anonymity.", "scorev2": "4.3", "scorev3": "0.0", "scorev4": "0.0", "modified": "2026-06-16T23:16:33.000", "vector": "NETWORK", "vectorString": "AV:N/AC:M/Au:N/C:P/I:N/A:N", "detail": "fixed-version: Fixed from version >4.0.249.78" }, { "id": "CVE-2010-0645", "status": "Patched", "link": "https://nvd.nist.gov/vuln/detail/CVE-2010-0645", "summary": "Multiple integer overflows in factory.cc in Google V8 before r3560, as used in Google Chrome before 4.0.249.89, allow remote attackers to execute arbitrary code in the Chrome sandbox via crafted use of JavaScript arrays.", "scorev2": "9.3", "scorev3": "0.0", "scorev4": "0.0", "modified": "2026-06-16T23:16:33.000", "vector": "NETWORK", "vectorString": "AV:N/AC:M/Au:N/C:C/I:C/A:C", "detail": "fixed-version: Fixed from version >4.0.249.78" }, { "id": "CVE-2010-0646", "status": "Patched", "link": "https://nvd.nist.gov/vuln/detail/CVE-2010-0646", "summary": "Multiple integer signedness errors in factory.cc in Google V8 before r3560, as used in Google Chrome before 4.0.249.89, allow remote attackers to execute arbitrary code in the Chrome sandbox via crafted use of JavaScript arrays.", "scorev2": "10.0", "scorev3": "0.0", "scorev4": "0.0", "modified": "2026-06-16T23:16:34.000", "vector": "NETWORK", "vectorString": "AV:N/AC:L/Au:N/C:C/I:C/A:C", "detail": "fixed-version: Fixed from version >4.0.249.78" }, { "id": "CVE-2010-0647", "status": "Patched", "link": "https://nvd.nist.gov/vuln/detail/CVE-2010-0647", "summary": "WebKit before r53525, as used in Google Chrome before 4.0.249.89, allows remote attackers to execute arbitrary code in the Chrome sandbox via a malformed RUBY element, as demonstrated by a > sequence.", "scorev2": "9.3", "scorev3": "0.0", "scorev4": "0.0", "modified": "2026-06-16T23:16:34.000", "vector": "NETWORK", "vectorString": "AV:N/AC:M/Au:N/C:C/I:C/A:C", "detail": "fixed-version: Fixed from version >4.0.249.78" }, { "id": "CVE-2010-0649", "status": "Patched", "link": "https://nvd.nist.gov/vuln/detail/CVE-2010-0649", "summary": "Integer overflow in the CrossCallParamsEx::CreateFromBuffer function in sandbox/src/crosscall_server.cc in Google Chrome before 4.0.249.89 allows attackers to leverage renderer access to cause a denial of service (heap memory corruption) or possibly have unspecified other impact via a malformed message, related to deserializing of sandbox messages.", "scorev2": "9.3", "scorev3": "0.0", "scorev4": "0.0", "modified": "2026-06-16T23:16:34.000", "vector": "NETWORK", "vectorString": "AV:N/AC:M/Au:N/C:C/I:C/A:C", "detail": "fixed-version: Fixed from version >4.0.249.78" }, { "id": "CVE-2010-0650", "status": "Patched", "link": "https://nvd.nist.gov/vuln/detail/CVE-2010-0650", "summary": "WebKit, as used in Google Chrome before 4.0.249.78 and Apple Safari, allows remote attackers to bypass intended restrictions on popup windows via crafted use of a mouse click event.", "scorev2": "2.6", "scorev3": "0.0", "scorev4": "0.0", "modified": "2026-06-16T23:16:34.000", "vector": "NETWORK", "vectorString": "AV:N/AC:H/Au:N/C:N/I:P/A:N", "detail": "fixed-version: Fixed from version 4.0.249.78" }, { "id": "CVE-2010-0651", "status": "Patched", "link": "https://nvd.nist.gov/vuln/detail/CVE-2010-0651", "summary": "WebKit before r52784, as used in Google Chrome before 4.0.249.78 and Apple Safari before 4.0.5, permits cross-origin loading of CSS stylesheets even when the stylesheet download has an incorrect MIME type and the stylesheet document is malformed, which allows remote attackers to obtain sensitive information via a crafted document.", "scorev2": "4.3", "scorev3": "0.0", "scorev4": "0.0", "modified": "2026-06-16T23:16:34.000", "vector": "NETWORK", "vectorString": "AV:N/AC:M/Au:N/C:P/I:N/A:N", "detail": "fixed-version: Fixed from version >4.0.249.78" }, { "id": "CVE-2010-0655", "status": "Patched", "link": "https://nvd.nist.gov/vuln/detail/CVE-2010-0655", "summary": "Use-after-free vulnerability in Google Chrome before 4.0.249.78 allows user-assisted remote attackers to cause a denial of service (application crash) or possibly execute arbitrary code via vectors involving the display of a blocked popup window during navigation to a different web site.", "scorev2": "9.3", "scorev3": "0.0", "scorev4": "0.0", "modified": "2026-06-16T23:16:35.000", "vector": "NETWORK", "vectorString": "AV:N/AC:M/Au:N/C:C/I:C/A:C", "detail": "fixed-version: Fixed from version >4.0.249.78" }, { "id": "CVE-2010-0656", "status": "Patched", "link": "https://nvd.nist.gov/vuln/detail/CVE-2010-0656", "summary": "WebKit before r51295, as used in Google Chrome before 4.0.249.78, presents a directory-listing page in response to an XMLHttpRequest for a file:/// URL that corresponds to a directory, which allows attackers to obtain sensitive information or possibly have unspecified other impact via a crafted local HTML document.", "scorev2": "4.3", "scorev3": "0.0", "scorev4": "0.0", "modified": "2026-06-16T23:16:35.000", "vector": "NETWORK", "vectorString": "AV:N/AC:M/Au:N/C:P/I:N/A:N", "detail": "fixed-version: Fixed from version >4.0.249.78" }, { "id": "CVE-2010-0657", "status": "Unpatched", "link": "https://nvd.nist.gov/vuln/detail/CVE-2010-0657", "summary": "Google Chrome before 4.0.249.78 on Windows does not perform the expected encoding, escaping, and quoting for the URL in the --app argument in a desktop shortcut, which allows user-assisted remote attackers to execute arbitrary programs or obtain sensitive information by tricking a user into creating a crafted shortcut.", "scorev2": "9.3", "scorev3": "0.0", "scorev4": "0.0", "modified": "2026-06-16T23:16:35.000", "vector": "NETWORK", "vectorString": "AV:N/AC:M/Au:N/C:C/I:C/A:C", "detail": "version-maybe-in-range", "description": "Check if really vulnerable" }, { "id": "CVE-2010-0658", "status": "Patched", "link": "https://nvd.nist.gov/vuln/detail/CVE-2010-0658", "summary": "Multiple integer overflows in Skia, as used in Google Chrome before 4.0.249.78, allow remote attackers to execute arbitrary code in the Chrome sandbox or cause a denial of service (memory corruption and application crash) via vectors involving CANVAS elements.", "scorev2": "9.3", "scorev3": "0.0", "scorev4": "0.0", "modified": "2026-06-16T23:16:35.000", "vector": "NETWORK", "vectorString": "AV:N/AC:M/Au:N/C:C/I:C/A:C", "detail": "fixed-version: Fixed from version >4.0.249.0" }, { "id": "CVE-2010-0659", "status": "Patched", "link": "https://nvd.nist.gov/vuln/detail/CVE-2010-0659", "summary": "The image decoder in WebKit before r52833, as used in Google Chrome before 4.0.249.78, does not properly handle a failure of memory allocation, which allows remote attackers to execute arbitrary code in the Chrome sandbox via a malformed GIF file that specifies a large size.", "scorev2": "9.3", "scorev3": "0.0", "scorev4": "0.0", "modified": "2026-06-16T23:16:35.000", "vector": "NETWORK", "vectorString": "AV:N/AC:M/Au:N/C:C/I:C/A:C", "detail": "fixed-version: Fixed from version >4.0.249.78" }, { "id": "CVE-2010-0660", "status": "Patched", "link": "https://nvd.nist.gov/vuln/detail/CVE-2010-0660", "summary": "Google Chrome before 4.0.249.78 sends an https URL in the Referer header of an http request in certain circumstances involving https to http redirection, which allows remote HTTP servers to obtain potentially sensitive information via standard HTTP logging.", "scorev2": "5.0", "scorev3": "0.0", "scorev4": "0.0", "modified": "2026-06-16T23:16:36.000", "vector": "NETWORK", "vectorString": "AV:N/AC:L/Au:N/C:P/I:N/A:N", "detail": "fixed-version: Fixed from version >4.0.249.0" }, { "id": "CVE-2010-0661", "status": "Patched", "link": "https://nvd.nist.gov/vuln/detail/CVE-2010-0661", "summary": "WebCore/bindings/v8/custom/V8DOMWindowCustom.cpp in WebKit before r52401, as used in Google Chrome before 4.0.249.78, allows remote attackers to bypass the Same Origin Policy via vectors involving the window.open method.", "scorev2": "6.8", "scorev3": "0.0", "scorev4": "0.0", "modified": "2026-06-16T23:16:36.000", "vector": "NETWORK", "vectorString": "AV:N/AC:M/Au:N/C:P/I:P/A:P", "detail": "fixed-version: Fixed from version >4.0.249.0" }, { "id": "CVE-2010-0662", "status": "Patched", "link": "https://nvd.nist.gov/vuln/detail/CVE-2010-0662", "summary": "The ParamTraits::Read function in common/common_param_traits.cc in Google Chrome before 4.0.249.78 does not use the correct variables in calculations designed to prevent integer overflows, which allows attackers to leverage renderer access to cause a denial of service or possibly have unspecified other impact via bitmap data, related to deserialization.", "scorev2": "5.0", "scorev3": "0.0", "scorev4": "0.0", "modified": "2026-06-16T23:16:36.000", "vector": "NETWORK", "vectorString": "AV:N/AC:L/Au:N/C:N/I:N/A:P", "detail": "fixed-version: Fixed from version >4.0.249.0" }, { "id": "CVE-2010-0663", "status": "Patched", "link": "https://nvd.nist.gov/vuln/detail/CVE-2010-0663", "summary": "The ParamTraits::Read function in common/common_param_traits.cc in Google Chrome before 4.0.249.78 does not initialize the memory locations that will hold bitmap data, which might allow remote attackers to obtain potentially sensitive information from process memory by providing insufficient data, related to use of a (1) thumbnail database or (2) HTML canvas.", "scorev2": "5.0", "scorev3": "0.0", "scorev4": "0.0", "modified": "2026-06-16T23:16:36.000", "vector": "NETWORK", "vectorString": "AV:N/AC:L/Au:N/C:P/I:N/A:N", "detail": "fixed-version: Fixed from version >4.0.249.0" }, { "id": "CVE-2010-0664", "status": "Patched", "link": "https://nvd.nist.gov/vuln/detail/CVE-2010-0664", "summary": "Stack consumption vulnerability in the ChildProcessSecurityPolicy::CanRequestURL function in browser/child_process_security_policy.cc in Google Chrome before 4.0.249.78 allows remote attackers to cause a denial of service (memory consumption and application crash) via a URL that specifies multiple protocols, as demonstrated by a URL that begins with many repetitions of the view-source: substring.", "scorev2": "5.0", "scorev3": "0.0", "scorev4": "0.0", "modified": "2026-06-16T23:16:36.000", "vector": "NETWORK", "vectorString": "AV:N/AC:L/Au:N/C:N/I:N/A:P", "detail": "fixed-version: Fixed from version >4.0.249.0" }, { "id": "CVE-2010-1029", "status": "Patched", "link": "https://nvd.nist.gov/vuln/detail/CVE-2010-1029", "summary": "Stack consumption vulnerability in the WebCore::CSSSelector function in WebKit, as used in Apple Safari 4.0.4, Apple Safari on iPhone OS and iPhone OS for iPod touch, and Google Chrome 4.0.249, allows remote attackers to cause a denial of service (application crash) or possibly execute arbitrary code via a STYLE element composed of a large number of *> sequences.", "scorev2": "5.0", "scorev3": "0.0", "scorev4": "0.0", "modified": "2026-06-16T23:17:22.000", "vector": "NETWORK", "vectorString": "AV:N/AC:L/Au:N/C:N/I:N/A:P", "detail": "version-not-in-range" }, { "id": "CVE-2010-1205", "status": "Patched", "link": "https://nvd.nist.gov/vuln/detail/CVE-2010-1205", "summary": "Buffer overflow in pngpread.c in libpng before 1.2.44 and 1.4.x before 1.4.3, as used in progressive applications, might allow remote attackers to execute arbitrary code via a PNG image that triggers an additional data row.", "scorev2": "7.5", "scorev3": "9.8", "scorev4": "0.0", "modified": "2026-06-16T23:17:50.000", "vector": "NETWORK", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H", "detail": "fixed-version: Fixed from version 5.0.375.99" }, { "id": "CVE-2010-1228", "status": "Patched", "link": "https://nvd.nist.gov/vuln/detail/CVE-2010-1228", "summary": "Multiple race conditions in the sandbox infrastructure in Google Chrome before 4.1.249.1036 have unspecified impact and attack vectors.", "scorev2": "10.0", "scorev3": "0.0", "scorev4": "0.0", "modified": "2026-06-16T23:17:53.000", "vector": "NETWORK", "vectorString": "AV:N/AC:L/Au:N/C:C/I:C/A:C", "detail": "fixed-version: Fixed from version >4.1.249.1035" }, { "id": "CVE-2010-1229", "status": "Patched", "link": "https://nvd.nist.gov/vuln/detail/CVE-2010-1229", "summary": "The sandbox infrastructure in Google Chrome before 4.1.249.1036 does not properly use pointers, which has unspecified impact and attack vectors.", "scorev2": "10.0", "scorev3": "0.0", "scorev4": "0.0", "modified": "2026-06-16T23:17:53.000", "vector": "NETWORK", "vectorString": "AV:N/AC:L/Au:N/C:C/I:C/A:C", "detail": "fixed-version: Fixed from version >4.1.249.1035" }, { "id": "CVE-2010-1230", "status": "Patched", "link": "https://nvd.nist.gov/vuln/detail/CVE-2010-1230", "summary": "Google Chrome before 4.1.249.1036 does not have the expected behavior for attempts to delete Web SQL Databases and clear the Strict Transport Security (STS) state, which has unspecified impact and attack vectors.", "scorev2": "10.0", "scorev3": "0.0", "scorev4": "0.0", "modified": "2026-06-16T23:17:53.000", "vector": "NETWORK", "vectorString": "AV:N/AC:L/Au:N/C:C/I:C/A:C", "detail": "fixed-version: Fixed from version 4.1.249.1036" }, { "id": "CVE-2010-1231", "status": "Patched", "link": "https://nvd.nist.gov/vuln/detail/CVE-2010-1231", "summary": "Google Chrome before 4.1.249.1036 processes HTTP headers before invoking the SafeBrowsing feature, which allows remote attackers to have an unspecified impact via crafted headers.", "scorev2": "7.5", "scorev3": "0.0", "scorev4": "0.0", "modified": "2026-06-16T23:17:54.000", "vector": "NETWORK", "vectorString": "AV:N/AC:L/Au:N/C:P/I:P/A:P", "detail": "fixed-version: Fixed from version >4.1.249.1035" }, { "id": "CVE-2010-1232", "status": "Patched", "link": "https://nvd.nist.gov/vuln/detail/CVE-2010-1232", "summary": "Google Chrome before 4.1.249.1036 allows remote attackers to cause a denial of service (memory error) or possibly have unspecified other impact via a malformed SVG document.", "scorev2": "5.0", "scorev3": "0.0", "scorev4": "0.0", "modified": "2026-06-16T23:17:55.000", "vector": "NETWORK", "vectorString": "AV:N/AC:L/Au:N/C:N/I:N/A:P", "detail": "fixed-version: Fixed from version >4.1.249.1035" }, { "id": "CVE-2010-1233", "status": "Patched", "link": "https://nvd.nist.gov/vuln/detail/CVE-2010-1233", "summary": "Multiple integer overflows in Google Chrome before 4.1.249.1036 allow remote attackers to have an unspecified impact via vectors involving WebKit JavaScript objects.", "scorev2": "10.0", "scorev3": "0.0", "scorev4": "0.0", "modified": "2026-06-16T23:17:55.000", "vector": "NETWORK", "vectorString": "AV:N/AC:L/Au:N/C:C/I:C/A:C", "detail": "fixed-version: Fixed from version 4.1.249.1036" }, { "id": "CVE-2010-1234", "status": "Patched", "link": "https://nvd.nist.gov/vuln/detail/CVE-2010-1234", "summary": "Unspecified vulnerability in Google Chrome before 4.1.249.1036 allows remote attackers to truncate the URL shown in the HTTP Basic Authentication dialog via unknown vectors.", "scorev2": "7.5", "scorev3": "0.0", "scorev4": "0.0", "modified": "2026-06-16T23:17:55.000", "vector": "NETWORK", "vectorString": "AV:N/AC:L/Au:N/C:P/I:P/A:P", "detail": "fixed-version: Fixed from version >4.1.249.1035" }, { "id": "CVE-2010-1235", "status": "Patched", "link": "https://nvd.nist.gov/vuln/detail/CVE-2010-1235", "summary": "Unspecified vulnerability in Google Chrome before 4.1.249.1036 allows remote attackers to trigger the omission of a download warning dialog via unknown vectors.", "scorev2": "4.3", "scorev3": "0.0", "scorev4": "0.0", "modified": "2026-06-16T23:17:55.000", "vector": "NETWORK", "vectorString": "AV:N/AC:M/Au:N/C:N/I:P/A:N", "detail": "fixed-version: Fixed from version >4.1.249.1035" }, { "id": "CVE-2010-1236", "status": "Patched", "link": "https://nvd.nist.gov/vuln/detail/CVE-2010-1236", "summary": "The protocolIs function in platform/KURLGoogle.cpp in WebCore in WebKit before r55822, as used in Google Chrome before 4.1.249.1036 and Flock Browser 3.x before 3.0.0.4112, does not properly handle whitespace at the beginning of a URL, which allows remote attackers to conduct cross-site scripting (XSS) attacks via a crafted javascript: URL, as demonstrated by a \\x00javascript:alert sequence.", "scorev2": "4.3", "scorev3": "0.0", "scorev4": "0.0", "modified": "2026-06-16T23:17:55.000", "vector": "NETWORK", "vectorString": "AV:N/AC:M/Au:N/C:N/I:P/A:N", "detail": "fixed-version: Fixed from version >4.1.249.1035" }, { "id": "CVE-2010-1237", "status": "Patched", "link": "https://nvd.nist.gov/vuln/detail/CVE-2010-1237", "summary": "Google Chrome 4.1 BETA before 4.1.249.1036 allows remote attackers to cause a denial of service (memory error) or possibly have unspecified other impact via an empty SVG element.", "scorev2": "7.5", "scorev3": "0.0", "scorev4": "0.0", "modified": "2026-06-16T23:17:55.000", "vector": "NETWORK", "vectorString": "AV:N/AC:L/Au:N/C:P/I:P/A:P", "detail": "version-not-in-range" }, { "id": "CVE-2010-1500", "status": "Patched", "link": "https://nvd.nist.gov/vuln/detail/CVE-2010-1500", "summary": "Google Chrome before 4.1.249.1059 does not properly support forms, which has unknown impact and attack vectors, related to a \"type confusion error.\"", "scorev2": "7.5", "scorev3": "0.0", "scorev4": "0.0", "modified": "2026-06-16T23:18:30.000", "vector": "NETWORK", "vectorString": "AV:N/AC:L/Au:N/C:P/I:P/A:P", "detail": "fixed-version: Fixed from version >4.1.249.1058" }, { "id": "CVE-2010-1502", "status": "Patched", "link": "https://nvd.nist.gov/vuln/detail/CVE-2010-1502", "summary": "Unspecified vulnerability in Google Chrome before 4.1.249.1059 allows remote attackers to access local files via vectors related to \"developer tools.\"", "scorev2": "9.3", "scorev3": "0.0", "scorev4": "0.0", "modified": "2026-06-16T23:18:30.000", "vector": "NETWORK", "vectorString": "AV:N/AC:M/Au:N/C:C/I:C/A:C", "detail": "fixed-version: Fixed from version >4.1.249.1058" }, { "id": "CVE-2010-1503", "status": "Patched", "link": "https://nvd.nist.gov/vuln/detail/CVE-2010-1503", "summary": "Cross-site scripting (XSS) vulnerability in Google Chrome before 4.1.249.1059 allows remote attackers to inject arbitrary web script or HTML via vectors related to a chrome://net-internals URI.", "scorev2": "4.3", "scorev3": "0.0", "scorev4": "0.0", "modified": "2026-06-16T23:18:30.000", "vector": "NETWORK", "vectorString": "AV:N/AC:M/Au:N/C:N/I:P/A:N", "detail": "fixed-version: Fixed from version >4.1.249.1058" }, { "id": "CVE-2010-1504", "status": "Patched", "link": "https://nvd.nist.gov/vuln/detail/CVE-2010-1504", "summary": "Cross-site scripting (XSS) vulnerability in Google Chrome before 4.1.249.1059 allows remote attackers to inject arbitrary web script or HTML via vectors related to a chrome://downloads URI.", "scorev2": "4.3", "scorev3": "0.0", "scorev4": "0.0", "modified": "2026-06-16T23:18:30.000", "vector": "NETWORK", "vectorString": "AV:N/AC:M/Au:N/C:N/I:P/A:N", "detail": "fixed-version: Fixed from version >4.1.249.1058" }, { "id": "CVE-2010-1505", "status": "Patched", "link": "https://nvd.nist.gov/vuln/detail/CVE-2010-1505", "summary": "Google Chrome before 4.1.249.1059 does not prevent pages from loading with the New Tab page's privileges, which has unknown impact and attack vectors.", "scorev2": "10.0", "scorev3": "0.0", "scorev4": "0.0", "modified": "2026-06-16T23:18:31.000", "vector": "NETWORK", "vectorString": "AV:N/AC:L/Au:N/C:C/I:C/A:C", "detail": "fixed-version: Fixed from version >4.1.249.1058" }, { "id": "CVE-2010-1506", "status": "Patched", "link": "https://nvd.nist.gov/vuln/detail/CVE-2010-1506", "summary": "The Google V8 bindings in Google Chrome before 4.1.249.1059 allow attackers to cause a denial of service (memory corruption) via unknown vectors.", "scorev2": "7.8", "scorev3": "0.0", "scorev4": "0.0", "modified": "2026-06-16T23:18:31.000", "vector": "NETWORK", "vectorString": "AV:N/AC:L/Au:N/C:N/I:N/A:C", "detail": "fixed-version: Fixed from version >4.1.249.1058" }, { "id": "CVE-2010-1663", "status": "Patched", "link": "https://nvd.nist.gov/vuln/detail/CVE-2010-1663", "summary": "The Google URL Parsing Library (aka google-url or GURL) in Google Chrome before 4.1.249.1064 allows remote attackers to bypass the Same Origin Policy via unspecified vectors.", "scorev2": "10.0", "scorev3": "0.0", "scorev4": "0.0", "modified": "2026-06-16T23:18:48.000", "vector": "NETWORK", "vectorString": "AV:N/AC:L/Au:N/C:C/I:C/A:C", "detail": "fixed-version: Fixed from version >4.1.249.1063" }, { "id": "CVE-2010-1664", "status": "Patched", "link": "https://nvd.nist.gov/vuln/detail/CVE-2010-1664", "summary": "Google Chrome before 4.1.249.1064 does not properly handle HTML5 media, which allows remote attackers to cause a denial of service (memory corruption) and possibly have unspecified other impact via unknown vectors.", "scorev2": "5.0", "scorev3": "0.0", "scorev4": "0.0", "modified": "2026-06-16T23:18:48.000", "vector": "NETWORK", "vectorString": "AV:N/AC:L/Au:N/C:N/I:N/A:P", "detail": "fixed-version: Fixed from version >4.1.249.1063" }, { "id": "CVE-2010-1665", "status": "Patched", "link": "https://nvd.nist.gov/vuln/detail/CVE-2010-1665", "summary": "Google Chrome before 4.1.249.1064 does not properly handle fonts, which allows remote attackers to cause a denial of service (memory corruption) and possibly have unspecified other impact via unknown vectors.", "scorev2": "7.5", "scorev3": "0.0", "scorev4": "0.0", "modified": "2026-06-16T23:18:48.000", "vector": "NETWORK", "vectorString": "AV:N/AC:L/Au:N/C:P/I:P/A:P", "detail": "fixed-version: Fixed from version >4.1.249.1063" }, { "id": "CVE-2010-1731", "status": "Unpatched", "link": "https://nvd.nist.gov/vuln/detail/CVE-2010-1731", "summary": "Google Chrome on the HTC Hero allows remote attackers to cause a denial of service (application crash) via JavaScript that writes sequences in an infinite loop.", "scorev2": "4.3", "scorev3": "0.0", "scorev4": "0.0", "modified": "2026-06-16T23:19:12.000", "vector": "NETWORK", "vectorString": "AV:N/AC:M/Au:N/C:N/I:N/A:P", "detail": "no-version-ranges", "description": "Check package version" }, { "id": "CVE-2010-1767", "status": "Patched", "link": "https://nvd.nist.gov/vuln/detail/CVE-2010-1767", "summary": "Cross-site request forgery (CSRF) vulnerability in loader/DocumentThreadableLoader.cpp in WebCore in WebKit before r57041, as used in Google Chrome before 4.1.249.1059, allows remote attackers to hijack the authentication of unspecified victims via a crafted synchronous preflight XMLHttpRequest operation.", "scorev2": "6.8", "scorev3": "0.0", "scorev4": "0.0", "modified": "2026-06-16T23:19:16.000", "vector": "NETWORK", "vectorString": "AV:N/AC:M/Au:N/C:P/I:P/A:P", "detail": "fixed-version: Fixed from version >4.1.249.1058" }, { "id": "CVE-2010-1770", "status": "Patched", "link": "https://nvd.nist.gov/vuln/detail/CVE-2010-1770", "summary": "WebKit in Apple Safari before 5.0 on Mac OS X 10.5 through 10.6 and Windows, Apple Safari before 4.1 on Mac OS X 10.4, and Google Chrome before 5.0.375.70 does not properly handle a transformation of a text node that has the IBM1147 character set, which allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption and application crash) via a crafted HTML document containing a BR element, related to a \"type checking issue.\"", "scorev2": "9.3", "scorev3": "0.0", "scorev4": "0.0", "modified": "2026-06-16T23:19:17.000", "vector": "NETWORK", "vectorString": "AV:N/AC:M/Au:N/C:C/I:C/A:C", "detail": "fixed-version: Fixed from version 5.0.375.70" }, { "id": "CVE-2010-1772", "status": "Patched", "link": "https://nvd.nist.gov/vuln/detail/CVE-2010-1772", "summary": "Use-after-free vulnerability in page/Geolocation.cpp in WebCore in WebKit before r59859, as used in Google Chrome before 5.0.375.70, allows remote attackers to execute arbitrary code or cause a denial of service (application crash) via a crafted web site, related to failure to stop timers associated with geolocation upon deletion of a document.", "scorev2": "6.8", "scorev3": "8.8", "scorev4": "0.0", "modified": "2026-06-16T23:19:17.000", "vector": "NETWORK", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H", "detail": "fixed-version: Fixed from version 5.0.375.70" }, { "id": "CVE-2010-1773", "status": "Patched", "link": "https://nvd.nist.gov/vuln/detail/CVE-2010-1773", "summary": "Off-by-one error in the toAlphabetic function in rendering/RenderListMarker.cpp in WebCore in WebKit before r59950, as used in Google Chrome before 5.0.375.70, allows remote attackers to obtain sensitive information, cause a denial of service (memory corruption and application crash), or possibly execute arbitrary code via vectors related to list markers for HTML lists, aka rdar problem 8009118.", "scorev2": "6.8", "scorev3": "8.8", "scorev4": "0.0", "modified": "2026-06-16T23:19:17.000", "vector": "NETWORK", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H", "detail": "fixed-version: Fixed from version 5.0.375.70" }, { "id": "CVE-2010-1822", "status": "Patched", "link": "https://nvd.nist.gov/vuln/detail/CVE-2010-1822", "summary": "WebKit, as used in Apple Safari before 4.1.3 and 5.0.x before 5.0.3 and Google Chrome before 6.0.472.62, does not properly perform a cast of an unspecified variable, which allows remote attackers to execute arbitrary code or cause a denial of service (application crash) via an SVG element in a non-SVG document.", "scorev2": "6.8", "scorev3": "8.8", "scorev4": "0.0", "modified": "2026-06-16T23:19:24.000", "vector": "NETWORK", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H", "detail": "fixed-version: Fixed from version 6.0.472.62" }, { "id": "CVE-2010-1823", "status": "Patched", "link": "https://nvd.nist.gov/vuln/detail/CVE-2010-1823", "summary": "Use-after-free vulnerability in WebKit before r65958, as used in Google Chrome before 6.0.472.59, allows remote attackers to cause a denial of service or possibly have unspecified other impact via vectors that trigger use of document APIs such as document.close during parsing, as demonstrated by a Cascading Style Sheets (CSS) file referencing an invalid SVG font, aka rdar problem 8442098.", "scorev2": "9.3", "scorev3": "0.0", "scorev4": "0.0", "modified": "2026-06-16T23:19:24.000", "vector": "NETWORK", "vectorString": "AV:N/AC:M/Au:N/C:C/I:C/A:C", "detail": "fixed-version: Fixed from version 6.0.472.59" }, { "id": "CVE-2010-1824", "status": "Patched", "link": "https://nvd.nist.gov/vuln/detail/CVE-2010-1824", "summary": "Use-after-free vulnerability in WebKit, as used in Apple iTunes before 10.2 on Windows, Apple Safari, and Google Chrome before 6.0.472.59, allows remote attackers to execute arbitrary code or cause a denial of service via vectors related to SVG styles, the DOM tree, and error messages.", "scorev2": "9.3", "scorev3": "0.0", "scorev4": "0.0", "modified": "2026-06-16T23:19:24.000", "vector": "NETWORK", "vectorString": "AV:N/AC:M/Au:N/C:C/I:C/A:C", "detail": "fixed-version: Fixed from version 6.0.472.59" }, { "id": "CVE-2010-1825", "status": "Patched", "link": "https://nvd.nist.gov/vuln/detail/CVE-2010-1825", "summary": "Use-after-free vulnerability in WebKit, as used in Google Chrome before 6.0.472.59, allows remote attackers to cause a denial of service or possibly have unspecified other impact via vectors related to nested SVG elements.", "scorev2": "9.3", "scorev3": "0.0", "scorev4": "0.0", "modified": "2026-06-16T23:19:24.000", "vector": "NETWORK", "vectorString": "AV:N/AC:M/Au:N/C:C/I:C/A:C", "detail": "fixed-version: Fixed from version 6.0.472.59" }, { "id": "CVE-2010-1851", "status": "Patched", "link": "https://nvd.nist.gov/vuln/detail/CVE-2010-1851", "summary": "Google Chrome, when the Invisible Hand extension is enabled, uses cookies during background HTTP requests in a possibly unexpected manner, which might allow remote web servers to identify specific persons and their product searches via HTTP request logging, related to a \"cross-site data leakage\" issue.", "scorev2": "4.3", "scorev3": "0.0", "scorev4": "0.0", "modified": "2026-06-16T23:19:27.000", "vector": "NETWORK", "vectorString": "AV:N/AC:M/Au:N/C:P/I:N/A:N", "detail": "version-not-in-range" }, { "id": "CVE-2010-1992", "status": "Patched", "link": "https://nvd.nist.gov/vuln/detail/CVE-2010-1992", "summary": "Google Chrome 1.0.154.48 executes a mail application in situations where an IFRAME element has a mailto: URL in its SRC attribute, which allows remote attackers to cause a denial of service (excessive application launches) via an HTML document with many IFRAME elements.", "scorev2": "5.0", "scorev3": "0.0", "scorev4": "0.0", "modified": "2026-06-16T23:19:43.000", "vector": "NETWORK", "vectorString": "AV:N/AC:L/Au:N/C:N/I:N/A:P", "detail": "version-not-in-range" }, { "id": "CVE-2010-2105", "status": "Patched", "link": "https://nvd.nist.gov/vuln/detail/CVE-2010-2105", "summary": "Google Chrome before 5.0.375.55 does not properly follow the Safe Browsing specification's requirements for canonicalization of URLs, which has unspecified impact and remote attack vectors.", "scorev2": "10.0", "scorev3": "0.0", "scorev4": "0.0", "modified": "2026-06-16T23:19:59.000", "vector": "NETWORK", "vectorString": "AV:N/AC:L/Au:N/C:C/I:C/A:C", "detail": "fixed-version: Fixed from version 5.0.375.55" }, { "id": "CVE-2010-2106", "status": "Patched", "link": "https://nvd.nist.gov/vuln/detail/CVE-2010-2106", "summary": "Unspecified vulnerability in Google Chrome before 5.0.375.55 might allow remote attackers to spoof the URL bar via vectors involving unload event handlers.", "scorev2": "4.3", "scorev3": "0.0", "scorev4": "0.0", "modified": "2026-06-16T23:19:59.000", "vector": "NETWORK", "vectorString": "AV:N/AC:M/Au:N/C:N/I:P/A:N", "detail": "fixed-version: Fixed from version 5.0.375.55" }, { "id": "CVE-2010-2107", "status": "Patched", "link": "https://nvd.nist.gov/vuln/detail/CVE-2010-2107", "summary": "Unspecified vulnerability in Google Chrome before 5.0.375.55 allows attackers to cause a denial of service (memory error) or possibly have unspecified other impact via vectors related to the Safe Browsing functionality.", "scorev2": "10.0", "scorev3": "0.0", "scorev4": "0.0", "modified": "2026-06-16T23:19:59.000", "vector": "NETWORK", "vectorString": "AV:N/AC:L/Au:N/C:C/I:C/A:C", "detail": "fixed-version: Fixed from version 5.0.375.55" }, { "id": "CVE-2010-2108", "status": "Patched", "link": "https://nvd.nist.gov/vuln/detail/CVE-2010-2108", "summary": "Unspecified vulnerability in Google Chrome before 5.0.375.55 allows remote attackers to bypass the whitelist-mode plugin blocker via unknown vectors.", "scorev2": "7.5", "scorev3": "0.0", "scorev4": "0.0", "modified": "2026-06-16T23:19:59.000", "vector": "NETWORK", "vectorString": "AV:N/AC:L/Au:N/C:P/I:P/A:P", "detail": "fixed-version: Fixed from version 5.0.375.55" }, { "id": "CVE-2010-2109", "status": "Patched", "link": "https://nvd.nist.gov/vuln/detail/CVE-2010-2109", "summary": "Unspecified vulnerability in Google Chrome before 5.0.375.55 allows user-assisted remote attackers to cause a denial of service (memory error) or possibly have unspecified other impact via vectors related to the \"drag + drop\" functionality.", "scorev2": "7.5", "scorev3": "0.0", "scorev4": "0.0", "modified": "2026-06-16T23:20:00.000", "vector": "NETWORK", "vectorString": "AV:N/AC:L/Au:N/C:P/I:P/A:P", "detail": "fixed-version: Fixed from version 5.0.375.55" }, { "id": "CVE-2010-2110", "status": "Patched", "link": "https://nvd.nist.gov/vuln/detail/CVE-2010-2110", "summary": "Google Chrome before 5.0.375.55 does not properly execute JavaScript code in the extension context, which has unspecified impact and remote attack vectors.", "scorev2": "7.5", "scorev3": "0.0", "scorev4": "0.0", "modified": "2026-06-16T23:20:00.000", "vector": "NETWORK", "vectorString": "AV:N/AC:L/Au:N/C:P/I:P/A:P", "detail": "fixed-version: Fixed from version 5.0.375.55" }, { "id": "CVE-2010-2120", "status": "Patched", "link": "https://nvd.nist.gov/vuln/detail/CVE-2010-2120", "summary": "Google Chrome 1.0.154.48 allows remote attackers to cause a denial of service (resource consumption) via JavaScript code containing an infinite loop that creates IFRAME elements for invalid news:// URIs.", "scorev2": "4.3", "scorev3": "0.0", "scorev4": "0.0", "modified": "2026-06-16T23:20:01.000", "vector": "NETWORK", "vectorString": "AV:N/AC:M/Au:N/C:N/I:N/A:P", "detail": "version-not-in-range" }, { "id": "CVE-2010-2295", "status": "Patched", "link": "https://nvd.nist.gov/vuln/detail/CVE-2010-2295", "summary": "page/EventHandler.cpp in WebCore in WebKit in Google Chrome before 5.0.375.70 does not properly handle a change of the focused frame during the dispatching of keydown, which allows user-assisted remote attackers to redirect keystrokes via a crafted HTML document, aka rdar problem 7018610. NOTE: this might overlap CVE-2010-1422.", "scorev2": "4.3", "scorev3": "0.0", "scorev4": "0.0", "modified": "2026-06-16T23:20:29.000", "vector": "NETWORK", "vectorString": "AV:N/AC:M/Au:N/C:N/I:P/A:N", "detail": "fixed-version: Fixed from version 5.0.375.70" }, { "id": "CVE-2010-2296", "status": "Patched", "link": "https://nvd.nist.gov/vuln/detail/CVE-2010-2296", "summary": "The implementation of unspecified DOM methods in Google Chrome before 5.0.375.70 allows remote attackers to bypass the Same Origin Policy via unknown vectors.", "scorev2": "9.3", "scorev3": "0.0", "scorev4": "0.0", "modified": "2026-06-16T23:20:29.000", "vector": "NETWORK", "vectorString": "AV:N/AC:M/Au:N/C:C/I:C/A:C", "detail": "fixed-version: Fixed from version 5.0.375.70" }, { "id": "CVE-2010-2297", "status": "Patched", "link": "https://nvd.nist.gov/vuln/detail/CVE-2010-2297", "summary": "rendering/FixedTableLayout.cpp in WebCore in WebKit in Google Chrome before 5.0.375.70 allows remote attackers to cause a denial of service (application crash) or possibly execute arbitrary code via an HTML document that has a large colspan attribute within a table.", "scorev2": "9.3", "scorev3": "0.0", "scorev4": "0.0", "modified": "2026-06-16T23:20:29.000", "vector": "NETWORK", "vectorString": "AV:N/AC:M/Au:N/C:C/I:C/A:C", "detail": "fixed-version: Fixed from version 5.0.375.70" }, { "id": "CVE-2010-2298", "status": "Patched", "link": "https://nvd.nist.gov/vuln/detail/CVE-2010-2298", "summary": "browser/renderer_host/database_dispatcher_host.cc in Google Chrome before 5.0.375.70 on Linux does not properly handle ViewHostMsg_DatabaseOpenFile messages in chroot-based sandboxing, which allows remote attackers to bypass intended sandbox restrictions via vectors involving fchdir and chdir calls.", "scorev2": "10.0", "scorev3": "0.0", "scorev4": "0.0", "modified": "2026-06-16T23:20:29.000", "vector": "NETWORK", "vectorString": "AV:N/AC:L/Au:N/C:C/I:C/A:C", "detail": "fixed-version: Fixed from version 5.0.375.70" }, { "id": "CVE-2010-2299", "status": "Patched", "link": "https://nvd.nist.gov/vuln/detail/CVE-2010-2299", "summary": "The Clipboard::DispatchObject function in app/clipboard/clipboard.cc in Google Chrome before 5.0.375.70 does not properly handle CBF_SMBITMAP objects in a ViewHostMsg_ClipboardWriteObjectsAsync message, which might allow remote attackers to execute arbitrary code via vectors involving crafted data from the renderer process, related to a \"Type Confusion\" issue.", "scorev2": "10.0", "scorev3": "0.0", "scorev4": "0.0", "modified": "2026-06-16T23:20:29.000", "vector": "NETWORK", "vectorString": "AV:N/AC:L/Au:N/C:C/I:C/A:C", "detail": "fixed-version: Fixed from version 5.0.375.70" }, { "id": "CVE-2010-2300", "status": "Patched", "link": "https://nvd.nist.gov/vuln/detail/CVE-2010-2300", "summary": "Use-after-free vulnerability in the Element::normalizeAttributes function in dom/Element.cpp in WebCore in WebKit in Google Chrome before 5.0.375.70 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via vectors related to handlers for DOM mutation events, aka rdar problem 7948784. NOTE: this might overlap CVE-2010-1759.", "scorev2": "10.0", "scorev3": "0.0", "scorev4": "0.0", "modified": "2026-06-16T23:20:29.000", "vector": "NETWORK", "vectorString": "AV:N/AC:L/Au:N/C:C/I:C/A:C", "detail": "fixed-version: Fixed from version 5.0.375.70" }, { "id": "CVE-2010-2301", "status": "Patched", "link": "https://nvd.nist.gov/vuln/detail/CVE-2010-2301", "summary": "Cross-site scripting (XSS) vulnerability in editing/markup.cpp in WebCore in WebKit in Google Chrome before 5.0.375.70 allows remote attackers to inject arbitrary web script or HTML via vectors related to the node.innerHTML property of a TEXTAREA element. NOTE: this might overlap CVE-2010-1762.", "scorev2": "4.3", "scorev3": "0.0", "scorev4": "0.0", "modified": "2026-06-16T23:20:30.000", "vector": "NETWORK", "vectorString": "AV:N/AC:M/Au:N/C:N/I:P/A:N", "detail": "fixed-version: Fixed from version 5.0.375.70" }, { "id": "CVE-2010-2302", "status": "Patched", "link": "https://nvd.nist.gov/vuln/detail/CVE-2010-2302", "summary": "Use-after-free vulnerability in WebCore in WebKit in Google Chrome before 5.0.375.70 allows remote attackers to cause a denial of service (memory corruption) or possibly execute arbitrary code via vectors involving remote fonts in conjunction with shadow DOM trees, aka rdar problem 8007953. NOTE: this might overlap CVE-2010-1771.", "scorev2": "10.0", "scorev3": "0.0", "scorev4": "0.0", "modified": "2026-06-16T23:20:30.000", "vector": "NETWORK", "vectorString": "AV:N/AC:L/Au:N/C:C/I:C/A:C", "detail": "fixed-version: Fixed from version 5.0.375.70" }, { "id": "CVE-2010-2645", "status": "Patched", "link": "https://nvd.nist.gov/vuln/detail/CVE-2010-2645", "summary": "Unspecified vulnerability in Google Chrome before 5.0.375.99, when WebGL is used, allows remote attackers to cause a denial of service (out-of-bounds read) via unknown vectors.", "scorev2": "6.8", "scorev3": "0.0", "scorev4": "0.0", "modified": "2026-06-16T23:21:08.000", "vector": "NETWORK", "vectorString": "AV:N/AC:M/Au:N/C:P/I:P/A:P", "detail": "fixed-version: Fixed from version 5.0.375.99" }, { "id": "CVE-2010-2646", "status": "Patched", "link": "https://nvd.nist.gov/vuln/detail/CVE-2010-2646", "summary": "Google Chrome before 5.0.375.99 does not properly isolate sandboxed IFRAME elements, which has unspecified impact and remote attack vectors.", "scorev2": "9.3", "scorev3": "0.0", "scorev4": "0.0", "modified": "2026-06-16T23:21:09.000", "vector": "NETWORK", "vectorString": "AV:N/AC:M/Au:N/C:C/I:C/A:C", "detail": "fixed-version: Fixed from version 5.0.375.99" }, { "id": "CVE-2010-2647", "status": "Patched", "link": "https://nvd.nist.gov/vuln/detail/CVE-2010-2647", "summary": "Google Chrome before 5.0.375.99 allows remote attackers to cause a denial of service (memory corruption) or possibly have unspecified other impact via an invalid SVG document.", "scorev2": "9.3", "scorev3": "0.0", "scorev4": "0.0", "modified": "2026-06-16T23:21:09.000", "vector": "NETWORK", "vectorString": "AV:N/AC:M/Au:N/C:C/I:C/A:C", "detail": "fixed-version: Fixed from version 5.0.375.99" }, { "id": "CVE-2010-2648", "status": "Patched", "link": "https://nvd.nist.gov/vuln/detail/CVE-2010-2648", "summary": "The implementation of the Unicode Bidirectional Algorithm (aka Bidi algorithm or UBA) in Google Chrome before 5.0.375.99 allows remote attackers to cause a denial of service (memory corruption) or possibly have unspecified other impact via unknown vectors.", "scorev2": "9.3", "scorev3": "0.0", "scorev4": "0.0", "modified": "2026-06-16T23:21:09.000", "vector": "NETWORK", "vectorString": "AV:N/AC:M/Au:N/C:C/I:C/A:C", "detail": "fixed-version: Fixed from version 5.0.375.99" }, { "id": "CVE-2010-2649", "status": "Patched", "link": "https://nvd.nist.gov/vuln/detail/CVE-2010-2649", "summary": "Unspecified vulnerability in Google Chrome before 5.0.375.99 allows remote attackers to cause a denial of service (application crash) via an invalid image.", "scorev2": "4.3", "scorev3": "0.0", "scorev4": "0.0", "modified": "2026-06-16T23:21:09.000", "vector": "NETWORK", "vectorString": "AV:N/AC:M/Au:N/C:N/I:N/A:P", "detail": "fixed-version: Fixed from version 5.0.375.99" }, { "id": "CVE-2010-2650", "status": "Patched", "link": "https://nvd.nist.gov/vuln/detail/CVE-2010-2650", "summary": "Unspecified vulnerability in Google Chrome before 5.0.375.99 has unknown impact and attack vectors, related to an \"annoyance with print dialogs.\"", "scorev2": "9.3", "scorev3": "0.0", "scorev4": "0.0", "modified": "2026-06-16T23:21:09.000", "vector": "NETWORK", "vectorString": "AV:N/AC:M/Au:N/C:C/I:C/A:C", "detail": "fixed-version: Fixed from version 5.0.375.99" }, { "id": "CVE-2010-2651", "status": "Patched", "link": "https://nvd.nist.gov/vuln/detail/CVE-2010-2651", "summary": "The Cascading Style Sheets (CSS) implementation in Google Chrome before 5.0.375.99 does not properly perform style rendering, which allows remote attackers to cause a denial of service (memory corruption) or possibly have unspecified other impact via unknown vectors.", "scorev2": "9.3", "scorev3": "0.0", "scorev4": "0.0", "modified": "2026-06-16T23:21:09.000", "vector": "NETWORK", "vectorString": "AV:N/AC:M/Au:N/C:C/I:C/A:C", "detail": "fixed-version: Fixed from version 5.0.375.99" }, { "id": "CVE-2010-2652", "status": "Patched", "link": "https://nvd.nist.gov/vuln/detail/CVE-2010-2652", "summary": "Google Chrome before 5.0.375.99 does not properly implement modal dialogs, which allows attackers to cause a denial of service (application crash) via unspecified vectors.", "scorev2": "5.0", "scorev3": "0.0", "scorev4": "0.0", "modified": "2026-06-16T23:21:09.000", "vector": "NETWORK", "vectorString": "AV:N/AC:L/Au:N/C:N/I:N/A:P", "detail": "fixed-version: Fixed from version 5.0.375.99" }, { "id": "CVE-2010-2897", "status": "Patched", "link": "https://nvd.nist.gov/vuln/detail/CVE-2010-2897", "summary": "Google Chrome before 5.0.375.125 does not properly mitigate an unspecified flaw in the Windows kernel, which has unknown impact and attack vectors.", "scorev2": "10.0", "scorev3": "0.0", "scorev4": "0.0", "modified": "2026-06-16T23:21:42.000", "vector": "NETWORK", "vectorString": "AV:N/AC:L/Au:N/C:C/I:C/A:C", "detail": "fixed-version: Fixed from version 5.0.375.125" }, { "id": "CVE-2010-2898", "status": "Patched", "link": "https://nvd.nist.gov/vuln/detail/CVE-2010-2898", "summary": "Google Chrome before 5.0.375.125 does not properly mitigate an unspecified flaw in the GNU C Library, which has unknown impact and attack vectors.", "scorev2": "10.0", "scorev3": "0.0", "scorev4": "0.0", "modified": "2026-06-16T23:21:42.000", "vector": "NETWORK", "vectorString": "AV:N/AC:L/Au:N/C:C/I:C/A:C", "detail": "fixed-version: Fixed from version 5.0.375.125" }, { "id": "CVE-2010-2899", "status": "Patched", "link": "https://nvd.nist.gov/vuln/detail/CVE-2010-2899", "summary": "Unspecified vulnerability in the layout implementation in Google Chrome before 5.0.375.125 allows remote attackers to obtain sensitive information from process memory via unknown vectors.", "scorev2": "5.0", "scorev3": "0.0", "scorev4": "0.0", "modified": "2026-06-16T23:21:43.000", "vector": "NETWORK", "vectorString": "AV:N/AC:L/Au:N/C:P/I:N/A:N", "detail": "fixed-version: Fixed from version 5.0.375.125" }, { "id": "CVE-2010-2900", "status": "Patched", "link": "https://nvd.nist.gov/vuln/detail/CVE-2010-2900", "summary": "Google Chrome before 5.0.375.125 does not properly handle a large canvas, which has unspecified impact and remote attack vectors.", "scorev2": "10.0", "scorev3": "0.0", "scorev4": "0.0", "modified": "2026-06-16T23:21:43.000", "vector": "NETWORK", "vectorString": "AV:N/AC:L/Au:N/C:C/I:C/A:C", "detail": "fixed-version: Fixed from version 5.0.375.125" }, { "id": "CVE-2010-2901", "status": "Patched", "link": "https://nvd.nist.gov/vuln/detail/CVE-2010-2901", "summary": "The rendering implementation in Google Chrome before 5.0.375.125 allows remote attackers to cause a denial of service (memory corruption) or possibly have unspecified other impact via unknown vectors.", "scorev2": "10.0", "scorev3": "0.0", "scorev4": "0.0", "modified": "2026-06-16T23:21:43.000", "vector": "NETWORK", "vectorString": "AV:N/AC:L/Au:N/C:C/I:C/A:C", "detail": "fixed-version: Fixed from version 5.0.375.125" }, { "id": "CVE-2010-2902", "status": "Patched", "link": "https://nvd.nist.gov/vuln/detail/CVE-2010-2902", "summary": "The SVG implementation in Google Chrome before 5.0.375.125 allows remote attackers to cause a denial of service (memory corruption) or possibly have unspecified other impact via unknown vectors.", "scorev2": "10.0", "scorev3": "0.0", "scorev4": "0.0", "modified": "2026-06-16T23:21:43.000", "vector": "NETWORK", "vectorString": "AV:N/AC:L/Au:N/C:C/I:C/A:C", "detail": "fixed-version: Fixed from version 5.0.375.125" }, { "id": "CVE-2010-2903", "status": "Patched", "link": "https://nvd.nist.gov/vuln/detail/CVE-2010-2903", "summary": "Google Chrome before 5.0.375.125 performs unexpected truncation and improper eliding of hostnames, which has unspecified impact and remote attack vectors.", "scorev2": "7.5", "scorev3": "0.0", "scorev4": "0.0", "modified": "2026-06-16T23:21:43.000", "vector": "NETWORK", "vectorString": "AV:N/AC:L/Au:N/C:P/I:P/A:P", "detail": "fixed-version: Fixed from version 5.0.375.125" }, { "id": "CVE-2010-3111", "status": "Patched", "link": "https://nvd.nist.gov/vuln/detail/CVE-2010-3111", "summary": "Google Chrome before 6.0.472.53 does not properly mitigate an unspecified flaw in the Windows kernel, which has unknown impact and attack vectors, a different vulnerability than CVE-2010-2897.", "scorev2": "10.0", "scorev3": "0.0", "scorev4": "0.0", "modified": "2026-06-16T23:22:08.000", "vector": "NETWORK", "vectorString": "AV:N/AC:L/Au:N/C:C/I:C/A:C", "detail": "fixed-version: Fixed from version >6.0.472.53" }, { "id": "CVE-2010-3112", "status": "Patched", "link": "https://nvd.nist.gov/vuln/detail/CVE-2010-3112", "summary": "Google Chrome before 5.0.375.127 does not properly implement file dialogs, which allows attackers to cause a denial of service (memory corruption) or possibly have unspecified other impact via unknown vectors.", "scorev2": "10.0", "scorev3": "0.0", "scorev4": "0.0", "modified": "2026-06-16T23:22:08.000", "vector": "NETWORK", "vectorString": "AV:N/AC:L/Au:N/C:C/I:C/A:C", "detail": "fixed-version: Fixed from version 5.0.375.127" }, { "id": "CVE-2010-3113", "status": "Patched", "link": "https://nvd.nist.gov/vuln/detail/CVE-2010-3113", "summary": "Google Chrome before 5.0.375.127, and webkitgtk before 1.2.5, does not properly handle SVG documents, which allows remote attackers to cause a denial of service (memory corruption) or possibly have unspecified other impact via unknown vectors related to state changes when using DeleteButtonController.", "scorev2": "10.0", "scorev3": "0.0", "scorev4": "0.0", "modified": "2026-06-16T23:22:09.000", "vector": "NETWORK", "vectorString": "AV:N/AC:L/Au:N/C:C/I:C/A:C", "detail": "fixed-version: Fixed from version 5.0.375.127" }, { "id": "CVE-2010-3114", "status": "Patched", "link": "https://nvd.nist.gov/vuln/detail/CVE-2010-3114", "summary": "The text-editing implementation in Google Chrome before 5.0.375.127, and webkitgtk before 1.2.6, does not check a node type before performing a cast, which has unspecified impact and attack vectors related to (1) DeleteSelectionCommand.cpp, (2) InsertLineBreakCommand.cpp, or (3) InsertParagraphSeparatorCommand.cpp in WebCore/editing/.", "scorev2": "10.0", "scorev3": "0.0", "scorev4": "0.0", "modified": "2026-06-16T23:22:09.000", "vector": "NETWORK", "vectorString": "AV:N/AC:L/Au:N/C:C/I:C/A:C", "detail": "fixed-version: Fixed from version 5.0.375.127" }, { "id": "CVE-2010-3115", "status": "Patched", "link": "https://nvd.nist.gov/vuln/detail/CVE-2010-3115", "summary": "Google Chrome before 5.0.375.127, and webkitgtk before 1.2.6, does not properly implement the history feature, which might allow remote attackers to spoof the address bar via unspecified vectors.", "scorev2": "5.0", "scorev3": "0.0", "scorev4": "0.0", "modified": "2026-06-16T23:22:09.000", "vector": "NETWORK", "vectorString": "AV:N/AC:L/Au:N/C:N/I:P/A:N", "detail": "fixed-version: Fixed from version 5.0.375.127" }, { "id": "CVE-2010-3116", "status": "Patched", "link": "https://nvd.nist.gov/vuln/detail/CVE-2010-3116", "summary": "Multiple use-after-free vulnerabilities in WebKit, as used in Apple Safari before 4.1.3 and 5.0.x before 5.0.3, Google Chrome before 5.0.375.127, and webkitgtk before 1.2.6, allow remote attackers to execute arbitrary code or cause a denial of service (application crash) via vectors related to improper handling of MIME types by plug-ins.", "scorev2": "10.0", "scorev3": "0.0", "scorev4": "0.0", "modified": "2026-06-16T23:22:09.000", "vector": "NETWORK", "vectorString": "AV:N/AC:L/Au:N/C:C/I:C/A:C", "detail": "fixed-version: Fixed from version 5.0.375.127" }, { "id": "CVE-2010-3117", "status": "Patched", "link": "https://nvd.nist.gov/vuln/detail/CVE-2010-3117", "summary": "Google Chrome before 5.0.375.127 does not properly implement the notifications feature, which allows remote attackers to cause a denial of service (application crash) and possibly have unspecified other impact via unknown vectors.", "scorev2": "10.0", "scorev3": "0.0", "scorev4": "0.0", "modified": "2026-06-16T23:22:09.000", "vector": "NETWORK", "vectorString": "AV:N/AC:L/Au:N/C:C/I:C/A:C", "detail": "fixed-version: Fixed from version 5.0.375.127" }, { "id": "CVE-2010-3118", "status": "Patched", "link": "https://nvd.nist.gov/vuln/detail/CVE-2010-3118", "summary": "The autosuggest feature in the Omnibox implementation in Google Chrome before 5.0.375.127 does not anticipate entry of passwords, which might allow remote attackers to obtain sensitive information by reading the network traffic generated by this feature.", "scorev2": "5.0", "scorev3": "0.0", "scorev4": "0.0", "modified": "2026-06-16T23:22:09.000", "vector": "NETWORK", "vectorString": "AV:N/AC:L/Au:N/C:P/I:N/A:N", "detail": "fixed-version: Fixed from version 5.0.375.127" }, { "id": "CVE-2010-3119", "status": "Patched", "link": "https://nvd.nist.gov/vuln/detail/CVE-2010-3119", "summary": "Google Chrome before 5.0.375.127 and webkitgtk before 1.2.6 do not properly support the Ruby language, which allows attackers to cause a denial of service (memory corruption) or possibly have unspecified other impact via unknown vectors.", "scorev2": "10.0", "scorev3": "0.0", "scorev4": "0.0", "modified": "2026-06-16T23:22:09.000", "vector": "NETWORK", "vectorString": "AV:N/AC:L/Au:N/C:C/I:C/A:C", "detail": "fixed-version: Fixed from version 5.0.375.127" }, { "id": "CVE-2010-3120", "status": "Patched", "link": "https://nvd.nist.gov/vuln/detail/CVE-2010-3120", "summary": "Google Chrome before 5.0.375.127 does not properly implement the Geolocation feature, which allows remote attackers to cause a denial of service (memory corruption) or possibly have unspecified other impact via unknown vectors.", "scorev2": "10.0", "scorev3": "0.0", "scorev4": "0.0", "modified": "2026-06-16T23:22:10.000", "vector": "NETWORK", "vectorString": "AV:N/AC:L/Au:N/C:C/I:C/A:C", "detail": "fixed-version: Fixed from version 5.0.375.127" }, { "id": "CVE-2010-3246", "status": "Patched", "link": "https://nvd.nist.gov/vuln/detail/CVE-2010-3246", "summary": "Google Chrome before 6.0.472.53 does not properly handle the _blank value for the target attribute of unspecified elements, which allows remote attackers to bypass the pop-up blocker via unknown vectors.", "scorev2": "4.3", "scorev3": "0.0", "scorev4": "0.0", "modified": "2026-06-16T23:22:26.000", "vector": "NETWORK", "vectorString": "AV:N/AC:M/Au:N/C:N/I:P/A:N", "detail": "fixed-version: Fixed from version 6.0.472.53" }, { "id": "CVE-2010-3247", "status": "Patched", "link": "https://nvd.nist.gov/vuln/detail/CVE-2010-3247", "summary": "Google Chrome before 6.0.472.53 does not properly restrict the characters in URLs, which allows remote attackers to spoof the appearance of the URL bar via homographic sequences.", "scorev2": "4.3", "scorev3": "0.0", "scorev4": "0.0", "modified": "2026-06-16T23:22:26.000", "vector": "NETWORK", "vectorString": "AV:N/AC:M/Au:N/C:N/I:P/A:N", "detail": "fixed-version: Fixed from version 6.0.472.53" }, { "id": "CVE-2010-3248", "status": "Patched", "link": "https://nvd.nist.gov/vuln/detail/CVE-2010-3248", "summary": "Google Chrome before 6.0.472.53 does not properly restrict copying to the clipboard, which has unspecified impact and attack vectors.", "scorev2": "5.0", "scorev3": "0.0", "scorev4": "0.0", "modified": "2026-06-16T23:22:26.000", "vector": "NETWORK", "vectorString": "AV:N/AC:L/Au:N/C:N/I:P/A:N", "detail": "fixed-version: Fixed from version 6.0.472.53" }, { "id": "CVE-2010-3249", "status": "Patched", "link": "https://nvd.nist.gov/vuln/detail/CVE-2010-3249", "summary": "Google Chrome before 6.0.472.53 does not properly implement SVG filters, which allows remote attackers to cause a denial of service or possibly have unspecified other impact via unknown vectors, related to a \"stale pointer\" issue.", "scorev2": "9.3", "scorev3": "0.0", "scorev4": "0.0", "modified": "2026-06-16T23:22:26.000", "vector": "NETWORK", "vectorString": "AV:N/AC:M/Au:N/C:C/I:C/A:C", "detail": "fixed-version: Fixed from version 6.0.472.53" }, { "id": "CVE-2010-3250", "status": "Patched", "link": "https://nvd.nist.gov/vuln/detail/CVE-2010-3250", "summary": "Unspecified vulnerability in Google Chrome before 6.0.472.53 allows remote attackers to enumerate the set of installed extensions via unknown vectors.", "scorev2": "5.0", "scorev3": "0.0", "scorev4": "0.0", "modified": "2026-06-16T23:22:26.000", "vector": "NETWORK", "vectorString": "AV:N/AC:L/Au:N/C:P/I:N/A:N", "detail": "fixed-version: Fixed from version 6.0.472.53" }, { "id": "CVE-2010-3251", "status": "Patched", "link": "https://nvd.nist.gov/vuln/detail/CVE-2010-3251", "summary": "The WebSockets implementation in Google Chrome before 6.0.472.53 allows remote attackers to cause a denial of service (NULL pointer dereference and application crash) via unspecified vectors.", "scorev2": "4.3", "scorev3": "0.0", "scorev4": "0.0", "modified": "2026-06-16T23:22:26.000", "vector": "NETWORK", "vectorString": "AV:N/AC:M/Au:N/C:N/I:N/A:P", "detail": "fixed-version: Fixed from version 6.0.472.53" }, { "id": "CVE-2010-3252", "status": "Patched", "link": "https://nvd.nist.gov/vuln/detail/CVE-2010-3252", "summary": "Use-after-free vulnerability in the Notifications presenter in Google Chrome before 6.0.472.53 allows attackers to cause a denial of service or possibly have unspecified other impact via unknown vectors.", "scorev2": "10.0", "scorev3": "0.0", "scorev4": "0.0", "modified": "2026-06-16T23:22:27.000", "vector": "NETWORK", "vectorString": "AV:N/AC:L/Au:N/C:C/I:C/A:C", "detail": "fixed-version: Fixed from version 6.0.472.53" }, { "id": "CVE-2010-3253", "status": "Patched", "link": "https://nvd.nist.gov/vuln/detail/CVE-2010-3253", "summary": "The implementation of notification permissions in Google Chrome before 6.0.472.53 allows attackers to cause a denial of service (memory corruption) or possibly have unspecified other impact via unknown vectors.", "scorev2": "10.0", "scorev3": "0.0", "scorev4": "0.0", "modified": "2026-06-16T23:22:27.000", "vector": "NETWORK", "vectorString": "AV:N/AC:L/Au:N/C:C/I:C/A:C", "detail": "fixed-version: Fixed from version 6.0.472.53" }, { "id": "CVE-2010-3254", "status": "Patched", "link": "https://nvd.nist.gov/vuln/detail/CVE-2010-3254", "summary": "The WebSockets implementation in Google Chrome before 6.0.472.53 does not properly handle integer values, which allows remote attackers to cause a denial of service or possibly have unspecified other impact via unknown vectors.", "scorev2": "10.0", "scorev3": "0.0", "scorev4": "0.0", "modified": "2026-06-16T23:22:27.000", "vector": "NETWORK", "vectorString": "AV:N/AC:L/Au:N/C:C/I:C/A:C", "detail": "fixed-version: Fixed from version 6.0.472.53" }, { "id": "CVE-2010-3255", "status": "Patched", "link": "https://nvd.nist.gov/vuln/detail/CVE-2010-3255", "summary": "Google Chrome before 6.0.472.53 and webkitgtk before 1.2.6 do not properly handle counter nodes, which allows remote attackers to cause a denial of service (memory corruption) or possibly have unspecified other impact via unknown vectors.", "scorev2": "9.3", "scorev3": "0.0", "scorev4": "0.0", "modified": "2026-06-16T23:22:27.000", "vector": "NETWORK", "vectorString": "AV:N/AC:M/Au:N/C:C/I:C/A:C", "detail": "fixed-version: Fixed from version 6.0.472.53" }, { "id": "CVE-2010-3256", "status": "Patched", "link": "https://nvd.nist.gov/vuln/detail/CVE-2010-3256", "summary": "Google Chrome before 6.0.472.53 does not properly limit the number of stored autocomplete entries, which has unspecified impact and attack vectors.", "scorev2": "4.3", "scorev3": "0.0", "scorev4": "0.0", "modified": "2026-06-16T23:22:27.000", "vector": "NETWORK", "vectorString": "AV:N/AC:M/Au:N/C:N/I:N/A:P", "detail": "fixed-version: Fixed from version 6.0.472.53" }, { "id": "CVE-2010-3257", "status": "Patched", "link": "https://nvd.nist.gov/vuln/detail/CVE-2010-3257", "summary": "Use-after-free vulnerability in WebKit, as used in Apple Safari before 4.1.3 and 5.0.x before 5.0.3, Google Chrome before 6.0.472.53, and webkitgtk before 1.2.6, allows remote attackers to execute arbitrary code or cause a denial of service (application crash) via vectors involving element focus.", "scorev2": "9.3", "scorev3": "0.0", "scorev4": "0.0", "modified": "2026-06-16T23:22:27.000", "vector": "NETWORK", "vectorString": "AV:N/AC:M/Au:N/C:C/I:C/A:C", "detail": "fixed-version: Fixed from version 6.0.472.53" }, { "id": "CVE-2010-3258", "status": "Patched", "link": "https://nvd.nist.gov/vuln/detail/CVE-2010-3258", "summary": "The sandbox implementation in Google Chrome before 6.0.472.53 does not properly deserialize parameters, which has unspecified impact and remote attack vectors.", "scorev2": "9.3", "scorev3": "0.0", "scorev4": "0.0", "modified": "2026-06-16T23:22:27.000", "vector": "NETWORK", "vectorString": "AV:N/AC:M/Au:N/C:C/I:C/A:C", "detail": "fixed-version: Fixed from version 6.0.472.53" }, { "id": "CVE-2010-3259", "status": "Patched", "link": "https://nvd.nist.gov/vuln/detail/CVE-2010-3259", "summary": "WebKit, as used in Apple Safari before 4.1.3 and 5.0.x before 5.0.3, Google Chrome before 6.0.472.53, and webkitgtk before 1.2.6, does not properly restrict read access to images derived from CANVAS elements, which allows remote attackers to bypass the Same Origin Policy and obtain potentially sensitive image data via a crafted web site.", "scorev2": "4.3", "scorev3": "0.0", "scorev4": "0.0", "modified": "2026-06-16T23:22:27.000", "vector": "NETWORK", "vectorString": "AV:N/AC:M/Au:N/C:P/I:N/A:N", "detail": "fixed-version: Fixed from version 6.0.472.53" }, { "id": "CVE-2010-3411", "status": "Patched", "link": "https://nvd.nist.gov/vuln/detail/CVE-2010-3411", "summary": "Google Chrome before 6.0.472.59 on Linux does not properly handle cursors, which might allow attackers to cause a denial of service (assertion failure) via unspecified vectors.", "scorev2": "5.0", "scorev3": "0.0", "scorev4": "0.0", "modified": "2026-06-16T23:22:43.000", "vector": "NETWORK", "vectorString": "AV:N/AC:L/Au:N/C:N/I:N/A:P", "detail": "fixed-version: Fixed from version 6.0.472.59" }, { "id": "CVE-2010-3412", "status": "Patched", "link": "https://nvd.nist.gov/vuln/detail/CVE-2010-3412", "summary": "Race condition in the console implementation in Google Chrome before 6.0.472.59 has unspecified impact and attack vectors.", "scorev2": "9.3", "scorev3": "0.0", "scorev4": "0.0", "modified": "2026-06-16T23:22:43.000", "vector": "NETWORK", "vectorString": "AV:N/AC:M/Au:N/C:C/I:C/A:C", "detail": "fixed-version: Fixed from version 6.0.472.59" }, { "id": "CVE-2010-3413", "status": "Patched", "link": "https://nvd.nist.gov/vuln/detail/CVE-2010-3413", "summary": "Unspecified vulnerability in the pop-up blocking functionality in Google Chrome before 6.0.472.59 allows remote attackers to cause a denial of service (application crash) via unknown vectors.", "scorev2": "5.0", "scorev3": "0.0", "scorev4": "0.0", "modified": "2026-06-16T23:22:43.000", "vector": "NETWORK", "vectorString": "AV:N/AC:L/Au:N/C:N/I:N/A:P", "detail": "fixed-version: Fixed from version 6.0.472.59" }, { "id": "CVE-2010-3414", "status": "Patched", "link": "https://nvd.nist.gov/vuln/detail/CVE-2010-3414", "summary": "Google Chrome before 6.0.472.59 on Mac OS X does not properly implement file dialogs, which allows attackers to cause a denial of service (memory corruption) or possibly have unspecified other impact via unknown vectors. NOTE: this issue exists because of an incorrect fix for CVE-2010-3112 on Mac OS X.", "scorev2": "10.0", "scorev3": "0.0", "scorev4": "0.0", "modified": "2026-06-16T23:22:43.000", "vector": "NETWORK", "vectorString": "AV:N/AC:L/Au:N/C:C/I:C/A:C", "detail": "fixed-version: Fixed from version 6.0.472.59" }, { "id": "CVE-2010-3415", "status": "Patched", "link": "https://nvd.nist.gov/vuln/detail/CVE-2010-3415", "summary": "Google Chrome before 6.0.472.59 does not properly implement Geolocation, which allows remote attackers to cause a denial of service (memory corruption) or possibly have unspecified other impact via unknown vectors.", "scorev2": "10.0", "scorev3": "0.0", "scorev4": "0.0", "modified": "2026-06-16T23:22:43.000", "vector": "NETWORK", "vectorString": "AV:N/AC:L/Au:N/C:C/I:C/A:C", "detail": "fixed-version: Fixed from version 6.0.472.59" }, { "id": "CVE-2010-3416", "status": "Patched", "link": "https://nvd.nist.gov/vuln/detail/CVE-2010-3416", "summary": "Google Chrome before 6.0.472.59 on Linux does not properly implement the Khmer locale, which allows remote attackers to cause a denial of service (memory corruption) or possibly have unspecified other impact via unknown vectors.", "scorev2": "7.5", "scorev3": "9.8", "scorev4": "0.0", "modified": "2026-06-16T23:22:43.000", "vector": "NETWORK", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H", "detail": "fixed-version: Fixed from version 6.0.472.59" }, { "id": "CVE-2010-3417", "status": "Patched", "link": "https://nvd.nist.gov/vuln/detail/CVE-2010-3417", "summary": "Google Chrome before 6.0.472.59 does not prompt the user before granting access to the extension history, which allows attackers to obtain potentially sensitive information via unspecified vectors.", "scorev2": "5.0", "scorev3": "0.0", "scorev4": "0.0", "modified": "2026-06-16T23:22:43.000", "vector": "NETWORK", "vectorString": "AV:N/AC:L/Au:N/C:P/I:N/A:N", "detail": "fixed-version: Fixed from version 6.0.472.59" }, { "id": "CVE-2010-3729", "status": "Patched", "link": "https://nvd.nist.gov/vuln/detail/CVE-2010-3729", "summary": "The SPDY protocol implementation in Google Chrome before 6.0.472.62 does not properly manage buffers, which might allow remote attackers to execute arbitrary code via unspecified vectors.", "scorev2": "7.5", "scorev3": "9.8", "scorev4": "0.0", "modified": "2026-06-16T23:23:24.000", "vector": "NETWORK", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H", "detail": "fixed-version: Fixed from version 6.0.472.62" }, { "id": "CVE-2010-3730", "status": "Patched", "link": "https://nvd.nist.gov/vuln/detail/CVE-2010-3730", "summary": "Google Chrome before 6.0.472.62 does not properly use information about the origin of a document to manage properties, which allows remote attackers to have an unspecified impact via a crafted web site, related to a \"property pollution\" issue.", "scorev2": "6.8", "scorev3": "8.8", "scorev4": "0.0", "modified": "2026-06-16T23:23:24.000", "vector": "NETWORK", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H", "detail": "fixed-version: Fixed from version 6.0.472.62" }, { "id": "CVE-2010-3917", "status": "Patched", "link": "https://nvd.nist.gov/vuln/detail/CVE-2010-3917", "summary": "Google Chrome before 3.0 does not properly handle XML documents, which allows remote attackers to obtain sensitive information via a crafted web site.", "scorev2": "4.3", "scorev3": "6.5", "scorev4": "0.0", "modified": "2026-06-16T23:23:49.000", "vector": "NETWORK", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N", "detail": "fixed-version: Fixed from version 3.0" }, { "id": "CVE-2010-4008", "status": "Patched", "link": "https://nvd.nist.gov/vuln/detail/CVE-2010-4008", "summary": "libxml2 before 2.7.8, as used in Google Chrome before 7.0.517.44, Apple Safari 5.0.2 and earlier, and other products, reads from invalid memory locations during processing of malformed XPath expressions, which allows context-dependent attackers to cause a denial of service (application crash) via a crafted XML document.", "scorev2": "4.3", "scorev3": "0.0", "scorev4": "0.0", "modified": "2026-06-16T23:23:58.000", "vector": "NETWORK", "vectorString": "AV:N/AC:M/Au:N/C:N/I:N/A:P", "detail": "fixed-version: Fixed from version 7.0.517.44" }, { "id": "CVE-2010-4033", "status": "Patched", "link": "https://nvd.nist.gov/vuln/detail/CVE-2010-4033", "summary": "Google Chrome before 7.0.517.41 does not properly implement the autofill and autocomplete functionality, which allows remote attackers to conduct \"profile spamming\" attacks via unspecified vectors.", "scorev2": "5.0", "scorev3": "0.0", "scorev4": "0.0", "modified": "2026-06-16T23:24:01.000", "vector": "NETWORK", "vectorString": "AV:N/AC:L/Au:N/C:N/I:P/A:N", "detail": "fixed-version: Fixed from version >7.0.517.40" }, { "id": "CVE-2010-4034", "status": "Patched", "link": "https://nvd.nist.gov/vuln/detail/CVE-2010-4034", "summary": "Google Chrome before 7.0.517.41 does not properly handle forms, which allows remote attackers to cause a denial of service (application crash) or possibly have unspecified other impact via a crafted HTML document.", "scorev2": "9.3", "scorev3": "0.0", "scorev4": "0.0", "modified": "2026-06-16T23:24:01.000", "vector": "NETWORK", "vectorString": "AV:N/AC:M/Au:N/C:C/I:C/A:C", "detail": "fixed-version: Fixed from version >7.0.517.40" }, { "id": "CVE-2010-4035", "status": "Patched", "link": "https://nvd.nist.gov/vuln/detail/CVE-2010-4035", "summary": "Google Chrome before 7.0.517.41 does not properly perform autofill operations for forms, which allows remote attackers to cause a denial of service (application crash) or possibly have unspecified other impact via a crafted HTML document.", "scorev2": "9.3", "scorev3": "0.0", "scorev4": "0.0", "modified": "2026-06-16T23:24:01.000", "vector": "NETWORK", "vectorString": "AV:N/AC:M/Au:N/C:C/I:C/A:C", "detail": "fixed-version: Fixed from version >7.0.517.40" }, { "id": "CVE-2010-4036", "status": "Patched", "link": "https://nvd.nist.gov/vuln/detail/CVE-2010-4036", "summary": "Google Chrome before 7.0.517.41 does not properly handle the unloading of a page, which allows remote attackers to spoof URLs via unspecified vectors.", "scorev2": "6.8", "scorev3": "0.0", "scorev4": "0.0", "modified": "2026-06-16T23:24:01.000", "vector": "NETWORK", "vectorString": "AV:N/AC:M/Au:N/C:P/I:P/A:P", "detail": "fixed-version: Fixed from version >7.0.517.40" }, { "id": "CVE-2010-4037", "status": "Patched", "link": "https://nvd.nist.gov/vuln/detail/CVE-2010-4037", "summary": "Unspecified vulnerability in Google Chrome before 7.0.517.41 allows remote attackers to bypass the pop-up blocker via unknown vectors.", "scorev2": "4.3", "scorev3": "0.0", "scorev4": "0.0", "modified": "2026-06-16T23:24:01.000", "vector": "NETWORK", "vectorString": "AV:N/AC:M/Au:N/C:N/I:P/A:N", "detail": "fixed-version: Fixed from version >7.0.517.40" }, { "id": "CVE-2010-4038", "status": "Patched", "link": "https://nvd.nist.gov/vuln/detail/CVE-2010-4038", "summary": "The Web Sockets implementation in Google Chrome before 7.0.517.41 does not properly handle a shutdown action, which allows remote attackers to cause a denial of service (application crash) via unspecified vectors.", "scorev2": "5.0", "scorev3": "7.5", "scorev4": "0.0", "modified": "2026-06-16T23:24:01.000", "vector": "NETWORK", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H", "detail": "fixed-version: Fixed from version 7.0.517.41" }, { "id": "CVE-2010-4039", "status": "Patched", "link": "https://nvd.nist.gov/vuln/detail/CVE-2010-4039", "summary": "Google Chrome before 7.0.517.41 on Linux does not properly set the PATH environment variable, which has unspecified impact and attack vectors.", "scorev2": "7.5", "scorev3": "9.8", "scorev4": "0.0", "modified": "2026-06-16T23:24:02.000", "vector": "NETWORK", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H", "detail": "fixed-version: Fixed from version 7.0.517.41" }, { "id": "CVE-2010-4040", "status": "Patched", "link": "https://nvd.nist.gov/vuln/detail/CVE-2010-4040", "summary": "Google Chrome before 7.0.517.41 does not properly handle animated GIF images, which allows remote attackers to cause a denial of service (memory corruption) or possibly have unspecified other impact via a crafted image.", "scorev2": "6.8", "scorev3": "7.8", "scorev4": "0.0", "modified": "2026-06-16T23:24:02.000", "vector": "LOCAL", "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H", "detail": "fixed-version: Fixed from version 7.0.517.41" }, { "id": "CVE-2010-4041", "status": "Patched", "link": "https://nvd.nist.gov/vuln/detail/CVE-2010-4041", "summary": "The sandbox implementation in Google Chrome before 7.0.517.41 on Linux does not properly constrain worker processes, which might allow remote attackers to bypass intended access restrictions via unspecified vectors.", "scorev2": "7.5", "scorev3": "9.8", "scorev4": "0.0", "modified": "2026-06-16T23:24:02.000", "vector": "NETWORK", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H", "detail": "fixed-version: Fixed from version 7.0.517.41" }, { "id": "CVE-2010-4042", "status": "Patched", "link": "https://nvd.nist.gov/vuln/detail/CVE-2010-4042", "summary": "Google Chrome before 7.0.517.41 does not properly handle element maps, which allows remote attackers to cause a denial of service or possibly have unspecified other impact via vectors related to \"stale elements.\"", "scorev2": "7.5", "scorev3": "9.8", "scorev4": "0.0", "modified": "2026-06-16T23:24:02.000", "vector": "NETWORK", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H", "detail": "fixed-version: Fixed from version 7.0.517.41" }, { "id": "CVE-2010-4197", "status": "Patched", "link": "https://nvd.nist.gov/vuln/detail/CVE-2010-4197", "summary": "Use-after-free vulnerability in WebKit, as used in Google Chrome before 7.0.517.44, webkitgtk before 1.2.6, and other products, allows remote attackers to cause a denial of service or possibly have unspecified other impact via vectors involving text editing.", "scorev2": "7.5", "scorev3": "9.8", "scorev4": "0.0", "modified": "2026-06-16T23:24:20.000", "vector": "NETWORK", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H", "detail": "fixed-version: Fixed from version 7.0.517.44" }, { "id": "CVE-2010-4198", "status": "Patched", "link": "https://nvd.nist.gov/vuln/detail/CVE-2010-4198", "summary": "WebKit, as used in Google Chrome before 7.0.517.44, webkitgtk before 1.2.6, and other products, does not properly handle large text areas, which allows remote attackers to cause a denial of service (memory corruption) or possibly have unspecified other impact via a crafted HTML document.", "scorev2": "6.8", "scorev3": "8.8", "scorev4": "0.0", "modified": "2026-06-16T23:24:20.000", "vector": "NETWORK", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H", "detail": "fixed-version: Fixed from version 7.0.517.44" }, { "id": "CVE-2010-4199", "status": "Patched", "link": "https://nvd.nist.gov/vuln/detail/CVE-2010-4199", "summary": "Google Chrome before 7.0.517.44 does not properly perform a cast of an unspecified variable during processing of an SVG use element, which allows remote attackers to cause a denial of service or possibly have unspecified other impact via a crafted SVG document.", "scorev2": "6.8", "scorev3": "8.8", "scorev4": "0.0", "modified": "2026-06-16T23:24:20.000", "vector": "NETWORK", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H", "detail": "fixed-version: Fixed from version 7.0.517.44" }, { "id": "CVE-2010-4201", "status": "Patched", "link": "https://nvd.nist.gov/vuln/detail/CVE-2010-4201", "summary": "Use-after-free vulnerability in Google Chrome before 7.0.517.44 allows remote attackers to cause a denial of service or possibly have unspecified other impact via vectors involving text control selections.", "scorev2": "7.5", "scorev3": "9.8", "scorev4": "0.0", "modified": "2026-06-16T23:24:20.000", "vector": "NETWORK", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H", "detail": "fixed-version: Fixed from version 7.0.517.44" }, { "id": "CVE-2010-4202", "status": "Patched", "link": "https://nvd.nist.gov/vuln/detail/CVE-2010-4202", "summary": "Multiple integer overflows in Google Chrome before 7.0.517.44 on Linux allow remote attackers to cause a denial of service or possibly have unspecified other impact via a crafted font.", "scorev2": "7.5", "scorev3": "9.8", "scorev4": "0.0", "modified": "2026-06-16T23:24:20.000", "vector": "NETWORK", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H", "detail": "fixed-version: Fixed from version 7.0.517.44" }, { "id": "CVE-2010-4203", "status": "Patched", "link": "https://nvd.nist.gov/vuln/detail/CVE-2010-4203", "summary": "WebM libvpx (aka the VP8 Codec SDK) before 0.9.5, as used in Google Chrome before 7.0.517.44, allows remote attackers to cause a denial of service (memory corruption) or possibly execute arbitrary code via invalid frames.", "scorev2": "10.0", "scorev3": "9.8", "scorev4": "0.0", "modified": "2026-06-16T23:24:20.000", "vector": "NETWORK", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H", "detail": "fixed-version: Fixed from version 7.0.517.44" }, { "id": "CVE-2010-4204", "status": "Patched", "link": "https://nvd.nist.gov/vuln/detail/CVE-2010-4204", "summary": "WebKit, as used in Google Chrome before 7.0.517.44, webkitgtk before 1.2.6, and other products, accesses a frame object after this object has been destroyed, which allows remote attackers to cause a denial of service or possibly have unspecified other impact via unknown vectors.", "scorev2": "7.5", "scorev3": "9.8", "scorev4": "0.0", "modified": "2026-06-16T23:24:21.000", "vector": "NETWORK", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H", "detail": "fixed-version: Fixed from version 7.0.517.44" }, { "id": "CVE-2010-4205", "status": "Patched", "link": "https://nvd.nist.gov/vuln/detail/CVE-2010-4205", "summary": "Google Chrome before 7.0.517.44 does not properly handle the data types of event objects, which allows remote attackers to cause a denial of service or possibly have unspecified other impact via unknown vectors.", "scorev2": "7.5", "scorev3": "9.8", "scorev4": "0.0", "modified": "2026-06-16T23:24:21.000", "vector": "NETWORK", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H", "detail": "fixed-version: Fixed from version 7.0.517.44" }, { "id": "CVE-2010-4206", "status": "Patched", "link": "https://nvd.nist.gov/vuln/detail/CVE-2010-4206", "summary": "Array index error in the FEBlend::apply function in WebCore/platform/graphics/filters/FEBlend.cpp in WebKit, as used in Google Chrome before 7.0.517.44, webkitgtk before 1.2.6, and other products, allows remote attackers to cause a denial of service and possibly execute arbitrary code via a crafted SVG document, related to effects in the application of filters.", "scorev2": "6.8", "scorev3": "8.8", "scorev4": "0.0", "modified": "2026-06-16T23:24:21.000", "vector": "NETWORK", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H", "detail": "fixed-version: Fixed from version 7.0.517.44" }, { "id": "CVE-2010-4482", "status": "Patched", "link": "https://nvd.nist.gov/vuln/detail/CVE-2010-4482", "summary": "Unspecified vulnerability in Google Chrome before 8.0.552.215 allows remote attackers to bypass the pop-up blocker via unknown vectors.", "scorev2": "5.0", "scorev3": "0.0", "scorev4": "0.0", "modified": "2026-06-16T23:24:53.000", "vector": "NETWORK", "vectorString": "AV:N/AC:L/Au:N/C:N/I:P/A:N", "detail": "fixed-version: Fixed from version >8.0.552.214" }, { "id": "CVE-2010-4483", "status": "Patched", "link": "https://nvd.nist.gov/vuln/detail/CVE-2010-4483", "summary": "Google Chrome before 8.0.552.215 does not properly restrict read access to videos derived from CANVAS elements, which allows remote attackers to bypass the Same Origin Policy and obtain potentially sensitive video data via a crafted web site.", "scorev2": "4.3", "scorev3": "0.0", "scorev4": "0.0", "modified": "2026-06-16T23:24:53.000", "vector": "NETWORK", "vectorString": "AV:N/AC:M/Au:N/C:P/I:N/A:N", "detail": "fixed-version: Fixed from version >8.0.552.214" }, { "id": "CVE-2010-4484", "status": "Patched", "link": "https://nvd.nist.gov/vuln/detail/CVE-2010-4484", "summary": "Google Chrome before 8.0.552.215 does not properly handle HTML5 databases, which allows attackers to cause a denial of service (application crash) via unspecified vectors.", "scorev2": "5.0", "scorev3": "0.0", "scorev4": "0.0", "modified": "2026-06-16T23:24:53.000", "vector": "NETWORK", "vectorString": "AV:N/AC:L/Au:N/C:N/I:N/A:P", "detail": "fixed-version: Fixed from version >8.0.552.214" }, { "id": "CVE-2010-4485", "status": "Patched", "link": "https://nvd.nist.gov/vuln/detail/CVE-2010-4485", "summary": "Google Chrome before 8.0.552.215 does not properly restrict the generation of file dialogs, which allows remote attackers to cause a denial of service (reduced usability and possible application crash) via a crafted web site.", "scorev2": "4.3", "scorev3": "0.0", "scorev4": "0.0", "modified": "2026-06-16T23:24:54.000", "vector": "NETWORK", "vectorString": "AV:N/AC:M/Au:N/C:N/I:N/A:P", "detail": "fixed-version: Fixed from version >8.0.552.214" }, { "id": "CVE-2010-4486", "status": "Patched", "link": "https://nvd.nist.gov/vuln/detail/CVE-2010-4486", "summary": "Use-after-free vulnerability in Google Chrome before 8.0.552.215 allows remote attackers to cause a denial of service or possibly have unspecified other impact via vectors related to history handling.", "scorev2": "9.3", "scorev3": "0.0", "scorev4": "0.0", "modified": "2026-06-16T23:24:54.000", "vector": "NETWORK", "vectorString": "AV:N/AC:M/Au:N/C:C/I:C/A:C", "detail": "fixed-version: Fixed from version >8.0.552.214" }, { "id": "CVE-2010-4487", "status": "Patched", "link": "https://nvd.nist.gov/vuln/detail/CVE-2010-4487", "summary": "Incomplete blacklist vulnerability in Google Chrome before 8.0.552.215 on Linux and Mac OS X allows remote attackers to have an unspecified impact via a \"dangerous file.\"", "scorev2": "7.5", "scorev3": "0.0", "scorev4": "0.0", "modified": "2026-06-16T23:24:54.000", "vector": "NETWORK", "vectorString": "AV:N/AC:L/Au:N/C:P/I:P/A:P", "detail": "fixed-version: Fixed from version 8.0.552.215" }, { "id": "CVE-2010-4488", "status": "Patched", "link": "https://nvd.nist.gov/vuln/detail/CVE-2010-4488", "summary": "Google Chrome before 8.0.552.215 does not properly handle HTTP proxy authentication, which allows remote attackers to cause a denial of service (application crash) via unspecified vectors.", "scorev2": "5.0", "scorev3": "0.0", "scorev4": "0.0", "modified": "2026-06-16T23:24:54.000", "vector": "NETWORK", "vectorString": "AV:N/AC:L/Au:N/C:N/I:N/A:P", "detail": "fixed-version: Fixed from version >8.0.552.214" }, { "id": "CVE-2010-4489", "status": "Patched", "link": "https://nvd.nist.gov/vuln/detail/CVE-2010-4489", "summary": "libvpx, as used in Google Chrome before 8.0.552.215 and possibly other products, allows remote attackers to cause a denial of service (out-of-bounds read) via a crafted WebM video. NOTE: this vulnerability exists because of a regression.", "scorev2": "4.3", "scorev3": "0.0", "scorev4": "0.0", "modified": "2026-06-16T23:24:54.000", "vector": "NETWORK", "vectorString": "AV:N/AC:M/Au:N/C:N/I:N/A:P", "detail": "fixed-version: Fixed from version >8.0.552.214" }, { "id": "CVE-2010-4490", "status": "Patched", "link": "https://nvd.nist.gov/vuln/detail/CVE-2010-4490", "summary": "Google Chrome before 8.0.552.215 allows remote attackers to cause a denial of service (application crash) or possibly have unspecified other impact via malformed video content that triggers an indexing error.", "scorev2": "9.3", "scorev3": "0.0", "scorev4": "0.0", "modified": "2026-06-16T23:24:54.000", "vector": "NETWORK", "vectorString": "AV:N/AC:M/Au:N/C:C/I:C/A:C", "detail": "fixed-version: Fixed from version >8.0.552.214" }, { "id": "CVE-2010-4491", "status": "Patched", "link": "https://nvd.nist.gov/vuln/detail/CVE-2010-4491", "summary": "Google Chrome before 8.0.552.215 does not properly restrict privileged extensions, which allows remote attackers to cause a denial of service (memory corruption) via a crafted extension.", "scorev2": "4.3", "scorev3": "0.0", "scorev4": "0.0", "modified": "2026-06-16T23:24:54.000", "vector": "NETWORK", "vectorString": "AV:N/AC:M/Au:N/C:N/I:N/A:P", "detail": "fixed-version: Fixed from version >8.0.552.214" }, { "id": "CVE-2010-4492", "status": "Patched", "link": "https://nvd.nist.gov/vuln/detail/CVE-2010-4492", "summary": "Use-after-free vulnerability in Google Chrome before 8.0.552.215 allows remote attackers to cause a denial of service or possibly have unspecified other impact via vectors involving SVG animations.", "scorev2": "7.5", "scorev3": "0.0", "scorev4": "0.0", "modified": "2026-06-16T23:24:54.000", "vector": "NETWORK", "vectorString": "AV:N/AC:L/Au:N/C:P/I:P/A:P", "detail": "fixed-version: Fixed from version 8.0.552.215" }, { "id": "CVE-2010-4493", "status": "Patched", "link": "https://nvd.nist.gov/vuln/detail/CVE-2010-4493", "summary": "Use-after-free vulnerability in Google Chrome before 8.0.552.215 allows remote attackers to cause a denial of service via vectors related to the handling of mouse dragging events.", "scorev2": "4.3", "scorev3": "0.0", "scorev4": "0.0", "modified": "2026-06-16T23:24:54.000", "vector": "NETWORK", "vectorString": "AV:N/AC:M/Au:N/C:N/I:N/A:P", "detail": "fixed-version: Fixed from version 8.0.552.215" }, { "id": "CVE-2010-4494", "status": "Patched", "link": "https://nvd.nist.gov/vuln/detail/CVE-2010-4494", "summary": "Double free vulnerability in libxml2 2.7.8 and other versions, as used in Google Chrome before 8.0.552.215 and other products, allows remote attackers to cause a denial of service or possibly have unspecified other impact via vectors related to XPath handling.", "scorev2": "7.5", "scorev3": "0.0", "scorev4": "0.0", "modified": "2026-06-16T23:24:55.000", "vector": "NETWORK", "vectorString": "AV:N/AC:L/Au:N/C:P/I:P/A:P", "detail": "fixed-version: Fixed from version 8.0.552.215" }, { "id": "CVE-2010-4574", "status": "Patched", "link": "https://nvd.nist.gov/vuln/detail/CVE-2010-4574", "summary": "The Pickle::Pickle function in base/pickle.cc in Google Chrome before 8.0.552.224 and Chrome OS before 8.0.552.343 on 64-bit Linux platforms does not properly perform pointer arithmetic, which allows remote attackers to bypass message deserialization validation, and cause a denial of service or possibly have unspecified other impact, via invalid pickle data.", "scorev2": "7.5", "scorev3": "0.0", "scorev4": "0.0", "modified": "2026-06-16T23:25:05.000", "vector": "NETWORK", "vectorString": "AV:N/AC:L/Au:N/C:P/I:P/A:P", "detail": "fixed-version: Fixed from version 8.0.552.224" }, { "id": "CVE-2010-4575", "status": "Patched", "link": "https://nvd.nist.gov/vuln/detail/CVE-2010-4575", "summary": "The ThemeInstalledInfoBarDelegate::Observe function in browser/extensions/theme_installed_infobar_delegate.cc in Google Chrome before 8.0.552.224 and Chrome OS before 8.0.552.343 does not properly handle incorrect tab interaction by an extension, which allows user-assisted remote attackers to cause a denial of service (application crash) via a crafted extension.", "scorev2": "4.3", "scorev3": "0.0", "scorev4": "0.0", "modified": "2026-06-16T23:25:05.000", "vector": "NETWORK", "vectorString": "AV:N/AC:M/Au:N/C:N/I:N/A:P", "detail": "fixed-version: Fixed from version 8.0.552.224" }, { "id": "CVE-2010-4576", "status": "Patched", "link": "https://nvd.nist.gov/vuln/detail/CVE-2010-4576", "summary": "browser/worker_host/message_port_dispatcher.cc in Google Chrome before 8.0.552.224 and Chrome OS before 8.0.552.343 does not properly handle certain postMessage calls, which allows remote attackers to cause a denial of service (NULL pointer dereference and application crash) via crafted JavaScript code that creates a web worker.", "scorev2": "5.0", "scorev3": "0.0", "scorev4": "0.0", "modified": "2026-06-16T23:25:06.000", "vector": "NETWORK", "vectorString": "AV:N/AC:L/Au:N/C:N/I:N/A:P", "detail": "fixed-version: Fixed from version 8.0.552.224" }, { "id": "CVE-2010-4577", "status": "Patched", "link": "https://nvd.nist.gov/vuln/detail/CVE-2010-4577", "summary": "The CSSParser::parseFontFaceSrc function in WebCore/css/CSSParser.cpp in WebKit, as used in Google Chrome before 8.0.552.224, Chrome OS before 8.0.552.343, webkitgtk before 1.2.6, and other products does not properly parse Cascading Style Sheets (CSS) token sequences, which allows remote attackers to cause a denial of service (out-of-bounds read) via a crafted local font, related to \"Type Confusion.\"", "scorev2": "5.0", "scorev3": "7.5", "scorev4": "0.0", "modified": "2026-06-16T23:25:06.000", "vector": "NETWORK", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H", "detail": "fixed-version: Fixed from version 8.0.552.224" }, { "id": "CVE-2010-4578", "status": "Patched", "link": "https://nvd.nist.gov/vuln/detail/CVE-2010-4578", "summary": "Google Chrome before 8.0.552.224 and Chrome OS before 8.0.552.343 do not properly perform cursor handling, which allows remote attackers to cause a denial of service or possibly have unspecified other impact via unknown vectors that lead to \"stale pointers.\"", "scorev2": "7.5", "scorev3": "0.0", "scorev4": "0.0", "modified": "2026-06-16T23:25:06.000", "vector": "NETWORK", "vectorString": "AV:N/AC:L/Au:N/C:P/I:P/A:P", "detail": "fixed-version: Fixed from version 8.0.552.224" }, { "id": "CVE-2010-5069", "status": "Patched", "link": "https://nvd.nist.gov/vuln/detail/CVE-2010-5069", "summary": "The Cascading Style Sheets (CSS) implementation in Google Chrome 4 does not properly handle the :visited pseudo-class, which allows remote attackers to obtain sensitive information about visited web pages via a crafted HTML document. NOTE: this may overlap CVE-2010-2264.", "scorev2": "4.3", "scorev3": "0.0", "scorev4": "0.0", "modified": "2026-06-16T23:26:04.000", "vector": "NETWORK", "vectorString": "AV:N/AC:M/Au:N/C:P/I:N/A:N", "detail": "version-not-in-range" }, { "id": "CVE-2010-5073", "status": "Patched", "link": "https://nvd.nist.gov/vuln/detail/CVE-2010-5073", "summary": "The JavaScript implementation in Google Chrome 4 does not properly restrict the set of values contained in the object returned by the getComputedStyle method, which allows remote attackers to obtain sensitive information about visited web pages by calling this method. NOTE: this may overlap CVE-2010-5070.", "scorev2": "5.0", "scorev3": "0.0", "scorev4": "0.0", "modified": "2026-06-16T23:26:05.000", "vector": "NETWORK", "vectorString": "AV:N/AC:L/Au:N/C:P/I:N/A:N", "detail": "version-not-in-range" }, { "id": "CVE-2011-0470", "status": "Patched", "link": "https://nvd.nist.gov/vuln/detail/CVE-2011-0470", "summary": "Google Chrome before 8.0.552.237 and Chrome OS before 8.0.552.344 do not properly handle extensions notification, which allows remote attackers to cause a denial of service (application crash) via unspecified vectors.", "scorev2": "5.0", "scorev3": "0.0", "scorev4": "0.0", "modified": "2026-06-16T23:27:27.000", "vector": "NETWORK", "vectorString": "AV:N/AC:L/Au:N/C:N/I:N/A:P", "detail": "fixed-version: Fixed from version 8.0.552.237" }, { "id": "CVE-2011-0471", "status": "Patched", "link": "https://nvd.nist.gov/vuln/detail/CVE-2011-0471", "summary": "The node-iteration implementation in Google Chrome before 8.0.552.237 and Chrome OS before 8.0.552.344 does not properly handle pointers, which allows remote attackers to cause a denial of service or possibly have unspecified other impact via unknown vectors.", "scorev2": "10.0", "scorev3": "0.0", "scorev4": "0.0", "modified": "2026-06-16T23:27:27.000", "vector": "NETWORK", "vectorString": "AV:N/AC:L/Au:N/C:C/I:C/A:C", "detail": "fixed-version: Fixed from version 8.0.552.237" }, { "id": "CVE-2011-0472", "status": "Patched", "link": "https://nvd.nist.gov/vuln/detail/CVE-2011-0472", "summary": "Google Chrome before 8.0.552.237 and Chrome OS before 8.0.552.344 do not properly handle the printing of PDF documents, which allows user-assisted remote attackers to cause a denial of service (application crash) or possibly have unspecified other impact via a multi-page document.", "scorev2": "9.3", "scorev3": "0.0", "scorev4": "0.0", "modified": "2026-06-16T23:27:27.000", "vector": "NETWORK", "vectorString": "AV:N/AC:M/Au:N/C:C/I:C/A:C", "detail": "fixed-version: Fixed from version 8.0.552.237" }, { "id": "CVE-2011-0473", "status": "Patched", "link": "https://nvd.nist.gov/vuln/detail/CVE-2011-0473", "summary": "Google Chrome before 8.0.552.237 and Chrome OS before 8.0.552.344 do not properly handle Cascading Style Sheets (CSS) token sequences in conjunction with CANVAS elements, which allows remote attackers to cause a denial of service or possibly have unspecified other impact via unknown vectors that lead to a \"stale pointer.\"", "scorev2": "10.0", "scorev3": "0.0", "scorev4": "0.0", "modified": "2026-06-16T23:27:27.000", "vector": "NETWORK", "vectorString": "AV:N/AC:L/Au:N/C:C/I:C/A:C", "detail": "fixed-version: Fixed from version 8.0.552.237" }, { "id": "CVE-2011-0474", "status": "Patched", "link": "https://nvd.nist.gov/vuln/detail/CVE-2011-0474", "summary": "Google Chrome before 8.0.552.237 and Chrome OS before 8.0.552.344 do not properly handle Cascading Style Sheets (CSS) token sequences in conjunction with cursors, which allows remote attackers to cause a denial of service or possibly have unspecified other impact via unknown vectors that lead to a \"stale pointer.\"", "scorev2": "10.0", "scorev3": "0.0", "scorev4": "0.0", "modified": "2026-06-16T23:27:27.000", "vector": "NETWORK", "vectorString": "AV:N/AC:L/Au:N/C:C/I:C/A:C", "detail": "fixed-version: Fixed from version 8.0.552.237" }, { "id": "CVE-2011-0475", "status": "Patched", "link": "https://nvd.nist.gov/vuln/detail/CVE-2011-0475", "summary": "Use-after-free vulnerability in Google Chrome before 8.0.552.237 and Chrome OS before 8.0.552.344 allows remote attackers to cause a denial of service or possibly have unspecified other impact via a PDF document.", "scorev2": "9.3", "scorev3": "0.0", "scorev4": "0.0", "modified": "2026-06-16T23:27:27.000", "vector": "NETWORK", "vectorString": "AV:N/AC:M/Au:N/C:C/I:C/A:C", "detail": "fixed-version: Fixed from version 8.0.552.237" }, { "id": "CVE-2011-0476", "status": "Patched", "link": "https://nvd.nist.gov/vuln/detail/CVE-2011-0476", "summary": "Google Chrome before 8.0.552.237 and Chrome OS before 8.0.552.344 allow remote attackers to cause a denial of service (stack memory corruption) or possibly have unspecified other impact via a PDF document that triggers an out-of-memory error.", "scorev2": "10.0", "scorev3": "0.0", "scorev4": "0.0", "modified": "2026-06-16T23:27:27.000", "vector": "NETWORK", "vectorString": "AV:N/AC:L/Au:N/C:C/I:C/A:C", "detail": "fixed-version: Fixed from version 8.0.552.237" }, { "id": "CVE-2011-0477", "status": "Patched", "link": "https://nvd.nist.gov/vuln/detail/CVE-2011-0477", "summary": "Google Chrome before 8.0.552.237 and Chrome OS before 8.0.552.344 do not properly handle a mismatch in video frame sizes, which allows remote attackers to cause a denial of service (incorrect memory access) or possibly have unspecified other impact via unknown vectors.", "scorev2": "10.0", "scorev3": "0.0", "scorev4": "0.0", "modified": "2026-06-16T23:27:27.000", "vector": "NETWORK", "vectorString": "AV:N/AC:L/Au:N/C:C/I:C/A:C", "detail": "fixed-version: Fixed from version 8.0.552.237" }, { "id": "CVE-2011-0478", "status": "Patched", "link": "https://nvd.nist.gov/vuln/detail/CVE-2011-0478", "summary": "Google Chrome before 8.0.552.237 and Chrome OS before 8.0.552.344 do not properly handle SVG use elements, which allows remote attackers to cause a denial of service or possibly have unspecified other impact via unknown vectors that lead to a \"stale pointer.\"", "scorev2": "10.0", "scorev3": "0.0", "scorev4": "0.0", "modified": "2026-06-16T23:27:28.000", "vector": "NETWORK", "vectorString": "AV:N/AC:L/Au:N/C:C/I:C/A:C", "detail": "fixed-version: Fixed from version 8.0.552.237" }, { "id": "CVE-2011-0479", "status": "Patched", "link": "https://nvd.nist.gov/vuln/detail/CVE-2011-0479", "summary": "Google Chrome before 8.0.552.237 and Chrome OS before 8.0.552.344 do not properly interact with extensions, which allows remote attackers to cause a denial of service via a crafted extension that triggers an uninitialized pointer.", "scorev2": "7.5", "scorev3": "0.0", "scorev4": "0.0", "modified": "2026-06-16T23:27:28.000", "vector": "NETWORK", "vectorString": "AV:N/AC:L/Au:N/C:P/I:P/A:P", "detail": "fixed-version: Fixed from version 8.0.552.237" }, { "id": "CVE-2011-0480", "status": "Patched", "link": "https://nvd.nist.gov/vuln/detail/CVE-2011-0480", "summary": "Multiple buffer overflows in vorbis_dec.c in the Vorbis decoder in FFmpeg, as used in Google Chrome before 8.0.552.237 and Chrome OS before 8.0.552.344, allow remote attackers to cause a denial of service (memory corruption and application crash) or possibly have unspecified other impact via a crafted WebM file, related to buffers for (1) the channel floor and (2) the channel residue.", "scorev2": "9.3", "scorev3": "0.0", "scorev4": "0.0", "modified": "2026-06-16T23:27:28.000", "vector": "NETWORK", "vectorString": "AV:N/AC:M/Au:N/C:C/I:C/A:C", "detail": "fixed-version: Fixed from version 8.0.552.237" }, { "id": "CVE-2011-0481", "status": "Patched", "link": "https://nvd.nist.gov/vuln/detail/CVE-2011-0481", "summary": "Buffer overflow in Google Chrome before 8.0.552.237 and Chrome OS before 8.0.552.344 allows remote attackers to cause a denial of service or possibly have unspecified other impact via vectors related to PDF shading.", "scorev2": "9.3", "scorev3": "0.0", "scorev4": "0.0", "modified": "2026-06-16T23:27:28.000", "vector": "NETWORK", "vectorString": "AV:N/AC:M/Au:N/C:C/I:C/A:C", "detail": "fixed-version: Fixed from version 8.0.552.237" }, { "id": "CVE-2011-0482", "status": "Patched", "link": "https://nvd.nist.gov/vuln/detail/CVE-2011-0482", "summary": "Google Chrome before 8.0.552.237 and Chrome OS before 8.0.552.344 do not properly perform a cast of an unspecified variable during handling of anchors, which allows remote attackers to cause a denial of service or possibly have unspecified other impact via a crafted HTML document.", "scorev2": "4.3", "scorev3": "0.0", "scorev4": "0.0", "modified": "2026-06-16T23:27:28.000", "vector": "NETWORK", "vectorString": "AV:N/AC:M/Au:N/C:N/I:N/A:P", "detail": "fixed-version: Fixed from version 8.0.552.237" }, { "id": "CVE-2011-0483", "status": "Patched", "link": "https://nvd.nist.gov/vuln/detail/CVE-2011-0483", "summary": "Google Chrome before 8.0.552.237 and Chrome OS before 8.0.552.344 do not properly perform a cast of an unspecified variable during handling of video, which allows remote attackers to cause a denial of service or possibly have unspecified other impact via unknown vectors.", "scorev2": "5.0", "scorev3": "0.0", "scorev4": "0.0", "modified": "2026-06-16T23:27:28.000", "vector": "NETWORK", "vectorString": "AV:N/AC:L/Au:N/C:N/I:N/A:P", "detail": "fixed-version: Fixed from version 8.0.552.237" }, { "id": "CVE-2011-0484", "status": "Patched", "link": "https://nvd.nist.gov/vuln/detail/CVE-2011-0484", "summary": "Google Chrome before 8.0.552.237 and Chrome OS before 8.0.552.344 do not properly perform DOM node removal, which allows remote attackers to cause a denial of service or possibly have unspecified other impact via unknown vectors that lead to a \"stale rendering node.\"", "scorev2": "7.5", "scorev3": "0.0", "scorev4": "0.0", "modified": "2026-06-16T23:27:28.000", "vector": "NETWORK", "vectorString": "AV:N/AC:L/Au:N/C:P/I:P/A:P", "detail": "fixed-version: Fixed from version 8.0.552.237" }, { "id": "CVE-2011-0485", "status": "Patched", "link": "https://nvd.nist.gov/vuln/detail/CVE-2011-0485", "summary": "Google Chrome before 8.0.552.237 and Chrome OS before 8.0.552.344 do not properly handle speech data, which allows remote attackers to execute arbitrary code via unspecified vectors that lead to a \"stale pointer.\"", "scorev2": "10.0", "scorev3": "0.0", "scorev4": "0.0", "modified": "2026-06-16T23:27:29.000", "vector": "NETWORK", "vectorString": "AV:N/AC:L/Au:N/C:C/I:C/A:C", "detail": "fixed-version: Fixed from version 8.0.552.237" }, { "id": "CVE-2011-0609", "status": "Patched", "link": "https://nvd.nist.gov/vuln/detail/CVE-2011-0609", "summary": "Unspecified vulnerability in Adobe Flash Player 10.2.154.13 and earlier on Windows, Mac OS X, Linux, and Solaris; 10.1.106.16 and earlier on Android; Adobe AIR 2.5.1 and earlier; and Authplay.dll (aka AuthPlayLib.bundle) in Adobe Reader and Acrobat 9.x through 9.4.2 and 10.x through 10.0.1 on Windows and Mac OS X, allows remote attackers to execute arbitrary code or cause a denial of service (application crash) via crafted Flash content, as demonstrated by a .swf file embedded in an Excel spreadsheet, and as exploited in the wild in March 2011.", "scorev2": "9.3", "scorev3": "7.8", "scorev4": "0.0", "modified": "2026-06-16T23:27:44.000", "vector": "LOCAL", "vectorString": "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H", "detail": "fixed-version: Fixed from version 10.0.648.134" }, { "id": "CVE-2011-0611", "status": "Patched", "link": "https://nvd.nist.gov/vuln/detail/CVE-2011-0611", "summary": "Adobe Flash Player before 10.2.154.27 on Windows, Mac OS X, Linux, and Solaris and 10.2.156.12 and earlier on Android; Adobe AIR before 2.6.19140; and Authplay.dll (aka AuthPlayLib.bundle) in Adobe Reader 9.x before 9.4.4 and 10.x through 10.0.1 on Windows, Adobe Reader 9.x before 9.4.4 and 10.x before 10.0.3 on Mac OS X, and Adobe Acrobat 9.x before 9.4.4 and 10.x before 10.0.3 on Windows and Mac OS X allow remote attackers to execute arbitrary code or cause a denial of service (application crash) via crafted Flash content; as demonstrated by a Microsoft Office document with an embedded .swf file that has a size inconsistency in a \"group of included constants,\" object type confusion, ActionScript that adds custom functions to prototypes, and Date objects; and as exploited in the wild in April 2011.", "scorev2": "9.3", "scorev3": "8.8", "scorev4": "0.0", "modified": "2026-06-16T23:27:44.000", "vector": "NETWORK", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H", "detail": "fixed-version: Fixed from version 10.0.648.205" }, { "id": "CVE-2011-0776", "status": "Patched", "link": "https://nvd.nist.gov/vuln/detail/CVE-2011-0776", "summary": "The sandbox implementation in Google Chrome before 9.0.597.84 on Mac OS X might allow remote attackers to obtain potentially sensitive information about local files via vectors related to the stat system call.", "scorev2": "5.0", "scorev3": "0.0", "scorev4": "0.0", "modified": "2026-06-16T23:28:02.000", "vector": "NETWORK", "vectorString": "AV:N/AC:L/Au:N/C:P/I:N/A:N", "detail": "fixed-version: Fixed from version 9.0.597.84" }, { "id": "CVE-2011-0777", "status": "Patched", "link": "https://nvd.nist.gov/vuln/detail/CVE-2011-0777", "summary": "Use-after-free vulnerability in Google Chrome before 9.0.597.84 allows remote attackers to cause a denial of service or possibly have unspecified other impact via vectors related to image loading.", "scorev2": "7.5", "scorev3": "0.0", "scorev4": "0.0", "modified": "2026-06-16T23:28:02.000", "vector": "NETWORK", "vectorString": "AV:N/AC:L/Au:N/C:P/I:P/A:P", "detail": "fixed-version: Fixed from version 9.0.597.84" }, { "id": "CVE-2011-0778", "status": "Patched", "link": "https://nvd.nist.gov/vuln/detail/CVE-2011-0778", "summary": "Google Chrome before 9.0.597.84 does not properly restrict drag and drop operations, which might allow remote attackers to bypass the Same Origin Policy via unspecified vectors.", "scorev2": "7.5", "scorev3": "0.0", "scorev4": "0.0", "modified": "2026-06-16T23:28:03.000", "vector": "NETWORK", "vectorString": "AV:N/AC:L/Au:N/C:P/I:P/A:P", "detail": "fixed-version: Fixed from version >9.0.597.83" }, { "id": "CVE-2011-0779", "status": "Patched", "link": "https://nvd.nist.gov/vuln/detail/CVE-2011-0779", "summary": "Google Chrome before 9.0.597.84 does not properly handle a missing key in an extension, which allows remote attackers to cause a denial of service (application crash) via a crafted extension.", "scorev2": "5.0", "scorev3": "0.0", "scorev4": "0.0", "modified": "2026-06-16T23:28:03.000", "vector": "NETWORK", "vectorString": "AV:N/AC:L/Au:N/C:N/I:N/A:P", "detail": "fixed-version: Fixed from version 9.0.597.84" }, { "id": "CVE-2011-0780", "status": "Patched", "link": "https://nvd.nist.gov/vuln/detail/CVE-2011-0780", "summary": "The PDF event handler in Google Chrome before 9.0.597.84 does not properly interact with print operations, which allows user-assisted remote attackers to cause a denial of service (application crash) or possibly have unspecified other impact via unknown vectors.", "scorev2": "6.8", "scorev3": "0.0", "scorev4": "0.0", "modified": "2026-06-16T23:28:03.000", "vector": "NETWORK", "vectorString": "AV:N/AC:M/Au:N/C:P/I:P/A:P", "detail": "fixed-version: Fixed from version 9.0.597.84" }, { "id": "CVE-2011-0781", "status": "Patched", "link": "https://nvd.nist.gov/vuln/detail/CVE-2011-0781", "summary": "Google Chrome before 9.0.597.84 does not properly handle autofill profile merging, which has unspecified impact and remote attack vectors.", "scorev2": "7.5", "scorev3": "0.0", "scorev4": "0.0", "modified": "2026-06-16T23:28:03.000", "vector": "NETWORK", "vectorString": "AV:N/AC:L/Au:N/C:P/I:P/A:P", "detail": "fixed-version: Fixed from version 9.0.597.84" }, { "id": "CVE-2011-0782", "status": "Patched", "link": "https://nvd.nist.gov/vuln/detail/CVE-2011-0782", "summary": "Google Chrome before 9.0.597.84 on Mac OS X does not properly mitigate an unspecified flaw in the Mac OS X 10.5 SSL libraries, which allows remote attackers to cause a denial of service (application crash) via unknown vectors.", "scorev2": "5.0", "scorev3": "0.0", "scorev4": "0.0", "modified": "2026-06-16T23:28:03.000", "vector": "NETWORK", "vectorString": "AV:N/AC:L/Au:N/C:N/I:N/A:P", "detail": "fixed-version: Fixed from version 9.0.597.84" }, { "id": "CVE-2011-0783", "status": "Patched", "link": "https://nvd.nist.gov/vuln/detail/CVE-2011-0783", "summary": "Unspecified vulnerability in Google Chrome before 9.0.597.84 allows user-assisted remote attackers to cause a denial of service (application crash) via vectors involving a \"bad volume setting.\"", "scorev2": "4.3", "scorev3": "0.0", "scorev4": "0.0", "modified": "2026-06-16T23:28:03.000", "vector": "NETWORK", "vectorString": "AV:N/AC:M/Au:N/C:N/I:N/A:P", "detail": "fixed-version: Fixed from version 9.0.597.84" }, { "id": "CVE-2011-0784", "status": "Patched", "link": "https://nvd.nist.gov/vuln/detail/CVE-2011-0784", "summary": "Race condition in Google Chrome before 9.0.597.84 allows remote attackers to execute arbitrary code via vectors related to audio.", "scorev2": "6.8", "scorev3": "0.0", "scorev4": "0.0", "modified": "2026-06-16T23:28:03.000", "vector": "NETWORK", "vectorString": "AV:N/AC:M/Au:N/C:P/I:P/A:P", "detail": "fixed-version: Fixed from version 9.0.597.84" }, { "id": "CVE-2011-0981", "status": "Patched", "link": "https://nvd.nist.gov/vuln/detail/CVE-2011-0981", "summary": "Google Chrome before 9.0.597.94 does not properly perform event handling for animations, which allows remote attackers to cause a denial of service or possibly have unspecified other impact via unknown vectors that lead to a \"stale pointer.\"", "scorev2": "7.5", "scorev3": "0.0", "scorev4": "0.0", "modified": "2026-06-16T23:28:22.000", "vector": "NETWORK", "vectorString": "AV:N/AC:L/Au:N/C:P/I:P/A:P", "detail": "fixed-version: Fixed from version 9.0.597.94" }, { "id": "CVE-2011-0982", "status": "Patched", "link": "https://nvd.nist.gov/vuln/detail/CVE-2011-0982", "summary": "Use-after-free vulnerability in Google Chrome before 9.0.597.94 allows remote attackers to cause a denial of service or possibly have unspecified other impact via vectors involving SVG font faces.", "scorev2": "10.0", "scorev3": "0.0", "scorev4": "0.0", "modified": "2026-06-16T23:28:22.000", "vector": "NETWORK", "vectorString": "AV:N/AC:L/Au:N/C:C/I:C/A:C", "detail": "fixed-version: Fixed from version 9.0.597.94" }, { "id": "CVE-2011-0983", "status": "Patched", "link": "https://nvd.nist.gov/vuln/detail/CVE-2011-0983", "summary": "Google Chrome before 9.0.597.94 does not properly handle anonymous blocks, which allows remote attackers to cause a denial of service or possibly have unspecified other impact via unknown vectors that lead to a \"stale pointer.\"", "scorev2": "7.5", "scorev3": "0.0", "scorev4": "0.0", "modified": "2026-06-16T23:28:22.000", "vector": "NETWORK", "vectorString": "AV:N/AC:L/Au:N/C:P/I:P/A:P", "detail": "fixed-version: Fixed from version 9.0.597.94" }, { "id": "CVE-2011-0984", "status": "Patched", "link": "https://nvd.nist.gov/vuln/detail/CVE-2011-0984", "summary": "Google Chrome before 9.0.597.94 does not properly handle plug-ins, which allows remote attackers to cause a denial of service (out-of-bounds read) via unspecified vectors.", "scorev2": "5.0", "scorev3": "0.0", "scorev4": "0.0", "modified": "2026-06-16T23:28:22.000", "vector": "NETWORK", "vectorString": "AV:N/AC:L/Au:N/C:N/I:N/A:P", "detail": "fixed-version: Fixed from version 9.0.597.94" }, { "id": "CVE-2011-0985", "status": "Patched", "link": "https://nvd.nist.gov/vuln/detail/CVE-2011-0985", "summary": "Google Chrome before 9.0.597.94 does not properly perform process termination upon memory exhaustion, which has unspecified impact and remote attack vectors.", "scorev2": "7.5", "scorev3": "0.0", "scorev4": "0.0", "modified": "2026-06-16T23:28:22.000", "vector": "NETWORK", "vectorString": "AV:N/AC:L/Au:N/C:P/I:P/A:P", "detail": "fixed-version: Fixed from version 9.0.597.94" }, { "id": "CVE-2011-1059", "status": "Patched", "link": "https://nvd.nist.gov/vuln/detail/CVE-2011-1059", "summary": "Use-after-free vulnerability in WebCore in WebKit before r77705, as used in Google Chrome before 11.0.672.2 and other products, allows user-assisted remote attackers to cause a denial of service (application crash) or possibly have unspecified other impact via vectors that entice a user to resubmit a form, related to improper handling of provisional items by the HistoryController component, aka rdar problem 8938557.", "scorev2": "4.3", "scorev3": "0.0", "scorev4": "0.0", "modified": "2026-06-16T23:28:37.000", "vector": "NETWORK", "vectorString": "AV:N/AC:M/Au:N/C:N/I:N/A:P", "detail": "fixed-version: Fixed from version 11.0.672.2" }, { "id": "CVE-2011-1107", "status": "Patched", "link": "https://nvd.nist.gov/vuln/detail/CVE-2011-1107", "summary": "Unspecified vulnerability in Google Chrome before 9.0.597.107 allows remote attackers to spoof the URL bar via unknown vectors.", "scorev2": "4.3", "scorev3": "0.0", "scorev4": "0.0", "modified": "2026-06-16T23:28:43.000", "vector": "NETWORK", "vectorString": "AV:N/AC:M/Au:N/C:N/I:P/A:N", "detail": "fixed-version: Fixed from version 9.0.597.107" }, { "id": "CVE-2011-1108", "status": "Patched", "link": "https://nvd.nist.gov/vuln/detail/CVE-2011-1108", "summary": "Google Chrome before 9.0.597.107 does not properly implement JavaScript dialogs, which allows remote attackers to cause a denial of service (application crash) or possibly have unspecified other impact via a crafted HTML document.", "scorev2": "6.8", "scorev3": "0.0", "scorev4": "0.0", "modified": "2026-06-16T23:28:43.000", "vector": "NETWORK", "vectorString": "AV:N/AC:M/Au:N/C:P/I:P/A:P", "detail": "fixed-version: Fixed from version 9.0.597.107" }, { "id": "CVE-2011-1109", "status": "Patched", "link": "https://nvd.nist.gov/vuln/detail/CVE-2011-1109", "summary": "Google Chrome before 9.0.597.107 does not properly process nodes in Cascading Style Sheets (CSS) stylesheets, which allows remote attackers to cause a denial of service or possibly have unspecified other impact via unknown vectors that lead to a \"stale pointer.\"", "scorev2": "7.5", "scorev3": "0.0", "scorev4": "0.0", "modified": "2026-06-16T23:28:44.000", "vector": "NETWORK", "vectorString": "AV:N/AC:L/Au:N/C:P/I:P/A:P", "detail": "fixed-version: Fixed from version 9.0.597.107" }, { "id": "CVE-2011-1110", "status": "Patched", "link": "https://nvd.nist.gov/vuln/detail/CVE-2011-1110", "summary": "Google Chrome before 9.0.597.107 does not properly implement key frame rules, which allows remote attackers to cause a denial of service or possibly have unspecified other impact via unknown vectors that lead to a \"stale pointer.\"", "scorev2": "7.5", "scorev3": "0.0", "scorev4": "0.0", "modified": "2026-06-16T23:28:44.000", "vector": "NETWORK", "vectorString": "AV:N/AC:L/Au:N/C:P/I:P/A:P", "detail": "fixed-version: Fixed from version 9.0.597.107" }, { "id": "CVE-2011-1111", "status": "Patched", "link": "https://nvd.nist.gov/vuln/detail/CVE-2011-1111", "summary": "Google Chrome before 9.0.597.107 does not properly implement forms controls, which allows remote attackers to cause a denial of service (application crash) or possibly have unspecified other impact via unknown vectors.", "scorev2": "7.5", "scorev3": "0.0", "scorev4": "0.0", "modified": "2026-06-16T23:28:44.000", "vector": "NETWORK", "vectorString": "AV:N/AC:L/Au:N/C:P/I:P/A:P", "detail": "fixed-version: Fixed from version 9.0.597.107" }, { "id": "CVE-2011-1112", "status": "Patched", "link": "https://nvd.nist.gov/vuln/detail/CVE-2011-1112", "summary": "Google Chrome before 9.0.597.107 does not properly perform SVG rendering, which allows remote attackers to cause a denial of service (application crash) or possibly have unspecified other impact via unknown vectors.", "scorev2": "7.5", "scorev3": "0.0", "scorev4": "0.0", "modified": "2026-06-16T23:28:44.000", "vector": "NETWORK", "vectorString": "AV:N/AC:L/Au:N/C:P/I:P/A:P", "detail": "fixed-version: Fixed from version 9.0.597.107" }, { "id": "CVE-2011-1113", "status": "Patched", "link": "https://nvd.nist.gov/vuln/detail/CVE-2011-1113", "summary": "Google Chrome before 9.0.597.107 on 64-bit Linux platforms does not properly perform pickle deserialization, which allows remote attackers to cause a denial of service (out-of-bounds read) via unspecified vectors.", "scorev2": "5.0", "scorev3": "0.0", "scorev4": "0.0", "modified": "2026-06-16T23:28:44.000", "vector": "NETWORK", "vectorString": "AV:N/AC:L/Au:N/C:N/I:N/A:P", "detail": "fixed-version: Fixed from version 9.0.597.107" }, { "id": "CVE-2011-1114", "status": "Patched", "link": "https://nvd.nist.gov/vuln/detail/CVE-2011-1114", "summary": "Google Chrome before 9.0.597.107 does not properly handle tables, which allows remote attackers to cause a denial of service or possibly have unspecified other impact via unknown vectors that lead to a \"stale node.\"", "scorev2": "7.5", "scorev3": "0.0", "scorev4": "0.0", "modified": "2026-06-16T23:28:44.000", "vector": "NETWORK", "vectorString": "AV:N/AC:L/Au:N/C:P/I:P/A:P", "detail": "fixed-version: Fixed from version 9.0.597.107" }, { "id": "CVE-2011-1115", "status": "Patched", "link": "https://nvd.nist.gov/vuln/detail/CVE-2011-1115", "summary": "Google Chrome before 9.0.597.107 does not properly render tables, which allows remote attackers to cause a denial of service or possibly have unspecified other impact via unknown vectors that lead to a \"stale pointer.\"", "scorev2": "7.5", "scorev3": "0.0", "scorev4": "0.0", "modified": "2026-06-16T23:28:44.000", "vector": "NETWORK", "vectorString": "AV:N/AC:L/Au:N/C:P/I:P/A:P", "detail": "fixed-version: Fixed from version 9.0.597.107" }, { "id": "CVE-2011-1116", "status": "Patched", "link": "https://nvd.nist.gov/vuln/detail/CVE-2011-1116", "summary": "Google Chrome before 9.0.597.107 does not properly handle SVG animations, which allows remote attackers to cause a denial of service or possibly have unspecified other impact via unknown vectors that lead to a \"stale pointer.\"", "scorev2": "7.5", "scorev3": "0.0", "scorev4": "0.0", "modified": "2026-06-16T23:28:44.000", "vector": "NETWORK", "vectorString": "AV:N/AC:L/Au:N/C:P/I:P/A:P", "detail": "fixed-version: Fixed from version 9.0.597.107" }, { "id": "CVE-2011-1117", "status": "Patched", "link": "https://nvd.nist.gov/vuln/detail/CVE-2011-1117", "summary": "Google Chrome before 9.0.597.107 does not properly handle XHTML documents, which allows remote attackers to cause a denial of service or possibly have unspecified other impact via unknown vectors that lead to \"stale nodes.\"", "scorev2": "7.5", "scorev3": "0.0", "scorev4": "0.0", "modified": "2026-06-16T23:28:45.000", "vector": "NETWORK", "vectorString": "AV:N/AC:L/Au:N/C:P/I:P/A:P", "detail": "fixed-version: Fixed from version 9.0.597.107" }, { "id": "CVE-2011-1118", "status": "Patched", "link": "https://nvd.nist.gov/vuln/detail/CVE-2011-1118", "summary": "Google Chrome before 9.0.597.107 does not properly handle TEXTAREA elements, which allows remote attackers to cause a denial of service (application crash) or possibly have unspecified other impact via a crafted HTML document.", "scorev2": "6.8", "scorev3": "0.0", "scorev4": "0.0", "modified": "2026-06-16T23:28:45.000", "vector": "NETWORK", "vectorString": "AV:N/AC:M/Au:N/C:P/I:P/A:P", "detail": "fixed-version: Fixed from version 9.0.597.107" }, { "id": "CVE-2011-1119", "status": "Patched", "link": "https://nvd.nist.gov/vuln/detail/CVE-2011-1119", "summary": "Google Chrome before 9.0.597.107 does not properly determine device orientation, which allows remote attackers to cause a denial of service or possibly have unspecified other impact via unknown vectors that lead to a \"stale pointer.\"", "scorev2": "7.5", "scorev3": "0.0", "scorev4": "0.0", "modified": "2026-06-16T23:28:45.000", "vector": "NETWORK", "vectorString": "AV:N/AC:L/Au:N/C:P/I:P/A:P", "detail": "fixed-version: Fixed from version 9.0.597.107" }, { "id": "CVE-2011-1120", "status": "Patched", "link": "https://nvd.nist.gov/vuln/detail/CVE-2011-1120", "summary": "The WebGL implementation in Google Chrome before 9.0.597.107 allows remote attackers to cause a denial of service (out-of-bounds read) via unspecified vectors, aka Issue 71717.", "scorev2": "5.0", "scorev3": "0.0", "scorev4": "0.0", "modified": "2026-06-16T23:28:45.000", "vector": "NETWORK", "vectorString": "AV:N/AC:L/Au:N/C:N/I:N/A:P", "detail": "fixed-version: Fixed from version 9.0.597.107" }, { "id": "CVE-2011-1121", "status": "Patched", "link": "https://nvd.nist.gov/vuln/detail/CVE-2011-1121", "summary": "Integer overflow in Google Chrome before 9.0.597.107 allows remote attackers to cause a denial of service or possibly have unspecified other impact via vectors involving a TEXTAREA element.", "scorev2": "7.5", "scorev3": "0.0", "scorev4": "0.0", "modified": "2026-06-16T23:28:45.000", "vector": "NETWORK", "vectorString": "AV:N/AC:L/Au:N/C:P/I:P/A:P", "detail": "fixed-version: Fixed from version 9.0.597.107" }, { "id": "CVE-2011-1122", "status": "Patched", "link": "https://nvd.nist.gov/vuln/detail/CVE-2011-1122", "summary": "The WebGL implementation in Google Chrome before 9.0.597.107 allows remote attackers to cause a denial of service (out-of-bounds read) via unspecified vectors, aka Issue 71960.", "scorev2": "5.0", "scorev3": "0.0", "scorev4": "0.0", "modified": "2026-06-16T23:28:45.000", "vector": "NETWORK", "vectorString": "AV:N/AC:L/Au:N/C:N/I:N/A:P", "detail": "fixed-version: Fixed from version 9.0.597.107" }, { "id": "CVE-2011-1123", "status": "Patched", "link": "https://nvd.nist.gov/vuln/detail/CVE-2011-1123", "summary": "Google Chrome before 9.0.597.107 does not properly restrict access to internal extension functions, which has unspecified impact and remote attack vectors.", "scorev2": "7.5", "scorev3": "0.0", "scorev4": "0.0", "modified": "2026-06-16T23:28:45.000", "vector": "NETWORK", "vectorString": "AV:N/AC:L/Au:N/C:P/I:P/A:P", "detail": "fixed-version: Fixed from version 9.0.597.107" }, { "id": "CVE-2011-1124", "status": "Patched", "link": "https://nvd.nist.gov/vuln/detail/CVE-2011-1124", "summary": "Use-after-free vulnerability in Google Chrome before 9.0.597.107 allows remote attackers to cause a denial of service or possibly have unspecified other impact via vectors related to blocked plug-ins.", "scorev2": "7.5", "scorev3": "0.0", "scorev4": "0.0", "modified": "2026-06-16T23:28:45.000", "vector": "NETWORK", "vectorString": "AV:N/AC:L/Au:N/C:P/I:P/A:P", "detail": "fixed-version: Fixed from version 9.0.597.107" }, { "id": "CVE-2011-1125", "status": "Patched", "link": "https://nvd.nist.gov/vuln/detail/CVE-2011-1125", "summary": "Google Chrome before 9.0.597.107 does not properly perform layout, which allows remote attackers to cause a denial of service or possibly have unspecified other impact via unknown vectors that lead to a \"stale pointer.\"", "scorev2": "7.5", "scorev3": "0.0", "scorev4": "0.0", "modified": "2026-06-16T23:28:45.000", "vector": "NETWORK", "vectorString": "AV:N/AC:L/Au:N/C:P/I:P/A:P", "detail": "fixed-version: Fixed from version 9.0.597.107" }, { "id": "CVE-2011-1185", "status": "Patched", "link": "https://nvd.nist.gov/vuln/detail/CVE-2011-1185", "summary": "Google Chrome before 10.0.648.127 does not prevent (1) navigation and (2) close operations on the top location of a sandboxed frame, which has unspecified impact and remote attack vectors.", "scorev2": "7.5", "scorev3": "0.0", "scorev4": "0.0", "modified": "2026-06-16T23:28:53.000", "vector": "NETWORK", "vectorString": "AV:N/AC:L/Au:N/C:P/I:P/A:P", "detail": "fixed-version: Fixed from version 10.0.648.127" }, { "id": "CVE-2011-1186", "status": "Patched", "link": "https://nvd.nist.gov/vuln/detail/CVE-2011-1186", "summary": "Google Chrome before 10.0.648.127 on Linux does not properly handle parallel execution of calls to the print method, which might allow remote attackers to cause a denial of service (application crash) via crafted JavaScript code.", "scorev2": "5.0", "scorev3": "0.0", "scorev4": "0.0", "modified": "2026-06-16T23:28:53.000", "vector": "NETWORK", "vectorString": "AV:N/AC:L/Au:N/C:N/I:N/A:P", "detail": "fixed-version: Fixed from version 10.0.648.127" }, { "id": "CVE-2011-1187", "status": "Patched", "link": "https://nvd.nist.gov/vuln/detail/CVE-2011-1187", "summary": "Google Chrome before 10.0.648.127 allows remote attackers to bypass the Same Origin Policy via unspecified vectors, related to an \"error message leak.\"", "scorev2": "5.0", "scorev3": "0.0", "scorev4": "0.0", "modified": "2026-06-16T23:28:53.000", "vector": "NETWORK", "vectorString": "AV:N/AC:L/Au:N/C:P/I:N/A:N", "detail": "fixed-version: Fixed from version 10.0.648.127" }, { "id": "CVE-2011-1188", "status": "Patched", "link": "https://nvd.nist.gov/vuln/detail/CVE-2011-1188", "summary": "Google Chrome before 10.0.648.127 does not properly handle counter nodes, which allows remote attackers to cause a denial of service (memory corruption) or possibly have unspecified other impact via unknown vectors.", "scorev2": "7.5", "scorev3": "0.0", "scorev4": "0.0", "modified": "2026-06-16T23:28:53.000", "vector": "NETWORK", "vectorString": "AV:N/AC:L/Au:N/C:P/I:P/A:P", "detail": "fixed-version: Fixed from version 10.0.648.127" }, { "id": "CVE-2011-1189", "status": "Patched", "link": "https://nvd.nist.gov/vuln/detail/CVE-2011-1189", "summary": "Google Chrome before 10.0.648.127 does not properly perform box layout, which allows remote attackers to cause a denial of service or possibly have unspecified other impact via unknown vectors that lead to a \"stale node.\"", "scorev2": "7.5", "scorev3": "0.0", "scorev4": "0.0", "modified": "2026-06-16T23:28:54.000", "vector": "NETWORK", "vectorString": "AV:N/AC:L/Au:N/C:P/I:P/A:P", "detail": "fixed-version: Fixed from version 10.0.648.127" }, { "id": "CVE-2011-1190", "status": "Patched", "link": "https://nvd.nist.gov/vuln/detail/CVE-2011-1190", "summary": "The Web Workers implementation in Google Chrome before 10.0.648.127 allows remote attackers to bypass the Same Origin Policy via unspecified vectors, related to an \"error message leak.\"", "scorev2": "5.0", "scorev3": "0.0", "scorev4": "0.0", "modified": "2026-06-16T23:28:54.000", "vector": "NETWORK", "vectorString": "AV:N/AC:L/Au:N/C:P/I:N/A:N", "detail": "fixed-version: Fixed from version 10.0.648.127" }, { "id": "CVE-2011-1191", "status": "Patched", "link": "https://nvd.nist.gov/vuln/detail/CVE-2011-1191", "summary": "Use-after-free vulnerability in Google Chrome before 10.0.648.127 allows remote attackers to cause a denial of service or possibly have unspecified other impact via vectors related to the handling of DOM URLs.", "scorev2": "7.5", "scorev3": "0.0", "scorev4": "0.0", "modified": "2026-06-16T23:28:54.000", "vector": "NETWORK", "vectorString": "AV:N/AC:L/Au:N/C:P/I:P/A:P", "detail": "fixed-version: Fixed from version 10.0.648.127" }, { "id": "CVE-2011-1192", "status": "Patched", "link": "https://nvd.nist.gov/vuln/detail/CVE-2011-1192", "summary": "Google Chrome before 10.0.648.127 on Linux does not properly handle Unicode ranges, which allows remote attackers to cause a denial of service (out-of-bounds read) via unspecified vectors.", "scorev2": "5.0", "scorev3": "0.0", "scorev4": "0.0", "modified": "2026-06-16T23:28:54.000", "vector": "NETWORK", "vectorString": "AV:N/AC:L/Au:N/C:N/I:N/A:P", "detail": "fixed-version: Fixed from version 10.0.648.127" }, { "id": "CVE-2011-1193", "status": "Patched", "link": "https://nvd.nist.gov/vuln/detail/CVE-2011-1193", "summary": "Google V8, as used in Google Chrome before 10.0.648.127, allows remote attackers to bypass the Same Origin Policy via unspecified vectors.", "scorev2": "7.5", "scorev3": "0.0", "scorev4": "0.0", "modified": "2026-06-16T23:28:54.000", "vector": "NETWORK", "vectorString": "AV:N/AC:L/Au:N/C:P/I:P/A:P", "detail": "fixed-version: Fixed from version 10.0.648.127" }, { "id": "CVE-2011-1194", "status": "Patched", "link": "https://nvd.nist.gov/vuln/detail/CVE-2011-1194", "summary": "Multiple unspecified vulnerabilities in Google Chrome before 10.0.648.127 allow remote attackers to bypass the pop-up blocker via unknown vectors.", "scorev2": "5.0", "scorev3": "0.0", "scorev4": "0.0", "modified": "2026-06-16T23:28:54.000", "vector": "NETWORK", "vectorString": "AV:N/AC:L/Au:N/C:N/I:P/A:N", "detail": "fixed-version: Fixed from version 10.0.648.127" }, { "id": "CVE-2011-1195", "status": "Patched", "link": "https://nvd.nist.gov/vuln/detail/CVE-2011-1195", "summary": "Use-after-free vulnerability in Google Chrome before 10.0.648.127 allows remote attackers to cause a denial of service or possibly have unspecified other impact via vectors related to \"document script lifetime handling.\"", "scorev2": "7.5", "scorev3": "0.0", "scorev4": "0.0", "modified": "2026-06-16T23:28:54.000", "vector": "NETWORK", "vectorString": "AV:N/AC:L/Au:N/C:P/I:P/A:P", "detail": "fixed-version: Fixed from version 10.0.648.127" }, { "id": "CVE-2011-1196", "status": "Patched", "link": "https://nvd.nist.gov/vuln/detail/CVE-2011-1196", "summary": "The OGG container implementation in Google Chrome before 10.0.648.127 allows remote attackers to cause a denial of service or possibly have unspecified other impact via unknown vectors that trigger an out-of-bounds write.", "scorev2": "7.5", "scorev3": "0.0", "scorev4": "0.0", "modified": "2026-06-16T23:28:54.000", "vector": "NETWORK", "vectorString": "AV:N/AC:L/Au:N/C:P/I:P/A:P", "detail": "fixed-version: Fixed from version 10.0.648.127" }, { "id": "CVE-2011-1197", "status": "Patched", "link": "https://nvd.nist.gov/vuln/detail/CVE-2011-1197", "summary": "Google Chrome before 10.0.648.127 does not properly perform table painting, which allows remote attackers to cause a denial of service or possibly have unspecified other impact via unknown vectors that lead to a \"stale pointer.\"", "scorev2": "7.5", "scorev3": "0.0", "scorev4": "0.0", "modified": "2026-06-16T23:28:55.000", "vector": "NETWORK", "vectorString": "AV:N/AC:L/Au:N/C:P/I:P/A:P", "detail": "fixed-version: Fixed from version 10.0.648.127" }, { "id": "CVE-2011-1198", "status": "Patched", "link": "https://nvd.nist.gov/vuln/detail/CVE-2011-1198", "summary": "The video functionality in Google Chrome before 10.0.648.127 allows remote attackers to cause a denial of service or possibly have unspecified other impact via unknown vectors that trigger use of a malformed \"out-of-bounds structure.\"", "scorev2": "7.5", "scorev3": "0.0", "scorev4": "0.0", "modified": "2026-06-16T23:28:55.000", "vector": "NETWORK", "vectorString": "AV:N/AC:L/Au:N/C:P/I:P/A:P", "detail": "fixed-version: Fixed from version 10.0.648.127" }, { "id": "CVE-2011-1199", "status": "Patched", "link": "https://nvd.nist.gov/vuln/detail/CVE-2011-1199", "summary": "Google Chrome before 10.0.648.127 does not properly handle DataView objects, which allows remote attackers to cause a denial of service (application crash) or possibly have unspecified other impact via unknown vectors.", "scorev2": "7.5", "scorev3": "0.0", "scorev4": "0.0", "modified": "2026-06-16T23:28:55.000", "vector": "NETWORK", "vectorString": "AV:N/AC:L/Au:N/C:P/I:P/A:P", "detail": "fixed-version: Fixed from version 10.0.648.127" }, { "id": "CVE-2011-1200", "status": "Patched", "link": "https://nvd.nist.gov/vuln/detail/CVE-2011-1200", "summary": "Google Chrome before 10.0.648.127 does not properly perform a cast of an unspecified variable during text rendering, which allows remote attackers to cause a denial of service or possibly have unknown other impact via a crafted document.", "scorev2": "6.8", "scorev3": "0.0", "scorev4": "0.0", "modified": "2026-06-16T23:28:55.000", "vector": "NETWORK", "vectorString": "AV:N/AC:M/Au:N/C:P/I:P/A:P", "detail": "fixed-version: Fixed from version 10.0.648.127" }, { "id": "CVE-2011-1201", "status": "Patched", "link": "https://nvd.nist.gov/vuln/detail/CVE-2011-1201", "summary": "The context implementation in WebKit, as used in Google Chrome before 10.0.648.127, allows remote attackers to cause a denial of service or possibly have unspecified other impact via unknown vectors that lead to a \"stale pointer.\"", "scorev2": "7.5", "scorev3": "0.0", "scorev4": "0.0", "modified": "2026-06-16T23:28:55.000", "vector": "NETWORK", "vectorString": "AV:N/AC:L/Au:N/C:P/I:P/A:P", "detail": "fixed-version: Fixed from version 10.0.648.127" }, { "id": "CVE-2011-1202", "status": "Patched", "link": "https://nvd.nist.gov/vuln/detail/CVE-2011-1202", "summary": "The xsltGenerateIdFunction function in functions.c in libxslt 1.1.26 and earlier, as used in Google Chrome before 10.0.648.127 and other products, allows remote attackers to obtain potentially sensitive information about heap memory addresses via an XML document containing a call to the XSLT generate-id XPath function.", "scorev2": "4.3", "scorev3": "0.0", "scorev4": "0.0", "modified": "2026-06-16T23:28:55.000", "vector": "NETWORK", "vectorString": "AV:N/AC:M/Au:N/C:P/I:N/A:N", "detail": "fixed-version: Fixed from version 10.0.648.127" }, { "id": "CVE-2011-1203", "status": "Patched", "link": "https://nvd.nist.gov/vuln/detail/CVE-2011-1203", "summary": "Google Chrome before 10.0.648.127 does not properly handle SVG cursors, which allows remote attackers to cause a denial of service or possibly have unspecified other impact via unknown vectors that lead to a \"stale pointer.\"", "scorev2": "7.5", "scorev3": "0.0", "scorev4": "0.0", "modified": "2026-06-16T23:28:55.000", "vector": "NETWORK", "vectorString": "AV:N/AC:L/Au:N/C:P/I:P/A:P", "detail": "fixed-version: Fixed from version 10.0.648.127" }, { "id": "CVE-2011-1204", "status": "Patched", "link": "https://nvd.nist.gov/vuln/detail/CVE-2011-1204", "summary": "Google Chrome before 10.0.648.127 does not properly handle attributes, which allows remote attackers to cause a denial of service (DOM tree corruption) or possibly have unspecified other impact via a crafted document.", "scorev2": "6.8", "scorev3": "0.0", "scorev4": "0.0", "modified": "2026-06-16T23:28:55.000", "vector": "NETWORK", "vectorString": "AV:N/AC:M/Au:N/C:P/I:P/A:P", "detail": "fixed-version: Fixed from version 10.0.648.127" }, { "id": "CVE-2011-1285", "status": "Patched", "link": "https://nvd.nist.gov/vuln/detail/CVE-2011-1285", "summary": "The regular-expression functionality in Google Chrome before 10.0.648.127 does not properly implement reentrancy, which allows remote attackers to cause a denial of service (memory corruption) or possibly have unspecified other impact via unknown vectors.", "scorev2": "7.5", "scorev3": "0.0", "scorev4": "0.0", "modified": "2026-06-16T23:29:05.000", "vector": "NETWORK", "vectorString": "AV:N/AC:L/Au:N/C:P/I:P/A:P", "detail": "fixed-version: Fixed from version 10.0.648.127" }, { "id": "CVE-2011-1286", "status": "Patched", "link": "https://nvd.nist.gov/vuln/detail/CVE-2011-1286", "summary": "Google V8, as used in Google Chrome before 10.0.648.127, allows remote attackers to cause a denial of service or possibly have unspecified other impact via unknown vectors that trigger incorrect access to memory.", "scorev2": "7.5", "scorev3": "0.0", "scorev4": "0.0", "modified": "2026-06-16T23:29:05.000", "vector": "NETWORK", "vectorString": "AV:N/AC:L/Au:N/C:P/I:P/A:P", "detail": "fixed-version: Fixed from version 10.0.648.127" }, { "id": "CVE-2011-1291", "status": "Patched", "link": "https://nvd.nist.gov/vuln/detail/CVE-2011-1291", "summary": "Google Chrome before 10.0.648.204 does not properly handle base strings, which allows remote attackers to cause a denial of service or possibly have unspecified other impact via unknown vectors, related to a \"buffer error.\"", "scorev2": "7.5", "scorev3": "0.0", "scorev4": "0.0", "modified": "2026-06-16T23:29:05.000", "vector": "NETWORK", "vectorString": "AV:N/AC:L/Au:N/C:P/I:P/A:P", "detail": "fixed-version: Fixed from version 10.0.648.204" }, { "id": "CVE-2011-1292", "status": "Patched", "link": "https://nvd.nist.gov/vuln/detail/CVE-2011-1292", "summary": "Use-after-free vulnerability in the frame-loader implementation in Google Chrome before 10.0.648.204 allows remote attackers to cause a denial of service or possibly have unspecified other impact via unknown vectors.", "scorev2": "7.5", "scorev3": "0.0", "scorev4": "0.0", "modified": "2026-06-16T23:29:05.000", "vector": "NETWORK", "vectorString": "AV:N/AC:L/Au:N/C:P/I:P/A:P", "detail": "fixed-version: Fixed from version 10.0.648.204" }, { "id": "CVE-2011-1293", "status": "Patched", "link": "https://nvd.nist.gov/vuln/detail/CVE-2011-1293", "summary": "Use-after-free vulnerability in the HTMLCollection implementation in Google Chrome before 10.0.648.204 allows remote attackers to cause a denial of service or possibly have unspecified other impact via unknown vectors.", "scorev2": "7.5", "scorev3": "0.0", "scorev4": "0.0", "modified": "2026-06-16T23:29:05.000", "vector": "NETWORK", "vectorString": "AV:N/AC:L/Au:N/C:P/I:P/A:P", "detail": "fixed-version: Fixed from version 10.0.648.204" }, { "id": "CVE-2011-1294", "status": "Patched", "link": "https://nvd.nist.gov/vuln/detail/CVE-2011-1294", "summary": "Google Chrome before 10.0.648.204 does not properly handle Cascading Style Sheets (CSS) token sequences, which allows remote attackers to cause a denial of service or possibly have unspecified other impact via unknown vectors that lead to a \"stale pointer.\"", "scorev2": "7.5", "scorev3": "0.0", "scorev4": "0.0", "modified": "2026-06-16T23:29:06.000", "vector": "NETWORK", "vectorString": "AV:N/AC:L/Au:N/C:P/I:P/A:P", "detail": "fixed-version: Fixed from version 10.0.648.204" }, { "id": "CVE-2011-1295", "status": "Patched", "link": "https://nvd.nist.gov/vuln/detail/CVE-2011-1295", "summary": "WebKit, as used in Google Chrome before 10.0.648.204 and Apple Safari before 5.0.6, does not properly handle node parentage, which allows remote attackers to cause a denial of service (DOM tree corruption), conduct cross-site scripting (XSS) attacks, or possibly have unspecified other impact via unknown vectors.", "scorev2": "7.5", "scorev3": "0.0", "scorev4": "0.0", "modified": "2026-06-16T23:29:06.000", "vector": "NETWORK", "vectorString": "AV:N/AC:L/Au:N/C:P/I:P/A:P", "detail": "fixed-version: Fixed from version 10.0.648.204" }, { "id": "CVE-2011-1296", "status": "Patched", "link": "https://nvd.nist.gov/vuln/detail/CVE-2011-1296", "summary": "Google Chrome before 10.0.648.204 does not properly handle SVG text, which allows remote attackers to cause a denial of service or possibly have unspecified other impact via unknown vectors that lead to a \"stale pointer.\"", "scorev2": "7.5", "scorev3": "0.0", "scorev4": "0.0", "modified": "2026-06-16T23:29:06.000", "vector": "NETWORK", "vectorString": "AV:N/AC:L/Au:N/C:P/I:P/A:P", "detail": "fixed-version: Fixed from version 10.0.648.204" }, { "id": "CVE-2011-1300", "status": "Patched", "link": "https://nvd.nist.gov/vuln/detail/CVE-2011-1300", "summary": "The Program::getActiveUniformMaxLength function in libGLESv2/Program.cpp in libGLESv2.dll in the WebGLES library in Almost Native Graphics Layer Engine (ANGLE), as used in Mozilla Firefox 4.x before 4.0.1 on Windows and in the GPU process in Google Chrome before 10.0.648.205 on Windows, allows remote attackers to execute arbitrary code via unspecified vectors, related to an \"off-by-three\" error.", "scorev2": "10.0", "scorev3": "0.0", "scorev4": "0.0", "modified": "2026-06-16T23:29:06.000", "vector": "NETWORK", "vectorString": "AV:N/AC:L/Au:N/C:C/I:C/A:C", "detail": "fixed-version: Fixed from version 10.0.648.205" }, { "id": "CVE-2011-1301", "status": "Patched", "link": "https://nvd.nist.gov/vuln/detail/CVE-2011-1301", "summary": "Use-after-free vulnerability in the GPU process in Google Chrome before 10.0.648.205 allows remote attackers to execute arbitrary code via unknown vectors.", "scorev2": "9.3", "scorev3": "0.0", "scorev4": "0.0", "modified": "2026-06-16T23:29:06.000", "vector": "NETWORK", "vectorString": "AV:N/AC:M/Au:N/C:C/I:C/A:C", "detail": "fixed-version: Fixed from version 10.0.648.205" }, { "id": "CVE-2011-1302", "status": "Patched", "link": "https://nvd.nist.gov/vuln/detail/CVE-2011-1302", "summary": "Heap-based buffer overflow in the GPU process in Google Chrome before 10.0.648.205 allows remote attackers to execute arbitrary code via unknown vectors.", "scorev2": "9.3", "scorev3": "0.0", "scorev4": "0.0", "modified": "2026-06-16T23:29:06.000", "vector": "NETWORK", "vectorString": "AV:N/AC:M/Au:N/C:C/I:C/A:C", "detail": "fixed-version: Fixed from version 10.0.648.205" }, { "id": "CVE-2011-1303", "status": "Patched", "link": "https://nvd.nist.gov/vuln/detail/CVE-2011-1303", "summary": "Google Chrome before 11.0.696.57 does not properly handle floating objects, which allows remote attackers to cause a denial of service or possibly have unspecified other impact via unknown vectors that lead to a \"stale pointer.\"", "scorev2": "7.5", "scorev3": "0.0", "scorev4": "0.0", "modified": "2026-06-16T23:29:06.000", "vector": "NETWORK", "vectorString": "AV:N/AC:L/Au:N/C:P/I:P/A:P", "detail": "fixed-version: Fixed from version 11.0.696.57" }, { "id": "CVE-2011-1304", "status": "Patched", "link": "https://nvd.nist.gov/vuln/detail/CVE-2011-1304", "summary": "Unspecified vulnerability in Google Chrome before 11.0.696.57 allows remote attackers to bypass the pop-up blocker via vectors related to plug-ins.", "scorev2": "5.0", "scorev3": "0.0", "scorev4": "0.0", "modified": "2026-06-16T23:29:07.000", "vector": "NETWORK", "vectorString": "AV:N/AC:L/Au:N/C:N/I:P/A:N", "detail": "fixed-version: Fixed from version 11.0.696.57" }, { "id": "CVE-2011-1305", "status": "Patched", "link": "https://nvd.nist.gov/vuln/detail/CVE-2011-1305", "summary": "Race condition in Google Chrome before 11.0.696.57 on Linux and Mac OS X allows remote attackers to cause a denial of service or possibly have unspecified other impact via vectors related to linked lists and a database.", "scorev2": "6.8", "scorev3": "0.0", "scorev4": "0.0", "modified": "2026-06-16T23:29:07.000", "vector": "NETWORK", "vectorString": "AV:N/AC:M/Au:N/C:P/I:P/A:P", "detail": "fixed-version: Fixed from version 11.0.696.57" }, { "id": "CVE-2011-1413", "status": "Patched", "link": "https://nvd.nist.gov/vuln/detail/CVE-2011-1413", "summary": "Google Chrome before 10.0.648.127 on Linux does not properly mitigate an unspecified flaw in an X server, which allows remote attackers to cause a denial of service (application crash) via vectors involving long messages.", "scorev2": "5.0", "scorev3": "0.0", "scorev4": "0.0", "modified": "2026-06-16T23:29:18.000", "vector": "NETWORK", "vectorString": "AV:N/AC:L/Au:N/C:N/I:N/A:P", "detail": "fixed-version: Fixed from version 10.0.648.127" }, { "id": "CVE-2011-1434", "status": "Patched", "link": "https://nvd.nist.gov/vuln/detail/CVE-2011-1434", "summary": "Google Chrome before 11.0.696.57 does not ensure thread safety during handling of MIME data, which allows remote attackers to cause a denial of service or possibly have unspecified other impact via unknown vectors.", "scorev2": "6.8", "scorev3": "0.0", "scorev4": "0.0", "modified": "2026-06-16T23:29:20.000", "vector": "NETWORK", "vectorString": "AV:N/AC:M/Au:N/C:P/I:P/A:P", "detail": "fixed-version: Fixed from version 11.0.696.57" }, { "id": "CVE-2011-1435", "status": "Patched", "link": "https://nvd.nist.gov/vuln/detail/CVE-2011-1435", "summary": "Google Chrome before 11.0.696.57 does not properly implement the tabs permission for extensions, which allows remote attackers to read local files via a crafted extension.", "scorev2": "5.0", "scorev3": "0.0", "scorev4": "0.0", "modified": "2026-06-16T23:29:20.000", "vector": "NETWORK", "vectorString": "AV:N/AC:L/Au:N/C:P/I:N/A:N", "detail": "fixed-version: Fixed from version 11.0.696.57" }, { "id": "CVE-2011-1436", "status": "Patched", "link": "https://nvd.nist.gov/vuln/detail/CVE-2011-1436", "summary": "Google Chrome before 11.0.696.57 on Linux does not properly interact with the X Window System, which allows remote attackers to cause a denial of service (application crash) via unspecified vectors.", "scorev2": "5.0", "scorev3": "0.0", "scorev4": "0.0", "modified": "2026-06-16T23:29:20.000", "vector": "NETWORK", "vectorString": "AV:N/AC:L/Au:N/C:N/I:N/A:P", "detail": "fixed-version: Fixed from version 11.0.696.57" }, { "id": "CVE-2011-1437", "status": "Patched", "link": "https://nvd.nist.gov/vuln/detail/CVE-2011-1437", "summary": "Multiple integer overflows in Google Chrome before 11.0.696.57 allow remote attackers to cause a denial of service or possibly have unspecified other impact via vectors related to float rendering.", "scorev2": "6.8", "scorev3": "0.0", "scorev4": "0.0", "modified": "2026-06-16T23:29:20.000", "vector": "NETWORK", "vectorString": "AV:N/AC:M/Au:N/C:P/I:P/A:P", "detail": "fixed-version: Fixed from version 11.0.696.57" }, { "id": "CVE-2011-1438", "status": "Patched", "link": "https://nvd.nist.gov/vuln/detail/CVE-2011-1438", "summary": "Google Chrome before 11.0.696.57 allows remote attackers to bypass the Same Origin Policy via vectors involving blobs.", "scorev2": "7.5", "scorev3": "0.0", "scorev4": "0.0", "modified": "2026-06-16T23:29:20.000", "vector": "NETWORK", "vectorString": "AV:N/AC:L/Au:N/C:P/I:P/A:P", "detail": "fixed-version: Fixed from version 11.0.696.57" }, { "id": "CVE-2011-1439", "status": "Patched", "link": "https://nvd.nist.gov/vuln/detail/CVE-2011-1439", "summary": "Google Chrome before 11.0.696.57 on Linux does not properly isolate renderer processes, which has unspecified impact and remote attack vectors.", "scorev2": "6.8", "scorev3": "0.0", "scorev4": "0.0", "modified": "2026-06-16T23:29:21.000", "vector": "NETWORK", "vectorString": "AV:N/AC:M/Au:N/C:P/I:P/A:P", "detail": "fixed-version: Fixed from version 11.0.696.57" }, { "id": "CVE-2011-1440", "status": "Patched", "link": "https://nvd.nist.gov/vuln/detail/CVE-2011-1440", "summary": "Use-after-free vulnerability in Google Chrome before 11.0.696.57 allows remote attackers to cause a denial of service or possibly have unspecified other impact via vectors related to the ruby element and Cascading Style Sheets (CSS) token sequences.", "scorev2": "6.8", "scorev3": "0.0", "scorev4": "0.0", "modified": "2026-06-16T23:29:21.000", "vector": "NETWORK", "vectorString": "AV:N/AC:M/Au:N/C:P/I:P/A:P", "detail": "fixed-version: Fixed from version 11.0.696.57" }, { "id": "CVE-2011-1441", "status": "Patched", "link": "https://nvd.nist.gov/vuln/detail/CVE-2011-1441", "summary": "Google Chrome before 11.0.696.57 does not properly perform a cast of an unspecified variable during handling of floating select lists, which allows remote attackers to cause a denial of service or possibly have unknown other impact via a crafted HTML document.", "scorev2": "6.8", "scorev3": "0.0", "scorev4": "0.0", "modified": "2026-06-16T23:29:21.000", "vector": "NETWORK", "vectorString": "AV:N/AC:M/Au:N/C:P/I:P/A:P", "detail": "fixed-version: Fixed from version 11.0.696.57" }, { "id": "CVE-2011-1442", "status": "Patched", "link": "https://nvd.nist.gov/vuln/detail/CVE-2011-1442", "summary": "Google Chrome before 11.0.696.57 does not properly handle mutation events, which allows remote attackers to cause a denial of service (node tree corruption) or possibly have unspecified other impact via unknown vectors.", "scorev2": "6.8", "scorev3": "0.0", "scorev4": "0.0", "modified": "2026-06-16T23:29:21.000", "vector": "NETWORK", "vectorString": "AV:N/AC:M/Au:N/C:P/I:P/A:P", "detail": "fixed-version: Fixed from version 11.0.696.57" }, { "id": "CVE-2011-1443", "status": "Patched", "link": "https://nvd.nist.gov/vuln/detail/CVE-2011-1443", "summary": "Google Chrome before 11.0.696.57 does not properly implement layering, which allows remote attackers to cause a denial of service or possibly have unspecified other impact via unknown vectors that lead to \"stale pointers.\"", "scorev2": "6.8", "scorev3": "0.0", "scorev4": "0.0", "modified": "2026-06-16T23:29:21.000", "vector": "NETWORK", "vectorString": "AV:N/AC:M/Au:N/C:P/I:P/A:P", "detail": "fixed-version: Fixed from version 11.0.696.57" }, { "id": "CVE-2011-1444", "status": "Patched", "link": "https://nvd.nist.gov/vuln/detail/CVE-2011-1444", "summary": "Race condition in the sandbox launcher implementation in Google Chrome before 11.0.696.57 on Linux allows remote attackers to cause a denial of service or possibly have unspecified other impact via unknown vectors.", "scorev2": "6.8", "scorev3": "0.0", "scorev4": "0.0", "modified": "2026-06-16T23:29:21.000", "vector": "NETWORK", "vectorString": "AV:N/AC:M/Au:N/C:P/I:P/A:P", "detail": "fixed-version: Fixed from version 11.0.696.57" }, { "id": "CVE-2011-1445", "status": "Patched", "link": "https://nvd.nist.gov/vuln/detail/CVE-2011-1445", "summary": "Google Chrome before 11.0.696.57 does not properly handle SVG documents, which allows remote attackers to cause a denial of service (out-of-bounds read) via unspecified vectors.", "scorev2": "6.8", "scorev3": "0.0", "scorev4": "0.0", "modified": "2026-06-16T23:29:21.000", "vector": "NETWORK", "vectorString": "AV:N/AC:M/Au:N/C:P/I:P/A:P", "detail": "fixed-version: Fixed from version 11.0.696.57" }, { "id": "CVE-2011-1446", "status": "Patched", "link": "https://nvd.nist.gov/vuln/detail/CVE-2011-1446", "summary": "Google Chrome before 11.0.696.57 allows remote attackers to spoof the URL bar via vectors involving (1) a navigation error or (2) an interrupted load.", "scorev2": "5.8", "scorev3": "0.0", "scorev4": "0.0", "modified": "2026-06-16T23:29:21.000", "vector": "NETWORK", "vectorString": "AV:N/AC:M/Au:N/C:P/I:P/A:N", "detail": "fixed-version: Fixed from version 11.0.696.57" }, { "id": "CVE-2011-1447", "status": "Patched", "link": "https://nvd.nist.gov/vuln/detail/CVE-2011-1447", "summary": "Google Chrome before 11.0.696.57 does not properly handle drop-down lists, which allows remote attackers to cause a denial of service or possibly have unspecified other impact via unknown vectors that lead to a \"stale pointer.\"", "scorev2": "6.8", "scorev3": "0.0", "scorev4": "0.0", "modified": "2026-06-16T23:29:21.000", "vector": "NETWORK", "vectorString": "AV:N/AC:M/Au:N/C:P/I:P/A:P", "detail": "fixed-version: Fixed from version 11.0.696.57" }, { "id": "CVE-2011-1448", "status": "Patched", "link": "https://nvd.nist.gov/vuln/detail/CVE-2011-1448", "summary": "Google Chrome before 11.0.696.57 does not properly perform height calculations, which allows remote attackers to cause a denial of service or possibly have unspecified other impact via unknown vectors that lead to a \"stale pointer.\"", "scorev2": "6.8", "scorev3": "0.0", "scorev4": "0.0", "modified": "2026-06-16T23:29:22.000", "vector": "NETWORK", "vectorString": "AV:N/AC:M/Au:N/C:P/I:P/A:P", "detail": "fixed-version: Fixed from version 11.0.696.57" }, { "id": "CVE-2011-1449", "status": "Patched", "link": "https://nvd.nist.gov/vuln/detail/CVE-2011-1449", "summary": "Use-after-free vulnerability in the WebSockets implementation in Google Chrome before 11.0.696.57 allows remote attackers to cause a denial of service or possibly have unspecified other impact via unknown vectors.", "scorev2": "6.8", "scorev3": "0.0", "scorev4": "0.0", "modified": "2026-06-16T23:29:22.000", "vector": "NETWORK", "vectorString": "AV:N/AC:M/Au:N/C:P/I:P/A:P", "detail": "fixed-version: Fixed from version 11.0.696.57" }, { "id": "CVE-2011-1450", "status": "Patched", "link": "https://nvd.nist.gov/vuln/detail/CVE-2011-1450", "summary": "Google Chrome before 11.0.696.57 does not properly present file dialogs, which allows remote attackers to cause a denial of service or possibly have unspecified other impact via unknown vectors that lead to \"dangling pointers.\"", "scorev2": "5.0", "scorev3": "0.0", "scorev4": "0.0", "modified": "2026-06-16T23:29:22.000", "vector": "NETWORK", "vectorString": "AV:N/AC:L/Au:N/C:N/I:N/A:P", "detail": "fixed-version: Fixed from version 11.0.696.57" }, { "id": "CVE-2011-1451", "status": "Patched", "link": "https://nvd.nist.gov/vuln/detail/CVE-2011-1451", "summary": "Google Chrome before 11.0.696.57 does not properly handle DOM id maps, which allows remote attackers to cause a denial of service or possibly have unspecified other impact via unknown vectors that lead to \"dangling pointers.\"", "scorev2": "7.5", "scorev3": "0.0", "scorev4": "0.0", "modified": "2026-06-16T23:29:22.000", "vector": "NETWORK", "vectorString": "AV:N/AC:L/Au:N/C:P/I:P/A:P", "detail": "fixed-version: Fixed from version 11.0.696.57" }, { "id": "CVE-2011-1452", "status": "Patched", "link": "https://nvd.nist.gov/vuln/detail/CVE-2011-1452", "summary": "Google Chrome before 11.0.696.57 allows user-assisted remote attackers to spoof the URL bar via vectors involving a redirect and a manual reload.", "scorev2": "5.8", "scorev3": "0.0", "scorev4": "0.0", "modified": "2026-06-16T23:29:22.000", "vector": "NETWORK", "vectorString": "AV:N/AC:M/Au:N/C:P/I:P/A:N", "detail": "fixed-version: Fixed from version 11.0.696.57" }, { "id": "CVE-2011-1454", "status": "Patched", "link": "https://nvd.nist.gov/vuln/detail/CVE-2011-1454", "summary": "Use-after-free vulnerability in the DOM id handling functionality in Google Chrome before 11.0.696.57 allows remote attackers to cause a denial of service or possibly have unspecified other impact via a crafted HTML document.", "scorev2": "6.8", "scorev3": "0.0", "scorev4": "0.0", "modified": "2026-06-16T23:29:22.000", "vector": "NETWORK", "vectorString": "AV:N/AC:M/Au:N/C:P/I:P/A:P", "detail": "fixed-version: Fixed from version 11.0.696.57" }, { "id": "CVE-2011-1455", "status": "Patched", "link": "https://nvd.nist.gov/vuln/detail/CVE-2011-1455", "summary": "Google Chrome before 11.0.696.57 does not properly handle PDF documents with multipart encoding, which allows remote attackers to cause a denial of service (out-of-bounds read) via a crafted document.", "scorev2": "6.8", "scorev3": "0.0", "scorev4": "0.0", "modified": "2026-06-16T23:29:22.000", "vector": "NETWORK", "vectorString": "AV:N/AC:M/Au:N/C:P/I:P/A:P", "detail": "fixed-version: Fixed from version 11.0.696.57" }, { "id": "CVE-2011-1456", "status": "Patched", "link": "https://nvd.nist.gov/vuln/detail/CVE-2011-1456", "summary": "Google Chrome before 11.0.696.57 does not properly handle PDF forms, which allows remote attackers to cause a denial of service or possibly have unspecified other impact via unknown vectors that lead to \"stale pointers.\"", "scorev2": "6.8", "scorev3": "0.0", "scorev4": "0.0", "modified": "2026-06-16T23:29:23.000", "vector": "NETWORK", "vectorString": "AV:N/AC:M/Au:N/C:P/I:P/A:P", "detail": "fixed-version: Fixed from version 11.0.696.57" }, { "id": "CVE-2011-1465", "status": "Patched", "link": "https://nvd.nist.gov/vuln/detail/CVE-2011-1465", "summary": "The SPDY implementation in net/http/http_network_transaction.cc in Google Chrome before 11.0.696.14 drains the bodies from SPDY responses, which might allow remote SPDY servers to cause a denial of service (application exit) by canceling a stream.", "scorev2": "5.0", "scorev3": "0.0", "scorev4": "0.0", "modified": "2026-06-16T23:29:23.000", "vector": "NETWORK", "vectorString": "AV:N/AC:L/Au:N/C:N/I:N/A:P", "detail": "fixed-version: Fixed from version 11.0.696.14" }, { "id": "CVE-2011-1691", "status": "Patched", "link": "https://nvd.nist.gov/vuln/detail/CVE-2011-1691", "summary": "The counterToCSSValue function in CSSComputedStyleDeclaration.cpp in the Cascading Style Sheets (CSS) implementation in WebCore in WebKit before r82222, as used in Google Chrome before 11.0.696.43 and other products, does not properly handle access to the (1) counterIncrement and (2) counterReset attributes of CSSStyleDeclaration data provided by a getComputedStyle method call, which allows remote attackers to cause a denial of service (NULL pointer dereference and application crash) via crafted JavaScript code.", "scorev2": "5.0", "scorev3": "0.0", "scorev4": "0.0", "modified": "2026-06-16T23:29:50.000", "vector": "NETWORK", "vectorString": "AV:N/AC:L/Au:N/C:N/I:N/A:P", "detail": "fixed-version: Fixed from version 11.0.696.43" }, { "id": "CVE-2011-1793", "status": "Patched", "link": "https://nvd.nist.gov/vuln/detail/CVE-2011-1793", "summary": "rendering/svg/RenderSVGResourceFilter.cpp in WebCore in WebKit in Google Chrome before 11.0.696.65 allows remote attackers to cause a denial of service (application crash) or possibly have unspecified other impact via a crafted SVG document that leads to a \"stale pointer.\"", "scorev2": "7.5", "scorev3": "0.0", "scorev4": "0.0", "modified": "2026-06-16T23:30:07.000", "vector": "NETWORK", "vectorString": "AV:N/AC:L/Au:N/C:P/I:P/A:P", "detail": "fixed-version: Fixed from version >11.0.696.65" }, { "id": "CVE-2011-1794", "status": "Patched", "link": "https://nvd.nist.gov/vuln/detail/CVE-2011-1794", "summary": "Integer overflow in the FilterEffect::copyImageBytes function in platform/graphics/filters/FilterEffect.cpp in the SVG filter implementation in WebCore in WebKit in Google Chrome before 11.0.696.65 allows remote attackers to cause a denial of service (application crash) or possibly have unspecified other impact via crafted dimensions.", "scorev2": "7.5", "scorev3": "0.0", "scorev4": "0.0", "modified": "2026-06-16T23:30:07.000", "vector": "NETWORK", "vectorString": "AV:N/AC:L/Au:N/C:P/I:P/A:P", "detail": "fixed-version: Fixed from version >11.0.696.64" }, { "id": "CVE-2011-1795", "status": "Patched", "link": "https://nvd.nist.gov/vuln/detail/CVE-2011-1795", "summary": "Integer underflow in the HTMLFormElement::removeFormElement function in html/HTMLFormElement.cpp in WebCore in WebKit in Google Chrome before 11.0.696.65 allows remote attackers to cause a denial of service (application crash) or possibly have unspecified other impact via a crafted HTML document containing a FORM element.", "scorev2": "7.5", "scorev3": "0.0", "scorev4": "0.0", "modified": "2026-06-16T23:30:08.000", "vector": "NETWORK", "vectorString": "AV:N/AC:L/Au:N/C:P/I:P/A:P", "detail": "fixed-version: Fixed from version >11.0.696.64" }, { "id": "CVE-2011-1796", "status": "Patched", "link": "https://nvd.nist.gov/vuln/detail/CVE-2011-1796", "summary": "Use-after-free vulnerability in the FrameView::calculateScrollbarModesForLayout function in page/FrameView.cpp in WebCore in WebKit in Google Chrome before 11.0.696.65 allows remote attackers to cause a denial of service (application crash) or possibly have unspecified other impact via crafted JavaScript code that calls the removeChild method during interaction with a FRAME element.", "scorev2": "7.5", "scorev3": "0.0", "scorev4": "0.0", "modified": "2026-06-16T23:30:08.000", "vector": "NETWORK", "vectorString": "AV:N/AC:L/Au:N/C:P/I:P/A:P", "detail": "fixed-version: Fixed from version >11.0.696.64" }, { "id": "CVE-2011-1798", "status": "Patched", "link": "https://nvd.nist.gov/vuln/detail/CVE-2011-1798", "summary": "rendering/svg/RenderSVGText.cpp in WebCore in WebKit in Google Chrome before 11.0.696.65 does not properly perform a cast of an unspecified variable during an attempt to handle a block child, which allows remote attackers to cause a denial of service (application crash) or possibly have unknown other impact via a crafted text element in an SVG document.", "scorev2": "7.5", "scorev3": "0.0", "scorev4": "0.0", "modified": "2026-06-16T23:30:08.000", "vector": "NETWORK", "vectorString": "AV:N/AC:L/Au:N/C:P/I:P/A:P", "detail": "fixed-version: Fixed from version >11.0.696.64" }, { "id": "CVE-2011-1799", "status": "Patched", "link": "https://nvd.nist.gov/vuln/detail/CVE-2011-1799", "summary": "Google Chrome before 11.0.696.68 does not properly perform casts of variables during interaction with the WebKit engine, which allows remote attackers to cause a denial of service or possibly have unspecified other impact via unknown vectors.", "scorev2": "6.8", "scorev3": "0.0", "scorev4": "0.0", "modified": "2026-06-16T23:30:08.000", "vector": "NETWORK", "vectorString": "AV:N/AC:M/Au:N/C:P/I:P/A:P", "detail": "fixed-version: Fixed from version 11.0.696.68" }, { "id": "CVE-2011-1800", "status": "Patched", "link": "https://nvd.nist.gov/vuln/detail/CVE-2011-1800", "summary": "Multiple integer overflows in the SVG Filters implementation in WebCore in WebKit in Google Chrome before 11.0.696.68 allow remote attackers to cause a denial of service or possibly have unspecified other impact via unknown vectors.", "scorev2": "7.5", "scorev3": "0.0", "scorev4": "0.0", "modified": "2026-06-16T23:30:08.000", "vector": "NETWORK", "vectorString": "AV:N/AC:L/Au:N/C:P/I:P/A:P", "detail": "fixed-version: Fixed from version 11.0.696.71" }, { "id": "CVE-2011-1801", "status": "Patched", "link": "https://nvd.nist.gov/vuln/detail/CVE-2011-1801", "summary": "Unspecified vulnerability in Google Chrome before 11.0.696.71 allows remote attackers to bypass the pop-up blocker via unknown vectors.", "scorev2": "5.0", "scorev3": "0.0", "scorev4": "0.0", "modified": "2026-06-16T23:30:08.000", "vector": "NETWORK", "vectorString": "AV:N/AC:L/Au:N/C:N/I:P/A:N", "detail": "fixed-version: Fixed from version 11.0.696.71" }, { "id": "CVE-2011-1802", "status": "Unpatched", "link": "https://nvd.nist.gov/vuln/detail/CVE-2011-1802", "summary": "WebKit in Google Chrome before Blink M11 and M12 does not properly handle counter nodes, which allows remote attackers to cause a denial of service (memory corruption).", "scorev2": "4.3", "scorev3": "6.5", "scorev4": "0.0", "modified": "2026-06-16T23:30:08.000", "vector": "NETWORK", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H", "detail": "no-version-ranges", "description": "Check package version" }, { "id": "CVE-2011-1803", "status": "Unpatched", "link": "https://nvd.nist.gov/vuln/detail/CVE-2011-1803", "summary": "An issue exists in third_party/WebKit/Source/WebCore/svg/animation/SVGSMILElement.h in WebKit in Google Chrome before Blink M11 and M12 when trying to access a removed smil element.", "scorev2": "4.3", "scorev3": "6.5", "scorev4": "0.0", "modified": "2026-06-16T23:30:08.000", "vector": "NETWORK", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H", "detail": "no-version-ranges", "description": "Check package version" }, { "id": "CVE-2011-1804", "status": "Patched", "link": "https://nvd.nist.gov/vuln/detail/CVE-2011-1804", "summary": "rendering/RenderBox.cpp in WebCore in WebKit before r86862, as used in Google Chrome before 11.0.696.71, does not properly render floats, which allows remote attackers to cause a denial of service or possibly have unspecified other impact via unknown vectors that lead to a \"stale pointer.\"", "scorev2": "7.5", "scorev3": "0.0", "scorev4": "0.0", "modified": "2026-06-16T23:30:09.000", "vector": "NETWORK", "vectorString": "AV:N/AC:L/Au:N/C:P/I:P/A:P", "detail": "fixed-version: Fixed from version 11.0.696.71" }, { "id": "CVE-2011-1805", "status": "Patched", "link": "https://nvd.nist.gov/vuln/detail/CVE-2011-1805", "summary": "Bad cast in CSS in Google Chrome prior to 11.0.0.0 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page.", "scorev2": "6.8", "scorev3": "8.8", "scorev4": "0.0", "modified": "2026-06-16T23:30:09.000", "vector": "NETWORK", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H", "detail": "fixed-version: Fixed from version 11.0.0.0" }, { "id": "CVE-2011-1806", "status": "Patched", "link": "https://nvd.nist.gov/vuln/detail/CVE-2011-1806", "summary": "Google Chrome before 11.0.696.71 does not properly implement the GPU command buffer, which allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via unspecified vectors.", "scorev2": "10.0", "scorev3": "0.0", "scorev4": "0.0", "modified": "2026-06-16T23:30:09.000", "vector": "NETWORK", "vectorString": "AV:N/AC:L/Au:N/C:C/I:C/A:C", "detail": "fixed-version: Fixed from version 11.0.696.71" }, { "id": "CVE-2011-1807", "status": "Patched", "link": "https://nvd.nist.gov/vuln/detail/CVE-2011-1807", "summary": "Google Chrome before 11.0.696.71 does not properly handle blobs, which allows remote attackers to execute arbitrary code via unspecified vectors that trigger an out-of-bounds write.", "scorev2": "10.0", "scorev3": "0.0", "scorev4": "0.0", "modified": "2026-06-16T23:30:09.000", "vector": "NETWORK", "vectorString": "AV:N/AC:L/Au:N/C:C/I:C/A:C", "detail": "fixed-version: Fixed from version 11.0.696.71" }, { "id": "CVE-2011-1808", "status": "Patched", "link": "https://nvd.nist.gov/vuln/detail/CVE-2011-1808", "summary": "Use-after-free vulnerability in Google Chrome before 12.0.742.91 allows remote attackers to cause a denial of service or possibly have unspecified other impact via vectors related to incorrect integer calculations during float handling.", "scorev2": "6.8", "scorev3": "0.0", "scorev4": "0.0", "modified": "2026-06-16T23:30:09.000", "vector": "NETWORK", "vectorString": "AV:N/AC:M/Au:N/C:P/I:P/A:P", "detail": "fixed-version: Fixed from version 12.0.742.91" }, { "id": "CVE-2011-1809", "status": "Patched", "link": "https://nvd.nist.gov/vuln/detail/CVE-2011-1809", "summary": "Use-after-free vulnerability in the accessibility feature in Google Chrome before 12.0.742.91 allows remote attackers to cause a denial of service or possibly have unspecified other impact via unknown vectors.", "scorev2": "6.8", "scorev3": "0.0", "scorev4": "0.0", "modified": "2026-06-16T23:30:09.000", "vector": "NETWORK", "vectorString": "AV:N/AC:M/Au:N/C:P/I:P/A:P", "detail": "fixed-version: Fixed from version 12.0.742.91" }, { "id": "CVE-2011-1810", "status": "Patched", "link": "https://nvd.nist.gov/vuln/detail/CVE-2011-1810", "summary": "The Cascading Style Sheets (CSS) implementation in Google Chrome before 12.0.742.91 does not properly restrict access to the visit history, which allows remote attackers to obtain sensitive information via unspecified vectors.", "scorev2": "4.3", "scorev3": "0.0", "scorev4": "0.0", "modified": "2026-06-16T23:30:09.000", "vector": "NETWORK", "vectorString": "AV:N/AC:M/Au:N/C:P/I:N/A:N", "detail": "fixed-version: Fixed from version 12.0.742.91" }, { "id": "CVE-2011-1811", "status": "Patched", "link": "https://nvd.nist.gov/vuln/detail/CVE-2011-1811", "summary": "Google Chrome before 12.0.742.91 does not properly handle a large number of form submissions, which allows remote attackers to cause a denial of service (application crash) via unspecified vectors.", "scorev2": "4.3", "scorev3": "0.0", "scorev4": "0.0", "modified": "2026-06-16T23:30:09.000", "vector": "NETWORK", "vectorString": "AV:N/AC:M/Au:N/C:N/I:N/A:P", "detail": "fixed-version: Fixed from version 12.0.742.91" }, { "id": "CVE-2011-1812", "status": "Patched", "link": "https://nvd.nist.gov/vuln/detail/CVE-2011-1812", "summary": "Google Chrome before 12.0.742.91 allows remote attackers to bypass intended access restrictions via vectors related to extensions.", "scorev2": "7.5", "scorev3": "0.0", "scorev4": "0.0", "modified": "2026-06-16T23:30:09.000", "vector": "NETWORK", "vectorString": "AV:N/AC:L/Au:N/C:P/I:P/A:P", "detail": "fixed-version: Fixed from version 12.0.742.91" }, { "id": "CVE-2011-1813", "status": "Patched", "link": "https://nvd.nist.gov/vuln/detail/CVE-2011-1813", "summary": "Google Chrome before 12.0.742.91 does not properly implement the framework for extensions, which allows remote attackers to cause a denial of service or possibly have unspecified other impact via unknown vectors that lead to a \"stale pointer.\"", "scorev2": "6.8", "scorev3": "0.0", "scorev4": "0.0", "modified": "2026-06-16T23:30:10.000", "vector": "NETWORK", "vectorString": "AV:N/AC:M/Au:N/C:P/I:P/A:P", "detail": "fixed-version: Fixed from version 12.0.742.91" }, { "id": "CVE-2011-1814", "status": "Patched", "link": "https://nvd.nist.gov/vuln/detail/CVE-2011-1814", "summary": "Google Chrome before 12.0.742.91 attempts to read data from an uninitialized pointer, which allows remote attackers to cause a denial of service or possibly have unspecified other impact via unknown vectors.", "scorev2": "5.8", "scorev3": "0.0", "scorev4": "0.0", "modified": "2026-06-16T23:30:10.000", "vector": "NETWORK", "vectorString": "AV:N/AC:M/Au:N/C:P/I:N/A:P", "detail": "fixed-version: Fixed from version 12.0.742.91" }, { "id": "CVE-2011-1815", "status": "Patched", "link": "https://nvd.nist.gov/vuln/detail/CVE-2011-1815", "summary": "Google Chrome before 12.0.742.91 allows remote attackers to inject script into a tab page via vectors related to extensions.", "scorev2": "4.3", "scorev3": "0.0", "scorev4": "0.0", "modified": "2026-06-16T23:30:10.000", "vector": "NETWORK", "vectorString": "AV:N/AC:M/Au:N/C:N/I:P/A:N", "detail": "fixed-version: Fixed from version 12.0.742.91" }, { "id": "CVE-2011-1816", "status": "Patched", "link": "https://nvd.nist.gov/vuln/detail/CVE-2011-1816", "summary": "Use-after-free vulnerability in the developer tools in Google Chrome before 12.0.742.91 allows remote attackers to cause a denial of service or possibly have unspecified other impact via unknown vectors.", "scorev2": "6.8", "scorev3": "0.0", "scorev4": "0.0", "modified": "2026-06-16T23:30:10.000", "vector": "NETWORK", "vectorString": "AV:N/AC:M/Au:N/C:P/I:P/A:P", "detail": "fixed-version: Fixed from version 12.0.742.91" }, { "id": "CVE-2011-1817", "status": "Patched", "link": "https://nvd.nist.gov/vuln/detail/CVE-2011-1817", "summary": "Google Chrome before 12.0.742.91 does not properly implement history deletion, which allows remote attackers to cause a denial of service (memory corruption) or possibly have unspecified other impact via unknown vectors.", "scorev2": "6.8", "scorev3": "0.0", "scorev4": "0.0", "modified": "2026-06-16T23:30:10.000", "vector": "NETWORK", "vectorString": "AV:N/AC:M/Au:N/C:P/I:P/A:P", "detail": "fixed-version: Fixed from version 12.0.742.91" }, { "id": "CVE-2011-1818", "status": "Patched", "link": "https://nvd.nist.gov/vuln/detail/CVE-2011-1818", "summary": "Use-after-free vulnerability in the image loader in Google Chrome before 12.0.742.91 allows remote attackers to cause a denial of service or possibly have unspecified other impact via unknown vectors.", "scorev2": "6.8", "scorev3": "0.0", "scorev4": "0.0", "modified": "2026-06-16T23:30:10.000", "vector": "NETWORK", "vectorString": "AV:N/AC:M/Au:N/C:P/I:P/A:P", "detail": "fixed-version: Fixed from version 12.0.742.91" }, { "id": "CVE-2011-1819", "status": "Patched", "link": "https://nvd.nist.gov/vuln/detail/CVE-2011-1819", "summary": "Google Chrome before 12.0.742.91 allows remote attackers to perform unspecified injection into a chrome:// page via vectors related to extensions.", "scorev2": "4.3", "scorev3": "0.0", "scorev4": "0.0", "modified": "2026-06-16T23:30:10.000", "vector": "NETWORK", "vectorString": "AV:N/AC:M/Au:N/C:N/I:P/A:N", "detail": "fixed-version: Fixed from version 12.0.742.91" }, { "id": "CVE-2011-2075", "status": "Patched", "link": "https://nvd.nist.gov/vuln/detail/CVE-2011-2075", "summary": "Unspecified vulnerability in Google Chrome 11.0.696.65 on Windows 7 SP1 allows remote attackers to execute arbitrary code via unknown vectors. NOTE: as of 20110510, the only disclosure is a vague advisory that possibly relates to multiple vulnerabilities or multiple products. However, because it is from a well-known researcher, it is being assigned a CVE identifier for tracking purposes.", "scorev2": "9.3", "scorev3": "0.0", "scorev4": "0.0", "modified": "2026-06-16T23:30:38.000", "vector": "NETWORK", "vectorString": "AV:N/AC:M/Au:N/C:C/I:C/A:C", "detail": "version-not-in-range" }, { "id": "CVE-2011-2332", "status": "Patched", "link": "https://nvd.nist.gov/vuln/detail/CVE-2011-2332", "summary": "Google V8, as used in Google Chrome before 12.0.742.91, allows remote attackers to bypass the Same Origin Policy via unspecified vectors.", "scorev2": "7.5", "scorev3": "0.0", "scorev4": "0.0", "modified": "2026-06-16T23:31:07.000", "vector": "NETWORK", "vectorString": "AV:N/AC:L/Au:N/C:P/I:P/A:P", "detail": "fixed-version: Fixed from version 12.0.742.91" }, { "id": "CVE-2011-2334", "status": "Unpatched", "link": "https://nvd.nist.gov/vuln/detail/CVE-2011-2334", "summary": "Use after free vulnerability exists in WebKit in Google Chrome before Blink M12 in RenderLayerwhen removing elements with reflections.", "scorev2": "4.3", "scorev3": "6.5", "scorev4": "0.0", "modified": "2026-06-16T23:31:07.000", "vector": "NETWORK", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H", "detail": "no-version-ranges", "description": "Check package version" }, { "id": "CVE-2011-2335", "status": "Unpatched", "link": "https://nvd.nist.gov/vuln/detail/CVE-2011-2335", "summary": "A double-free vulnerability exists in WebKit in Google Chrome before Blink M12 in the WebCore::CSSSelector function.", "scorev2": "5.0", "scorev3": "7.5", "scorev4": "0.0", "modified": "2026-06-16T23:31:07.000", "vector": "NETWORK", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H", "detail": "no-version-ranges", "description": "Check package version" }, { "id": "CVE-2011-2336", "status": "Unpatched", "link": "https://nvd.nist.gov/vuln/detail/CVE-2011-2336", "summary": "An issue exists in WebKit in Google Chrome before Blink M12. when clearing lists in AnimationControllerPrivate that signal when a hardware animation starts.", "scorev2": "4.3", "scorev3": "6.5", "scorev4": "0.0", "modified": "2026-06-16T23:31:08.000", "vector": "NETWORK", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H", "detail": "no-version-ranges", "description": "Check package version" }, { "id": "CVE-2011-2342", "status": "Patched", "link": "https://nvd.nist.gov/vuln/detail/CVE-2011-2342", "summary": "The DOM implementation in Google Chrome before 12.0.742.91 allows remote attackers to bypass the Same Origin Policy via unspecified vectors.", "scorev2": "4.3", "scorev3": "0.0", "scorev4": "0.0", "modified": "2026-06-16T23:31:08.000", "vector": "NETWORK", "vectorString": "AV:N/AC:M/Au:N/C:N/I:P/A:N", "detail": "fixed-version: Fixed from version 12.0.742.91" }, { "id": "CVE-2011-2345", "status": "Patched", "link": "https://nvd.nist.gov/vuln/detail/CVE-2011-2345", "summary": "The NPAPI implementation in Google Chrome before 12.0.742.112 does not properly handle strings, which allows remote attackers to cause a denial of service (out-of-bounds read) via unspecified vectors.", "scorev2": "4.3", "scorev3": "0.0", "scorev4": "0.0", "modified": "2026-06-16T23:31:08.000", "vector": "NETWORK", "vectorString": "AV:N/AC:M/Au:N/C:N/I:N/A:P", "detail": "fixed-version: Fixed from version 12.0.742.112" }, { "id": "CVE-2011-2346", "status": "Patched", "link": "https://nvd.nist.gov/vuln/detail/CVE-2011-2346", "summary": "Use-after-free vulnerability in Google Chrome before 12.0.742.112 allows remote attackers to cause a denial of service or possibly have unspecified other impact via vectors involving SVG fonts.", "scorev2": "6.8", "scorev3": "0.0", "scorev4": "0.0", "modified": "2026-06-16T23:31:09.000", "vector": "NETWORK", "vectorString": "AV:N/AC:M/Au:N/C:P/I:P/A:P", "detail": "fixed-version: Fixed from version 12.0.742.112" }, { "id": "CVE-2011-2347", "status": "Patched", "link": "https://nvd.nist.gov/vuln/detail/CVE-2011-2347", "summary": "Google Chrome before 12.0.742.112 does not properly handle Cascading Style Sheets (CSS) token sequences, which allows remote attackers to cause a denial of service (memory corruption) or possibly have unspecified other impact via unknown vectors.", "scorev2": "6.8", "scorev3": "0.0", "scorev4": "0.0", "modified": "2026-06-16T23:31:09.000", "vector": "NETWORK", "vectorString": "AV:N/AC:M/Au:N/C:P/I:P/A:P", "detail": "fixed-version: Fixed from version 12.0.742.112" }, { "id": "CVE-2011-2348", "status": "Patched", "link": "https://nvd.nist.gov/vuln/detail/CVE-2011-2348", "summary": "Google V8, as used in Google Chrome before 12.0.742.112, performs an incorrect bounds check, which allows remote attackers to cause a denial of service or possibly have unspecified other impact via unknown vectors.", "scorev2": "6.8", "scorev3": "0.0", "scorev4": "0.0", "modified": "2026-06-16T23:31:09.000", "vector": "NETWORK", "vectorString": "AV:N/AC:M/Au:N/C:P/I:P/A:P", "detail": "fixed-version: Fixed from version 12.0.742.112" }, { "id": "CVE-2011-2349", "status": "Patched", "link": "https://nvd.nist.gov/vuln/detail/CVE-2011-2349", "summary": "Use-after-free vulnerability in Google Chrome before 12.0.742.112 allows remote attackers to cause a denial of service or possibly have unspecified other impact via vectors related to text selection.", "scorev2": "6.8", "scorev3": "0.0", "scorev4": "0.0", "modified": "2026-06-16T23:31:09.000", "vector": "NETWORK", "vectorString": "AV:N/AC:M/Au:N/C:P/I:P/A:P", "detail": "fixed-version: Fixed from version 12.0.742.112" }, { "id": "CVE-2011-2350", "status": "Patched", "link": "https://nvd.nist.gov/vuln/detail/CVE-2011-2350", "summary": "The HTML parser in Google Chrome before 12.0.742.112 does not properly address \"lifetime and re-entrancy issues,\" which allows remote attackers to cause a denial of service or possibly have unspecified other impact via unknown vectors.", "scorev2": "6.8", "scorev3": "0.0", "scorev4": "0.0", "modified": "2026-06-16T23:31:09.000", "vector": "NETWORK", "vectorString": "AV:N/AC:M/Au:N/C:P/I:P/A:P", "detail": "fixed-version: Fixed from version 12.0.742.112" }, { "id": "CVE-2011-2351", "status": "Patched", "link": "https://nvd.nist.gov/vuln/detail/CVE-2011-2351", "summary": "Use-after-free vulnerability in Google Chrome before 12.0.742.112 allows remote attackers to cause a denial of service or possibly have unspecified other impact via vectors involving SVG use elements.", "scorev2": "6.8", "scorev3": "0.0", "scorev4": "0.0", "modified": "2026-06-16T23:31:09.000", "vector": "NETWORK", "vectorString": "AV:N/AC:M/Au:N/C:P/I:P/A:P", "detail": "fixed-version: Fixed from version 12.0.742.112" }, { "id": "CVE-2011-2353", "status": "Unpatched", "link": "https://nvd.nist.gov/vuln/detail/CVE-2011-2353", "summary": "Use after free vulnerability in documentloader in WebKit in Google Chrome before Blink M13 in DocumentWriter::replaceDocument function.", "scorev2": "4.3", "scorev3": "6.5", "scorev4": "0.0", "modified": "2026-06-16T23:31:09.000", "vector": "NETWORK", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H", "detail": "no-version-ranges", "description": "Check package version" }, { "id": "CVE-2011-2358", "status": "Patched", "link": "https://nvd.nist.gov/vuln/detail/CVE-2011-2358", "summary": "Google Chrome before 13.0.782.107 does not ensure that extension installations are confirmed by a browser dialog, which makes it easier for remote attackers to modify the product's functionality via a Trojan horse extension.", "scorev2": "6.8", "scorev3": "0.0", "scorev4": "0.0", "modified": "2026-06-16T23:31:10.000", "vector": "NETWORK", "vectorString": "AV:N/AC:M/Au:N/C:P/I:P/A:P", "detail": "fixed-version: Fixed from version 13.0.782.107" }, { "id": "CVE-2011-2359", "status": "Patched", "link": "https://nvd.nist.gov/vuln/detail/CVE-2011-2359", "summary": "Google Chrome before 13.0.782.107 does not properly track line boxes during rendering, which allows remote attackers to cause a denial of service or possibly have unspecified other impact via unknown vectors that lead to a \"stale pointer.\"", "scorev2": "6.8", "scorev3": "0.0", "scorev4": "0.0", "modified": "2026-06-16T23:31:10.000", "vector": "NETWORK", "vectorString": "AV:N/AC:M/Au:N/C:P/I:P/A:P", "detail": "fixed-version: Fixed from version 13.0.782.107" }, { "id": "CVE-2011-2360", "status": "Patched", "link": "https://nvd.nist.gov/vuln/detail/CVE-2011-2360", "summary": "Google Chrome before 13.0.782.107 does not ensure that the user is prompted before download of a dangerous file, which makes it easier for remote attackers to bypass intended content restrictions via a crafted web site.", "scorev2": "4.3", "scorev3": "0.0", "scorev4": "0.0", "modified": "2026-06-16T23:31:10.000", "vector": "NETWORK", "vectorString": "AV:N/AC:M/Au:N/C:N/I:P/A:N", "detail": "fixed-version: Fixed from version 13.0.782.107" }, { "id": "CVE-2011-2361", "status": "Patched", "link": "https://nvd.nist.gov/vuln/detail/CVE-2011-2361", "summary": "The Basic Authentication dialog implementation in Google Chrome before 13.0.782.107 does not properly handle strings, which might make it easier for remote attackers to capture credentials via a crafted web site.", "scorev2": "4.3", "scorev3": "0.0", "scorev4": "0.0", "modified": "2026-06-16T23:31:10.000", "vector": "NETWORK", "vectorString": "AV:N/AC:M/Au:N/C:P/I:N/A:N", "detail": "fixed-version: Fixed from version 13.0.782.107" }, { "id": "CVE-2011-2599", "status": "Patched", "link": "https://nvd.nist.gov/vuln/detail/CVE-2011-2599", "summary": "Google Chrome 11 does not block use of a cross-domain image as a WebGL texture, which allows remote attackers to obtain approximate copies of arbitrary images via a timing attack involving a crafted WebGL fragment shader.", "scorev2": "4.3", "scorev3": "0.0", "scorev4": "0.0", "modified": "2026-06-16T23:31:37.000", "vector": "NETWORK", "vectorString": "AV:N/AC:M/Au:N/C:P/I:N/A:N", "detail": "version-not-in-range" }, { "id": "CVE-2011-2761", "status": "Patched", "link": "https://nvd.nist.gov/vuln/detail/CVE-2011-2761", "summary": "Google Chrome 14.0.794.0 does not properly handle a reload of a page generated in response to a POST, which allows user-assisted remote attackers to cause a denial of service (application crash) via a crafted web site, related to GetWidget methods.", "scorev2": "4.3", "scorev3": "0.0", "scorev4": "0.0", "modified": "2026-06-16T23:31:57.000", "vector": "NETWORK", "vectorString": "AV:N/AC:M/Au:N/C:N/I:N/A:P", "detail": "version-not-in-range" }, { "id": "CVE-2011-2782", "status": "Patched", "link": "https://nvd.nist.gov/vuln/detail/CVE-2011-2782", "summary": "The drag-and-drop implementation in Google Chrome before 13.0.782.107 on Linux does not properly enforce permissions for files, which allows user-assisted remote attackers to bypass intended access restrictions via unspecified vectors.", "scorev2": "4.3", "scorev3": "0.0", "scorev4": "0.0", "modified": "2026-06-16T23:31:59.000", "vector": "NETWORK", "vectorString": "AV:N/AC:M/Au:N/C:N/I:P/A:N", "detail": "fixed-version: Fixed from version 13.0.782.107" }, { "id": "CVE-2011-2783", "status": "Patched", "link": "https://nvd.nist.gov/vuln/detail/CVE-2011-2783", "summary": "Google Chrome before 13.0.782.107 does not ensure that developer-mode NPAPI extension installations are confirmed by a browser dialog, which makes it easier for remote attackers to modify the product's functionality via a Trojan horse extension.", "scorev2": "6.8", "scorev3": "0.0", "scorev4": "0.0", "modified": "2026-06-16T23:31:59.000", "vector": "NETWORK", "vectorString": "AV:N/AC:M/Au:N/C:P/I:P/A:P", "detail": "fixed-version: Fixed from version 13.0.782.107" }, { "id": "CVE-2011-2784", "status": "Patched", "link": "https://nvd.nist.gov/vuln/detail/CVE-2011-2784", "summary": "Google Chrome before 13.0.782.107 allows remote attackers to obtain sensitive information via a request for the GL program log, which reveals a local path in an unspecified log entry.", "scorev2": "2.1", "scorev3": "0.0", "scorev4": "0.0", "modified": "2026-06-16T23:31:59.000", "vector": "LOCAL", "vectorString": "AV:L/AC:L/Au:N/C:P/I:N/A:N", "detail": "fixed-version: Fixed from version 13.0.782.107" }, { "id": "CVE-2011-2785", "status": "Patched", "link": "https://nvd.nist.gov/vuln/detail/CVE-2011-2785", "summary": "The extensions implementation in Google Chrome before 13.0.782.107 does not properly validate the URL for the home page, which allows remote attackers to have an unspecified impact via a crafted extension.", "scorev2": "4.3", "scorev3": "0.0", "scorev4": "0.0", "modified": "2026-06-16T23:31:59.000", "vector": "NETWORK", "vectorString": "AV:N/AC:M/Au:N/C:N/I:P/A:N", "detail": "fixed-version: Fixed from version 13.0.782.107" }, { "id": "CVE-2011-2786", "status": "Patched", "link": "https://nvd.nist.gov/vuln/detail/CVE-2011-2786", "summary": "Google Chrome before 13.0.782.107 does not ensure that the speech-input bubble is shown on the product's screen, which might make it easier for remote attackers to make audio recordings via a crafted web page containing an INPUT element.", "scorev2": "4.3", "scorev3": "0.0", "scorev4": "0.0", "modified": "2026-06-16T23:31:59.000", "vector": "NETWORK", "vectorString": "AV:N/AC:M/Au:N/C:N/I:P/A:N", "detail": "fixed-version: Fixed from version 13.0.782.107" }, { "id": "CVE-2011-2787", "status": "Patched", "link": "https://nvd.nist.gov/vuln/detail/CVE-2011-2787", "summary": "Google Chrome before 13.0.782.107 does not properly address re-entrancy issues associated with the GPU lock, which allows remote attackers to cause a denial of service (application crash) via unspecified vectors.", "scorev2": "4.3", "scorev3": "0.0", "scorev4": "0.0", "modified": "2026-06-16T23:31:59.000", "vector": "NETWORK", "vectorString": "AV:N/AC:M/Au:N/C:N/I:N/A:P", "detail": "fixed-version: Fixed from version 13.0.782.107" }, { "id": "CVE-2011-2788", "status": "Patched", "link": "https://nvd.nist.gov/vuln/detail/CVE-2011-2788", "summary": "Buffer overflow in the inspector serialization functionality in Google Chrome before 13.0.782.107 allows user-assisted remote attackers to have an unspecified impact via unknown vectors.", "scorev2": "6.8", "scorev3": "0.0", "scorev4": "0.0", "modified": "2026-06-16T23:32:00.000", "vector": "NETWORK", "vectorString": "AV:N/AC:M/Au:N/C:P/I:P/A:P", "detail": "fixed-version: Fixed from version 13.0.782.107" }, { "id": "CVE-2011-2789", "status": "Patched", "link": "https://nvd.nist.gov/vuln/detail/CVE-2011-2789", "summary": "Use-after-free vulnerability in Google Chrome before 13.0.782.107 allows remote attackers to cause a denial of service or possibly have unspecified other impact via vectors related to instantiation of the Pepper plug-in.", "scorev2": "6.8", "scorev3": "0.0", "scorev4": "0.0", "modified": "2026-06-16T23:32:00.000", "vector": "NETWORK", "vectorString": "AV:N/AC:M/Au:N/C:P/I:P/A:P", "detail": "fixed-version: Fixed from version 13.0.782.107" }, { "id": "CVE-2011-2790", "status": "Patched", "link": "https://nvd.nist.gov/vuln/detail/CVE-2011-2790", "summary": "Use-after-free vulnerability in Google Chrome before 13.0.782.107 allows remote attackers to cause a denial of service or possibly have unspecified other impact via vectors involving floating styles.", "scorev2": "6.8", "scorev3": "0.0", "scorev4": "0.0", "modified": "2026-06-16T23:32:00.000", "vector": "NETWORK", "vectorString": "AV:N/AC:M/Au:N/C:P/I:P/A:P", "detail": "fixed-version: Fixed from version 13.0.782.107" }, { "id": "CVE-2011-2791", "status": "Patched", "link": "https://nvd.nist.gov/vuln/detail/CVE-2011-2791", "summary": "The International Components for Unicode (ICU) functionality in Google Chrome before 13.0.782.107 allows remote attackers to cause a denial of service or possibly have unspecified other impact via unknown vectors that trigger an out-of-bounds write.", "scorev2": "6.8", "scorev3": "0.0", "scorev4": "0.0", "modified": "2026-06-16T23:32:00.000", "vector": "NETWORK", "vectorString": "AV:N/AC:M/Au:N/C:P/I:P/A:P", "detail": "fixed-version: Fixed from version 13.0.782.107" }, { "id": "CVE-2011-2792", "status": "Patched", "link": "https://nvd.nist.gov/vuln/detail/CVE-2011-2792", "summary": "Use-after-free vulnerability in Google Chrome before 13.0.782.107 allows remote attackers to cause a denial of service or possibly have unspecified other impact via vectors related to float removal.", "scorev2": "6.8", "scorev3": "0.0", "scorev4": "0.0", "modified": "2026-06-16T23:32:00.000", "vector": "NETWORK", "vectorString": "AV:N/AC:M/Au:N/C:P/I:P/A:P", "detail": "fixed-version: Fixed from version 13.0.782.107" }, { "id": "CVE-2011-2793", "status": "Patched", "link": "https://nvd.nist.gov/vuln/detail/CVE-2011-2793", "summary": "Use-after-free vulnerability in Google Chrome before 13.0.782.107 allows remote attackers to cause a denial of service or possibly have unspecified other impact via vectors related to media selectors.", "scorev2": "6.8", "scorev3": "0.0", "scorev4": "0.0", "modified": "2026-06-16T23:32:00.000", "vector": "NETWORK", "vectorString": "AV:N/AC:M/Au:N/C:P/I:P/A:P", "detail": "fixed-version: Fixed from version 13.0.782.107" }, { "id": "CVE-2011-2794", "status": "Patched", "link": "https://nvd.nist.gov/vuln/detail/CVE-2011-2794", "summary": "Google Chrome before 13.0.782.107 does not properly perform text iteration, which allows remote attackers to cause a denial of service (out-of-bounds read) via unspecified vectors.", "scorev2": "6.8", "scorev3": "0.0", "scorev4": "0.0", "modified": "2026-06-16T23:32:00.000", "vector": "NETWORK", "vectorString": "AV:N/AC:M/Au:N/C:P/I:P/A:P", "detail": "fixed-version: Fixed from version 13.0.782.107" }, { "id": "CVE-2011-2795", "status": "Patched", "link": "https://nvd.nist.gov/vuln/detail/CVE-2011-2795", "summary": "Google Chrome before 13.0.782.107 does not prevent calls to functions in other frames, which allows remote attackers to bypass intended access restrictions via a crafted web site, related to a \"cross-frame function leak.\"", "scorev2": "4.3", "scorev3": "0.0", "scorev4": "0.0", "modified": "2026-06-16T23:32:00.000", "vector": "NETWORK", "vectorString": "AV:N/AC:M/Au:N/C:P/I:N/A:N", "detail": "fixed-version: Fixed from version 13.0.782.107" }, { "id": "CVE-2011-2796", "status": "Patched", "link": "https://nvd.nist.gov/vuln/detail/CVE-2011-2796", "summary": "Use-after-free vulnerability in Skia, as used in Google Chrome before 13.0.782.107, allows remote attackers to cause a denial of service or possibly have unspecified other impact via unknown vectors.", "scorev2": "6.8", "scorev3": "0.0", "scorev4": "0.0", "modified": "2026-06-16T23:32:00.000", "vector": "NETWORK", "vectorString": "AV:N/AC:M/Au:N/C:P/I:P/A:P", "detail": "fixed-version: Fixed from version 13.0.782.107" }, { "id": "CVE-2011-2797", "status": "Patched", "link": "https://nvd.nist.gov/vuln/detail/CVE-2011-2797", "summary": "Use-after-free vulnerability in Google Chrome before 13.0.782.107 allows remote attackers to cause a denial of service or possibly have unspecified other impact via vectors related to resource caching.", "scorev2": "6.8", "scorev3": "0.0", "scorev4": "0.0", "modified": "2026-06-16T23:32:01.000", "vector": "NETWORK", "vectorString": "AV:N/AC:M/Au:N/C:P/I:P/A:P", "detail": "fixed-version: Fixed from version 13.0.782.107" }, { "id": "CVE-2011-2798", "status": "Patched", "link": "https://nvd.nist.gov/vuln/detail/CVE-2011-2798", "summary": "Google Chrome before 13.0.782.107 does not properly restrict access to internal schemes, which allows remote attackers to have an unspecified impact via a crafted web site.", "scorev2": "6.8", "scorev3": "0.0", "scorev4": "0.0", "modified": "2026-06-16T23:32:01.000", "vector": "NETWORK", "vectorString": "AV:N/AC:M/Au:N/C:P/I:P/A:P", "detail": "fixed-version: Fixed from version 13.0.782.107" }, { "id": "CVE-2011-2799", "status": "Patched", "link": "https://nvd.nist.gov/vuln/detail/CVE-2011-2799", "summary": "Use-after-free vulnerability in Google Chrome before 13.0.782.107 allows remote attackers to cause a denial of service or possibly have unspecified other impact via vectors related to HTML range handling.", "scorev2": "6.8", "scorev3": "0.0", "scorev4": "0.0", "modified": "2026-06-16T23:32:01.000", "vector": "NETWORK", "vectorString": "AV:N/AC:M/Au:N/C:P/I:P/A:P", "detail": "fixed-version: Fixed from version 13.0.782.107" }, { "id": "CVE-2011-2800", "status": "Patched", "link": "https://nvd.nist.gov/vuln/detail/CVE-2011-2800", "summary": "Google Chrome before 13.0.782.107 allows remote attackers to obtain potentially sensitive information about client-side redirect targets via a crafted web site.", "scorev2": "4.3", "scorev3": "0.0", "scorev4": "0.0", "modified": "2026-06-16T23:32:01.000", "vector": "NETWORK", "vectorString": "AV:N/AC:M/Au:N/C:P/I:N/A:N", "detail": "fixed-version: Fixed from version 13.0.782.107" }, { "id": "CVE-2011-2801", "status": "Patched", "link": "https://nvd.nist.gov/vuln/detail/CVE-2011-2801", "summary": "Use-after-free vulnerability in Google Chrome before 13.0.782.107 allows remote attackers to cause a denial of service or possibly have unspecified other impact via vectors related to the frame loader.", "scorev2": "6.8", "scorev3": "0.0", "scorev4": "0.0", "modified": "2026-06-16T23:32:01.000", "vector": "NETWORK", "vectorString": "AV:N/AC:M/Au:N/C:P/I:P/A:P", "detail": "fixed-version: Fixed from version 13.0.782.107" }, { "id": "CVE-2011-2802", "status": "Patched", "link": "https://nvd.nist.gov/vuln/detail/CVE-2011-2802", "summary": "Google V8, as used in Google Chrome before 13.0.782.107, does not properly perform const lookups, which allows remote attackers to cause a denial of service (application crash) or possibly have unspecified other impact via a crafted web site.", "scorev2": "6.8", "scorev3": "0.0", "scorev4": "0.0", "modified": "2026-06-16T23:32:01.000", "vector": "NETWORK", "vectorString": "AV:N/AC:M/Au:N/C:P/I:P/A:P", "detail": "fixed-version: Fixed from version 13.0.782.107" }, { "id": "CVE-2011-2803", "status": "Patched", "link": "https://nvd.nist.gov/vuln/detail/CVE-2011-2803", "summary": "Google Chrome before 13.0.782.107 does not properly handle Skia paths, which allows remote attackers to cause a denial of service (out-of-bounds read) via unspecified vectors.", "scorev2": "6.8", "scorev3": "0.0", "scorev4": "0.0", "modified": "2026-06-16T23:32:01.000", "vector": "NETWORK", "vectorString": "AV:N/AC:M/Au:N/C:P/I:P/A:P", "detail": "fixed-version: Fixed from version 13.0.782.107" }, { "id": "CVE-2011-2804", "status": "Patched", "link": "https://nvd.nist.gov/vuln/detail/CVE-2011-2804", "summary": "Google Chrome before 13.0.782.107 does not properly handle nested functions in PDF documents, which allows remote attackers to cause a denial of service (application crash) or possibly have unspecified other impact via a crafted document.", "scorev2": "4.3", "scorev3": "0.0", "scorev4": "0.0", "modified": "2026-06-16T23:32:01.000", "vector": "NETWORK", "vectorString": "AV:N/AC:M/Au:N/C:N/I:N/A:P", "detail": "fixed-version: Fixed from version 13.0.782.107" }, { "id": "CVE-2011-2805", "status": "Patched", "link": "https://nvd.nist.gov/vuln/detail/CVE-2011-2805", "summary": "Google Chrome before 13.0.782.107 allows remote attackers to bypass the Same Origin Policy and conduct script injection attacks via unspecified vectors.", "scorev2": "6.8", "scorev3": "0.0", "scorev4": "0.0", "modified": "2026-06-16T23:32:01.000", "vector": "NETWORK", "vectorString": "AV:N/AC:M/Au:N/C:P/I:P/A:P", "detail": "fixed-version: Fixed from version 13.0.782.107" }, { "id": "CVE-2011-2806", "status": "Patched", "link": "https://nvd.nist.gov/vuln/detail/CVE-2011-2806", "summary": "Google Chrome before 13.0.782.215 on Windows does not properly handle vertex data, which allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via unspecified vectors.", "scorev2": "10.0", "scorev3": "0.0", "scorev4": "0.0", "modified": "2026-06-16T23:32:02.000", "vector": "NETWORK", "vectorString": "AV:N/AC:L/Au:N/C:C/I:C/A:C", "detail": "fixed-version: Fixed from version 13.0.782.215" }, { "id": "CVE-2011-2807", "status": "Unpatched", "link": "https://nvd.nist.gov/vuln/detail/CVE-2011-2807", "summary": "Incorrect handling of timer information in Timer.cpp in WebKit in Google Chrome before Blink M13.", "scorev2": "4.3", "scorev3": "6.5", "scorev4": "0.0", "modified": "2026-06-16T23:32:02.000", "vector": "NETWORK", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H", "detail": "no-version-ranges", "description": "Check package version" }, { "id": "CVE-2011-2808", "status": "Unpatched", "link": "https://nvd.nist.gov/vuln/detail/CVE-2011-2808", "summary": "A stale layout root is set as an input element in WebKit in Google Chrome before Blink M13 when a child of a keygen with autofocus is accessed.", "scorev2": "4.3", "scorev3": "6.5", "scorev4": "0.0", "modified": "2026-06-16T23:32:02.000", "vector": "NETWORK", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H", "detail": "no-version-ranges", "description": "Check package version" }, { "id": "CVE-2011-2818", "status": "Patched", "link": "https://nvd.nist.gov/vuln/detail/CVE-2011-2818", "summary": "Use-after-free vulnerability in Google Chrome before 13.0.782.107 allows remote attackers to cause a denial of service or possibly have unspecified other impact via vectors related to display box rendering.", "scorev2": "6.8", "scorev3": "0.0", "scorev4": "0.0", "modified": "2026-06-16T23:32:03.000", "vector": "NETWORK", "vectorString": "AV:N/AC:M/Au:N/C:P/I:P/A:P", "detail": "fixed-version: Fixed from version 13.0.782.107" }, { "id": "CVE-2011-2819", "status": "Patched", "link": "https://nvd.nist.gov/vuln/detail/CVE-2011-2819", "summary": "Google Chrome before 13.0.782.107 allows remote attackers to bypass the Same Origin Policy via vectors related to handling of the base URI.", "scorev2": "6.8", "scorev3": "0.0", "scorev4": "0.0", "modified": "2026-06-16T23:32:03.000", "vector": "NETWORK", "vectorString": "AV:N/AC:M/Au:N/C:P/I:P/A:P", "detail": "fixed-version: Fixed from version 13.0.782.107" }, { "id": "CVE-2011-2821", "status": "Patched", "link": "https://nvd.nist.gov/vuln/detail/CVE-2011-2821", "summary": "Double free vulnerability in libxml2, as used in Google Chrome before 13.0.782.215, allows remote attackers to cause a denial of service or possibly have unspecified other impact via a crafted XPath expression.", "scorev2": "7.5", "scorev3": "0.0", "scorev4": "0.0", "modified": "2026-06-16T23:32:03.000", "vector": "NETWORK", "vectorString": "AV:N/AC:L/Au:N/C:P/I:P/A:P", "detail": "fixed-version: Fixed from version 13.0.782.215" }, { "id": "CVE-2011-2822", "status": "Patched", "link": "https://nvd.nist.gov/vuln/detail/CVE-2011-2822", "summary": "Google Chrome before 13.0.782.215 on Windows does not properly parse URLs located on the command line, which has unspecified impact and attack vectors.", "scorev2": "10.0", "scorev3": "0.0", "scorev4": "0.0", "modified": "2026-06-16T23:32:03.000", "vector": "NETWORK", "vectorString": "AV:N/AC:L/Au:N/C:C/I:C/A:C", "detail": "fixed-version: Fixed from version 13.0.782.215" }, { "id": "CVE-2011-2823", "status": "Patched", "link": "https://nvd.nist.gov/vuln/detail/CVE-2011-2823", "summary": "Use-after-free vulnerability in Google Chrome before 13.0.782.215 allows remote attackers to cause a denial of service or possibly have unspecified other impact via vectors involving a line box.", "scorev2": "7.5", "scorev3": "0.0", "scorev4": "0.0", "modified": "2026-06-16T23:32:03.000", "vector": "NETWORK", "vectorString": "AV:N/AC:L/Au:N/C:P/I:P/A:P", "detail": "fixed-version: Fixed from version 13.0.782.215" }, { "id": "CVE-2011-2824", "status": "Patched", "link": "https://nvd.nist.gov/vuln/detail/CVE-2011-2824", "summary": "Use-after-free vulnerability in Google Chrome before 13.0.782.215 allows remote attackers to cause a denial of service or possibly have unspecified other impact via vectors involving counter nodes.", "scorev2": "7.5", "scorev3": "0.0", "scorev4": "0.0", "modified": "2026-06-16T23:32:03.000", "vector": "NETWORK", "vectorString": "AV:N/AC:L/Au:N/C:P/I:P/A:P", "detail": "fixed-version: Fixed from version 13.0.782.215" }, { "id": "CVE-2011-2825", "status": "Patched", "link": "https://nvd.nist.gov/vuln/detail/CVE-2011-2825", "summary": "Use-after-free vulnerability in Google Chrome before 13.0.782.215 allows remote attackers to cause a denial of service or possibly have unspecified other impact via vectors involving custom fonts.", "scorev2": "9.3", "scorev3": "0.0", "scorev4": "0.0", "modified": "2026-06-16T23:32:04.000", "vector": "NETWORK", "vectorString": "AV:N/AC:M/Au:N/C:C/I:C/A:C", "detail": "fixed-version: Fixed from version 13.0.782.215" }, { "id": "CVE-2011-2826", "status": "Patched", "link": "https://nvd.nist.gov/vuln/detail/CVE-2011-2826", "summary": "Google Chrome before 13.0.782.215 allows remote attackers to bypass the Same Origin Policy via vectors related to empty origins.", "scorev2": "7.5", "scorev3": "0.0", "scorev4": "0.0", "modified": "2026-06-16T23:32:04.000", "vector": "NETWORK", "vectorString": "AV:N/AC:L/Au:N/C:P/I:P/A:P", "detail": "fixed-version: Fixed from version 13.0.782.215" }, { "id": "CVE-2011-2827", "status": "Patched", "link": "https://nvd.nist.gov/vuln/detail/CVE-2011-2827", "summary": "Use-after-free vulnerability in Google Chrome before 13.0.782.215 allows remote attackers to cause a denial of service or possibly have unspecified other impact via vectors related to text searching.", "scorev2": "7.5", "scorev3": "0.0", "scorev4": "0.0", "modified": "2026-06-16T23:32:04.000", "vector": "NETWORK", "vectorString": "AV:N/AC:L/Au:N/C:P/I:P/A:P", "detail": "fixed-version: Fixed from version 13.0.782.215" }, { "id": "CVE-2011-2828", "status": "Patched", "link": "https://nvd.nist.gov/vuln/detail/CVE-2011-2828", "summary": "Google V8, as used in Google Chrome before 13.0.782.215, allows remote attackers to cause a denial of service or possibly have unspecified other impact via unknown vectors that trigger an out-of-bounds write.", "scorev2": "7.5", "scorev3": "0.0", "scorev4": "0.0", "modified": "2026-06-16T23:32:04.000", "vector": "NETWORK", "vectorString": "AV:N/AC:L/Au:N/C:P/I:P/A:P", "detail": "fixed-version: Fixed from version 13.0.782.215" }, { "id": "CVE-2011-2829", "status": "Patched", "link": "https://nvd.nist.gov/vuln/detail/CVE-2011-2829", "summary": "Integer overflow in Google Chrome before 13.0.782.215 on 32-bit platforms allows remote attackers to cause a denial of service or possibly have unspecified other impact via vectors involving uniform arrays.", "scorev2": "7.5", "scorev3": "0.0", "scorev4": "0.0", "modified": "2026-06-16T23:32:04.000", "vector": "NETWORK", "vectorString": "AV:N/AC:L/Au:N/C:P/I:P/A:P", "detail": "fixed-version: Fixed from version 13.0.782.215" }, { "id": "CVE-2011-2830", "status": "Patched", "link": "https://nvd.nist.gov/vuln/detail/CVE-2011-2830", "summary": "Google V8, as used in Google Chrome before 14.0.835.163, does not properly implement script object wrappers, which allows remote attackers to cause a denial of service (application crash) or possibly have unspecified other impact via unknown vectors.", "scorev2": "7.5", "scorev3": "0.0", "scorev4": "0.0", "modified": "2026-06-16T23:32:04.000", "vector": "NETWORK", "vectorString": "AV:N/AC:L/Au:N/C:P/I:P/A:P", "detail": "fixed-version: Fixed from version 14.0.835.163" }, { "id": "CVE-2011-2834", "status": "Patched", "link": "https://nvd.nist.gov/vuln/detail/CVE-2011-2834", "summary": "Double free vulnerability in libxml2, as used in Google Chrome before 14.0.835.163, allows remote attackers to cause a denial of service or possibly have unspecified other impact via vectors related to XPath handling.", "scorev2": "6.8", "scorev3": "0.0", "scorev4": "0.0", "modified": "2026-06-16T23:32:04.000", "vector": "NETWORK", "vectorString": "AV:N/AC:M/Au:N/C:P/I:P/A:P", "detail": "fixed-version: Fixed from version 14.0.835.163" }, { "id": "CVE-2011-2835", "status": "Patched", "link": "https://nvd.nist.gov/vuln/detail/CVE-2011-2835", "summary": "Race condition in Google Chrome before 14.0.835.163 allows attackers to cause a denial of service or possibly have unspecified other impact via vectors related to the certificate cache.", "scorev2": "6.8", "scorev3": "0.0", "scorev4": "0.0", "modified": "2026-06-16T23:32:05.000", "vector": "NETWORK", "vectorString": "AV:N/AC:M/Au:N/C:P/I:P/A:P", "detail": "fixed-version: Fixed from version 14.0.835.163" }, { "id": "CVE-2011-2836", "status": "Patched", "link": "https://nvd.nist.gov/vuln/detail/CVE-2011-2836", "summary": "Google Chrome before 14.0.835.163 does not require Infobar interaction before use of the Windows Media Player plug-in, which makes it easier for remote attackers to have an unspecified impact via crafted Flash content.", "scorev2": "7.5", "scorev3": "0.0", "scorev4": "0.0", "modified": "2026-06-16T23:32:05.000", "vector": "NETWORK", "vectorString": "AV:N/AC:L/Au:N/C:P/I:P/A:P", "detail": "fixed-version: Fixed from version 14.0.835.163" }, { "id": "CVE-2011-2837", "status": "Patched", "link": "https://nvd.nist.gov/vuln/detail/CVE-2011-2837", "summary": "Google Chrome before 14.0.835.163 on Linux does not use the PIC and PIE compiler options for position-independent code, which has unspecified impact and attack vectors.", "scorev2": "7.5", "scorev3": "0.0", "scorev4": "0.0", "modified": "2026-06-16T23:32:05.000", "vector": "NETWORK", "vectorString": "AV:N/AC:L/Au:N/C:P/I:P/A:P", "detail": "fixed-version: Fixed from version 14.0.835.163" }, { "id": "CVE-2011-2838", "status": "Patched", "link": "https://nvd.nist.gov/vuln/detail/CVE-2011-2838", "summary": "Google Chrome before 14.0.835.163 does not properly consider the MIME type during the loading of a plug-in, which has unspecified impact and remote attack vectors.", "scorev2": "7.5", "scorev3": "0.0", "scorev4": "0.0", "modified": "2026-06-16T23:32:05.000", "vector": "NETWORK", "vectorString": "AV:N/AC:L/Au:N/C:P/I:P/A:P", "detail": "fixed-version: Fixed from version 14.0.835.163" }, { "id": "CVE-2011-2839", "status": "Patched", "link": "https://nvd.nist.gov/vuln/detail/CVE-2011-2839", "summary": "The PDF implementation in Google Chrome before 13.0.782.215 on Linux does not properly use the memset library function, which allows remote attackers to cause a denial of service or possibly have unspecified other impact via unknown vectors.", "scorev2": "7.5", "scorev3": "0.0", "scorev4": "0.0", "modified": "2026-06-16T23:32:05.000", "vector": "NETWORK", "vectorString": "AV:N/AC:L/Au:N/C:P/I:P/A:P", "detail": "fixed-version: Fixed from version 13.0.782.215" }, { "id": "CVE-2011-2840", "status": "Patched", "link": "https://nvd.nist.gov/vuln/detail/CVE-2011-2840", "summary": "Google Chrome before 14.0.835.163 allows user-assisted remote attackers to spoof the URL bar via vectors related to \"unusual user interaction.\"", "scorev2": "4.3", "scorev3": "0.0", "scorev4": "0.0", "modified": "2026-06-16T23:32:05.000", "vector": "NETWORK", "vectorString": "AV:N/AC:M/Au:N/C:N/I:P/A:N", "detail": "fixed-version: Fixed from version 14.0.835.163" }, { "id": "CVE-2011-2841", "status": "Patched", "link": "https://nvd.nist.gov/vuln/detail/CVE-2011-2841", "summary": "Google Chrome before 14.0.835.163 does not properly perform garbage collection during the processing of PDF documents, which allows remote attackers to cause a denial of service or possibly have unspecified other impact via a crafted document.", "scorev2": "6.8", "scorev3": "0.0", "scorev4": "0.0", "modified": "2026-06-16T23:32:05.000", "vector": "NETWORK", "vectorString": "AV:N/AC:M/Au:N/C:P/I:P/A:P", "detail": "fixed-version: Fixed from version 14.0.835.163" }, { "id": "CVE-2011-2842", "status": "Patched", "link": "https://nvd.nist.gov/vuln/detail/CVE-2011-2842", "summary": "The installer in Google Chrome before 14.0.835.163 on Mac OS X does not properly handle lock files, which has unspecified impact and attack vectors.", "scorev2": "7.5", "scorev3": "0.0", "scorev4": "0.0", "modified": "2026-06-16T23:32:05.000", "vector": "NETWORK", "vectorString": "AV:N/AC:L/Au:N/C:P/I:P/A:P", "detail": "fixed-version: Fixed from version 14.0.835.163" }, { "id": "CVE-2011-2843", "status": "Patched", "link": "https://nvd.nist.gov/vuln/detail/CVE-2011-2843", "summary": "Google Chrome before 14.0.835.163 does not properly handle media buffers, which allows remote attackers to cause a denial of service (out-of-bounds read) via unspecified vectors.", "scorev2": "5.0", "scorev3": "0.0", "scorev4": "0.0", "modified": "2026-06-16T23:32:06.000", "vector": "NETWORK", "vectorString": "AV:N/AC:L/Au:N/C:N/I:N/A:P", "detail": "fixed-version: Fixed from version 14.0.835.163" }, { "id": "CVE-2011-2844", "status": "Patched", "link": "https://nvd.nist.gov/vuln/detail/CVE-2011-2844", "summary": "Google Chrome before 14.0.835.163 does not properly process MP3 files, which allows remote attackers to cause a denial of service (out-of-bounds read) via unspecified vectors.", "scorev2": "5.0", "scorev3": "0.0", "scorev4": "0.0", "modified": "2026-06-16T23:32:06.000", "vector": "NETWORK", "vectorString": "AV:N/AC:L/Au:N/C:N/I:N/A:P", "detail": "fixed-version: Fixed from version 14.0.835.163" }, { "id": "CVE-2011-2845", "status": "Patched", "link": "https://nvd.nist.gov/vuln/detail/CVE-2011-2845", "summary": "Google Chrome before 15.0.874.102 does not properly handle history data, which allows user-assisted remote attackers to spoof the URL bar via unspecified vectors.", "scorev2": "4.3", "scorev3": "0.0", "scorev4": "0.0", "modified": "2026-06-16T23:32:06.000", "vector": "NETWORK", "vectorString": "AV:N/AC:M/Au:N/C:N/I:P/A:N", "detail": "fixed-version: Fixed from version 15.0.874.102" }, { "id": "CVE-2011-2846", "status": "Patched", "link": "https://nvd.nist.gov/vuln/detail/CVE-2011-2846", "summary": "Use-after-free vulnerability in Google Chrome before 14.0.835.163 allows remote attackers to cause a denial of service or possibly have unspecified other impact via vectors related to unload event handling.", "scorev2": "6.8", "scorev3": "0.0", "scorev4": "0.0", "modified": "2026-06-16T23:32:06.000", "vector": "NETWORK", "vectorString": "AV:N/AC:M/Au:N/C:P/I:P/A:P", "detail": "fixed-version: Fixed from version 14.0.835.163" }, { "id": "CVE-2011-2847", "status": "Patched", "link": "https://nvd.nist.gov/vuln/detail/CVE-2011-2847", "summary": "Use-after-free vulnerability in the document loader in Google Chrome before 14.0.835.163 allows remote attackers to cause a denial of service or possibly have unspecified other impact via a crafted document.", "scorev2": "6.8", "scorev3": "0.0", "scorev4": "0.0", "modified": "2026-06-16T23:32:06.000", "vector": "NETWORK", "vectorString": "AV:N/AC:M/Au:N/C:P/I:P/A:P", "detail": "fixed-version: Fixed from version 14.0.835.163" }, { "id": "CVE-2011-2848", "status": "Patched", "link": "https://nvd.nist.gov/vuln/detail/CVE-2011-2848", "summary": "Google Chrome before 14.0.835.163 allows user-assisted remote attackers to spoof the URL bar via vectors related to the forward button.", "scorev2": "4.3", "scorev3": "0.0", "scorev4": "0.0", "modified": "2026-06-16T23:32:06.000", "vector": "NETWORK", "vectorString": "AV:N/AC:M/Au:N/C:N/I:P/A:N", "detail": "fixed-version: Fixed from version 14.0.835.163" }, { "id": "CVE-2011-2849", "status": "Patched", "link": "https://nvd.nist.gov/vuln/detail/CVE-2011-2849", "summary": "The WebSockets implementation in Google Chrome before 14.0.835.163 allows remote attackers to cause a denial of service (NULL pointer dereference and application crash) via unspecified vectors.", "scorev2": "4.3", "scorev3": "0.0", "scorev4": "0.0", "modified": "2026-06-16T23:32:06.000", "vector": "NETWORK", "vectorString": "AV:N/AC:M/Au:N/C:N/I:N/A:P", "detail": "fixed-version: Fixed from version 14.0.835.163" }, { "id": "CVE-2011-2850", "status": "Patched", "link": "https://nvd.nist.gov/vuln/detail/CVE-2011-2850", "summary": "Google Chrome before 14.0.835.163 does not properly handle Khmer characters, which allows remote attackers to cause a denial of service (out-of-bounds read) via unspecified vectors.", "scorev2": "5.0", "scorev3": "0.0", "scorev4": "0.0", "modified": "2026-06-16T23:32:07.000", "vector": "NETWORK", "vectorString": "AV:N/AC:L/Au:N/C:N/I:N/A:P", "detail": "fixed-version: Fixed from version 14.0.835.163" }, { "id": "CVE-2011-2851", "status": "Patched", "link": "https://nvd.nist.gov/vuln/detail/CVE-2011-2851", "summary": "Google Chrome before 14.0.835.163 does not properly handle video, which allows remote attackers to cause a denial of service (out-of-bounds read) via unspecified vectors.", "scorev2": "5.0", "scorev3": "0.0", "scorev4": "0.0", "modified": "2026-06-16T23:32:07.000", "vector": "NETWORK", "vectorString": "AV:N/AC:L/Au:N/C:N/I:N/A:P", "detail": "fixed-version: Fixed from version 14.0.835.163" }, { "id": "CVE-2011-2852", "status": "Patched", "link": "https://nvd.nist.gov/vuln/detail/CVE-2011-2852", "summary": "Off-by-one error in Google V8, as used in Google Chrome before 14.0.835.163, allows remote attackers to cause a denial of service or possibly have unspecified other impact via unknown vectors.", "scorev2": "6.8", "scorev3": "0.0", "scorev4": "0.0", "modified": "2026-06-16T23:32:07.000", "vector": "NETWORK", "vectorString": "AV:N/AC:M/Au:N/C:P/I:P/A:P", "detail": "fixed-version: Fixed from version 14.0.835.163" }, { "id": "CVE-2011-2853", "status": "Patched", "link": "https://nvd.nist.gov/vuln/detail/CVE-2011-2853", "summary": "Use-after-free vulnerability in Google Chrome before 14.0.835.163 allows remote attackers to cause a denial of service or possibly have unspecified other impact via vectors related to plug-in handling.", "scorev2": "7.5", "scorev3": "0.0", "scorev4": "0.0", "modified": "2026-06-16T23:32:07.000", "vector": "NETWORK", "vectorString": "AV:N/AC:L/Au:N/C:P/I:P/A:P", "detail": "fixed-version: Fixed from version 14.0.835.163" }, { "id": "CVE-2011-2854", "status": "Patched", "link": "https://nvd.nist.gov/vuln/detail/CVE-2011-2854", "summary": "Use-after-free vulnerability in Google Chrome before 14.0.835.163 allows remote attackers to cause a denial of service or possibly have unspecified other impact via vectors related to \"ruby / table style handing.\"", "scorev2": "6.8", "scorev3": "0.0", "scorev4": "0.0", "modified": "2026-06-16T23:32:07.000", "vector": "NETWORK", "vectorString": "AV:N/AC:M/Au:N/C:P/I:P/A:P", "detail": "fixed-version: Fixed from version 14.0.835.163" }, { "id": "CVE-2011-2855", "status": "Patched", "link": "https://nvd.nist.gov/vuln/detail/CVE-2011-2855", "summary": "Google Chrome before 14.0.835.163 does not properly handle Cascading Style Sheets (CSS) token sequences, which allows remote attackers to cause a denial of service or possibly have unspecified other impact via unknown vectors that lead to a \"stale node.\"", "scorev2": "6.8", "scorev3": "0.0", "scorev4": "0.0", "modified": "2026-06-16T23:32:07.000", "vector": "NETWORK", "vectorString": "AV:N/AC:M/Au:N/C:P/I:P/A:P", "detail": "fixed-version: Fixed from version 14.0.835.163" }, { "id": "CVE-2011-2856", "status": "Patched", "link": "https://nvd.nist.gov/vuln/detail/CVE-2011-2856", "summary": "Google V8, as used in Google Chrome before 14.0.835.163, allows remote attackers to bypass the Same Origin Policy via unspecified vectors.", "scorev2": "7.5", "scorev3": "0.0", "scorev4": "0.0", "modified": "2026-06-16T23:32:07.000", "vector": "NETWORK", "vectorString": "AV:N/AC:L/Au:N/C:P/I:P/A:P", "detail": "fixed-version: Fixed from version 14.0.835.163" }, { "id": "CVE-2011-2857", "status": "Patched", "link": "https://nvd.nist.gov/vuln/detail/CVE-2011-2857", "summary": "Use-after-free vulnerability in Google Chrome before 14.0.835.163 allows remote attackers to cause a denial of service or possibly have unspecified other impact via vectors related to the focus controller.", "scorev2": "6.8", "scorev3": "0.0", "scorev4": "0.0", "modified": "2026-06-16T23:32:07.000", "vector": "NETWORK", "vectorString": "AV:N/AC:M/Au:N/C:P/I:P/A:P", "detail": "fixed-version: Fixed from version 14.0.835.163" }, { "id": "CVE-2011-2858", "status": "Patched", "link": "https://nvd.nist.gov/vuln/detail/CVE-2011-2858", "summary": "Google Chrome before 14.0.835.163 does not properly handle triangle arrays, which allows remote attackers to cause a denial of service (out-of-bounds read) via unspecified vectors.", "scorev2": "5.0", "scorev3": "0.0", "scorev4": "0.0", "modified": "2026-06-16T23:32:07.000", "vector": "NETWORK", "vectorString": "AV:N/AC:L/Au:N/C:N/I:N/A:P", "detail": "fixed-version: Fixed from version 14.0.835.163" }, { "id": "CVE-2011-2859", "status": "Patched", "link": "https://nvd.nist.gov/vuln/detail/CVE-2011-2859", "summary": "Google Chrome before 14.0.835.163 uses incorrect permissions for non-gallery pages, which has unspecified impact and attack vectors.", "scorev2": "6.8", "scorev3": "0.0", "scorev4": "0.0", "modified": "2026-06-16T23:32:08.000", "vector": "NETWORK", "vectorString": "AV:N/AC:M/Au:N/C:P/I:P/A:P", "detail": "fixed-version: Fixed from version 14.0.835.163" }, { "id": "CVE-2011-2860", "status": "Patched", "link": "https://nvd.nist.gov/vuln/detail/CVE-2011-2860", "summary": "Use-after-free vulnerability in Google Chrome before 14.0.835.163 allows remote attackers to cause a denial of service or possibly have unspecified other impact via vectors related to table styles.", "scorev2": "7.5", "scorev3": "0.0", "scorev4": "0.0", "modified": "2026-06-16T23:32:08.000", "vector": "NETWORK", "vectorString": "AV:N/AC:L/Au:N/C:P/I:P/A:P", "detail": "fixed-version: Fixed from version 14.0.835.163" }, { "id": "CVE-2011-2861", "status": "Patched", "link": "https://nvd.nist.gov/vuln/detail/CVE-2011-2861", "summary": "Google Chrome before 14.0.835.163 does not properly handle strings in PDF documents, which allows remote attackers to have an unspecified impact via a crafted document that triggers an incorrect read operation.", "scorev2": "6.8", "scorev3": "0.0", "scorev4": "0.0", "modified": "2026-06-16T23:32:08.000", "vector": "NETWORK", "vectorString": "AV:N/AC:M/Au:N/C:P/I:P/A:P", "detail": "fixed-version: Fixed from version 14.0.835.163" }, { "id": "CVE-2011-2862", "status": "Patched", "link": "https://nvd.nist.gov/vuln/detail/CVE-2011-2862", "summary": "Google V8, as used in Google Chrome before 14.0.835.163, does not properly restrict access to built-in objects, which has unspecified impact and remote attack vectors.", "scorev2": "7.5", "scorev3": "0.0", "scorev4": "0.0", "modified": "2026-06-16T23:32:08.000", "vector": "NETWORK", "vectorString": "AV:N/AC:L/Au:N/C:P/I:P/A:P", "detail": "fixed-version: Fixed from version 14.0.835.163" }, { "id": "CVE-2011-2863", "status": "Patched", "link": "https://nvd.nist.gov/vuln/detail/CVE-2011-2863", "summary": "Insufficient policy enforcement in V8 in Google Chrome prior to 14.0.0.0 allowed a remote attacker to obtain potentially sensitive information from process memory via a crafted HTML page.", "scorev2": "4.3", "scorev3": "6.5", "scorev4": "0.0", "modified": "2026-06-16T23:32:08.000", "vector": "NETWORK", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N", "detail": "fixed-version: Fixed from version 14.0.0.0" }, { "id": "CVE-2011-2864", "status": "Patched", "link": "https://nvd.nist.gov/vuln/detail/CVE-2011-2864", "summary": "Google Chrome before 14.0.835.163 does not properly handle Tibetan characters, which allows remote attackers to cause a denial of service (out-of-bounds read) via unspecified vectors.", "scorev2": "5.0", "scorev3": "0.0", "scorev4": "0.0", "modified": "2026-06-16T23:32:08.000", "vector": "NETWORK", "vectorString": "AV:N/AC:L/Au:N/C:N/I:N/A:P", "detail": "fixed-version: Fixed from version 14.0.835.163" }, { "id": "CVE-2011-2874", "status": "Patched", "link": "https://nvd.nist.gov/vuln/detail/CVE-2011-2874", "summary": "Google Chrome before 14.0.835.163 does not perform an expected pin operation for a self-signed certificate during a session, which has unspecified impact and remote attack vectors.", "scorev2": "6.8", "scorev3": "0.0", "scorev4": "0.0", "modified": "2026-06-16T23:32:09.000", "vector": "NETWORK", "vectorString": "AV:N/AC:M/Au:N/C:P/I:P/A:P", "detail": "fixed-version: Fixed from version 14.0.835.163" }, { "id": "CVE-2011-2875", "status": "Patched", "link": "https://nvd.nist.gov/vuln/detail/CVE-2011-2875", "summary": "Google V8, as used in Google Chrome before 14.0.835.163, does not properly perform object sealing, which allows remote attackers to cause a denial of service or possibly have unspecified other impact via vectors that leverage \"type confusion.\"", "scorev2": "6.8", "scorev3": "0.0", "scorev4": "0.0", "modified": "2026-06-16T23:32:09.000", "vector": "NETWORK", "vectorString": "AV:N/AC:M/Au:N/C:P/I:P/A:P", "detail": "fixed-version: Fixed from version 14.0.835.163" }, { "id": "CVE-2011-2876", "status": "Patched", "link": "https://nvd.nist.gov/vuln/detail/CVE-2011-2876", "summary": "Use-after-free vulnerability in Google Chrome before 14.0.835.202 allows remote attackers to cause a denial of service or possibly have unspecified other impact via vectors involving a text line box.", "scorev2": "6.8", "scorev3": "0.0", "scorev4": "0.0", "modified": "2026-06-16T23:32:09.000", "vector": "NETWORK", "vectorString": "AV:N/AC:M/Au:N/C:P/I:P/A:P", "detail": "fixed-version: Fixed from version 14.0.835.202" }, { "id": "CVE-2011-2877", "status": "Patched", "link": "https://nvd.nist.gov/vuln/detail/CVE-2011-2877", "summary": "Google Chrome before 14.0.835.202 does not properly handle SVG text, which allows remote attackers to cause a denial of service or possibly have unspecified other impact via unknown vectors that lead to \"stale font.\"", "scorev2": "6.8", "scorev3": "0.0", "scorev4": "0.0", "modified": "2026-06-16T23:32:10.000", "vector": "NETWORK", "vectorString": "AV:N/AC:M/Au:N/C:P/I:P/A:P", "detail": "fixed-version: Fixed from version 14.0.835.202" }, { "id": "CVE-2011-2878", "status": "Patched", "link": "https://nvd.nist.gov/vuln/detail/CVE-2011-2878", "summary": "Google Chrome before 14.0.835.202 does not properly restrict access to the window prototype, which allows remote attackers to bypass the Same Origin Policy via unspecified vectors.", "scorev2": "7.5", "scorev3": "0.0", "scorev4": "0.0", "modified": "2026-06-16T23:32:10.000", "vector": "NETWORK", "vectorString": "AV:N/AC:L/Au:N/C:P/I:P/A:P", "detail": "fixed-version: Fixed from version 14.0.835.202" }, { "id": "CVE-2011-2879", "status": "Patched", "link": "https://nvd.nist.gov/vuln/detail/CVE-2011-2879", "summary": "Google Chrome before 14.0.835.202 does not properly consider object lifetimes and thread safety during the handling of audio nodes, which allows remote attackers to cause a denial of service or possibly have unspecified other impact via unknown vectors.", "scorev2": "6.8", "scorev3": "0.0", "scorev4": "0.0", "modified": "2026-06-16T23:32:10.000", "vector": "NETWORK", "vectorString": "AV:N/AC:M/Au:N/C:P/I:P/A:P", "detail": "fixed-version: Fixed from version 14.0.835.202" }, { "id": "CVE-2011-2880", "status": "Patched", "link": "https://nvd.nist.gov/vuln/detail/CVE-2011-2880", "summary": "Use-after-free vulnerability in Google Chrome before 14.0.835.202 allows remote attackers to cause a denial of service or possibly have unspecified other impact via vectors related to the Google V8 bindings.", "scorev2": "6.8", "scorev3": "0.0", "scorev4": "0.0", "modified": "2026-06-16T23:32:10.000", "vector": "NETWORK", "vectorString": "AV:N/AC:M/Au:N/C:P/I:P/A:P", "detail": "fixed-version: Fixed from version 14.0.835.202" }, { "id": "CVE-2011-2881", "status": "Patched", "link": "https://nvd.nist.gov/vuln/detail/CVE-2011-2881", "summary": "Google Chrome before 14.0.835.202 does not properly handle Google V8 hidden objects, which allows remote attackers to cause a denial of service (memory corruption) or possibly have unspecified other impact via crafted JavaScript code.", "scorev2": "6.8", "scorev3": "0.0", "scorev4": "0.0", "modified": "2026-06-16T23:32:10.000", "vector": "NETWORK", "vectorString": "AV:N/AC:M/Au:N/C:P/I:P/A:P", "detail": "fixed-version: Fixed from version 14.0.835.202" }, { "id": "CVE-2011-3015", "status": "Patched", "link": "https://nvd.nist.gov/vuln/detail/CVE-2011-3015", "summary": "Multiple integer overflows in the PDF codecs in Google Chrome before 17.0.963.56 allow remote attackers to cause a denial of service or possibly have unspecified other impact via unknown vectors.", "scorev2": "6.8", "scorev3": "0.0", "scorev4": "0.0", "modified": "2026-06-16T23:32:26.000", "vector": "NETWORK", "vectorString": "AV:N/AC:M/Au:N/C:P/I:P/A:P", "detail": "fixed-version: Fixed from version 17.0.963.56" }, { "id": "CVE-2011-3016", "status": "Patched", "link": "https://nvd.nist.gov/vuln/detail/CVE-2011-3016", "summary": "Use-after-free vulnerability in Google Chrome before 17.0.963.56 allows remote attackers to cause a denial of service or possibly have unspecified other impact via vectors involving counter nodes, related to a \"read-after-free\" issue.", "scorev2": "6.8", "scorev3": "0.0", "scorev4": "0.0", "modified": "2026-06-16T23:32:26.000", "vector": "NETWORK", "vectorString": "AV:N/AC:M/Au:N/C:P/I:P/A:P", "detail": "fixed-version: Fixed from version 17.0.963.56" }, { "id": "CVE-2011-3017", "status": "Patched", "link": "https://nvd.nist.gov/vuln/detail/CVE-2011-3017", "summary": "Use-after-free vulnerability in Google Chrome before 17.0.963.56 allows remote attackers to cause a denial of service or possibly have unspecified other impact via vectors related to database handling.", "scorev2": "6.8", "scorev3": "0.0", "scorev4": "0.0", "modified": "2026-06-16T23:32:26.000", "vector": "NETWORK", "vectorString": "AV:N/AC:M/Au:N/C:P/I:P/A:P", "detail": "fixed-version: Fixed from version 17.0.963.56" }, { "id": "CVE-2011-3018", "status": "Patched", "link": "https://nvd.nist.gov/vuln/detail/CVE-2011-3018", "summary": "Heap-based buffer overflow in Google Chrome before 17.0.963.56 allows remote attackers to cause a denial of service or possibly have unspecified other impact via vectors related to path rendering.", "scorev2": "7.5", "scorev3": "0.0", "scorev4": "0.0", "modified": "2026-06-16T23:32:26.000", "vector": "NETWORK", "vectorString": "AV:N/AC:L/Au:N/C:P/I:P/A:P", "detail": "fixed-version: Fixed from version 17.0.963.56" }, { "id": "CVE-2011-3019", "status": "Patched", "link": "https://nvd.nist.gov/vuln/detail/CVE-2011-3019", "summary": "Heap-based buffer overflow in Google Chrome before 17.0.963.56 allows remote attackers to cause a denial of service or possibly have unspecified other impact via a crafted Matroska video (aka MKV) file.", "scorev2": "6.8", "scorev3": "0.0", "scorev4": "0.0", "modified": "2026-06-16T23:32:26.000", "vector": "NETWORK", "vectorString": "AV:N/AC:M/Au:N/C:P/I:P/A:P", "detail": "fixed-version: Fixed from version 17.0.963.56" }, { "id": "CVE-2011-3020", "status": "Patched", "link": "https://nvd.nist.gov/vuln/detail/CVE-2011-3020", "summary": "Unspecified vulnerability in the Native Client validator implementation in Google Chrome before 17.0.963.56 has unknown impact and remote attack vectors.", "scorev2": "6.8", "scorev3": "0.0", "scorev4": "0.0", "modified": "2026-06-16T23:32:26.000", "vector": "NETWORK", "vectorString": "AV:N/AC:M/Au:N/C:P/I:P/A:P", "detail": "fixed-version: Fixed from version 17.0.963.56" }, { "id": "CVE-2011-3021", "status": "Patched", "link": "https://nvd.nist.gov/vuln/detail/CVE-2011-3021", "summary": "Use-after-free vulnerability in Google Chrome before 17.0.963.56 allows remote attackers to cause a denial of service or possibly have unspecified other impact via vectors related to subframe loading.", "scorev2": "7.5", "scorev3": "0.0", "scorev4": "0.0", "modified": "2026-06-16T23:32:26.000", "vector": "NETWORK", "vectorString": "AV:N/AC:L/Au:N/C:P/I:P/A:P", "detail": "fixed-version: Fixed from version 17.0.963.56" }, { "id": "CVE-2011-3022", "status": "Patched", "link": "https://nvd.nist.gov/vuln/detail/CVE-2011-3022", "summary": "translate/translate_manager.cc in Google Chrome before 17.0.963.56 and 19.x before 19.0.1036.7 uses an HTTP session to exchange data for translation, which allows remote attackers to obtain sensitive information by sniffing the network.", "scorev2": "5.0", "scorev3": "0.0", "scorev4": "0.0", "modified": "2026-06-16T23:32:26.000", "vector": "NETWORK", "vectorString": "AV:N/AC:L/Au:N/C:P/I:N/A:N", "detail": "fixed-version: Fixed from version 19.0.1036.7" }, { "id": "CVE-2011-3023", "status": "Patched", "link": "https://nvd.nist.gov/vuln/detail/CVE-2011-3023", "summary": "Use-after-free vulnerability in Google Chrome before 17.0.963.56 allows user-assisted remote attackers to cause a denial of service or possibly have unspecified other impact via vectors related to drag-and-drop operations.", "scorev2": "6.8", "scorev3": "0.0", "scorev4": "0.0", "modified": "2026-06-16T23:32:27.000", "vector": "NETWORK", "vectorString": "AV:N/AC:M/Au:N/C:P/I:P/A:P", "detail": "fixed-version: Fixed from version 17.0.963.56" }, { "id": "CVE-2011-3024", "status": "Patched", "link": "https://nvd.nist.gov/vuln/detail/CVE-2011-3024", "summary": "Google Chrome before 17.0.963.56 allows remote attackers to cause a denial of service (application crash) via an empty X.509 certificate.", "scorev2": "4.3", "scorev3": "0.0", "scorev4": "0.0", "modified": "2026-06-16T23:32:27.000", "vector": "NETWORK", "vectorString": "AV:N/AC:M/Au:N/C:N/I:N/A:P", "detail": "fixed-version: Fixed from version 17.0.963.56" }, { "id": "CVE-2011-3025", "status": "Patched", "link": "https://nvd.nist.gov/vuln/detail/CVE-2011-3025", "summary": "Google Chrome before 17.0.963.56 does not properly parse H.264 data, which allows remote attackers to cause a denial of service (out-of-bounds read) via unspecified vectors.", "scorev2": "4.3", "scorev3": "0.0", "scorev4": "0.0", "modified": "2026-06-16T23:32:27.000", "vector": "NETWORK", "vectorString": "AV:N/AC:M/Au:N/C:N/I:N/A:P", "detail": "fixed-version: Fixed from version 17.0.963.56" }, { "id": "CVE-2011-3026", "status": "Patched", "link": "https://nvd.nist.gov/vuln/detail/CVE-2011-3026", "summary": "Integer overflow in libpng, as used in Google Chrome before 17.0.963.56, allows remote attackers to cause a denial of service or possibly have unspecified other impact via unknown vectors that trigger an integer truncation.", "scorev2": "6.8", "scorev3": "0.0", "scorev4": "0.0", "modified": "2026-06-16T23:32:27.000", "vector": "NETWORK", "vectorString": "AV:N/AC:M/Au:N/C:P/I:P/A:P", "detail": "fixed-version: Fixed from version 17.0.963.56" }, { "id": "CVE-2011-3027", "status": "Patched", "link": "https://nvd.nist.gov/vuln/detail/CVE-2011-3027", "summary": "Google Chrome before 17.0.963.56 does not properly perform a cast of an unspecified variable during handling of columns, which allows remote attackers to cause a denial of service or possibly have unknown other impact via a crafted document.", "scorev2": "4.3", "scorev3": "0.0", "scorev4": "0.0", "modified": "2026-06-16T23:32:27.000", "vector": "NETWORK", "vectorString": "AV:N/AC:M/Au:N/C:N/I:N/A:P", "detail": "fixed-version: Fixed from version 17.0.963.56" }, { "id": "CVE-2011-3031", "status": "Patched", "link": "https://nvd.nist.gov/vuln/detail/CVE-2011-3031", "summary": "Use-after-free vulnerability in the element wrapper in Google V8, as used in Google Chrome before 17.0.963.65, allows remote attackers to cause a denial of service or possibly have unspecified other impact via unknown vectors.", "scorev2": "6.8", "scorev3": "0.0", "scorev4": "0.0", "modified": "2026-06-16T23:32:27.000", "vector": "NETWORK", "vectorString": "AV:N/AC:M/Au:N/C:P/I:P/A:P", "detail": "fixed-version: Fixed from version 17.0.963.65" }, { "id": "CVE-2011-3032", "status": "Patched", "link": "https://nvd.nist.gov/vuln/detail/CVE-2011-3032", "summary": "Use-after-free vulnerability in Google Chrome before 17.0.963.65 allows remote attackers to cause a denial of service or possibly have unspecified other impact via vectors related to the handling of SVG values.", "scorev2": "6.8", "scorev3": "0.0", "scorev4": "0.0", "modified": "2026-06-16T23:32:27.000", "vector": "NETWORK", "vectorString": "AV:N/AC:M/Au:N/C:P/I:P/A:P", "detail": "fixed-version: Fixed from version 17.0.963.65" }, { "id": "CVE-2011-3033", "status": "Patched", "link": "https://nvd.nist.gov/vuln/detail/CVE-2011-3033", "summary": "Buffer overflow in Skia, as used in Google Chrome before 17.0.963.65, allows remote attackers to cause a denial of service or possibly have unspecified other impact via unknown vectors.", "scorev2": "7.5", "scorev3": "0.0", "scorev4": "0.0", "modified": "2026-06-16T23:32:28.000", "vector": "NETWORK", "vectorString": "AV:N/AC:L/Au:N/C:P/I:P/A:P", "detail": "fixed-version: Fixed from version 17.0.963.65" }, { "id": "CVE-2011-3034", "status": "Patched", "link": "https://nvd.nist.gov/vuln/detail/CVE-2011-3034", "summary": "Use-after-free vulnerability in Google Chrome before 17.0.963.65 allows remote attackers to cause a denial of service or possibly have unspecified other impact via vectors involving an SVG document.", "scorev2": "6.8", "scorev3": "0.0", "scorev4": "0.0", "modified": "2026-06-16T23:32:28.000", "vector": "NETWORK", "vectorString": "AV:N/AC:M/Au:N/C:P/I:P/A:P", "detail": "fixed-version: Fixed from version 17.0.963.65" }, { "id": "CVE-2011-3035", "status": "Patched", "link": "https://nvd.nist.gov/vuln/detail/CVE-2011-3035", "summary": "Use-after-free vulnerability in Google Chrome before 17.0.963.65 allows remote attackers to cause a denial of service or possibly have unspecified other impact via vectors involving SVG use elements.", "scorev2": "6.8", "scorev3": "0.0", "scorev4": "0.0", "modified": "2026-06-16T23:32:28.000", "vector": "NETWORK", "vectorString": "AV:N/AC:M/Au:N/C:P/I:P/A:P", "detail": "fixed-version: Fixed from version 17.0.963.65" }, { "id": "CVE-2011-3036", "status": "Patched", "link": "https://nvd.nist.gov/vuln/detail/CVE-2011-3036", "summary": "Google Chrome before 17.0.963.65 does not properly perform a cast of an unspecified variable during handling of line boxes, which allows remote attackers to cause a denial of service or possibly have unknown other impact via a crafted document.", "scorev2": "6.8", "scorev3": "0.0", "scorev4": "0.0", "modified": "2026-06-16T23:32:28.000", "vector": "NETWORK", "vectorString": "AV:N/AC:M/Au:N/C:P/I:P/A:P", "detail": "fixed-version: Fixed from version 17.0.963.65" }, { "id": "CVE-2011-3037", "status": "Patched", "link": "https://nvd.nist.gov/vuln/detail/CVE-2011-3037", "summary": "Google Chrome before 17.0.963.65 does not properly perform casts of unspecified variables during the splitting of anonymous blocks, which allows remote attackers to cause a denial of service or possibly have unknown other impact via a crafted document.", "scorev2": "6.8", "scorev3": "0.0", "scorev4": "0.0", "modified": "2026-06-16T23:32:28.000", "vector": "NETWORK", "vectorString": "AV:N/AC:M/Au:N/C:P/I:P/A:P", "detail": "fixed-version: Fixed from version 17.0.963.65" }, { "id": "CVE-2011-3038", "status": "Patched", "link": "https://nvd.nist.gov/vuln/detail/CVE-2011-3038", "summary": "Use-after-free vulnerability in Google Chrome before 17.0.963.65 allows remote attackers to cause a denial of service or possibly have unspecified other impact via vectors related to multi-column handling.", "scorev2": "6.8", "scorev3": "0.0", "scorev4": "0.0", "modified": "2026-06-16T23:32:28.000", "vector": "NETWORK", "vectorString": "AV:N/AC:M/Au:N/C:P/I:P/A:P", "detail": "fixed-version: Fixed from version 17.0.963.65" }, { "id": "CVE-2011-3039", "status": "Patched", "link": "https://nvd.nist.gov/vuln/detail/CVE-2011-3039", "summary": "Use-after-free vulnerability in Google Chrome before 17.0.963.65 allows remote attackers to cause a denial of service or possibly have unspecified other impact via vectors related to quote handling.", "scorev2": "6.8", "scorev3": "0.0", "scorev4": "0.0", "modified": "2026-06-16T23:32:29.000", "vector": "NETWORK", "vectorString": "AV:N/AC:M/Au:N/C:P/I:P/A:P", "detail": "fixed-version: Fixed from version 17.0.963.65" }, { "id": "CVE-2011-3040", "status": "Patched", "link": "https://nvd.nist.gov/vuln/detail/CVE-2011-3040", "summary": "Google Chrome before 17.0.963.65 does not properly handle text, which allows remote attackers to cause a denial of service (out-of-bounds read) via a crafted document.", "scorev2": "4.3", "scorev3": "0.0", "scorev4": "0.0", "modified": "2026-06-16T23:32:29.000", "vector": "NETWORK", "vectorString": "AV:N/AC:M/Au:N/C:N/I:N/A:P", "detail": "fixed-version: Fixed from version 17.0.963.65" }, { "id": "CVE-2011-3041", "status": "Patched", "link": "https://nvd.nist.gov/vuln/detail/CVE-2011-3041", "summary": "Use-after-free vulnerability in Google Chrome before 17.0.963.65 allows remote attackers to cause a denial of service or possibly have unspecified other impact via vectors related to the handling of class attributes.", "scorev2": "6.8", "scorev3": "0.0", "scorev4": "0.0", "modified": "2026-06-16T23:32:29.000", "vector": "NETWORK", "vectorString": "AV:N/AC:M/Au:N/C:P/I:P/A:P", "detail": "fixed-version: Fixed from version 17.0.963.65" }, { "id": "CVE-2011-3042", "status": "Patched", "link": "https://nvd.nist.gov/vuln/detail/CVE-2011-3042", "summary": "Use-after-free vulnerability in Google Chrome before 17.0.963.65 allows remote attackers to cause a denial of service or possibly have unspecified other impact via vectors related to the handling of table sections.", "scorev2": "6.8", "scorev3": "0.0", "scorev4": "0.0", "modified": "2026-06-16T23:32:29.000", "vector": "NETWORK", "vectorString": "AV:N/AC:M/Au:N/C:P/I:P/A:P", "detail": "fixed-version: Fixed from version 17.0.963.65" }, { "id": "CVE-2011-3043", "status": "Patched", "link": "https://nvd.nist.gov/vuln/detail/CVE-2011-3043", "summary": "Use-after-free vulnerability in Google Chrome before 17.0.963.65 allows remote attackers to cause a denial of service or possibly have unspecified other impact via vectors involving a flexbox (aka flexible box) in conjunction with the floating of elements.", "scorev2": "6.8", "scorev3": "0.0", "scorev4": "0.0", "modified": "2026-06-16T23:32:29.000", "vector": "NETWORK", "vectorString": "AV:N/AC:M/Au:N/C:P/I:P/A:P", "detail": "fixed-version: Fixed from version 17.0.963.65" }, { "id": "CVE-2011-3044", "status": "Patched", "link": "https://nvd.nist.gov/vuln/detail/CVE-2011-3044", "summary": "Use-after-free vulnerability in Google Chrome before 17.0.963.65 allows remote attackers to cause a denial of service or possibly have unspecified other impact via vectors involving SVG animation elements.", "scorev2": "6.8", "scorev3": "0.0", "scorev4": "0.0", "modified": "2026-06-16T23:32:29.000", "vector": "NETWORK", "vectorString": "AV:N/AC:M/Au:N/C:P/I:P/A:P", "detail": "fixed-version: Fixed from version 17.0.963.65" }, { "id": "CVE-2011-3045", "status": "Patched", "link": "https://nvd.nist.gov/vuln/detail/CVE-2011-3045", "summary": "Integer signedness error in the png_inflate function in pngrutil.c in libpng before 1.4.10beta01, as used in Google Chrome before 17.0.963.83 and other products, allows remote attackers to cause a denial of service (application crash) or possibly execute arbitrary code via a crafted PNG file, a different vulnerability than CVE-2011-3026.", "scorev2": "6.8", "scorev3": "8.8", "scorev4": "0.0", "modified": "2026-06-16T23:32:30.000", "vector": "NETWORK", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H", "detail": "fixed-version: Fixed from version 17.0.963.83" }, { "id": "CVE-2011-3046", "status": "Patched", "link": "https://nvd.nist.gov/vuln/detail/CVE-2011-3046", "summary": "The extension subsystem in Google Chrome before 17.0.963.78 does not properly handle history navigation, which allows remote attackers to execute arbitrary code by leveraging a \"Universal XSS (UXSS)\" issue.", "scorev2": "10.0", "scorev3": "0.0", "scorev4": "0.0", "modified": "2026-06-16T23:32:30.000", "vector": "NETWORK", "vectorString": "AV:N/AC:L/Au:N/C:C/I:C/A:C", "detail": "fixed-version: Fixed from version 17.0.963.78" }, { "id": "CVE-2011-3047", "status": "Patched", "link": "https://nvd.nist.gov/vuln/detail/CVE-2011-3047", "summary": "The GPU process in Google Chrome before 17.0.963.79 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) by leveraging an error in the plug-in loading mechanism.", "scorev2": "9.3", "scorev3": "0.0", "scorev4": "0.0", "modified": "2026-06-16T23:32:30.000", "vector": "NETWORK", "vectorString": "AV:N/AC:M/Au:N/C:C/I:C/A:C", "detail": "fixed-version: Fixed from version 17.0.963.79" }, { "id": "CVE-2011-3049", "status": "Patched", "link": "https://nvd.nist.gov/vuln/detail/CVE-2011-3049", "summary": "Google Chrome before 17.0.963.83 does not properly restrict the extension web request API, which allows remote attackers to cause a denial of service (disrupted system requests) via a crafted extension.", "scorev2": "5.0", "scorev3": "0.0", "scorev4": "0.0", "modified": "2026-06-16T23:32:30.000", "vector": "NETWORK", "vectorString": "AV:N/AC:L/Au:N/C:N/I:N/A:P", "detail": "fixed-version: Fixed from version 17.0.963.83" }, { "id": "CVE-2011-3050", "status": "Patched", "link": "https://nvd.nist.gov/vuln/detail/CVE-2011-3050", "summary": "Use-after-free vulnerability in the Cascading Style Sheets (CSS) implementation in Google Chrome before 17.0.963.83 allows remote attackers to cause a denial of service or possibly have unspecified other impact via vectors related to the :first-letter pseudo-element.", "scorev2": "6.8", "scorev3": "0.0", "scorev4": "0.0", "modified": "2026-06-16T23:32:31.000", "vector": "NETWORK", "vectorString": "AV:N/AC:M/Au:N/C:P/I:P/A:P", "detail": "fixed-version: Fixed from version 17.0.963.83" }, { "id": "CVE-2011-3051", "status": "Patched", "link": "https://nvd.nist.gov/vuln/detail/CVE-2011-3051", "summary": "Use-after-free vulnerability in the Cascading Style Sheets (CSS) implementation in Google Chrome before 17.0.963.83 allows remote attackers to cause a denial of service or possibly have unspecified other impact via vectors related to the cross-fade function.", "scorev2": "6.8", "scorev3": "0.0", "scorev4": "0.0", "modified": "2026-06-16T23:32:31.000", "vector": "NETWORK", "vectorString": "AV:N/AC:M/Au:N/C:P/I:P/A:P", "detail": "fixed-version: Fixed from version 17.0.963.83" }, { "id": "CVE-2011-3052", "status": "Patched", "link": "https://nvd.nist.gov/vuln/detail/CVE-2011-3052", "summary": "The WebGL implementation in Google Chrome before 17.0.963.83 does not properly handle CANVAS elements, which allows remote attackers to cause a denial of service (memory corruption) or possibly have unspecified other impact via unknown vectors.", "scorev2": "6.8", "scorev3": "0.0", "scorev4": "0.0", "modified": "2026-06-16T23:32:31.000", "vector": "NETWORK", "vectorString": "AV:N/AC:M/Au:N/C:P/I:P/A:P", "detail": "fixed-version: Fixed from version 18.0.1025.142" }, { "id": "CVE-2011-3053", "status": "Patched", "link": "https://nvd.nist.gov/vuln/detail/CVE-2011-3053", "summary": "Use-after-free vulnerability in Google Chrome before 17.0.963.83 allows remote attackers to cause a denial of service or possibly have unspecified other impact via vectors related to block splitting.", "scorev2": "6.8", "scorev3": "0.0", "scorev4": "0.0", "modified": "2026-06-16T23:32:31.000", "vector": "NETWORK", "vectorString": "AV:N/AC:M/Au:N/C:P/I:P/A:P", "detail": "fixed-version: Fixed from version 17.0.963.83" }, { "id": "CVE-2011-3054", "status": "Patched", "link": "https://nvd.nist.gov/vuln/detail/CVE-2011-3054", "summary": "The WebUI privilege implementation in Google Chrome before 17.0.963.83 does not properly perform isolation, which allows remote attackers to bypass intended access restrictions via unspecified vectors.", "scorev2": "4.3", "scorev3": "0.0", "scorev4": "0.0", "modified": "2026-06-16T23:32:31.000", "vector": "NETWORK", "vectorString": "AV:N/AC:M/Au:N/C:N/I:P/A:N", "detail": "fixed-version: Fixed from version 17.0.963.83" }, { "id": "CVE-2011-3055", "status": "Patched", "link": "https://nvd.nist.gov/vuln/detail/CVE-2011-3055", "summary": "The browser native UI in Google Chrome before 17.0.963.83 does not require user confirmation before an unpacked extension installation, which allows user-assisted remote attackers to have an unspecified impact via a crafted extension.", "scorev2": "4.3", "scorev3": "0.0", "scorev4": "0.0", "modified": "2026-06-16T23:32:31.000", "vector": "NETWORK", "vectorString": "AV:N/AC:M/Au:N/C:N/I:P/A:N", "detail": "fixed-version: Fixed from version 17.0.963.83" }, { "id": "CVE-2011-3056", "status": "Patched", "link": "https://nvd.nist.gov/vuln/detail/CVE-2011-3056", "summary": "Google Chrome before 17.0.963.83 allows remote attackers to bypass the Same Origin Policy via vectors involving a \"magic iframe.\"", "scorev2": "6.8", "scorev3": "0.0", "scorev4": "0.0", "modified": "2026-06-16T23:32:31.000", "vector": "NETWORK", "vectorString": "AV:N/AC:M/Au:N/C:P/I:P/A:P", "detail": "fixed-version: Fixed from version 17.0.963.83" }, { "id": "CVE-2011-3057", "status": "Patched", "link": "https://nvd.nist.gov/vuln/detail/CVE-2011-3057", "summary": "Google V8, as used in Google Chrome before 17.0.963.83, allows remote attackers to cause a denial of service via vectors that trigger an invalid read operation.", "scorev2": "4.3", "scorev3": "0.0", "scorev4": "0.0", "modified": "2026-06-16T23:32:32.000", "vector": "NETWORK", "vectorString": "AV:N/AC:M/Au:N/C:N/I:N/A:P", "detail": "fixed-version: Fixed from version 17.0.963.83" }, { "id": "CVE-2011-3058", "status": "Patched", "link": "https://nvd.nist.gov/vuln/detail/CVE-2011-3058", "summary": "Google Chrome before 18.0.1025.142 does not properly handle the EUC-JP encoding system, which might allow remote attackers to conduct cross-site scripting (XSS) attacks via unspecified vectors.", "scorev2": "4.3", "scorev3": "0.0", "scorev4": "0.0", "modified": "2026-06-16T23:32:32.000", "vector": "NETWORK", "vectorString": "AV:N/AC:M/Au:N/C:N/I:P/A:N", "detail": "fixed-version: Fixed from version 18.0.1025.142" }, { "id": "CVE-2011-3059", "status": "Patched", "link": "https://nvd.nist.gov/vuln/detail/CVE-2011-3059", "summary": "Google Chrome before 18.0.1025.142 does not properly handle SVG text elements, which allows remote attackers to cause a denial of service (out-of-bounds read) via unspecified vectors.", "scorev2": "6.8", "scorev3": "0.0", "scorev4": "0.0", "modified": "2026-06-16T23:32:32.000", "vector": "NETWORK", "vectorString": "AV:N/AC:M/Au:N/C:P/I:P/A:P", "detail": "fixed-version: Fixed from version 18.0.1025.142" }, { "id": "CVE-2011-3060", "status": "Patched", "link": "https://nvd.nist.gov/vuln/detail/CVE-2011-3060", "summary": "Google Chrome before 18.0.1025.142 does not properly handle text fragments, which allows remote attackers to cause a denial of service (out-of-bounds read) via unspecified vectors.", "scorev2": "6.8", "scorev3": "0.0", "scorev4": "0.0", "modified": "2026-06-16T23:32:32.000", "vector": "NETWORK", "vectorString": "AV:N/AC:M/Au:N/C:P/I:P/A:P", "detail": "fixed-version: Fixed from version 18.0.1025.142" }, { "id": "CVE-2011-3061", "status": "Patched", "link": "https://nvd.nist.gov/vuln/detail/CVE-2011-3061", "summary": "Google Chrome before 18.0.1025.142 does not properly check X.509 certificates before use of a SPDY proxy, which might allow man-in-the-middle attackers to spoof servers or obtain sensitive information via a crafted certificate.", "scorev2": "5.8", "scorev3": "0.0", "scorev4": "0.0", "modified": "2026-06-16T23:32:32.000", "vector": "NETWORK", "vectorString": "AV:N/AC:M/Au:N/C:P/I:P/A:N", "detail": "fixed-version: Fixed from version 18.0.1025.142" }, { "id": "CVE-2011-3062", "status": "Patched", "link": "https://nvd.nist.gov/vuln/detail/CVE-2011-3062", "summary": "Off-by-one error in the OpenType Sanitizer in Google Chrome before 18.0.1025.142 allows remote attackers to cause a denial of service or possibly have unspecified other impact via a crafted OpenType file.", "scorev2": "6.8", "scorev3": "0.0", "scorev4": "0.0", "modified": "2026-06-16T23:32:32.000", "vector": "NETWORK", "vectorString": "AV:N/AC:M/Au:N/C:P/I:P/A:P", "detail": "fixed-version: Fixed from version 18.0.1025.142" }, { "id": "CVE-2011-3063", "status": "Patched", "link": "https://nvd.nist.gov/vuln/detail/CVE-2011-3063", "summary": "Google Chrome before 18.0.1025.142 does not properly validate the renderer's navigation requests, which has unspecified impact and remote attack vectors.", "scorev2": "4.3", "scorev3": "0.0", "scorev4": "0.0", "modified": "2026-06-16T23:32:33.000", "vector": "NETWORK", "vectorString": "AV:N/AC:M/Au:N/C:N/I:P/A:N", "detail": "fixed-version: Fixed from version 18.0.1025.142" }, { "id": "CVE-2011-3064", "status": "Patched", "link": "https://nvd.nist.gov/vuln/detail/CVE-2011-3064", "summary": "Use-after-free vulnerability in Google Chrome before 18.0.1025.142 allows remote attackers to cause a denial of service or possibly have unspecified other impact via vectors related to SVG clipping.", "scorev2": "7.5", "scorev3": "0.0", "scorev4": "0.0", "modified": "2026-06-16T23:32:33.000", "vector": "NETWORK", "vectorString": "AV:N/AC:L/Au:N/C:P/I:P/A:P", "detail": "fixed-version: Fixed from version 18.0.1025.142" }, { "id": "CVE-2011-3065", "status": "Patched", "link": "https://nvd.nist.gov/vuln/detail/CVE-2011-3065", "summary": "Skia, as used in Google Chrome before 18.0.1025.142, allows remote attackers to cause a denial of service (memory corruption) or possibly have unspecified other impact via unknown vectors.", "scorev2": "6.8", "scorev3": "0.0", "scorev4": "0.0", "modified": "2026-06-16T23:32:33.000", "vector": "NETWORK", "vectorString": "AV:N/AC:M/Au:N/C:P/I:P/A:P", "detail": "fixed-version: Fixed from version 18.0.1025.142" }, { "id": "CVE-2011-3066", "status": "Patched", "link": "https://nvd.nist.gov/vuln/detail/CVE-2011-3066", "summary": "Skia, as used in Google Chrome before 18.0.1025.151, does not properly perform clipping, which allows remote attackers to cause a denial of service (out-of-bounds read) via unspecified vectors.", "scorev2": "6.8", "scorev3": "0.0", "scorev4": "0.0", "modified": "2026-06-16T23:32:33.000", "vector": "NETWORK", "vectorString": "AV:N/AC:M/Au:N/C:P/I:P/A:P", "detail": "fixed-version: Fixed from version 18.0.1025.151" }, { "id": "CVE-2011-3067", "status": "Patched", "link": "https://nvd.nist.gov/vuln/detail/CVE-2011-3067", "summary": "Google Chrome before 18.0.1025.151 allows remote attackers to bypass the Same Origin Policy via vectors related to replacement of IFRAME elements.", "scorev2": "6.8", "scorev3": "0.0", "scorev4": "0.0", "modified": "2026-06-16T23:32:33.000", "vector": "NETWORK", "vectorString": "AV:N/AC:M/Au:N/C:P/I:P/A:P", "detail": "fixed-version: Fixed from version 18.0.1025.151" }, { "id": "CVE-2011-3068", "status": "Patched", "link": "https://nvd.nist.gov/vuln/detail/CVE-2011-3068", "summary": "Use-after-free vulnerability in the Cascading Style Sheets (CSS) implementation in Google Chrome before 18.0.1025.151 allows remote attackers to cause a denial of service or possibly have unspecified other impact via vectors related to run-in boxes.", "scorev2": "6.8", "scorev3": "0.0", "scorev4": "0.0", "modified": "2026-06-16T23:32:33.000", "vector": "NETWORK", "vectorString": "AV:N/AC:M/Au:N/C:P/I:P/A:P", "detail": "fixed-version: Fixed from version 18.0.1025.151" }, { "id": "CVE-2011-3069", "status": "Patched", "link": "https://nvd.nist.gov/vuln/detail/CVE-2011-3069", "summary": "Use-after-free vulnerability in the Cascading Style Sheets (CSS) implementation in Google Chrome before 18.0.1025.151 allows remote attackers to cause a denial of service or possibly have unspecified other impact via vectors related to line boxes.", "scorev2": "6.8", "scorev3": "0.0", "scorev4": "0.0", "modified": "2026-06-16T23:32:34.000", "vector": "NETWORK", "vectorString": "AV:N/AC:M/Au:N/C:P/I:P/A:P", "detail": "fixed-version: Fixed from version 18.0.1025.151" }, { "id": "CVE-2011-3070", "status": "Patched", "link": "https://nvd.nist.gov/vuln/detail/CVE-2011-3070", "summary": "Use-after-free vulnerability in Google Chrome before 18.0.1025.151 allows remote attackers to cause a denial of service or possibly have unspecified other impact via vectors related to the Google V8 bindings.", "scorev2": "6.8", "scorev3": "0.0", "scorev4": "0.0", "modified": "2026-06-16T23:32:35.000", "vector": "NETWORK", "vectorString": "AV:N/AC:M/Au:N/C:P/I:P/A:P", "detail": "fixed-version: Fixed from version 18.0.1025.151" }, { "id": "CVE-2011-3071", "status": "Patched", "link": "https://nvd.nist.gov/vuln/detail/CVE-2011-3071", "summary": "Use-after-free vulnerability in the HTMLMediaElement implementation in Google Chrome before 18.0.1025.151 allows remote attackers to cause a denial of service or possibly have unspecified other impact via unknown vectors.", "scorev2": "6.8", "scorev3": "0.0", "scorev4": "0.0", "modified": "2026-06-16T23:32:35.000", "vector": "NETWORK", "vectorString": "AV:N/AC:M/Au:N/C:P/I:P/A:P", "detail": "fixed-version: Fixed from version 18.0.1025.151" }, { "id": "CVE-2011-3072", "status": "Patched", "link": "https://nvd.nist.gov/vuln/detail/CVE-2011-3072", "summary": "Google Chrome before 18.0.1025.151 allows remote attackers to bypass the Same Origin Policy via vectors related to pop-up windows.", "scorev2": "6.8", "scorev3": "0.0", "scorev4": "0.0", "modified": "2026-06-16T23:32:36.000", "vector": "NETWORK", "vectorString": "AV:N/AC:M/Au:N/C:P/I:P/A:P", "detail": "fixed-version: Fixed from version 18.0.1025.151" }, { "id": "CVE-2011-3073", "status": "Patched", "link": "https://nvd.nist.gov/vuln/detail/CVE-2011-3073", "summary": "Use-after-free vulnerability in Google Chrome before 18.0.1025.151 allows remote attackers to cause a denial of service or possibly have unspecified other impact via vectors related to the handling of SVG resources.", "scorev2": "6.8", "scorev3": "0.0", "scorev4": "0.0", "modified": "2026-06-16T23:32:36.000", "vector": "NETWORK", "vectorString": "AV:N/AC:M/Au:N/C:P/I:P/A:P", "detail": "fixed-version: Fixed from version 18.0.1025.151" }, { "id": "CVE-2011-3074", "status": "Patched", "link": "https://nvd.nist.gov/vuln/detail/CVE-2011-3074", "summary": "Use-after-free vulnerability in Google Chrome before 18.0.1025.151 allows remote attackers to cause a denial of service or possibly have unspecified other impact via vectors related to the handling of media.", "scorev2": "6.8", "scorev3": "0.0", "scorev4": "0.0", "modified": "2026-06-16T23:32:36.000", "vector": "NETWORK", "vectorString": "AV:N/AC:M/Au:N/C:P/I:P/A:P", "detail": "fixed-version: Fixed from version 18.0.1025.151" }, { "id": "CVE-2011-3075", "status": "Patched", "link": "https://nvd.nist.gov/vuln/detail/CVE-2011-3075", "summary": "Use-after-free vulnerability in Google Chrome before 18.0.1025.151 allows remote attackers to cause a denial of service or possibly have unspecified other impact via vectors related to style-application commands.", "scorev2": "6.8", "scorev3": "0.0", "scorev4": "0.0", "modified": "2026-06-16T23:32:36.000", "vector": "NETWORK", "vectorString": "AV:N/AC:M/Au:N/C:P/I:P/A:P", "detail": "fixed-version: Fixed from version 18.0.1025.151" }, { "id": "CVE-2011-3076", "status": "Patched", "link": "https://nvd.nist.gov/vuln/detail/CVE-2011-3076", "summary": "Use-after-free vulnerability in Google Chrome before 18.0.1025.151 allows remote attackers to cause a denial of service or possibly have unspecified other impact via vectors related to focus handling.", "scorev2": "6.8", "scorev3": "0.0", "scorev4": "0.0", "modified": "2026-06-16T23:32:36.000", "vector": "NETWORK", "vectorString": "AV:N/AC:M/Au:N/C:P/I:P/A:P", "detail": "fixed-version: Fixed from version 18.0.1025.151" }, { "id": "CVE-2011-3077", "status": "Patched", "link": "https://nvd.nist.gov/vuln/detail/CVE-2011-3077", "summary": "Use-after-free vulnerability in Google Chrome before 18.0.1025.151 allows remote attackers to cause a denial of service or possibly have unspecified other impact via vectors involving the script bindings, related to a \"read-after-free\" issue.", "scorev2": "6.8", "scorev3": "0.0", "scorev4": "0.0", "modified": "2026-06-16T23:32:36.000", "vector": "NETWORK", "vectorString": "AV:N/AC:M/Au:N/C:P/I:P/A:P", "detail": "fixed-version: Fixed from version 18.0.1025.151" }, { "id": "CVE-2011-3078", "status": "Patched", "link": "https://nvd.nist.gov/vuln/detail/CVE-2011-3078", "summary": "Use-after-free vulnerability in Google Chrome before 18.0.1025.168 allows remote attackers to cause a denial of service or possibly have unspecified other impact via vectors related to the floating of elements, a different vulnerability than CVE-2011-3081.", "scorev2": "6.8", "scorev3": "0.0", "scorev4": "0.0", "modified": "2026-06-16T23:32:36.000", "vector": "NETWORK", "vectorString": "AV:N/AC:M/Au:N/C:P/I:P/A:P", "detail": "fixed-version: Fixed from version 18.0.1025.168" }, { "id": "CVE-2011-3079", "status": "Patched", "link": "https://nvd.nist.gov/vuln/detail/CVE-2011-3079", "summary": "The Inter-process Communication (IPC) implementation in Google Chrome before 18.0.1025.168, as used in Mozilla Firefox before 38.0 and other products, does not properly validate messages, which has unspecified impact and attack vectors.", "scorev2": "10.0", "scorev3": "0.0", "scorev4": "0.0", "modified": "2026-06-16T23:32:37.000", "vector": "NETWORK", "vectorString": "AV:N/AC:L/Au:N/C:C/I:C/A:C", "detail": "fixed-version: Fixed from version >18.0.1025.166" }, { "id": "CVE-2011-3080", "status": "Patched", "link": "https://nvd.nist.gov/vuln/detail/CVE-2011-3080", "summary": "Race condition in the Inter-process Communication (IPC) implementation in Google Chrome before 18.0.1025.168 allows attackers to bypass intended sandbox restrictions via unspecified vectors.", "scorev2": "7.6", "scorev3": "0.0", "scorev4": "0.0", "modified": "2026-06-16T23:32:37.000", "vector": "NETWORK", "vectorString": "AV:N/AC:H/Au:N/C:C/I:C/A:C", "detail": "fixed-version: Fixed from version 18.0.1025.168" }, { "id": "CVE-2011-3081", "status": "Patched", "link": "https://nvd.nist.gov/vuln/detail/CVE-2011-3081", "summary": "Use-after-free vulnerability in Google Chrome before 18.0.1025.168 allows remote attackers to cause a denial of service or possibly have unspecified other impact via vectors related to the floating of elements, a different vulnerability than CVE-2011-3078.", "scorev2": "9.3", "scorev3": "0.0", "scorev4": "0.0", "modified": "2026-06-16T23:32:37.000", "vector": "NETWORK", "vectorString": "AV:N/AC:M/Au:N/C:C/I:C/A:C", "detail": "fixed-version: Fixed from version 18.0.1025.168" }, { "id": "CVE-2011-3083", "status": "Patched", "link": "https://nvd.nist.gov/vuln/detail/CVE-2011-3083", "summary": "browser/profiles/profile_impl_io_data.cc in Google Chrome before 19.0.1084.46 does not properly handle a malformed ftp URL in the SRC attribute of a VIDEO element, which allows remote attackers to cause a denial of service (NULL pointer dereference and application crash) via a crafted web page.", "scorev2": "5.0", "scorev3": "0.0", "scorev4": "0.0", "modified": "2026-06-16T23:32:37.000", "vector": "NETWORK", "vectorString": "AV:N/AC:L/Au:N/C:N/I:N/A:P", "detail": "fixed-version: Fixed from version >19.0.1084.45" }, { "id": "CVE-2011-3084", "status": "Patched", "link": "https://nvd.nist.gov/vuln/detail/CVE-2011-3084", "summary": "Google Chrome before 19.0.1084.46 does not use a dedicated process for the loading of links found on an internal page, which might allow attackers to bypass intended sandbox restrictions via a crafted page.", "scorev2": "7.5", "scorev3": "0.0", "scorev4": "0.0", "modified": "2026-06-16T23:32:37.000", "vector": "NETWORK", "vectorString": "AV:N/AC:L/Au:N/C:P/I:P/A:P", "detail": "fixed-version: Fixed from version >19.0.1084.45" }, { "id": "CVE-2011-3085", "status": "Patched", "link": "https://nvd.nist.gov/vuln/detail/CVE-2011-3085", "summary": "The Autofill feature in Google Chrome before 19.0.1084.46 does not properly restrict field values, which allows remote attackers to cause a denial of service (UI corruption) and possibly conduct spoofing attacks via vectors involving long values.", "scorev2": "5.0", "scorev3": "0.0", "scorev4": "0.0", "modified": "2026-06-16T23:32:37.000", "vector": "NETWORK", "vectorString": "AV:N/AC:L/Au:N/C:N/I:N/A:P", "detail": "fixed-version: Fixed from version >19.0.1084.45" }, { "id": "CVE-2011-3086", "status": "Patched", "link": "https://nvd.nist.gov/vuln/detail/CVE-2011-3086", "summary": "Use-after-free vulnerability in Google Chrome before 19.0.1084.46 allows remote attackers to cause a denial of service or possibly have unspecified other impact via vectors involving a STYLE element.", "scorev2": "10.0", "scorev3": "0.0", "scorev4": "0.0", "modified": "2026-06-16T23:32:37.000", "vector": "NETWORK", "vectorString": "AV:N/AC:L/Au:N/C:C/I:C/A:C", "detail": "fixed-version: Fixed from version >19.0.1084.45" }, { "id": "CVE-2011-3087", "status": "Patched", "link": "https://nvd.nist.gov/vuln/detail/CVE-2011-3087", "summary": "Google Chrome before 19.0.1084.46 does not properly perform window navigation, which has unspecified impact and remote attack vectors.", "scorev2": "10.0", "scorev3": "0.0", "scorev4": "0.0", "modified": "2026-06-16T23:32:38.000", "vector": "NETWORK", "vectorString": "AV:N/AC:L/Au:N/C:C/I:C/A:C", "detail": "version-not-in-range" }, { "id": "CVE-2011-3088", "status": "Patched", "link": "https://nvd.nist.gov/vuln/detail/CVE-2011-3088", "summary": "Google Chrome before 19.0.1084.46 does not properly draw hairlines, which allows remote attackers to cause a denial of service (out-of-bounds read) via unspecified vectors.", "scorev2": "5.0", "scorev3": "0.0", "scorev4": "0.0", "modified": "2026-06-16T23:32:38.000", "vector": "NETWORK", "vectorString": "AV:N/AC:L/Au:N/C:N/I:N/A:P", "detail": "fixed-version: Fixed from version >19.0.1084.45" }, { "id": "CVE-2011-3089", "status": "Patched", "link": "https://nvd.nist.gov/vuln/detail/CVE-2011-3089", "summary": "Use-after-free vulnerability in Google Chrome before 19.0.1084.46 allows remote attackers to cause a denial of service or possibly have unspecified other impact via vectors involving tables.", "scorev2": "10.0", "scorev3": "0.0", "scorev4": "0.0", "modified": "2026-06-16T23:32:38.000", "vector": "NETWORK", "vectorString": "AV:N/AC:L/Au:N/C:C/I:C/A:C", "detail": "fixed-version: Fixed from version >19.0.1084.45" }, { "id": "CVE-2011-3090", "status": "Patched", "link": "https://nvd.nist.gov/vuln/detail/CVE-2011-3090", "summary": "Race condition in Google Chrome before 19.0.1084.46 allows remote attackers to cause a denial of service or possibly have unspecified other impact via vectors related to worker processes.", "scorev2": "7.6", "scorev3": "0.0", "scorev4": "0.0", "modified": "2026-06-16T23:32:38.000", "vector": "NETWORK", "vectorString": "AV:N/AC:H/Au:N/C:C/I:C/A:C", "detail": "fixed-version: Fixed from version >19.0.1084.45" }, { "id": "CVE-2011-3091", "status": "Patched", "link": "https://nvd.nist.gov/vuln/detail/CVE-2011-3091", "summary": "Use-after-free vulnerability in the IndexedDB implementation in Google Chrome before 19.0.1084.46 allows remote attackers to cause a denial of service or possibly have unspecified other impact via unknown vectors.", "scorev2": "10.0", "scorev3": "0.0", "scorev4": "0.0", "modified": "2026-06-16T23:32:38.000", "vector": "NETWORK", "vectorString": "AV:N/AC:L/Au:N/C:C/I:C/A:C", "detail": "fixed-version: Fixed from version >19.0.1084.45" }, { "id": "CVE-2011-3092", "status": "Patched", "link": "https://nvd.nist.gov/vuln/detail/CVE-2011-3092", "summary": "The regex implementation in Google V8, as used in Google Chrome before 19.0.1084.46, allows remote attackers to cause a denial of service (invalid write operation) or possibly have unspecified other impact via unknown vectors.", "scorev2": "10.0", "scorev3": "0.0", "scorev4": "0.0", "modified": "2026-06-16T23:32:38.000", "vector": "NETWORK", "vectorString": "AV:N/AC:L/Au:N/C:C/I:C/A:C", "detail": "fixed-version: Fixed from version >19.0.1084.45" }, { "id": "CVE-2011-3093", "status": "Patched", "link": "https://nvd.nist.gov/vuln/detail/CVE-2011-3093", "summary": "Google Chrome before 19.0.1084.46 does not properly handle glyphs, which allows remote attackers to cause a denial of service (out-of-bounds read) via unspecified vectors.", "scorev2": "5.0", "scorev3": "0.0", "scorev4": "0.0", "modified": "2026-06-16T23:32:38.000", "vector": "NETWORK", "vectorString": "AV:N/AC:L/Au:N/C:N/I:N/A:P", "detail": "fixed-version: Fixed from version >19.0.1084.45" }, { "id": "CVE-2011-3094", "status": "Patched", "link": "https://nvd.nist.gov/vuln/detail/CVE-2011-3094", "summary": "Google Chrome before 19.0.1084.46 does not properly handle Tibetan text, which allows remote attackers to cause a denial of service (out-of-bounds read) via unspecified vectors.", "scorev2": "5.0", "scorev3": "0.0", "scorev4": "0.0", "modified": "2026-06-16T23:32:39.000", "vector": "NETWORK", "vectorString": "AV:N/AC:L/Au:N/C:N/I:N/A:P", "detail": "fixed-version: Fixed from version >19.0.1084.45" }, { "id": "CVE-2011-3095", "status": "Patched", "link": "https://nvd.nist.gov/vuln/detail/CVE-2011-3095", "summary": "The OGG container in Google Chrome before 19.0.1084.46 allows remote attackers to cause a denial of service or possibly have unspecified other impact via unknown vectors that trigger an out-of-bounds write.", "scorev2": "10.0", "scorev3": "0.0", "scorev4": "0.0", "modified": "2026-06-16T23:32:39.000", "vector": "NETWORK", "vectorString": "AV:N/AC:L/Au:N/C:C/I:C/A:C", "detail": "fixed-version: Fixed from version >19.0.1084.45" }, { "id": "CVE-2011-3096", "status": "Patched", "link": "https://nvd.nist.gov/vuln/detail/CVE-2011-3096", "summary": "Use-after-free vulnerability in Google Chrome before 19.0.1084.46 on Linux allows remote attackers to cause a denial of service or possibly have unspecified other impact by leveraging an error in the GTK implementation of the omnibox.", "scorev2": "7.5", "scorev3": "0.0", "scorev4": "0.0", "modified": "2026-06-16T23:32:39.000", "vector": "NETWORK", "vectorString": "AV:N/AC:L/Au:N/C:P/I:P/A:P", "detail": "fixed-version: Fixed from version >19.0.1084.45" }, { "id": "CVE-2011-3097", "status": "Patched", "link": "https://nvd.nist.gov/vuln/detail/CVE-2011-3097", "summary": "The PDF functionality in Google Chrome before 19.0.1084.46 allows remote attackers to cause a denial of service or possibly have unspecified other impact by leveraging an out-of-bounds write error in the implementation of sampled functions.", "scorev2": "10.0", "scorev3": "0.0", "scorev4": "0.0", "modified": "2026-06-16T23:32:39.000", "vector": "NETWORK", "vectorString": "AV:N/AC:L/Au:N/C:C/I:C/A:C", "detail": "fixed-version: Fixed from version >19.0.1084.45" }, { "id": "CVE-2011-3098", "status": "Patched", "link": "https://nvd.nist.gov/vuln/detail/CVE-2011-3098", "summary": "Google Chrome before 19.0.1084.46 on Windows uses an incorrect search path for the Windows Media Player plug-in, which might allow local users to gain privileges via a Trojan horse plug-in in an unspecified directory.", "scorev2": "7.2", "scorev3": "0.0", "scorev4": "0.0", "modified": "2026-06-16T23:32:39.000", "vector": "LOCAL", "vectorString": "AV:L/AC:L/Au:N/C:C/I:C/A:C", "detail": "fixed-version: Fixed from version >19.0.1084.45" }, { "id": "CVE-2011-3099", "status": "Patched", "link": "https://nvd.nist.gov/vuln/detail/CVE-2011-3099", "summary": "Use-after-free vulnerability in the PDF functionality in Google Chrome before 19.0.1084.46 allows remote attackers to cause a denial of service or possibly have unspecified other impact via vectors involving a malformed name for the font encoding.", "scorev2": "10.0", "scorev3": "0.0", "scorev4": "0.0", "modified": "2026-06-16T23:32:39.000", "vector": "NETWORK", "vectorString": "AV:N/AC:L/Au:N/C:C/I:C/A:C", "detail": "fixed-version: Fixed from version >19.0.1084.45" }, { "id": "CVE-2011-3100", "status": "Patched", "link": "https://nvd.nist.gov/vuln/detail/CVE-2011-3100", "summary": "Google Chrome before 19.0.1084.46 does not properly draw dash paths, which allows remote attackers to cause a denial of service (out-of-bounds read) via unspecified vectors.", "scorev2": "5.0", "scorev3": "0.0", "scorev4": "0.0", "modified": "2026-06-16T23:32:39.000", "vector": "NETWORK", "vectorString": "AV:N/AC:L/Au:N/C:N/I:N/A:P", "detail": "fixed-version: Fixed from version >19.0.1084.45" }, { "id": "CVE-2011-3101", "status": "Patched", "link": "https://nvd.nist.gov/vuln/detail/CVE-2011-3101", "summary": "Google Chrome before 19.0.1084.46 on Linux does not properly mitigate an unspecified flaw in an NVIDIA driver, which has unknown impact and attack vectors. NOTE: see CVE-2012-3105 for the related MFSA 2012-34 issue in Mozilla products.", "scorev2": "10.0", "scorev3": "0.0", "scorev4": "0.0", "modified": "2026-06-16T23:32:39.000", "vector": "NETWORK", "vectorString": "AV:N/AC:L/Au:N/C:C/I:C/A:C", "detail": "fixed-version: Fixed from version >19.0.1084.45" }, { "id": "CVE-2011-3102", "status": "Patched", "link": "https://nvd.nist.gov/vuln/detail/CVE-2011-3102", "summary": "Off-by-one error in libxml2, as used in Google Chrome before 19.0.1084.46 and other products, allows remote attackers to cause a denial of service (out-of-bounds write) or possibly have unspecified other impact via unknown vectors.", "scorev2": "6.8", "scorev3": "0.0", "scorev4": "0.0", "modified": "2026-06-16T23:32:40.000", "vector": "NETWORK", "vectorString": "AV:N/AC:M/Au:N/C:P/I:P/A:P", "detail": "fixed-version: Fixed from version >19.0.1084.45" }, { "id": "CVE-2011-3103", "status": "Patched", "link": "https://nvd.nist.gov/vuln/detail/CVE-2011-3103", "summary": "Google V8, as used in Google Chrome before 19.0.1084.52, does not properly perform garbage collection, which allows remote attackers to cause a denial of service (application crash) or possibly have unspecified other impact via crafted JavaScript code.", "scorev2": "7.5", "scorev3": "0.0", "scorev4": "0.0", "modified": "2026-06-16T23:32:40.000", "vector": "NETWORK", "vectorString": "AV:N/AC:L/Au:N/C:P/I:P/A:P", "detail": "fixed-version: Fixed from version >19.0.1084.51" }, { "id": "CVE-2011-3104", "status": "Patched", "link": "https://nvd.nist.gov/vuln/detail/CVE-2011-3104", "summary": "Skia, as used in Google Chrome before 19.0.1084.52, allows remote attackers to cause a denial of service (out-of-bounds read) via unspecified vectors.", "scorev2": "5.0", "scorev3": "0.0", "scorev4": "0.0", "modified": "2026-06-16T23:32:40.000", "vector": "NETWORK", "vectorString": "AV:N/AC:L/Au:N/C:N/I:N/A:P", "detail": "fixed-version: Fixed from version >19.0.1084.51" }, { "id": "CVE-2011-3105", "status": "Patched", "link": "https://nvd.nist.gov/vuln/detail/CVE-2011-3105", "summary": "Use-after-free vulnerability in the Cascading Style Sheets (CSS) implementation in Google Chrome before 19.0.1084.52 allows remote attackers to cause a denial of service or possibly have unspecified other impact via vectors related to the :first-letter pseudo-element.", "scorev2": "7.5", "scorev3": "0.0", "scorev4": "0.0", "modified": "2026-06-16T23:32:40.000", "vector": "NETWORK", "vectorString": "AV:N/AC:L/Au:N/C:P/I:P/A:P", "detail": "fixed-version: Fixed from version >19.0.1084.51" }, { "id": "CVE-2011-3106", "status": "Patched", "link": "https://nvd.nist.gov/vuln/detail/CVE-2011-3106", "summary": "The WebSockets implementation in Google Chrome before 19.0.1084.52 does not properly handle use of SSL, which allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via unspecified vectors.", "scorev2": "10.0", "scorev3": "0.0", "scorev4": "0.0", "modified": "2026-06-16T23:32:40.000", "vector": "NETWORK", "vectorString": "AV:N/AC:L/Au:N/C:C/I:C/A:C", "detail": "fixed-version: Fixed from version >19.0.1084.51" }, { "id": "CVE-2011-3107", "status": "Patched", "link": "https://nvd.nist.gov/vuln/detail/CVE-2011-3107", "summary": "Google Chrome before 19.0.1084.52 does not properly implement JavaScript bindings for plug-ins, which allows remote attackers to cause a denial of service (application crash) or possibly have unspecified other impact via unknown vectors.", "scorev2": "7.5", "scorev3": "0.0", "scorev4": "0.0", "modified": "2026-06-16T23:32:40.000", "vector": "NETWORK", "vectorString": "AV:N/AC:L/Au:N/C:P/I:P/A:P", "detail": "fixed-version: Fixed from version >19.0.1084.51" }, { "id": "CVE-2011-3108", "status": "Patched", "link": "https://nvd.nist.gov/vuln/detail/CVE-2011-3108", "summary": "Use-after-free vulnerability in Google Chrome before 19.0.1084.52 allows remote attackers to execute arbitrary code via vectors related to the browser cache.", "scorev2": "10.0", "scorev3": "0.0", "scorev4": "0.0", "modified": "2026-06-16T23:32:41.000", "vector": "NETWORK", "vectorString": "AV:N/AC:L/Au:N/C:C/I:C/A:C", "detail": "fixed-version: Fixed from version >19.0.1084.51" }, { "id": "CVE-2011-3109", "status": "Patched", "link": "https://nvd.nist.gov/vuln/detail/CVE-2011-3109", "summary": "Google Chrome before 19.0.1084.52 on Linux does not properly perform a cast of an unspecified variable, which allows remote attackers to cause a denial of service or possibly have unknown other impact by leveraging an error in the GTK implementation of the UI.", "scorev2": "7.5", "scorev3": "0.0", "scorev4": "0.0", "modified": "2026-06-16T23:32:41.000", "vector": "NETWORK", "vectorString": "AV:N/AC:L/Au:N/C:P/I:P/A:P", "detail": "fixed-version: Fixed from version >19.0.1084.51" }, { "id": "CVE-2011-3110", "status": "Patched", "link": "https://nvd.nist.gov/vuln/detail/CVE-2011-3110", "summary": "The PDF functionality in Google Chrome before 19.0.1084.52 allows remote attackers to cause a denial of service or possibly have unspecified other impact via vectors that trigger out-of-bounds write operations.", "scorev2": "7.5", "scorev3": "0.0", "scorev4": "0.0", "modified": "2026-06-16T23:32:41.000", "vector": "NETWORK", "vectorString": "AV:N/AC:L/Au:N/C:P/I:P/A:P", "detail": "fixed-version: Fixed from version >19.0.1084.51" }, { "id": "CVE-2011-3111", "status": "Patched", "link": "https://nvd.nist.gov/vuln/detail/CVE-2011-3111", "summary": "Google V8, as used in Google Chrome before 19.0.1084.52, allows remote attackers to cause a denial of service (invalid read operation) via unspecified vectors.", "scorev2": "5.0", "scorev3": "0.0", "scorev4": "0.0", "modified": "2026-06-16T23:32:41.000", "vector": "NETWORK", "vectorString": "AV:N/AC:L/Au:N/C:N/I:N/A:P", "detail": "fixed-version: Fixed from version >19.0.1084.51" }, { "id": "CVE-2011-3112", "status": "Patched", "link": "https://nvd.nist.gov/vuln/detail/CVE-2011-3112", "summary": "Use-after-free vulnerability in the PDF functionality in Google Chrome before 19.0.1084.52 allows remote attackers to cause a denial of service or possibly have unspecified other impact via an invalid encrypted document.", "scorev2": "5.0", "scorev3": "0.0", "scorev4": "0.0", "modified": "2026-06-16T23:32:41.000", "vector": "NETWORK", "vectorString": "AV:N/AC:L/Au:N/C:N/I:N/A:P", "detail": "fixed-version: Fixed from version >19.0.1084.51" }, { "id": "CVE-2011-3113", "status": "Patched", "link": "https://nvd.nist.gov/vuln/detail/CVE-2011-3113", "summary": "The PDF functionality in Google Chrome before 19.0.1084.52 does not properly perform a cast of an unspecified variable during handling of color spaces, which allows remote attackers to cause a denial of service or possibly have unknown other impact via a crafted document.", "scorev2": "7.5", "scorev3": "0.0", "scorev4": "0.0", "modified": "2026-06-16T23:32:41.000", "vector": "NETWORK", "vectorString": "AV:N/AC:L/Au:N/C:P/I:P/A:P", "detail": "fixed-version: Fixed from version >19.0.1084.51" }, { "id": "CVE-2011-3114", "status": "Patched", "link": "https://nvd.nist.gov/vuln/detail/CVE-2011-3114", "summary": "Multiple buffer overflows in the PDF functionality in Google Chrome before 19.0.1084.52 allow remote attackers to cause a denial of service or possibly have unspecified other impact via vectors that trigger unknown function calls.", "scorev2": "7.5", "scorev3": "0.0", "scorev4": "0.0", "modified": "2026-06-16T23:32:41.000", "vector": "NETWORK", "vectorString": "AV:N/AC:L/Au:N/C:P/I:P/A:P", "detail": "fixed-version: Fixed from version >19.0.1084.51" }, { "id": "CVE-2011-3115", "status": "Patched", "link": "https://nvd.nist.gov/vuln/detail/CVE-2011-3115", "summary": "Google V8, as used in Google Chrome before 19.0.1084.52, allows remote attackers to cause a denial of service or possibly have unspecified other impact via vectors that trigger \"type corruption.\"", "scorev2": "7.5", "scorev3": "0.0", "scorev4": "0.0", "modified": "2026-06-16T23:32:42.000", "vector": "NETWORK", "vectorString": "AV:N/AC:L/Au:N/C:P/I:P/A:P", "detail": "fixed-version: Fixed from version >19.0.1084.51" }, { "id": "CVE-2011-3234", "status": "Patched", "link": "https://nvd.nist.gov/vuln/detail/CVE-2011-3234", "summary": "Google Chrome before 14.0.835.163 does not properly handle boxes, which allows remote attackers to cause a denial of service (out-of-bounds read) via unspecified vectors.", "scorev2": "5.0", "scorev3": "0.0", "scorev4": "0.0", "modified": "2026-06-16T23:32:55.000", "vector": "NETWORK", "vectorString": "AV:N/AC:L/Au:N/C:N/I:N/A:P", "detail": "fixed-version: Fixed from version 14.0.835.163" }, { "id": "CVE-2011-3389", "status": "Unpatched", "link": "https://nvd.nist.gov/vuln/detail/CVE-2011-3389", "summary": "The SSL protocol, as used in certain configurations in Microsoft Windows and Microsoft Internet Explorer, Mozilla Firefox, Google Chrome, Opera, and other products, encrypts data by using CBC mode with chained initialization vectors, which allows man-in-the-middle attackers to obtain plaintext HTTP headers via a blockwise chosen-boundary attack (BCBA) on an HTTPS session, in conjunction with JavaScript code that uses (1) the HTML5 WebSocket API, (2) the Java URLConnection API, or (3) the Silverlight WebClient API, aka a \"BEAST\" attack.", "scorev2": "4.3", "scorev3": "0.0", "scorev4": "0.0", "modified": "2026-10-09T20:17:02.000", "vector": "NETWORK", "vectorString": "AV:N/AC:M/Au:N/C:P/I:N/A:N", "detail": "no-version-ranges", "description": "Check package version" }, { "id": "CVE-2011-3640", "status": "Patched", "link": "https://nvd.nist.gov/vuln/detail/CVE-2011-3640", "summary": "Untrusted search path vulnerability in Mozilla Network Security Services (NSS), as used in Google Chrome before 17 on Windows and Mac OS X, might allow local users to gain privileges via a Trojan horse pkcs11.txt file in a top-level directory. NOTE: the vendor's response was \"Strange behavior, but we're not treating this as a security bug.\"", "scorev2": "7.1", "scorev3": "0.0", "scorev4": "0.0", "modified": "2026-06-16T23:33:40.000", "vector": "NETWORK", "vectorString": "AV:N/AC:H/Au:S/C:C/I:C/A:C", "detail": "fixed-version: Fixed from version 17.0" }, { "id": "CVE-2011-3873", "status": "Patched", "link": "https://nvd.nist.gov/vuln/detail/CVE-2011-3873", "summary": "Google Chrome before 14.0.835.202 does not properly implement shader translation, which allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via unspecified vectors.", "scorev2": "6.8", "scorev3": "0.0", "scorev4": "0.0", "modified": "2026-06-16T23:34:04.000", "vector": "NETWORK", "vectorString": "AV:N/AC:M/Au:N/C:P/I:P/A:P", "detail": "fixed-version: Fixed from version 14.0.835.202" }, { "id": "CVE-2011-3875", "status": "Patched", "link": "https://nvd.nist.gov/vuln/detail/CVE-2011-3875", "summary": "Google Chrome before 15.0.874.102 does not properly handle drag and drop operations on URL strings, which allows user-assisted remote attackers to spoof the URL bar via unspecified vectors.", "scorev2": "4.3", "scorev3": "0.0", "scorev4": "0.0", "modified": "2026-06-16T23:34:04.000", "vector": "NETWORK", "vectorString": "AV:N/AC:M/Au:N/C:N/I:P/A:N", "detail": "fixed-version: Fixed from version 15.0.874.102" }, { "id": "CVE-2011-3876", "status": "Patched", "link": "https://nvd.nist.gov/vuln/detail/CVE-2011-3876", "summary": "Google Chrome before 15.0.874.102 does not properly handle downloading files that have whitespace characters at the end of a filename, which has unspecified impact and user-assisted remote attack vectors.", "scorev2": "6.8", "scorev3": "0.0", "scorev4": "0.0", "modified": "2026-06-16T23:34:04.000", "vector": "NETWORK", "vectorString": "AV:N/AC:M/Au:N/C:P/I:P/A:P", "detail": "fixed-version: Fixed from version 15.0.874.102" }, { "id": "CVE-2011-3877", "status": "Patched", "link": "https://nvd.nist.gov/vuln/detail/CVE-2011-3877", "summary": "Cross-site scripting (XSS) vulnerability in the appcache internals page in Google Chrome before 15.0.874.102 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors.", "scorev2": "4.3", "scorev3": "0.0", "scorev4": "0.0", "modified": "2026-06-16T23:34:05.000", "vector": "NETWORK", "vectorString": "AV:N/AC:M/Au:N/C:N/I:P/A:N", "detail": "fixed-version: Fixed from version 15.0.874.102" }, { "id": "CVE-2011-3878", "status": "Patched", "link": "https://nvd.nist.gov/vuln/detail/CVE-2011-3878", "summary": "Race condition in Google Chrome before 15.0.874.102 allows remote attackers to cause a denial of service or possibly have unspecified other impact via vectors related to worker process initialization.", "scorev2": "6.8", "scorev3": "0.0", "scorev4": "0.0", "modified": "2026-06-16T23:34:05.000", "vector": "NETWORK", "vectorString": "AV:N/AC:M/Au:N/C:P/I:P/A:P", "detail": "fixed-version: Fixed from version 15.0.874.102" }, { "id": "CVE-2011-3879", "status": "Patched", "link": "https://nvd.nist.gov/vuln/detail/CVE-2011-3879", "summary": "Google Chrome before 15.0.874.102 does not prevent redirects to chrome: URLs, which has unspecified impact and remote attack vectors.", "scorev2": "7.5", "scorev3": "0.0", "scorev4": "0.0", "modified": "2026-06-16T23:34:05.000", "vector": "NETWORK", "vectorString": "AV:N/AC:L/Au:N/C:P/I:P/A:P", "detail": "fixed-version: Fixed from version 15.0.874.102" }, { "id": "CVE-2011-3880", "status": "Patched", "link": "https://nvd.nist.gov/vuln/detail/CVE-2011-3880", "summary": "Google Chrome before 15.0.874.102 does not prevent use of an unspecified special character as a delimiter in HTTP headers, which has unknown impact and remote attack vectors.", "scorev2": "7.5", "scorev3": "0.0", "scorev4": "0.0", "modified": "2026-06-16T23:34:05.000", "vector": "NETWORK", "vectorString": "AV:N/AC:L/Au:N/C:P/I:P/A:P", "detail": "fixed-version: Fixed from version 15.0.874.102" }, { "id": "CVE-2011-3881", "status": "Patched", "link": "https://nvd.nist.gov/vuln/detail/CVE-2011-3881", "summary": "WebKit, as used in Google Chrome before 15.0.874.102 and Android before 4.4, allows remote attackers to bypass the Same Origin Policy and conduct Universal XSS (UXSS) attacks via vectors related to (1) the DOMWindow::clear function and use of a selection object, (2) the Object::GetRealNamedPropertyInPrototypeChain function and use of an __proto__ property, (3) the HTMLPlugInImageElement::allowedToLoadFrameURL function and use of a javascript: URL, (4) incorrect origins for XSLT-generated documents in the XSLTProcessor::createDocumentFromSource function, and (5) improper handling of synchronous frame loads in the ScriptController::executeIfJavaScriptURL function.", "scorev2": "4.3", "scorev3": "0.0", "scorev4": "0.0", "modified": "2026-06-16T23:34:05.000", "vector": "NETWORK", "vectorString": "AV:N/AC:M/Au:N/C:N/I:P/A:N", "detail": "fixed-version: Fixed from version 15.0.874.102" }, { "id": "CVE-2011-3882", "status": "Patched", "link": "https://nvd.nist.gov/vuln/detail/CVE-2011-3882", "summary": "Use-after-free vulnerability in Google Chrome before 15.0.874.102 allows remote attackers to cause a denial of service or possibly have unspecified other impact via vectors related to media buffers.", "scorev2": "7.5", "scorev3": "0.0", "scorev4": "0.0", "modified": "2026-06-16T23:34:05.000", "vector": "NETWORK", "vectorString": "AV:N/AC:L/Au:N/C:P/I:P/A:P", "detail": "fixed-version: Fixed from version 15.0.874.102" }, { "id": "CVE-2011-3883", "status": "Patched", "link": "https://nvd.nist.gov/vuln/detail/CVE-2011-3883", "summary": "Use-after-free vulnerability in Google Chrome before 15.0.874.102 allows remote attackers to cause a denial of service or possibly have unspecified other impact via vectors related to counters.", "scorev2": "7.5", "scorev3": "0.0", "scorev4": "0.0", "modified": "2026-06-16T23:34:05.000", "vector": "NETWORK", "vectorString": "AV:N/AC:L/Au:N/C:P/I:P/A:P", "detail": "fixed-version: Fixed from version 15.0.874.102" }, { "id": "CVE-2011-3884", "status": "Patched", "link": "https://nvd.nist.gov/vuln/detail/CVE-2011-3884", "summary": "Google Chrome before 15.0.874.102 does not properly address timing issues during DOM traversal, which allows remote attackers to cause a denial of service or possibly have unspecified other impact via a crafted document.", "scorev2": "6.8", "scorev3": "0.0", "scorev4": "0.0", "modified": "2026-06-16T23:34:05.000", "vector": "NETWORK", "vectorString": "AV:N/AC:M/Au:N/C:P/I:P/A:P", "detail": "fixed-version: Fixed from version 15.0.874.102" }, { "id": "CVE-2011-3885", "status": "Patched", "link": "https://nvd.nist.gov/vuln/detail/CVE-2011-3885", "summary": "Use-after-free vulnerability in Google Chrome before 15.0.874.102 allows remote attackers to cause a denial of service or possibly have unspecified other impact via vectors related to stale Cascading Style Sheets (CSS) token-sequence data.", "scorev2": "7.5", "scorev3": "0.0", "scorev4": "0.0", "modified": "2026-06-16T23:34:05.000", "vector": "NETWORK", "vectorString": "AV:N/AC:L/Au:N/C:P/I:P/A:P", "detail": "fixed-version: Fixed from version 15.0.874.102" }, { "id": "CVE-2011-3887", "status": "Patched", "link": "https://nvd.nist.gov/vuln/detail/CVE-2011-3887", "summary": "Google Chrome before 15.0.874.102 does not properly handle javascript: URLs, which allows remote attackers to bypass intended access restrictions and read cookies via unspecified vectors.", "scorev2": "5.0", "scorev3": "0.0", "scorev4": "0.0", "modified": "2026-06-16T23:34:06.000", "vector": "NETWORK", "vectorString": "AV:N/AC:L/Au:N/C:P/I:N/A:N", "detail": "fixed-version: Fixed from version 15.0.874.102" }, { "id": "CVE-2011-3888", "status": "Patched", "link": "https://nvd.nist.gov/vuln/detail/CVE-2011-3888", "summary": "Use-after-free vulnerability in Google Chrome before 15.0.874.102 allows user-assisted remote attackers to cause a denial of service or possibly have unspecified other impact via vectors related to editing operations in conjunction with an unknown plug-in.", "scorev2": "6.8", "scorev3": "0.0", "scorev4": "0.0", "modified": "2026-06-16T23:34:06.000", "vector": "NETWORK", "vectorString": "AV:N/AC:M/Au:N/C:P/I:P/A:P", "detail": "fixed-version: Fixed from version 15.0.874.102" }, { "id": "CVE-2011-3889", "status": "Patched", "link": "https://nvd.nist.gov/vuln/detail/CVE-2011-3889", "summary": "Heap-based buffer overflow in the Web Audio implementation in Google Chrome before 15.0.874.102 allows remote attackers to cause a denial of service or possibly have unspecified other impact via unknown vectors.", "scorev2": "7.5", "scorev3": "0.0", "scorev4": "0.0", "modified": "2026-06-16T23:34:06.000", "vector": "NETWORK", "vectorString": "AV:N/AC:L/Au:N/C:P/I:P/A:P", "detail": "fixed-version: Fixed from version 15.0.874.102" }, { "id": "CVE-2011-3890", "status": "Patched", "link": "https://nvd.nist.gov/vuln/detail/CVE-2011-3890", "summary": "Use-after-free vulnerability in Google Chrome before 15.0.874.102 allows remote attackers to cause a denial of service or possibly have unspecified other impact via vectors related to video source handling.", "scorev2": "7.5", "scorev3": "0.0", "scorev4": "0.0", "modified": "2026-06-16T23:34:06.000", "vector": "NETWORK", "vectorString": "AV:N/AC:L/Au:N/C:P/I:P/A:P", "detail": "fixed-version: Fixed from version 15.0.874.102" }, { "id": "CVE-2011-3891", "status": "Patched", "link": "https://nvd.nist.gov/vuln/detail/CVE-2011-3891", "summary": "Google Chrome before 15.0.874.102 does not properly restrict access to internal Google V8 functions, which allows remote attackers to cause a denial of service or possibly have unspecified other impact via unknown vectors.", "scorev2": "7.5", "scorev3": "0.0", "scorev4": "0.0", "modified": "2026-06-16T23:34:06.000", "vector": "NETWORK", "vectorString": "AV:N/AC:L/Au:N/C:P/I:P/A:P", "detail": "fixed-version: Fixed from version 15.0.874.102" }, { "id": "CVE-2011-3892", "status": "Patched", "link": "https://nvd.nist.gov/vuln/detail/CVE-2011-3892", "summary": "Double free vulnerability in the Theora decoder in Google Chrome before 15.0.874.120 allows remote attackers to cause a denial of service or possibly have unspecified other impact via a crafted stream.", "scorev2": "7.5", "scorev3": "0.0", "scorev4": "0.0", "modified": "2026-06-16T23:34:06.000", "vector": "NETWORK", "vectorString": "AV:N/AC:L/Au:N/C:P/I:P/A:P", "detail": "fixed-version: Fixed from version 15.0.874.120" }, { "id": "CVE-2011-3893", "status": "Patched", "link": "https://nvd.nist.gov/vuln/detail/CVE-2011-3893", "summary": "Google Chrome before 15.0.874.120 does not properly implement the MKV and Vorbis media handlers, which allows remote attackers to cause a denial of service (out-of-bounds read) via unspecified vectors.", "scorev2": "5.0", "scorev3": "0.0", "scorev4": "0.0", "modified": "2026-06-16T23:34:06.000", "vector": "NETWORK", "vectorString": "AV:N/AC:L/Au:N/C:N/I:N/A:P", "detail": "fixed-version: Fixed from version 15.0.874.120" }, { "id": "CVE-2011-3894", "status": "Patched", "link": "https://nvd.nist.gov/vuln/detail/CVE-2011-3894", "summary": "Google Chrome before 15.0.874.120 does not properly perform VP8 decoding, which allows remote attackers to cause a denial of service (memory corruption) or possibly have unspecified other impact via a crafted stream.", "scorev2": "7.5", "scorev3": "0.0", "scorev4": "0.0", "modified": "2026-06-16T23:34:06.000", "vector": "NETWORK", "vectorString": "AV:N/AC:L/Au:N/C:P/I:P/A:P", "detail": "fixed-version: Fixed from version 15.0.874.120" }, { "id": "CVE-2011-3895", "status": "Patched", "link": "https://nvd.nist.gov/vuln/detail/CVE-2011-3895", "summary": "Heap-based buffer overflow in the Vorbis decoder in Google Chrome before 15.0.874.120 allows remote attackers to cause a denial of service or possibly have unspecified other impact via a crafted stream.", "scorev2": "7.5", "scorev3": "0.0", "scorev4": "0.0", "modified": "2026-06-16T23:34:07.000", "vector": "NETWORK", "vectorString": "AV:N/AC:L/Au:N/C:P/I:P/A:P", "detail": "fixed-version: Fixed from version 15.0.874.120" }, { "id": "CVE-2011-3896", "status": "Patched", "link": "https://nvd.nist.gov/vuln/detail/CVE-2011-3896", "summary": "Buffer overflow in Google Chrome before 15.0.874.120 allows remote attackers to cause a denial of service or possibly have unspecified other impact via vectors related to shader variable mapping.", "scorev2": "7.5", "scorev3": "0.0", "scorev4": "0.0", "modified": "2026-06-16T23:34:07.000", "vector": "NETWORK", "vectorString": "AV:N/AC:L/Au:N/C:P/I:P/A:P", "detail": "fixed-version: Fixed from version 15.0.874.120" }, { "id": "CVE-2011-3897", "status": "Patched", "link": "https://nvd.nist.gov/vuln/detail/CVE-2011-3897", "summary": "Use-after-free vulnerability in Google Chrome before 15.0.874.120 allows user-assisted remote attackers to cause a denial of service or possibly have unspecified other impact via vectors related to editing.", "scorev2": "6.8", "scorev3": "0.0", "scorev4": "0.0", "modified": "2026-06-16T23:34:07.000", "vector": "NETWORK", "vectorString": "AV:N/AC:M/Au:N/C:P/I:P/A:P", "detail": "fixed-version: Fixed from version 15.0.874.120" }, { "id": "CVE-2011-3898", "status": "Patched", "link": "https://nvd.nist.gov/vuln/detail/CVE-2011-3898", "summary": "Google Chrome before 15.0.874.120, when Java Runtime Environment (JRE) 7 is used, does not request user confirmation before applet execution begins, which allows remote attackers to have an unspecified impact via a crafted applet.", "scorev2": "7.5", "scorev3": "0.0", "scorev4": "0.0", "modified": "2026-06-16T23:34:07.000", "vector": "NETWORK", "vectorString": "AV:N/AC:L/Au:N/C:P/I:P/A:P", "detail": "fixed-version: Fixed from version 15.0.874.120" }, { "id": "CVE-2011-3900", "status": "Patched", "link": "https://nvd.nist.gov/vuln/detail/CVE-2011-3900", "summary": "Google V8, as used in Google Chrome before 15.0.874.121, allows remote attackers to cause a denial of service or possibly have unspecified other impact via unknown vectors that trigger an out-of-bounds write operation.", "scorev2": "7.5", "scorev3": "0.0", "scorev4": "0.0", "modified": "2026-06-16T23:34:07.000", "vector": "NETWORK", "vectorString": "AV:N/AC:L/Au:N/C:P/I:P/A:P", "detail": "fixed-version: Fixed from version 15.0.874.121" }, { "id": "CVE-2011-3903", "status": "Patched", "link": "https://nvd.nist.gov/vuln/detail/CVE-2011-3903", "summary": "Google Chrome before 16.0.912.63 does not properly perform regex matching, which allows remote attackers to cause a denial of service (out-of-bounds read) via unspecified vectors.", "scorev2": "5.0", "scorev3": "0.0", "scorev4": "0.0", "modified": "2026-06-16T23:34:07.000", "vector": "NETWORK", "vectorString": "AV:N/AC:L/Au:N/C:N/I:N/A:P", "detail": "fixed-version: Fixed from version 16.0.912.63" }, { "id": "CVE-2011-3904", "status": "Patched", "link": "https://nvd.nist.gov/vuln/detail/CVE-2011-3904", "summary": "Use-after-free vulnerability in Google Chrome before 16.0.912.63 allows remote attackers to cause a denial of service or possibly have unspecified other impact via vectors related to bidirectional text (aka bidi) handling.", "scorev2": "7.5", "scorev3": "0.0", "scorev4": "0.0", "modified": "2026-06-16T23:34:07.000", "vector": "NETWORK", "vectorString": "AV:N/AC:L/Au:N/C:P/I:P/A:P", "detail": "fixed-version: Fixed from version 16.0.912.63" }, { "id": "CVE-2011-3905", "status": "Patched", "link": "https://nvd.nist.gov/vuln/detail/CVE-2011-3905", "summary": "libxml2, as used in Google Chrome before 16.0.912.63, allows remote attackers to cause a denial of service (out-of-bounds read) via unspecified vectors.", "scorev2": "5.0", "scorev3": "0.0", "scorev4": "0.0", "modified": "2026-06-16T23:34:07.000", "vector": "NETWORK", "vectorString": "AV:N/AC:L/Au:N/C:N/I:N/A:P", "detail": "fixed-version: Fixed from version 16.0.912.63" }, { "id": "CVE-2011-3906", "status": "Patched", "link": "https://nvd.nist.gov/vuln/detail/CVE-2011-3906", "summary": "The PDF parser in Google Chrome before 16.0.912.63 allows remote attackers to cause a denial of service (out-of-bounds read) via unspecified vectors.", "scorev2": "5.0", "scorev3": "0.0", "scorev4": "0.0", "modified": "2026-06-16T23:34:07.000", "vector": "NETWORK", "vectorString": "AV:N/AC:L/Au:N/C:N/I:N/A:P", "detail": "fixed-version: Fixed from version 16.0.912.63" }, { "id": "CVE-2011-3907", "status": "Patched", "link": "https://nvd.nist.gov/vuln/detail/CVE-2011-3907", "summary": "The view-source feature in Google Chrome before 16.0.912.63 allows remote attackers to spoof the URL bar via unspecified vectors.", "scorev2": "4.3", "scorev3": "0.0", "scorev4": "0.0", "modified": "2026-06-16T23:34:08.000", "vector": "NETWORK", "vectorString": "AV:N/AC:M/Au:N/C:N/I:P/A:N", "detail": "fixed-version: Fixed from version 16.0.912.63" }, { "id": "CVE-2011-3908", "status": "Patched", "link": "https://nvd.nist.gov/vuln/detail/CVE-2011-3908", "summary": "Google Chrome before 16.0.912.63 does not properly parse SVG documents, which allows remote attackers to cause a denial of service (out-of-bounds read) via unspecified vectors.", "scorev2": "5.0", "scorev3": "0.0", "scorev4": "0.0", "modified": "2026-06-16T23:34:08.000", "vector": "NETWORK", "vectorString": "AV:N/AC:L/Au:N/C:N/I:N/A:P", "detail": "fixed-version: Fixed from version 16.0.912.63" }, { "id": "CVE-2011-3909", "status": "Patched", "link": "https://nvd.nist.gov/vuln/detail/CVE-2011-3909", "summary": "The Cascading Style Sheets (CSS) implementation in Google Chrome before 16.0.912.63 on 64-bit platforms does not properly manage property arrays, which allows remote attackers to cause a denial of service (memory corruption) via unspecified vectors.", "scorev2": "5.0", "scorev3": "0.0", "scorev4": "0.0", "modified": "2026-06-16T23:34:08.000", "vector": "NETWORK", "vectorString": "AV:N/AC:L/Au:N/C:N/I:N/A:P", "detail": "fixed-version: Fixed from version 16.0.912.63" }, { "id": "CVE-2011-3910", "status": "Patched", "link": "https://nvd.nist.gov/vuln/detail/CVE-2011-3910", "summary": "Google Chrome before 16.0.912.63 does not properly handle YUV video frames, which allows remote attackers to cause a denial of service (out-of-bounds read) via unspecified vectors.", "scorev2": "5.0", "scorev3": "0.0", "scorev4": "0.0", "modified": "2026-06-16T23:34:08.000", "vector": "NETWORK", "vectorString": "AV:N/AC:L/Au:N/C:N/I:N/A:P", "detail": "fixed-version: Fixed from version 16.0.912.63" }, { "id": "CVE-2011-3911", "status": "Patched", "link": "https://nvd.nist.gov/vuln/detail/CVE-2011-3911", "summary": "Google Chrome before 16.0.912.63 does not properly handle PDF documents, which allows remote attackers to cause a denial of service (out-of-bounds read) via unspecified vectors.", "scorev2": "5.0", "scorev3": "0.0", "scorev4": "0.0", "modified": "2026-06-16T23:34:08.000", "vector": "NETWORK", "vectorString": "AV:N/AC:L/Au:N/C:N/I:N/A:P", "detail": "fixed-version: Fixed from version 16.0.912.63" }, { "id": "CVE-2011-3912", "status": "Patched", "link": "https://nvd.nist.gov/vuln/detail/CVE-2011-3912", "summary": "Use-after-free vulnerability in Google Chrome before 16.0.912.63 allows remote attackers to cause a denial of service or possibly have unspecified other impact via vectors related to SVG filters.", "scorev2": "7.5", "scorev3": "0.0", "scorev4": "0.0", "modified": "2026-06-16T23:34:08.000", "vector": "NETWORK", "vectorString": "AV:N/AC:L/Au:N/C:P/I:P/A:P", "detail": "fixed-version: Fixed from version 16.0.912.63" }, { "id": "CVE-2011-3913", "status": "Patched", "link": "https://nvd.nist.gov/vuln/detail/CVE-2011-3913", "summary": "Use-after-free vulnerability in Google Chrome before 16.0.912.63 allows remote attackers to cause a denial of service or possibly have unspecified other impact via vectors related to Range handling.", "scorev2": "7.5", "scorev3": "0.0", "scorev4": "0.0", "modified": "2026-06-16T23:34:08.000", "vector": "NETWORK", "vectorString": "AV:N/AC:L/Au:N/C:P/I:P/A:P", "detail": "fixed-version: Fixed from version 16.0.912.63" }, { "id": "CVE-2011-3914", "status": "Patched", "link": "https://nvd.nist.gov/vuln/detail/CVE-2011-3914", "summary": "The internationalization (aka i18n) functionality in Google V8, as used in Google Chrome before 16.0.912.63, allows remote attackers to cause a denial of service or possibly have unspecified other impact via unknown vectors that trigger an out-of-bounds write.", "scorev2": "7.5", "scorev3": "0.0", "scorev4": "0.0", "modified": "2026-06-16T23:34:08.000", "vector": "NETWORK", "vectorString": "AV:N/AC:L/Au:N/C:P/I:P/A:P", "detail": "fixed-version: Fixed from version 16.0.912.63" }, { "id": "CVE-2011-3915", "status": "Patched", "link": "https://nvd.nist.gov/vuln/detail/CVE-2011-3915", "summary": "Buffer overflow in Google Chrome before 16.0.912.63 allows remote attackers to cause a denial of service or possibly have unspecified other impact via vectors related to PDF fonts.", "scorev2": "7.5", "scorev3": "0.0", "scorev4": "0.0", "modified": "2026-06-16T23:34:08.000", "vector": "NETWORK", "vectorString": "AV:N/AC:L/Au:N/C:P/I:P/A:P", "detail": "fixed-version: Fixed from version 16.0.912.63" }, { "id": "CVE-2011-3916", "status": "Patched", "link": "https://nvd.nist.gov/vuln/detail/CVE-2011-3916", "summary": "Google Chrome before 16.0.912.63 does not properly handle PDF cross references, which allows remote attackers to cause a denial of service (out-of-bounds read) via unspecified vectors.", "scorev2": "5.0", "scorev3": "0.0", "scorev4": "0.0", "modified": "2026-06-16T23:34:09.000", "vector": "NETWORK", "vectorString": "AV:N/AC:L/Au:N/C:N/I:N/A:P", "detail": "fixed-version: Fixed from version 16.0.912.63" }, { "id": "CVE-2011-3917", "status": "Patched", "link": "https://nvd.nist.gov/vuln/detail/CVE-2011-3917", "summary": "Stack-based buffer overflow in FileWatcher in Google Chrome before 16.0.912.63 allows remote attackers to cause a denial of service or possibly have unspecified other impact via unknown vectors.", "scorev2": "7.5", "scorev3": "0.0", "scorev4": "0.0", "modified": "2026-06-16T23:34:09.000", "vector": "NETWORK", "vectorString": "AV:N/AC:L/Au:N/C:P/I:P/A:P", "detail": "fixed-version: Fixed from version 16.0.912.63" }, { "id": "CVE-2011-3919", "status": "Patched", "link": "https://nvd.nist.gov/vuln/detail/CVE-2011-3919", "summary": "Heap-based buffer overflow in libxml2, as used in Google Chrome before 16.0.912.75, allows remote attackers to cause a denial of service or possibly have unspecified other impact via unknown vectors.", "scorev2": "7.5", "scorev3": "0.0", "scorev4": "0.0", "modified": "2026-06-16T23:34:09.000", "vector": "NETWORK", "vectorString": "AV:N/AC:L/Au:N/C:P/I:P/A:P", "detail": "fixed-version: Fixed from version 16.0.912.75" }, { "id": "CVE-2011-3921", "status": "Patched", "link": "https://nvd.nist.gov/vuln/detail/CVE-2011-3921", "summary": "Use-after-free vulnerability in Google Chrome before 16.0.912.75 allows remote attackers to cause a denial of service or possibly have unspecified other impact via vectors involving animation frames.", "scorev2": "7.5", "scorev3": "0.0", "scorev4": "0.0", "modified": "2026-06-16T23:34:09.000", "vector": "NETWORK", "vectorString": "AV:N/AC:L/Au:N/C:P/I:P/A:P", "detail": "fixed-version: Fixed from version 16.0.912.75" }, { "id": "CVE-2011-3922", "status": "Patched", "link": "https://nvd.nist.gov/vuln/detail/CVE-2011-3922", "summary": "Stack-based buffer overflow in Google Chrome before 16.0.912.75 allows remote attackers to cause a denial of service or possibly have unspecified other impact via vectors related to glyph handling.", "scorev2": "7.5", "scorev3": "0.0", "scorev4": "0.0", "modified": "2026-06-16T23:34:09.000", "vector": "NETWORK", "vectorString": "AV:N/AC:L/Au:N/C:P/I:P/A:P", "detail": "fixed-version: Fixed from version 16.0.912.75" }, { "id": "CVE-2011-3924", "status": "Patched", "link": "https://nvd.nist.gov/vuln/detail/CVE-2011-3924", "summary": "Use-after-free vulnerability in Google Chrome before 16.0.912.77 allows remote attackers to cause a denial of service or possibly have unspecified other impact via vectors related to DOM selections.", "scorev2": "7.5", "scorev3": "0.0", "scorev4": "0.0", "modified": "2026-06-16T23:34:09.000", "vector": "NETWORK", "vectorString": "AV:N/AC:L/Au:N/C:P/I:P/A:P", "detail": "fixed-version: Fixed from version 16.0.912.77" }, { "id": "CVE-2011-3925", "status": "Patched", "link": "https://nvd.nist.gov/vuln/detail/CVE-2011-3925", "summary": "Use-after-free vulnerability in the Safe Browsing feature in Google Chrome before 16.0.912.75 allows remote attackers to cause a denial of service (heap memory corruption) or possibly have unspecified other impact via vectors related to a navigation entry and an interstitial page.", "scorev2": "7.5", "scorev3": "0.0", "scorev4": "0.0", "modified": "2026-06-16T23:34:09.000", "vector": "NETWORK", "vectorString": "AV:N/AC:L/Au:N/C:P/I:P/A:P", "detail": "fixed-version: Fixed from version 16.0.912.75" }, { "id": "CVE-2011-3926", "status": "Patched", "link": "https://nvd.nist.gov/vuln/detail/CVE-2011-3926", "summary": "Heap-based buffer overflow in the tree builder in Google Chrome before 16.0.912.77 allows remote attackers to cause a denial of service or possibly have unspecified other impact via unknown vectors.", "scorev2": "7.5", "scorev3": "0.0", "scorev4": "0.0", "modified": "2026-06-16T23:34:10.000", "vector": "NETWORK", "vectorString": "AV:N/AC:L/Au:N/C:P/I:P/A:P", "detail": "fixed-version: Fixed from version 16.0.912.77" }, { "id": "CVE-2011-3927", "status": "Patched", "link": "https://nvd.nist.gov/vuln/detail/CVE-2011-3927", "summary": "Skia, as used in Google Chrome before 16.0.912.77, does not perform all required initialization of values, which allows remote attackers to cause a denial of service or possibly have unspecified other impact via unknown vectors.", "scorev2": "7.5", "scorev3": "0.0", "scorev4": "0.0", "modified": "2026-06-16T23:34:10.000", "vector": "NETWORK", "vectorString": "AV:N/AC:L/Au:N/C:P/I:P/A:P", "detail": "fixed-version: Fixed from version 16.0.912.77" }, { "id": "CVE-2011-3928", "status": "Patched", "link": "https://nvd.nist.gov/vuln/detail/CVE-2011-3928", "summary": "Use-after-free vulnerability in Google Chrome before 16.0.912.77 allows remote attackers to cause a denial of service or possibly have unspecified other impact via vectors related to DOM handling.", "scorev2": "7.5", "scorev3": "0.0", "scorev4": "0.0", "modified": "2026-06-16T23:34:10.000", "vector": "NETWORK", "vectorString": "AV:N/AC:L/Au:N/C:P/I:P/A:P", "detail": "fixed-version: Fixed from version 16.0.912.77" }, { "id": "CVE-2011-3953", "status": "Patched", "link": "https://nvd.nist.gov/vuln/detail/CVE-2011-3953", "summary": "Google Chrome before 17.0.963.46 does not prevent monitoring of the clipboard after a paste event, which has unspecified impact and remote attack vectors.", "scorev2": "7.5", "scorev3": "0.0", "scorev4": "0.0", "modified": "2026-06-16T23:34:12.000", "vector": "NETWORK", "vectorString": "AV:N/AC:L/Au:N/C:P/I:P/A:P", "detail": "fixed-version: Fixed from version 17.0.963.46" }, { "id": "CVE-2011-3954", "status": "Patched", "link": "https://nvd.nist.gov/vuln/detail/CVE-2011-3954", "summary": "Google Chrome before 17.0.963.46 allows remote attackers to cause a denial of service (application crash) via vectors that trigger a large amount of database usage.", "scorev2": "5.0", "scorev3": "0.0", "scorev4": "0.0", "modified": "2026-06-16T23:34:12.000", "vector": "NETWORK", "vectorString": "AV:N/AC:L/Au:N/C:N/I:N/A:P", "detail": "fixed-version: Fixed from version 17.0.963.46" }, { "id": "CVE-2011-3955", "status": "Patched", "link": "https://nvd.nist.gov/vuln/detail/CVE-2011-3955", "summary": "Google Chrome before 17.0.963.46 allows remote attackers to cause a denial of service (application crash) or possibly have unspecified other impact via vectors that trigger the aborting of an IndexedDB transaction.", "scorev2": "7.5", "scorev3": "0.0", "scorev4": "0.0", "modified": "2026-06-16T23:34:12.000", "vector": "NETWORK", "vectorString": "AV:N/AC:L/Au:N/C:P/I:P/A:P", "detail": "fixed-version: Fixed from version 17.0.963.46" }, { "id": "CVE-2011-3956", "status": "Patched", "link": "https://nvd.nist.gov/vuln/detail/CVE-2011-3956", "summary": "The extension implementation in Google Chrome before 17.0.963.46 does not properly handle sandboxed origins, which might allow remote attackers to bypass the Same Origin Policy via a crafted extension.", "scorev2": "6.8", "scorev3": "0.0", "scorev4": "0.0", "modified": "2026-06-16T23:34:12.000", "vector": "NETWORK", "vectorString": "AV:N/AC:M/Au:N/C:P/I:P/A:P", "detail": "fixed-version: Fixed from version 17.0.963.46" }, { "id": "CVE-2011-3957", "status": "Patched", "link": "https://nvd.nist.gov/vuln/detail/CVE-2011-3957", "summary": "Use-after-free vulnerability in the garbage-collection functionality in Google Chrome before 17.0.963.46 allows remote attackers to cause a denial of service or possibly have unspecified other impact via vectors involving PDF documents.", "scorev2": "7.5", "scorev3": "0.0", "scorev4": "0.0", "modified": "2026-06-16T23:34:12.000", "vector": "NETWORK", "vectorString": "AV:N/AC:L/Au:N/C:P/I:P/A:P", "detail": "fixed-version: Fixed from version 17.0.963.46" }, { "id": "CVE-2011-3958", "status": "Patched", "link": "https://nvd.nist.gov/vuln/detail/CVE-2011-3958", "summary": "Google Chrome before 17.0.963.46 does not properly perform casts of variables during handling of a column span, which allows remote attackers to cause a denial of service or possibly have unspecified other impact via a crafted document.", "scorev2": "6.8", "scorev3": "0.0", "scorev4": "0.0", "modified": "2026-06-16T23:34:12.000", "vector": "NETWORK", "vectorString": "AV:N/AC:M/Au:N/C:P/I:P/A:P", "detail": "fixed-version: Fixed from version 17.0.963.46" }, { "id": "CVE-2011-3959", "status": "Patched", "link": "https://nvd.nist.gov/vuln/detail/CVE-2011-3959", "summary": "Buffer overflow in the locale implementation in Google Chrome before 17.0.963.46 allows remote attackers to cause a denial of service or possibly have unspecified other impact via unknown vectors.", "scorev2": "7.5", "scorev3": "0.0", "scorev4": "0.0", "modified": "2026-06-16T23:34:12.000", "vector": "NETWORK", "vectorString": "AV:N/AC:L/Au:N/C:P/I:P/A:P", "detail": "fixed-version: Fixed from version 17.0.963.46" }, { "id": "CVE-2011-3960", "status": "Patched", "link": "https://nvd.nist.gov/vuln/detail/CVE-2011-3960", "summary": "Google Chrome before 17.0.963.46 does not properly decode audio data, which allows remote attackers to cause a denial of service (out-of-bounds read) via unspecified vectors.", "scorev2": "4.3", "scorev3": "0.0", "scorev4": "0.0", "modified": "2026-06-16T23:34:12.000", "vector": "NETWORK", "vectorString": "AV:N/AC:M/Au:N/C:N/I:N/A:P", "detail": "fixed-version: Fixed from version 17.0.963.46" }, { "id": "CVE-2011-3961", "status": "Patched", "link": "https://nvd.nist.gov/vuln/detail/CVE-2011-3961", "summary": "Race condition in Google Chrome before 17.0.963.46 allows remote attackers to execute arbitrary code via vectors that trigger a crash of a utility process.", "scorev2": "9.3", "scorev3": "0.0", "scorev4": "0.0", "modified": "2026-06-16T23:34:12.000", "vector": "NETWORK", "vectorString": "AV:N/AC:M/Au:N/C:C/I:C/A:C", "detail": "fixed-version: Fixed from version 17.0.963.46" }, { "id": "CVE-2011-3962", "status": "Patched", "link": "https://nvd.nist.gov/vuln/detail/CVE-2011-3962", "summary": "Google Chrome before 17.0.963.46 does not properly perform path clipping, which allows remote attackers to cause a denial of service (out-of-bounds read) via unspecified vectors.", "scorev2": "4.3", "scorev3": "0.0", "scorev4": "0.0", "modified": "2026-06-16T23:34:12.000", "vector": "NETWORK", "vectorString": "AV:N/AC:M/Au:N/C:N/I:N/A:P", "detail": "fixed-version: Fixed from version 17.0.963.46" }, { "id": "CVE-2011-3963", "status": "Patched", "link": "https://nvd.nist.gov/vuln/detail/CVE-2011-3963", "summary": "Google Chrome before 17.0.963.46 does not properly handle PDF FAX images, which allows remote attackers to cause a denial of service (out-of-bounds read) via unspecified vectors.", "scorev2": "5.0", "scorev3": "0.0", "scorev4": "0.0", "modified": "2026-06-16T23:34:13.000", "vector": "NETWORK", "vectorString": "AV:N/AC:L/Au:N/C:N/I:N/A:P", "detail": "fixed-version: Fixed from version 17.0.963.46" }, { "id": "CVE-2011-3964", "status": "Patched", "link": "https://nvd.nist.gov/vuln/detail/CVE-2011-3964", "summary": "Google Chrome before 17.0.963.46 does not properly implement the drag-and-drop feature, which makes it easier for remote attackers to spoof the URL bar via unspecified vectors.", "scorev2": "5.8", "scorev3": "0.0", "scorev4": "0.0", "modified": "2026-06-16T23:34:13.000", "vector": "NETWORK", "vectorString": "AV:N/AC:M/Au:N/C:P/I:P/A:N", "detail": "fixed-version: Fixed from version 17.0.963.46" }, { "id": "CVE-2011-3965", "status": "Patched", "link": "https://nvd.nist.gov/vuln/detail/CVE-2011-3965", "summary": "Google Chrome before 17.0.963.46 does not properly check signatures, which allows remote attackers to cause a denial of service (application crash) via unspecified vectors.", "scorev2": "5.0", "scorev3": "0.0", "scorev4": "0.0", "modified": "2026-06-16T23:34:13.000", "vector": "NETWORK", "vectorString": "AV:N/AC:L/Au:N/C:N/I:N/A:P", "detail": "fixed-version: Fixed from version 17.0.963.46" }, { "id": "CVE-2011-3966", "status": "Patched", "link": "https://nvd.nist.gov/vuln/detail/CVE-2011-3966", "summary": "Use-after-free vulnerability in Google Chrome before 17.0.963.46 allows remote attackers to cause a denial of service or possibly have unspecified other impact via vectors related to error handling for Cascading Style Sheets (CSS) token-sequence data.", "scorev2": "7.5", "scorev3": "0.0", "scorev4": "0.0", "modified": "2026-06-16T23:34:13.000", "vector": "NETWORK", "vectorString": "AV:N/AC:L/Au:N/C:P/I:P/A:P", "detail": "fixed-version: Fixed from version 17.0.963.46" }, { "id": "CVE-2011-3967", "status": "Patched", "link": "https://nvd.nist.gov/vuln/detail/CVE-2011-3967", "summary": "Unspecified vulnerability in Google Chrome before 17.0.963.46 allows remote attackers to cause a denial of service (application crash) via a crafted certificate.", "scorev2": "5.0", "scorev3": "0.0", "scorev4": "0.0", "modified": "2026-06-16T23:34:13.000", "vector": "NETWORK", "vectorString": "AV:N/AC:L/Au:N/C:N/I:N/A:P", "detail": "fixed-version: Fixed from version 17.0.963.46" }, { "id": "CVE-2011-3968", "status": "Patched", "link": "https://nvd.nist.gov/vuln/detail/CVE-2011-3968", "summary": "Use-after-free vulnerability in Google Chrome before 17.0.963.46 allows remote attackers to cause a denial of service or possibly have unspecified other impact via vectors involving Cascading Style Sheets (CSS) token sequences.", "scorev2": "4.3", "scorev3": "0.0", "scorev4": "0.0", "modified": "2026-06-16T23:34:13.000", "vector": "NETWORK", "vectorString": "AV:N/AC:M/Au:N/C:N/I:N/A:P", "detail": "fixed-version: Fixed from version 17.0.963.46" }, { "id": "CVE-2011-3969", "status": "Patched", "link": "https://nvd.nist.gov/vuln/detail/CVE-2011-3969", "summary": "Use-after-free vulnerability in Google Chrome before 17.0.963.46 allows remote attackers to cause a denial of service or possibly have unspecified other impact via vectors related to layout of SVG documents.", "scorev2": "6.8", "scorev3": "0.0", "scorev4": "0.0", "modified": "2026-06-16T23:34:13.000", "vector": "NETWORK", "vectorString": "AV:N/AC:M/Au:N/C:P/I:P/A:P", "detail": "fixed-version: Fixed from version 17.0.963.46" }, { "id": "CVE-2011-3970", "status": "Patched", "link": "https://nvd.nist.gov/vuln/detail/CVE-2011-3970", "summary": "libxslt, as used in Google Chrome before 17.0.963.46, allows remote attackers to cause a denial of service (out-of-bounds read) via unspecified vectors.", "scorev2": "4.3", "scorev3": "0.0", "scorev4": "0.0", "modified": "2026-06-16T23:34:13.000", "vector": "NETWORK", "vectorString": "AV:N/AC:M/Au:N/C:N/I:N/A:P", "detail": "fixed-version: Fixed from version 17.0.963.46" }, { "id": "CVE-2011-3971", "status": "Patched", "link": "https://nvd.nist.gov/vuln/detail/CVE-2011-3971", "summary": "Use-after-free vulnerability in Google Chrome before 17.0.963.46 allows user-assisted remote attackers to cause a denial of service or possibly have unspecified other impact via vectors related to mousemove events.", "scorev2": "6.8", "scorev3": "0.0", "scorev4": "0.0", "modified": "2026-06-16T23:34:13.000", "vector": "NETWORK", "vectorString": "AV:N/AC:M/Au:N/C:P/I:P/A:P", "detail": "fixed-version: Fixed from version 17.0.963.46" }, { "id": "CVE-2011-3972", "status": "Patched", "link": "https://nvd.nist.gov/vuln/detail/CVE-2011-3972", "summary": "The shader translator implementation in Google Chrome before 17.0.963.46 allows remote attackers to cause a denial of service (out-of-bounds read) via unspecified vectors.", "scorev2": "5.0", "scorev3": "0.0", "scorev4": "0.0", "modified": "2026-06-16T23:34:14.000", "vector": "NETWORK", "vectorString": "AV:N/AC:L/Au:N/C:N/I:N/A:P", "detail": "fixed-version: Fixed from version 17.0.963.46" }, { "id": "CVE-2011-4691", "status": "Patched", "link": "https://nvd.nist.gov/vuln/detail/CVE-2011-4691", "summary": "Google Chrome 15.0.874.121 and earlier does not prevent capture of data about the times of Same Origin Policy violations during IFRAME loading attempts, which makes it easier for remote attackers to determine whether a document exists in the browser cache via crafted JavaScript code.", "scorev2": "5.0", "scorev3": "0.0", "scorev4": "0.0", "modified": "2026-06-16T23:35:15.000", "vector": "NETWORK", "vectorString": "AV:N/AC:L/Au:N/C:P/I:N/A:N", "detail": "fixed-version: Fixed from version >15.0.874.121" }, { "id": "CVE-2011-4692", "status": "Patched", "link": "https://nvd.nist.gov/vuln/detail/CVE-2011-4692", "summary": "WebKit, as used in Apple Safari 5.1.1 and earlier and Google Chrome 15 and earlier, does not prevent capture of data about the time required for image loading, which makes it easier for remote attackers to determine whether an image exists in the browser cache via crafted JavaScript code, as demonstrated by visipisi.", "scorev2": "5.0", "scorev3": "0.0", "scorev4": "0.0", "modified": "2026-06-16T23:35:15.000", "vector": "NETWORK", "vectorString": "AV:N/AC:L/Au:N/C:P/I:N/A:N", "detail": "fixed-version: Fixed from version >15" }, { "id": "CVE-2011-5319", "status": "Patched", "link": "https://nvd.nist.gov/vuln/detail/CVE-2011-5319", "summary": "content/renderer/device_sensors/device_motion_event_pump.cc in Google Chrome before 41.0.2272.76 does not properly restrict access to high-rate accelerometer data, which makes it easier for remote attackers to capture keystrokes via a crafted web site that listens for ondevicemotion events, a different vulnerability than CVE-2015-1231.", "scorev2": "5.0", "scorev3": "0.0", "scorev4": "0.0", "modified": "2026-06-16T23:36:20.000", "vector": "NETWORK", "vectorString": "AV:N/AC:L/Au:N/C:P/I:N/A:N", "detail": "fixed-version: Fixed from version >40.0.2214.115" }, { "id": "CVE-2012-0724", "status": "Patched", "link": "https://nvd.nist.gov/vuln/detail/CVE-2012-0724", "summary": "Adobe Flash Player before 11.2.202.229 in Google Chrome before 18.0.1025.151 allow attackers to cause a denial of service (memory corruption) or possibly have unspecified other impact via unknown vectors, a different vulnerability than CVE-2012-0725.", "scorev2": "9.3", "scorev3": "0.0", "scorev4": "0.0", "modified": "2026-06-16T23:38:08.000", "vector": "NETWORK", "vectorString": "AV:N/AC:M/Au:N/C:C/I:C/A:C", "detail": "fixed-version: Fixed from version 18.0.1025.151" }, { "id": "CVE-2012-0725", "status": "Patched", "link": "https://nvd.nist.gov/vuln/detail/CVE-2012-0725", "summary": "Adobe Flash Player before 11.2.202.229 in Google Chrome before 18.0.1025.151 allow attackers to cause a denial of service (memory corruption) or possibly have unspecified other impact via unknown vectors, a different vulnerability than CVE-2012-0724.", "scorev2": "9.3", "scorev3": "0.0", "scorev4": "0.0", "modified": "2026-06-16T23:38:08.000", "vector": "NETWORK", "vectorString": "AV:N/AC:M/Au:N/C:C/I:C/A:C", "detail": "fixed-version: Fixed from version 18.0.1025.151" }, { "id": "CVE-2012-1521", "status": "Patched", "link": "https://nvd.nist.gov/vuln/detail/CVE-2012-1521", "summary": "Use-after-free vulnerability in the XML parser in Google Chrome before 18.0.1025.168 allows remote attackers to cause a denial of service or possibly have unspecified other impact via unknown vectors.", "scorev2": "6.8", "scorev3": "0.0", "scorev4": "0.0", "modified": "2026-06-16T23:39:40.000", "vector": "NETWORK", "vectorString": "AV:N/AC:M/Au:N/C:P/I:P/A:P", "detail": "fixed-version: Fixed from version 18.0.1025.168" }, { "id": "CVE-2012-1845", "status": "Patched", "link": "https://nvd.nist.gov/vuln/detail/CVE-2012-1845", "summary": "Use-after-free vulnerability in Google Chrome 17.0.963.66 and earlier allows remote attackers to bypass the DEP and ASLR protection mechanisms, and execute arbitrary code, via unspecified vectors, as demonstrated by VUPEN during a Pwn2Own competition at CanSecWest 2012. NOTE: the primary affected product may be clarified later; it was not identified by the researcher, who reportedly stated \"it really doesn't matter if it's third-party code.\"", "scorev2": "9.3", "scorev3": "0.0", "scorev4": "0.0", "modified": "2026-06-16T23:40:24.000", "vector": "NETWORK", "vectorString": "AV:N/AC:M/Au:N/C:C/I:C/A:C", "detail": "fixed-version: Fixed from version >17.0.963.66" }, { "id": "CVE-2012-1846", "status": "Patched", "link": "https://nvd.nist.gov/vuln/detail/CVE-2012-1846", "summary": "Google Chrome 17.0.963.66 and earlier allows remote attackers to bypass the sandbox protection mechanism by leveraging access to a sandboxed process, as demonstrated by VUPEN during a Pwn2Own competition at CanSecWest 2012. NOTE: the primary affected product may be clarified later; it was not identified by the researcher, who reportedly stated \"it really doesn't matter if it's third-party code.\"", "scorev2": "10.0", "scorev3": "0.0", "scorev4": "0.0", "modified": "2026-06-16T23:40:25.000", "vector": "NETWORK", "vectorString": "AV:N/AC:L/Au:N/C:C/I:C/A:C", "detail": "fixed-version: Fixed from version >17.0.963.66" }, { "id": "CVE-2012-2764", "status": "Patched", "link": "https://nvd.nist.gov/vuln/detail/CVE-2012-2764", "summary": "Untrusted search path vulnerability in Google Chrome before 20.0.1132.43 on Windows might allow local users to gain privileges via a Trojan horse Metro DLL in the current working directory.", "scorev2": "7.2", "scorev3": "0.0", "scorev4": "0.0", "modified": "2026-06-16T23:42:03.000", "vector": "LOCAL", "vectorString": "AV:L/AC:L/Au:N/C:C/I:C/A:C", "detail": "fixed-version: Fixed from version >20.0.1132.42" }, { "id": "CVE-2012-2807", "status": "Patched", "link": "https://nvd.nist.gov/vuln/detail/CVE-2012-2807", "summary": "Multiple integer overflows in libxml2, as used in Google Chrome before 20.0.1132.43 and other products, on 64-bit Linux platforms allow remote attackers to cause a denial of service or possibly have unspecified other impact via unknown vectors.", "scorev2": "6.8", "scorev3": "0.0", "scorev4": "0.0", "modified": "2026-06-16T23:42:08.000", "vector": "NETWORK", "vectorString": "AV:N/AC:M/Au:N/C:P/I:P/A:P", "detail": "fixed-version: Fixed from version >20.0.1132.42" }, { "id": "CVE-2012-2815", "status": "Patched", "link": "https://nvd.nist.gov/vuln/detail/CVE-2012-2815", "summary": "Google Chrome before 20.0.1132.43 allows remote attackers to obtain potentially sensitive information from a fragment identifier by leveraging access to an IFRAME element associated with a different domain.", "scorev2": "5.0", "scorev3": "0.0", "scorev4": "0.0", "modified": "2026-06-16T23:42:09.000", "vector": "NETWORK", "vectorString": "AV:N/AC:L/Au:N/C:P/I:N/A:N", "detail": "fixed-version: Fixed from version >20.0.1132.42" }, { "id": "CVE-2012-2816", "status": "Patched", "link": "https://nvd.nist.gov/vuln/detail/CVE-2012-2816", "summary": "Google Chrome before 20.0.1132.43 on Windows does not properly isolate sandboxed processes, which might allow remote attackers to cause a denial of service (process interference) via unspecified vectors.", "scorev2": "7.8", "scorev3": "0.0", "scorev4": "0.0", "modified": "2026-06-16T23:42:09.000", "vector": "NETWORK", "vectorString": "AV:N/AC:L/Au:N/C:N/I:N/A:C", "detail": "fixed-version: Fixed from version >20.0.1132.42" }, { "id": "CVE-2012-2817", "status": "Patched", "link": "https://nvd.nist.gov/vuln/detail/CVE-2012-2817", "summary": "Use-after-free vulnerability in Google Chrome before 20.0.1132.43 allows remote attackers to cause a denial of service or possibly have unspecified other impact via vectors related to tables that have sections.", "scorev2": "7.5", "scorev3": "0.0", "scorev4": "0.0", "modified": "2026-06-16T23:42:09.000", "vector": "NETWORK", "vectorString": "AV:N/AC:L/Au:N/C:P/I:P/A:P", "detail": "fixed-version: Fixed from version >20.0.1132.42" }, { "id": "CVE-2012-2818", "status": "Patched", "link": "https://nvd.nist.gov/vuln/detail/CVE-2012-2818", "summary": "Use-after-free vulnerability in Google Chrome before 20.0.1132.43 allows remote attackers to cause a denial of service or possibly have unspecified other impact via vectors related to the layout of documents that use the Cascading Style Sheets (CSS) counters feature.", "scorev2": "7.5", "scorev3": "0.0", "scorev4": "0.0", "modified": "2026-06-16T23:42:09.000", "vector": "NETWORK", "vectorString": "AV:N/AC:L/Au:N/C:P/I:P/A:P", "detail": "fixed-version: Fixed from version >20.0.1132.42" }, { "id": "CVE-2012-2819", "status": "Patched", "link": "https://nvd.nist.gov/vuln/detail/CVE-2012-2819", "summary": "The texSubImage2D implementation in the WebGL subsystem in Google Chrome before 20.0.1132.43 does not properly handle uploads to floating-point textures, which allows remote attackers to cause a denial of service (assertion failure and application crash) or possibly have unspecified other impact via a crafted web page, as demonstrated by certain WebGL performance tests, aka rdar problem 11520387.", "scorev2": "6.8", "scorev3": "0.0", "scorev4": "0.0", "modified": "2026-06-16T23:42:09.000", "vector": "NETWORK", "vectorString": "AV:N/AC:M/Au:N/C:P/I:P/A:P", "detail": "fixed-version: Fixed from version >20.0.1132.42" }, { "id": "CVE-2012-2820", "status": "Patched", "link": "https://nvd.nist.gov/vuln/detail/CVE-2012-2820", "summary": "Google Chrome before 20.0.1132.43 does not properly implement SVG filters, which allows remote attackers to cause a denial of service (out-of-bounds read) via unspecified vectors.", "scorev2": "5.0", "scorev3": "0.0", "scorev4": "0.0", "modified": "2026-06-16T23:42:09.000", "vector": "NETWORK", "vectorString": "AV:N/AC:L/Au:N/C:N/I:N/A:P", "detail": "fixed-version: Fixed from version >20.0.1132.42" }, { "id": "CVE-2012-2821", "status": "Patched", "link": "https://nvd.nist.gov/vuln/detail/CVE-2012-2821", "summary": "The autofill implementation in Google Chrome before 20.0.1132.43 does not properly display text, which has unspecified impact and remote attack vectors.", "scorev2": "7.5", "scorev3": "0.0", "scorev4": "0.0", "modified": "2026-06-16T23:42:09.000", "vector": "NETWORK", "vectorString": "AV:N/AC:L/Au:N/C:P/I:P/A:P", "detail": "fixed-version: Fixed from version >20.0.1132.42" }, { "id": "CVE-2012-2822", "status": "Patched", "link": "https://nvd.nist.gov/vuln/detail/CVE-2012-2822", "summary": "The PDF functionality in Google Chrome before 20.0.1132.43 allows remote attackers to cause a denial of service (out-of-bounds read) via unspecified vectors.", "scorev2": "5.0", "scorev3": "0.0", "scorev4": "0.0", "modified": "2026-06-16T23:42:09.000", "vector": "NETWORK", "vectorString": "AV:N/AC:L/Au:N/C:N/I:N/A:P", "detail": "fixed-version: Fixed from version >20.0.1132.42" }, { "id": "CVE-2012-2823", "status": "Patched", "link": "https://nvd.nist.gov/vuln/detail/CVE-2012-2823", "summary": "Use-after-free vulnerability in Google Chrome before 20.0.1132.43 allows remote attackers to cause a denial of service or possibly have unspecified other impact via vectors related to SVG resources.", "scorev2": "7.5", "scorev3": "0.0", "scorev4": "0.0", "modified": "2026-06-16T23:42:10.000", "vector": "NETWORK", "vectorString": "AV:N/AC:L/Au:N/C:P/I:P/A:P", "detail": "fixed-version: Fixed from version >20.0.1132.42" }, { "id": "CVE-2012-2824", "status": "Patched", "link": "https://nvd.nist.gov/vuln/detail/CVE-2012-2824", "summary": "Use-after-free vulnerability in Google Chrome before 20.0.1132.43 allows remote attackers to cause a denial of service or possibly have unspecified other impact via vectors related to SVG painting.", "scorev2": "7.5", "scorev3": "0.0", "scorev4": "0.0", "modified": "2026-06-16T23:42:10.000", "vector": "NETWORK", "vectorString": "AV:N/AC:L/Au:N/C:P/I:P/A:P", "detail": "fixed-version: Fixed from version >20.0.1132.42" }, { "id": "CVE-2012-2825", "status": "Patched", "link": "https://nvd.nist.gov/vuln/detail/CVE-2012-2825", "summary": "The XSL implementation in Google Chrome before 20.0.1132.43 allows remote attackers to cause a denial of service (incorrect read operation) via unspecified vectors.", "scorev2": "5.0", "scorev3": "0.0", "scorev4": "0.0", "modified": "2026-06-16T23:42:10.000", "vector": "NETWORK", "vectorString": "AV:N/AC:L/Au:N/C:N/I:N/A:P", "detail": "fixed-version: Fixed from version >20.0.1132.42" }, { "id": "CVE-2012-2826", "status": "Patched", "link": "https://nvd.nist.gov/vuln/detail/CVE-2012-2826", "summary": "Google Chrome before 20.0.1132.43 does not properly implement texture conversion, which allows remote attackers to cause a denial of service (out-of-bounds read) via unspecified vectors.", "scorev2": "5.0", "scorev3": "0.0", "scorev4": "0.0", "modified": "2026-06-16T23:42:10.000", "vector": "NETWORK", "vectorString": "AV:N/AC:L/Au:N/C:N/I:N/A:P", "detail": "fixed-version: Fixed from version >20.0.1132.42" }, { "id": "CVE-2012-2827", "status": "Patched", "link": "https://nvd.nist.gov/vuln/detail/CVE-2012-2827", "summary": "Use-after-free vulnerability in the UI in Google Chrome before 20.0.1132.43 on Mac OS X allows attackers to cause a denial of service or possibly have unspecified other impact via unknown vectors.", "scorev2": "7.5", "scorev3": "0.0", "scorev4": "0.0", "modified": "2026-06-16T23:42:10.000", "vector": "NETWORK", "vectorString": "AV:N/AC:L/Au:N/C:P/I:P/A:P", "detail": "fixed-version: Fixed from version >20.0.1132.42" }, { "id": "CVE-2012-2828", "status": "Patched", "link": "https://nvd.nist.gov/vuln/detail/CVE-2012-2828", "summary": "Multiple integer overflows in the PDF functionality in Google Chrome before 20.0.1132.43 allow remote attackers to cause a denial of service or possibly have unspecified other impact via a crafted document.", "scorev2": "6.8", "scorev3": "0.0", "scorev4": "0.0", "modified": "2026-06-16T23:42:10.000", "vector": "NETWORK", "vectorString": "AV:N/AC:M/Au:N/C:P/I:P/A:P", "detail": "fixed-version: Fixed from version >20.0.1132.42" }, { "id": "CVE-2012-2829", "status": "Patched", "link": "https://nvd.nist.gov/vuln/detail/CVE-2012-2829", "summary": "Use-after-free vulnerability in the Cascading Style Sheets (CSS) implementation in Google Chrome before 20.0.1132.43 allows remote attackers to cause a denial of service or possibly have unspecified other impact via vectors related to the :first-letter pseudo-element.", "scorev2": "7.5", "scorev3": "0.0", "scorev4": "0.0", "modified": "2026-06-16T23:42:10.000", "vector": "NETWORK", "vectorString": "AV:N/AC:L/Au:N/C:P/I:P/A:P", "detail": "fixed-version: Fixed from version >20.0.1132.42" }, { "id": "CVE-2012-2830", "status": "Patched", "link": "https://nvd.nist.gov/vuln/detail/CVE-2012-2830", "summary": "Google Chrome before 20.0.1132.43 does not properly set array values, which allows remote attackers to cause a denial of service (incorrect pointer use) or possibly have unspecified other impact via unknown vectors.", "scorev2": "7.5", "scorev3": "0.0", "scorev4": "0.0", "modified": "2026-06-16T23:42:10.000", "vector": "NETWORK", "vectorString": "AV:N/AC:L/Au:N/C:P/I:P/A:P", "detail": "fixed-version: Fixed from version >20.0.1132.42" }, { "id": "CVE-2012-2831", "status": "Patched", "link": "https://nvd.nist.gov/vuln/detail/CVE-2012-2831", "summary": "Use-after-free vulnerability in Google Chrome before 20.0.1132.43 allows remote attackers to cause a denial of service or possibly have unspecified other impact via vectors related to SVG references.", "scorev2": "7.5", "scorev3": "0.0", "scorev4": "0.0", "modified": "2026-06-16T23:42:10.000", "vector": "NETWORK", "vectorString": "AV:N/AC:L/Au:N/C:P/I:P/A:P", "detail": "fixed-version: Fixed from version >20.0.1132.42" }, { "id": "CVE-2012-2832", "status": "Patched", "link": "https://nvd.nist.gov/vuln/detail/CVE-2012-2832", "summary": "The image-codec implementation in the PDF functionality in Google Chrome before 20.0.1132.43 does not initialize an unspecified pointer, which allows remote attackers to cause a denial of service or possibly have unknown other impact via a crafted document.", "scorev2": "6.8", "scorev3": "0.0", "scorev4": "0.0", "modified": "2026-06-16T23:42:11.000", "vector": "NETWORK", "vectorString": "AV:N/AC:M/Au:N/C:P/I:P/A:P", "detail": "fixed-version: Fixed from version >20.0.1132.42" }, { "id": "CVE-2012-2833", "status": "Patched", "link": "https://nvd.nist.gov/vuln/detail/CVE-2012-2833", "summary": "Buffer overflow in the JS API in the PDF functionality in Google Chrome before 20.0.1132.43 allows remote attackers to cause a denial of service or possibly have unspecified other impact via unknown vectors.", "scorev2": "7.5", "scorev3": "0.0", "scorev4": "0.0", "modified": "2026-06-16T23:42:11.000", "vector": "NETWORK", "vectorString": "AV:N/AC:L/Au:N/C:P/I:P/A:P", "detail": "fixed-version: Fixed from version >20.0.1132.42" }, { "id": "CVE-2012-2834", "status": "Patched", "link": "https://nvd.nist.gov/vuln/detail/CVE-2012-2834", "summary": "Integer overflow in Google Chrome before 20.0.1132.43 allows remote attackers to cause a denial of service or possibly have unspecified other impact via crafted data in the Matroska container format.", "scorev2": "9.3", "scorev3": "0.0", "scorev4": "0.0", "modified": "2026-06-16T23:42:11.000", "vector": "NETWORK", "vectorString": "AV:N/AC:M/Au:N/C:C/I:C/A:C", "detail": "fixed-version: Fixed from version >20.0.1132.42" }, { "id": "CVE-2012-2842", "status": "Patched", "link": "https://nvd.nist.gov/vuln/detail/CVE-2012-2842", "summary": "Use-after-free vulnerability in Google Chrome before 20.0.1132.57 allows remote attackers to cause a denial of service or possibly have unspecified other impact via vectors related to counter handling.", "scorev2": "7.5", "scorev3": "0.0", "scorev4": "0.0", "modified": "2026-06-16T23:42:11.000", "vector": "NETWORK", "vectorString": "AV:N/AC:L/Au:N/C:P/I:P/A:P", "detail": "fixed-version: Fixed from version >20.0.1132.56" }, { "id": "CVE-2012-2843", "status": "Patched", "link": "https://nvd.nist.gov/vuln/detail/CVE-2012-2843", "summary": "Use-after-free vulnerability in Google Chrome before 20.0.1132.57 allows remote attackers to cause a denial of service or possibly have unspecified other impact via vectors related to layout height tracking.", "scorev2": "7.5", "scorev3": "0.0", "scorev4": "0.0", "modified": "2026-06-16T23:42:12.000", "vector": "NETWORK", "vectorString": "AV:N/AC:L/Au:N/C:P/I:P/A:P", "detail": "fixed-version: Fixed from version >20.0.1132.56" }, { "id": "CVE-2012-2844", "status": "Patched", "link": "https://nvd.nist.gov/vuln/detail/CVE-2012-2844", "summary": "The PDF functionality in Google Chrome before 20.0.1132.57 does not properly handle JavaScript code, which allows remote attackers to cause a denial of service (incorrect object access) or possibly have unspecified other impact via a crafted document.", "scorev2": "9.3", "scorev3": "0.0", "scorev4": "0.0", "modified": "2026-06-16T23:42:12.000", "vector": "NETWORK", "vectorString": "AV:N/AC:M/Au:N/C:C/I:C/A:C", "detail": "fixed-version: Fixed from version >20.0.1132.56" }, { "id": "CVE-2012-2846", "status": "Patched", "link": "https://nvd.nist.gov/vuln/detail/CVE-2012-2846", "summary": "Google Chrome before 21.0.1180.57 on Linux does not properly isolate renderer processes, which allows remote attackers to cause a denial of service (cross-process interference) via unspecified vectors.", "scorev2": "5.0", "scorev3": "0.0", "scorev4": "0.0", "modified": "2026-06-16T23:42:12.000", "vector": "NETWORK", "vectorString": "AV:N/AC:L/Au:N/C:N/I:N/A:P", "detail": "fixed-version: Fixed from version >21.0.1180.56" }, { "id": "CVE-2012-2847", "status": "Patched", "link": "https://nvd.nist.gov/vuln/detail/CVE-2012-2847", "summary": "Google Chrome before 21.0.1180.57 on Mac OS X and Linux, and before 21.0.1180.60 on Windows and Chrome Frame, does not request user confirmation before continuing a large series of downloads, which allows user-assisted remote attackers to cause a denial of service (resource consumption) via a crafted web site.", "scorev2": "4.3", "scorev3": "0.0", "scorev4": "0.0", "modified": "2026-06-16T23:42:12.000", "vector": "NETWORK", "vectorString": "AV:N/AC:M/Au:N/C:N/I:N/A:P", "detail": "fixed-version: Fixed from version >21.0.1180.59" }, { "id": "CVE-2012-2848", "status": "Patched", "link": "https://nvd.nist.gov/vuln/detail/CVE-2012-2848", "summary": "The drag-and-drop implementation in Google Chrome before 21.0.1180.57 on Mac OS X and Linux, and before 21.0.1180.60 on Windows and Chrome Frame, allows user-assisted remote attackers to bypass intended file access restrictions via a crafted web site.", "scorev2": "4.3", "scorev3": "0.0", "scorev4": "0.0", "modified": "2026-06-16T23:42:12.000", "vector": "NETWORK", "vectorString": "AV:N/AC:M/Au:N/C:N/I:P/A:N", "detail": "fixed-version: Fixed from version >21.0.1180.59" }, { "id": "CVE-2012-2849", "status": "Patched", "link": "https://nvd.nist.gov/vuln/detail/CVE-2012-2849", "summary": "Off-by-one error in the GIF decoder in Google Chrome before 21.0.1180.57 on Mac OS X and Linux, and before 21.0.1180.60 on Windows and Chrome Frame, allows remote attackers to cause a denial of service (out-of-bounds read) via a crafted image.", "scorev2": "4.3", "scorev3": "0.0", "scorev4": "0.0", "modified": "2026-06-16T23:42:12.000", "vector": "NETWORK", "vectorString": "AV:N/AC:M/Au:N/C:N/I:N/A:P", "detail": "fixed-version: Fixed from version >21.0.1180.59" }, { "id": "CVE-2012-2850", "status": "Patched", "link": "https://nvd.nist.gov/vuln/detail/CVE-2012-2850", "summary": "Multiple unspecified vulnerabilities in the PDF functionality in Google Chrome before 21.0.1180.57 on Mac OS X and Linux, and before 21.0.1180.60 on Windows and Chrome Frame, allow remote attackers to have an unknown impact via a crafted document.", "scorev2": "6.8", "scorev3": "0.0", "scorev4": "0.0", "modified": "2026-06-16T23:42:12.000", "vector": "NETWORK", "vectorString": "AV:N/AC:M/Au:N/C:P/I:P/A:P", "detail": "fixed-version: Fixed from version >21.0.1180.59" }, { "id": "CVE-2012-2851", "status": "Patched", "link": "https://nvd.nist.gov/vuln/detail/CVE-2012-2851", "summary": "Multiple integer overflows in the PDF functionality in Google Chrome before 21.0.1180.57 on Mac OS X and Linux, and before 21.0.1180.60 on Windows and Chrome Frame, allow remote attackers to cause a denial of service or possibly have unspecified other impact via a crafted document.", "scorev2": "6.8", "scorev3": "0.0", "scorev4": "0.0", "modified": "2026-06-16T23:42:12.000", "vector": "NETWORK", "vectorString": "AV:N/AC:M/Au:N/C:P/I:P/A:P", "detail": "fixed-version: Fixed from version >21.0.1180.59" }, { "id": "CVE-2012-2852", "status": "Patched", "link": "https://nvd.nist.gov/vuln/detail/CVE-2012-2852", "summary": "The PDF functionality in Google Chrome before 21.0.1180.57 on Mac OS X and Linux, and before 21.0.1180.60 on Windows and Chrome Frame, does not properly handle object linkage, which allows remote attackers to cause a denial of service (use-after-free) or possibly have unspecified other impact via a crafted document.", "scorev2": "6.8", "scorev3": "0.0", "scorev4": "0.0", "modified": "2026-06-16T23:42:13.000", "vector": "NETWORK", "vectorString": "AV:N/AC:M/Au:N/C:P/I:P/A:P", "detail": "fixed-version: Fixed from version >21.0.1180.59" }, { "id": "CVE-2012-2853", "status": "Patched", "link": "https://nvd.nist.gov/vuln/detail/CVE-2012-2853", "summary": "The webRequest API in Google Chrome before 21.0.1180.57 on Mac OS X and Linux, and before 21.0.1180.60 on Windows and Chrome Frame, does not properly interact with the Chrome Web Store, which allows remote attackers to cause a denial of service or possibly have unspecified other impact via a crafted web site.", "scorev2": "6.8", "scorev3": "0.0", "scorev4": "0.0", "modified": "2026-06-16T23:42:13.000", "vector": "NETWORK", "vectorString": "AV:N/AC:M/Au:N/C:P/I:P/A:P", "detail": "fixed-version: Fixed from version >21.0.1180.59" }, { "id": "CVE-2012-2854", "status": "Patched", "link": "https://nvd.nist.gov/vuln/detail/CVE-2012-2854", "summary": "Google Chrome before 21.0.1180.57 on Mac OS X and Linux, and before 21.0.1180.60 on Windows and Chrome Frame, allows remote attackers to obtain potentially sensitive information about pointer values by leveraging access to a WebUI renderer process.", "scorev2": "5.0", "scorev3": "0.0", "scorev4": "0.0", "modified": "2026-06-16T23:42:13.000", "vector": "NETWORK", "vectorString": "AV:N/AC:L/Au:N/C:P/I:N/A:N", "detail": "fixed-version: Fixed from version >21.0.1180.59" }, { "id": "CVE-2012-2855", "status": "Patched", "link": "https://nvd.nist.gov/vuln/detail/CVE-2012-2855", "summary": "Use-after-free vulnerability in the PDF functionality in Google Chrome before 21.0.1180.57 on Mac OS X and Linux, and before 21.0.1180.60 on Windows and Chrome Frame, allows remote attackers to cause a denial of service or possibly have unspecified other impact via a crafted document.", "scorev2": "6.8", "scorev3": "0.0", "scorev4": "0.0", "modified": "2026-06-16T23:42:13.000", "vector": "NETWORK", "vectorString": "AV:N/AC:M/Au:N/C:P/I:P/A:P", "detail": "fixed-version: Fixed from version >21.0.1180.59" }, { "id": "CVE-2012-2856", "status": "Patched", "link": "https://nvd.nist.gov/vuln/detail/CVE-2012-2856", "summary": "The PDF functionality in Google Chrome before 21.0.1180.57 on Mac OS X and Linux, and before 21.0.1180.60 on Windows and Chrome Frame, allows remote attackers to cause a denial of service or possibly have unspecified other impact via vectors that trigger out-of-bounds write operations.", "scorev2": "7.5", "scorev3": "0.0", "scorev4": "0.0", "modified": "2026-06-16T23:42:13.000", "vector": "NETWORK", "vectorString": "AV:N/AC:L/Au:N/C:P/I:P/A:P", "detail": "fixed-version: Fixed from version >21.0.1180.59" }, { "id": "CVE-2012-2857", "status": "Patched", "link": "https://nvd.nist.gov/vuln/detail/CVE-2012-2857", "summary": "Use-after-free vulnerability in the Cascading Style Sheets (CSS) DOM implementation in Google Chrome before 21.0.1180.57 on Mac OS X and Linux, and before 21.0.1180.60 on Windows and Chrome Frame, allows remote attackers to cause a denial of service or possibly have unspecified other impact via a crafted document.", "scorev2": "6.8", "scorev3": "0.0", "scorev4": "0.0", "modified": "2026-06-16T23:42:13.000", "vector": "NETWORK", "vectorString": "AV:N/AC:M/Au:N/C:P/I:P/A:P", "detail": "fixed-version: Fixed from version >21.0.1180.59" }, { "id": "CVE-2012-2858", "status": "Patched", "link": "https://nvd.nist.gov/vuln/detail/CVE-2012-2858", "summary": "Buffer overflow in the WebP decoder in Google Chrome before 21.0.1180.57 on Mac OS X and Linux, and before 21.0.1180.60 on Windows and Chrome Frame, allows remote attackers to cause a denial of service or possibly have unspecified other impact via a crafted WebP image.", "scorev2": "6.8", "scorev3": "0.0", "scorev4": "0.0", "modified": "2026-06-16T23:42:13.000", "vector": "NETWORK", "vectorString": "AV:N/AC:M/Au:N/C:P/I:P/A:P", "detail": "fixed-version: Fixed from version >21.0.1180.59" }, { "id": "CVE-2012-2859", "status": "Patched", "link": "https://nvd.nist.gov/vuln/detail/CVE-2012-2859", "summary": "Google Chrome before 21.0.1180.57 on Linux does not properly handle tabs, which allows remote attackers to execute arbitrary code or cause a denial of service (application crash) via unspecified vectors.", "scorev2": "7.5", "scorev3": "0.0", "scorev4": "0.0", "modified": "2026-06-16T23:42:13.000", "vector": "NETWORK", "vectorString": "AV:N/AC:L/Au:N/C:P/I:P/A:P", "detail": "fixed-version: Fixed from version >21.0.1180.56" }, { "id": "CVE-2012-2860", "status": "Patched", "link": "https://nvd.nist.gov/vuln/detail/CVE-2012-2860", "summary": "The date-picker implementation in Google Chrome before 21.0.1180.57 on Mac OS X and Linux, and before 21.0.1180.60 on Windows and Chrome Frame, allows user-assisted remote attackers to cause a denial of service or possibly have unspecified other impact via a crafted web site.", "scorev2": "6.8", "scorev3": "0.0", "scorev4": "0.0", "modified": "2026-06-16T23:42:14.000", "vector": "NETWORK", "vectorString": "AV:N/AC:M/Au:N/C:P/I:P/A:P", "detail": "fixed-version: Fixed from version >21.0.1180.59" }, { "id": "CVE-2012-2862", "status": "Patched", "link": "https://nvd.nist.gov/vuln/detail/CVE-2012-2862", "summary": "Use-after-free vulnerability in the PDF functionality in Google Chrome before 21.0.1180.75 allows remote attackers to cause a denial of service or possibly have unspecified other impact via a crafted document.", "scorev2": "6.8", "scorev3": "0.0", "scorev4": "0.0", "modified": "2026-06-16T23:42:14.000", "vector": "NETWORK", "vectorString": "AV:N/AC:M/Au:N/C:P/I:P/A:P", "detail": "fixed-version: Fixed from version >21.0.1180.74" }, { "id": "CVE-2012-2863", "status": "Patched", "link": "https://nvd.nist.gov/vuln/detail/CVE-2012-2863", "summary": "The PDF functionality in Google Chrome before 21.0.1180.75 allows remote attackers to cause a denial of service or possibly have unspecified other impact via vectors that trigger out-of-bounds write operations.", "scorev2": "7.5", "scorev3": "0.0", "scorev4": "0.0", "modified": "2026-06-16T23:42:14.000", "vector": "NETWORK", "vectorString": "AV:N/AC:L/Au:N/C:P/I:P/A:P", "detail": "fixed-version: Fixed from version >21.0.1180.74" }, { "id": "CVE-2012-2865", "status": "Patched", "link": "https://nvd.nist.gov/vuln/detail/CVE-2012-2865", "summary": "Google Chrome before 21.0.1180.89 does not properly perform line breaking, which allows remote attackers to cause a denial of service (out-of-bounds read) via a crafted document.", "scorev2": "4.3", "scorev3": "0.0", "scorev4": "0.0", "modified": "2026-06-16T23:42:14.000", "vector": "NETWORK", "vectorString": "AV:N/AC:M/Au:N/C:N/I:N/A:P", "detail": "fixed-version: Fixed from version >21.0.1180.88" }, { "id": "CVE-2012-2866", "status": "Patched", "link": "https://nvd.nist.gov/vuln/detail/CVE-2012-2866", "summary": "Google Chrome before 21.0.1180.89 does not properly perform a cast of an unspecified variable during handling of run-in elements, which allows remote attackers to cause a denial of service or possibly have unknown other impact via a crafted document.", "scorev2": "7.5", "scorev3": "0.0", "scorev4": "0.0", "modified": "2026-06-16T23:42:14.000", "vector": "NETWORK", "vectorString": "AV:N/AC:L/Au:N/C:P/I:P/A:P", "detail": "fixed-version: Fixed from version >21.0.1180.88" }, { "id": "CVE-2012-2867", "status": "Patched", "link": "https://nvd.nist.gov/vuln/detail/CVE-2012-2867", "summary": "The SPDY implementation in Google Chrome before 21.0.1180.89 allows remote attackers to cause a denial of service (application crash) via unspecified vectors.", "scorev2": "5.0", "scorev3": "0.0", "scorev4": "0.0", "modified": "2026-06-16T23:42:14.000", "vector": "NETWORK", "vectorString": "AV:N/AC:L/Au:N/C:N/I:N/A:P", "detail": "fixed-version: Fixed from version >21.0.1180.88" }, { "id": "CVE-2012-2868", "status": "Patched", "link": "https://nvd.nist.gov/vuln/detail/CVE-2012-2868", "summary": "Race condition in Google Chrome before 21.0.1180.89 allows remote attackers to cause a denial of service or possibly have unspecified other impact via vectors involving improper interaction between worker processes and an XMLHttpRequest (aka XHR) object.", "scorev2": "6.8", "scorev3": "0.0", "scorev4": "0.0", "modified": "2026-06-16T23:42:14.000", "vector": "NETWORK", "vectorString": "AV:N/AC:M/Au:N/C:P/I:P/A:P", "detail": "fixed-version: Fixed from version >21.0.1180.88" }, { "id": "CVE-2012-2869", "status": "Patched", "link": "https://nvd.nist.gov/vuln/detail/CVE-2012-2869", "summary": "Google Chrome before 21.0.1180.89 does not properly load URLs, which allows remote attackers to cause a denial of service or possibly have unspecified other impact via vectors that trigger a \"stale buffer.\"", "scorev2": "7.5", "scorev3": "0.0", "scorev4": "0.0", "modified": "2026-06-16T23:42:14.000", "vector": "NETWORK", "vectorString": "AV:N/AC:L/Au:N/C:P/I:P/A:P", "detail": "fixed-version: Fixed from version >21.0.1180.88" }, { "id": "CVE-2012-2870", "status": "Patched", "link": "https://nvd.nist.gov/vuln/detail/CVE-2012-2870", "summary": "libxslt 1.1.26 and earlier, as used in Google Chrome before 21.0.1180.89, does not properly manage memory, which might allow remote attackers to cause a denial of service (application crash) via a crafted XSLT expression that is not properly identified during XPath navigation, related to (1) the xsltCompileLocationPathPattern function in libxslt/pattern.c and (2) the xsltGenerateIdFunction function in libxslt/functions.c.", "scorev2": "4.3", "scorev3": "0.0", "scorev4": "0.0", "modified": "2026-06-16T23:42:15.000", "vector": "NETWORK", "vectorString": "AV:N/AC:M/Au:N/C:N/I:N/A:P", "detail": "fixed-version: Fixed from version >21.0.1180.88" }, { "id": "CVE-2012-2871", "status": "Patched", "link": "https://nvd.nist.gov/vuln/detail/CVE-2012-2871", "summary": "libxml2 2.9.0-rc1 and earlier, as used in Google Chrome before 21.0.1180.89, does not properly support a cast of an unspecified variable during handling of XSL transforms, which allows remote attackers to cause a denial of service or possibly have unknown other impact via a crafted document, related to the _xmlNs data structure in include/libxml/tree.h.", "scorev2": "6.8", "scorev3": "0.0", "scorev4": "0.0", "modified": "2026-06-16T23:42:15.000", "vector": "NETWORK", "vectorString": "AV:N/AC:M/Au:N/C:P/I:P/A:P", "detail": "fixed-version: Fixed from version >21.0.1180.88" }, { "id": "CVE-2012-2872", "status": "Patched", "link": "https://nvd.nist.gov/vuln/detail/CVE-2012-2872", "summary": "Cross-site scripting (XSS) vulnerability in an SSL interstitial page in Google Chrome before 21.0.1180.89 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors.", "scorev2": "4.3", "scorev3": "0.0", "scorev4": "0.0", "modified": "2026-06-16T23:42:15.000", "vector": "NETWORK", "vectorString": "AV:N/AC:M/Au:N/C:N/I:P/A:N", "detail": "fixed-version: Fixed from version >21.0.1180.88" }, { "id": "CVE-2012-2874", "status": "Patched", "link": "https://nvd.nist.gov/vuln/detail/CVE-2012-2874", "summary": "Skia, as used in Google Chrome before 22.0.1229.79, allows remote attackers to cause a denial of service or possibly have unspecified other impact via vectors that trigger an out-of-bounds write operation, a different vulnerability than CVE-2012-2883.", "scorev2": "7.5", "scorev3": "0.0", "scorev4": "0.0", "modified": "2026-06-16T23:42:15.000", "vector": "NETWORK", "vectorString": "AV:N/AC:L/Au:N/C:P/I:P/A:P", "detail": "fixed-version: Fixed from version >22.0.1229.78" }, { "id": "CVE-2012-2875", "status": "Patched", "link": "https://nvd.nist.gov/vuln/detail/CVE-2012-2875", "summary": "Multiple unspecified vulnerabilities in the PDF functionality in Google Chrome before 22.0.1229.79 allow remote attackers to have an unknown impact via a crafted document.", "scorev2": "6.8", "scorev3": "0.0", "scorev4": "0.0", "modified": "2026-06-16T23:42:15.000", "vector": "NETWORK", "vectorString": "AV:N/AC:M/Au:N/C:P/I:P/A:P", "detail": "fixed-version: Fixed from version >22.0.1229.78" }, { "id": "CVE-2012-2876", "status": "Patched", "link": "https://nvd.nist.gov/vuln/detail/CVE-2012-2876", "summary": "Buffer overflow in the SSE2 optimization functionality in Google Chrome before 22.0.1229.79 allows remote attackers to cause a denial of service or possibly have unspecified other impact via unknown vectors.", "scorev2": "7.5", "scorev3": "0.0", "scorev4": "0.0", "modified": "2026-06-16T23:42:15.000", "vector": "NETWORK", "vectorString": "AV:N/AC:L/Au:N/C:P/I:P/A:P", "detail": "fixed-version: Fixed from version >22.0.1229.78" }, { "id": "CVE-2012-2877", "status": "Patched", "link": "https://nvd.nist.gov/vuln/detail/CVE-2012-2877", "summary": "The extension system in Google Chrome before 22.0.1229.79 does not properly handle modal dialogs, which allows remote attackers to cause a denial of service (application crash) via unspecified vectors.", "scorev2": "5.0", "scorev3": "0.0", "scorev4": "0.0", "modified": "2026-06-16T23:42:15.000", "vector": "NETWORK", "vectorString": "AV:N/AC:L/Au:N/C:N/I:N/A:P", "detail": "fixed-version: Fixed from version >22.0.1229.78" }, { "id": "CVE-2012-2878", "status": "Patched", "link": "https://nvd.nist.gov/vuln/detail/CVE-2012-2878", "summary": "Use-after-free vulnerability in Google Chrome before 22.0.1229.79 allows remote attackers to cause a denial of service or possibly have unspecified other impact via vectors related to plug-in handling.", "scorev2": "7.5", "scorev3": "0.0", "scorev4": "0.0", "modified": "2026-06-16T23:42:16.000", "vector": "NETWORK", "vectorString": "AV:N/AC:L/Au:N/C:P/I:P/A:P", "detail": "fixed-version: Fixed from version >22.0.1229.78" }, { "id": "CVE-2012-2879", "status": "Patched", "link": "https://nvd.nist.gov/vuln/detail/CVE-2012-2879", "summary": "Google Chrome before 22.0.1229.79 allows remote attackers to cause a denial of service (DOM topology corruption) via a crafted document.", "scorev2": "4.3", "scorev3": "0.0", "scorev4": "0.0", "modified": "2026-06-16T23:42:16.000", "vector": "NETWORK", "vectorString": "AV:N/AC:M/Au:N/C:N/I:N/A:P", "detail": "fixed-version: Fixed from version >22.0.1229.78" }, { "id": "CVE-2012-2880", "status": "Patched", "link": "https://nvd.nist.gov/vuln/detail/CVE-2012-2880", "summary": "Race condition in Google Chrome before 22.0.1229.79 allows remote attackers to cause a denial of service or possibly have unspecified other impact via vectors related to the plug-in paint buffer.", "scorev2": "7.5", "scorev3": "0.0", "scorev4": "0.0", "modified": "2026-06-16T23:42:16.000", "vector": "NETWORK", "vectorString": "AV:N/AC:L/Au:N/C:P/I:P/A:P", "detail": "fixed-version: Fixed from version >22.0.1229.78" }, { "id": "CVE-2012-2881", "status": "Patched", "link": "https://nvd.nist.gov/vuln/detail/CVE-2012-2881", "summary": "Google Chrome before 22.0.1229.79 does not properly handle plug-ins, which allows remote attackers to cause a denial of service (DOM tree corruption) or possibly have unspecified other impact via unknown vectors.", "scorev2": "7.5", "scorev3": "0.0", "scorev4": "0.0", "modified": "2026-06-16T23:42:16.000", "vector": "NETWORK", "vectorString": "AV:N/AC:L/Au:N/C:P/I:P/A:P", "detail": "fixed-version: Fixed from version >22.0.1229.78" }, { "id": "CVE-2012-2882", "status": "Patched", "link": "https://nvd.nist.gov/vuln/detail/CVE-2012-2882", "summary": "FFmpeg, as used in Google Chrome before 22.0.1229.79, does not properly handle OGG containers, which allows remote attackers to cause a denial of service or possibly have unspecified other impact via unknown vectors, related to a \"wild pointer\" issue.", "scorev2": "6.8", "scorev3": "0.0", "scorev4": "0.0", "modified": "2026-06-16T23:42:16.000", "vector": "NETWORK", "vectorString": "AV:N/AC:M/Au:N/C:P/I:P/A:P", "detail": "fixed-version: Fixed from version >22.0.1229.78" }, { "id": "CVE-2012-2883", "status": "Patched", "link": "https://nvd.nist.gov/vuln/detail/CVE-2012-2883", "summary": "Skia, as used in Google Chrome before 22.0.1229.79, allows remote attackers to cause a denial of service or possibly have unspecified other impact via vectors that trigger an out-of-bounds write operation, a different vulnerability than CVE-2012-2874.", "scorev2": "7.5", "scorev3": "0.0", "scorev4": "0.0", "modified": "2026-06-16T23:42:16.000", "vector": "NETWORK", "vectorString": "AV:N/AC:L/Au:N/C:P/I:P/A:P", "detail": "fixed-version: Fixed from version >22.0.1229.78" }, { "id": "CVE-2012-2884", "status": "Patched", "link": "https://nvd.nist.gov/vuln/detail/CVE-2012-2884", "summary": "Skia, as used in Google Chrome before 22.0.1229.79, allows remote attackers to cause a denial of service (out-of-bounds read) via unspecified vectors.", "scorev2": "5.0", "scorev3": "0.0", "scorev4": "0.0", "modified": "2026-06-16T23:42:16.000", "vector": "NETWORK", "vectorString": "AV:N/AC:L/Au:N/C:N/I:N/A:P", "detail": "fixed-version: Fixed from version >22.0.1229.78" }, { "id": "CVE-2012-2885", "status": "Patched", "link": "https://nvd.nist.gov/vuln/detail/CVE-2012-2885", "summary": "Double free vulnerability in Google Chrome before 22.0.1229.79 allows remote attackers to cause a denial of service or possibly have unspecified other impact via vectors related to application exit.", "scorev2": "7.5", "scorev3": "0.0", "scorev4": "0.0", "modified": "2026-06-16T23:42:16.000", "vector": "NETWORK", "vectorString": "AV:N/AC:L/Au:N/C:P/I:P/A:P", "detail": "fixed-version: Fixed from version >22.0.1229.78" }, { "id": "CVE-2012-2886", "status": "Patched", "link": "https://nvd.nist.gov/vuln/detail/CVE-2012-2886", "summary": "Cross-site scripting (XSS) vulnerability in Google Chrome before 22.0.1229.79 allows remote attackers to inject arbitrary web script or HTML via vectors related to the Google V8 bindings, aka \"Universal XSS (UXSS).\"", "scorev2": "4.3", "scorev3": "0.0", "scorev4": "0.0", "modified": "2026-06-16T23:42:17.000", "vector": "NETWORK", "vectorString": "AV:N/AC:M/Au:N/C:N/I:P/A:N", "detail": "fixed-version: Fixed from version >22.0.1229.78" }, { "id": "CVE-2012-2887", "status": "Patched", "link": "https://nvd.nist.gov/vuln/detail/CVE-2012-2887", "summary": "Use-after-free vulnerability in Google Chrome before 22.0.1229.79 allows remote attackers to cause a denial of service or possibly have unspecified other impact via vectors involving onclick events.", "scorev2": "7.5", "scorev3": "0.0", "scorev4": "0.0", "modified": "2026-06-16T23:42:17.000", "vector": "NETWORK", "vectorString": "AV:N/AC:L/Au:N/C:P/I:P/A:P", "detail": "fixed-version: Fixed from version >22.0.1229.78" }, { "id": "CVE-2012-2888", "status": "Patched", "link": "https://nvd.nist.gov/vuln/detail/CVE-2012-2888", "summary": "Use-after-free vulnerability in Google Chrome before 22.0.1229.79 allows remote attackers to cause a denial of service or possibly have unspecified other impact via vectors involving SVG text references.", "scorev2": "7.5", "scorev3": "0.0", "scorev4": "0.0", "modified": "2026-06-16T23:42:17.000", "vector": "NETWORK", "vectorString": "AV:N/AC:L/Au:N/C:P/I:P/A:P", "detail": "fixed-version: Fixed from version >22.0.1229.78" }, { "id": "CVE-2012-2889", "status": "Patched", "link": "https://nvd.nist.gov/vuln/detail/CVE-2012-2889", "summary": "Cross-site scripting (XSS) vulnerability in Google Chrome before 22.0.1229.79 allows remote attackers to inject arbitrary web script or HTML via vectors involving frames, aka \"Universal XSS (UXSS).\"", "scorev2": "4.3", "scorev3": "0.0", "scorev4": "0.0", "modified": "2026-06-16T23:42:17.000", "vector": "NETWORK", "vectorString": "AV:N/AC:M/Au:N/C:N/I:P/A:N", "detail": "fixed-version: Fixed from version >22.0.1229.78" }, { "id": "CVE-2012-2890", "status": "Patched", "link": "https://nvd.nist.gov/vuln/detail/CVE-2012-2890", "summary": "Use-after-free vulnerability in the PDF functionality in Google Chrome before 22.0.1229.79 allows remote attackers to cause a denial of service or possibly have unspecified other impact via a crafted document.", "scorev2": "6.8", "scorev3": "0.0", "scorev4": "0.0", "modified": "2026-06-16T23:42:17.000", "vector": "NETWORK", "vectorString": "AV:N/AC:M/Au:N/C:P/I:P/A:P", "detail": "fixed-version: Fixed from version >22.0.1229.78" }, { "id": "CVE-2012-2891", "status": "Patched", "link": "https://nvd.nist.gov/vuln/detail/CVE-2012-2891", "summary": "The IPC implementation in Google Chrome before 22.0.1229.79 allows attackers to obtain potentially sensitive information about memory addresses via unspecified vectors.", "scorev2": "5.0", "scorev3": "0.0", "scorev4": "0.0", "modified": "2026-06-16T23:42:17.000", "vector": "NETWORK", "vectorString": "AV:N/AC:L/Au:N/C:P/I:N/A:N", "detail": "fixed-version: Fixed from version >22.0.1229.78" }, { "id": "CVE-2012-2892", "status": "Patched", "link": "https://nvd.nist.gov/vuln/detail/CVE-2012-2892", "summary": "Unspecified vulnerability in Google Chrome before 22.0.1229.79 allows remote attackers to bypass the pop-up blocker via unknown vectors.", "scorev2": "5.0", "scorev3": "0.0", "scorev4": "0.0", "modified": "2026-06-16T23:42:17.000", "vector": "NETWORK", "vectorString": "AV:N/AC:L/Au:N/C:N/I:P/A:N", "detail": "fixed-version: Fixed from version >22.0.1229.78" }, { "id": "CVE-2012-2893", "status": "Patched", "link": "https://nvd.nist.gov/vuln/detail/CVE-2012-2893", "summary": "Double free vulnerability in libxslt, as used in Google Chrome before 22.0.1229.79, allows remote attackers to cause a denial of service or possibly have unspecified other impact via vectors related to XSL transforms.", "scorev2": "6.8", "scorev3": "0.0", "scorev4": "0.0", "modified": "2026-06-16T23:42:17.000", "vector": "NETWORK", "vectorString": "AV:N/AC:M/Au:N/C:P/I:P/A:P", "detail": "fixed-version: Fixed from version >22.0.1229.78" }, { "id": "CVE-2012-2894", "status": "Patched", "link": "https://nvd.nist.gov/vuln/detail/CVE-2012-2894", "summary": "Google Chrome before 22.0.1229.79 does not properly handle graphics-context data structures, which allows remote attackers to cause a denial of service (application crash) or possibly have unspecified other impact via unknown vectors.", "scorev2": "6.8", "scorev3": "0.0", "scorev4": "0.0", "modified": "2026-06-16T23:42:18.000", "vector": "NETWORK", "vectorString": "AV:N/AC:M/Au:N/C:P/I:P/A:P", "detail": "fixed-version: Fixed from version >22.0.1229.78" }, { "id": "CVE-2012-2895", "status": "Patched", "link": "https://nvd.nist.gov/vuln/detail/CVE-2012-2895", "summary": "The PDF functionality in Google Chrome before 22.0.1229.79 allows remote attackers to cause a denial of service or possibly have unspecified other impact via vectors that trigger out-of-bounds write operations.", "scorev2": "6.8", "scorev3": "0.0", "scorev4": "0.0", "modified": "2026-06-16T23:42:18.000", "vector": "NETWORK", "vectorString": "AV:N/AC:M/Au:N/C:P/I:P/A:P", "detail": "fixed-version: Fixed from version >22.0.1229.78" }, { "id": "CVE-2012-2896", "status": "Patched", "link": "https://nvd.nist.gov/vuln/detail/CVE-2012-2896", "summary": "Integer overflow in the WebGL implementation in Google Chrome before 22.0.1229.79 on Mac OS X allows remote attackers to cause a denial of service or possibly have unspecified other impact via unknown vectors.", "scorev2": "7.5", "scorev3": "0.0", "scorev4": "0.0", "modified": "2026-06-16T23:42:18.000", "vector": "NETWORK", "vectorString": "AV:N/AC:L/Au:N/C:P/I:P/A:P", "detail": "fixed-version: Fixed from version >22.0.1229.78" }, { "id": "CVE-2012-2897", "status": "Patched", "link": "https://nvd.nist.gov/vuln/detail/CVE-2012-2897", "summary": "The kernel-mode drivers in Microsoft Windows XP SP2 and SP3, Windows Server 2003 SP2, Windows Vista SP2, Windows Server 2008 SP2, R2, and R2 SP1, Windows 7 Gold and SP1, Windows 8, Windows Server 2012, and Windows RT, as used by Google Chrome before 22.0.1229.79 and other programs, do not properly handle objects in memory, which allows remote attackers to execute arbitrary code via a crafted TrueType font file, aka \"Windows Font Parsing Vulnerability\" or \"TrueType Font Parsing Vulnerability.\"", "scorev2": "10.0", "scorev3": "7.8", "scorev4": "0.0", "modified": "2026-06-16T23:42:18.000", "vector": "LOCAL", "vectorString": "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H", "detail": "fixed-version: Fixed from version >22.0.1229.78" }, { "id": "CVE-2012-2898", "status": "Patched", "link": "https://nvd.nist.gov/vuln/detail/CVE-2012-2898", "summary": "Google Chrome before 21.0.1180.82 on iOS on iPad devices allows remote attackers to spoof the Omnibox URL via vectors involving SSL error messages, a related issue to CVE-2012-0674.", "scorev2": "5.0", "scorev3": "0.0", "scorev4": "0.0", "modified": "2026-06-16T23:42:18.000", "vector": "NETWORK", "vectorString": "AV:N/AC:L/Au:N/C:N/I:P/A:N", "detail": "fixed-version: Fixed from version >21.0.1180.81" }, { "id": "CVE-2012-2899", "status": "Patched", "link": "https://nvd.nist.gov/vuln/detail/CVE-2012-2899", "summary": "Google Chrome before 21.0.1180.82 on iOS makes certain incorrect calls to WebView methods that trigger use of an applewebdata: URL, which allows remote attackers to bypass the Same Origin Policy and conduct Universal XSS (UXSS) attacks via vectors involving the document.write method.", "scorev2": "4.3", "scorev3": "0.0", "scorev4": "0.0", "modified": "2026-06-16T23:42:18.000", "vector": "NETWORK", "vectorString": "AV:N/AC:M/Au:N/C:N/I:P/A:N", "detail": "fixed-version: Fixed from version >21.0.1180.81" }, { "id": "CVE-2012-2900", "status": "Patched", "link": "https://nvd.nist.gov/vuln/detail/CVE-2012-2900", "summary": "Skia, as used in Google Chrome before 22.0.1229.92, does not properly render text, which allows remote attackers to cause a denial of service (application crash) or possibly have unspecified other impact via unknown vectors.", "scorev2": "7.5", "scorev3": "0.0", "scorev4": "0.0", "modified": "2026-06-16T23:42:18.000", "vector": "NETWORK", "vectorString": "AV:N/AC:L/Au:N/C:P/I:P/A:P", "detail": "fixed-version: Fixed from version >22.0.1229.91" }, { "id": "CVE-2012-4903", "status": "Patched", "link": "https://nvd.nist.gov/vuln/detail/CVE-2012-4903", "summary": "Google Chrome before 18.0.1025308 on Android does not properly restrict access to file: URLs, which allows remote attackers to obtain sensitive information via unspecified vectors, as demonstrated by obtaining credential data, a different vulnerability than CVE-2012-4906.", "scorev2": "5.0", "scorev3": "0.0", "scorev4": "0.0", "modified": "2026-06-16T23:45:52.000", "vector": "NETWORK", "vectorString": "AV:N/AC:L/Au:N/C:P/I:N/A:N", "detail": "fixed-version: Fixed from version >18.0.1025306" }, { "id": "CVE-2012-4904", "status": "Patched", "link": "https://nvd.nist.gov/vuln/detail/CVE-2012-4904", "summary": "Cross-application scripting vulnerability in Google Chrome before 18.0.1025308 on Android allows remote attackers to inject arbitrary web script via unspecified vectors, as demonstrated by \"Universal XSS (UXSS)\" attacks against the current tab.", "scorev2": "4.3", "scorev3": "0.0", "scorev4": "0.0", "modified": "2026-06-16T23:45:52.000", "vector": "NETWORK", "vectorString": "AV:N/AC:M/Au:N/C:N/I:P/A:N", "detail": "fixed-version: Fixed from version >18.0.1025306" }, { "id": "CVE-2012-4905", "status": "Patched", "link": "https://nvd.nist.gov/vuln/detail/CVE-2012-4905", "summary": "Cross-site scripting (XSS) vulnerability in Google Chrome before 18.0.1025308 on Android allows remote attackers to inject arbitrary web script or HTML via an extra in an Intent object, aka \"Universal XSS (UXSS).\"", "scorev2": "4.3", "scorev3": "0.0", "scorev4": "0.0", "modified": "2026-06-16T23:45:52.000", "vector": "NETWORK", "vectorString": "AV:N/AC:M/Au:N/C:N/I:P/A:N", "detail": "fixed-version: Fixed from version >18.0.1025306" }, { "id": "CVE-2012-4906", "status": "Patched", "link": "https://nvd.nist.gov/vuln/detail/CVE-2012-4906", "summary": "Google Chrome before 18.0.1025308 on Android does not properly restrict access to file: URLs, which allows remote attackers to obtain sensitive information via unspecified vectors, as demonstrated by obtaining credential data, a different vulnerability than CVE-2012-4903.", "scorev2": "5.0", "scorev3": "0.0", "scorev4": "0.0", "modified": "2026-06-16T23:45:53.000", "vector": "NETWORK", "vectorString": "AV:N/AC:L/Au:N/C:P/I:N/A:N", "detail": "fixed-version: Fixed from version >18.0.1025306" }, { "id": "CVE-2012-4907", "status": "Patched", "link": "https://nvd.nist.gov/vuln/detail/CVE-2012-4907", "summary": "Google Chrome before 18.0.1025308 on Android does not properly restrict access from JavaScript code to Android APIs, which allows remote attackers to have an unspecified impact via a crafted web page.", "scorev2": "9.3", "scorev3": "0.0", "scorev4": "0.0", "modified": "2026-06-16T23:45:53.000", "vector": "NETWORK", "vectorString": "AV:N/AC:M/Au:N/C:C/I:C/A:C", "detail": "fixed-version: Fixed from version >18.0.1025306" }, { "id": "CVE-2012-4908", "status": "Patched", "link": "https://nvd.nist.gov/vuln/detail/CVE-2012-4908", "summary": "Google Chrome before 18.0.1025308 on Android allows remote attackers to bypass the Same Origin Policy and obtain access to local files via vectors involving a symlink.", "scorev2": "7.5", "scorev3": "0.0", "scorev4": "0.0", "modified": "2026-06-16T23:45:53.000", "vector": "NETWORK", "vectorString": "AV:N/AC:L/Au:N/C:P/I:P/A:P", "detail": "fixed-version: Fixed from version >18.0.1025306" }, { "id": "CVE-2012-4909", "status": "Patched", "link": "https://nvd.nist.gov/vuln/detail/CVE-2012-4909", "summary": "Google Chrome before 18.0.1025308 on Android allows remote attackers to obtain cookie information via a crafted application.", "scorev2": "4.3", "scorev3": "0.0", "scorev4": "0.0", "modified": "2026-06-16T23:45:53.000", "vector": "NETWORK", "vectorString": "AV:N/AC:M/Au:N/C:P/I:N/A:N", "detail": "fixed-version: Fixed from version >18.0.1025306" }, { "id": "CVE-2012-4929", "status": "Unpatched", "link": "https://nvd.nist.gov/vuln/detail/CVE-2012-4929", "summary": "The TLS protocol 1.2 and earlier, as used in Mozilla Firefox, Google Chrome, Qt, and other products, can encrypt compressed data without properly obfuscating the length of the unencrypted data, which allows man-in-the-middle attackers to obtain plaintext HTTP headers by observing length differences during a series of guesses in which a string in an HTTP request potentially matches an unknown string in an HTTP header, aka a \"CRIME\" attack.", "scorev2": "2.6", "scorev3": "0.0", "scorev4": "0.0", "modified": "2026-06-16T23:45:55.000", "vector": "NETWORK", "vectorString": "AV:N/AC:H/Au:N/C:P/I:N/A:N", "detail": "no-version-ranges", "description": "Check package version" }, { "id": "CVE-2012-4930", "status": "Unpatched", "link": "https://nvd.nist.gov/vuln/detail/CVE-2012-4930", "summary": "The SPDY protocol 3 and earlier, as used in Mozilla Firefox, Google Chrome, and other products, can perform TLS encryption of compressed data without properly obfuscating the length of the unencrypted data, which allows man-in-the-middle attackers to obtain plaintext HTTP headers by observing length differences during a series of guesses in which a string in an HTTP request potentially matches an unknown string in an HTTP header, aka a \"CRIME\" attack.", "scorev2": "2.6", "scorev3": "0.0", "scorev4": "0.0", "modified": "2026-06-16T23:45:55.000", "vector": "NETWORK", "vectorString": "AV:N/AC:H/Au:N/C:P/I:N/A:N", "detail": "no-version-ranges", "description": "Check package version" }, { "id": "CVE-2012-5108", "status": "Patched", "link": "https://nvd.nist.gov/vuln/detail/CVE-2012-5108", "summary": "Race condition in Google Chrome before 22.0.1229.92 allows remote attackers to execute arbitrary code via vectors related to audio devices.", "scorev2": "9.3", "scorev3": "0.0", "scorev4": "0.0", "modified": "2026-06-16T23:46:15.000", "vector": "NETWORK", "vectorString": "AV:N/AC:M/Au:N/C:C/I:C/A:C", "detail": "fixed-version: Fixed from version >22.0.1229.91" }, { "id": "CVE-2012-5109", "status": "Patched", "link": "https://nvd.nist.gov/vuln/detail/CVE-2012-5109", "summary": "The International Components for Unicode (ICU) functionality in Google Chrome before 22.0.1229.92 allows remote attackers to cause a denial of service (out-of-bounds read) via vectors related to a regular expression.", "scorev2": "5.0", "scorev3": "0.0", "scorev4": "0.0", "modified": "2026-06-16T23:46:15.000", "vector": "NETWORK", "vectorString": "AV:N/AC:L/Au:N/C:N/I:N/A:P", "detail": "fixed-version: Fixed from version >22.0.1229.91" }, { "id": "CVE-2012-5110", "status": "Patched", "link": "https://nvd.nist.gov/vuln/detail/CVE-2012-5110", "summary": "The compositor in Google Chrome before 22.0.1229.92 allows remote attackers to cause a denial of service (out-of-bounds read) via unspecified vectors.", "scorev2": "5.0", "scorev3": "0.0", "scorev4": "0.0", "modified": "2026-06-16T23:46:15.000", "vector": "NETWORK", "vectorString": "AV:N/AC:L/Au:N/C:N/I:N/A:P", "detail": "fixed-version: Fixed from version >22.0.1229.91" }, { "id": "CVE-2012-5111", "status": "Patched", "link": "https://nvd.nist.gov/vuln/detail/CVE-2012-5111", "summary": "Google Chrome before 22.0.1229.92 does not monitor for crashes of Pepper plug-ins, which has unspecified impact and remote attack vectors.", "scorev2": "7.5", "scorev3": "0.0", "scorev4": "0.0", "modified": "2026-06-16T23:46:15.000", "vector": "NETWORK", "vectorString": "AV:N/AC:L/Au:N/C:P/I:P/A:P", "detail": "fixed-version: Fixed from version >22.0.1229.91" }, { "id": "CVE-2012-5112", "status": "Patched", "link": "https://nvd.nist.gov/vuln/detail/CVE-2012-5112", "summary": "Use-after-free vulnerability in the SVG implementation in WebKit, as used in Google Chrome before 22.0.1229.94, allows remote attackers to execute arbitrary code via unspecified vectors.", "scorev2": "10.0", "scorev3": "0.0", "scorev4": "0.0", "modified": "2026-06-16T23:46:15.000", "vector": "NETWORK", "vectorString": "AV:N/AC:L/Au:N/C:C/I:C/A:C", "detail": "fixed-version: Fixed from version >22.0.1229.92" }, { "id": "CVE-2012-5115", "status": "Patched", "link": "https://nvd.nist.gov/vuln/detail/CVE-2012-5115", "summary": "Google Chrome before 23.0.1271.64 on Mac OS X does not properly mitigate improper write behavior in graphics drivers, which allows remote attackers to cause a denial of service or possibly have unspecified other impact via unknown vectors that trigger \"wild writes.\"", "scorev2": "7.5", "scorev3": "0.0", "scorev4": "0.0", "modified": "2026-06-16T23:46:15.000", "vector": "NETWORK", "vectorString": "AV:N/AC:L/Au:N/C:P/I:P/A:P", "detail": "fixed-version: Fixed from version >23.0.1271.62" }, { "id": "CVE-2012-5116", "status": "Patched", "link": "https://nvd.nist.gov/vuln/detail/CVE-2012-5116", "summary": "Use-after-free vulnerability in Google Chrome before 23.0.1271.64 allows remote attackers to cause a denial of service or possibly have unspecified other impact via vectors related to the handling of SVG filters.", "scorev2": "7.5", "scorev3": "0.0", "scorev4": "0.0", "modified": "2026-06-16T23:46:16.000", "vector": "NETWORK", "vectorString": "AV:N/AC:L/Au:N/C:P/I:P/A:P", "detail": "fixed-version: Fixed from version >23.0.1271.62" }, { "id": "CVE-2012-5117", "status": "Patched", "link": "https://nvd.nist.gov/vuln/detail/CVE-2012-5117", "summary": "Google Chrome before 23.0.1271.64 does not properly restrict the loading of an SVG subresource in the context of an IMG element, which has unspecified impact and remote attack vectors.", "scorev2": "7.5", "scorev3": "0.0", "scorev4": "0.0", "modified": "2026-06-16T23:46:16.000", "vector": "NETWORK", "vectorString": "AV:N/AC:L/Au:N/C:P/I:P/A:P", "detail": "fixed-version: Fixed from version >23.0.1271.62" }, { "id": "CVE-2012-5118", "status": "Patched", "link": "https://nvd.nist.gov/vuln/detail/CVE-2012-5118", "summary": "Google Chrome before 23.0.1271.64 on Mac OS X does not properly validate an integer value during the handling of GPU command buffers, which allows remote attackers to cause a denial of service or possibly have unspecified other impact via unknown vectors.", "scorev2": "7.5", "scorev3": "0.0", "scorev4": "0.0", "modified": "2026-06-16T23:46:16.000", "vector": "NETWORK", "vectorString": "AV:N/AC:L/Au:N/C:P/I:P/A:P", "detail": "fixed-version: Fixed from version >23.0.1271.62" }, { "id": "CVE-2012-5119", "status": "Patched", "link": "https://nvd.nist.gov/vuln/detail/CVE-2012-5119", "summary": "Race condition in Pepper, as used in Google Chrome before 23.0.1271.64, allows remote attackers to cause a denial of service or possibly have unspecified other impact via vectors related to buffers.", "scorev2": "6.8", "scorev3": "0.0", "scorev4": "0.0", "modified": "2026-06-16T23:46:16.000", "vector": "NETWORK", "vectorString": "AV:N/AC:M/Au:N/C:P/I:P/A:P", "detail": "fixed-version: Fixed from version >23.0.1271.62" }, { "id": "CVE-2012-5120", "status": "Patched", "link": "https://nvd.nist.gov/vuln/detail/CVE-2012-5120", "summary": "Google V8 before 3.13.7.5, as used in Google Chrome before 23.0.1271.64, on 64-bit Linux platforms allows remote attackers to cause a denial of service or possibly have unspecified other impact via crafted JavaScript code that triggers an out-of-bounds access to an array.", "scorev2": "7.5", "scorev3": "0.0", "scorev4": "0.0", "modified": "2026-06-16T23:46:16.000", "vector": "NETWORK", "vectorString": "AV:N/AC:L/Au:N/C:P/I:P/A:P", "detail": "fixed-version: Fixed from version >23.0.1271.62" }, { "id": "CVE-2012-5121", "status": "Patched", "link": "https://nvd.nist.gov/vuln/detail/CVE-2012-5121", "summary": "Use-after-free vulnerability in Google Chrome before 23.0.1271.64 allows remote attackers to cause a denial of service or possibly have unspecified other impact via vectors related to video layout.", "scorev2": "7.5", "scorev3": "0.0", "scorev4": "0.0", "modified": "2026-06-16T23:46:16.000", "vector": "NETWORK", "vectorString": "AV:N/AC:L/Au:N/C:P/I:P/A:P", "detail": "fixed-version: Fixed from version >23.0.1271.62" }, { "id": "CVE-2012-5122", "status": "Patched", "link": "https://nvd.nist.gov/vuln/detail/CVE-2012-5122", "summary": "Google Chrome before 23.0.1271.64 does not properly perform a cast of an unspecified variable during handling of input, which allows remote attackers to cause a denial of service or possibly have other impact via unknown vectors.", "scorev2": "7.5", "scorev3": "0.0", "scorev4": "0.0", "modified": "2026-06-16T23:46:16.000", "vector": "NETWORK", "vectorString": "AV:N/AC:L/Au:N/C:P/I:P/A:P", "detail": "fixed-version: Fixed from version >23.0.1271.62" }, { "id": "CVE-2012-5123", "status": "Patched", "link": "https://nvd.nist.gov/vuln/detail/CVE-2012-5123", "summary": "Skia, as used in Google Chrome before 23.0.1271.64, allows remote attackers to cause a denial of service (out-of-bounds read) via unspecified vectors.", "scorev2": "5.0", "scorev3": "0.0", "scorev4": "0.0", "modified": "2026-06-16T23:46:16.000", "vector": "NETWORK", "vectorString": "AV:N/AC:L/Au:N/C:N/I:N/A:P", "detail": "fixed-version: Fixed from version >23.0.1271.62" }, { "id": "CVE-2012-5124", "status": "Patched", "link": "https://nvd.nist.gov/vuln/detail/CVE-2012-5124", "summary": "Google Chrome before 23.0.1271.64 does not properly handle textures, which allows remote attackers to cause a denial of service (memory corruption) or possibly have unspecified other impact via unknown vectors.", "scorev2": "7.5", "scorev3": "0.0", "scorev4": "0.0", "modified": "2026-06-16T23:46:17.000", "vector": "NETWORK", "vectorString": "AV:N/AC:L/Au:N/C:P/I:P/A:P", "detail": "fixed-version: Fixed from version >23.0.1271.62" }, { "id": "CVE-2012-5125", "status": "Patched", "link": "https://nvd.nist.gov/vuln/detail/CVE-2012-5125", "summary": "Use-after-free vulnerability in Google Chrome before 23.0.1271.64 allows remote attackers to cause a denial of service or possibly have unspecified other impact via vectors related to the handling of extension tabs.", "scorev2": "7.5", "scorev3": "0.0", "scorev4": "0.0", "modified": "2026-06-16T23:46:17.000", "vector": "NETWORK", "vectorString": "AV:N/AC:L/Au:N/C:P/I:P/A:P", "detail": "fixed-version: Fixed from version >23.0.1271.62" }, { "id": "CVE-2012-5126", "status": "Patched", "link": "https://nvd.nist.gov/vuln/detail/CVE-2012-5126", "summary": "Use-after-free vulnerability in Google Chrome before 23.0.1271.64 allows remote attackers to cause a denial of service or possibly have unspecified other impact via vectors related to the handling of plug-in placeholders.", "scorev2": "7.5", "scorev3": "0.0", "scorev4": "0.0", "modified": "2026-06-16T23:46:17.000", "vector": "NETWORK", "vectorString": "AV:N/AC:L/Au:N/C:P/I:P/A:P", "detail": "fixed-version: Fixed from version >23.0.1271.62" }, { "id": "CVE-2012-5127", "status": "Patched", "link": "https://nvd.nist.gov/vuln/detail/CVE-2012-5127", "summary": "Integer overflow in Google Chrome before 23.0.1271.64 allows remote attackers to cause a denial of service (out-of-bounds read) or possibly have unspecified other impact via a crafted WebP image.", "scorev2": "7.5", "scorev3": "0.0", "scorev4": "0.0", "modified": "2026-06-16T23:46:17.000", "vector": "NETWORK", "vectorString": "AV:N/AC:L/Au:N/C:P/I:P/A:P", "detail": "fixed-version: Fixed from version >23.0.1271.62" }, { "id": "CVE-2012-5128", "status": "Patched", "link": "https://nvd.nist.gov/vuln/detail/CVE-2012-5128", "summary": "Google V8 before 3.13.7.5, as used in Google Chrome before 23.0.1271.64, does not properly perform write operations, which allows remote attackers to cause a denial of service or possibly have unspecified other impact via unknown vectors.", "scorev2": "7.5", "scorev3": "0.0", "scorev4": "0.0", "modified": "2026-06-16T23:46:17.000", "vector": "NETWORK", "vectorString": "AV:N/AC:L/Au:N/C:P/I:P/A:P", "detail": "fixed-version: Fixed from version >23.0.1271.62" }, { "id": "CVE-2012-5129", "status": "Patched", "link": "https://nvd.nist.gov/vuln/detail/CVE-2012-5129", "summary": "Heap-based buffer overflow in the WebGL subsystem in Google Chrome OS before 23.0.1271.94 allows remote attackers to cause a denial of service (GPU process crash) or possibly have unspecified other impact via unknown vectors.", "scorev2": "7.5", "scorev3": "0.0", "scorev4": "0.0", "modified": "2026-06-16T23:46:17.000", "vector": "NETWORK", "vectorString": "AV:N/AC:L/Au:N/C:P/I:P/A:P", "detail": "version-not-in-range" }, { "id": "CVE-2012-5130", "status": "Patched", "link": "https://nvd.nist.gov/vuln/detail/CVE-2012-5130", "summary": "Skia, as used in Google Chrome before 23.0.1271.91, allows remote attackers to cause a denial of service (out-of-bounds read) via unspecified vectors.", "scorev2": "5.0", "scorev3": "0.0", "scorev4": "0.0", "modified": "2026-06-16T23:46:17.000", "vector": "NETWORK", "vectorString": "AV:N/AC:L/Au:N/C:N/I:N/A:P", "detail": "fixed-version: Fixed from version >23.0.1271.89" }, { "id": "CVE-2012-5131", "status": "Patched", "link": "https://nvd.nist.gov/vuln/detail/CVE-2012-5131", "summary": "Google Chrome before 23.0.1271.91 on Mac OS X does not properly mitigate improper rendering behavior in the Intel GPU driver, which allows remote attackers to cause a denial of service or possibly have unspecified other impact via unknown vectors.", "scorev2": "7.5", "scorev3": "0.0", "scorev4": "0.0", "modified": "2026-06-16T23:46:17.000", "vector": "NETWORK", "vectorString": "AV:N/AC:L/Au:N/C:P/I:P/A:P", "detail": "fixed-version: Fixed from version >23.0.1271.89" }, { "id": "CVE-2012-5132", "status": "Patched", "link": "https://nvd.nist.gov/vuln/detail/CVE-2012-5132", "summary": "Google Chrome before 23.0.1271.91 allows remote attackers to cause a denial of service (application crash) via a response with chunked transfer coding.", "scorev2": "5.0", "scorev3": "0.0", "scorev4": "0.0", "modified": "2026-06-16T23:46:18.000", "vector": "NETWORK", "vectorString": "AV:N/AC:L/Au:N/C:N/I:N/A:P", "detail": "fixed-version: Fixed from version >23.0.1271.89" }, { "id": "CVE-2012-5133", "status": "Patched", "link": "https://nvd.nist.gov/vuln/detail/CVE-2012-5133", "summary": "Use-after-free vulnerability in Google Chrome before 23.0.1271.91 allows remote attackers to cause a denial of service or possibly have unspecified other impact via vectors related to SVG filters.", "scorev2": "7.5", "scorev3": "0.0", "scorev4": "0.0", "modified": "2026-06-16T23:46:18.000", "vector": "NETWORK", "vectorString": "AV:N/AC:L/Au:N/C:P/I:P/A:P", "detail": "fixed-version: Fixed from version >23.0.1271.89" }, { "id": "CVE-2012-5134", "status": "Patched", "link": "https://nvd.nist.gov/vuln/detail/CVE-2012-5134", "summary": "Heap-based buffer underflow in the xmlParseAttValueComplex function in parser.c in libxml2 2.9.0 and earlier, as used in Google Chrome before 23.0.1271.91 and other products, allows remote attackers to cause a denial of service or possibly execute arbitrary code via crafted entities in an XML document.", "scorev2": "6.8", "scorev3": "0.0", "scorev4": "0.0", "modified": "2026-06-16T23:46:18.000", "vector": "NETWORK", "vectorString": "AV:N/AC:M/Au:N/C:P/I:P/A:P", "detail": "fixed-version: Fixed from version >23.0.1271.89" }, { "id": "CVE-2012-5135", "status": "Patched", "link": "https://nvd.nist.gov/vuln/detail/CVE-2012-5135", "summary": "Use-after-free vulnerability in Google Chrome before 23.0.1271.91 allows remote attackers to cause a denial of service or possibly have unspecified other impact via vectors related to printing.", "scorev2": "7.5", "scorev3": "0.0", "scorev4": "0.0", "modified": "2026-06-16T23:46:18.000", "vector": "NETWORK", "vectorString": "AV:N/AC:L/Au:N/C:P/I:P/A:P", "detail": "fixed-version: Fixed from version >23.0.1271.89" }, { "id": "CVE-2012-5136", "status": "Patched", "link": "https://nvd.nist.gov/vuln/detail/CVE-2012-5136", "summary": "Google Chrome before 23.0.1271.91 does not properly perform a cast of an unspecified variable during handling of the INPUT element, which allows remote attackers to cause a denial of service or possibly have unknown other impact via a crafted HTML document.", "scorev2": "6.8", "scorev3": "0.0", "scorev4": "0.0", "modified": "2026-06-16T23:46:18.000", "vector": "NETWORK", "vectorString": "AV:N/AC:M/Au:N/C:P/I:P/A:P", "detail": "fixed-version: Fixed from version >23.0.1271.89" }, { "id": "CVE-2012-5137", "status": "Patched", "link": "https://nvd.nist.gov/vuln/detail/CVE-2012-5137", "summary": "Use-after-free vulnerability in Google Chrome before 23.0.1271.95 allows remote attackers to cause a denial of service or possibly have unspecified other impact via vectors related to the Media Source API.", "scorev2": "10.0", "scorev3": "0.0", "scorev4": "0.0", "modified": "2026-06-16T23:46:18.000", "vector": "NETWORK", "vectorString": "AV:N/AC:L/Au:N/C:C/I:C/A:C", "detail": "fixed-version: Fixed from version >23.0.1271.94" }, { "id": "CVE-2012-5138", "status": "Patched", "link": "https://nvd.nist.gov/vuln/detail/CVE-2012-5138", "summary": "Google Chrome before 23.0.1271.95 does not properly handle file paths, which has unspecified impact and attack vectors.", "scorev2": "10.0", "scorev3": "0.0", "scorev4": "0.0", "modified": "2026-06-16T23:46:18.000", "vector": "NETWORK", "vectorString": "AV:N/AC:L/Au:N/C:C/I:C/A:C", "detail": "fixed-version: Fixed from version >23.0.1271.94" }, { "id": "CVE-2012-5139", "status": "Patched", "link": "https://nvd.nist.gov/vuln/detail/CVE-2012-5139", "summary": "Use-after-free vulnerability in Google Chrome before 23.0.1271.97 allows remote attackers to cause a denial of service or possibly have unspecified other impact via vectors related to visibility events.", "scorev2": "10.0", "scorev3": "0.0", "scorev4": "0.0", "modified": "2026-06-16T23:46:18.000", "vector": "NETWORK", "vectorString": "AV:N/AC:L/Au:N/C:C/I:C/A:C", "detail": "fixed-version: Fixed from version >23.0.1271.96" }, { "id": "CVE-2012-5140", "status": "Patched", "link": "https://nvd.nist.gov/vuln/detail/CVE-2012-5140", "summary": "Use-after-free vulnerability in Google Chrome before 23.0.1271.97 allows remote attackers to cause a denial of service or possibly have unspecified other impact via vectors related to the URL loader.", "scorev2": "10.0", "scorev3": "0.0", "scorev4": "0.0", "modified": "2026-06-16T23:46:19.000", "vector": "NETWORK", "vectorString": "AV:N/AC:L/Au:N/C:C/I:C/A:C", "detail": "fixed-version: Fixed from version >23.0.1271.96" }, { "id": "CVE-2012-5141", "status": "Patched", "link": "https://nvd.nist.gov/vuln/detail/CVE-2012-5141", "summary": "Google Chrome before 23.0.1271.97 does not properly restrict instantiation of the Chromoting client plug-in, which has unspecified impact and attack vectors.", "scorev2": "10.0", "scorev3": "0.0", "scorev4": "0.0", "modified": "2026-06-16T23:46:19.000", "vector": "NETWORK", "vectorString": "AV:N/AC:L/Au:N/C:C/I:C/A:C", "detail": "fixed-version: Fixed from version >23.0.1271.96" }, { "id": "CVE-2012-5142", "status": "Patched", "link": "https://nvd.nist.gov/vuln/detail/CVE-2012-5142", "summary": "Google Chrome before 23.0.1271.97 does not properly handle history navigation, which allows remote attackers to execute arbitrary code or cause a denial of service (application crash) via unspecified vectors.", "scorev2": "10.0", "scorev3": "0.0", "scorev4": "0.0", "modified": "2026-06-16T23:46:19.000", "vector": "NETWORK", "vectorString": "AV:N/AC:L/Au:N/C:C/I:C/A:C", "detail": "fixed-version: Fixed from version >23.0.1271.96" }, { "id": "CVE-2012-5143", "status": "Patched", "link": "https://nvd.nist.gov/vuln/detail/CVE-2012-5143", "summary": "Integer overflow in Google Chrome before 23.0.1271.97 allows remote attackers to cause a denial of service or possibly have unspecified other impact via vectors related to PPAPI image buffers.", "scorev2": "10.0", "scorev3": "0.0", "scorev4": "0.0", "modified": "2026-06-16T23:46:19.000", "vector": "NETWORK", "vectorString": "AV:N/AC:L/Au:N/C:C/I:C/A:C", "detail": "fixed-version: Fixed from version >23.0.1271.96" }, { "id": "CVE-2012-5144", "status": "Patched", "link": "https://nvd.nist.gov/vuln/detail/CVE-2012-5144", "summary": "Google Chrome before 23.0.1271.97, and Libav 0.7.x before 0.7.7 and 0.8.x before 0.8.5, do not properly perform AAC decoding, which allows remote attackers to cause a denial of service (stack memory corruption) or possibly have unspecified other impact via vectors related to \"an off-by-one overwrite when switching to LTP profile from MAIN.\"", "scorev2": "10.0", "scorev3": "0.0", "scorev4": "0.0", "modified": "2026-06-16T23:46:19.000", "vector": "NETWORK", "vectorString": "AV:N/AC:L/Au:N/C:C/I:C/A:C", "detail": "fixed-version: Fixed from version >23.0.1271.96" }, { "id": "CVE-2012-5145", "status": "Patched", "link": "https://nvd.nist.gov/vuln/detail/CVE-2012-5145", "summary": "Use-after-free vulnerability in Google Chrome before 24.0.1312.52 allows remote attackers to cause a denial of service or possibly have unspecified other impact via vectors related to SVG layout.", "scorev2": "7.5", "scorev3": "0.0", "scorev4": "0.0", "modified": "2026-06-16T23:46:19.000", "vector": "NETWORK", "vectorString": "AV:N/AC:L/Au:N/C:P/I:P/A:P", "detail": "fixed-version: Fixed from version >24.0.1312.51" }, { "id": "CVE-2012-5146", "status": "Patched", "link": "https://nvd.nist.gov/vuln/detail/CVE-2012-5146", "summary": "Google Chrome before 24.0.1312.52 allows remote attackers to bypass the Same Origin Policy via a malformed URL.", "scorev2": "5.0", "scorev3": "0.0", "scorev4": "0.0", "modified": "2026-06-16T23:46:19.000", "vector": "NETWORK", "vectorString": "AV:N/AC:L/Au:N/C:N/I:P/A:N", "detail": "fixed-version: Fixed from version >24.0.1312.51" }, { "id": "CVE-2012-5147", "status": "Patched", "link": "https://nvd.nist.gov/vuln/detail/CVE-2012-5147", "summary": "Use-after-free vulnerability in Google Chrome before 24.0.1312.52 allows remote attackers to cause a denial of service or possibly have unspecified other impact via vectors related to DOM handling.", "scorev2": "7.5", "scorev3": "0.0", "scorev4": "0.0", "modified": "2026-06-16T23:46:19.000", "vector": "NETWORK", "vectorString": "AV:N/AC:L/Au:N/C:P/I:P/A:P", "detail": "fixed-version: Fixed from version >24.0.1312.51" }, { "id": "CVE-2012-5148", "status": "Patched", "link": "https://nvd.nist.gov/vuln/detail/CVE-2012-5148", "summary": "The hyphenation functionality in Google Chrome before 24.0.1312.52 does not properly validate file names, which has unspecified impact and attack vectors.", "scorev2": "7.5", "scorev3": "0.0", "scorev4": "0.0", "modified": "2026-06-16T23:46:20.000", "vector": "NETWORK", "vectorString": "AV:N/AC:L/Au:N/C:P/I:P/A:P", "detail": "fixed-version: Fixed from version >24.0.1312.51" }, { "id": "CVE-2012-5149", "status": "Patched", "link": "https://nvd.nist.gov/vuln/detail/CVE-2012-5149", "summary": "Integer overflow in the audio IPC layer in Google Chrome before 24.0.1312.52 allows remote attackers to cause a denial of service or possibly have unspecified other impact via unknown vectors.", "scorev2": "7.5", "scorev3": "0.0", "scorev4": "0.0", "modified": "2026-06-16T23:46:20.000", "vector": "NETWORK", "vectorString": "AV:N/AC:L/Au:N/C:P/I:P/A:P", "detail": "fixed-version: Fixed from version >24.0.1312.51" }, { "id": "CVE-2012-5150", "status": "Patched", "link": "https://nvd.nist.gov/vuln/detail/CVE-2012-5150", "summary": "Use-after-free vulnerability in Google Chrome before 24.0.1312.52 allows remote attackers to cause a denial of service or possibly have unspecified other impact via vectors involving seek operations on video data.", "scorev2": "7.5", "scorev3": "0.0", "scorev4": "0.0", "modified": "2026-06-16T23:46:20.000", "vector": "NETWORK", "vectorString": "AV:N/AC:L/Au:N/C:P/I:P/A:P", "detail": "fixed-version: Fixed from version >24.0.1312.51" }, { "id": "CVE-2012-5151", "status": "Patched", "link": "https://nvd.nist.gov/vuln/detail/CVE-2012-5151", "summary": "Integer overflow in Google Chrome before 24.0.1312.52 allows remote attackers to cause a denial of service or possibly have unspecified other impact via crafted JavaScript code in a PDF document.", "scorev2": "6.8", "scorev3": "0.0", "scorev4": "0.0", "modified": "2026-06-16T23:46:20.000", "vector": "NETWORK", "vectorString": "AV:N/AC:M/Au:N/C:P/I:P/A:P", "detail": "fixed-version: Fixed from version >24.0.1312.51" }, { "id": "CVE-2012-5152", "status": "Patched", "link": "https://nvd.nist.gov/vuln/detail/CVE-2012-5152", "summary": "Google Chrome before 24.0.1312.52 allows remote attackers to cause a denial of service (out-of-bounds read) via vectors involving seek operations on video data.", "scorev2": "5.0", "scorev3": "0.0", "scorev4": "0.0", "modified": "2026-06-16T23:46:20.000", "vector": "NETWORK", "vectorString": "AV:N/AC:L/Au:N/C:N/I:N/A:P", "detail": "fixed-version: Fixed from version >24.0.1312.51" }, { "id": "CVE-2012-5153", "status": "Patched", "link": "https://nvd.nist.gov/vuln/detail/CVE-2012-5153", "summary": "Google V8 before 3.14.5.3, as used in Google Chrome before 24.0.1312.52, allows remote attackers to cause a denial of service or possibly have unspecified other impact via crafted JavaScript code that triggers an out-of-bounds access to stack memory.", "scorev2": "7.5", "scorev3": "0.0", "scorev4": "0.0", "modified": "2026-06-16T23:46:20.000", "vector": "NETWORK", "vectorString": "AV:N/AC:L/Au:N/C:P/I:P/A:P", "detail": "fixed-version: Fixed from version >24.0.1312.51" }, { "id": "CVE-2012-5154", "status": "Patched", "link": "https://nvd.nist.gov/vuln/detail/CVE-2012-5154", "summary": "Integer overflow in Google Chrome before 24.0.1312.52 on Windows allows attackers to cause a denial of service or possibly have unspecified other impact via vectors related to allocation of shared memory.", "scorev2": "7.5", "scorev3": "0.0", "scorev4": "0.0", "modified": "2026-06-16T23:46:20.000", "vector": "NETWORK", "vectorString": "AV:N/AC:L/Au:N/C:P/I:P/A:P", "detail": "fixed-version: Fixed from version >24.0.1312.51" }, { "id": "CVE-2012-5155", "status": "Patched", "link": "https://nvd.nist.gov/vuln/detail/CVE-2012-5155", "summary": "Google Chrome before 24.0.1312.52 on Mac OS X does not use an appropriate sandboxing approach for worker processes, which makes it easier for remote attackers to bypass intended access restrictions via unspecified vectors.", "scorev2": "5.0", "scorev3": "0.0", "scorev4": "0.0", "modified": "2026-06-16T23:46:20.000", "vector": "NETWORK", "vectorString": "AV:N/AC:L/Au:N/C:N/I:P/A:N", "detail": "fixed-version: Fixed from version >24.0.1312.51" }, { "id": "CVE-2012-5156", "status": "Patched", "link": "https://nvd.nist.gov/vuln/detail/CVE-2012-5156", "summary": "Use-after-free vulnerability in Google Chrome before 24.0.1312.52 allows remote attackers to cause a denial of service or possibly have unspecified other impact via vectors involving PDF fields.", "scorev2": "6.8", "scorev3": "0.0", "scorev4": "0.0", "modified": "2026-06-16T23:46:21.000", "vector": "NETWORK", "vectorString": "AV:N/AC:M/Au:N/C:P/I:P/A:P", "detail": "fixed-version: Fixed from version >24.0.1312.51" }, { "id": "CVE-2012-5157", "status": "Patched", "link": "https://nvd.nist.gov/vuln/detail/CVE-2012-5157", "summary": "Google Chrome before 24.0.1312.52 does not properly handle image data in PDF documents, which allows remote attackers to cause a denial of service (out-of-bounds read) via a crafted document.", "scorev2": "4.3", "scorev3": "0.0", "scorev4": "0.0", "modified": "2026-06-16T23:46:21.000", "vector": "NETWORK", "vectorString": "AV:N/AC:M/Au:N/C:N/I:N/A:P", "detail": "fixed-version: Fixed from version >24.0.1312.51" }, { "id": "CVE-2012-5376", "status": "Patched", "link": "https://nvd.nist.gov/vuln/detail/CVE-2012-5376", "summary": "The Inter-process Communication (IPC) implementation in Google Chrome before 22.0.1229.94 allows remote attackers to bypass intended sandbox restrictions and write to arbitrary files by leveraging access to a renderer process, a different vulnerability than CVE-2012-5112.", "scorev2": "9.3", "scorev3": "9.6", "scorev4": "0.0", "modified": "2026-06-16T23:46:45.000", "vector": "NETWORK", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:H", "detail": "fixed-version: Fixed from version 22.0.1229.94" }, { "id": "CVE-2012-5851", "status": "Patched", "link": "https://nvd.nist.gov/vuln/detail/CVE-2012-5851", "summary": "html/parser/XSSAuditor.cpp in WebCore in WebKit, as used in Google Chrome through 22 and Safari 5.1.7, does not consider all possible output contexts of reflected data, which makes it easier for remote attackers to bypass a cross-site scripting (XSS) protection mechanism via a crafted string, aka rdar problem 12019108.", "scorev2": "4.3", "scorev3": "0.0", "scorev4": "0.0", "modified": "2026-06-16T23:47:27.000", "vector": "NETWORK", "vectorString": "AV:N/AC:M/Au:N/C:N/I:P/A:N", "detail": "fixed-version: Fixed from version >22.0.1229.96" }, { "id": "CVE-2013-0828", "status": "Patched", "link": "https://nvd.nist.gov/vuln/detail/CVE-2013-0828", "summary": "The PDF functionality in Google Chrome before 24.0.1312.52 does not properly perform a cast of an unspecified variable during processing of the root of the structure tree, which allows remote attackers to cause a denial of service or possibly have unknown other impact via a crafted document.", "scorev2": "6.8", "scorev3": "0.0", "scorev4": "0.0", "modified": "2026-06-16T23:50:08.000", "vector": "NETWORK", "vectorString": "AV:N/AC:M/Au:N/C:P/I:P/A:P", "detail": "fixed-version: Fixed from version >24.0.1312.51" }, { "id": "CVE-2013-0829", "status": "Patched", "link": "https://nvd.nist.gov/vuln/detail/CVE-2013-0829", "summary": "Google Chrome before 24.0.1312.52 does not properly maintain database metadata, which allows remote attackers to bypass intended file-access restrictions via unspecified vectors.", "scorev2": "6.4", "scorev3": "0.0", "scorev4": "0.0", "modified": "2026-06-16T23:50:09.000", "vector": "NETWORK", "vectorString": "AV:N/AC:L/Au:N/C:P/I:P/A:N", "detail": "fixed-version: Fixed from version >24.0.1312.51" }, { "id": "CVE-2013-0830", "status": "Patched", "link": "https://nvd.nist.gov/vuln/detail/CVE-2013-0830", "summary": "The IPC layer in Google Chrome before 24.0.1312.52 on Windows omits a NUL character required for termination of an unspecified data structure, which has unknown impact and attack vectors.", "scorev2": "7.5", "scorev3": "0.0", "scorev4": "0.0", "modified": "2026-06-16T23:50:09.000", "vector": "NETWORK", "vectorString": "AV:N/AC:L/Au:N/C:P/I:P/A:P", "detail": "fixed-version: Fixed from version >24.0.1312.51" }, { "id": "CVE-2013-0831", "status": "Patched", "link": "https://nvd.nist.gov/vuln/detail/CVE-2013-0831", "summary": "Directory traversal vulnerability in Google Chrome before 24.0.1312.52 allows remote attackers to have an unspecified impact by leveraging access to an extension process.", "scorev2": "7.5", "scorev3": "0.0", "scorev4": "0.0", "modified": "2026-06-16T23:50:09.000", "vector": "NETWORK", "vectorString": "AV:N/AC:L/Au:N/C:P/I:P/A:P", "detail": "fixed-version: Fixed from version >24.0.1312.51" }, { "id": "CVE-2013-0832", "status": "Patched", "link": "https://nvd.nist.gov/vuln/detail/CVE-2013-0832", "summary": "Use-after-free vulnerability in Google Chrome before 24.0.1312.52 allows remote attackers to cause a denial of service or possibly have unspecified other impact via vectors related to printing.", "scorev2": "7.5", "scorev3": "0.0", "scorev4": "0.0", "modified": "2026-06-16T23:50:09.000", "vector": "NETWORK", "vectorString": "AV:N/AC:L/Au:N/C:P/I:P/A:P", "detail": "fixed-version: Fixed from version >24.0.1312.51" }, { "id": "CVE-2013-0833", "status": "Patched", "link": "https://nvd.nist.gov/vuln/detail/CVE-2013-0833", "summary": "Google Chrome before 24.0.1312.52 allows remote attackers to cause a denial of service (out-of-bounds read) via vectors related to printing.", "scorev2": "5.0", "scorev3": "0.0", "scorev4": "0.0", "modified": "2026-06-16T23:50:09.000", "vector": "NETWORK", "vectorString": "AV:N/AC:L/Au:N/C:N/I:N/A:P", "detail": "fixed-version: Fixed from version >24.0.1312.51" }, { "id": "CVE-2013-0834", "status": "Patched", "link": "https://nvd.nist.gov/vuln/detail/CVE-2013-0834", "summary": "Google Chrome before 24.0.1312.52 allows remote attackers to cause a denial of service (out-of-bounds read) via vectors involving glyphs.", "scorev2": "5.0", "scorev3": "0.0", "scorev4": "0.0", "modified": "2026-06-16T23:50:09.000", "vector": "NETWORK", "vectorString": "AV:N/AC:L/Au:N/C:N/I:N/A:P", "detail": "fixed-version: Fixed from version >24.0.1312.51" }, { "id": "CVE-2013-0835", "status": "Patched", "link": "https://nvd.nist.gov/vuln/detail/CVE-2013-0835", "summary": "Unspecified vulnerability in the Geolocation implementation in Google Chrome before 24.0.1312.52 allows remote attackers to cause a denial of service (application crash) via unknown vectors.", "scorev2": "5.0", "scorev3": "0.0", "scorev4": "0.0", "modified": "2026-06-16T23:50:09.000", "vector": "NETWORK", "vectorString": "AV:N/AC:L/Au:N/C:N/I:N/A:P", "detail": "fixed-version: Fixed from version >24.0.1312.51" }, { "id": "CVE-2013-0836", "status": "Patched", "link": "https://nvd.nist.gov/vuln/detail/CVE-2013-0836", "summary": "Google V8 before 3.14.5.3, as used in Google Chrome before 24.0.1312.52, does not properly implement garbage collection, which allows remote attackers to cause a denial of service (application crash) or possibly have unspecified other impact via crafted JavaScript code.", "scorev2": "6.8", "scorev3": "0.0", "scorev4": "0.0", "modified": "2026-06-16T23:50:09.000", "vector": "NETWORK", "vectorString": "AV:N/AC:M/Au:N/C:P/I:P/A:P", "detail": "fixed-version: Fixed from version >24.0.1312.51" }, { "id": "CVE-2013-0837", "status": "Patched", "link": "https://nvd.nist.gov/vuln/detail/CVE-2013-0837", "summary": "Google Chrome before 24.0.1312.52 allows remote attackers to cause a denial of service or possibly have unspecified other impact via vectors related to the handling of extension tabs.", "scorev2": "7.5", "scorev3": "0.0", "scorev4": "0.0", "modified": "2026-06-16T23:50:10.000", "vector": "NETWORK", "vectorString": "AV:N/AC:L/Au:N/C:P/I:P/A:P", "detail": "fixed-version: Fixed from version >24.0.1312.51" }, { "id": "CVE-2013-0838", "status": "Patched", "link": "https://nvd.nist.gov/vuln/detail/CVE-2013-0838", "summary": "Google Chrome before 24.0.1312.52 on Linux uses weak permissions for shared memory segments, which has unspecified impact and attack vectors.", "scorev2": "7.5", "scorev3": "0.0", "scorev4": "0.0", "modified": "2026-06-16T23:50:10.000", "vector": "NETWORK", "vectorString": "AV:N/AC:L/Au:N/C:P/I:P/A:P", "detail": "fixed-version: Fixed from version >24.0.1312.51" }, { "id": "CVE-2013-0839", "status": "Patched", "link": "https://nvd.nist.gov/vuln/detail/CVE-2013-0839", "summary": "Use-after-free vulnerability in Google Chrome before 24.0.1312.56 allows remote attackers to cause a denial of service or possibly have unspecified other impact via vectors related to the handling of fonts in CANVAS elements.", "scorev2": "7.5", "scorev3": "0.0", "scorev4": "0.0", "modified": "2026-06-16T23:50:10.000", "vector": "NETWORK", "vectorString": "AV:N/AC:L/Au:N/C:P/I:P/A:P", "detail": "fixed-version: Fixed from version >24.0.1312.55" }, { "id": "CVE-2013-0840", "status": "Patched", "link": "https://nvd.nist.gov/vuln/detail/CVE-2013-0840", "summary": "Google Chrome before 24.0.1312.56 does not validate URLs during the opening of new windows, which has unspecified impact and remote attack vectors.", "scorev2": "10.0", "scorev3": "0.0", "scorev4": "0.0", "modified": "2026-06-16T23:50:10.000", "vector": "NETWORK", "vectorString": "AV:N/AC:L/Au:N/C:C/I:C/A:C", "detail": "fixed-version: Fixed from version >24.0.1312.55" }, { "id": "CVE-2013-0841", "status": "Patched", "link": "https://nvd.nist.gov/vuln/detail/CVE-2013-0841", "summary": "Array index error in the content-blocking functionality in Google Chrome before 24.0.1312.56 allows remote attackers to cause a denial of service or possibly have unspecified other impact via unknown vectors.", "scorev2": "7.5", "scorev3": "0.0", "scorev4": "0.0", "modified": "2026-06-16T23:50:10.000", "vector": "NETWORK", "vectorString": "AV:N/AC:L/Au:N/C:P/I:P/A:P", "detail": "fixed-version: Fixed from version >24.0.1312.55" }, { "id": "CVE-2013-0842", "status": "Patched", "link": "https://nvd.nist.gov/vuln/detail/CVE-2013-0842", "summary": "Google Chrome before 24.0.1312.56 does not properly handle %00 characters in pathnames, which has unspecified impact and attack vectors.", "scorev2": "10.0", "scorev3": "0.0", "scorev4": "0.0", "modified": "2026-06-16T23:50:10.000", "vector": "NETWORK", "vectorString": "AV:N/AC:L/Au:N/C:C/I:C/A:C", "detail": "fixed-version: Fixed from version >24.0.1312.55" }, { "id": "CVE-2013-0843", "status": "Patched", "link": "https://nvd.nist.gov/vuln/detail/CVE-2013-0843", "summary": "content/renderer/media/webrtc_audio_renderer.cc in Google Chrome before 24.0.1312.56 on Mac OS X does not use an appropriate buffer size for the 96 kHz sampling rate, which allows remote attackers to cause a denial of service (memory corruption and application crash) or possibly have unspecified other impact via a web site that provides WebRTC audio.", "scorev2": "7.5", "scorev3": "0.0", "scorev4": "0.0", "modified": "2026-06-16T23:50:10.000", "vector": "NETWORK", "vectorString": "AV:N/AC:L/Au:N/C:P/I:P/A:P", "detail": "version-not-in-range" }, { "id": "CVE-2013-0879", "status": "Patched", "link": "https://nvd.nist.gov/vuln/detail/CVE-2013-0879", "summary": "Google Chrome before 25.0.1364.97 on Windows and Linux, and before 25.0.1364.99 on Mac OS X, does not properly implement web audio nodes, which allows remote attackers to cause a denial of service (memory corruption) or possibly have unspecified other impact via unknown vectors.", "scorev2": "7.5", "scorev3": "0.0", "scorev4": "0.0", "modified": "2026-06-16T23:50:14.000", "vector": "NETWORK", "vectorString": "AV:N/AC:L/Au:N/C:P/I:P/A:P", "detail": "fixed-version: Fixed from version 25.0.1364.99" }, { "id": "CVE-2013-0880", "status": "Patched", "link": "https://nvd.nist.gov/vuln/detail/CVE-2013-0880", "summary": "Use-after-free vulnerability in Google Chrome before 25.0.1364.97 on Windows and Linux, and before 25.0.1364.99 on Mac OS X, allows remote attackers to cause a denial of service or possibly have unspecified other impact via vectors related to databases.", "scorev2": "7.5", "scorev3": "0.0", "scorev4": "0.0", "modified": "2026-06-16T23:50:14.000", "vector": "NETWORK", "vectorString": "AV:N/AC:L/Au:N/C:P/I:P/A:P", "detail": "fixed-version: Fixed from version 25.0.1364.99" }, { "id": "CVE-2013-0881", "status": "Patched", "link": "https://nvd.nist.gov/vuln/detail/CVE-2013-0881", "summary": "Google Chrome before 25.0.1364.97 on Windows and Linux, and before 25.0.1364.99 on Mac OS X, allows remote attackers to cause a denial of service (incorrect read operation) via crafted data in the Matroska container format.", "scorev2": "5.0", "scorev3": "0.0", "scorev4": "0.0", "modified": "2026-06-16T23:50:15.000", "vector": "NETWORK", "vectorString": "AV:N/AC:L/Au:N/C:N/I:N/A:P", "detail": "fixed-version: Fixed from version 25.0.1364.99" }, { "id": "CVE-2013-0882", "status": "Patched", "link": "https://nvd.nist.gov/vuln/detail/CVE-2013-0882", "summary": "Google Chrome before 25.0.1364.97 on Windows and Linux, and before 25.0.1364.99 on Mac OS X, allows remote attackers to cause a denial of service (incorrect memory access) or possibly have unspecified other impact via a large number of SVG parameters.", "scorev2": "7.5", "scorev3": "0.0", "scorev4": "0.0", "modified": "2026-06-16T23:50:15.000", "vector": "NETWORK", "vectorString": "AV:N/AC:L/Au:N/C:P/I:P/A:P", "detail": "fixed-version: Fixed from version 25.0.1364.99" }, { "id": "CVE-2013-0883", "status": "Patched", "link": "https://nvd.nist.gov/vuln/detail/CVE-2013-0883", "summary": "Skia, as used in Google Chrome before 25.0.1364.97 on Windows and Linux, and before 25.0.1364.99 on Mac OS X, allows remote attackers to cause a denial of service (incorrect read operation) via unspecified vectors.", "scorev2": "5.0", "scorev3": "0.0", "scorev4": "0.0", "modified": "2026-06-16T23:50:15.000", "vector": "NETWORK", "vectorString": "AV:N/AC:L/Au:N/C:N/I:N/A:P", "detail": "fixed-version: Fixed from version 25.0.1364.99" }, { "id": "CVE-2013-0884", "status": "Patched", "link": "https://nvd.nist.gov/vuln/detail/CVE-2013-0884", "summary": "Google Chrome before 25.0.1364.97 on Windows and Linux, and before 25.0.1364.99 on Mac OS X, does not properly load Native Client (aka NaCl) code, which has unspecified impact and attack vectors.", "scorev2": "6.8", "scorev3": "0.0", "scorev4": "0.0", "modified": "2026-06-16T23:50:15.000", "vector": "NETWORK", "vectorString": "AV:N/AC:M/Au:N/C:P/I:P/A:P", "detail": "fixed-version: Fixed from version 25.0.1364.99" }, { "id": "CVE-2013-0885", "status": "Patched", "link": "https://nvd.nist.gov/vuln/detail/CVE-2013-0885", "summary": "Google Chrome before 25.0.1364.97 on Windows and Linux, and before 25.0.1364.99 on Mac OS X, does not properly restrict API privileges during interaction with the Chrome Web Store, which has unspecified impact and attack vectors.", "scorev2": "7.5", "scorev3": "0.0", "scorev4": "0.0", "modified": "2026-06-16T23:50:15.000", "vector": "NETWORK", "vectorString": "AV:N/AC:L/Au:N/C:P/I:P/A:P", "detail": "fixed-version: Fixed from version 25.0.1364.99" }, { "id": "CVE-2013-0886", "status": "Patched", "link": "https://nvd.nist.gov/vuln/detail/CVE-2013-0886", "summary": "Google Chrome before 25.0.1364.99 on Mac OS X does not properly implement signal handling for Native Client (aka NaCl) code, which has unspecified impact and attack vectors.", "scorev2": "7.5", "scorev3": "0.0", "scorev4": "0.0", "modified": "2026-06-16T23:50:16.000", "vector": "NETWORK", "vectorString": "AV:N/AC:L/Au:N/C:P/I:P/A:P", "detail": "fixed-version: Fixed from version >25.0.1364.98" }, { "id": "CVE-2013-0887", "status": "Patched", "link": "https://nvd.nist.gov/vuln/detail/CVE-2013-0887", "summary": "The developer-tools process in Google Chrome before 25.0.1364.97 on Windows and Linux, and before 25.0.1364.99 on Mac OS X, does not properly restrict privileges during interaction with a connected server, which has unspecified impact and attack vectors.", "scorev2": "7.5", "scorev3": "0.0", "scorev4": "0.0", "modified": "2026-06-16T23:50:17.000", "vector": "NETWORK", "vectorString": "AV:N/AC:L/Au:N/C:P/I:P/A:P", "detail": "fixed-version: Fixed from version 25.0.1364.99" }, { "id": "CVE-2013-0888", "status": "Patched", "link": "https://nvd.nist.gov/vuln/detail/CVE-2013-0888", "summary": "Skia, as used in Google Chrome before 25.0.1364.97 on Windows and Linux, and before 25.0.1364.99 on Mac OS X, allows remote attackers to cause a denial of service (out-of-bounds read) via vectors related to a \"user gesture check for dangerous file downloads.\"", "scorev2": "5.0", "scorev3": "0.0", "scorev4": "0.0", "modified": "2026-06-16T23:50:17.000", "vector": "NETWORK", "vectorString": "AV:N/AC:L/Au:N/C:N/I:N/A:P", "detail": "fixed-version: Fixed from version 25.0.1364.99" }, { "id": "CVE-2013-0889", "status": "Patched", "link": "https://nvd.nist.gov/vuln/detail/CVE-2013-0889", "summary": "Google Chrome before 25.0.1364.97 on Windows and Linux, and before 25.0.1364.99 on Mac OS X, does not properly enforce a user gesture requirement before proceeding with a file download, which might make it easier for remote attackers to execute arbitrary code via a crafted file.", "scorev2": "6.8", "scorev3": "0.0", "scorev4": "0.0", "modified": "2026-06-16T23:50:17.000", "vector": "NETWORK", "vectorString": "AV:N/AC:M/Au:N/C:P/I:P/A:P", "detail": "fixed-version: Fixed from version 25.0.1364.99" }, { "id": "CVE-2013-0890", "status": "Patched", "link": "https://nvd.nist.gov/vuln/detail/CVE-2013-0890", "summary": "Multiple unspecified vulnerabilities in the IPC layer in Google Chrome before 25.0.1364.97 on Windows and Linux, and before 25.0.1364.99 on Mac OS X, allow remote attackers to cause a denial of service (memory corruption) or possibly have other impact via unknown vectors.", "scorev2": "7.5", "scorev3": "0.0", "scorev4": "0.0", "modified": "2026-06-16T23:50:17.000", "vector": "NETWORK", "vectorString": "AV:N/AC:L/Au:N/C:P/I:P/A:P", "detail": "fixed-version: Fixed from version 25.0.1364.99" }, { "id": "CVE-2013-0891", "status": "Patched", "link": "https://nvd.nist.gov/vuln/detail/CVE-2013-0891", "summary": "Integer overflow in Google Chrome before 25.0.1364.97 on Windows and Linux, and before 25.0.1364.99 on Mac OS X, allows remote attackers to cause a denial of service or possibly have unspecified other impact via a blob.", "scorev2": "7.5", "scorev3": "0.0", "scorev4": "0.0", "modified": "2026-06-16T23:50:17.000", "vector": "NETWORK", "vectorString": "AV:N/AC:L/Au:N/C:P/I:P/A:P", "detail": "fixed-version: Fixed from version 25.0.1364.99" }, { "id": "CVE-2013-0892", "status": "Patched", "link": "https://nvd.nist.gov/vuln/detail/CVE-2013-0892", "summary": "Multiple unspecified vulnerabilities in the IPC layer in Google Chrome before 25.0.1364.97 on Windows and Linux, and before 25.0.1364.99 on Mac OS X, allow remote attackers to cause a denial of service or possibly have other impact via unknown vectors.", "scorev2": "7.5", "scorev3": "0.0", "scorev4": "0.0", "modified": "2026-06-16T23:50:17.000", "vector": "NETWORK", "vectorString": "AV:N/AC:L/Au:N/C:P/I:P/A:P", "detail": "fixed-version: Fixed from version 25.0.1364.99" }, { "id": "CVE-2013-0893", "status": "Patched", "link": "https://nvd.nist.gov/vuln/detail/CVE-2013-0893", "summary": "Race condition in Google Chrome before 25.0.1364.97 on Windows and Linux, and before 25.0.1364.99 on Mac OS X, allows remote attackers to cause a denial of service or possibly have unspecified other impact via vectors related to media.", "scorev2": "6.8", "scorev3": "0.0", "scorev4": "0.0", "modified": "2026-06-16T23:50:17.000", "vector": "NETWORK", "vectorString": "AV:N/AC:M/Au:N/C:P/I:P/A:P", "detail": "fixed-version: Fixed from version 25.0.1364.99" }, { "id": "CVE-2013-0894", "status": "Patched", "link": "https://nvd.nist.gov/vuln/detail/CVE-2013-0894", "summary": "Buffer overflow in the vorbis_parse_setup_hdr_floors function in the Vorbis decoder in vorbisdec.c in libavcodec in FFmpeg through 1.1.3, as used in Google Chrome before 25.0.1364.97 on Windows and Linux and before 25.0.1364.99 on Mac OS X and other products, allows remote attackers to cause a denial of service (divide-by-zero error or out-of-bounds array access) or possibly have unspecified other impact via vectors involving a zero value for a bark map size.", "scorev2": "7.5", "scorev3": "0.0", "scorev4": "0.0", "modified": "2026-06-16T23:50:18.000", "vector": "NETWORK", "vectorString": "AV:N/AC:L/Au:N/C:P/I:P/A:P", "detail": "fixed-version: Fixed from version 25.0.1364.99" }, { "id": "CVE-2013-0895", "status": "Patched", "link": "https://nvd.nist.gov/vuln/detail/CVE-2013-0895", "summary": "Google Chrome before 25.0.1364.97 on Linux, and before 25.0.1364.99 on Mac OS X, does not properly handle pathnames during copy operations, which might make it easier for remote attackers to execute arbitrary programs via unspecified vectors.", "scorev2": "7.5", "scorev3": "0.0", "scorev4": "0.0", "modified": "2026-06-16T23:50:18.000", "vector": "NETWORK", "vectorString": "AV:N/AC:L/Au:N/C:P/I:P/A:P", "detail": "fixed-version: Fixed from version 25.0.1364.99" }, { "id": "CVE-2013-0896", "status": "Patched", "link": "https://nvd.nist.gov/vuln/detail/CVE-2013-0896", "summary": "Google Chrome before 25.0.1364.97 on Windows and Linux, and before 25.0.1364.99 on Mac OS X, does not properly manage memory during message handling for plug-ins, which allows remote attackers to cause a denial of service or possibly have unspecified other impact via unknown vectors.", "scorev2": "7.5", "scorev3": "0.0", "scorev4": "0.0", "modified": "2026-06-16T23:50:18.000", "vector": "NETWORK", "vectorString": "AV:N/AC:L/Au:N/C:P/I:P/A:P", "detail": "fixed-version: Fixed from version 25.0.1364.99" }, { "id": "CVE-2013-0897", "status": "Patched", "link": "https://nvd.nist.gov/vuln/detail/CVE-2013-0897", "summary": "Off-by-one error in the PDF functionality in Google Chrome before 25.0.1364.97 on Windows and Linux, and before 25.0.1364.99 on Mac OS X, allows remote attackers to cause a denial of service via a crafted document.", "scorev2": "4.3", "scorev3": "0.0", "scorev4": "0.0", "modified": "2026-06-16T23:50:18.000", "vector": "NETWORK", "vectorString": "AV:N/AC:M/Au:N/C:N/I:N/A:P", "detail": "fixed-version: Fixed from version 25.0.1364.99" }, { "id": "CVE-2013-0898", "status": "Patched", "link": "https://nvd.nist.gov/vuln/detail/CVE-2013-0898", "summary": "Use-after-free vulnerability in Google Chrome before 25.0.1364.97 on Windows and Linux, and before 25.0.1364.99 on Mac OS X, allows remote attackers to cause a denial of service or possibly have unspecified other impact via vectors involving a URL.", "scorev2": "7.5", "scorev3": "0.0", "scorev4": "0.0", "modified": "2026-06-16T23:50:18.000", "vector": "NETWORK", "vectorString": "AV:N/AC:L/Au:N/C:P/I:P/A:P", "detail": "fixed-version: Fixed from version 25.0.1364.99" }, { "id": "CVE-2013-0899", "status": "Patched", "link": "https://nvd.nist.gov/vuln/detail/CVE-2013-0899", "summary": "Integer overflow in the padding implementation in the opus_packet_parse_impl function in src/opus_decoder.c in Opus before 1.0.2, as used in Google Chrome before 25.0.1364.97 on Windows and Linux and before 25.0.1364.99 on Mac OS X and other products, allows remote attackers to cause a denial of service (out-of-bounds read) via a long packet.", "scorev2": "5.0", "scorev3": "0.0", "scorev4": "0.0", "modified": "2026-06-16T23:50:18.000", "vector": "NETWORK", "vectorString": "AV:N/AC:L/Au:N/C:N/I:N/A:P", "detail": "fixed-version: Fixed from version 25.0.1364.99" }, { "id": "CVE-2013-0900", "status": "Patched", "link": "https://nvd.nist.gov/vuln/detail/CVE-2013-0900", "summary": "Race condition in the International Components for Unicode (ICU) functionality in Google Chrome before 25.0.1364.97 on Windows and Linux, and before 25.0.1364.99 on Mac OS X, allows remote attackers to cause a denial of service or possibly have unspecified other impact via unknown vectors.", "scorev2": "6.8", "scorev3": "0.0", "scorev4": "0.0", "modified": "2026-06-16T23:50:18.000", "vector": "NETWORK", "vectorString": "AV:N/AC:M/Au:N/C:P/I:P/A:P", "detail": "fixed-version: Fixed from version 25.0.1364.99" }, { "id": "CVE-2013-0902", "status": "Patched", "link": "https://nvd.nist.gov/vuln/detail/CVE-2013-0902", "summary": "Use-after-free vulnerability in the frame-loader implementation in Google Chrome before 25.0.1364.152 allows remote attackers to cause a denial of service or possibly have unspecified other impact via unknown vectors.", "scorev2": "7.5", "scorev3": "0.0", "scorev4": "0.0", "modified": "2026-06-16T23:50:18.000", "vector": "NETWORK", "vectorString": "AV:N/AC:L/Au:N/C:P/I:P/A:P", "detail": "fixed-version: Fixed from version >25.0.1364.126" }, { "id": "CVE-2013-0903", "status": "Patched", "link": "https://nvd.nist.gov/vuln/detail/CVE-2013-0903", "summary": "Use-after-free vulnerability in Google Chrome before 25.0.1364.152 allows remote attackers to cause a denial of service or possibly have unspecified other impact via vectors related to the handling of browser navigation.", "scorev2": "7.5", "scorev3": "0.0", "scorev4": "0.0", "modified": "2026-06-16T23:50:19.000", "vector": "NETWORK", "vectorString": "AV:N/AC:L/Au:N/C:P/I:P/A:P", "detail": "fixed-version: Fixed from version >25.0.1364.126" }, { "id": "CVE-2013-0904", "status": "Patched", "link": "https://nvd.nist.gov/vuln/detail/CVE-2013-0904", "summary": "The Web Audio implementation in Google Chrome before 25.0.1364.152 allows remote attackers to cause a denial of service (memory corruption) or possibly have unspecified other impact via unknown vectors.", "scorev2": "7.5", "scorev3": "0.0", "scorev4": "0.0", "modified": "2026-06-16T23:50:19.000", "vector": "NETWORK", "vectorString": "AV:N/AC:L/Au:N/C:P/I:P/A:P", "detail": "fixed-version: Fixed from version >25.0.1364.126" }, { "id": "CVE-2013-0905", "status": "Patched", "link": "https://nvd.nist.gov/vuln/detail/CVE-2013-0905", "summary": "Use-after-free vulnerability in Google Chrome before 25.0.1364.152 allows remote attackers to cause a denial of service or possibly have unspecified other impact via vectors involving an SVG animation.", "scorev2": "7.5", "scorev3": "0.0", "scorev4": "0.0", "modified": "2026-06-16T23:50:19.000", "vector": "NETWORK", "vectorString": "AV:N/AC:L/Au:N/C:P/I:P/A:P", "detail": "fixed-version: Fixed from version >25.0.1364.126" }, { "id": "CVE-2013-0906", "status": "Patched", "link": "https://nvd.nist.gov/vuln/detail/CVE-2013-0906", "summary": "The IndexedDB implementation in Google Chrome before 25.0.1364.152 allows remote attackers to cause a denial of service (memory corruption) or possibly have unspecified other impact via unknown vectors.", "scorev2": "7.5", "scorev3": "0.0", "scorev4": "0.0", "modified": "2026-06-16T23:50:19.000", "vector": "NETWORK", "vectorString": "AV:N/AC:L/Au:N/C:P/I:P/A:P", "detail": "fixed-version: Fixed from version >25.0.1364.126" }, { "id": "CVE-2013-0907", "status": "Patched", "link": "https://nvd.nist.gov/vuln/detail/CVE-2013-0907", "summary": "Race condition in Google Chrome before 25.0.1364.152 allows remote attackers to cause a denial of service or possibly have unspecified other impact via vectors related to the handling of media threads.", "scorev2": "7.5", "scorev3": "0.0", "scorev4": "0.0", "modified": "2026-06-16T23:50:19.000", "vector": "NETWORK", "vectorString": "AV:N/AC:L/Au:N/C:P/I:P/A:P", "detail": "fixed-version: Fixed from version >25.0.1364.126" }, { "id": "CVE-2013-0908", "status": "Patched", "link": "https://nvd.nist.gov/vuln/detail/CVE-2013-0908", "summary": "Google Chrome before 25.0.1364.152 does not properly manage bindings of extension processes, which has unspecified impact and attack vectors.", "scorev2": "7.5", "scorev3": "0.0", "scorev4": "0.0", "modified": "2026-06-16T23:50:20.000", "vector": "NETWORK", "vectorString": "AV:N/AC:L/Au:N/C:P/I:P/A:P", "detail": "fixed-version: Fixed from version >25.0.1364.126" }, { "id": "CVE-2013-0909", "status": "Patched", "link": "https://nvd.nist.gov/vuln/detail/CVE-2013-0909", "summary": "The XSS Auditor in Google Chrome before 25.0.1364.152 allows remote attackers to obtain sensitive HTTP Referer information via unspecified vectors.", "scorev2": "5.0", "scorev3": "0.0", "scorev4": "0.0", "modified": "2026-06-16T23:50:20.000", "vector": "NETWORK", "vectorString": "AV:N/AC:L/Au:N/C:P/I:N/A:N", "detail": "fixed-version: Fixed from version >25.0.1364.126" }, { "id": "CVE-2013-0910", "status": "Patched", "link": "https://nvd.nist.gov/vuln/detail/CVE-2013-0910", "summary": "Google Chrome before 25.0.1364.152 does not properly manage the interaction between the browser process and renderer processes during authorization of the loading of a plug-in, which makes it easier for remote attackers to bypass intended access restrictions via vectors involving a blocked plug-in.", "scorev2": "7.5", "scorev3": "0.0", "scorev4": "0.0", "modified": "2026-06-16T23:50:20.000", "vector": "NETWORK", "vectorString": "AV:N/AC:L/Au:N/C:P/I:P/A:P", "detail": "fixed-version: Fixed from version >25.0.1364.126" }, { "id": "CVE-2013-0911", "status": "Patched", "link": "https://nvd.nist.gov/vuln/detail/CVE-2013-0911", "summary": "Directory traversal vulnerability in Google Chrome before 25.0.1364.152 allows remote attackers to have an unspecified impact via vectors related to databases.", "scorev2": "7.5", "scorev3": "0.0", "scorev4": "0.0", "modified": "2026-06-16T23:50:20.000", "vector": "NETWORK", "vectorString": "AV:N/AC:L/Au:N/C:P/I:P/A:P", "detail": "fixed-version: Fixed from version >25.0.1364.126" }, { "id": "CVE-2013-0912", "status": "Patched", "link": "https://nvd.nist.gov/vuln/detail/CVE-2013-0912", "summary": "WebKit in Google Chrome before 25.0.1364.160 allows remote attackers to execute arbitrary code via vectors that leverage \"type confusion.\"", "scorev2": "7.5", "scorev3": "0.0", "scorev4": "0.0", "modified": "2026-06-16T23:50:20.000", "vector": "NETWORK", "vectorString": "AV:N/AC:L/Au:N/C:P/I:P/A:P", "detail": "version-not-in-range" }, { "id": "CVE-2013-0916", "status": "Patched", "link": "https://nvd.nist.gov/vuln/detail/CVE-2013-0916", "summary": "Use-after-free vulnerability in the Web Audio implementation in Google Chrome before 26.0.1410.43 allows remote attackers to cause a denial of service or possibly have unspecified other impact via unknown vectors.", "scorev2": "7.5", "scorev3": "0.0", "scorev4": "0.0", "modified": "2026-06-16T23:50:21.000", "vector": "NETWORK", "vectorString": "AV:N/AC:L/Au:N/C:P/I:P/A:P", "detail": "fixed-version: Fixed from version >26.0.1410.42" }, { "id": "CVE-2013-0917", "status": "Patched", "link": "https://nvd.nist.gov/vuln/detail/CVE-2013-0917", "summary": "The URL loader in Google Chrome before 26.0.1410.43 allows remote attackers to cause a denial of service (out-of-bounds read) via unspecified vectors.", "scorev2": "5.0", "scorev3": "0.0", "scorev4": "0.0", "modified": "2026-06-16T23:50:21.000", "vector": "NETWORK", "vectorString": "AV:N/AC:L/Au:N/C:N/I:N/A:P", "detail": "fixed-version: Fixed from version >26.0.1410.42" }, { "id": "CVE-2013-0918", "status": "Patched", "link": "https://nvd.nist.gov/vuln/detail/CVE-2013-0918", "summary": "Google Chrome before 26.0.1410.43 does not prevent navigation to developer tools in response to a drag-and-drop operation, which allows user-assisted remote attackers to have an unspecified impact via a crafted web site.", "scorev2": "6.8", "scorev3": "0.0", "scorev4": "0.0", "modified": "2026-06-16T23:50:21.000", "vector": "NETWORK", "vectorString": "AV:N/AC:M/Au:N/C:P/I:P/A:P", "detail": "fixed-version: Fixed from version >26.0.1410.42" }, { "id": "CVE-2013-0919", "status": "Patched", "link": "https://nvd.nist.gov/vuln/detail/CVE-2013-0919", "summary": "Use-after-free vulnerability in Google Chrome before 26.0.1410.43 on Linux allows remote attackers to cause a denial of service or possibly have unspecified other impact by leveraging the presence of an extension that creates a pop-up window.", "scorev2": "7.5", "scorev3": "0.0", "scorev4": "0.0", "modified": "2026-06-16T23:50:21.000", "vector": "NETWORK", "vectorString": "AV:N/AC:L/Au:N/C:P/I:P/A:P", "detail": "fixed-version: Fixed from version >26.0.1410.42" }, { "id": "CVE-2013-0920", "status": "Patched", "link": "https://nvd.nist.gov/vuln/detail/CVE-2013-0920", "summary": "Use-after-free vulnerability in the extension bookmarks API in Google Chrome before 26.0.1410.43 allows remote attackers to cause a denial of service or possibly have unspecified other impact via unknown vectors.", "scorev2": "7.5", "scorev3": "0.0", "scorev4": "0.0", "modified": "2026-06-16T23:50:21.000", "vector": "NETWORK", "vectorString": "AV:N/AC:L/Au:N/C:P/I:P/A:P", "detail": "fixed-version: Fixed from version >26.0.1410.42" }, { "id": "CVE-2013-0921", "status": "Patched", "link": "https://nvd.nist.gov/vuln/detail/CVE-2013-0921", "summary": "The Isolated Sites feature in Google Chrome before 26.0.1410.43 does not properly enforce the use of separate processes, which makes it easier for remote attackers to bypass intended access restrictions via a crafted web site.", "scorev2": "6.8", "scorev3": "0.0", "scorev4": "0.0", "modified": "2026-06-16T23:50:21.000", "vector": "NETWORK", "vectorString": "AV:N/AC:M/Au:N/C:P/I:P/A:P", "detail": "fixed-version: Fixed from version >26.0.1410.42" }, { "id": "CVE-2013-0922", "status": "Patched", "link": "https://nvd.nist.gov/vuln/detail/CVE-2013-0922", "summary": "Google Chrome before 26.0.1410.43 does not properly restrict brute-force access attempts against web sites that require HTTP Basic Authentication, which has unspecified impact and attack vectors.", "scorev2": "7.5", "scorev3": "0.0", "scorev4": "0.0", "modified": "2026-06-16T23:50:21.000", "vector": "NETWORK", "vectorString": "AV:N/AC:L/Au:N/C:P/I:P/A:P", "detail": "fixed-version: Fixed from version >26.0.1410.42" }, { "id": "CVE-2013-0923", "status": "Patched", "link": "https://nvd.nist.gov/vuln/detail/CVE-2013-0923", "summary": "The USB Apps API in Google Chrome before 26.0.1410.43 allows remote attackers to cause a denial of service (memory corruption) via unspecified vectors.", "scorev2": "5.0", "scorev3": "0.0", "scorev4": "0.0", "modified": "2026-06-16T23:50:21.000", "vector": "NETWORK", "vectorString": "AV:N/AC:L/Au:N/C:N/I:N/A:P", "detail": "fixed-version: Fixed from version >26.0.1410.42" }, { "id": "CVE-2013-0924", "status": "Patched", "link": "https://nvd.nist.gov/vuln/detail/CVE-2013-0924", "summary": "The extension functionality in Google Chrome before 26.0.1410.43 does not verify that use of the permissions API is consistent with file permissions, which has unspecified impact and attack vectors.", "scorev2": "7.5", "scorev3": "0.0", "scorev4": "0.0", "modified": "2026-06-16T23:50:21.000", "vector": "NETWORK", "vectorString": "AV:N/AC:L/Au:N/C:P/I:P/A:P", "detail": "fixed-version: Fixed from version >26.0.1410.42" }, { "id": "CVE-2013-0925", "status": "Patched", "link": "https://nvd.nist.gov/vuln/detail/CVE-2013-0925", "summary": "Google Chrome before 26.0.1410.43 does not ensure that an extension has the tabs (aka APIPermission::kTab) permission before providing a URL to this extension, which has unspecified impact and remote attack vectors.", "scorev2": "7.5", "scorev3": "0.0", "scorev4": "0.0", "modified": "2026-06-16T23:50:22.000", "vector": "NETWORK", "vectorString": "AV:N/AC:L/Au:N/C:P/I:P/A:P", "detail": "fixed-version: Fixed from version >26.0.1410.42" }, { "id": "CVE-2013-0926", "status": "Patched", "link": "https://nvd.nist.gov/vuln/detail/CVE-2013-0926", "summary": "Google Chrome before 26.0.1410.43 does not properly handle active content in an EMBED element during a copy-and-paste operation, which allows user-assisted remote attackers to have an unspecified impact via a crafted web site.", "scorev2": "6.8", "scorev3": "0.0", "scorev4": "0.0", "modified": "2026-06-16T23:50:22.000", "vector": "NETWORK", "vectorString": "AV:N/AC:M/Au:N/C:P/I:P/A:P", "detail": "fixed-version: Fixed from version >26.0.1410.42" }, { "id": "CVE-2013-2268", "status": "Patched", "link": "https://nvd.nist.gov/vuln/detail/CVE-2013-2268", "summary": "Unspecified vulnerability in the MathML implementation in WebKit in Google Chrome before 25.0.1364.97 on Windows and Linux, and before 25.0.1364.99 on Mac OS X, has unknown impact and remote attack vectors, related to a \"high severity security issue.\"", "scorev2": "7.5", "scorev3": "0.0", "scorev4": "0.0", "modified": "2026-06-16T23:53:03.000", "vector": "NETWORK", "vectorString": "AV:N/AC:L/Au:N/C:P/I:P/A:P", "detail": "fixed-version: Fixed from version >25.0.1364.98" }, { "id": "CVE-2013-2632", "status": "Patched", "link": "https://nvd.nist.gov/vuln/detail/CVE-2013-2632", "summary": "Google V8 before 3.17.13, as used in Google Chrome before 27.0.1444.3, allows remote attackers to cause a denial of service (application crash) or possibly have unspecified other impact via crafted JavaScript code, as demonstrated by the Bejeweled game.", "scorev2": "6.8", "scorev3": "0.0", "scorev4": "0.0", "modified": "2026-06-16T23:53:44.000", "vector": "NETWORK", "vectorString": "AV:N/AC:M/Au:N/C:P/I:P/A:P", "detail": "fixed-version: Fixed from version >27.0.1444.0" }, { "id": "CVE-2013-2836", "status": "Patched", "link": "https://nvd.nist.gov/vuln/detail/CVE-2013-2836", "summary": "Multiple unspecified vulnerabilities in Google Chrome before 27.0.1453.93 allow attackers to cause a denial of service or possibly have other impact via unknown vectors.", "scorev2": "7.5", "scorev3": "0.0", "scorev4": "0.0", "modified": "2026-06-16T23:54:02.000", "vector": "NETWORK", "vectorString": "AV:N/AC:L/Au:N/C:P/I:P/A:P", "detail": "fixed-version: Fixed from version >27.0.1453.91" }, { "id": "CVE-2013-2837", "status": "Patched", "link": "https://nvd.nist.gov/vuln/detail/CVE-2013-2837", "summary": "Use-after-free vulnerability in the SVG implementation in Google Chrome before 27.0.1453.93 allows remote attackers to cause a denial of service or possibly have unspecified other impact via unknown vectors.", "scorev2": "7.5", "scorev3": "0.0", "scorev4": "0.0", "modified": "2026-06-16T23:54:02.000", "vector": "NETWORK", "vectorString": "AV:N/AC:L/Au:N/C:P/I:P/A:P", "detail": "fixed-version: Fixed from version >27.0.1453.91" }, { "id": "CVE-2013-2838", "status": "Patched", "link": "https://nvd.nist.gov/vuln/detail/CVE-2013-2838", "summary": "Google V8, as used in Google Chrome before 27.0.1453.93, allows remote attackers to cause a denial of service (out-of-bounds read) via unspecified vectors.", "scorev2": "5.0", "scorev3": "0.0", "scorev4": "0.0", "modified": "2026-06-16T23:54:02.000", "vector": "NETWORK", "vectorString": "AV:N/AC:L/Au:N/C:N/I:N/A:P", "detail": "fixed-version: Fixed from version >27.0.1453.91" }, { "id": "CVE-2013-2839", "status": "Patched", "link": "https://nvd.nist.gov/vuln/detail/CVE-2013-2839", "summary": "Google Chrome before 27.0.1453.93 does not properly perform a cast of an unspecified variable during handling of clipboard data, which allows remote attackers to cause a denial of service or possibly have other impact via unknown vectors.", "scorev2": "7.5", "scorev3": "0.0", "scorev4": "0.0", "modified": "2026-06-16T23:54:03.000", "vector": "NETWORK", "vectorString": "AV:N/AC:L/Au:N/C:P/I:P/A:P", "detail": "fixed-version: Fixed from version >27.0.1453.91" }, { "id": "CVE-2013-2840", "status": "Patched", "link": "https://nvd.nist.gov/vuln/detail/CVE-2013-2840", "summary": "Use-after-free vulnerability in the media loader in Google Chrome before 27.0.1453.93 allows remote attackers to cause a denial of service or possibly have unspecified other impact via unknown vectors, a different vulnerability than CVE-2013-2846.", "scorev2": "7.5", "scorev3": "0.0", "scorev4": "0.0", "modified": "2026-06-16T23:54:03.000", "vector": "NETWORK", "vectorString": "AV:N/AC:L/Au:N/C:P/I:P/A:P", "detail": "fixed-version: Fixed from version >27.0.1453.91" }, { "id": "CVE-2013-2841", "status": "Patched", "link": "https://nvd.nist.gov/vuln/detail/CVE-2013-2841", "summary": "Use-after-free vulnerability in Google Chrome before 27.0.1453.93 allows remote attackers to cause a denial of service or possibly have unspecified other impact via vectors related to the handling of Pepper resources.", "scorev2": "7.5", "scorev3": "0.0", "scorev4": "0.0", "modified": "2026-06-16T23:54:03.000", "vector": "NETWORK", "vectorString": "AV:N/AC:L/Au:N/C:P/I:P/A:P", "detail": "fixed-version: Fixed from version >27.0.1453.91" }, { "id": "CVE-2013-2842", "status": "Patched", "link": "https://nvd.nist.gov/vuln/detail/CVE-2013-2842", "summary": "Use-after-free vulnerability in Google Chrome before 27.0.1453.93 allows remote attackers to cause a denial of service or possibly have unspecified other impact via vectors related to the handling of widgets.", "scorev2": "7.5", "scorev3": "0.0", "scorev4": "0.0", "modified": "2026-06-16T23:54:03.000", "vector": "NETWORK", "vectorString": "AV:N/AC:L/Au:N/C:P/I:P/A:P", "detail": "fixed-version: Fixed from version >27.0.1453.91" }, { "id": "CVE-2013-2843", "status": "Patched", "link": "https://nvd.nist.gov/vuln/detail/CVE-2013-2843", "summary": "Use-after-free vulnerability in Google Chrome before 27.0.1453.93 allows remote attackers to cause a denial of service or possibly have unspecified other impact via vectors related to the handling of speech data.", "scorev2": "7.5", "scorev3": "0.0", "scorev4": "0.0", "modified": "2026-06-16T23:54:03.000", "vector": "NETWORK", "vectorString": "AV:N/AC:L/Au:N/C:P/I:P/A:P", "detail": "fixed-version: Fixed from version >27.0.1453.91" }, { "id": "CVE-2013-2844", "status": "Patched", "link": "https://nvd.nist.gov/vuln/detail/CVE-2013-2844", "summary": "Use-after-free vulnerability in the Cascading Style Sheets (CSS) implementation in Google Chrome before 27.0.1453.93 allows remote attackers to cause a denial of service or possibly have unspecified other impact via vectors related to style resolution.", "scorev2": "7.5", "scorev3": "0.0", "scorev4": "0.0", "modified": "2026-06-16T23:54:03.000", "vector": "NETWORK", "vectorString": "AV:N/AC:L/Au:N/C:P/I:P/A:P", "detail": "fixed-version: Fixed from version >27.0.1453.91" }, { "id": "CVE-2013-2845", "status": "Patched", "link": "https://nvd.nist.gov/vuln/detail/CVE-2013-2845", "summary": "The Web Audio implementation in Google Chrome before 27.0.1453.93 allows remote attackers to cause a denial of service (memory corruption) or possibly have unspecified other impact via unknown vectors.", "scorev2": "7.5", "scorev3": "0.0", "scorev4": "0.0", "modified": "2026-06-16T23:54:03.000", "vector": "NETWORK", "vectorString": "AV:N/AC:L/Au:N/C:P/I:P/A:P", "detail": "fixed-version: Fixed from version >27.0.1453.91" }, { "id": "CVE-2013-2846", "status": "Patched", "link": "https://nvd.nist.gov/vuln/detail/CVE-2013-2846", "summary": "Use-after-free vulnerability in the media loader in Google Chrome before 27.0.1453.93 allows remote attackers to cause a denial of service or possibly have unspecified other impact via unknown vectors, a different vulnerability than CVE-2013-2840.", "scorev2": "7.5", "scorev3": "0.0", "scorev4": "0.0", "modified": "2026-06-16T23:54:03.000", "vector": "NETWORK", "vectorString": "AV:N/AC:L/Au:N/C:P/I:P/A:P", "detail": "fixed-version: Fixed from version >27.0.1453.91" }, { "id": "CVE-2013-2847", "status": "Patched", "link": "https://nvd.nist.gov/vuln/detail/CVE-2013-2847", "summary": "Race condition in the workers implementation in Google Chrome before 27.0.1453.93 allows remote attackers to cause a denial of service (use-after-free and application crash) or possibly have unspecified other impact via unknown vectors.", "scorev2": "6.8", "scorev3": "0.0", "scorev4": "0.0", "modified": "2026-06-16T23:54:04.000", "vector": "NETWORK", "vectorString": "AV:N/AC:M/Au:N/C:P/I:P/A:P", "detail": "fixed-version: Fixed from version >27.0.1453.91" }, { "id": "CVE-2013-2848", "status": "Patched", "link": "https://nvd.nist.gov/vuln/detail/CVE-2013-2848", "summary": "The XSS Auditor in Google Chrome before 27.0.1453.93 might allow remote attackers to obtain sensitive information via unspecified vectors.", "scorev2": "5.0", "scorev3": "0.0", "scorev4": "0.0", "modified": "2026-06-16T23:54:04.000", "vector": "NETWORK", "vectorString": "AV:N/AC:L/Au:N/C:P/I:N/A:N", "detail": "fixed-version: Fixed from version >27.0.1453.91" }, { "id": "CVE-2013-2849", "status": "Patched", "link": "https://nvd.nist.gov/vuln/detail/CVE-2013-2849", "summary": "Multiple cross-site scripting (XSS) vulnerabilities in Google Chrome before 27.0.1453.93 allow user-assisted remote attackers to inject arbitrary web script or HTML via vectors involving a (1) drag-and-drop or (2) copy-and-paste operation.", "scorev2": "4.3", "scorev3": "0.0", "scorev4": "0.0", "modified": "2026-06-16T23:54:04.000", "vector": "NETWORK", "vectorString": "AV:N/AC:M/Au:N/C:N/I:P/A:N", "detail": "fixed-version: Fixed from version >27.0.1453.91" }, { "id": "CVE-2013-2853", "status": "Patched", "link": "https://nvd.nist.gov/vuln/detail/CVE-2013-2853", "summary": "The HTTPS implementation in Google Chrome before 28.0.1500.71 does not ensure that headers are terminated by \\r\\n\\r\\n (carriage return, newline, carriage return, newline), which allows man-in-the-middle attackers to have an unspecified impact via vectors that trigger header truncation.", "scorev2": "6.8", "scorev3": "0.0", "scorev4": "0.0", "modified": "2026-06-16T23:54:04.000", "vector": "NETWORK", "vectorString": "AV:N/AC:M/Au:N/C:P/I:P/A:P", "detail": "fixed-version: Fixed from version >28.0.1500.70" }, { "id": "CVE-2013-2854", "status": "Patched", "link": "https://nvd.nist.gov/vuln/detail/CVE-2013-2854", "summary": "Google Chrome before 27.0.1453.110 on Windows provides an incorrect handle to a renderer process in unspecified circumstances, which allows remote attackers to cause a denial of service or possibly have other impact via unknown vectors.", "scorev2": "7.5", "scorev3": "0.0", "scorev4": "0.0", "modified": "2026-06-16T23:54:04.000", "vector": "NETWORK", "vectorString": "AV:N/AC:L/Au:N/C:P/I:P/A:P", "detail": "fixed-version: Fixed from version >27.0.1453.109" }, { "id": "CVE-2013-2855", "status": "Patched", "link": "https://nvd.nist.gov/vuln/detail/CVE-2013-2855", "summary": "The Developer Tools API in Google Chrome before 27.0.1453.110 allows remote attackers to cause a denial of service (memory corruption) or possibly have unspecified other impact via unknown vectors.", "scorev2": "5.0", "scorev3": "0.0", "scorev4": "0.0", "modified": "2026-06-16T23:54:05.000", "vector": "NETWORK", "vectorString": "AV:N/AC:L/Au:N/C:N/I:P/A:N", "detail": "fixed-version: Fixed from version >27.0.1453.109" }, { "id": "CVE-2013-2856", "status": "Patched", "link": "https://nvd.nist.gov/vuln/detail/CVE-2013-2856", "summary": "Use-after-free vulnerability in Google Chrome before 27.0.1453.110 allows remote attackers to cause a denial of service or possibly have unspecified other impact via vectors related to the handling of input.", "scorev2": "7.5", "scorev3": "0.0", "scorev4": "0.0", "modified": "2026-06-16T23:54:05.000", "vector": "NETWORK", "vectorString": "AV:N/AC:L/Au:N/C:P/I:P/A:P", "detail": "fixed-version: Fixed from version >27.0.1453.109" }, { "id": "CVE-2013-2857", "status": "Patched", "link": "https://nvd.nist.gov/vuln/detail/CVE-2013-2857", "summary": "Use-after-free vulnerability in Google Chrome before 27.0.1453.110 allows remote attackers to cause a denial of service or possibly have unspecified other impact via vectors related to the handling of images.", "scorev2": "7.5", "scorev3": "0.0", "scorev4": "0.0", "modified": "2026-06-16T23:54:05.000", "vector": "NETWORK", "vectorString": "AV:N/AC:L/Au:N/C:P/I:P/A:P", "detail": "fixed-version: Fixed from version >27.0.1453.109" }, { "id": "CVE-2013-2858", "status": "Patched", "link": "https://nvd.nist.gov/vuln/detail/CVE-2013-2858", "summary": "Use-after-free vulnerability in the HTML5 Audio implementation in Google Chrome before 27.0.1453.110 allows remote attackers to cause a denial of service or possibly have unspecified other impact via unknown vectors.", "scorev2": "7.5", "scorev3": "0.0", "scorev4": "0.0", "modified": "2026-06-16T23:54:05.000", "vector": "NETWORK", "vectorString": "AV:N/AC:L/Au:N/C:P/I:P/A:P", "detail": "fixed-version: Fixed from version >27.0.1453.109" }, { "id": "CVE-2013-2859", "status": "Patched", "link": "https://nvd.nist.gov/vuln/detail/CVE-2013-2859", "summary": "Google Chrome before 27.0.1453.110 allows remote attackers to bypass the Same Origin Policy and trigger namespace pollution via unspecified vectors.", "scorev2": "7.5", "scorev3": "0.0", "scorev4": "0.0", "modified": "2026-06-16T23:54:05.000", "vector": "NETWORK", "vectorString": "AV:N/AC:L/Au:N/C:P/I:P/A:P", "detail": "fixed-version: Fixed from version >27.0.1453.109" }, { "id": "CVE-2013-2860", "status": "Patched", "link": "https://nvd.nist.gov/vuln/detail/CVE-2013-2860", "summary": "Use-after-free vulnerability in Google Chrome before 27.0.1453.110 allows remote attackers to cause a denial of service or possibly have unspecified other impact via vectors involving access to a database API by a worker process.", "scorev2": "7.5", "scorev3": "0.0", "scorev4": "0.0", "modified": "2026-06-16T23:54:05.000", "vector": "NETWORK", "vectorString": "AV:N/AC:L/Au:N/C:P/I:P/A:P", "detail": "fixed-version: Fixed from version >27.0.1453.109" }, { "id": "CVE-2013-2861", "status": "Patched", "link": "https://nvd.nist.gov/vuln/detail/CVE-2013-2861", "summary": "Use-after-free vulnerability in the SVG implementation in Google Chrome before 27.0.1453.110 allows remote attackers to cause a denial of service or possibly have unspecified other impact via unknown vectors.", "scorev2": "7.5", "scorev3": "0.0", "scorev4": "0.0", "modified": "2026-06-16T23:54:05.000", "vector": "NETWORK", "vectorString": "AV:N/AC:L/Au:N/C:P/I:P/A:P", "detail": "fixed-version: Fixed from version >27.0.1453.109" }, { "id": "CVE-2013-2862", "status": "Patched", "link": "https://nvd.nist.gov/vuln/detail/CVE-2013-2862", "summary": "Skia, as used in Google Chrome before 27.0.1453.110, does not properly handle GPU acceleration, which allows remote attackers to cause a denial of service (memory corruption) or possibly have unspecified other impact via unknown vectors.", "scorev2": "7.5", "scorev3": "0.0", "scorev4": "0.0", "modified": "2026-06-16T23:54:05.000", "vector": "NETWORK", "vectorString": "AV:N/AC:L/Au:N/C:P/I:P/A:P", "detail": "fixed-version: Fixed from version >27.0.1453.109" }, { "id": "CVE-2013-2863", "status": "Patched", "link": "https://nvd.nist.gov/vuln/detail/CVE-2013-2863", "summary": "Google Chrome before 27.0.1453.110 does not properly handle SSL sockets, which allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via unspecified vectors.", "scorev2": "10.0", "scorev3": "0.0", "scorev4": "0.0", "modified": "2026-06-16T23:54:05.000", "vector": "NETWORK", "vectorString": "AV:N/AC:L/Au:N/C:C/I:C/A:C", "detail": "fixed-version: Fixed from version >27.0.1453.109" }, { "id": "CVE-2013-2864", "status": "Patched", "link": "https://nvd.nist.gov/vuln/detail/CVE-2013-2864", "summary": "The PDF functionality in Google Chrome before 27.0.1453.110 allows remote attackers to cause a denial of service (invalid free operation) or possibly have unspecified other impact via unknown vectors.", "scorev2": "7.5", "scorev3": "0.0", "scorev4": "0.0", "modified": "2026-06-16T23:54:06.000", "vector": "NETWORK", "vectorString": "AV:N/AC:L/Au:N/C:P/I:P/A:P", "detail": "fixed-version: Fixed from version >27.0.1453.109" }, { "id": "CVE-2013-2865", "status": "Patched", "link": "https://nvd.nist.gov/vuln/detail/CVE-2013-2865", "summary": "Multiple unspecified vulnerabilities in Google Chrome before 27.0.1453.110 allow attackers to cause a denial of service or possibly have other impact via unknown vectors.", "scorev2": "7.5", "scorev3": "0.0", "scorev4": "0.0", "modified": "2026-06-16T23:54:06.000", "vector": "NETWORK", "vectorString": "AV:N/AC:L/Au:N/C:P/I:P/A:P", "detail": "fixed-version: Fixed from version >27.0.1453.109" }, { "id": "CVE-2013-2866", "status": "Patched", "link": "https://nvd.nist.gov/vuln/detail/CVE-2013-2866", "summary": "The Flash plug-in in Google Chrome before 27.0.1453.116, as used on Google Chrome OS before 27.0.1453.116 and separately, does not properly determine whether a user wishes to permit camera or microphone access by a Flash application, which allows remote attackers to obtain sensitive information from a machine's physical environment via a clickjacking attack, as demonstrated by an attack using a crafted Cascading Style Sheets (CSS) opacity property.", "scorev2": "4.3", "scorev3": "0.0", "scorev4": "0.0", "modified": "2026-06-16T23:54:06.000", "vector": "NETWORK", "vectorString": "AV:N/AC:M/Au:N/C:P/I:N/A:N", "detail": "fixed-version: Fixed from version >27.0.1453.115" }, { "id": "CVE-2013-2867", "status": "Patched", "link": "https://nvd.nist.gov/vuln/detail/CVE-2013-2867", "summary": "Google Chrome before 28.0.1500.71 does not properly prevent pop-under windows, which allows remote attackers to have an unspecified impact via a crafted web site.", "scorev2": "7.5", "scorev3": "0.0", "scorev4": "0.0", "modified": "2026-06-16T23:54:06.000", "vector": "NETWORK", "vectorString": "AV:N/AC:L/Au:N/C:P/I:P/A:P", "detail": "fixed-version: Fixed from version >28.0.1500.70" }, { "id": "CVE-2013-2868", "status": "Patched", "link": "https://nvd.nist.gov/vuln/detail/CVE-2013-2868", "summary": "common/extensions/sync_helper.cc in Google Chrome before 28.0.1500.71 proceeds with sync operations for NPAPI extensions without checking for a certain plugin permission setting, which might allow remote attackers to trigger unwanted extension changes via unspecified vectors.", "scorev2": "5.0", "scorev3": "0.0", "scorev4": "0.0", "modified": "2026-06-16T23:54:06.000", "vector": "NETWORK", "vectorString": "AV:N/AC:L/Au:N/C:N/I:P/A:N", "detail": "fixed-version: Fixed from version >28.0.1500.70" }, { "id": "CVE-2013-2869", "status": "Patched", "link": "https://nvd.nist.gov/vuln/detail/CVE-2013-2869", "summary": "Google Chrome before 28.0.1500.71 allows remote attackers to cause a denial of service (out-of-bounds read) via a crafted JPEG2000 image.", "scorev2": "4.3", "scorev3": "0.0", "scorev4": "0.0", "modified": "2026-06-16T23:54:06.000", "vector": "NETWORK", "vectorString": "AV:N/AC:M/Au:N/C:N/I:N/A:P", "detail": "fixed-version: Fixed from version >28.0.1500.70" }, { "id": "CVE-2013-2870", "status": "Patched", "link": "https://nvd.nist.gov/vuln/detail/CVE-2013-2870", "summary": "Use-after-free vulnerability in Google Chrome before 28.0.1500.71 allows remote servers to execute arbitrary code via crafted response traffic after a URL request.", "scorev2": "9.3", "scorev3": "0.0", "scorev4": "0.0", "modified": "2026-06-16T23:54:06.000", "vector": "NETWORK", "vectorString": "AV:N/AC:M/Au:N/C:C/I:C/A:C", "detail": "fixed-version: Fixed from version >28.0.1500.70" }, { "id": "CVE-2013-2871", "status": "Patched", "link": "https://nvd.nist.gov/vuln/detail/CVE-2013-2871", "summary": "Use-after-free vulnerability in Google Chrome before 28.0.1500.71 allows remote attackers to cause a denial of service or possibly have unspecified other impact via vectors related to the handling of input.", "scorev2": "7.5", "scorev3": "0.0", "scorev4": "0.0", "modified": "2026-06-16T23:54:06.000", "vector": "NETWORK", "vectorString": "AV:N/AC:L/Au:N/C:P/I:P/A:P", "detail": "fixed-version: Fixed from version >28.0.1500.70" }, { "id": "CVE-2013-2872", "status": "Patched", "link": "https://nvd.nist.gov/vuln/detail/CVE-2013-2872", "summary": "Google Chrome before 28.0.1500.71 on Mac OS X does not ensure a sufficient source of entropy for renderer processes, which might make it easier for remote attackers to defeat cryptographic protection mechanisms in third-party components via unspecified vectors.", "scorev2": "5.0", "scorev3": "0.0", "scorev4": "0.0", "modified": "2026-06-16T23:54:07.000", "vector": "NETWORK", "vectorString": "AV:N/AC:L/Au:N/C:P/I:N/A:N", "detail": "fixed-version: Fixed from version >28.0.1500.70" }, { "id": "CVE-2013-2873", "status": "Patched", "link": "https://nvd.nist.gov/vuln/detail/CVE-2013-2873", "summary": "Use-after-free vulnerability in Google Chrome before 28.0.1500.71 allows remote attackers to cause a denial of service or possibly have unspecified other impact via vectors involving a 404 HTTP status code during the loading of resources.", "scorev2": "7.5", "scorev3": "0.0", "scorev4": "0.0", "modified": "2026-06-16T23:54:07.000", "vector": "NETWORK", "vectorString": "AV:N/AC:L/Au:N/C:P/I:P/A:P", "detail": "fixed-version: Fixed from version >28.0.1500.70" }, { "id": "CVE-2013-2874", "status": "Patched", "link": "https://nvd.nist.gov/vuln/detail/CVE-2013-2874", "summary": "Google Chrome before 28.0.1500.71 on Windows, when an Nvidia GPU is used, allows remote attackers to bypass intended restrictions on access to screen data via vectors involving IPC transmission of GL textures.", "scorev2": "4.3", "scorev3": "0.0", "scorev4": "0.0", "modified": "2026-06-16T23:54:07.000", "vector": "NETWORK", "vectorString": "AV:N/AC:M/Au:N/C:P/I:N/A:N", "detail": "fixed-version: Fixed from version >28.0.1500.70" }, { "id": "CVE-2013-2875", "status": "Patched", "link": "https://nvd.nist.gov/vuln/detail/CVE-2013-2875", "summary": "core/rendering/svg/SVGInlineTextBox.cpp in the SVG implementation in Blink, as used in Google Chrome before 28.0.1500.71, allows remote attackers to cause a denial of service (out-of-bounds read) via unspecified vectors.", "scorev2": "5.0", "scorev3": "0.0", "scorev4": "0.0", "modified": "2026-06-16T23:54:07.000", "vector": "NETWORK", "vectorString": "AV:N/AC:L/Au:N/C:N/I:N/A:P", "detail": "fixed-version: Fixed from version >28.0.1500.70" }, { "id": "CVE-2013-2876", "status": "Patched", "link": "https://nvd.nist.gov/vuln/detail/CVE-2013-2876", "summary": "browser/extensions/api/tabs/tabs_api.cc in Google Chrome before 28.0.1500.71 does not properly enforce restrictions on the capture of screenshots by extensions, which allows remote attackers to obtain sensitive information about the content of a previous page via vectors involving an interstitial page.", "scorev2": "5.0", "scorev3": "0.0", "scorev4": "0.0", "modified": "2026-06-16T23:54:07.000", "vector": "NETWORK", "vectorString": "AV:N/AC:L/Au:N/C:P/I:N/A:N", "detail": "fixed-version: Fixed from version >28.0.1500.70" }, { "id": "CVE-2013-2877", "status": "Patched", "link": "https://nvd.nist.gov/vuln/detail/CVE-2013-2877", "summary": "parser.c in libxml2 before 2.9.0, as used in Google Chrome before 28.0.1500.71 and other products, allows remote attackers to cause a denial of service (out-of-bounds read) via a document that ends abruptly, related to the lack of certain checks for the XML_PARSER_EOF state.", "scorev2": "5.0", "scorev3": "0.0", "scorev4": "0.0", "modified": "2026-06-16T23:54:07.000", "vector": "NETWORK", "vectorString": "AV:N/AC:L/Au:N/C:N/I:N/A:P", "detail": "fixed-version: Fixed from version >28.0.1500.70" }, { "id": "CVE-2013-2878", "status": "Patched", "link": "https://nvd.nist.gov/vuln/detail/CVE-2013-2878", "summary": "Google Chrome before 28.0.1500.71 allows remote attackers to cause a denial of service (out-of-bounds read) via vectors related to the handling of text.", "scorev2": "5.0", "scorev3": "0.0", "scorev4": "0.0", "modified": "2026-06-16T23:54:07.000", "vector": "NETWORK", "vectorString": "AV:N/AC:L/Au:N/C:N/I:N/A:P", "detail": "fixed-version: Fixed from version >28.0.1500.70" }, { "id": "CVE-2013-2879", "status": "Patched", "link": "https://nvd.nist.gov/vuln/detail/CVE-2013-2879", "summary": "Google Chrome before 28.0.1500.71 does not properly determine the circumstances in which a renderer process can be considered a trusted process for sign-in and subsequent sync operations, which makes it easier for remote attackers to conduct phishing attacks via a crafted web site.", "scorev2": "5.8", "scorev3": "0.0", "scorev4": "0.0", "modified": "2026-06-16T23:54:07.000", "vector": "NETWORK", "vectorString": "AV:N/AC:M/Au:N/C:P/I:P/A:N", "detail": "fixed-version: Fixed from version >28.0.1500.70" }, { "id": "CVE-2013-2880", "status": "Patched", "link": "https://nvd.nist.gov/vuln/detail/CVE-2013-2880", "summary": "Multiple unspecified vulnerabilities in Google Chrome before 28.0.1500.71 allow attackers to cause a denial of service or possibly have other impact via unknown vectors.", "scorev2": "7.5", "scorev3": "0.0", "scorev4": "0.0", "modified": "2026-06-16T23:54:08.000", "vector": "NETWORK", "vectorString": "AV:N/AC:L/Au:N/C:P/I:P/A:P", "detail": "fixed-version: Fixed from version >28.0.1500.70" }, { "id": "CVE-2013-2881", "status": "Patched", "link": "https://nvd.nist.gov/vuln/detail/CVE-2013-2881", "summary": "Google Chrome before 28.0.1500.95 does not properly handle frames, which allows remote attackers to bypass the Same Origin Policy via a crafted web site.", "scorev2": "5.8", "scorev3": "0.0", "scorev4": "0.0", "modified": "2026-06-16T23:54:08.000", "vector": "NETWORK", "vectorString": "AV:N/AC:M/Au:N/C:P/I:P/A:N", "detail": "fixed-version: Fixed from version >28.0.1500.94" }, { "id": "CVE-2013-2882", "status": "Patched", "link": "https://nvd.nist.gov/vuln/detail/CVE-2013-2882", "summary": "Google V8, as used in Google Chrome before 28.0.1500.95, allows remote attackers to cause a denial of service or possibly have unspecified other impact via vectors that leverage \"type confusion.\"", "scorev2": "7.5", "scorev3": "0.0", "scorev4": "0.0", "modified": "2026-06-16T23:54:08.000", "vector": "NETWORK", "vectorString": "AV:N/AC:L/Au:N/C:P/I:P/A:P", "detail": "fixed-version: Fixed from version >28.0.1500.94" }, { "id": "CVE-2013-2883", "status": "Patched", "link": "https://nvd.nist.gov/vuln/detail/CVE-2013-2883", "summary": "Use-after-free vulnerability in Google Chrome before 28.0.1500.95 allows remote attackers to cause a denial of service or possibly have unspecified other impact via vectors related to deleting the registration of a MutationObserver object.", "scorev2": "7.5", "scorev3": "0.0", "scorev4": "0.0", "modified": "2026-06-16T23:54:08.000", "vector": "NETWORK", "vectorString": "AV:N/AC:L/Au:N/C:P/I:P/A:P", "detail": "fixed-version: Fixed from version >28.0.1500.94" }, { "id": "CVE-2013-2884", "status": "Patched", "link": "https://nvd.nist.gov/vuln/detail/CVE-2013-2884", "summary": "Use-after-free vulnerability in the DOM implementation in Google Chrome before 28.0.1500.95 allows remote attackers to cause a denial of service or possibly have unspecified other impact via vectors related to improper tracking of which document owns an Attr object.", "scorev2": "7.5", "scorev3": "0.0", "scorev4": "0.0", "modified": "2026-06-16T23:54:08.000", "vector": "NETWORK", "vectorString": "AV:N/AC:L/Au:N/C:P/I:P/A:P", "detail": "fixed-version: Fixed from version >28.0.1500.94" }, { "id": "CVE-2013-2885", "status": "Patched", "link": "https://nvd.nist.gov/vuln/detail/CVE-2013-2885", "summary": "Use-after-free vulnerability in Google Chrome before 28.0.1500.95 allows remote attackers to cause a denial of service or possibly have unspecified other impact via vectors related to not properly considering focus during the processing of JavaScript events in the presence of a multiple-fields input type.", "scorev2": "7.5", "scorev3": "0.0", "scorev4": "0.0", "modified": "2026-06-16T23:54:08.000", "vector": "NETWORK", "vectorString": "AV:N/AC:L/Au:N/C:P/I:P/A:P", "detail": "fixed-version: Fixed from version >28.0.1500.94" }, { "id": "CVE-2013-2886", "status": "Patched", "link": "https://nvd.nist.gov/vuln/detail/CVE-2013-2886", "summary": "Multiple unspecified vulnerabilities in Google Chrome before 28.0.1500.95 allow attackers to cause a denial of service or possibly have other impact via unknown vectors.", "scorev2": "7.5", "scorev3": "0.0", "scorev4": "0.0", "modified": "2026-06-16T23:54:09.000", "vector": "NETWORK", "vectorString": "AV:N/AC:L/Au:N/C:P/I:P/A:P", "detail": "fixed-version: Fixed from version >28.0.1500.94" }, { "id": "CVE-2013-2887", "status": "Patched", "link": "https://nvd.nist.gov/vuln/detail/CVE-2013-2887", "summary": "Multiple unspecified vulnerabilities in Google Chrome before 29.0.1547.57 allow attackers to cause a denial of service or possibly have other impact via unknown vectors.", "scorev2": "7.5", "scorev3": "0.0", "scorev4": "0.0", "modified": "2026-06-16T23:54:09.000", "vector": "NETWORK", "vectorString": "AV:N/AC:L/Au:N/C:P/I:P/A:P", "detail": "fixed-version: Fixed from version >29.0.1547.56" }, { "id": "CVE-2013-2900", "status": "Patched", "link": "https://nvd.nist.gov/vuln/detail/CVE-2013-2900", "summary": "The FilePath::ReferencesParent function in files/file_path.cc in Google Chrome before 29.0.1547.57 on Windows does not properly handle pathname components composed entirely of . (dot) and whitespace characters, which allows remote attackers to conduct directory traversal attacks via a crafted directory name.", "scorev2": "7.5", "scorev3": "0.0", "scorev4": "0.0", "modified": "2026-06-16T23:54:11.000", "vector": "NETWORK", "vectorString": "AV:N/AC:L/Au:N/C:P/I:P/A:P", "detail": "fixed-version: Fixed from version >29.0.1547.56" }, { "id": "CVE-2013-2901", "status": "Patched", "link": "https://nvd.nist.gov/vuln/detail/CVE-2013-2901", "summary": "Multiple integer overflows in (1) libGLESv2/renderer/Renderer9.cpp and (2) libGLESv2/renderer/Renderer11.cpp in Almost Native Graphics Layer Engine (ANGLE), as used in Google Chrome before 29.0.1547.57, allow remote attackers to cause a denial of service or possibly have unspecified other impact via unknown vectors.", "scorev2": "7.5", "scorev3": "0.0", "scorev4": "0.0", "modified": "2026-06-16T23:54:11.000", "vector": "NETWORK", "vectorString": "AV:N/AC:L/Au:N/C:P/I:P/A:P", "detail": "fixed-version: Fixed from version >29.0.1547.56" }, { "id": "CVE-2013-2902", "status": "Patched", "link": "https://nvd.nist.gov/vuln/detail/CVE-2013-2902", "summary": "Use-after-free vulnerability in the XSLT ProcessingInstruction implementation in Blink, as used in Google Chrome before 29.0.1547.57, allows remote attackers to cause a denial of service or possibly have unspecified other impact via vectors related to an applyXSLTransform call involving (1) an HTML document or (2) an xsl:processing-instruction element that is still in the process of loading.", "scorev2": "7.5", "scorev3": "0.0", "scorev4": "0.0", "modified": "2026-06-16T23:54:11.000", "vector": "NETWORK", "vectorString": "AV:N/AC:L/Au:N/C:P/I:P/A:P", "detail": "fixed-version: Fixed from version >29.0.1547.56" }, { "id": "CVE-2013-2903", "status": "Patched", "link": "https://nvd.nist.gov/vuln/detail/CVE-2013-2903", "summary": "Use-after-free vulnerability in the HTMLMediaElement::didMoveToNewDocument function in core/html/HTMLMediaElement.cpp in Blink, as used in Google Chrome before 29.0.1547.57, allows remote attackers to cause a denial of service or possibly have unspecified other impact via vectors involving moving a (1) AUDIO or (2) VIDEO element between documents.", "scorev2": "7.5", "scorev3": "0.0", "scorev4": "0.0", "modified": "2026-06-16T23:54:11.000", "vector": "NETWORK", "vectorString": "AV:N/AC:L/Au:N/C:P/I:P/A:P", "detail": "fixed-version: Fixed from version >29.0.1547.56" }, { "id": "CVE-2013-2904", "status": "Patched", "link": "https://nvd.nist.gov/vuln/detail/CVE-2013-2904", "summary": "Use-after-free vulnerability in the Document::finishedParsing function in core/dom/Document.cpp in Blink, as used in Google Chrome before 29.0.1547.57, allows remote attackers to cause a denial of service or possibly have unspecified other impact via an onload event that changes an IFRAME element so that its src attribute is no longer an XML document, leading to unintended garbage collection of this document.", "scorev2": "7.5", "scorev3": "0.0", "scorev4": "0.0", "modified": "2026-06-16T23:54:11.000", "vector": "NETWORK", "vectorString": "AV:N/AC:L/Au:N/C:P/I:P/A:P", "detail": "fixed-version: Fixed from version >29.0.1547.56" }, { "id": "CVE-2013-2905", "status": "Patched", "link": "https://nvd.nist.gov/vuln/detail/CVE-2013-2905", "summary": "The SharedMemory::Create function in memory/shared_memory_posix.cc in Google Chrome before 29.0.1547.57 uses weak permissions under /dev/shm/, which allows attackers to obtain sensitive information via direct access to a POSIX shared-memory file.", "scorev2": "5.0", "scorev3": "0.0", "scorev4": "0.0", "modified": "2026-06-16T23:54:11.000", "vector": "NETWORK", "vectorString": "AV:N/AC:L/Au:N/C:P/I:N/A:N", "detail": "fixed-version: Fixed from version >29.0.1547.56" }, { "id": "CVE-2013-2906", "status": "Patched", "link": "https://nvd.nist.gov/vuln/detail/CVE-2013-2906", "summary": "Multiple race conditions in the Web Audio implementation in Blink, as used in Google Chrome before 30.0.1599.66, allow remote attackers to cause a denial of service or possibly have unspecified other impact via vectors related to threading in core/html/HTMLMediaElement.cpp, core/platform/audio/AudioDSPKernelProcessor.cpp, core/platform/audio/HRTFElevation.cpp, and modules/webaudio/ConvolverNode.cpp.", "scorev2": "6.8", "scorev3": "0.0", "scorev4": "0.0", "modified": "2026-06-16T23:54:11.000", "vector": "NETWORK", "vectorString": "AV:N/AC:M/Au:N/C:P/I:P/A:P", "detail": "fixed-version: Fixed from version >30.0.1599.65" }, { "id": "CVE-2013-2907", "status": "Patched", "link": "https://nvd.nist.gov/vuln/detail/CVE-2013-2907", "summary": "The Window.prototype object implementation in Google Chrome before 30.0.1599.66 allows remote attackers to cause a denial of service (out-of-bounds read) via unspecified vectors.", "scorev2": "5.0", "scorev3": "0.0", "scorev4": "0.0", "modified": "2026-06-16T23:54:12.000", "vector": "NETWORK", "vectorString": "AV:N/AC:L/Au:N/C:N/I:N/A:P", "detail": "fixed-version: Fixed from version >30.0.1599.65" }, { "id": "CVE-2013-2908", "status": "Patched", "link": "https://nvd.nist.gov/vuln/detail/CVE-2013-2908", "summary": "Google Chrome before 30.0.1599.66 uses incorrect function calls to determine the values of NavigationEntry objects, which allows remote attackers to spoof the address bar via vectors involving a response with a 204 (aka No Content) status code.", "scorev2": "5.0", "scorev3": "0.0", "scorev4": "0.0", "modified": "2026-06-16T23:54:12.000", "vector": "NETWORK", "vectorString": "AV:N/AC:L/Au:N/C:N/I:P/A:N", "detail": "fixed-version: Fixed from version >30.0.1599.65" }, { "id": "CVE-2013-2909", "status": "Patched", "link": "https://nvd.nist.gov/vuln/detail/CVE-2013-2909", "summary": "Use-after-free vulnerability in Blink, as used in Google Chrome before 30.0.1599.66, allows remote attackers to cause a denial of service or possibly have unspecified other impact via vectors related to inline-block rendering for bidirectional Unicode text in an element isolated from its siblings.", "scorev2": "7.5", "scorev3": "0.0", "scorev4": "0.0", "modified": "2026-06-16T23:54:12.000", "vector": "NETWORK", "vectorString": "AV:N/AC:L/Au:N/C:P/I:P/A:P", "detail": "fixed-version: Fixed from version >30.0.1599.65" }, { "id": "CVE-2013-2910", "status": "Patched", "link": "https://nvd.nist.gov/vuln/detail/CVE-2013-2910", "summary": "Use-after-free vulnerability in modules/webaudio/AudioScheduledSourceNode.cpp in the Web Audio implementation in Blink, as used in Google Chrome before 30.0.1599.66, allows remote attackers to cause a denial of service or possibly have unspecified other impact via unknown vectors.", "scorev2": "7.5", "scorev3": "0.0", "scorev4": "0.0", "modified": "2026-06-16T23:54:12.000", "vector": "NETWORK", "vectorString": "AV:N/AC:L/Au:N/C:P/I:P/A:P", "detail": "fixed-version: Fixed from version >30.0.1599.65" }, { "id": "CVE-2013-2911", "status": "Patched", "link": "https://nvd.nist.gov/vuln/detail/CVE-2013-2911", "summary": "Use-after-free vulnerability in the XSLStyleSheet::compileStyleSheet function in core/xml/XSLStyleSheetLibxslt.cpp in Blink, as used in Google Chrome before 30.0.1599.66, allows remote attackers to cause a denial of service or possibly have unspecified other impact by leveraging improper handling of post-failure recompilation in unspecified libxslt versions.", "scorev2": "6.8", "scorev3": "0.0", "scorev4": "0.0", "modified": "2026-06-16T23:54:12.000", "vector": "NETWORK", "vectorString": "AV:N/AC:M/Au:N/C:P/I:P/A:P", "detail": "fixed-version: Fixed from version >30.0.1599.65" }, { "id": "CVE-2013-2912", "status": "Patched", "link": "https://nvd.nist.gov/vuln/detail/CVE-2013-2912", "summary": "Use-after-free vulnerability in the PepperInProcessRouter::SendToHost function in content/renderer/pepper/pepper_in_process_router.cc in the Pepper Plug-in API (PPAPI) in Google Chrome before 30.0.1599.66 allows remote attackers to cause a denial of service or possibly have unspecified other impact via vectors involving a resource-destruction message.", "scorev2": "7.5", "scorev3": "0.0", "scorev4": "0.0", "modified": "2026-06-16T23:54:12.000", "vector": "NETWORK", "vectorString": "AV:N/AC:L/Au:N/C:P/I:P/A:P", "detail": "fixed-version: Fixed from version >30.0.1599.65" }, { "id": "CVE-2013-2913", "status": "Patched", "link": "https://nvd.nist.gov/vuln/detail/CVE-2013-2913", "summary": "Use-after-free vulnerability in the XMLDocumentParser::append function in core/xml/parser/XMLDocumentParser.cpp in Blink, as used in Google Chrome before 30.0.1599.66, allows remote attackers to cause a denial of service or possibly have unspecified other impact via vectors involving an XML document.", "scorev2": "6.8", "scorev3": "0.0", "scorev4": "0.0", "modified": "2026-06-16T23:54:12.000", "vector": "NETWORK", "vectorString": "AV:N/AC:M/Au:N/C:P/I:P/A:P", "detail": "fixed-version: Fixed from version >30.0.1599.65" }, { "id": "CVE-2013-2914", "status": "Patched", "link": "https://nvd.nist.gov/vuln/detail/CVE-2013-2914", "summary": "Use-after-free vulnerability in the color-chooser dialog in Google Chrome before 30.0.1599.66 on Windows allows remote attackers to cause a denial of service or possibly have unspecified other impact via vectors related to color_chooser_dialog.cc and color_chooser_win.cc in browser/ui/views/.", "scorev2": "6.8", "scorev3": "0.0", "scorev4": "0.0", "modified": "2026-06-16T23:54:12.000", "vector": "NETWORK", "vectorString": "AV:N/AC:M/Au:N/C:P/I:P/A:P", "detail": "fixed-version: Fixed from version >30.0.1599.65" }, { "id": "CVE-2013-2915", "status": "Patched", "link": "https://nvd.nist.gov/vuln/detail/CVE-2013-2915", "summary": "Google Chrome before 30.0.1599.66 preserves pending NavigationEntry objects in certain invalid circumstances, which allows remote attackers to spoof the address bar via a URL with a malformed scheme, as demonstrated by a nonexistent:12121 URL.", "scorev2": "4.3", "scorev3": "0.0", "scorev4": "0.0", "modified": "2026-06-16T23:54:13.000", "vector": "NETWORK", "vectorString": "AV:N/AC:M/Au:N/C:N/I:P/A:N", "detail": "fixed-version: Fixed from version >30.0.1599.65" }, { "id": "CVE-2013-2916", "status": "Patched", "link": "https://nvd.nist.gov/vuln/detail/CVE-2013-2916", "summary": "Blink, as used in Google Chrome before 30.0.1599.66, allows remote attackers to spoof the address bar via vectors involving a response with a 204 (aka No Content) status code, in conjunction with a delay in notifying the user of an attempted spoof.", "scorev2": "4.3", "scorev3": "0.0", "scorev4": "0.0", "modified": "2026-06-16T23:54:13.000", "vector": "NETWORK", "vectorString": "AV:N/AC:M/Au:N/C:N/I:P/A:N", "detail": "fixed-version: Fixed from version >30.0.1599.65" }, { "id": "CVE-2013-2917", "status": "Patched", "link": "https://nvd.nist.gov/vuln/detail/CVE-2013-2917", "summary": "The ReverbConvolverStage::ReverbConvolverStage function in core/platform/audio/ReverbConvolverStage.cpp in the Web Audio implementation in Blink, as used in Google Chrome before 30.0.1599.66, allows remote attackers to cause a denial of service (out-of-bounds read) via vectors related to the impulseResponse array.", "scorev2": "5.0", "scorev3": "0.0", "scorev4": "0.0", "modified": "2026-06-16T23:54:13.000", "vector": "NETWORK", "vectorString": "AV:N/AC:L/Au:N/C:N/I:N/A:P", "detail": "fixed-version: Fixed from version >30.0.1599.65" }, { "id": "CVE-2013-2918", "status": "Patched", "link": "https://nvd.nist.gov/vuln/detail/CVE-2013-2918", "summary": "Use-after-free vulnerability in the RenderBlock::collapseAnonymousBlockChild function in core/rendering/RenderBlock.cpp in the DOM implementation in Blink, as used in Google Chrome before 30.0.1599.66, allows remote attackers to cause a denial of service or possibly have unspecified other impact by leveraging incorrect handling of parent-child relationships for anonymous blocks.", "scorev2": "7.5", "scorev3": "0.0", "scorev4": "0.0", "modified": "2026-06-16T23:54:13.000", "vector": "NETWORK", "vectorString": "AV:N/AC:L/Au:N/C:P/I:P/A:P", "detail": "fixed-version: Fixed from version >30.0.1599.65" }, { "id": "CVE-2013-2919", "status": "Patched", "link": "https://nvd.nist.gov/vuln/detail/CVE-2013-2919", "summary": "Google V8, as used in Google Chrome before 30.0.1599.66, allows remote attackers to cause a denial of service (memory corruption) or possibly have unspecified other impact via unknown vectors.", "scorev2": "7.5", "scorev3": "0.0", "scorev4": "0.0", "modified": "2026-06-16T23:54:13.000", "vector": "NETWORK", "vectorString": "AV:N/AC:L/Au:N/C:P/I:P/A:P", "detail": "fixed-version: Fixed from version >30.0.1599.65" }, { "id": "CVE-2013-2920", "status": "Patched", "link": "https://nvd.nist.gov/vuln/detail/CVE-2013-2920", "summary": "The DoResolveRelativeHost function in url/url_canon_relative.cc in Google Chrome before 30.0.1599.66 allows remote attackers to cause a denial of service (out-of-bounds read) via a relative URL containing a hostname, as demonstrated by a protocol-relative URL beginning with a //www.google.com/ substring.", "scorev2": "5.0", "scorev3": "0.0", "scorev4": "0.0", "modified": "2026-06-16T23:54:13.000", "vector": "NETWORK", "vectorString": "AV:N/AC:L/Au:N/C:N/I:N/A:P", "detail": "fixed-version: Fixed from version >30.0.1599.65" }, { "id": "CVE-2013-2921", "status": "Patched", "link": "https://nvd.nist.gov/vuln/detail/CVE-2013-2921", "summary": "Double free vulnerability in the ResourceFetcher::didLoadResource function in core/fetch/ResourceFetcher.cpp in the resource loader in Blink, as used in Google Chrome before 30.0.1599.66, allows remote attackers to cause a denial of service or possibly have unspecified other impact by triggering certain callback processing during the reporting of a resource entry.", "scorev2": "6.8", "scorev3": "0.0", "scorev4": "0.0", "modified": "2026-06-16T23:54:13.000", "vector": "NETWORK", "vectorString": "AV:N/AC:M/Au:N/C:P/I:P/A:P", "detail": "fixed-version: Fixed from version >30.0.1599.65" }, { "id": "CVE-2013-2922", "status": "Patched", "link": "https://nvd.nist.gov/vuln/detail/CVE-2013-2922", "summary": "Use-after-free vulnerability in core/html/HTMLTemplateElement.cpp in Blink, as used in Google Chrome before 30.0.1599.66, allows remote attackers to cause a denial of service or possibly have unspecified other impact via crafted JavaScript code that operates on a TEMPLATE element.", "scorev2": "6.8", "scorev3": "0.0", "scorev4": "0.0", "modified": "2026-06-16T23:54:13.000", "vector": "NETWORK", "vectorString": "AV:N/AC:M/Au:N/C:P/I:P/A:P", "detail": "fixed-version: Fixed from version >30.0.1599.65" }, { "id": "CVE-2013-2923", "status": "Patched", "link": "https://nvd.nist.gov/vuln/detail/CVE-2013-2923", "summary": "Multiple unspecified vulnerabilities in Google Chrome before 30.0.1599.66 allow attackers to cause a denial of service or possibly have other impact via unknown vectors.", "scorev2": "7.5", "scorev3": "0.0", "scorev4": "0.0", "modified": "2026-06-16T23:54:14.000", "vector": "NETWORK", "vectorString": "AV:N/AC:L/Au:N/C:P/I:P/A:P", "detail": "fixed-version: Fixed from version >30.0.1599.65" }, { "id": "CVE-2013-2924", "status": "Patched", "link": "https://nvd.nist.gov/vuln/detail/CVE-2013-2924", "summary": "Use-after-free vulnerability in International Components for Unicode (ICU), as used in Google Chrome before 30.0.1599.66 and other products, allows remote attackers to cause a denial of service or possibly have unspecified other impact via unknown vectors.", "scorev2": "7.5", "scorev3": "0.0", "scorev4": "0.0", "modified": "2026-06-16T23:54:14.000", "vector": "NETWORK", "vectorString": "AV:N/AC:L/Au:N/C:P/I:P/A:P", "detail": "fixed-version: Fixed from version >30.0.1599.65" }, { "id": "CVE-2013-2925", "status": "Patched", "link": "https://nvd.nist.gov/vuln/detail/CVE-2013-2925", "summary": "Use-after-free vulnerability in core/xml/XMLHttpRequest.cpp in Blink, as used in Google Chrome before 30.0.1599.101, allows remote attackers to cause a denial of service or possibly have unspecified other impact via vectors that trigger multiple conflicting uses of the same XMLHttpRequest object.", "scorev2": "6.8", "scorev3": "0.0", "scorev4": "0.0", "modified": "2026-06-16T23:54:14.000", "vector": "NETWORK", "vectorString": "AV:N/AC:M/Au:N/C:P/I:P/A:P", "detail": "fixed-version: Fixed from version >30.0.1599.100" }, { "id": "CVE-2013-2926", "status": "Patched", "link": "https://nvd.nist.gov/vuln/detail/CVE-2013-2926", "summary": "Use-after-free vulnerability in the IndentOutdentCommand::tryIndentingAsListItem function in core/editing/IndentOutdentCommand.cpp in Blink, as used in Google Chrome before 30.0.1599.101, allows user-assisted remote attackers to cause a denial of service or possibly have unspecified other impact via vectors related to list elements.", "scorev2": "6.8", "scorev3": "0.0", "scorev4": "0.0", "modified": "2026-06-16T23:54:14.000", "vector": "NETWORK", "vectorString": "AV:N/AC:M/Au:N/C:P/I:P/A:P", "detail": "fixed-version: Fixed from version >30.0.1599.100" }, { "id": "CVE-2013-2927", "status": "Patched", "link": "https://nvd.nist.gov/vuln/detail/CVE-2013-2927", "summary": "Use-after-free vulnerability in the HTMLFormElement::prepareForSubmission function in core/html/HTMLFormElement.cpp in Blink, as used in Google Chrome before 30.0.1599.101, allows remote attackers to cause a denial of service or possibly have unspecified other impact via vectors related to submission for FORM elements.", "scorev2": "6.8", "scorev3": "0.0", "scorev4": "0.0", "modified": "2026-06-16T23:54:14.000", "vector": "NETWORK", "vectorString": "AV:N/AC:M/Au:N/C:P/I:P/A:P", "detail": "fixed-version: Fixed from version >30.0.1599.100" }, { "id": "CVE-2013-2928", "status": "Patched", "link": "https://nvd.nist.gov/vuln/detail/CVE-2013-2928", "summary": "Multiple unspecified vulnerabilities in Google Chrome before 30.0.1599.101 allow attackers to cause a denial of service or possibly have other impact via unknown vectors.", "scorev2": "7.5", "scorev3": "0.0", "scorev4": "0.0", "modified": "2026-06-16T23:54:14.000", "vector": "NETWORK", "vectorString": "AV:N/AC:L/Au:N/C:P/I:P/A:P", "detail": "fixed-version: Fixed from version >30.0.1599.100" }, { "id": "CVE-2013-2931", "status": "Patched", "link": "https://nvd.nist.gov/vuln/detail/CVE-2013-2931", "summary": "Multiple unspecified vulnerabilities in Google Chrome before 31.0.1650.48 allow attackers to execute arbitrary code or possibly have other impact via unknown vectors.", "scorev2": "10.0", "scorev3": "0.0", "scorev4": "0.0", "modified": "2026-06-16T23:54:15.000", "vector": "NETWORK", "vectorString": "AV:N/AC:L/Au:N/C:C/I:C/A:C", "detail": "fixed-version: Fixed from version >31.0.1650.47" }, { "id": "CVE-2013-6166", "status": "Patched", "link": "https://nvd.nist.gov/vuln/detail/CVE-2013-6166", "summary": "Google Chrome before 29 sends HTTP Cookie headers without first validating that they have the required character-set restrictions, which allows remote attackers to conduct the equivalent of a persistent Logout CSRF attack via a crafted parameter that forces a web application to set a malformed cookie within an HTTP response.", "scorev2": "6.8", "scorev3": "0.0", "scorev4": "0.0", "modified": "2026-06-17T00:00:01.000", "vector": "NETWORK", "vectorString": "AV:N/AC:M/Au:N/C:P/I:P/A:P", "detail": "fixed-version: Fixed from version >28.0.1500.95" }, { "id": "CVE-2013-6621", "status": "Patched", "link": "https://nvd.nist.gov/vuln/detail/CVE-2013-6621", "summary": "Use-after-free vulnerability in Google Chrome before 31.0.1650.48 allows remote attackers to cause a denial of service or possibly have unspecified other impact via vectors related to the x-webkit-speech attribute in a text INPUT element.", "scorev2": "7.5", "scorev3": "0.0", "scorev4": "0.0", "modified": "2026-06-17T00:00:37.000", "vector": "NETWORK", "vectorString": "AV:N/AC:L/Au:N/C:P/I:P/A:P", "detail": "fixed-version: Fixed from version >31.0.1650.47" }, { "id": "CVE-2013-6622", "status": "Patched", "link": "https://nvd.nist.gov/vuln/detail/CVE-2013-6622", "summary": "Use-after-free vulnerability in the HTMLMediaElement::didMoveToNewDocument function in core/html/HTMLMediaElement.cpp in Blink, as used in Google Chrome before 31.0.1650.48, allows remote attackers to cause a denial of service or possibly have unspecified other impact via vectors involving the movement of a media element between documents.", "scorev2": "6.8", "scorev3": "0.0", "scorev4": "0.0", "modified": "2026-06-17T00:00:38.000", "vector": "NETWORK", "vectorString": "AV:N/AC:M/Au:N/C:P/I:P/A:P", "detail": "fixed-version: Fixed from version >31.0.1650.47" }, { "id": "CVE-2013-6623", "status": "Patched", "link": "https://nvd.nist.gov/vuln/detail/CVE-2013-6623", "summary": "The SVG implementation in Blink, as used in Google Chrome before 31.0.1650.48, allows remote attackers to cause a denial of service (out-of-bounds read) by leveraging the use of tree order, rather than transitive dependency order, for layout.", "scorev2": "4.3", "scorev3": "0.0", "scorev4": "0.0", "modified": "2026-06-17T00:00:39.000", "vector": "NETWORK", "vectorString": "AV:N/AC:M/Au:N/C:N/I:N/A:P", "detail": "fixed-version: Fixed from version >31.0.1650.47" }, { "id": "CVE-2013-6624", "status": "Patched", "link": "https://nvd.nist.gov/vuln/detail/CVE-2013-6624", "summary": "Use-after-free vulnerability in Google Chrome before 31.0.1650.48 allows remote attackers to cause a denial of service or possibly have unspecified other impact via vectors involving the string values of id attributes.", "scorev2": "7.5", "scorev3": "0.0", "scorev4": "0.0", "modified": "2026-06-17T00:00:39.000", "vector": "NETWORK", "vectorString": "AV:N/AC:L/Au:N/C:P/I:P/A:P", "detail": "fixed-version: Fixed from version >31.0.1650.47" }, { "id": "CVE-2013-6625", "status": "Patched", "link": "https://nvd.nist.gov/vuln/detail/CVE-2013-6625", "summary": "Use-after-free vulnerability in core/dom/ContainerNode.cpp in Blink, as used in Google Chrome before 31.0.1650.48, allows remote attackers to cause a denial of service or possibly have unspecified other impact by leveraging improper handling of DOM range objects in circumstances that require child node removal after a (1) mutation or (2) blur event.", "scorev2": "6.8", "scorev3": "0.0", "scorev4": "0.0", "modified": "2026-06-17T00:00:40.000", "vector": "NETWORK", "vectorString": "AV:N/AC:M/Au:N/C:P/I:P/A:P", "detail": "fixed-version: Fixed from version >31.0.1650.47" }, { "id": "CVE-2013-6626", "status": "Patched", "link": "https://nvd.nist.gov/vuln/detail/CVE-2013-6626", "summary": "The WebContentsImpl::AttachInterstitialPage function in content/browser/web_contents/web_contents_impl.cc in Google Chrome before 31.0.1650.48 does not cancel JavaScript dialogs upon generating an interstitial warning, which allows remote attackers to spoof the address bar via a crafted web site.", "scorev2": "4.3", "scorev3": "0.0", "scorev4": "0.0", "modified": "2026-06-17T00:00:40.000", "vector": "NETWORK", "vectorString": "AV:N/AC:M/Au:N/C:N/I:P/A:N", "detail": "fixed-version: Fixed from version >31.0.1650.47" }, { "id": "CVE-2013-6627", "status": "Patched", "link": "https://nvd.nist.gov/vuln/detail/CVE-2013-6627", "summary": "net/http/http_stream_parser.cc in Google Chrome before 31.0.1650.48 does not properly process HTTP Informational (aka 1xx) status codes, which allows remote web servers to cause a denial of service (out-of-bounds read) via a crafted response.", "scorev2": "5.0", "scorev3": "0.0", "scorev4": "0.0", "modified": "2026-06-17T00:00:40.000", "vector": "NETWORK", "vectorString": "AV:N/AC:L/Au:N/C:N/I:N/A:P", "detail": "fixed-version: Fixed from version >31.0.1650.47" }, { "id": "CVE-2013-6628", "status": "Patched", "link": "https://nvd.nist.gov/vuln/detail/CVE-2013-6628", "summary": "net/socket/ssl_client_socket_nss.cc in the TLS implementation in Google Chrome before 31.0.1650.48 does not ensure that a server's X.509 certificate is the same during renegotiation as it was before renegotiation, which might allow remote web servers to interfere with trust relationships by renegotiating a session.", "scorev2": "4.3", "scorev3": "0.0", "scorev4": "0.0", "modified": "2026-06-17T00:00:40.000", "vector": "NETWORK", "vectorString": "AV:N/AC:M/Au:N/C:N/I:P/A:N", "detail": "fixed-version: Fixed from version >31.0.1650.47" }, { "id": "CVE-2013-6629", "status": "Patched", "link": "https://nvd.nist.gov/vuln/detail/CVE-2013-6629", "summary": "The get_sos function in jdmarker.c in (1) libjpeg 6b and (2) libjpeg-turbo through 1.3.0, as used in Google Chrome before 31.0.1650.48, Ghostscript, and other products, does not check for certain duplications of component data during the reading of segments that follow Start Of Scan (SOS) JPEG markers, which allows remote attackers to obtain sensitive information from uninitialized memory locations via a crafted JPEG image.", "scorev2": "5.0", "scorev3": "0.0", "scorev4": "0.0", "modified": "2026-06-17T00:00:40.000", "vector": "NETWORK", "vectorString": "AV:N/AC:L/Au:N/C:P/I:N/A:N", "detail": "fixed-version: Fixed from version 31.0.1650.48" }, { "id": "CVE-2013-6630", "status": "Patched", "link": "https://nvd.nist.gov/vuln/detail/CVE-2013-6630", "summary": "The get_dht function in jdmarker.c in libjpeg-turbo through 1.3.0, as used in Google Chrome before 31.0.1650.48 and other products, does not set all elements of a certain Huffman value array during the reading of segments that follow Define Huffman Table (DHT) JPEG markers, which allows remote attackers to obtain sensitive information from uninitialized memory locations via a crafted JPEG image.", "scorev2": "5.0", "scorev3": "0.0", "scorev4": "0.0", "modified": "2026-06-17T00:00:41.000", "vector": "NETWORK", "vectorString": "AV:N/AC:L/Au:N/C:P/I:N/A:N", "detail": "fixed-version: Fixed from version >31.0.1650.47" }, { "id": "CVE-2013-6631", "status": "Patched", "link": "https://nvd.nist.gov/vuln/detail/CVE-2013-6631", "summary": "Use-after-free vulnerability in the Channel::SendRTCPPacket function in voice_engine/channel.cc in libjingle in WebRTC, as used in Google Chrome before 31.0.1650.48 and other products, allows remote attackers to cause a denial of service (heap memory corruption) or possibly have unspecified other impact via vectors that trigger the absence of certain statistics initialization, leading to the skipping of a required DeRegisterExternalTransport call.", "scorev2": "7.5", "scorev3": "0.0", "scorev4": "0.0", "modified": "2026-06-17T00:00:41.000", "vector": "NETWORK", "vectorString": "AV:N/AC:L/Au:N/C:P/I:P/A:P", "detail": "fixed-version: Fixed from version >31.0.1650.47" }, { "id": "CVE-2013-6632", "status": "Patched", "link": "https://nvd.nist.gov/vuln/detail/CVE-2013-6632", "summary": "Integer overflow in Google Chrome before 31.0.1650.57 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via unspecified vectors, as demonstrated during a Mobile Pwn2Own competition at PacSec 2013.", "scorev2": "9.3", "scorev3": "0.0", "scorev4": "0.0", "modified": "2026-06-17T00:00:41.000", "vector": "NETWORK", "vectorString": "AV:N/AC:M/Au:N/C:C/I:C/A:C", "detail": "fixed-version: Fixed from version 31.0.1650.57" }, { "id": "CVE-2013-6634", "status": "Patched", "link": "https://nvd.nist.gov/vuln/detail/CVE-2013-6634", "summary": "The OneClickSigninHelper::ShowInfoBarIfPossible function in browser/ui/sync/one_click_signin_helper.cc in Google Chrome before 31.0.1650.63 uses an incorrect URL during realm validation, which allows remote attackers to conduct session fixation attacks and hijack web sessions by triggering improper sync after a 302 (aka Found) HTTP status code.", "scorev2": "6.8", "scorev3": "0.0", "scorev4": "0.0", "modified": "2026-06-17T00:00:41.000", "vector": "NETWORK", "vectorString": "AV:N/AC:M/Au:N/C:P/I:P/A:P", "detail": "fixed-version: Fixed from version >31.0.1650.62" }, { "id": "CVE-2013-6635", "status": "Patched", "link": "https://nvd.nist.gov/vuln/detail/CVE-2013-6635", "summary": "Use-after-free vulnerability in the editing implementation in Blink, as used in Google Chrome before 31.0.1650.63, allows remote attackers to cause a denial of service or possibly have unspecified other impact via JavaScript code that triggers removal of a node during processing of the DOM tree, related to CompositeEditCommand.cpp and ReplaceSelectionCommand.cpp.", "scorev2": "6.8", "scorev3": "0.0", "scorev4": "0.0", "modified": "2026-06-17T00:00:42.000", "vector": "NETWORK", "vectorString": "AV:N/AC:M/Au:N/C:P/I:P/A:P", "detail": "fixed-version: Fixed from version >31.0.1650.62" }, { "id": "CVE-2013-6636", "status": "Patched", "link": "https://nvd.nist.gov/vuln/detail/CVE-2013-6636", "summary": "The FrameLoader::notifyIfInitialDocumentAccessed function in core/loader/FrameLoader.cpp in Blink, as used in Google Chrome before 31.0.1650.63, makes an incorrect check for an empty document during presentation of a modal dialog, which allows remote attackers to spoof the address bar via vectors involving the document.write method.", "scorev2": "4.3", "scorev3": "0.0", "scorev4": "0.0", "modified": "2026-06-17T00:00:42.000", "vector": "NETWORK", "vectorString": "AV:N/AC:M/Au:N/C:N/I:P/A:N", "detail": "fixed-version: Fixed from version >31.0.1650.62" }, { "id": "CVE-2013-6637", "status": "Patched", "link": "https://nvd.nist.gov/vuln/detail/CVE-2013-6637", "summary": "Multiple unspecified vulnerabilities in Google Chrome before 31.0.1650.63 allow attackers to cause a denial of service or possibly have other impact via unknown vectors.", "scorev2": "7.5", "scorev3": "0.0", "scorev4": "0.0", "modified": "2026-06-17T00:00:42.000", "vector": "NETWORK", "vectorString": "AV:N/AC:L/Au:N/C:P/I:P/A:P", "detail": "fixed-version: Fixed from version >31.0.1650.62" }, { "id": "CVE-2013-6638", "status": "Patched", "link": "https://nvd.nist.gov/vuln/detail/CVE-2013-6638", "summary": "Multiple buffer overflows in runtime.cc in Google V8 before 3.22.24.7, as used in Google Chrome before 31.0.1650.63, allow remote attackers to cause a denial of service or possibly have unspecified other impact via vectors that trigger a large typed array, related to the (1) Runtime_TypedArrayInitialize and (2) Runtime_TypedArrayInitializeFromArrayLike functions.", "scorev2": "7.5", "scorev3": "0.0", "scorev4": "0.0", "modified": "2026-06-17T00:00:42.000", "vector": "NETWORK", "vectorString": "AV:N/AC:L/Au:N/C:P/I:P/A:P", "detail": "fixed-version: Fixed from version >31.0.1650.62" }, { "id": "CVE-2013-6639", "status": "Patched", "link": "https://nvd.nist.gov/vuln/detail/CVE-2013-6639", "summary": "The DehoistArrayIndex function in hydrogen-dehoist.cc (aka hydrogen.cc) in Google V8 before 3.22.24.7, as used in Google Chrome before 31.0.1650.63, allows remote attackers to cause a denial of service (out-of-bounds write) or possibly have unspecified other impact via JavaScript code that sets the value of an array element with a crafted index.", "scorev2": "7.5", "scorev3": "0.0", "scorev4": "0.0", "modified": "2026-06-17T00:00:42.000", "vector": "NETWORK", "vectorString": "AV:N/AC:L/Au:N/C:P/I:P/A:P", "detail": "fixed-version: Fixed from version >31.0.1650.62" }, { "id": "CVE-2013-6640", "status": "Patched", "link": "https://nvd.nist.gov/vuln/detail/CVE-2013-6640", "summary": "The DehoistArrayIndex function in hydrogen-dehoist.cc (aka hydrogen.cc) in Google V8 before 3.22.24.7, as used in Google Chrome before 31.0.1650.63, allows remote attackers to cause a denial of service (out-of-bounds read) via JavaScript code that sets a variable to the value of an array element with a crafted index.", "scorev2": "7.5", "scorev3": "0.0", "scorev4": "0.0", "modified": "2026-06-17T00:00:42.000", "vector": "NETWORK", "vectorString": "AV:N/AC:L/Au:N/C:P/I:P/A:P", "detail": "fixed-version: Fixed from version >31.0.1650.62" }, { "id": "CVE-2013-6641", "status": "Patched", "link": "https://nvd.nist.gov/vuln/detail/CVE-2013-6641", "summary": "Use-after-free vulnerability in the FormAssociatedElement::formRemovedFromTree function in core/html/FormAssociatedElement.cpp in Blink, as used in Google Chrome before 32.0.1700.76 on Windows and before 32.0.1700.77 on Mac OS X and Linux, allows remote attackers to cause a denial of service or possibly have unspecified other impact by leveraging improper handling of the past names map of a FORM element.", "scorev2": "7.5", "scorev3": "0.0", "scorev4": "0.0", "modified": "2026-06-17T00:00:43.000", "vector": "NETWORK", "vectorString": "AV:N/AC:L/Au:N/C:P/I:P/A:P", "detail": "fixed-version: Fixed from version 32.0.1700.77" }, { "id": "CVE-2013-6642", "status": "Patched", "link": "https://nvd.nist.gov/vuln/detail/CVE-2013-6642", "summary": "Google Chrome through 32.0.1700.23 on Android allows remote attackers to spoof the address bar via unspecified vectors.", "scorev2": "5.0", "scorev3": "0.0", "scorev4": "0.0", "modified": "2026-06-17T00:00:43.000", "vector": "NETWORK", "vectorString": "AV:N/AC:L/Au:N/C:N/I:P/A:N", "detail": "fixed-version: Fixed from version >32.0.1700.23" }, { "id": "CVE-2013-6643", "status": "Patched", "link": "https://nvd.nist.gov/vuln/detail/CVE-2013-6643", "summary": "The OneClickSigninBubbleView::WindowClosing function in browser/ui/views/sync/one_click_signin_bubble_view.cc in Google Chrome before 32.0.1700.76 on Windows and before 32.0.1700.77 on Mac OS X and Linux allows attackers to trigger a sync with an arbitrary Google account by leveraging improper handling of the closing of an untrusted signin confirm dialog.", "scorev2": "7.5", "scorev3": "0.0", "scorev4": "0.0", "modified": "2026-06-17T00:00:43.000", "vector": "NETWORK", "vectorString": "AV:N/AC:L/Au:N/C:P/I:P/A:P", "detail": "fixed-version: Fixed from version 32.0.1700.77" }, { "id": "CVE-2013-6644", "status": "Patched", "link": "https://nvd.nist.gov/vuln/detail/CVE-2013-6644", "summary": "Multiple unspecified vulnerabilities in Google Chrome before 32.0.1700.76 on Windows and before 32.0.1700.77 on Mac OS X and Linux allow attackers to cause a denial of service or possibly have other impact via unknown vectors.", "scorev2": "7.5", "scorev3": "0.0", "scorev4": "0.0", "modified": "2026-06-17T00:00:43.000", "vector": "NETWORK", "vectorString": "AV:N/AC:L/Au:N/C:P/I:P/A:P", "detail": "fixed-version: Fixed from version 32.0.1700.77" }, { "id": "CVE-2013-6645", "status": "Patched", "link": "https://nvd.nist.gov/vuln/detail/CVE-2013-6645", "summary": "Use-after-free vulnerability in the OnWindowRemovingFromRootWindow function in content/browser/web_contents/web_contents_view_aura.cc in Google Chrome before 32.0.1700.76 on Windows and before 32.0.1700.77 on Mac OS X and Linux allows user-assisted remote attackers to cause a denial of service or possibly have unspecified other impact via vectors involving certain print-preview and tab-switch actions that interact with a speech input element.", "scorev2": "6.8", "scorev3": "0.0", "scorev4": "0.0", "modified": "2026-06-17T00:00:43.000", "vector": "NETWORK", "vectorString": "AV:N/AC:M/Au:N/C:P/I:P/A:P", "detail": "fixed-version: Fixed from version 32.0.1700.77" }, { "id": "CVE-2013-6646", "status": "Patched", "link": "https://nvd.nist.gov/vuln/detail/CVE-2013-6646", "summary": "Use-after-free vulnerability in the Web Workers implementation in Google Chrome before 32.0.1700.76 on Windows and before 32.0.1700.77 on Mac OS X and Linux allows remote attackers to cause a denial of service or possibly have unspecified other impact via vectors related to the shutting down of a worker process.", "scorev2": "7.5", "scorev3": "0.0", "scorev4": "0.0", "modified": "2026-06-17T00:00:43.000", "vector": "NETWORK", "vectorString": "AV:N/AC:L/Au:N/C:P/I:P/A:P", "detail": "fixed-version: Fixed from version 32.0.1700.77" }, { "id": "CVE-2013-6647", "status": "Unpatched", "link": "https://nvd.nist.gov/vuln/detail/CVE-2013-6647", "summary": "A use-after-free in AnimationController::endAnimationUpdate in Google Chrome.", "scorev2": "7.5", "scorev3": "9.8", "scorev4": "0.0", "modified": "2026-06-17T00:00:43.000", "vector": "NETWORK", "vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H", "detail": "no-version-ranges", "description": "Check package version" }, { "id": "CVE-2013-6649", "status": "Patched", "link": "https://nvd.nist.gov/vuln/detail/CVE-2013-6649", "summary": "Use-after-free vulnerability in the RenderSVGImage::paint function in core/rendering/svg/RenderSVGImage.cpp in Blink, as used in Google Chrome before 32.0.1700.102, allows remote attackers to cause a denial of service or possibly have unspecified other impact via vectors involving a zero-size SVG image.", "scorev2": "7.5", "scorev3": "0.0", "scorev4": "0.0", "modified": "2026-06-17T00:00:44.000", "vector": "NETWORK", "vectorString": "AV:N/AC:L/Au:N/C:P/I:P/A:P", "detail": "fixed-version: Fixed from version >32.0.1700.101" }, { "id": "CVE-2013-6650", "status": "Patched", "link": "https://nvd.nist.gov/vuln/detail/CVE-2013-6650", "summary": "The StoreBuffer::ExemptPopularPages function in store-buffer.cc in Google V8 before 3.22.24.16, as used in Google Chrome before 32.0.1700.102, allows remote attackers to cause a denial of service (memory corruption) or possibly have unspecified other impact via vectors that trigger incorrect handling of \"popular pages.\"", "scorev2": "7.5", "scorev3": "0.0", "scorev4": "0.0", "modified": "2026-06-17T00:00:44.000", "vector": "NETWORK", "vectorString": "AV:N/AC:L/Au:N/C:P/I:P/A:P", "detail": "fixed-version: Fixed from version >32.0.1700.101" }, { "id": "CVE-2013-6652", "status": "Patched", "link": "https://nvd.nist.gov/vuln/detail/CVE-2013-6652", "summary": "Directory traversal vulnerability in sandbox/win/src/named_pipe_dispatcher.cc in Google Chrome before 33.0.1750.117 on Windows allows attackers to bypass intended named-pipe policy restrictions in the sandbox via vectors related to (1) lack of checks for .. (dot dot) sequences or (2) lack of use of the \\\\?\\ protection mechanism.", "scorev2": "7.5", "scorev3": "0.0", "scorev4": "0.0", "modified": "2026-06-17T00:00:44.000", "vector": "NETWORK", "vectorString": "AV:N/AC:L/Au:N/C:P/I:P/A:P", "detail": "fixed-version: Fixed from version >33.0.1750.116" }, { "id": "CVE-2013-6653", "status": "Patched", "link": "https://nvd.nist.gov/vuln/detail/CVE-2013-6653", "summary": "Use-after-free vulnerability in the web contents implementation in Google Chrome before 33.0.1750.117 allows remote attackers to cause a denial of service or possibly have unspecified other impact via vectors involving attempted conflicting access to the color chooser.", "scorev2": "7.5", "scorev3": "0.0", "scorev4": "0.0", "modified": "2026-06-17T00:00:44.000", "vector": "NETWORK", "vectorString": "AV:N/AC:L/Au:N/C:P/I:P/A:P", "detail": "fixed-version: Fixed from version >33.0.1750.116" }, { "id": "CVE-2013-6654", "status": "Patched", "link": "https://nvd.nist.gov/vuln/detail/CVE-2013-6654", "summary": "The SVGAnimateElement::calculateAnimatedValue function in core/svg/SVGAnimateElement.cpp in Blink, as used in Google Chrome before 33.0.1750.117, does not properly handle unexpected data types, which allows remote attackers to cause a denial of service (incorrect cast) or possibly have unspecified other impact via unknown vectors.", "scorev2": "7.5", "scorev3": "0.0", "scorev4": "0.0", "modified": "2026-06-17T00:00:44.000", "vector": "NETWORK", "vectorString": "AV:N/AC:L/Au:N/C:P/I:P/A:P", "detail": "fixed-version: Fixed from version >33.0.1750.116" }, { "id": "CVE-2013-6655", "status": "Patched", "link": "https://nvd.nist.gov/vuln/detail/CVE-2013-6655", "summary": "Use-after-free vulnerability in Blink, as used in Google Chrome before 33.0.1750.117, allows remote attackers to cause a denial of service or possibly have unspecified other impact via vectors related to improper handling of overflowchanged DOM events during interaction between JavaScript and layout.", "scorev2": "7.5", "scorev3": "0.0", "scorev4": "0.0", "modified": "2026-06-17T00:00:44.000", "vector": "NETWORK", "vectorString": "AV:N/AC:L/Au:N/C:P/I:P/A:P", "detail": "fixed-version: Fixed from version >33.0.1750.116" }, { "id": "CVE-2013-6656", "status": "Patched", "link": "https://nvd.nist.gov/vuln/detail/CVE-2013-6656", "summary": "The XSSAuditor::init function in core/html/parser/XSSAuditor.cpp in the XSS auditor in Blink, as used in Google Chrome before 33.0.1750.117, processes POST requests by using the body of a redirecting page instead of the body of a redirect target, which allows remote attackers to obtain sensitive information via unspecified vectors.", "scorev2": "5.0", "scorev3": "0.0", "scorev4": "0.0", "modified": "2026-06-17T00:00:44.000", "vector": "NETWORK", "vectorString": "AV:N/AC:L/Au:N/C:P/I:N/A:N", "detail": "fixed-version: Fixed from version >33.0.1750.116" }, { "id": "CVE-2013-6657", "status": "Patched", "link": "https://nvd.nist.gov/vuln/detail/CVE-2013-6657", "summary": "core/html/parser/XSSAuditor.cpp in the XSS auditor in Blink, as used in Google Chrome before 33.0.1750.117, inserts the about:blank URL during certain blocking of FORM elements within HTTP requests, which allows remote attackers to bypass the Same Origin Policy and obtain sensitive information via unspecified vectors.", "scorev2": "6.4", "scorev3": "0.0", "scorev4": "0.0", "modified": "2026-06-17T00:00:44.000", "vector": "NETWORK", "vectorString": "AV:N/AC:L/Au:N/C:P/I:P/A:N", "detail": "fixed-version: Fixed from version >33.0.1750.116" }, { "id": "CVE-2013-6658", "status": "Patched", "link": "https://nvd.nist.gov/vuln/detail/CVE-2013-6658", "summary": "Multiple use-after-free vulnerabilities in the layout implementation in Blink, as used in Google Chrome before 33.0.1750.117, allow remote attackers to cause a denial of service or possibly have unspecified other impact via vectors involving (1) running JavaScript code during execution of the updateWidgetPositions function or (2) making a call into a plugin during execution of the updateWidgetPositions function.", "scorev2": "7.5", "scorev3": "0.0", "scorev4": "0.0", "modified": "2026-06-17T00:00:45.000", "vector": "NETWORK", "vectorString": "AV:N/AC:L/Au:N/C:P/I:P/A:P", "detail": "fixed-version: Fixed from version >33.0.1750.116" }, { "id": "CVE-2013-6659", "status": "Patched", "link": "https://nvd.nist.gov/vuln/detail/CVE-2013-6659", "summary": "The SSLClientSocketNSS::Core::OwnAuthCertHandler function in net/socket/ssl_client_socket_nss.cc in Google Chrome before 33.0.1750.117 does not prevent changes to server X.509 certificates during renegotiations, which allows remote SSL servers to trigger use of a new certificate chain, inconsistent with the user's expectations, by initiating a TLS renegotiation.", "scorev2": "6.4", "scorev3": "0.0", "scorev4": "0.0", "modified": "2026-06-17T00:00:45.000", "vector": "NETWORK", "vectorString": "AV:N/AC:L/Au:N/C:P/I:P/A:N", "detail": "fixed-version: Fixed from version >33.0.1750.116" }, { "id": "CVE-2013-6660", "status": "Patched", "link": "https://nvd.nist.gov/vuln/detail/CVE-2013-6660", "summary": "The drag-and-drop implementation in Google Chrome before 33.0.1750.117 does not properly restrict the information in WebDropData data structures, which allows remote attackers to discover full pathnames via a crafted web site.", "scorev2": "5.0", "scorev3": "0.0", "scorev4": "0.0", "modified": "2026-06-17T00:00:45.000", "vector": "NETWORK", "vectorString": "AV:N/AC:L/Au:N/C:P/I:N/A:N", "detail": "fixed-version: Fixed from version >33.0.1750.116" }, { "id": "CVE-2013-6661", "status": "Patched", "link": "https://nvd.nist.gov/vuln/detail/CVE-2013-6661", "summary": "Multiple unspecified vulnerabilities in Google Chrome before 33.0.1750.117 allow attackers to bypass the sandbox protection mechanism after obtaining renderer access, or have other impact, via unknown vectors.", "scorev2": "7.5", "scorev3": "0.0", "scorev4": "0.0", "modified": "2026-06-17T00:00:45.000", "vector": "NETWORK", "vectorString": "AV:N/AC:L/Au:N/C:P/I:P/A:P", "detail": "fixed-version: Fixed from version >33.0.1750.116" }, { "id": "CVE-2013-6662", "status": "Unpatched", "link": "https://nvd.nist.gov/vuln/detail/CVE-2013-6662", "summary": "Google Chrome caches TLS sessions before certificate validation occurs.", "scorev2": "4.3", "scorev3": "6.5", "scorev4": "0.0", "modified": "2026-06-17T00:00:45.000", "vector": "NETWORK", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:N", "detail": "no-version-ranges", "description": "Check package version" }, { "id": "CVE-2013-6663", "status": "Patched", "link": "https://nvd.nist.gov/vuln/detail/CVE-2013-6663", "summary": "Use-after-free vulnerability in the SVGImage::setContainerSize function in core/svg/graphics/SVGImage.cpp in the SVG implementation in Blink, as used in Google Chrome before 33.0.1750.146, allows remote attackers to cause a denial of service or possibly have unspecified other impact via vectors related to the resizing of a view.", "scorev2": "7.5", "scorev3": "0.0", "scorev4": "0.0", "modified": "2026-06-17T00:00:45.000", "vector": "NETWORK", "vectorString": "AV:N/AC:L/Au:N/C:P/I:P/A:P", "detail": "fixed-version: Fixed from version >33.0.1750.144" }, { "id": "CVE-2013-6664", "status": "Patched", "link": "https://nvd.nist.gov/vuln/detail/CVE-2013-6664", "summary": "Use-after-free vulnerability in the FormAssociatedElement::formRemovedFromTree function in core/html/FormAssociatedElement.cpp in Blink, as used in Google Chrome before 33.0.1750.146, allows remote attackers to cause a denial of service or possibly have unspecified other impact via vectors involving FORM elements, as demonstrated by use of the speech-recognition feature.", "scorev2": "7.5", "scorev3": "0.0", "scorev4": "0.0", "modified": "2026-06-17T00:00:45.000", "vector": "NETWORK", "vectorString": "AV:N/AC:L/Au:N/C:P/I:P/A:P", "detail": "fixed-version: Fixed from version >33.0.1750.144" }, { "id": "CVE-2013-6665", "status": "Patched", "link": "https://nvd.nist.gov/vuln/detail/CVE-2013-6665", "summary": "Heap-based buffer overflow in the ResourceProvider::InitializeSoftware function in cc/resources/resource_provider.cc in Google Chrome before 33.0.1750.146 allows remote attackers to cause a denial of service or possibly have unspecified other impact via a large texture size that triggers improper memory allocation in the software renderer.", "scorev2": "7.5", "scorev3": "0.0", "scorev4": "0.0", "modified": "2026-06-17T00:00:46.000", "vector": "NETWORK", "vectorString": "AV:N/AC:L/Au:N/C:P/I:P/A:P", "detail": "fixed-version: Fixed from version >33.0.1750.144" }, { "id": "CVE-2013-6666", "status": "Patched", "link": "https://nvd.nist.gov/vuln/detail/CVE-2013-6666", "summary": "The PepperFlashRendererHost::OnNavigate function in renderer/pepper/pepper_flash_renderer_host.cc in Google Chrome before 33.0.1750.146 does not verify that all headers are Cross-Origin Resource Sharing (CORS) simple headers before proceeding with a PPB_Flash.Navigate operation, which might allow remote attackers to bypass intended CORS restrictions via an inappropriate header.", "scorev2": "5.8", "scorev3": "0.0", "scorev4": "0.0", "modified": "2026-06-17T00:00:46.000", "vector": "NETWORK", "vectorString": "AV:N/AC:M/Au:N/C:P/I:P/A:N", "detail": "fixed-version: Fixed from version >33.0.1750.144" }, { "id": "CVE-2013-6667", "status": "Patched", "link": "https://nvd.nist.gov/vuln/detail/CVE-2013-6667", "summary": "Multiple unspecified vulnerabilities in Google Chrome before 33.0.1750.146 allow attackers to cause a denial of service or possibly have other impact via unknown vectors.", "scorev2": "7.5", "scorev3": "0.0", "scorev4": "0.0", "modified": "2026-06-17T00:00:46.000", "vector": "NETWORK", "vectorString": "AV:N/AC:L/Au:N/C:P/I:P/A:P", "detail": "fixed-version: Fixed from version >33.0.1750.144" }, { "id": "CVE-2013-6668", "status": "Patched", "link": "https://nvd.nist.gov/vuln/detail/CVE-2013-6668", "summary": "Multiple unspecified vulnerabilities in Google V8 before 3.24.35.10, as used in Google Chrome before 33.0.1750.146, allow attackers to cause a denial of service or possibly have other impact via unknown vectors.", "scorev2": "7.5", "scorev3": "0.0", "scorev4": "0.0", "modified": "2026-06-17T00:00:46.000", "vector": "NETWORK", "vectorString": "AV:N/AC:L/Au:N/C:P/I:P/A:P", "detail": "fixed-version: Fixed from version >33.0.1750.144" }, { "id": "CVE-2013-6802", "status": "Patched", "link": "https://nvd.nist.gov/vuln/detail/CVE-2013-6802", "summary": "Google Chrome before 31.0.1650.57 allows remote attackers to bypass intended sandbox restrictions by leveraging access to a renderer process, as demonstrated during a Mobile Pwn2Own competition at PacSec 2013, a different vulnerability than CVE-2013-6632.", "scorev2": "5.8", "scorev3": "0.0", "scorev4": "0.0", "modified": "2026-06-17T00:00:57.000", "vector": "NETWORK", "vectorString": "AV:N/AC:M/Au:N/C:P/I:P/A:N", "detail": "fixed-version: Fixed from version >31.0.1650.57" }, { "id": "CVE-2014-0497", "status": "Patched", "link": "https://nvd.nist.gov/vuln/detail/CVE-2014-0497", "summary": "Integer underflow in Adobe Flash Player before 11.7.700.261 and 11.8.x through 12.0.x before 12.0.0.44 on Windows and Mac OS X, and before 11.2.202.336 on Linux, allows remote attackers to execute arbitrary code via unspecified vectors.", "scorev2": "10.0", "scorev3": "9.8", "scorev4": "0.0", "modified": "2026-06-17T00:03:09.000", "vector": "NETWORK", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H", "detail": "fixed-version: Fixed from version 32.0.1700.107" }, { "id": "CVE-2014-1568", "status": "Patched", "link": "https://nvd.nist.gov/vuln/detail/CVE-2014-1568", "summary": "Mozilla Network Security Services (NSS) before 3.16.2.1, 3.16.x before 3.16.5, and 3.17.x before 3.17.1, as used in Mozilla Firefox before 32.0.3, Mozilla Firefox ESR 24.x before 24.8.1 and 31.x before 31.1.1, Mozilla Thunderbird before 24.8.1 and 31.x before 31.1.2, Mozilla SeaMonkey before 2.29.1, Google Chrome before 37.0.2062.124 on Windows and OS X, and Google Chrome OS before 37.0.2062.120, does not properly parse ASN.1 values in X.509 certificates, which makes it easier for remote attackers to spoof RSA signatures via a crafted certificate, aka a \"signature malleability\" issue.", "scorev2": "7.5", "scorev3": "0.0", "scorev4": "0.0", "modified": "2026-06-17T00:05:10.000", "vector": "NETWORK", "vectorString": "AV:N/AC:L/Au:N/C:P/I:P/A:P", "detail": "fixed-version: Fixed from version >37.0.2062.120" }, { "id": "CVE-2014-1681", "status": "Patched", "link": "https://nvd.nist.gov/vuln/detail/CVE-2014-1681", "summary": "Multiple unspecified vulnerabilities in Google Chrome before 32.0.1700.102 have unknown impact and attack vectors, related to 12 \"security fixes [that were not] either contributed by external researchers or particularly interesting.\"", "scorev2": "10.0", "scorev3": "0.0", "scorev4": "0.0", "modified": "2026-06-17T00:05:22.000", "vector": "NETWORK", "vectorString": "AV:N/AC:L/Au:N/C:C/I:C/A:C", "detail": "fixed-version: Fixed from version >32.0.1700.101" }, { "id": "CVE-2014-1700", "status": "Patched", "link": "https://nvd.nist.gov/vuln/detail/CVE-2014-1700", "summary": "Use-after-free vulnerability in modules/speech/SpeechSynthesis.cpp in Blink, as used in Google Chrome before 33.0.1750.149, allows remote attackers to cause a denial of service or possibly have unspecified other impact by leveraging improper handling of a certain utterance data structure.", "scorev2": "7.5", "scorev3": "0.0", "scorev4": "0.0", "modified": "2026-06-17T00:05:24.000", "vector": "NETWORK", "vectorString": "AV:N/AC:L/Au:N/C:P/I:P/A:P", "detail": "fixed-version: Fixed from version >33.0.1750.146" }, { "id": "CVE-2014-1701", "status": "Patched", "link": "https://nvd.nist.gov/vuln/detail/CVE-2014-1701", "summary": "The GenerateFunction function in bindings/scripts/code_generator_v8.pm in Blink, as used in Google Chrome before 33.0.1750.149, does not implement a certain cross-origin restriction for the EventTarget::dispatchEvent function, which allows remote attackers to conduct Universal XSS (UXSS) attacks via vectors involving events.", "scorev2": "4.3", "scorev3": "0.0", "scorev4": "0.0", "modified": "2026-06-17T00:05:24.000", "vector": "NETWORK", "vectorString": "AV:N/AC:M/Au:N/C:N/I:P/A:N", "detail": "fixed-version: Fixed from version >33.0.1750.146" }, { "id": "CVE-2014-1702", "status": "Patched", "link": "https://nvd.nist.gov/vuln/detail/CVE-2014-1702", "summary": "Use-after-free vulnerability in the DatabaseThread::cleanupDatabaseThread function in modules/webdatabase/DatabaseThread.cpp in the web database implementation in Blink, as used in Google Chrome before 33.0.1750.149, allows remote attackers to cause a denial of service or possibly have unspecified other impact by leveraging improper handling of scheduled tasks during shutdown of a thread.", "scorev2": "7.5", "scorev3": "0.0", "scorev4": "0.0", "modified": "2026-06-17T00:05:24.000", "vector": "NETWORK", "vectorString": "AV:N/AC:L/Au:N/C:P/I:P/A:P", "detail": "fixed-version: Fixed from version >33.0.1750.146" }, { "id": "CVE-2014-1703", "status": "Patched", "link": "https://nvd.nist.gov/vuln/detail/CVE-2014-1703", "summary": "Use-after-free vulnerability in the WebSocketDispatcherHost::SendOrDrop function in content/browser/renderer_host/websocket_dispatcher_host.cc in the Web Sockets implementation in Google Chrome before 33.0.1750.149 might allow remote attackers to bypass the sandbox protection mechanism by leveraging an incorrect deletion in a certain failure case.", "scorev2": "7.5", "scorev3": "0.0", "scorev4": "0.0", "modified": "2026-06-17T00:05:24.000", "vector": "NETWORK", "vectorString": "AV:N/AC:L/Au:N/C:P/I:P/A:P", "detail": "fixed-version: Fixed from version >33.0.1750.146" }, { "id": "CVE-2014-1704", "status": "Patched", "link": "https://nvd.nist.gov/vuln/detail/CVE-2014-1704", "summary": "Multiple unspecified vulnerabilities in Google V8 before 3.23.17.18, as used in Google Chrome before 33.0.1750.149, allow attackers to cause a denial of service or possibly have other impact via unknown vectors.", "scorev2": "10.0", "scorev3": "0.0", "scorev4": "0.0", "modified": "2026-06-17T00:05:24.000", "vector": "NETWORK", "vectorString": "AV:N/AC:L/Au:N/C:C/I:C/A:C", "detail": "fixed-version: Fixed from version >33.0.1750.146" }, { "id": "CVE-2014-1705", "status": "Patched", "link": "https://nvd.nist.gov/vuln/detail/CVE-2014-1705", "summary": "Google V8, as used in Google Chrome before 33.0.1750.152 on OS X and Linux and before 33.0.1750.154 on Windows, allows remote attackers to cause a denial of service (memory corruption) or possibly have unspecified other impact via unknown vectors.", "scorev2": "7.5", "scorev3": "0.0", "scorev4": "0.0", "modified": "2026-06-17T00:05:24.000", "vector": "NETWORK", "vectorString": "AV:N/AC:L/Au:N/C:P/I:P/A:P", "detail": "fixed-version: Fixed from version 33.0.1750.154" }, { "id": "CVE-2014-1713", "status": "Patched", "link": "https://nvd.nist.gov/vuln/detail/CVE-2014-1713", "summary": "Use-after-free vulnerability in the AttributeSetter function in bindings/templates/attributes.cpp in the bindings in Blink, as used in Google Chrome before 33.0.1750.152 on OS X and Linux and before 33.0.1750.154 on Windows, allows remote attackers to cause a denial of service or possibly have unspecified other impact via vectors involving the document.location value.", "scorev2": "7.5", "scorev3": "0.0", "scorev4": "0.0", "modified": "2026-06-17T00:05:25.000", "vector": "NETWORK", "vectorString": "AV:N/AC:L/Au:N/C:P/I:P/A:P", "detail": "fixed-version: Fixed from version 33.0.1750.154" }, { "id": "CVE-2014-1714", "status": "Patched", "link": "https://nvd.nist.gov/vuln/detail/CVE-2014-1714", "summary": "The ScopedClipboardWriter::WritePickledData function in ui/base/clipboard/scoped_clipboard_writer.cc in Google Chrome before 33.0.1750.152 on OS X and Linux and before 33.0.1750.154 on Windows does not verify a certain format value, which allows remote attackers to cause a denial of service or possibly have unspecified other impact via vectors related to the clipboard.", "scorev2": "7.5", "scorev3": "0.0", "scorev4": "0.0", "modified": "2026-06-17T00:05:25.000", "vector": "NETWORK", "vectorString": "AV:N/AC:L/Au:N/C:P/I:P/A:P", "detail": "fixed-version: Fixed from version 33.0.1750.154" }, { "id": "CVE-2014-1715", "status": "Patched", "link": "https://nvd.nist.gov/vuln/detail/CVE-2014-1715", "summary": "Directory traversal vulnerability in Google Chrome before 33.0.1750.152 on OS X and Linux and before 33.0.1750.154 on Windows has unspecified impact and attack vectors.", "scorev2": "7.5", "scorev3": "0.0", "scorev4": "0.0", "modified": "2026-06-17T00:05:25.000", "vector": "NETWORK", "vectorString": "AV:N/AC:L/Au:N/C:P/I:P/A:P", "detail": "fixed-version: Fixed from version 33.0.1750.154" }, { "id": "CVE-2014-1716", "status": "Patched", "link": "https://nvd.nist.gov/vuln/detail/CVE-2014-1716", "summary": "Cross-site scripting (XSS) vulnerability in the Runtime_SetPrototype function in runtime.cc in Google V8, as used in Google Chrome before 34.0.1847.116, allows remote attackers to inject arbitrary web script or HTML via unspecified vectors, aka \"Universal XSS (UXSS).\"", "scorev2": "7.5", "scorev3": "0.0", "scorev4": "0.0", "modified": "2026-06-17T00:05:25.000", "vector": "NETWORK", "vectorString": "AV:N/AC:L/Au:N/C:P/I:P/A:P", "detail": "fixed-version: Fixed from version >34.0.1847.115" }, { "id": "CVE-2014-1717", "status": "Patched", "link": "https://nvd.nist.gov/vuln/detail/CVE-2014-1717", "summary": "Google V8, as used in Google Chrome before 34.0.1847.116, does not properly use numeric casts during handling of typed arrays, which allows remote attackers to cause a denial of service (out-of-bounds array access) or possibly have unspecified other impact via crafted JavaScript code.", "scorev2": "7.5", "scorev3": "0.0", "scorev4": "0.0", "modified": "2026-06-17T00:05:25.000", "vector": "NETWORK", "vectorString": "AV:N/AC:L/Au:N/C:P/I:P/A:P", "detail": "fixed-version: Fixed from version >34.0.1847.115" }, { "id": "CVE-2014-1718", "status": "Patched", "link": "https://nvd.nist.gov/vuln/detail/CVE-2014-1718", "summary": "Integer overflow in the SoftwareFrameManager::SwapToNewFrame function in content/browser/renderer_host/software_frame_manager.cc in the software compositor in Google Chrome before 34.0.1847.116 allows remote attackers to cause a denial of service or possibly have unspecified other impact via vectors that trigger an attempted mapping of a large amount of renderer memory.", "scorev2": "7.5", "scorev3": "0.0", "scorev4": "0.0", "modified": "2026-06-17T00:05:25.000", "vector": "NETWORK", "vectorString": "AV:N/AC:L/Au:N/C:P/I:P/A:P", "detail": "fixed-version: Fixed from version >34.0.1847.115" }, { "id": "CVE-2014-1719", "status": "Patched", "link": "https://nvd.nist.gov/vuln/detail/CVE-2014-1719", "summary": "Use-after-free vulnerability in the WebSharedWorkerStub::OnTerminateWorkerContext function in content/worker/websharedworker_stub.cc in the Web Workers implementation in Google Chrome before 34.0.1847.116 allows remote attackers to cause a denial of service (heap memory corruption) or possibly have unspecified other impact via vectors that trigger a SharedWorker termination during script loading.", "scorev2": "7.5", "scorev3": "0.0", "scorev4": "0.0", "modified": "2026-06-17T00:05:26.000", "vector": "NETWORK", "vectorString": "AV:N/AC:L/Au:N/C:P/I:P/A:P", "detail": "fixed-version: Fixed from version >34.0.1847.115" }, { "id": "CVE-2014-1720", "status": "Patched", "link": "https://nvd.nist.gov/vuln/detail/CVE-2014-1720", "summary": "Use-after-free vulnerability in the HTMLBodyElement::insertedInto function in core/html/HTMLBodyElement.cpp in Blink, as used in Google Chrome before 34.0.1847.116, allows remote attackers to cause a denial of service or possibly have unspecified other impact via vectors involving attributes.", "scorev2": "7.5", "scorev3": "0.0", "scorev4": "0.0", "modified": "2026-06-17T00:05:26.000", "vector": "NETWORK", "vectorString": "AV:N/AC:L/Au:N/C:P/I:P/A:P", "detail": "fixed-version: Fixed from version >34.0.1847.115" }, { "id": "CVE-2014-1721", "status": "Patched", "link": "https://nvd.nist.gov/vuln/detail/CVE-2014-1721", "summary": "Google V8, as used in Google Chrome before 34.0.1847.116, does not properly implement lazy deoptimization, which allows remote attackers to cause a denial of service (memory corruption) or possibly have unspecified other impact via crafted JavaScript code, as demonstrated by improper handling of a heap allocation of a number outside the Small Integer (aka smi) range.", "scorev2": "7.5", "scorev3": "0.0", "scorev4": "0.0", "modified": "2026-06-17T00:05:26.000", "vector": "NETWORK", "vectorString": "AV:N/AC:L/Au:N/C:P/I:P/A:P", "detail": "fixed-version: Fixed from version >34.0.1847.115" }, { "id": "CVE-2014-1722", "status": "Patched", "link": "https://nvd.nist.gov/vuln/detail/CVE-2014-1722", "summary": "Use-after-free vulnerability in the RenderBlock::addChildIgnoringAnonymousColumnBlocks function in core/rendering/RenderBlock.cpp in Blink, as used in Google Chrome before 34.0.1847.116, allows remote attackers to cause a denial of service or possibly have unspecified other impact via vectors involving addition of a child node.", "scorev2": "7.5", "scorev3": "0.0", "scorev4": "0.0", "modified": "2026-06-17T00:05:26.000", "vector": "NETWORK", "vectorString": "AV:N/AC:L/Au:N/C:P/I:P/A:P", "detail": "fixed-version: Fixed from version >34.0.1847.115" }, { "id": "CVE-2014-1723", "status": "Patched", "link": "https://nvd.nist.gov/vuln/detail/CVE-2014-1723", "summary": "The UnescapeURLWithOffsetsImpl function in net/base/escape.cc in Google Chrome before 34.0.1847.116 does not properly handle bidirectional Internationalized Resource Identifiers (IRIs), which makes it easier for remote attackers to spoof URLs via crafted use of right-to-left (RTL) Unicode text.", "scorev2": "7.5", "scorev3": "0.0", "scorev4": "0.0", "modified": "2026-06-17T00:05:26.000", "vector": "NETWORK", "vectorString": "AV:N/AC:L/Au:N/C:P/I:P/A:P", "detail": "fixed-version: Fixed from version >34.0.1847.115" }, { "id": "CVE-2014-1724", "status": "Patched", "link": "https://nvd.nist.gov/vuln/detail/CVE-2014-1724", "summary": "Use-after-free vulnerability in Free(b)soft Laboratory Speech Dispatcher 0.7.1, as used in Google Chrome before 34.0.1847.116, allows remote attackers to cause a denial of service (application hang) or possibly have unspecified other impact via a text-to-speech request.", "scorev2": "7.5", "scorev3": "0.0", "scorev4": "0.0", "modified": "2026-06-17T00:05:26.000", "vector": "NETWORK", "vectorString": "AV:N/AC:L/Au:N/C:P/I:P/A:P", "detail": "fixed-version: Fixed from version >34.0.1847.115" }, { "id": "CVE-2014-1725", "status": "Patched", "link": "https://nvd.nist.gov/vuln/detail/CVE-2014-1725", "summary": "The base64DecodeInternal function in wtf/text/Base64.cpp in Blink, as used in Google Chrome before 34.0.1847.116, does not properly handle string data composed exclusively of whitespace characters, which allows remote attackers to cause a denial of service (out-of-bounds read) via a window.atob method call.", "scorev2": "5.0", "scorev3": "0.0", "scorev4": "0.0", "modified": "2026-06-17T00:05:26.000", "vector": "NETWORK", "vectorString": "AV:N/AC:L/Au:N/C:N/I:N/A:P", "detail": "fixed-version: Fixed from version >34.0.1847.115" }, { "id": "CVE-2014-1726", "status": "Patched", "link": "https://nvd.nist.gov/vuln/detail/CVE-2014-1726", "summary": "The drag implementation in Google Chrome before 34.0.1847.116 allows user-assisted remote attackers to bypass the Same Origin Policy and forge local pathnames by leveraging renderer access.", "scorev2": "4.3", "scorev3": "0.0", "scorev4": "0.0", "modified": "2026-06-17T00:05:26.000", "vector": "NETWORK", "vectorString": "AV:N/AC:M/Au:N/C:N/I:P/A:N", "detail": "fixed-version: Fixed from version >34.0.1847.115" }, { "id": "CVE-2014-1727", "status": "Patched", "link": "https://nvd.nist.gov/vuln/detail/CVE-2014-1727", "summary": "Use-after-free vulnerability in content/renderer/renderer_webcolorchooser_impl.h in Google Chrome before 34.0.1847.116 allows remote attackers to cause a denial of service or possibly have unspecified other impact via vectors related to forms.", "scorev2": "7.5", "scorev3": "0.0", "scorev4": "0.0", "modified": "2026-06-17T00:05:26.000", "vector": "NETWORK", "vectorString": "AV:N/AC:L/Au:N/C:P/I:P/A:P", "detail": "fixed-version: Fixed from version >34.0.1847.115" }, { "id": "CVE-2014-1728", "status": "Patched", "link": "https://nvd.nist.gov/vuln/detail/CVE-2014-1728", "summary": "Multiple unspecified vulnerabilities in Google Chrome before 34.0.1847.116 allow attackers to cause a denial of service or possibly have other impact via unknown vectors.", "scorev2": "7.5", "scorev3": "0.0", "scorev4": "0.0", "modified": "2026-06-17T00:05:27.000", "vector": "NETWORK", "vectorString": "AV:N/AC:L/Au:N/C:P/I:P/A:P", "detail": "fixed-version: Fixed from version >34.0.1847.115" }, { "id": "CVE-2014-1729", "status": "Patched", "link": "https://nvd.nist.gov/vuln/detail/CVE-2014-1729", "summary": "Multiple unspecified vulnerabilities in Google V8 before 3.24.35.22, as used in Google Chrome before 34.0.1847.116, allow attackers to cause a denial of service or possibly have other impact via unknown vectors.", "scorev2": "7.5", "scorev3": "0.0", "scorev4": "0.0", "modified": "2026-06-17T00:05:27.000", "vector": "NETWORK", "vectorString": "AV:N/AC:L/Au:N/C:P/I:P/A:P", "detail": "fixed-version: Fixed from version >34.0.1847.115" }, { "id": "CVE-2014-1730", "status": "Patched", "link": "https://nvd.nist.gov/vuln/detail/CVE-2014-1730", "summary": "Google V8, as used in Google Chrome before 34.0.1847.131 on Windows and OS X and before 34.0.1847.132 on Linux, does not properly store internationalization metadata, which allows remote attackers to bypass intended access restrictions by leveraging \"type confusion\" and reading property values, related to i18n.js and runtime.cc.", "scorev2": "7.8", "scorev3": "0.0", "scorev4": "0.0", "modified": "2026-06-17T00:05:27.000", "vector": "NETWORK", "vectorString": "AV:N/AC:L/Au:N/C:C/I:N/A:N", "detail": "fixed-version: Fixed from version 34.0.1847.132" }, { "id": "CVE-2014-1731", "status": "Patched", "link": "https://nvd.nist.gov/vuln/detail/CVE-2014-1731", "summary": "core/html/HTMLSelectElement.cpp in the DOM implementation in Blink, as used in Google Chrome before 34.0.1847.131 on Windows and OS X and before 34.0.1847.132 on Linux, does not properly check renderer state upon a focus event, which allows remote attackers to cause a denial of service or possibly have unspecified other impact via vectors that leverage \"type confusion\" for SELECT elements.", "scorev2": "7.5", "scorev3": "0.0", "scorev4": "0.0", "modified": "2026-06-17T00:05:27.000", "vector": "NETWORK", "vectorString": "AV:N/AC:L/Au:N/C:P/I:P/A:P", "detail": "fixed-version: Fixed from version 34.0.1847.132" }, { "id": "CVE-2014-1732", "status": "Patched", "link": "https://nvd.nist.gov/vuln/detail/CVE-2014-1732", "summary": "Use-after-free vulnerability in browser/ui/views/speech_recognition_bubble_views.cc in Google Chrome before 34.0.1847.131 on Windows and OS X and before 34.0.1847.132 on Linux allows remote attackers to cause a denial of service or possibly have unspecified other impact via an INPUT element that triggers the presence of a Speech Recognition Bubble window for an incorrect duration.", "scorev2": "7.5", "scorev3": "0.0", "scorev4": "0.0", "modified": "2026-06-17T00:05:27.000", "vector": "NETWORK", "vectorString": "AV:N/AC:L/Au:N/C:P/I:P/A:P", "detail": "fixed-version: Fixed from version 34.0.1847.132" }, { "id": "CVE-2014-1733", "status": "Patched", "link": "https://nvd.nist.gov/vuln/detail/CVE-2014-1733", "summary": "The PointerCompare function in codegen.cc in Seccomp-BPF, as used in Google Chrome before 34.0.1847.131 on Windows and OS X and before 34.0.1847.132 on Linux, does not properly merge blocks, which might allow remote attackers to bypass intended sandbox restrictions by leveraging renderer access.", "scorev2": "7.5", "scorev3": "0.0", "scorev4": "0.0", "modified": "2026-06-17T00:05:27.000", "vector": "NETWORK", "vectorString": "AV:N/AC:L/Au:N/C:P/I:P/A:P", "detail": "fixed-version: Fixed from version 34.0.1847.132" }, { "id": "CVE-2014-1734", "status": "Patched", "link": "https://nvd.nist.gov/vuln/detail/CVE-2014-1734", "summary": "Multiple unspecified vulnerabilities in Google Chrome before 34.0.1847.131 on Windows and OS X and before 34.0.1847.132 on Linux allow attackers to cause a denial of service or possibly have other impact via unknown vectors.", "scorev2": "7.5", "scorev3": "0.0", "scorev4": "0.0", "modified": "2026-06-17T00:05:27.000", "vector": "NETWORK", "vectorString": "AV:N/AC:L/Au:N/C:P/I:P/A:P", "detail": "fixed-version: Fixed from version 34.0.1847.132" }, { "id": "CVE-2014-1735", "status": "Patched", "link": "https://nvd.nist.gov/vuln/detail/CVE-2014-1735", "summary": "Multiple unspecified vulnerabilities in Google V8 before 3.24.35.33, as used in Google Chrome before 34.0.1847.131 on Windows and OS X and before 34.0.1847.132 on Linux, allow attackers to cause a denial of service or possibly have other impact via unknown vectors.", "scorev2": "7.5", "scorev3": "0.0", "scorev4": "0.0", "modified": "2026-06-17T00:05:27.000", "vector": "NETWORK", "vectorString": "AV:N/AC:L/Au:N/C:P/I:P/A:P", "detail": "fixed-version: Fixed from version 34.0.1847.132" }, { "id": "CVE-2014-1736", "status": "Patched", "link": "https://nvd.nist.gov/vuln/detail/CVE-2014-1736", "summary": "Integer overflow in api.cc in Google V8, as used in Google Chrome before 34.0.1847.131 on Windows and OS X and before 34.0.1847.132 on Linux, allows remote attackers to cause a denial of service or possibly have unspecified other impact via a large length value.", "scorev2": "7.5", "scorev3": "0.0", "scorev4": "0.0", "modified": "2026-06-17T00:05:28.000", "vector": "NETWORK", "vectorString": "AV:N/AC:L/Au:N/C:P/I:P/A:P", "detail": "fixed-version: Fixed from version 34.0.1847.132" }, { "id": "CVE-2014-1740", "status": "Patched", "link": "https://nvd.nist.gov/vuln/detail/CVE-2014-1740", "summary": "Multiple use-after-free vulnerabilities in net/websockets/websocket_job.cc in the WebSockets implementation in Google Chrome before 34.0.1847.137 allow remote attackers to cause a denial of service or possibly have unspecified other impact via vectors related to WebSocketJob deletion.", "scorev2": "7.5", "scorev3": "0.0", "scorev4": "0.0", "modified": "2026-06-17T00:05:28.000", "vector": "NETWORK", "vectorString": "AV:N/AC:L/Au:N/C:P/I:P/A:P", "detail": "fixed-version: Fixed from version >34.0.1847.136" }, { "id": "CVE-2014-1741", "status": "Patched", "link": "https://nvd.nist.gov/vuln/detail/CVE-2014-1741", "summary": "Multiple integer overflows in the replace-data functionality in the CharacterData interface implementation in core/dom/CharacterData.cpp in Blink, as used in Google Chrome before 34.0.1847.137, allow remote attackers to cause a denial of service or possibly have unspecified other impact via vectors related to ranges.", "scorev2": "7.5", "scorev3": "0.0", "scorev4": "0.0", "modified": "2026-06-17T00:05:28.000", "vector": "NETWORK", "vectorString": "AV:N/AC:L/Au:N/C:P/I:P/A:P", "detail": "fixed-version: Fixed from version >34.0.1847.136" }, { "id": "CVE-2014-1742", "status": "Patched", "link": "https://nvd.nist.gov/vuln/detail/CVE-2014-1742", "summary": "Use-after-free vulnerability in the FrameSelection::updateAppearance function in core/editing/FrameSelection.cpp in Blink, as used in Google Chrome before 34.0.1847.137, allows remote attackers to cause a denial of service or possibly have unspecified other impact by leveraging improper RenderObject handling.", "scorev2": "7.5", "scorev3": "0.0", "scorev4": "0.0", "modified": "2026-06-17T00:05:28.000", "vector": "NETWORK", "vectorString": "AV:N/AC:L/Au:N/C:P/I:P/A:P", "detail": "fixed-version: Fixed from version >34.0.1847.136" }, { "id": "CVE-2014-1743", "status": "Patched", "link": "https://nvd.nist.gov/vuln/detail/CVE-2014-1743", "summary": "Use-after-free vulnerability in the StyleElement::removedFromDocument function in core/dom/StyleElement.cpp in Blink, as used in Google Chrome before 35.0.1916.114, allows remote attackers to cause a denial of service (application crash) or possibly have unspecified other impact via crafted JavaScript code that triggers tree mutation.", "scorev2": "7.5", "scorev3": "0.0", "scorev4": "0.0", "modified": "2026-06-17T00:05:29.000", "vector": "NETWORK", "vectorString": "AV:N/AC:L/Au:N/C:P/I:P/A:P", "detail": "fixed-version: Fixed from version >35.0.1916.113" }, { "id": "CVE-2014-1744", "status": "Patched", "link": "https://nvd.nist.gov/vuln/detail/CVE-2014-1744", "summary": "Integer overflow in the AudioInputRendererHost::OnCreateStream function in content/browser/renderer_host/media/audio_input_renderer_host.cc in Google Chrome before 35.0.1916.114 allows remote attackers to cause a denial of service or possibly have unspecified other impact via vectors that trigger a large shared-memory allocation.", "scorev2": "7.5", "scorev3": "0.0", "scorev4": "0.0", "modified": "2026-06-17T00:05:29.000", "vector": "NETWORK", "vectorString": "AV:N/AC:L/Au:N/C:P/I:P/A:P", "detail": "fixed-version: Fixed from version >35.0.1916.113" }, { "id": "CVE-2014-1745", "status": "Patched", "link": "https://nvd.nist.gov/vuln/detail/CVE-2014-1745", "summary": "Use-after-free vulnerability in the SVG implementation in Blink, as used in Google Chrome before 35.0.1916.114, allows remote attackers to cause a denial of service or possibly have unspecified other impact via vectors that trigger removal of an SVGFontFaceElement object, related to core/svg/SVGFontFaceElement.cpp.", "scorev2": "7.5", "scorev3": "7.1", "scorev4": "0.0", "modified": "2026-06-17T00:05:29.000", "vector": "NETWORK", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:L", "detail": "fixed-version: Fixed from version >35.0.1916.113" }, { "id": "CVE-2014-1746", "status": "Patched", "link": "https://nvd.nist.gov/vuln/detail/CVE-2014-1746", "summary": "The InMemoryUrlProtocol::Read function in media/filters/in_memory_url_protocol.cc in Google Chrome before 35.0.1916.114 relies on an insufficiently large integer data type, which allows remote attackers to cause a denial of service (out-of-bounds read) via vectors that trigger use of a large buffer.", "scorev2": "5.0", "scorev3": "0.0", "scorev4": "0.0", "modified": "2026-06-17T00:05:29.000", "vector": "NETWORK", "vectorString": "AV:N/AC:L/Au:N/C:P/I:N/A:N", "detail": "fixed-version: Fixed from version >35.0.1916.113" }, { "id": "CVE-2014-1747", "status": "Patched", "link": "https://nvd.nist.gov/vuln/detail/CVE-2014-1747", "summary": "Cross-site scripting (XSS) vulnerability in the DocumentLoader::maybeCreateArchive function in core/loader/DocumentLoader.cpp in Blink, as used in Google Chrome before 35.0.1916.114, allows remote attackers to inject arbitrary web script or HTML via crafted MHTML content, aka \"Universal XSS (UXSS).\"", "scorev2": "4.3", "scorev3": "0.0", "scorev4": "0.0", "modified": "2026-06-17T00:05:29.000", "vector": "NETWORK", "vectorString": "AV:N/AC:M/Au:N/C:N/I:P/A:N", "detail": "fixed-version: Fixed from version >35.0.1916.113" }, { "id": "CVE-2014-1748", "status": "Patched", "link": "https://nvd.nist.gov/vuln/detail/CVE-2014-1748", "summary": "The ScrollView::paint function in platform/scroll/ScrollView.cpp in Blink, as used in Google Chrome before 35.0.1916.114, allows remote attackers to spoof the UI by extending scrollbar painting into the parent frame.", "scorev2": "5.0", "scorev3": "0.0", "scorev4": "0.0", "modified": "2026-06-17T00:05:29.000", "vector": "NETWORK", "vectorString": "AV:N/AC:L/Au:N/C:N/I:P/A:N", "detail": "fixed-version: Fixed from version >35.0.1916.113" }, { "id": "CVE-2014-1749", "status": "Patched", "link": "https://nvd.nist.gov/vuln/detail/CVE-2014-1749", "summary": "Multiple unspecified vulnerabilities in Google Chrome before 35.0.1916.114 allow attackers to cause a denial of service or possibly have other impact via unknown vectors.", "scorev2": "7.5", "scorev3": "0.0", "scorev4": "0.0", "modified": "2026-06-17T00:05:29.000", "vector": "NETWORK", "vectorString": "AV:N/AC:L/Au:N/C:P/I:P/A:P", "detail": "fixed-version: Fixed from version >35.0.1916.113" }, { "id": "CVE-2014-3152", "status": "Patched", "link": "https://nvd.nist.gov/vuln/detail/CVE-2014-3152", "summary": "Integer underflow in the LCodeGen::PrepareKeyedOperand function in arm/lithium-codegen-arm.cc in Google V8 before 3.25.28.16, as used in Google Chrome before 35.0.1916.114, allows remote attackers to cause a denial of service or possibly have unspecified other impact via vectors that trigger a negative key value.", "scorev2": "7.5", "scorev3": "0.0", "scorev4": "0.0", "modified": "2026-06-17T00:07:40.000", "vector": "NETWORK", "vectorString": "AV:N/AC:L/Au:N/C:P/I:P/A:P", "detail": "fixed-version: Fixed from version >35.0.1916.113" }, { "id": "CVE-2014-3154", "status": "Patched", "link": "https://nvd.nist.gov/vuln/detail/CVE-2014-3154", "summary": "Use-after-free vulnerability in the ChildThread::Shutdown function in content/child/child_thread.cc in the filesystem API in Google Chrome before 35.0.1916.153 allows remote attackers to cause a denial of service or possibly have unspecified other impact via vectors related to a Blink shutdown.", "scorev2": "7.5", "scorev3": "0.0", "scorev4": "0.0", "modified": "2026-06-17T00:07:41.000", "vector": "NETWORK", "vectorString": "AV:N/AC:L/Au:N/C:P/I:P/A:P", "detail": "fixed-version: Fixed from version >35.0.1916.152" }, { "id": "CVE-2014-3155", "status": "Patched", "link": "https://nvd.nist.gov/vuln/detail/CVE-2014-3155", "summary": "net/spdy/spdy_write_queue.cc in the SPDY implementation in Google Chrome before 35.0.1916.153 allows remote attackers to cause a denial of service (out-of-bounds read) by leveraging incorrect queue maintenance.", "scorev2": "5.0", "scorev3": "0.0", "scorev4": "0.0", "modified": "2026-06-17T00:07:41.000", "vector": "NETWORK", "vectorString": "AV:N/AC:L/Au:N/C:N/I:N/A:P", "detail": "fixed-version: Fixed from version >35.0.1916.152" }, { "id": "CVE-2014-3156", "status": "Patched", "link": "https://nvd.nist.gov/vuln/detail/CVE-2014-3156", "summary": "Buffer overflow in the clipboard implementation in Google Chrome before 35.0.1916.153 allows remote attackers to cause a denial of service or possibly have unspecified other impact via vectors that trigger unexpected bitmap data, related to content/renderer/renderer_clipboard_client.cc and content/renderer/webclipboard_impl.cc.", "scorev2": "7.5", "scorev3": "0.0", "scorev4": "0.0", "modified": "2026-06-17T00:07:41.000", "vector": "NETWORK", "vectorString": "AV:N/AC:L/Au:N/C:P/I:P/A:P", "detail": "fixed-version: Fixed from version >35.0.1916.152" }, { "id": "CVE-2014-3157", "status": "Patched", "link": "https://nvd.nist.gov/vuln/detail/CVE-2014-3157", "summary": "Heap-based buffer overflow in the FFmpegVideoDecoder::GetVideoBuffer function in media/filters/ffmpeg_video_decoder.cc in Google Chrome before 35.0.1916.153 allows remote attackers to cause a denial of service or possibly have unspecified other impact by leveraging VideoFrame data structures that are too small for proper interaction with an underlying FFmpeg library.", "scorev2": "7.5", "scorev3": "0.0", "scorev4": "0.0", "modified": "2026-06-17T00:07:41.000", "vector": "NETWORK", "vectorString": "AV:N/AC:L/Au:N/C:P/I:P/A:P", "detail": "fixed-version: Fixed from version >35.0.1916.152" }, { "id": "CVE-2014-3159", "status": "Patched", "link": "https://nvd.nist.gov/vuln/detail/CVE-2014-3159", "summary": "The WebContentsDelegateAndroid::OpenURLFromTab function in components/web_contents_delegate_android/web_contents_delegate_android.cc in Google Chrome before 36.0.1985.122 on Android does not properly restrict URL loading, which allows remote attackers to spoof the URL in the Omnibox via unspecified vectors.", "scorev2": "6.4", "scorev3": "0.0", "scorev4": "0.0", "modified": "2026-06-17T00:07:41.000", "vector": "NETWORK", "vectorString": "AV:N/AC:L/Au:N/C:P/I:P/A:N", "detail": "fixed-version: Fixed from version >36.0.1985.106" }, { "id": "CVE-2014-3160", "status": "Patched", "link": "https://nvd.nist.gov/vuln/detail/CVE-2014-3160", "summary": "The ResourceFetcher::canRequest function in core/fetch/ResourceFetcher.cpp in Blink, as used in Google Chrome before 36.0.1985.125, does not properly restrict subresource requests associated with SVG files, which allows remote attackers to bypass the Same Origin Policy via a crafted file.", "scorev2": "6.8", "scorev3": "0.0", "scorev4": "0.0", "modified": "2026-06-17T00:07:42.000", "vector": "NETWORK", "vectorString": "AV:N/AC:M/Au:N/C:P/I:P/A:P", "detail": "version-not-in-range" }, { "id": "CVE-2014-3161", "status": "Patched", "link": "https://nvd.nist.gov/vuln/detail/CVE-2014-3161", "summary": "The WebMediaPlayerAndroid::load function in content/renderer/media/android/webmediaplayer_android.cc in Google Chrome before 36.0.1985.122 on Android does not properly interact with redirects, which allows remote attackers to bypass the Same Origin Policy via a crafted web site that hosts a video stream.", "scorev2": "7.5", "scorev3": "0.0", "scorev4": "0.0", "modified": "2026-06-17T00:07:42.000", "vector": "NETWORK", "vectorString": "AV:N/AC:L/Au:N/C:P/I:P/A:P", "detail": "fixed-version: Fixed from version >36.0.1985.106" }, { "id": "CVE-2014-3162", "status": "Patched", "link": "https://nvd.nist.gov/vuln/detail/CVE-2014-3162", "summary": "Multiple unspecified vulnerabilities in Google Chrome before 36.0.1985.125 allow attackers to cause a denial of service or possibly have other impact via unknown vectors.", "scorev2": "5.0", "scorev3": "0.0", "scorev4": "0.0", "modified": "2026-06-17T00:07:42.000", "vector": "NETWORK", "vectorString": "AV:N/AC:L/Au:N/C:N/I:N/A:P", "detail": "version-not-in-range" }, { "id": "CVE-2014-3165", "status": "Patched", "link": "https://nvd.nist.gov/vuln/detail/CVE-2014-3165", "summary": "Use-after-free vulnerability in modules/websockets/WorkerThreadableWebSocketChannel.cpp in the Web Sockets implementation in Blink, as used in Google Chrome before 36.0.1985.143, allows remote attackers to cause a denial of service or possibly have unspecified other impact via vectors that trigger an unexpectedly long lifetime of a temporary object during method completion.", "scorev2": "7.5", "scorev3": "0.0", "scorev4": "0.0", "modified": "2026-06-17T00:07:42.000", "vector": "NETWORK", "vectorString": "AV:N/AC:L/Au:N/C:P/I:P/A:P", "detail": "fixed-version: Fixed from version >36.0.1985.142" }, { "id": "CVE-2014-3166", "status": "Patched", "link": "https://nvd.nist.gov/vuln/detail/CVE-2014-3166", "summary": "The Public Key Pinning (PKP) implementation in Google Chrome before 36.0.1985.143 on Windows, OS X, and Linux, and before 36.0.1985.135 on Android, does not correctly consider the properties of SPDY connections, which allows remote attackers to obtain sensitive information by leveraging the use of multiple domain names.", "scorev2": "4.3", "scorev3": "0.0", "scorev4": "0.0", "modified": "2026-06-17T00:07:42.000", "vector": "NETWORK", "vectorString": "AV:N/AC:M/Au:N/C:P/I:N/A:N", "detail": "fixed-version: Fixed from version 36.0.1985.143" }, { "id": "CVE-2014-3167", "status": "Patched", "link": "https://nvd.nist.gov/vuln/detail/CVE-2014-3167", "summary": "Multiple unspecified vulnerabilities in Google Chrome before 36.0.1985.143 allow attackers to cause a denial of service or possibly have other impact via unknown vectors.", "scorev2": "7.5", "scorev3": "0.0", "scorev4": "0.0", "modified": "2026-06-17T00:07:42.000", "vector": "NETWORK", "vectorString": "AV:N/AC:L/Au:N/C:P/I:P/A:P", "detail": "fixed-version: Fixed from version >36.0.1985.142" }, { "id": "CVE-2014-3168", "status": "Patched", "link": "https://nvd.nist.gov/vuln/detail/CVE-2014-3168", "summary": "Use-after-free vulnerability in the SVG implementation in Blink, as used in Google Chrome before 37.0.2062.94, allows remote attackers to cause a denial of service or possibly have unspecified other impact by leveraging improper caching associated with animation.", "scorev2": "7.5", "scorev3": "0.0", "scorev4": "0.0", "modified": "2026-06-17T00:07:42.000", "vector": "NETWORK", "vectorString": "AV:N/AC:L/Au:N/C:P/I:P/A:P", "detail": "fixed-version: Fixed from version >37.0.2062.93" }, { "id": "CVE-2014-3169", "status": "Patched", "link": "https://nvd.nist.gov/vuln/detail/CVE-2014-3169", "summary": "Use-after-free vulnerability in core/dom/ContainerNode.cpp in the DOM implementation in Blink, as used in Google Chrome before 37.0.2062.94, allows remote attackers to cause a denial of service or possibly have unspecified other impact by leveraging script execution that occurs before notification of node removal.", "scorev2": "7.5", "scorev3": "0.0", "scorev4": "0.0", "modified": "2026-06-17T00:07:43.000", "vector": "NETWORK", "vectorString": "AV:N/AC:L/Au:N/C:P/I:P/A:P", "detail": "fixed-version: Fixed from version >37.0.2062.93" }, { "id": "CVE-2014-3170", "status": "Patched", "link": "https://nvd.nist.gov/vuln/detail/CVE-2014-3170", "summary": "extensions/common/url_pattern.cc in Google Chrome before 37.0.2062.94 does not prevent use of a '\\0' character in a host name, which allows remote attackers to spoof the extension permission dialog by relying on truncation after this character.", "scorev2": "6.4", "scorev3": "0.0", "scorev4": "0.0", "modified": "2026-06-17T00:07:43.000", "vector": "NETWORK", "vectorString": "AV:N/AC:L/Au:N/C:P/I:P/A:N", "detail": "fixed-version: Fixed from version >37.0.2062.93" }, { "id": "CVE-2014-3171", "status": "Patched", "link": "https://nvd.nist.gov/vuln/detail/CVE-2014-3171", "summary": "Use-after-free vulnerability in the V8 bindings in Blink, as used in Google Chrome before 37.0.2062.94, allows remote attackers to cause a denial of service or possibly have unspecified other impact by leveraging improper use of HashMap add operations instead of HashMap set operations, related to bindings/core/v8/DOMWrapperMap.h and bindings/core/v8/SerializedScriptValue.cpp.", "scorev2": "7.5", "scorev3": "0.0", "scorev4": "0.0", "modified": "2026-06-17T00:07:43.000", "vector": "NETWORK", "vectorString": "AV:N/AC:L/Au:N/C:P/I:P/A:P", "detail": "fixed-version: Fixed from version >37.0.2062.93" }, { "id": "CVE-2014-3172", "status": "Patched", "link": "https://nvd.nist.gov/vuln/detail/CVE-2014-3172", "summary": "The Debugger extension API in browser/extensions/api/debugger/debugger_api.cc in Google Chrome before 37.0.2062.94 does not validate a tab's URL before an attach operation, which allows remote attackers to bypass intended access limitations via an extension that uses a restricted URL, as demonstrated by a chrome:// URL.", "scorev2": "6.4", "scorev3": "0.0", "scorev4": "0.0", "modified": "2026-06-17T00:07:43.000", "vector": "NETWORK", "vectorString": "AV:N/AC:L/Au:N/C:P/I:P/A:N", "detail": "fixed-version: Fixed from version >37.0.2062.93" }, { "id": "CVE-2014-3173", "status": "Patched", "link": "https://nvd.nist.gov/vuln/detail/CVE-2014-3173", "summary": "The WebGL implementation in Google Chrome before 37.0.2062.94 does not ensure that clear calls interact properly with the state of a draw buffer, which allows remote attackers to cause a denial of service (read of uninitialized memory) via a crafted CANVAS element, related to gpu/command_buffer/service/framebuffer_manager.cc and gpu/command_buffer/service/gles2_cmd_decoder.cc.", "scorev2": "5.0", "scorev3": "0.0", "scorev4": "0.0", "modified": "2026-06-17T00:07:43.000", "vector": "NETWORK", "vectorString": "AV:N/AC:L/Au:N/C:N/I:N/A:P", "detail": "fixed-version: Fixed from version >37.0.2062.93" }, { "id": "CVE-2014-3174", "status": "Patched", "link": "https://nvd.nist.gov/vuln/detail/CVE-2014-3174", "summary": "modules/webaudio/BiquadDSPKernel.cpp in the Web Audio API implementation in Blink, as used in Google Chrome before 37.0.2062.94, does not properly consider concurrent threads during attempts to update biquad filter coefficients, which allows remote attackers to cause a denial of service (read of uninitialized memory) via crafted API calls.", "scorev2": "5.0", "scorev3": "0.0", "scorev4": "0.0", "modified": "2026-06-17T00:07:43.000", "vector": "NETWORK", "vectorString": "AV:N/AC:L/Au:N/C:N/I:N/A:P", "detail": "fixed-version: Fixed from version >37.0.2062.93" }, { "id": "CVE-2014-3175", "status": "Patched", "link": "https://nvd.nist.gov/vuln/detail/CVE-2014-3175", "summary": "Multiple unspecified vulnerabilities in Google Chrome before 37.0.2062.94 allow attackers to cause a denial of service or possibly have other impact via unknown vectors, related to the load_truetype_glyph function in truetype/ttgload.c in FreeType and other functions in other components.", "scorev2": "10.0", "scorev3": "0.0", "scorev4": "0.0", "modified": "2026-06-17T00:07:43.000", "vector": "NETWORK", "vectorString": "AV:N/AC:L/Au:N/C:C/I:C/A:C", "detail": "fixed-version: Fixed from version >37.0.2062.93" }, { "id": "CVE-2014-3176", "status": "Patched", "link": "https://nvd.nist.gov/vuln/detail/CVE-2014-3176", "summary": "Google Chrome before 37.0.2062.94 does not properly handle the interaction of extensions, IPC, the sync API, and Google V8, which allows remote attackers to execute arbitrary code via unspecified vectors, a different vulnerability than CVE-2014-3177.", "scorev2": "10.0", "scorev3": "0.0", "scorev4": "0.0", "modified": "2026-06-17T00:07:44.000", "vector": "NETWORK", "vectorString": "AV:N/AC:L/Au:N/C:C/I:C/A:C", "detail": "fixed-version: Fixed from version >37.0.2062.93" }, { "id": "CVE-2014-3177", "status": "Patched", "link": "https://nvd.nist.gov/vuln/detail/CVE-2014-3177", "summary": "Google Chrome before 37.0.2062.94 does not properly handle the interaction of extensions, IPC, the sync API, and Google V8, which allows remote attackers to execute arbitrary code via unspecified vectors, a different vulnerability than CVE-2014-3176.", "scorev2": "10.0", "scorev3": "0.0", "scorev4": "0.0", "modified": "2026-06-17T00:07:44.000", "vector": "NETWORK", "vectorString": "AV:N/AC:L/Au:N/C:C/I:C/A:C", "detail": "fixed-version: Fixed from version >37.0.2062.93" }, { "id": "CVE-2014-3178", "status": "Patched", "link": "https://nvd.nist.gov/vuln/detail/CVE-2014-3178", "summary": "Use-after-free vulnerability in core/dom/Node.cpp in Blink, as used in Google Chrome before 37.0.2062.120, allows remote attackers to cause a denial of service or possibly have unspecified other impact by leveraging improper handling of render-tree inconsistencies.", "scorev2": "7.5", "scorev3": "0.0", "scorev4": "0.0", "modified": "2026-06-17T00:07:44.000", "vector": "NETWORK", "vectorString": "AV:N/AC:L/Au:N/C:P/I:P/A:P", "detail": "version-not-in-range" }, { "id": "CVE-2014-3179", "status": "Patched", "link": "https://nvd.nist.gov/vuln/detail/CVE-2014-3179", "summary": "Multiple unspecified vulnerabilities in Google Chrome before 37.0.2062.120 allow attackers to cause a denial of service or possibly have other impact via unknown vectors.", "scorev2": "7.5", "scorev3": "0.0", "scorev4": "0.0", "modified": "2026-06-17T00:07:44.000", "vector": "NETWORK", "vectorString": "AV:N/AC:L/Au:N/C:P/I:P/A:P", "detail": "version-not-in-range" }, { "id": "CVE-2014-3187", "status": "Patched", "link": "https://nvd.nist.gov/vuln/detail/CVE-2014-3187", "summary": "Google Chrome before 37.0.2062.60 and 38.x before 38.0.2125.59 on iOS does not properly restrict processing of (1) facetime:// and (2) facetime-audio:// URLs, which allows remote attackers to obtain video and audio data from a device via a crafted web site.", "scorev2": "6.8", "scorev3": "0.0", "scorev4": "0.0", "modified": "2026-06-17T00:07:45.000", "vector": "NETWORK", "vectorString": "AV:N/AC:M/Au:N/C:P/I:P/A:P", "detail": "fixed-version: Fixed from version >37.0.2062.59" }, { "id": "CVE-2014-3188", "status": "Patched", "link": "https://nvd.nist.gov/vuln/detail/CVE-2014-3188", "summary": "Google Chrome before 38.0.2125.101 and Chrome OS before 38.0.2125.101 do not properly handle the interaction of IPC and Google V8, which allows remote attackers to execute arbitrary code via vectors involving JSON data, related to improper parsing of an escaped index by ParseJsonObject in json-parser.h.", "scorev2": "10.0", "scorev3": "0.0", "scorev4": "0.0", "modified": "2026-06-17T00:07:45.000", "vector": "NETWORK", "vectorString": "AV:N/AC:L/Au:N/C:C/I:C/A:C", "detail": "fixed-version: Fixed from version >38.0.2125.7" }, { "id": "CVE-2014-3189", "status": "Patched", "link": "https://nvd.nist.gov/vuln/detail/CVE-2014-3189", "summary": "The chrome_pdf::CopyImage function in pdf/draw_utils.cc in the PDFium component in Google Chrome before 38.0.2125.101 does not properly validate image-data dimensions, which allows remote attackers to cause a denial of service (out-of-bounds read) or possibly have unspecified other impact via unknown vectors.", "scorev2": "7.5", "scorev3": "0.0", "scorev4": "0.0", "modified": "2026-06-17T00:07:45.000", "vector": "NETWORK", "vectorString": "AV:N/AC:L/Au:N/C:P/I:P/A:P", "detail": "fixed-version: Fixed from version >38.0.2125.7" }, { "id": "CVE-2014-3190", "status": "Patched", "link": "https://nvd.nist.gov/vuln/detail/CVE-2014-3190", "summary": "Use-after-free vulnerability in the Event::currentTarget function in core/events/Event.cpp in Blink, as used in Google Chrome before 38.0.2125.101, allows remote attackers to cause a denial of service (application crash) or possibly have unspecified other impact via crafted JavaScript code that accesses the path property of an Event object.", "scorev2": "7.5", "scorev3": "0.0", "scorev4": "0.0", "modified": "2026-06-17T00:07:45.000", "vector": "NETWORK", "vectorString": "AV:N/AC:L/Au:N/C:P/I:P/A:P", "detail": "fixed-version: Fixed from version >38.0.2125.7" }, { "id": "CVE-2014-3191", "status": "Patched", "link": "https://nvd.nist.gov/vuln/detail/CVE-2014-3191", "summary": "Use-after-free vulnerability in Blink, as used in Google Chrome before 38.0.2125.101, allows remote attackers to cause a denial of service or possibly have unspecified other impact via crafted JavaScript code that triggers a widget-position update that improperly interacts with the render tree, related to the FrameView::updateLayoutAndStyleForPainting function in core/frame/FrameView.cpp and the RenderLayerScrollableArea::setScrollOffset function in core/rendering/RenderLayerScrollableArea.cpp.", "scorev2": "7.5", "scorev3": "0.0", "scorev4": "0.0", "modified": "2026-06-17T00:07:46.000", "vector": "NETWORK", "vectorString": "AV:N/AC:L/Au:N/C:P/I:P/A:P", "detail": "fixed-version: Fixed from version >38.0.2125.7" }, { "id": "CVE-2014-3192", "status": "Patched", "link": "https://nvd.nist.gov/vuln/detail/CVE-2014-3192", "summary": "Use-after-free vulnerability in the ProcessingInstruction::setXSLStyleSheet function in core/dom/ProcessingInstruction.cpp in the DOM implementation in Blink, as used in Google Chrome before 38.0.2125.101, allows remote attackers to cause a denial of service or possibly have unspecified other impact via unknown vectors.", "scorev2": "7.5", "scorev3": "0.0", "scorev4": "0.0", "modified": "2026-06-17T00:07:46.000", "vector": "NETWORK", "vectorString": "AV:N/AC:L/Au:N/C:P/I:P/A:P", "detail": "fixed-version: Fixed from version >38.0.2125.7" }, { "id": "CVE-2014-3193", "status": "Patched", "link": "https://nvd.nist.gov/vuln/detail/CVE-2014-3193", "summary": "The SessionService::GetLastSession function in browser/sessions/session_service.cc in Google Chrome before 38.0.2125.101 allows remote attackers to cause a denial of service (use-after-free) or possibly have unspecified other impact via vectors that leverage \"type confusion\" for callback processing.", "scorev2": "7.5", "scorev3": "0.0", "scorev4": "0.0", "modified": "2026-06-17T00:07:46.000", "vector": "NETWORK", "vectorString": "AV:N/AC:L/Au:N/C:P/I:P/A:P", "detail": "fixed-version: Fixed from version >38.0.2125.7" }, { "id": "CVE-2014-3194", "status": "Patched", "link": "https://nvd.nist.gov/vuln/detail/CVE-2014-3194", "summary": "Use-after-free vulnerability in the Web Workers implementation in Google Chrome before 38.0.2125.101 allows remote attackers to cause a denial of service or possibly have unspecified other impact via unknown vectors.", "scorev2": "7.5", "scorev3": "0.0", "scorev4": "0.0", "modified": "2026-06-17T00:07:46.000", "vector": "NETWORK", "vectorString": "AV:N/AC:L/Au:N/C:P/I:P/A:P", "detail": "fixed-version: Fixed from version >38.0.2125.7" }, { "id": "CVE-2014-3195", "status": "Patched", "link": "https://nvd.nist.gov/vuln/detail/CVE-2014-3195", "summary": "Google V8, as used in Google Chrome before 38.0.2125.101, does not properly track JavaScript heap-memory allocations as allocations of uninitialized memory and does not properly concatenate arrays of double-precision floating-point numbers, which allows remote attackers to obtain sensitive information via crafted JavaScript code, related to the PagedSpace::AllocateRaw and NewSpace::AllocateRaw functions in heap/spaces-inl.h, the LargeObjectSpace::AllocateRaw function in heap/spaces.cc, and the Runtime_ArrayConcat function in runtime.cc.", "scorev2": "5.0", "scorev3": "0.0", "scorev4": "0.0", "modified": "2026-06-17T00:07:46.000", "vector": "NETWORK", "vectorString": "AV:N/AC:L/Au:N/C:P/I:N/A:N", "detail": "fixed-version: Fixed from version >38.0.2125.7" }, { "id": "CVE-2014-3196", "status": "Patched", "link": "https://nvd.nist.gov/vuln/detail/CVE-2014-3196", "summary": "base/memory/shared_memory_win.cc in Google Chrome before 38.0.2125.101 on Windows does not properly implement read-only restrictions on shared memory, which allows attackers to bypass a sandbox protection mechanism via unspecified vectors.", "scorev2": "7.5", "scorev3": "0.0", "scorev4": "0.0", "modified": "2026-06-17T00:07:46.000", "vector": "NETWORK", "vectorString": "AV:N/AC:L/Au:N/C:P/I:P/A:P", "detail": "fixed-version: Fixed from version >38.0.2125.7" }, { "id": "CVE-2014-3197", "status": "Patched", "link": "https://nvd.nist.gov/vuln/detail/CVE-2014-3197", "summary": "The NavigationScheduler::schedulePageBlock function in core/loader/NavigationScheduler.cpp in Blink, as used in Google Chrome before 38.0.2125.101, does not properly provide substitute data for pages blocked by the XSS auditor, which allows remote attackers to obtain sensitive information via a crafted web site.", "scorev2": "5.0", "scorev3": "0.0", "scorev4": "0.0", "modified": "2026-06-17T00:07:46.000", "vector": "NETWORK", "vectorString": "AV:N/AC:L/Au:N/C:P/I:N/A:N", "detail": "fixed-version: Fixed from version >38.0.2125.7" }, { "id": "CVE-2014-3198", "status": "Patched", "link": "https://nvd.nist.gov/vuln/detail/CVE-2014-3198", "summary": "The Instance::HandleInputEvent function in pdf/instance.cc in the PDFium component in Google Chrome before 38.0.2125.101 interprets a certain -1 value as an index instead of a no-visible-page error code, which allows remote attackers to cause a denial of service (out-of-bounds read) via unspecified vectors.", "scorev2": "5.0", "scorev3": "0.0", "scorev4": "0.0", "modified": "2026-06-17T00:07:46.000", "vector": "NETWORK", "vectorString": "AV:N/AC:L/Au:N/C:N/I:N/A:P", "detail": "fixed-version: Fixed from version >38.0.2125.7" }, { "id": "CVE-2014-3199", "status": "Patched", "link": "https://nvd.nist.gov/vuln/detail/CVE-2014-3199", "summary": "The wrap function in bindings/core/v8/custom/V8EventCustom.cpp in the V8 bindings in Blink, as used in Google Chrome before 38.0.2125.101, has an erroneous fallback outcome for wrapper-selection failures, which allows remote attackers to cause a denial of service via vectors that trigger stopping a worker process that had been handling an Event object.", "scorev2": "5.0", "scorev3": "0.0", "scorev4": "0.0", "modified": "2026-06-17T00:07:46.000", "vector": "NETWORK", "vectorString": "AV:N/AC:L/Au:N/C:N/I:N/A:P", "detail": "fixed-version: Fixed from version >38.0.2125.7" }, { "id": "CVE-2014-3200", "status": "Patched", "link": "https://nvd.nist.gov/vuln/detail/CVE-2014-3200", "summary": "Multiple unspecified vulnerabilities in Google Chrome before 38.0.2125.101 allow attackers to cause a denial of service or possibly have other impact via unknown vectors.", "scorev2": "7.5", "scorev3": "0.0", "scorev4": "0.0", "modified": "2026-06-17T00:07:47.000", "vector": "NETWORK", "vectorString": "AV:N/AC:L/Au:N/C:P/I:P/A:P", "detail": "fixed-version: Fixed from version >38.0.2125.7" }, { "id": "CVE-2014-3201", "status": "Patched", "link": "https://nvd.nist.gov/vuln/detail/CVE-2014-3201", "summary": "core/rendering/compositing/RenderLayerCompositor.cpp in Blink, as used in Google Chrome before 38.0.2125.102 on Android, does not properly handle a certain IFRAME overflow condition, which allows remote attackers to spoof content via a crafted web site that interferes with the scrollbar.", "scorev2": "5.0", "scorev3": "0.0", "scorev4": "0.0", "modified": "2026-06-17T00:07:47.000", "vector": "NETWORK", "vectorString": "AV:N/AC:L/Au:N/C:N/I:P/A:N", "detail": "fixed-version: Fixed from version >38.0.2125.101" }, { "id": "CVE-2014-3803", "status": "Patched", "link": "https://nvd.nist.gov/vuln/detail/CVE-2014-3803", "summary": "The SpeechInput feature in Blink, as used in Google Chrome before 35.0.1916.114, allows remote attackers to enable microphone access and obtain speech-recognition text without indication via an INPUT element with a -x-webkit-speech attribute.", "scorev2": "4.3", "scorev3": "0.0", "scorev4": "0.0", "modified": "2026-06-17T00:08:54.000", "vector": "NETWORK", "vectorString": "AV:N/AC:M/Au:N/C:P/I:N/A:N", "detail": "fixed-version: Fixed from version >35.0.1916.113" }, { "id": "CVE-2014-7899", "status": "Patched", "link": "https://nvd.nist.gov/vuln/detail/CVE-2014-7899", "summary": "Google Chrome before 38.0.2125.101 allows remote attackers to spoof the address bar by placing a blob: substring at the beginning of the URL, followed by the original URI scheme and a long username string.", "scorev2": "5.0", "scorev3": "0.0", "scorev4": "0.0", "modified": "2026-06-17T00:15:54.000", "vector": "NETWORK", "vectorString": "AV:N/AC:L/Au:N/C:N/I:P/A:N", "detail": "fixed-version: Fixed from version >38.0.2125.7" }, { "id": "CVE-2014-7900", "status": "Patched", "link": "https://nvd.nist.gov/vuln/detail/CVE-2014-7900", "summary": "Use-after-free vulnerability in the CPDF_Parser::IsLinearizedFile function in fpdfapi/fpdf_parser/fpdf_parser_parser.cpp in PDFium, as used in Google Chrome before 39.0.2171.65, allows remote attackers to cause a denial of service or possibly have unspecified other impact via a crafted PDF document.", "scorev2": "7.5", "scorev3": "0.0", "scorev4": "0.0", "modified": "2026-06-17T00:15:54.000", "vector": "NETWORK", "vectorString": "AV:N/AC:L/Au:N/C:P/I:P/A:P", "detail": "fixed-version: Fixed from version >39.0.2171.45" }, { "id": "CVE-2014-7901", "status": "Patched", "link": "https://nvd.nist.gov/vuln/detail/CVE-2014-7901", "summary": "Integer overflow in the opj_t2_read_packet_data function in fxcodec/fx_libopenjpeg/libopenjpeg20/t2.c in OpenJPEG in PDFium, as used in Google Chrome before 39.0.2171.65, allows remote attackers to cause a denial of service or possibly have unspecified other impact via a long segment in a JPEG image.", "scorev2": "7.5", "scorev3": "0.0", "scorev4": "0.0", "modified": "2026-06-17T00:15:54.000", "vector": "NETWORK", "vectorString": "AV:N/AC:L/Au:N/C:P/I:P/A:P", "detail": "fixed-version: Fixed from version >39.0.2171.45" }, { "id": "CVE-2014-7902", "status": "Patched", "link": "https://nvd.nist.gov/vuln/detail/CVE-2014-7902", "summary": "Use-after-free vulnerability in PDFium, as used in Google Chrome before 39.0.2171.65, allows remote attackers to cause a denial of service or possibly have unspecified other impact via a crafted PDF document.", "scorev2": "7.5", "scorev3": "0.0", "scorev4": "0.0", "modified": "2026-06-17T00:15:54.000", "vector": "NETWORK", "vectorString": "AV:N/AC:L/Au:N/C:P/I:P/A:P", "detail": "version-not-in-range" }, { "id": "CVE-2014-7903", "status": "Patched", "link": "https://nvd.nist.gov/vuln/detail/CVE-2014-7903", "summary": "Buffer overflow in OpenJPEG before r2911 in PDFium, as used in Google Chrome before 39.0.2171.65, allows remote attackers to cause a denial of service or possibly have unspecified other impact via a crafted JPEG image.", "scorev2": "7.5", "scorev3": "0.0", "scorev4": "0.0", "modified": "2026-06-17T00:15:54.000", "vector": "NETWORK", "vectorString": "AV:N/AC:L/Au:N/C:P/I:P/A:P", "detail": "fixed-version: Fixed from version >39.0.2171.45" }, { "id": "CVE-2014-7904", "status": "Patched", "link": "https://nvd.nist.gov/vuln/detail/CVE-2014-7904", "summary": "Buffer overflow in Skia, as used in Google Chrome before 39.0.2171.65, allows remote attackers to cause a denial of service or possibly have unspecified other impact via unknown vectors.", "scorev2": "7.5", "scorev3": "0.0", "scorev4": "0.0", "modified": "2026-06-17T00:15:54.000", "vector": "NETWORK", "vectorString": "AV:N/AC:L/Au:N/C:P/I:P/A:P", "detail": "fixed-version: Fixed from version >39.0.2171.45" }, { "id": "CVE-2014-7905", "status": "Patched", "link": "https://nvd.nist.gov/vuln/detail/CVE-2014-7905", "summary": "Google Chrome before 39.0.2171.65 on Android does not prevent navigation to a URL in cases where an intent for the URL lacks CATEGORY_BROWSABLE, which allows remote attackers to bypass intended access restrictions via a crafted web site.", "scorev2": "5.0", "scorev3": "0.0", "scorev4": "0.0", "modified": "2026-06-17T00:15:55.000", "vector": "NETWORK", "vectorString": "AV:N/AC:L/Au:N/C:N/I:P/A:N", "detail": "fixed-version: Fixed from version >39.0.2171.45" }, { "id": "CVE-2014-7906", "status": "Patched", "link": "https://nvd.nist.gov/vuln/detail/CVE-2014-7906", "summary": "Use-after-free vulnerability in the Pepper plugins in Google Chrome before 39.0.2171.65 allows remote attackers to cause a denial of service or possibly have unspecified other impact via crafted Flash content that triggers an attempted PepperMediaDeviceManager access outside of the object's lifetime.", "scorev2": "7.5", "scorev3": "0.0", "scorev4": "0.0", "modified": "2026-06-17T00:15:55.000", "vector": "NETWORK", "vectorString": "AV:N/AC:L/Au:N/C:P/I:P/A:P", "detail": "fixed-version: Fixed from version >39.0.2171.45" }, { "id": "CVE-2014-7907", "status": "Patched", "link": "https://nvd.nist.gov/vuln/detail/CVE-2014-7907", "summary": "Multiple use-after-free vulnerabilities in modules/screen_orientation/ScreenOrientationController.cpp in Blink, as used in Google Chrome before 39.0.2171.65, allow remote attackers to cause a denial of service or possibly have unspecified other impact via vectors that trigger improper handling of a detached frame, related to the (1) lock and (2) unlock methods.", "scorev2": "7.5", "scorev3": "0.0", "scorev4": "0.0", "modified": "2026-06-17T00:15:55.000", "vector": "NETWORK", "vectorString": "AV:N/AC:L/Au:N/C:P/I:P/A:P", "detail": "fixed-version: Fixed from version >39.0.2171.45" }, { "id": "CVE-2014-7908", "status": "Patched", "link": "https://nvd.nist.gov/vuln/detail/CVE-2014-7908", "summary": "Multiple integer overflows in the CheckMov function in media/base/container_names.cc in Google Chrome before 39.0.2171.65 allow remote attackers to cause a denial of service or possibly have unspecified other impact via a large atom in (1) MPEG-4 or (2) QuickTime .mov data.", "scorev2": "7.5", "scorev3": "0.0", "scorev4": "0.0", "modified": "2026-06-17T00:15:55.000", "vector": "NETWORK", "vectorString": "AV:N/AC:L/Au:N/C:P/I:P/A:P", "detail": "fixed-version: Fixed from version >39.0.2171.45" }, { "id": "CVE-2014-7909", "status": "Patched", "link": "https://nvd.nist.gov/vuln/detail/CVE-2014-7909", "summary": "effects/SkDashPathEffect.cpp in Skia, as used in Google Chrome before 39.0.2171.65, computes a hash key using uninitialized integer values, which might allow remote attackers to cause a denial of service by rendering crafted data.", "scorev2": "5.0", "scorev3": "0.0", "scorev4": "0.0", "modified": "2026-06-17T00:15:55.000", "vector": "NETWORK", "vectorString": "AV:N/AC:L/Au:N/C:N/I:N/A:P", "detail": "fixed-version: Fixed from version >39.0.2171.45" }, { "id": "CVE-2014-7910", "status": "Patched", "link": "https://nvd.nist.gov/vuln/detail/CVE-2014-7910", "summary": "Multiple unspecified vulnerabilities in Google Chrome before 39.0.2171.65 allow attackers to cause a denial of service or possibly have other impact via unknown vectors.", "scorev2": "7.5", "scorev3": "0.0", "scorev4": "0.0", "modified": "2026-06-17T00:15:55.000", "vector": "NETWORK", "vectorString": "AV:N/AC:L/Au:N/C:P/I:P/A:P", "detail": "fixed-version: Fixed from version >39.0.2171.45" }, { "id": "CVE-2014-7923", "status": "Patched", "link": "https://nvd.nist.gov/vuln/detail/CVE-2014-7923", "summary": "The Regular Expressions package in International Components for Unicode (ICU) 52 before SVN revision 292944, as used in Google Chrome before 40.0.2214.91, allows remote attackers to cause a denial of service (memory corruption) or possibly have unspecified other impact via vectors related to a look-behind expression.", "scorev2": "7.5", "scorev3": "0.0", "scorev4": "0.0", "modified": "2026-06-17T00:15:57.000", "vector": "NETWORK", "vectorString": "AV:N/AC:L/Au:N/C:P/I:P/A:P", "detail": "fixed-version: Fixed from version >40.0.2214.85" }, { "id": "CVE-2014-7924", "status": "Patched", "link": "https://nvd.nist.gov/vuln/detail/CVE-2014-7924", "summary": "Use-after-free vulnerability in the IndexedDB implementation in Google Chrome before 40.0.2214.91 allows remote attackers to cause a denial of service or possibly have unspecified other impact by triggering duplicate BLOB references, related to content/browser/indexed_db/indexed_db_callbacks.cc and content/browser/indexed_db/indexed_db_dispatcher_host.cc.", "scorev2": "5.0", "scorev3": "0.0", "scorev4": "0.0", "modified": "2026-06-17T00:15:57.000", "vector": "NETWORK", "vectorString": "AV:N/AC:L/Au:N/C:N/I:N/A:P", "detail": "fixed-version: Fixed from version >40.0.2214.85" }, { "id": "CVE-2014-7925", "status": "Patched", "link": "https://nvd.nist.gov/vuln/detail/CVE-2014-7925", "summary": "Use-after-free vulnerability in the WebAudio implementation in Blink, as used in Google Chrome before 40.0.2214.91, allows remote attackers to cause a denial of service or possibly have unspecified other impact via vectors that trigger an audio-rendering thread in which AudioNode data is improperly maintained.", "scorev2": "7.5", "scorev3": "0.0", "scorev4": "0.0", "modified": "2026-06-17T00:15:57.000", "vector": "NETWORK", "vectorString": "AV:N/AC:L/Au:N/C:P/I:P/A:P", "detail": "fixed-version: Fixed from version >40.0.2214.85" }, { "id": "CVE-2014-7926", "status": "Patched", "link": "https://nvd.nist.gov/vuln/detail/CVE-2014-7926", "summary": "The Regular Expressions package in International Components for Unicode (ICU) 52 before SVN revision 292944, as used in Google Chrome before 40.0.2214.91, allows remote attackers to cause a denial of service (memory corruption) or possibly have unspecified other impact via vectors related to a zero-length quantifier.", "scorev2": "7.5", "scorev3": "0.0", "scorev4": "0.0", "modified": "2026-06-17T00:15:57.000", "vector": "NETWORK", "vectorString": "AV:N/AC:L/Au:N/C:P/I:P/A:P", "detail": "fixed-version: Fixed from version >40.0.2214.85" }, { "id": "CVE-2014-7927", "status": "Patched", "link": "https://nvd.nist.gov/vuln/detail/CVE-2014-7927", "summary": "The SimplifiedLowering::DoLoadBuffer function in compiler/simplified-lowering.cc in Google V8, as used in Google Chrome before 40.0.2214.91, does not properly choose an integer data type, which allows remote attackers to cause a denial of service (memory corruption) or possibly have unspecified other impact via crafted JavaScript code.", "scorev2": "7.5", "scorev3": "0.0", "scorev4": "0.0", "modified": "2026-06-17T00:15:57.000", "vector": "NETWORK", "vectorString": "AV:N/AC:L/Au:N/C:P/I:P/A:P", "detail": "fixed-version: Fixed from version >40.0.2214.85" }, { "id": "CVE-2014-7928", "status": "Patched", "link": "https://nvd.nist.gov/vuln/detail/CVE-2014-7928", "summary": "hydrogen.cc in Google V8, as used Google Chrome before 40.0.2214.91, does not properly handle arrays with holes, which allows remote attackers to cause a denial of service (memory corruption) or possibly have unspecified other impact via crafted JavaScript code that triggers an array copy.", "scorev2": "7.5", "scorev3": "0.0", "scorev4": "0.0", "modified": "2026-06-17T00:15:57.000", "vector": "NETWORK", "vectorString": "AV:N/AC:L/Au:N/C:P/I:P/A:P", "detail": "fixed-version: Fixed from version >40.0.2214.85" }, { "id": "CVE-2014-7929", "status": "Patched", "link": "https://nvd.nist.gov/vuln/detail/CVE-2014-7929", "summary": "Use-after-free vulnerability in the HTMLScriptElement::didMoveToNewDocument function in core/html/HTMLScriptElement.cpp in the DOM implementation in Blink, as used in Google Chrome before 40.0.2214.91, allows remote attackers to cause a denial of service or possibly have unspecified other impact via vectors involving movement of a SCRIPT element across documents.", "scorev2": "7.5", "scorev3": "0.0", "scorev4": "0.0", "modified": "2026-06-17T00:15:57.000", "vector": "NETWORK", "vectorString": "AV:N/AC:L/Au:N/C:P/I:P/A:P", "detail": "fixed-version: Fixed from version >40.0.2214.85" }, { "id": "CVE-2014-7930", "status": "Patched", "link": "https://nvd.nist.gov/vuln/detail/CVE-2014-7930", "summary": "Use-after-free vulnerability in core/events/TreeScopeEventContext.cpp in the DOM implementation in Blink, as used in Google Chrome before 40.0.2214.91, allows remote attackers to cause a denial of service or possibly have unspecified other impact via crafted JavaScript code that triggers improper maintenance of TreeScope data.", "scorev2": "7.5", "scorev3": "0.0", "scorev4": "0.0", "modified": "2026-06-17T00:15:58.000", "vector": "NETWORK", "vectorString": "AV:N/AC:L/Au:N/C:P/I:P/A:P", "detail": "fixed-version: Fixed from version >40.0.2214.85" }, { "id": "CVE-2014-7931", "status": "Patched", "link": "https://nvd.nist.gov/vuln/detail/CVE-2014-7931", "summary": "factory.cc in Google V8, as used in Google Chrome before 40.0.2214.91, allows remote attackers to cause a denial of service (memory corruption) or possibly have unspecified other impact via crafted JavaScript code that triggers improper maintenance of backing-store pointers.", "scorev2": "7.5", "scorev3": "0.0", "scorev4": "0.0", "modified": "2026-06-17T00:15:58.000", "vector": "NETWORK", "vectorString": "AV:N/AC:L/Au:N/C:P/I:P/A:P", "detail": "fixed-version: Fixed from version >40.0.2214.85" }, { "id": "CVE-2014-7932", "status": "Patched", "link": "https://nvd.nist.gov/vuln/detail/CVE-2014-7932", "summary": "Use-after-free vulnerability in the Element::detach function in core/dom/Element.cpp in the DOM implementation in Blink, as used in Google Chrome before 40.0.2214.91, allows remote attackers to cause a denial of service or possibly have unspecified other impact via vectors involving pending updates of detached elements.", "scorev2": "7.5", "scorev3": "0.0", "scorev4": "0.0", "modified": "2026-06-17T00:15:58.000", "vector": "NETWORK", "vectorString": "AV:N/AC:L/Au:N/C:P/I:P/A:P", "detail": "fixed-version: Fixed from version >40.0.2214.85" }, { "id": "CVE-2014-7933", "status": "Patched", "link": "https://nvd.nist.gov/vuln/detail/CVE-2014-7933", "summary": "Use-after-free vulnerability in the matroska_read_seek function in libavformat/matroskadec.c in FFmpeg before 2.5.1, as used in Google Chrome before 40.0.2214.91, allows remote attackers to cause a denial of service or possibly have unspecified other impact via a crafted Matroska file that triggers improper maintenance of tracks data.", "scorev2": "7.5", "scorev3": "0.0", "scorev4": "0.0", "modified": "2026-06-17T00:15:58.000", "vector": "NETWORK", "vectorString": "AV:N/AC:L/Au:N/C:P/I:P/A:P", "detail": "fixed-version: Fixed from version >40.0.2214.85" }, { "id": "CVE-2014-7934", "status": "Patched", "link": "https://nvd.nist.gov/vuln/detail/CVE-2014-7934", "summary": "Use-after-free vulnerability in the DOM implementation in Blink, as used in Google Chrome before 40.0.2214.91, allows remote attackers to cause a denial of service or possibly have unspecified other impact via vectors related to unexpected absence of document data structures.", "scorev2": "7.5", "scorev3": "0.0", "scorev4": "0.0", "modified": "2026-06-17T00:15:58.000", "vector": "NETWORK", "vectorString": "AV:N/AC:L/Au:N/C:P/I:P/A:P", "detail": "fixed-version: Fixed from version >40.0.2214.85" }, { "id": "CVE-2014-7935", "status": "Patched", "link": "https://nvd.nist.gov/vuln/detail/CVE-2014-7935", "summary": "Use-after-free vulnerability in browser/speech/tts_message_filter.cc in the Speech implementation in Google Chrome before 40.0.2214.91 allows remote attackers to cause a denial of service or possibly have unspecified other impact via vectors involving utterances from a closed tab.", "scorev2": "7.5", "scorev3": "0.0", "scorev4": "0.0", "modified": "2026-06-17T00:15:58.000", "vector": "NETWORK", "vectorString": "AV:N/AC:L/Au:N/C:P/I:P/A:P", "detail": "fixed-version: Fixed from version >40.0.2214.85" }, { "id": "CVE-2014-7936", "status": "Patched", "link": "https://nvd.nist.gov/vuln/detail/CVE-2014-7936", "summary": "Use-after-free vulnerability in the ZoomBubbleView::Close function in browser/ui/views/location_bar/zoom_bubble_view.cc in the Views implementation in Google Chrome before 40.0.2214.91 allows remote attackers to cause a denial of service or possibly have unspecified other impact via a crafted document that triggers improper maintenance of a zoom bubble.", "scorev2": "6.8", "scorev3": "0.0", "scorev4": "0.0", "modified": "2026-06-17T00:15:58.000", "vector": "NETWORK", "vectorString": "AV:N/AC:M/Au:N/C:P/I:P/A:P", "detail": "fixed-version: Fixed from version >40.0.2214.85" }, { "id": "CVE-2014-7937", "status": "Patched", "link": "https://nvd.nist.gov/vuln/detail/CVE-2014-7937", "summary": "Multiple off-by-one errors in libavcodec/vorbisdec.c in FFmpeg before 2.4.2, as used in Google Chrome before 40.0.2214.91, allow remote attackers to cause a denial of service (use-after-free) or possibly have unspecified other impact via crafted Vorbis I data.", "scorev2": "7.5", "scorev3": "0.0", "scorev4": "0.0", "modified": "2026-06-17T00:15:59.000", "vector": "NETWORK", "vectorString": "AV:N/AC:L/Au:N/C:P/I:P/A:P", "detail": "fixed-version: Fixed from version >40.0.2214.85" }, { "id": "CVE-2014-7938", "status": "Patched", "link": "https://nvd.nist.gov/vuln/detail/CVE-2014-7938", "summary": "The Fonts implementation in Google Chrome before 40.0.2214.91 allows remote attackers to cause a denial of service (memory corruption) or possibly have unspecified other impact via unknown vectors.", "scorev2": "7.5", "scorev3": "0.0", "scorev4": "0.0", "modified": "2026-06-17T00:15:59.000", "vector": "NETWORK", "vectorString": "AV:N/AC:L/Au:N/C:P/I:P/A:P", "detail": "fixed-version: Fixed from version >40.0.2214.85" }, { "id": "CVE-2014-7939", "status": "Patched", "link": "https://nvd.nist.gov/vuln/detail/CVE-2014-7939", "summary": "Google Chrome before 40.0.2214.91, when the Harmony proxy in Google V8 is enabled, allows remote attackers to bypass the Same Origin Policy via crafted JavaScript code with Proxy.create and console.log calls, related to HTTP responses that lack an \"X-Content-Type-Options: nosniff\" header.", "scorev2": "4.3", "scorev3": "0.0", "scorev4": "0.0", "modified": "2026-06-17T00:15:59.000", "vector": "NETWORK", "vectorString": "AV:N/AC:M/Au:N/C:N/I:P/A:N", "detail": "fixed-version: Fixed from version >40.0.2214.85" }, { "id": "CVE-2014-7940", "status": "Patched", "link": "https://nvd.nist.gov/vuln/detail/CVE-2014-7940", "summary": "The collator implementation in i18n/ucol.cpp in International Components for Unicode (ICU) 52 through SVN revision 293126, as used in Google Chrome before 40.0.2214.91, does not initialize memory for a data structure, which allows remote attackers to cause a denial of service or possibly have unspecified other impact via a crafted character sequence.", "scorev2": "7.5", "scorev3": "0.0", "scorev4": "0.0", "modified": "2026-06-17T00:15:59.000", "vector": "NETWORK", "vectorString": "AV:N/AC:L/Au:N/C:P/I:P/A:P", "detail": "fixed-version: Fixed from version >40.0.2214.85" }, { "id": "CVE-2014-7941", "status": "Patched", "link": "https://nvd.nist.gov/vuln/detail/CVE-2014-7941", "summary": "The SelectionOwner::ProcessTarget function in ui/base/x/selection_owner.cc in the UI implementation in Google Chrome before 40.0.2214.91 uses an incorrect data type for a certain length value, which allows remote attackers to cause a denial of service (out-of-bounds read) via crafted X11 data.", "scorev2": "5.0", "scorev3": "0.0", "scorev4": "0.0", "modified": "2026-06-17T00:15:59.000", "vector": "NETWORK", "vectorString": "AV:N/AC:L/Au:N/C:N/I:N/A:P", "detail": "fixed-version: Fixed from version >40.0.2214.85" }, { "id": "CVE-2014-7942", "status": "Patched", "link": "https://nvd.nist.gov/vuln/detail/CVE-2014-7942", "summary": "The Fonts implementation in Google Chrome before 40.0.2214.91 does not initialize memory for a data structure, which allows remote attackers to cause a denial of service or possibly have unspecified other impact via unknown vectors.", "scorev2": "7.5", "scorev3": "0.0", "scorev4": "0.0", "modified": "2026-06-17T00:15:59.000", "vector": "NETWORK", "vectorString": "AV:N/AC:L/Au:N/C:P/I:P/A:P", "detail": "fixed-version: Fixed from version >40.0.2214.85" }, { "id": "CVE-2014-7943", "status": "Patched", "link": "https://nvd.nist.gov/vuln/detail/CVE-2014-7943", "summary": "Skia, as used in Google Chrome before 40.0.2214.91, allows remote attackers to cause a denial of service (out-of-bounds read) via unspecified vectors.", "scorev2": "5.0", "scorev3": "0.0", "scorev4": "0.0", "modified": "2026-06-17T00:15:59.000", "vector": "NETWORK", "vectorString": "AV:N/AC:L/Au:N/C:N/I:N/A:P", "detail": "fixed-version: Fixed from version >40.0.2214.85" }, { "id": "CVE-2014-7944", "status": "Patched", "link": "https://nvd.nist.gov/vuln/detail/CVE-2014-7944", "summary": "The sycc422_to_rgb function in fxcodec/codec/fx_codec_jpx_opj.cpp in PDFium, as used in Google Chrome before 40.0.2214.91, does not properly handle odd values of image width, which allows remote attackers to cause a denial of service (out-of-bounds read) via a crafted PDF document.", "scorev2": "5.0", "scorev3": "0.0", "scorev4": "0.0", "modified": "2026-06-17T00:15:59.000", "vector": "NETWORK", "vectorString": "AV:N/AC:L/Au:N/C:N/I:N/A:P", "detail": "fixed-version: Fixed from version >40.0.2214.85" }, { "id": "CVE-2014-7945", "status": "Patched", "link": "https://nvd.nist.gov/vuln/detail/CVE-2014-7945", "summary": "OpenJPEG before r2908, as used in PDFium in Google Chrome before 40.0.2214.91, allows remote attackers to cause a denial of service (out-of-bounds read) via a crafted PDF document, related to j2k.c, jp2.c, and t2.c.", "scorev2": "5.0", "scorev3": "0.0", "scorev4": "0.0", "modified": "2026-06-17T00:16:00.000", "vector": "NETWORK", "vectorString": "AV:N/AC:L/Au:N/C:N/I:N/A:P", "detail": "fixed-version: Fixed from version >40.0.2214.85" }, { "id": "CVE-2014-7946", "status": "Patched", "link": "https://nvd.nist.gov/vuln/detail/CVE-2014-7946", "summary": "The RenderTable::simplifiedNormalFlowLayout function in core/rendering/RenderTable.cpp in Blink, as used in Google Chrome before 40.0.2214.91, skips captions during table layout in certain situations, which allows remote attackers to cause a denial of service (out-of-bounds read) via unspecified vectors related to the Fonts implementation.", "scorev2": "5.0", "scorev3": "0.0", "scorev4": "0.0", "modified": "2026-06-17T00:16:00.000", "vector": "NETWORK", "vectorString": "AV:N/AC:L/Au:N/C:N/I:N/A:P", "detail": "fixed-version: Fixed from version >40.0.2214.85" }, { "id": "CVE-2014-7947", "status": "Patched", "link": "https://nvd.nist.gov/vuln/detail/CVE-2014-7947", "summary": "OpenJPEG before r2944, as used in PDFium in Google Chrome before 40.0.2214.91, allows remote attackers to cause a denial of service (out-of-bounds read) via a crafted PDF document, related to j2k.c, jp2.c, pi.c, t1.c, t2.c, and tcd.c.", "scorev2": "5.0", "scorev3": "0.0", "scorev4": "0.0", "modified": "2026-06-17T00:16:00.000", "vector": "NETWORK", "vectorString": "AV:N/AC:L/Au:N/C:N/I:N/A:P", "detail": "fixed-version: Fixed from version >40.0.2214.85" }, { "id": "CVE-2014-7948", "status": "Patched", "link": "https://nvd.nist.gov/vuln/detail/CVE-2014-7948", "summary": "The AppCacheUpdateJob::URLFetcher::OnResponseStarted function in content/browser/appcache/appcache_update_job.cc in Google Chrome before 40.0.2214.91 proceeds with AppCache caching for SSL sessions even if there is an X.509 certificate error, which allows man-in-the-middle attackers to spoof HTML5 application content via a crafted certificate.", "scorev2": "4.3", "scorev3": "0.0", "scorev4": "0.0", "modified": "2026-06-17T00:16:00.000", "vector": "NETWORK", "vectorString": "AV:N/AC:M/Au:N/C:N/I:P/A:N", "detail": "fixed-version: Fixed from version >40.0.2214.85" }, { "id": "CVE-2014-7967", "status": "Patched", "link": "https://nvd.nist.gov/vuln/detail/CVE-2014-7967", "summary": "Multiple unspecified vulnerabilities in Google V8 before 3.28.71.15, as used in Google Chrome before 38.0.2125.101, allow attackers to cause a denial of service or possibly have other impact via unknown vectors.", "scorev2": "7.5", "scorev3": "0.0", "scorev4": "0.0", "modified": "2026-06-17T00:16:01.000", "vector": "NETWORK", "vectorString": "AV:N/AC:L/Au:N/C:P/I:P/A:P", "detail": "fixed-version: Fixed from version >38.0.2125.7" }, { "id": "CVE-2014-9646", "status": "Patched", "link": "https://nvd.nist.gov/vuln/detail/CVE-2014-9646", "summary": "Unquoted Windows search path vulnerability in the GoogleChromeDistribution::DoPostUninstallOperations function in installer/util/google_chrome_distribution.cc in the uninstall-survey feature in Google Chrome before 40.0.2214.91 allows local users to gain privileges via a Trojan horse program in the %SYSTEMDRIVE% directory, as demonstrated by program.exe, a different vulnerability than CVE-2015-1205.", "scorev2": "4.6", "scorev3": "0.0", "scorev4": "0.0", "modified": "2026-06-17T00:18:42.000", "vector": "LOCAL", "vectorString": "AV:L/AC:L/Au:N/C:P/I:P/A:P", "detail": "fixed-version: Fixed from version >40.0.2214.85" }, { "id": "CVE-2014-9647", "status": "Patched", "link": "https://nvd.nist.gov/vuln/detail/CVE-2014-9647", "summary": "Use-after-free vulnerability in PDFium, as used in Google Chrome before 40.0.2214.91, allows remote attackers to cause a denial of service or possibly have unspecified other impact via a crafted PDF document, related to fpdfsdk/src/fpdfview.cpp and fpdfsdk/src/fsdk_mgr.cpp, a different vulnerability than CVE-2015-1205.", "scorev2": "6.8", "scorev3": "0.0", "scorev4": "0.0", "modified": "2026-06-17T00:18:42.000", "vector": "NETWORK", "vectorString": "AV:N/AC:M/Au:N/C:P/I:P/A:P", "detail": "fixed-version: Fixed from version >40.0.2214.85" }, { "id": "CVE-2014-9648", "status": "Patched", "link": "https://nvd.nist.gov/vuln/detail/CVE-2014-9648", "summary": "components/navigation_interception/intercept_navigation_resource_throttle.cc in Google Chrome before 40.0.2214.91 on Android does not properly restrict use of intent: URLs to open an application after navigation to a web site, which allows remote attackers to cause a denial of service (loss of browser access to that site) via crafted JavaScript code, as demonstrated by pandora.com and the Pandora application, a different vulnerability than CVE-2015-1205.", "scorev2": "4.3", "scorev3": "0.0", "scorev4": "0.0", "modified": "2026-06-17T00:18:42.000", "vector": "NETWORK", "vectorString": "AV:N/AC:M/Au:N/C:N/I:N/A:P", "detail": "fixed-version: Fixed from version >40.0.2214.85" }, { "id": "CVE-2014-9654", "status": "Patched", "link": "https://nvd.nist.gov/vuln/detail/CVE-2014-9654", "summary": "The Regular Expressions package in International Components for Unicode (ICU) for C/C++ before 2014-12-03, as used in Google Chrome before 40.0.2214.91, calculates certain values without ensuring that they can be represented in a 24-bit field, which allows remote attackers to cause a denial of service (memory corruption) or possibly have unspecified other impact via a crafted string, a related issue to CVE-2014-7923.", "scorev2": "7.5", "scorev3": "9.8", "scorev4": "0.0", "modified": "2026-06-17T00:18:43.000", "vector": "NETWORK", "vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H", "detail": "fixed-version: Fixed from version >40.0.2214.85" }, { "id": "CVE-2014-9689", "status": "Patched", "link": "https://nvd.nist.gov/vuln/detail/CVE-2014-9689", "summary": "content/renderer/device_sensors/device_orientation_event_pump.cc in Google Chrome before 41.0.2272.76 does not properly restrict access to high-rate gyroscope data, which makes it easier for remote attackers to obtain speech signals from a device's physical environment via a crafted web site that listens for ondeviceorientation events, a different vulnerability than CVE-2015-1231.", "scorev2": "5.0", "scorev3": "0.0", "scorev4": "0.0", "modified": "2026-06-17T00:18:48.000", "vector": "NETWORK", "vectorString": "AV:N/AC:L/Au:N/C:P/I:N/A:N", "detail": "fixed-version: Fixed from version >40.0.2214.115" }, { "id": "CVE-2015-1205", "status": "Patched", "link": "https://nvd.nist.gov/vuln/detail/CVE-2015-1205", "summary": "Multiple unspecified vulnerabilities in Google Chrome before 40.0.2214.91 allow attackers to cause a denial of service or possibly have other impact via unknown vectors.", "scorev2": "7.5", "scorev3": "0.0", "scorev4": "0.0", "modified": "2026-06-17T00:21:56.000", "vector": "NETWORK", "vectorString": "AV:N/AC:L/Au:N/C:P/I:P/A:P", "detail": "fixed-version: Fixed from version >40.0.2214.94" }, { "id": "CVE-2015-1206", "status": "Patched", "link": "https://nvd.nist.gov/vuln/detail/CVE-2015-1206", "summary": "Heap-based buffer overflow in Google Chrome before M40 allows remote attackers to cause a denial of service (unpaged memory write and process crash) via a crafted MP4 file.", "scorev2": "4.3", "scorev3": "5.5", "scorev4": "0.0", "modified": "2026-06-17T00:21:57.000", "vector": "LOCAL", "vectorString": "CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H", "detail": "fixed-version: Fixed from version >41.0.2251.0" }, { "id": "CVE-2015-1207", "status": "Patched", "link": "https://nvd.nist.gov/vuln/detail/CVE-2015-1207", "summary": "Double-free vulnerability in libavformat/mov.c in FFMPEG in Google Chrome 41.0.2251.0 allows remote attackers to cause a denial of service (memory corruption and crash) via a crafted .m4a file.", "scorev2": "4.3", "scorev3": "6.5", "scorev4": "0.0", "modified": "2026-06-17T00:21:57.000", "vector": "NETWORK", "vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H", "detail": "version-not-in-range" }, { "id": "CVE-2015-1209", "status": "Patched", "link": "https://nvd.nist.gov/vuln/detail/CVE-2015-1209", "summary": "Use-after-free vulnerability in the VisibleSelection::nonBoundaryShadowTreeRootNode function in core/editing/VisibleSelection.cpp in the DOM implementation in Blink, as used in Google Chrome before 40.0.2214.111 on Windows, OS X, and Linux and before 40.0.2214.109 on Android, allows remote attackers to cause a denial of service or possibly have unspecified other impact via crafted JavaScript code that triggers improper handling of a shadow-root anchor.", "scorev2": "7.5", "scorev3": "0.0", "scorev4": "0.0", "modified": "2026-06-17T00:21:57.000", "vector": "NETWORK", "vectorString": "AV:N/AC:L/Au:N/C:P/I:P/A:P", "detail": "fixed-version: Fixed from version 40.0.2214.111" }, { "id": "CVE-2015-1210", "status": "Patched", "link": "https://nvd.nist.gov/vuln/detail/CVE-2015-1210", "summary": "The V8ThrowException::createDOMException function in bindings/core/v8/V8ThrowException.cpp in the V8 bindings in Blink, as used in Google Chrome before 40.0.2214.111 on Windows, OS X, and Linux and before 40.0.2214.109 on Android, does not properly consider frame access restrictions during the throwing of an exception, which allows remote attackers to bypass the Same Origin Policy via a crafted web site.", "scorev2": "5.0", "scorev3": "0.0", "scorev4": "0.0", "modified": "2026-06-17T00:21:57.000", "vector": "NETWORK", "vectorString": "AV:N/AC:L/Au:N/C:N/I:P/A:N", "detail": "fixed-version: Fixed from version 40.0.2214.111" }, { "id": "CVE-2015-1211", "status": "Patched", "link": "https://nvd.nist.gov/vuln/detail/CVE-2015-1211", "summary": "The OriginCanAccessServiceWorkers function in content/browser/service_worker/service_worker_dispatcher_host.cc in Google Chrome before 40.0.2214.111 on Windows, OS X, and Linux and before 40.0.2214.109 on Android does not properly restrict the URI scheme during a ServiceWorker registration, which allows remote attackers to gain privileges via a filesystem: URI.", "scorev2": "7.5", "scorev3": "0.0", "scorev4": "0.0", "modified": "2026-06-17T00:21:57.000", "vector": "NETWORK", "vectorString": "AV:N/AC:L/Au:N/C:P/I:P/A:P", "detail": "fixed-version: Fixed from version 40.0.2214.111" }, { "id": "CVE-2015-1212", "status": "Patched", "link": "https://nvd.nist.gov/vuln/detail/CVE-2015-1212", "summary": "Multiple unspecified vulnerabilities in Google Chrome before 40.0.2214.111 on Windows, OS X, and Linux and before 40.0.2214.109 on Android allow attackers to cause a denial of service or possibly have other impact via unknown vectors.", "scorev2": "7.5", "scorev3": "0.0", "scorev4": "0.0", "modified": "2026-06-17T00:21:57.000", "vector": "NETWORK", "vectorString": "AV:N/AC:L/Au:N/C:P/I:P/A:P", "detail": "fixed-version: Fixed from version 40.0.2214.111" }, { "id": "CVE-2015-1213", "status": "Patched", "link": "https://nvd.nist.gov/vuln/detail/CVE-2015-1213", "summary": "The SkBitmap::ReadRawPixels function in core/SkBitmap.cpp in the filters implementation in Skia, as used in Google Chrome before 41.0.2272.76, allows remote attackers to cause a denial of service or possibly have unspecified other impact via vectors that trigger an out-of-bounds write operation.", "scorev2": "7.5", "scorev3": "0.0", "scorev4": "0.0", "modified": "2026-06-17T00:21:58.000", "vector": "NETWORK", "vectorString": "AV:N/AC:L/Au:N/C:P/I:P/A:P", "detail": "fixed-version: Fixed from version >40.0.2214.115" }, { "id": "CVE-2015-1214", "status": "Patched", "link": "https://nvd.nist.gov/vuln/detail/CVE-2015-1214", "summary": "Integer overflow in the SkAutoSTArray implementation in include/core/SkTemplates.h in the filters implementation in Skia, as used in Google Chrome before 41.0.2272.76, allows remote attackers to cause a denial of service or possibly have unspecified other impact via vectors that trigger a reset action with a large count value, leading to an out-of-bounds write operation.", "scorev2": "7.5", "scorev3": "0.0", "scorev4": "0.0", "modified": "2026-06-17T00:21:58.000", "vector": "NETWORK", "vectorString": "AV:N/AC:L/Au:N/C:P/I:P/A:P", "detail": "fixed-version: Fixed from version >40.0.2214.115" }, { "id": "CVE-2015-1215", "status": "Patched", "link": "https://nvd.nist.gov/vuln/detail/CVE-2015-1215", "summary": "The filters implementation in Skia, as used in Google Chrome before 41.0.2272.76, allows remote attackers to cause a denial of service or possibly have unspecified other impact via vectors that trigger an out-of-bounds write operation.", "scorev2": "7.5", "scorev3": "0.0", "scorev4": "0.0", "modified": "2026-06-17T00:21:58.000", "vector": "NETWORK", "vectorString": "AV:N/AC:L/Au:N/C:P/I:P/A:P", "detail": "fixed-version: Fixed from version >40.0.2214.115" }, { "id": "CVE-2015-1216", "status": "Patched", "link": "https://nvd.nist.gov/vuln/detail/CVE-2015-1216", "summary": "Use-after-free vulnerability in the V8Window::namedPropertyGetterCustom function in bindings/core/v8/custom/V8WindowCustom.cpp in the V8 bindings in Blink, as used in Google Chrome before 41.0.2272.76, allows remote attackers to cause a denial of service or possibly have unspecified other impact via vectors that trigger a frame detachment.", "scorev2": "7.5", "scorev3": "0.0", "scorev4": "0.0", "modified": "2026-06-17T00:21:58.000", "vector": "NETWORK", "vectorString": "AV:N/AC:L/Au:N/C:P/I:P/A:P", "detail": "fixed-version: Fixed from version >40.0.2214.115" }, { "id": "CVE-2015-1217", "status": "Patched", "link": "https://nvd.nist.gov/vuln/detail/CVE-2015-1217", "summary": "The V8LazyEventListener::prepareListenerObject function in bindings/core/v8/V8LazyEventListener.cpp in the V8 bindings in Blink, as used in Google Chrome before 41.0.2272.76, does not properly compile listeners, which allows remote attackers to cause a denial of service or possibly have unspecified other impact via vectors that leverage \"type confusion.\"", "scorev2": "7.5", "scorev3": "0.0", "scorev4": "0.0", "modified": "2026-06-17T00:21:58.000", "vector": "NETWORK", "vectorString": "AV:N/AC:L/Au:N/C:P/I:P/A:P", "detail": "fixed-version: Fixed from version >40.0.2214.115" }, { "id": "CVE-2015-1218", "status": "Patched", "link": "https://nvd.nist.gov/vuln/detail/CVE-2015-1218", "summary": "Multiple use-after-free vulnerabilities in the DOM implementation in Blink, as used in Google Chrome before 41.0.2272.76, allow remote attackers to cause a denial of service or possibly have unspecified other impact via vectors that trigger movement of a SCRIPT element to different documents, related to (1) the HTMLScriptElement::didMoveToNewDocument function in core/html/HTMLScriptElement.cpp and (2) the SVGScriptElement::didMoveToNewDocument function in core/svg/SVGScriptElement.cpp.", "scorev2": "7.5", "scorev3": "0.0", "scorev4": "0.0", "modified": "2026-06-17T00:21:58.000", "vector": "NETWORK", "vectorString": "AV:N/AC:L/Au:N/C:P/I:P/A:P", "detail": "fixed-version: Fixed from version >40.0.2214.115" }, { "id": "CVE-2015-1219", "status": "Patched", "link": "https://nvd.nist.gov/vuln/detail/CVE-2015-1219", "summary": "Integer overflow in the SkMallocPixelRef::NewAllocate function in core/SkMallocPixelRef.cpp in Skia, as used in Google Chrome before 41.0.2272.76, allows remote attackers to cause a denial of service or possibly have unspecified other impact via vectors that trigger an attempted allocation of a large amount of memory during WebGL rendering.", "scorev2": "7.5", "scorev3": "0.0", "scorev4": "0.0", "modified": "2026-06-17T00:21:58.000", "vector": "NETWORK", "vectorString": "AV:N/AC:L/Au:N/C:P/I:P/A:P", "detail": "fixed-version: Fixed from version >40.0.2214.115" }, { "id": "CVE-2015-1220", "status": "Patched", "link": "https://nvd.nist.gov/vuln/detail/CVE-2015-1220", "summary": "Use-after-free vulnerability in the GIFImageReader::parseData function in platform/image-decoders/gif/GIFImageReader.cpp in Blink, as used in Google Chrome before 41.0.2272.76, allows remote attackers to cause a denial of service or possibly have unspecified other impact via a crafted frame size in a GIF image.", "scorev2": "6.8", "scorev3": "0.0", "scorev4": "0.0", "modified": "2026-06-17T00:21:58.000", "vector": "NETWORK", "vectorString": "AV:N/AC:M/Au:N/C:P/I:P/A:P", "detail": "fixed-version: Fixed from version >40.0.2214.115" }, { "id": "CVE-2015-1221", "status": "Patched", "link": "https://nvd.nist.gov/vuln/detail/CVE-2015-1221", "summary": "Use-after-free vulnerability in Blink, as used in Google Chrome before 41.0.2272.76, allows remote attackers to cause a denial of service or possibly have unspecified other impact by leveraging incorrect ordering of operations in the Web SQL Database thread relative to Blink's main thread, related to the shutdown function in web/WebKit.cpp.", "scorev2": "7.5", "scorev3": "0.0", "scorev4": "0.0", "modified": "2026-06-17T00:21:59.000", "vector": "NETWORK", "vectorString": "AV:N/AC:L/Au:N/C:P/I:P/A:P", "detail": "fixed-version: Fixed from version >40.0.2214.115" }, { "id": "CVE-2015-1222", "status": "Patched", "link": "https://nvd.nist.gov/vuln/detail/CVE-2015-1222", "summary": "Multiple use-after-free vulnerabilities in the ServiceWorkerScriptCacheMap implementation in content/browser/service_worker/service_worker_script_cache_map.cc in Google Chrome before 41.0.2272.76 allow remote attackers to cause a denial of service or possibly have unspecified other impact via vectors that trigger a ServiceWorkerContextWrapper::DeleteAndStartOver call, related to the NotifyStartedCaching and NotifyFinishedCaching functions.", "scorev2": "7.5", "scorev3": "0.0", "scorev4": "0.0", "modified": "2026-06-17T00:21:59.000", "vector": "NETWORK", "vectorString": "AV:N/AC:L/Au:N/C:P/I:P/A:P", "detail": "fixed-version: Fixed from version >40.0.2214.115" }, { "id": "CVE-2015-1223", "status": "Patched", "link": "https://nvd.nist.gov/vuln/detail/CVE-2015-1223", "summary": "Multiple use-after-free vulnerabilities in core/html/HTMLInputElement.cpp in the DOM implementation in Blink, as used in Google Chrome before 41.0.2272.76, allow remote attackers to cause a denial of service or possibly have unspecified other impact via vectors that trigger extraneous change events, as demonstrated by events for invalid input or input to read-only fields, related to the initializeTypeInParsing and updateType functions.", "scorev2": "7.5", "scorev3": "0.0", "scorev4": "0.0", "modified": "2026-06-17T00:21:59.000", "vector": "NETWORK", "vectorString": "AV:N/AC:L/Au:N/C:P/I:P/A:P", "detail": "fixed-version: Fixed from version >40.0.2214.115" }, { "id": "CVE-2015-1224", "status": "Patched", "link": "https://nvd.nist.gov/vuln/detail/CVE-2015-1224", "summary": "The VpxVideoDecoder::VpxDecode function in media/filters/vpx_video_decoder.cc in the vpxdecoder implementation in Google Chrome before 41.0.2272.76 does not ensure that alpha-plane dimensions are identical to image dimensions, which allows remote attackers to cause a denial of service (out-of-bounds read) via crafted VPx video data.", "scorev2": "5.0", "scorev3": "0.0", "scorev4": "0.0", "modified": "2026-06-17T00:21:59.000", "vector": "NETWORK", "vectorString": "AV:N/AC:L/Au:N/C:N/I:N/A:P", "detail": "fixed-version: Fixed from version >40.0.2214.115" }, { "id": "CVE-2015-1225", "status": "Patched", "link": "https://nvd.nist.gov/vuln/detail/CVE-2015-1225", "summary": "PDFium, as used in Google Chrome before 41.0.2272.76, allows remote attackers to cause a denial of service (out-of-bounds read) via unspecified vectors.", "scorev2": "5.0", "scorev3": "0.0", "scorev4": "0.0", "modified": "2026-06-17T00:21:59.000", "vector": "NETWORK", "vectorString": "AV:N/AC:L/Au:N/C:N/I:N/A:P", "detail": "fixed-version: Fixed from version >40.0.2214.115" }, { "id": "CVE-2015-1226", "status": "Patched", "link": "https://nvd.nist.gov/vuln/detail/CVE-2015-1226", "summary": "The DebuggerFunction::InitAgentHost function in browser/extensions/api/debugger/debugger_api.cc in Google Chrome before 41.0.2272.76 does not properly restrict what URLs are available as debugger targets, which allows remote attackers to bypass intended access restrictions via a crafted extension.", "scorev2": "5.0", "scorev3": "0.0", "scorev4": "0.0", "modified": "2026-06-17T00:21:59.000", "vector": "NETWORK", "vectorString": "AV:N/AC:L/Au:N/C:N/I:P/A:N", "detail": "fixed-version: Fixed from version >40.0.2214.115" }, { "id": "CVE-2015-1227", "status": "Patched", "link": "https://nvd.nist.gov/vuln/detail/CVE-2015-1227", "summary": "The DragImage::create function in platform/DragImage.cpp in Blink, as used in Google Chrome before 41.0.2272.76, does not initialize memory for image drawing, which allows remote attackers to have an unspecified impact by triggering a failed image decoding, as demonstrated by an image for which the default orientation cannot be used.", "scorev2": "7.5", "scorev3": "0.0", "scorev4": "0.0", "modified": "2026-06-17T00:21:59.000", "vector": "NETWORK", "vectorString": "AV:N/AC:L/Au:N/C:P/I:P/A:P", "detail": "fixed-version: Fixed from version >40.0.2214.115" }, { "id": "CVE-2015-1228", "status": "Patched", "link": "https://nvd.nist.gov/vuln/detail/CVE-2015-1228", "summary": "The RenderCounter::updateCounter function in core/rendering/RenderCounter.cpp in Blink, as used in Google Chrome before 41.0.2272.76, does not force a relayout operation and consequently does not initialize memory for a data structure, which allows remote attackers to cause a denial of service (application crash) or possibly have unspecified other impact via a crafted Cascading Style Sheets (CSS) token sequence.", "scorev2": "7.5", "scorev3": "0.0", "scorev4": "0.0", "modified": "2026-06-17T00:21:59.000", "vector": "NETWORK", "vectorString": "AV:N/AC:L/Au:N/C:P/I:P/A:P", "detail": "fixed-version: Fixed from version >40.0.2214.115" }, { "id": "CVE-2015-1229", "status": "Patched", "link": "https://nvd.nist.gov/vuln/detail/CVE-2015-1229", "summary": "net/http/proxy_client_socket.cc in Google Chrome before 41.0.2272.76 does not properly handle a 407 (aka Proxy Authentication Required) HTTP status code accompanied by a Set-Cookie header, which allows remote proxy servers to conduct cookie-injection attacks via a crafted response.", "scorev2": "5.0", "scorev3": "0.0", "scorev4": "0.0", "modified": "2026-06-17T00:21:59.000", "vector": "NETWORK", "vectorString": "AV:N/AC:L/Au:N/C:N/I:P/A:N", "detail": "fixed-version: Fixed from version >40.0.2214.115" }, { "id": "CVE-2015-1230", "status": "Patched", "link": "https://nvd.nist.gov/vuln/detail/CVE-2015-1230", "summary": "The getHiddenProperty function in bindings/core/v8/V8EventListenerList.h in Blink, as used in Google Chrome before 41.0.2272.76, has a name conflict with the AudioContext class, which allows remote attackers to cause a denial of service or possibly have unspecified other impact via JavaScript code that adds an AudioContext event listener and triggers \"type confusion.\"", "scorev2": "7.5", "scorev3": "0.0", "scorev4": "0.0", "modified": "2026-06-17T00:21:59.000", "vector": "NETWORK", "vectorString": "AV:N/AC:L/Au:N/C:P/I:P/A:P", "detail": "fixed-version: Fixed from version >40.0.2214.115" }, { "id": "CVE-2015-1231", "status": "Patched", "link": "https://nvd.nist.gov/vuln/detail/CVE-2015-1231", "summary": "Multiple unspecified vulnerabilities in Google Chrome before 41.0.2272.76 allow attackers to cause a denial of service or possibly have other impact via unknown vectors.", "scorev2": "7.5", "scorev3": "0.0", "scorev4": "0.0", "modified": "2026-06-17T00:22:00.000", "vector": "NETWORK", "vectorString": "AV:N/AC:L/Au:N/C:P/I:P/A:P", "detail": "fixed-version: Fixed from version >40.0.2214.115" }, { "id": "CVE-2015-1232", "status": "Patched", "link": "https://nvd.nist.gov/vuln/detail/CVE-2015-1232", "summary": "Array index error in the MidiManagerUsb::DispatchSendMidiData function in media/midi/midi_manager_usb.cc in Google Chrome before 41.0.2272.76 allows remote attackers to cause a denial of service or possibly have unspecified other impact by leveraging renderer access to provide an invalid port index that triggers an out-of-bounds write operation, a different vulnerability than CVE-2015-1212.", "scorev2": "7.5", "scorev3": "0.0", "scorev4": "0.0", "modified": "2026-06-17T00:22:00.000", "vector": "NETWORK", "vectorString": "AV:N/AC:L/Au:N/C:P/I:P/A:P", "detail": "fixed-version: Fixed from version >40.0.2214.115" }, { "id": "CVE-2015-1233", "status": "Patched", "link": "https://nvd.nist.gov/vuln/detail/CVE-2015-1233", "summary": "Google Chrome before 41.0.2272.118 does not properly handle the interaction of IPC, the Gamepad API, and Google V8, which allows remote attackers to execute arbitrary code via unspecified vectors.", "scorev2": "7.5", "scorev3": "0.0", "scorev4": "0.0", "modified": "2026-06-17T00:22:00.000", "vector": "NETWORK", "vectorString": "AV:N/AC:L/Au:N/C:P/I:P/A:P", "detail": "fixed-version: Fixed from version >41.0.2272.102" }, { "id": "CVE-2015-1234", "status": "Patched", "link": "https://nvd.nist.gov/vuln/detail/CVE-2015-1234", "summary": "Race condition in gpu/command_buffer/service/gles2_cmd_decoder.cc in Google Chrome before 41.0.2272.118 allows remote attackers to cause a denial of service (buffer overflow) or possibly have unspecified other impact by manipulating OpenGL ES commands.", "scorev2": "6.8", "scorev3": "0.0", "scorev4": "0.0", "modified": "2026-06-17T00:22:00.000", "vector": "NETWORK", "vectorString": "AV:N/AC:M/Au:N/C:P/I:P/A:P", "detail": "fixed-version: Fixed from version >41.0.2272.102" }, { "id": "CVE-2015-1235", "status": "Patched", "link": "https://nvd.nist.gov/vuln/detail/CVE-2015-1235", "summary": "The ContainerNode::parserRemoveChild function in core/dom/ContainerNode.cpp in the HTML parser in Blink, as used in Google Chrome before 42.0.2311.90, allows remote attackers to bypass the Same Origin Policy via a crafted HTML document with an IFRAME element.", "scorev2": "5.0", "scorev3": "0.0", "scorev4": "0.0", "modified": "2026-06-17T00:22:00.000", "vector": "NETWORK", "vectorString": "AV:N/AC:L/Au:N/C:N/I:P/A:N", "detail": "fixed-version: Fixed from version >42.0.2311.60" }, { "id": "CVE-2015-1236", "status": "Patched", "link": "https://nvd.nist.gov/vuln/detail/CVE-2015-1236", "summary": "The MediaElementAudioSourceNode::process function in modules/webaudio/MediaElementAudioSourceNode.cpp in the Web Audio API implementation in Blink, as used in Google Chrome before 42.0.2311.90, allows remote attackers to bypass the Same Origin Policy and obtain sensitive audio sample values via a crafted web site containing a media element.", "scorev2": "4.3", "scorev3": "0.0", "scorev4": "0.0", "modified": "2026-06-17T00:22:00.000", "vector": "NETWORK", "vectorString": "AV:N/AC:M/Au:N/C:P/I:N/A:N", "detail": "fixed-version: Fixed from version >42.0.2311.60" }, { "id": "CVE-2015-1237", "status": "Patched", "link": "https://nvd.nist.gov/vuln/detail/CVE-2015-1237", "summary": "Use-after-free vulnerability in the RenderFrameImpl::OnMessageReceived function in content/renderer/render_frame_impl.cc in Google Chrome before 42.0.2311.90 allows remote attackers to cause a denial of service or possibly have unspecified other impact via vectors that trigger renderer IPC messages during a detach operation.", "scorev2": "7.5", "scorev3": "0.0", "scorev4": "0.0", "modified": "2026-06-17T00:22:00.000", "vector": "NETWORK", "vectorString": "AV:N/AC:L/Au:N/C:P/I:P/A:P", "detail": "fixed-version: Fixed from version >42.0.2311.60" }, { "id": "CVE-2015-1238", "status": "Patched", "link": "https://nvd.nist.gov/vuln/detail/CVE-2015-1238", "summary": "Skia, as used in Google Chrome before 42.0.2311.90, allows remote attackers to cause a denial of service (out-of-bounds write) or possibly have unspecified other impact via unknown vectors.", "scorev2": "7.5", "scorev3": "0.0", "scorev4": "0.0", "modified": "2026-06-17T00:22:01.000", "vector": "NETWORK", "vectorString": "AV:N/AC:L/Au:N/C:P/I:P/A:P", "detail": "fixed-version: Fixed from version >42.0.2311.60" }, { "id": "CVE-2015-1239", "status": "Unpatched", "link": "https://nvd.nist.gov/vuln/detail/CVE-2015-1239", "summary": "Double free vulnerability in the j2k_read_ppm_v3 function in OpenJPEG before r2997, as used in PDFium in Google Chrome, allows remote attackers to cause a denial of service (process crash) via a crafted PDF.", "scorev2": "4.3", "scorev3": "6.5", "scorev4": "0.0", "modified": "2026-10-08T14:56:35.000", "vector": "NETWORK", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H", "detail": "no-version-ranges", "description": "Check package version" }, { "id": "CVE-2015-1240", "status": "Patched", "link": "https://nvd.nist.gov/vuln/detail/CVE-2015-1240", "summary": "gpu/blink/webgraphicscontext3d_impl.cc in the WebGL implementation in Google Chrome before 42.0.2311.90 allows remote attackers to cause a denial of service (out-of-bounds read) via a crafted WebGL program that triggers a state inconsistency.", "scorev2": "5.0", "scorev3": "0.0", "scorev4": "0.0", "modified": "2026-06-17T00:22:01.000", "vector": "NETWORK", "vectorString": "AV:N/AC:L/Au:N/C:N/I:N/A:P", "detail": "fixed-version: Fixed from version >42.0.2311.60" }, { "id": "CVE-2015-1241", "status": "Patched", "link": "https://nvd.nist.gov/vuln/detail/CVE-2015-1241", "summary": "Google Chrome before 42.0.2311.90 does not properly consider the interaction of page navigation with the handling of touch events and gesture events, which allows remote attackers to trigger unintended UI actions via a crafted web site that conducts a \"tapjacking\" attack.", "scorev2": "4.3", "scorev3": "0.0", "scorev4": "0.0", "modified": "2026-06-17T00:22:01.000", "vector": "NETWORK", "vectorString": "AV:N/AC:M/Au:N/C:N/I:P/A:N", "detail": "fixed-version: Fixed from version 42.0.2311.90" }, { "id": "CVE-2015-1242", "status": "Patched", "link": "https://nvd.nist.gov/vuln/detail/CVE-2015-1242", "summary": "The ReduceTransitionElementsKind function in hydrogen-check-elimination.cc in Google V8 before 4.2.77.8, as used in Google Chrome before 42.0.2311.90, allows remote attackers to cause a denial of service or possibly have unspecified other impact via crafted JavaScript code that leverages \"type confusion\" in the check-elimination optimization.", "scorev2": "7.5", "scorev3": "0.0", "scorev4": "0.0", "modified": "2026-06-17T00:22:01.000", "vector": "NETWORK", "vectorString": "AV:N/AC:L/Au:N/C:P/I:P/A:P", "detail": "fixed-version: Fixed from version >42.0.2311.60" }, { "id": "CVE-2015-1243", "status": "Patched", "link": "https://nvd.nist.gov/vuln/detail/CVE-2015-1243", "summary": "Use-after-free vulnerability in the MutationObserver::disconnect function in core/dom/MutationObserver.cpp in the DOM implementation in Blink, as used in Google Chrome before 42.0.2311.135, allows remote attackers to cause a denial of service or possibly have unspecified other impact by triggering an attempt to unregister a MutationObserver object that is not currently registered.", "scorev2": "7.5", "scorev3": "0.0", "scorev4": "0.0", "modified": "2026-06-17T00:22:01.000", "vector": "NETWORK", "vectorString": "AV:N/AC:L/Au:N/C:P/I:P/A:P", "detail": "fixed-version: Fixed from version >42.0.2311.87" }, { "id": "CVE-2015-1244", "status": "Patched", "link": "https://nvd.nist.gov/vuln/detail/CVE-2015-1244", "summary": "The URLRequest::GetHSTSRedirect function in url_request/url_request.cc in Google Chrome before 42.0.2311.90 does not replace the ws scheme with the wss scheme whenever an HSTS Policy is active, which makes it easier for remote attackers to obtain sensitive information by sniffing the network for WebSocket traffic.", "scorev2": "5.0", "scorev3": "0.0", "scorev4": "0.0", "modified": "2026-06-17T00:22:01.000", "vector": "NETWORK", "vectorString": "AV:N/AC:L/Au:N/C:P/I:N/A:N", "detail": "fixed-version: Fixed from version >42.0.2311.60" }, { "id": "CVE-2015-1245", "status": "Patched", "link": "https://nvd.nist.gov/vuln/detail/CVE-2015-1245", "summary": "Use-after-free vulnerability in the OpenPDFInReaderView::Update function in browser/ui/views/location_bar/open_pdf_in_reader_view.cc in Google Chrome before 41.0.2272.76 might allow user-assisted remote attackers to cause a denial of service (heap memory corruption) or possibly have unspecified other impact by triggering interaction with a PDFium \"Open PDF in Reader\" button that has an invalid tab association.", "scorev2": "6.8", "scorev3": "0.0", "scorev4": "0.0", "modified": "2026-06-17T00:22:01.000", "vector": "NETWORK", "vectorString": "AV:N/AC:M/Au:N/C:P/I:P/A:P", "detail": "fixed-version: Fixed from version >41.0.2272.74" }, { "id": "CVE-2015-1246", "status": "Patched", "link": "https://nvd.nist.gov/vuln/detail/CVE-2015-1246", "summary": "Blink, as used in Google Chrome before 42.0.2311.90, allows remote attackers to cause a denial of service (out-of-bounds read) via unspecified vectors.", "scorev2": "5.0", "scorev3": "0.0", "scorev4": "0.0", "modified": "2026-06-17T00:22:02.000", "vector": "NETWORK", "vectorString": "AV:N/AC:L/Au:N/C:N/I:N/A:P", "detail": "fixed-version: Fixed from version >42.0.2311.60" }, { "id": "CVE-2015-1247", "status": "Patched", "link": "https://nvd.nist.gov/vuln/detail/CVE-2015-1247", "summary": "The SearchEngineTabHelper::OnPageHasOSDD function in browser/ui/search_engines/search_engine_tab_helper.cc in Google Chrome before 42.0.2311.90 does not prevent use of a file: URL for an OpenSearch descriptor XML document, which might allow remote attackers to obtain sensitive information from local files via a crafted (1) http or (2) https web site.", "scorev2": "5.0", "scorev3": "0.0", "scorev4": "0.0", "modified": "2026-06-17T00:22:02.000", "vector": "NETWORK", "vectorString": "AV:N/AC:L/Au:N/C:P/I:N/A:N", "detail": "fixed-version: Fixed from version >42.0.2311.60" }, { "id": "CVE-2015-1248", "status": "Patched", "link": "https://nvd.nist.gov/vuln/detail/CVE-2015-1248", "summary": "The FileSystem API in Google Chrome before 40.0.2214.91 allows remote attackers to bypass the SafeBrowsing for Executable Files protection mechanism by creating a .exe file in a temporary filesystem and then referencing this file with a filesystem:http: URL.", "scorev2": "4.3", "scorev3": "0.0", "scorev4": "0.0", "modified": "2026-06-17T00:22:02.000", "vector": "NETWORK", "vectorString": "AV:N/AC:M/Au:N/C:N/I:P/A:N", "detail": "fixed-version: Fixed from version >40.0.2214.85" }, { "id": "CVE-2015-1249", "status": "Patched", "link": "https://nvd.nist.gov/vuln/detail/CVE-2015-1249", "summary": "Multiple unspecified vulnerabilities in Google Chrome before 42.0.2311.90 allow attackers to cause a denial of service or possibly have other impact via unknown vectors.", "scorev2": "7.5", "scorev3": "0.0", "scorev4": "0.0", "modified": "2026-06-17T00:22:02.000", "vector": "NETWORK", "vectorString": "AV:N/AC:L/Au:N/C:P/I:P/A:P", "detail": "fixed-version: Fixed from version >42.0.2311.60" }, { "id": "CVE-2015-1250", "status": "Patched", "link": "https://nvd.nist.gov/vuln/detail/CVE-2015-1250", "summary": "Multiple unspecified vulnerabilities in Google Chrome before 42.0.2311.135 allow attackers to cause a denial of service or possibly have other impact via unknown vectors.", "scorev2": "7.5", "scorev3": "0.0", "scorev4": "0.0", "modified": "2026-06-17T00:22:02.000", "vector": "NETWORK", "vectorString": "AV:N/AC:L/Au:N/C:P/I:P/A:P", "detail": "fixed-version: Fixed from version >42.0.2311.87" }, { "id": "CVE-2015-1251", "status": "Patched", "link": "https://nvd.nist.gov/vuln/detail/CVE-2015-1251", "summary": "Use-after-free vulnerability in the SpeechRecognitionClient implementation in the Speech subsystem in Google Chrome before 43.0.2357.65 allows remote attackers to execute arbitrary code via a crafted document.", "scorev2": "6.8", "scorev3": "0.0", "scorev4": "0.0", "modified": "2026-06-17T00:22:02.000", "vector": "NETWORK", "vectorString": "AV:N/AC:M/Au:N/C:P/I:P/A:P", "detail": "fixed-version: Fixed from version >42.0.2311.152" }, { "id": "CVE-2015-1252", "status": "Patched", "link": "https://nvd.nist.gov/vuln/detail/CVE-2015-1252", "summary": "common/partial_circular_buffer.cc in Google Chrome before 43.0.2357.65 does not properly handle wraps, which allows remote attackers to bypass a sandbox protection mechanism or cause a denial of service (out-of-bounds write) via vectors that trigger a write operation with a large amount of data, related to the PartialCircularBuffer::Write and PartialCircularBuffer::DoWrite functions.", "scorev2": "7.5", "scorev3": "0.0", "scorev4": "0.0", "modified": "2026-06-17T00:22:02.000", "vector": "NETWORK", "vectorString": "AV:N/AC:L/Au:N/C:P/I:P/A:P", "detail": "fixed-version: Fixed from version >42.0.2311.152" }, { "id": "CVE-2015-1253", "status": "Patched", "link": "https://nvd.nist.gov/vuln/detail/CVE-2015-1253", "summary": "core/html/parser/HTMLConstructionSite.cpp in the DOM implementation in Blink, as used in Google Chrome before 43.0.2357.65, allows remote attackers to bypass the Same Origin Policy via crafted JavaScript code that appends a child to a SCRIPT element, related to the insert and executeReparentTask functions.", "scorev2": "7.5", "scorev3": "0.0", "scorev4": "0.0", "modified": "2026-06-17T00:22:03.000", "vector": "NETWORK", "vectorString": "AV:N/AC:L/Au:N/C:P/I:P/A:P", "detail": "fixed-version: Fixed from version >42.0.2311.152" }, { "id": "CVE-2015-1254", "status": "Patched", "link": "https://nvd.nist.gov/vuln/detail/CVE-2015-1254", "summary": "core/dom/Document.cpp in Blink, as used in Google Chrome before 43.0.2357.65, enables the inheritance of the designMode attribute, which allows remote attackers to bypass the Same Origin Policy by leveraging the availability of editing.", "scorev2": "5.0", "scorev3": "0.0", "scorev4": "0.0", "modified": "2026-06-17T00:22:03.000", "vector": "NETWORK", "vectorString": "AV:N/AC:L/Au:N/C:N/I:P/A:N", "detail": "fixed-version: Fixed from version >42.0.2311.152" }, { "id": "CVE-2015-1255", "status": "Patched", "link": "https://nvd.nist.gov/vuln/detail/CVE-2015-1255", "summary": "Use-after-free vulnerability in content/renderer/media/webaudio_capturer_source.cc in the WebAudio implementation in Google Chrome before 43.0.2357.65 allows remote attackers to cause a denial of service (heap memory corruption) or possibly have unspecified other impact by leveraging improper handling of a stop action for an audio track.", "scorev2": "6.8", "scorev3": "0.0", "scorev4": "0.0", "modified": "2026-06-17T00:22:03.000", "vector": "NETWORK", "vectorString": "AV:N/AC:M/Au:N/C:P/I:P/A:P", "detail": "fixed-version: Fixed from version >42.0.2311.152" }, { "id": "CVE-2015-1256", "status": "Patched", "link": "https://nvd.nist.gov/vuln/detail/CVE-2015-1256", "summary": "Use-after-free vulnerability in the SVG implementation in Blink, as used in Google Chrome before 43.0.2357.65, allows remote attackers to cause a denial of service or possibly have unspecified other impact via a crafted document that leverages improper handling of a shadow tree for a use element.", "scorev2": "7.5", "scorev3": "0.0", "scorev4": "0.0", "modified": "2026-06-17T00:22:03.000", "vector": "NETWORK", "vectorString": "AV:N/AC:L/Au:N/C:P/I:P/A:P", "detail": "fixed-version: Fixed from version >42.0.2311.152" }, { "id": "CVE-2015-1257", "status": "Patched", "link": "https://nvd.nist.gov/vuln/detail/CVE-2015-1257", "summary": "platform/graphics/filters/FEColorMatrix.cpp in the SVG implementation in Blink, as used in Google Chrome before 43.0.2357.65, does not properly handle an insufficient number of values in an feColorMatrix filter, which allows remote attackers to cause a denial of service (container overflow) or possibly have unspecified other impact via a crafted document.", "scorev2": "7.5", "scorev3": "0.0", "scorev4": "0.0", "modified": "2026-06-17T00:22:03.000", "vector": "NETWORK", "vectorString": "AV:N/AC:L/Au:N/C:P/I:P/A:P", "detail": "fixed-version: Fixed from version >42.0.2311.152" }, { "id": "CVE-2015-1258", "status": "Patched", "link": "https://nvd.nist.gov/vuln/detail/CVE-2015-1258", "summary": "Google Chrome before 43.0.2357.65 relies on libvpx code that was not built with an appropriate --size-limit value, which allows remote attackers to trigger a negative value for a size field, and consequently cause a denial of service or possibly have unspecified other impact, via a crafted frame size in VP9 video data.", "scorev2": "7.5", "scorev3": "0.0", "scorev4": "0.0", "modified": "2026-06-17T00:22:03.000", "vector": "NETWORK", "vectorString": "AV:N/AC:L/Au:N/C:P/I:P/A:P", "detail": "fixed-version: Fixed from version >42.0.2311.152" }, { "id": "CVE-2015-1259", "status": "Patched", "link": "https://nvd.nist.gov/vuln/detail/CVE-2015-1259", "summary": "PDFium, as used in Google Chrome before 43.0.2357.65, does not properly initialize memory, which allows remote attackers to cause a denial of service or possibly have unspecified other impact via unknown vectors.", "scorev2": "7.5", "scorev3": "0.0", "scorev4": "0.0", "modified": "2026-06-17T00:22:03.000", "vector": "NETWORK", "vectorString": "AV:N/AC:L/Au:N/C:P/I:P/A:P", "detail": "fixed-version: Fixed from version >42.0.2311.152" }, { "id": "CVE-2015-1260", "status": "Patched", "link": "https://nvd.nist.gov/vuln/detail/CVE-2015-1260", "summary": "Multiple use-after-free vulnerabilities in content/renderer/media/user_media_client_impl.cc in the WebRTC implementation in Google Chrome before 43.0.2357.65 allow remote attackers to cause a denial of service or possibly have unspecified other impact via crafted JavaScript code that executes upon completion of a getUserMedia request.", "scorev2": "7.5", "scorev3": "0.0", "scorev4": "0.0", "modified": "2026-06-17T00:22:03.000", "vector": "NETWORK", "vectorString": "AV:N/AC:L/Au:N/C:P/I:P/A:P", "detail": "fixed-version: Fixed from version >42.0.2311.152" }, { "id": "CVE-2015-1261", "status": "Patched", "link": "https://nvd.nist.gov/vuln/detail/CVE-2015-1261", "summary": "android/java/src/org/chromium/chrome/browser/WebsiteSettingsPopup.java in Google Chrome before 43.0.2357.65 on Android does not properly restrict use of a URL's fragment identifier during construction of a page-info popup, which allows remote attackers to spoof the URL bar or deliver misleading popup content via crafted text.", "scorev2": "5.0", "scorev3": "0.0", "scorev4": "0.0", "modified": "2026-06-17T00:22:04.000", "vector": "NETWORK", "vectorString": "AV:N/AC:L/Au:N/C:N/I:P/A:N", "detail": "fixed-version: Fixed from version >42.0.2311.107" }, { "id": "CVE-2015-1262", "status": "Patched", "link": "https://nvd.nist.gov/vuln/detail/CVE-2015-1262", "summary": "platform/fonts/shaping/HarfBuzzShaper.cpp in Blink, as used in Google Chrome before 43.0.2357.65, does not initialize a certain width field, which allows remote attackers to cause a denial of service or possibly have unspecified other impact via crafted Unicode text.", "scorev2": "7.5", "scorev3": "0.0", "scorev4": "0.0", "modified": "2026-06-17T00:22:04.000", "vector": "NETWORK", "vectorString": "AV:N/AC:L/Au:N/C:P/I:P/A:P", "detail": "fixed-version: Fixed from version >42.0.2311.152" }, { "id": "CVE-2015-1263", "status": "Patched", "link": "https://nvd.nist.gov/vuln/detail/CVE-2015-1263", "summary": "The Spellcheck API implementation in Google Chrome before 43.0.2357.65 does not use an HTTPS session for downloading a Hunspell dictionary, which allows man-in-the-middle attackers to deliver incorrect spelling suggestions or possibly have unspecified other impact via a crafted file.", "scorev2": "4.3", "scorev3": "0.0", "scorev4": "0.0", "modified": "2026-06-17T00:22:04.000", "vector": "NETWORK", "vectorString": "AV:N/AC:M/Au:N/C:N/I:P/A:N", "detail": "fixed-version: Fixed from version >42.0.2311.152" }, { "id": "CVE-2015-1264", "status": "Patched", "link": "https://nvd.nist.gov/vuln/detail/CVE-2015-1264", "summary": "Cross-site scripting (XSS) vulnerability in Google Chrome before 43.0.2357.65 allows user-assisted remote attackers to inject arbitrary web script or HTML via crafted data that is improperly handled by the Bookmarks feature.", "scorev2": "4.3", "scorev3": "0.0", "scorev4": "0.0", "modified": "2026-06-17T00:22:04.000", "vector": "NETWORK", "vectorString": "AV:N/AC:M/Au:N/C:N/I:P/A:N", "detail": "fixed-version: Fixed from version >42.0.2311.152" }, { "id": "CVE-2015-1265", "status": "Patched", "link": "https://nvd.nist.gov/vuln/detail/CVE-2015-1265", "summary": "Multiple unspecified vulnerabilities in Google Chrome before 43.0.2357.65 allow attackers to cause a denial of service or possibly have other impact via unknown vectors.", "scorev2": "7.5", "scorev3": "0.0", "scorev4": "0.0", "modified": "2026-06-17T00:22:04.000", "vector": "NETWORK", "vectorString": "AV:N/AC:L/Au:N/C:P/I:P/A:P", "detail": "fixed-version: Fixed from version >42.0.2311.152" }, { "id": "CVE-2015-1266", "status": "Patched", "link": "https://nvd.nist.gov/vuln/detail/CVE-2015-1266", "summary": "content/browser/webui/content_web_ui_controller_factory.cc in Google Chrome before 43.0.2357.130 does not properly consider the scheme in determining whether a URL is associated with a WebUI SiteInstance, which allows remote attackers to bypass intended access restrictions via a similar URL, as demonstrated by use of http://gpu when there is a WebUI class for handling chrome://gpu requests.", "scorev2": "5.0", "scorev3": "0.0", "scorev4": "0.0", "modified": "2026-06-17T00:22:04.000", "vector": "NETWORK", "vectorString": "AV:N/AC:L/Au:N/C:N/I:P/A:N", "detail": "fixed-version: Fixed from version >43.0.2357.81" }, { "id": "CVE-2015-1267", "status": "Patched", "link": "https://nvd.nist.gov/vuln/detail/CVE-2015-1267", "summary": "Blink, as used in Google Chrome before 43.0.2357.130, does not properly restrict the creation context during creation of a DOM wrapper, which allows remote attackers to bypass the Same Origin Policy via crafted JavaScript code that uses a Blink public API, related to WebArrayBufferConverter.cpp, WebBlob.cpp, WebDOMError.cpp, and WebDOMFileSystem.cpp.", "scorev2": "5.0", "scorev3": "0.0", "scorev4": "0.0", "modified": "2026-06-17T00:22:04.000", "vector": "NETWORK", "vectorString": "AV:N/AC:L/Au:N/C:N/I:P/A:N", "detail": "fixed-version: Fixed from version >43.0.2357.81" }, { "id": "CVE-2015-1268", "status": "Patched", "link": "https://nvd.nist.gov/vuln/detail/CVE-2015-1268", "summary": "bindings/scripts/v8_types.py in Blink, as used in Google Chrome before 43.0.2357.130, does not properly select a creation context for a return value's DOM wrapper, which allows remote attackers to bypass the Same Origin Policy via crafted JavaScript code, as demonstrated by use of a data: URL.", "scorev2": "5.0", "scorev3": "0.0", "scorev4": "0.0", "modified": "2026-06-17T00:22:04.000", "vector": "NETWORK", "vectorString": "AV:N/AC:L/Au:N/C:N/I:P/A:N", "detail": "fixed-version: Fixed from version >43.0.2357.81" }, { "id": "CVE-2015-1269", "status": "Patched", "link": "https://nvd.nist.gov/vuln/detail/CVE-2015-1269", "summary": "The DecodeHSTSPreloadRaw function in net/http/transport_security_state.cc in Google Chrome before 43.0.2357.130 does not properly canonicalize DNS hostnames before making comparisons to HSTS or HPKP preload entries, which allows remote attackers to bypass intended access restrictions via a string that (1) ends in a . (dot) character or (2) is not entirely lowercase.", "scorev2": "4.3", "scorev3": "0.0", "scorev4": "0.0", "modified": "2026-06-17T00:22:05.000", "vector": "NETWORK", "vectorString": "AV:N/AC:M/Au:N/C:N/I:P/A:N", "detail": "fixed-version: Fixed from version >43.0.2357.81" }, { "id": "CVE-2015-1270", "status": "Patched", "link": "https://nvd.nist.gov/vuln/detail/CVE-2015-1270", "summary": "The ucnv_io_getConverterName function in common/ucnv_io.cpp in International Components for Unicode (ICU), as used in Google Chrome before 44.0.2403.89, mishandles converter names with initial x- substrings, which allows remote attackers to cause a denial of service (read of uninitialized memory) or possibly have unspecified other impact via a crafted file.", "scorev2": "6.8", "scorev3": "0.0", "scorev4": "0.0", "modified": "2026-06-17T00:22:05.000", "vector": "NETWORK", "vectorString": "AV:N/AC:M/Au:N/C:P/I:P/A:P", "detail": "fixed-version: Fixed from version >43.0.2357.134" }, { "id": "CVE-2015-1271", "status": "Patched", "link": "https://nvd.nist.gov/vuln/detail/CVE-2015-1271", "summary": "PDFium, as used in Google Chrome before 44.0.2403.89, does not properly handle certain out-of-memory conditions, which allows remote attackers to cause a denial of service (heap-based buffer overflow) or possibly have unspecified other impact via a crafted PDF document that triggers a large memory allocation.", "scorev2": "6.8", "scorev3": "0.0", "scorev4": "0.0", "modified": "2026-06-17T00:22:05.000", "vector": "NETWORK", "vectorString": "AV:N/AC:M/Au:N/C:P/I:P/A:P", "detail": "fixed-version: Fixed from version >43.0.2357.134" }, { "id": "CVE-2015-1272", "status": "Patched", "link": "https://nvd.nist.gov/vuln/detail/CVE-2015-1272", "summary": "Use-after-free vulnerability in the GPU process implementation in Google Chrome before 44.0.2403.89 allows remote attackers to cause a denial of service or possibly have unspecified other impact by leveraging the continued availability of a GPUChannelHost data structure during Blink shutdown, related to content/browser/gpu/browser_gpu_channel_host_factory.cc and content/renderer/render_thread_impl.cc.", "scorev2": "7.5", "scorev3": "0.0", "scorev4": "0.0", "modified": "2026-06-17T00:22:05.000", "vector": "NETWORK", "vectorString": "AV:N/AC:L/Au:N/C:P/I:P/A:P", "detail": "fixed-version: Fixed from version >43.0.2357.134" }, { "id": "CVE-2015-1273", "status": "Patched", "link": "https://nvd.nist.gov/vuln/detail/CVE-2015-1273", "summary": "Heap-based buffer overflow in j2k.c in OpenJPEG before r3002, as used in PDFium in Google Chrome before 44.0.2403.89, allows remote attackers to cause a denial of service or possibly have unspecified other impact via invalid JPEG2000 data in a PDF document.", "scorev2": "6.8", "scorev3": "0.0", "scorev4": "0.0", "modified": "2026-06-17T00:22:05.000", "vector": "NETWORK", "vectorString": "AV:N/AC:M/Au:N/C:P/I:P/A:P", "detail": "fixed-version: Fixed from version >43.0.2357.134" }, { "id": "CVE-2015-1274", "status": "Patched", "link": "https://nvd.nist.gov/vuln/detail/CVE-2015-1274", "summary": "Google Chrome before 44.0.2403.89 does not ensure that the auto-open list omits all dangerous file types, which makes it easier for remote attackers to execute arbitrary code by providing a crafted file and leveraging a user's previous \"Always open files of this type\" choice, related to download_commands.cc and download_prefs.cc.", "scorev2": "6.8", "scorev3": "0.0", "scorev4": "0.0", "modified": "2026-06-17T00:22:05.000", "vector": "NETWORK", "vectorString": "AV:N/AC:M/Au:N/C:P/I:P/A:P", "detail": "fixed-version: Fixed from version >43.0.2357.134" }, { "id": "CVE-2015-1275", "status": "Patched", "link": "https://nvd.nist.gov/vuln/detail/CVE-2015-1275", "summary": "Cross-site scripting (XSS) vulnerability in org/chromium/chrome/browser/UrlUtilities.java in Google Chrome before 44.0.2403.89 on Android allows remote attackers to inject arbitrary web script or HTML via a crafted intent: URL, as demonstrated by a trailing alert(document.cookie);// substring, aka \"Universal XSS (UXSS).\"", "scorev2": "4.3", "scorev3": "0.0", "scorev4": "0.0", "modified": "2026-06-17T00:22:05.000", "vector": "NETWORK", "vectorString": "AV:N/AC:M/Au:N/C:N/I:P/A:N", "detail": "fixed-version: Fixed from version >43.0.2357.134" }, { "id": "CVE-2015-1276", "status": "Patched", "link": "https://nvd.nist.gov/vuln/detail/CVE-2015-1276", "summary": "Use-after-free vulnerability in content/browser/indexed_db/indexed_db_backing_store.cc in the IndexedDB implementation in Google Chrome before 44.0.2403.89 allows remote attackers to cause a denial of service or possibly have unspecified other impact by leveraging an abort action before a certain write operation.", "scorev2": "7.5", "scorev3": "9.8", "scorev4": "0.0", "modified": "2026-06-17T00:22:05.000", "vector": "NETWORK", "vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H", "detail": "fixed-version: Fixed from version >43.0.2357.134" }, { "id": "CVE-2015-1277", "status": "Patched", "link": "https://nvd.nist.gov/vuln/detail/CVE-2015-1277", "summary": "Use-after-free vulnerability in the accessibility implementation in Google Chrome before 44.0.2403.89 allows remote attackers to cause a denial of service or possibly have unspecified other impact by leveraging lack of certain validity checks for accessibility-tree data structures.", "scorev2": "7.5", "scorev3": "0.0", "scorev4": "0.0", "modified": "2026-06-17T00:22:06.000", "vector": "NETWORK", "vectorString": "AV:N/AC:L/Au:N/C:P/I:P/A:P", "detail": "fixed-version: Fixed from version >43.0.2357.134" }, { "id": "CVE-2015-1278", "status": "Patched", "link": "https://nvd.nist.gov/vuln/detail/CVE-2015-1278", "summary": "content/browser/web_contents/web_contents_impl.cc in Google Chrome before 44.0.2403.89 does not ensure that a PDF document's modal dialog is closed upon navigation to an interstitial page, which allows remote attackers to spoof URLs via a crafted document, as demonstrated by the alert_dialog.pdf document.", "scorev2": "4.3", "scorev3": "0.0", "scorev4": "0.0", "modified": "2026-06-17T00:22:06.000", "vector": "NETWORK", "vectorString": "AV:N/AC:M/Au:N/C:N/I:P/A:N", "detail": "fixed-version: Fixed from version >43.0.2357.134" }, { "id": "CVE-2015-1279", "status": "Patched", "link": "https://nvd.nist.gov/vuln/detail/CVE-2015-1279", "summary": "Integer overflow in the CJBig2_Image::expand function in fxcodec/jbig2/JBig2_Image.cpp in PDFium, as used in Google Chrome before 44.0.2403.89, allows remote attackers to cause a denial of service (heap-based buffer overflow) or possibly have unspecified other impact via large height and stride values.", "scorev2": "7.5", "scorev3": "0.0", "scorev4": "0.0", "modified": "2026-06-17T00:22:06.000", "vector": "NETWORK", "vectorString": "AV:N/AC:L/Au:N/C:P/I:P/A:P", "detail": "fixed-version: Fixed from version >43.0.2357.134" }, { "id": "CVE-2015-1280", "status": "Patched", "link": "https://nvd.nist.gov/vuln/detail/CVE-2015-1280", "summary": "SkPictureShader.cpp in Skia, as used in Google Chrome before 44.0.2403.89, allows remote attackers to cause a denial of service (memory corruption) or possibly have unspecified other impact by leveraging access to a renderer process and providing crafted serialized data.", "scorev2": "7.5", "scorev3": "0.0", "scorev4": "0.0", "modified": "2026-06-17T00:22:06.000", "vector": "NETWORK", "vectorString": "AV:N/AC:L/Au:N/C:P/I:P/A:P", "detail": "fixed-version: Fixed from version >43.0.2357.134" }, { "id": "CVE-2015-1281", "status": "Patched", "link": "https://nvd.nist.gov/vuln/detail/CVE-2015-1281", "summary": "core/loader/ImageLoader.cpp in Blink, as used in Google Chrome before 44.0.2403.89, does not properly determine the V8 context of a microtask, which allows remote attackers to bypass Content Security Policy (CSP) restrictions by providing an image from an unintended source.", "scorev2": "4.3", "scorev3": "0.0", "scorev4": "0.0", "modified": "2026-06-17T00:22:06.000", "vector": "NETWORK", "vectorString": "AV:N/AC:M/Au:N/C:N/I:P/A:N", "detail": "fixed-version: Fixed from version >43.0.2357.134" }, { "id": "CVE-2015-1282", "status": "Patched", "link": "https://nvd.nist.gov/vuln/detail/CVE-2015-1282", "summary": "Multiple use-after-free vulnerabilities in fpdfsdk/src/javascript/Document.cpp in PDFium, as used in Google Chrome before 44.0.2403.89, allow remote attackers to cause a denial of service or possibly have unspecified other impact via a crafted PDF document, related to the (1) Document::delay and (2) Document::DoFieldDelay functions.", "scorev2": "6.8", "scorev3": "0.0", "scorev4": "0.0", "modified": "2026-06-17T00:22:06.000", "vector": "NETWORK", "vectorString": "AV:N/AC:M/Au:N/C:P/I:P/A:P", "detail": "fixed-version: Fixed from version >43.0.2357.134" }, { "id": "CVE-2015-1283", "status": "Patched", "link": "https://nvd.nist.gov/vuln/detail/CVE-2015-1283", "summary": "Multiple integer overflows in the XML_GetBuffer function in Expat through 2.1.0, as used in Google Chrome before 44.0.2403.89 and other products, allow remote attackers to cause a denial of service (heap-based buffer overflow) or possibly have unspecified other impact via crafted XML data, a related issue to CVE-2015-2716.", "scorev2": "6.8", "scorev3": "0.0", "scorev4": "0.0", "modified": "2026-06-17T00:22:06.000", "vector": "NETWORK", "vectorString": "AV:N/AC:M/Au:N/C:P/I:P/A:P", "detail": "fixed-version: Fixed from version >43.0.2357.134" }, { "id": "CVE-2015-1284", "status": "Patched", "link": "https://nvd.nist.gov/vuln/detail/CVE-2015-1284", "summary": "The LocalFrame::isURLAllowed function in core/frame/LocalFrame.cpp in Blink, as used in Google Chrome before 44.0.2403.89, does not properly check for a page's maximum number of frames, which allows remote attackers to cause a denial of service (invalid count value and use-after-free) or possibly have unspecified other impact via crafted JavaScript code that makes many createElement calls for IFRAME elements.", "scorev2": "7.5", "scorev3": "0.0", "scorev4": "0.0", "modified": "2026-06-17T00:22:07.000", "vector": "NETWORK", "vectorString": "AV:N/AC:L/Au:N/C:P/I:P/A:P", "detail": "fixed-version: Fixed from version >43.0.2357.134" }, { "id": "CVE-2015-1285", "status": "Patched", "link": "https://nvd.nist.gov/vuln/detail/CVE-2015-1285", "summary": "The XSSAuditor::canonicalize function in core/html/parser/XSSAuditor.cpp in the XSS auditor in Blink, as used in Google Chrome before 44.0.2403.89, does not properly choose a truncation point, which makes it easier for remote attackers to obtain sensitive information via an unspecified linear-time attack.", "scorev2": "5.0", "scorev3": "0.0", "scorev4": "0.0", "modified": "2026-06-17T00:22:07.000", "vector": "NETWORK", "vectorString": "AV:N/AC:L/Au:N/C:P/I:N/A:N", "detail": "fixed-version: Fixed from version >43.0.2357.134" }, { "id": "CVE-2015-1286", "status": "Patched", "link": "https://nvd.nist.gov/vuln/detail/CVE-2015-1286", "summary": "Cross-site scripting (XSS) vulnerability in the V8ContextNativeHandler::GetModuleSystem function in extensions/renderer/v8_context_native_handler.cc in Google Chrome before 44.0.2403.89 allows remote attackers to inject arbitrary web script or HTML by leveraging the lack of a certain V8 context restriction, aka a Blink \"Universal XSS (UXSS).\"", "scorev2": "4.3", "scorev3": "0.0", "scorev4": "0.0", "modified": "2026-06-17T00:22:07.000", "vector": "NETWORK", "vectorString": "AV:N/AC:M/Au:N/C:N/I:P/A:N", "detail": "fixed-version: Fixed from version >43.0.2357.134" }, { "id": "CVE-2015-1287", "status": "Patched", "link": "https://nvd.nist.gov/vuln/detail/CVE-2015-1287", "summary": "Blink, as used in Google Chrome before 44.0.2403.89, enables a quirks-mode exception that limits the cases in which a Cascading Style Sheets (CSS) document is required to have the text/css content type, which allows remote attackers to bypass the Same Origin Policy via a crafted web site, related to core/fetch/CSSStyleSheetResource.cpp.", "scorev2": "4.3", "scorev3": "0.0", "scorev4": "0.0", "modified": "2026-06-17T00:22:07.000", "vector": "NETWORK", "vectorString": "AV:N/AC:M/Au:N/C:P/I:N/A:N", "detail": "fixed-version: Fixed from version >43.0.2357.134" }, { "id": "CVE-2015-1288", "status": "Patched", "link": "https://nvd.nist.gov/vuln/detail/CVE-2015-1288", "summary": "The Spellcheck API implementation in Google Chrome before 44.0.2403.89 does not use an HTTPS session for downloading a Hunspell dictionary, which allows man-in-the-middle attackers to deliver incorrect spelling suggestions or possibly have unspecified other impact via a crafted file, a related issue to CVE-2015-1263.", "scorev2": "6.8", "scorev3": "0.0", "scorev4": "0.0", "modified": "2026-06-17T00:22:07.000", "vector": "NETWORK", "vectorString": "AV:N/AC:M/Au:N/C:P/I:P/A:P", "detail": "fixed-version: Fixed from version >43.0.2357.134" }, { "id": "CVE-2015-1289", "status": "Patched", "link": "https://nvd.nist.gov/vuln/detail/CVE-2015-1289", "summary": "Multiple unspecified vulnerabilities in Google Chrome before 44.0.2403.89 allow attackers to cause a denial of service or possibly have other impact via unknown vectors.", "scorev2": "7.5", "scorev3": "0.0", "scorev4": "0.0", "modified": "2026-06-17T00:22:07.000", "vector": "NETWORK", "vectorString": "AV:N/AC:L/Au:N/C:P/I:P/A:P", "detail": "fixed-version: Fixed from version >43.0.2357.134" }, { "id": "CVE-2015-1290", "status": "Patched", "link": "https://nvd.nist.gov/vuln/detail/CVE-2015-1290", "summary": "The Google V8 engine, as used in Google Chrome before 44.0.2403.89 and QtWebEngineCore in Qt before 5.5.1, allows remote attackers to cause a denial of service (memory corruption) or execute arbitrary code via a crafted web site.", "scorev2": "9.3", "scorev3": "8.8", "scorev4": "0.0", "modified": "2026-06-17T00:22:07.000", "vector": "NETWORK", "vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H", "detail": "fixed-version: Fixed from version 44.0.2403.89" }, { "id": "CVE-2015-1291", "status": "Patched", "link": "https://nvd.nist.gov/vuln/detail/CVE-2015-1291", "summary": "The ContainerNode::parserRemoveChild function in core/dom/ContainerNode.cpp in Blink, as used in Google Chrome before 45.0.2454.85, does not check whether a node is expected, which allows remote attackers to bypass the Same Origin Policy or cause a denial of service (DOM tree corruption) via a web site with crafted JavaScript code and IFRAME elements.", "scorev2": "6.4", "scorev3": "0.0", "scorev4": "0.0", "modified": "2026-06-17T00:22:07.000", "vector": "NETWORK", "vectorString": "AV:N/AC:L/Au:N/C:P/I:N/A:P", "detail": "fixed-version: Fixed from version >44.0.2403" }, { "id": "CVE-2015-1292", "status": "Patched", "link": "https://nvd.nist.gov/vuln/detail/CVE-2015-1292", "summary": "The NavigatorServiceWorker::serviceWorker function in modules/serviceworkers/NavigatorServiceWorker.cpp in Blink, as used in Google Chrome before 45.0.2454.85, allows remote attackers to bypass the Same Origin Policy by accessing a Service Worker.", "scorev2": "5.0", "scorev3": "0.0", "scorev4": "0.0", "modified": "2026-06-17T00:22:08.000", "vector": "NETWORK", "vectorString": "AV:N/AC:L/Au:N/C:P/I:N/A:N", "detail": "fixed-version: Fixed from version >44.0.2403" }, { "id": "CVE-2015-1293", "status": "Patched", "link": "https://nvd.nist.gov/vuln/detail/CVE-2015-1293", "summary": "The DOM implementation in Blink, as used in Google Chrome before 45.0.2454.85, allows remote attackers to bypass the Same Origin Policy via unspecified vectors.", "scorev2": "7.5", "scorev3": "0.0", "scorev4": "0.0", "modified": "2026-06-17T00:22:08.000", "vector": "NETWORK", "vectorString": "AV:N/AC:L/Au:N/C:P/I:P/A:P", "detail": "fixed-version: Fixed from version >44.0.2403" }, { "id": "CVE-2015-1294", "status": "Patched", "link": "https://nvd.nist.gov/vuln/detail/CVE-2015-1294", "summary": "Use-after-free vulnerability in the SkMatrix::invertNonIdentity function in core/SkMatrix.cpp in Skia, as used in Google Chrome before 45.0.2454.85, allows remote attackers to cause a denial of service or possibly have unspecified other impact by triggering the use of matrix elements that lead to an infinite result during an inversion calculation.", "scorev2": "7.5", "scorev3": "0.0", "scorev4": "0.0", "modified": "2026-06-17T00:22:08.000", "vector": "NETWORK", "vectorString": "AV:N/AC:L/Au:N/C:P/I:P/A:P", "detail": "fixed-version: Fixed from version >44.0.2403" }, { "id": "CVE-2015-1295", "status": "Patched", "link": "https://nvd.nist.gov/vuln/detail/CVE-2015-1295", "summary": "Multiple use-after-free vulnerabilities in the PrintWebViewHelper class in components/printing/renderer/print_web_view_helper.cc in Google Chrome before 45.0.2454.85 allow user-assisted remote attackers to cause a denial of service or possibly have unspecified other impact by triggering nested IPC messages during preparation for printing, as demonstrated by messages associated with PDF documents in conjunction with messages about printer capabilities.", "scorev2": "7.5", "scorev3": "0.0", "scorev4": "0.0", "modified": "2026-06-17T00:22:08.000", "vector": "NETWORK", "vectorString": "AV:N/AC:L/Au:N/C:P/I:P/A:P", "detail": "fixed-version: Fixed from version >44.0.2403" }, { "id": "CVE-2015-1296", "status": "Patched", "link": "https://nvd.nist.gov/vuln/detail/CVE-2015-1296", "summary": "The UnescapeURLWithAdjustmentsImpl implementation in net/base/escape.cc in Google Chrome before 45.0.2454.85 does not prevent display of Unicode LOCK characters in the omnibox, which makes it easier for remote attackers to spoof the SSL lock icon by placing one of these characters at the end of a URL, as demonstrated by the omnibox in localizations for right-to-left languages.", "scorev2": "5.0", "scorev3": "0.0", "scorev4": "0.0", "modified": "2026-06-17T00:22:08.000", "vector": "NETWORK", "vectorString": "AV:N/AC:L/Au:N/C:N/I:P/A:N", "detail": "fixed-version: Fixed from version >44.0.2403" }, { "id": "CVE-2015-1297", "status": "Patched", "link": "https://nvd.nist.gov/vuln/detail/CVE-2015-1297", "summary": "The WebRequest API implementation in extensions/browser/api/web_request/web_request_api.cc in Google Chrome before 45.0.2454.85 does not properly consider a request's source before accepting the request, which allows remote attackers to bypass intended access restrictions via a crafted (1) app or (2) extension.", "scorev2": "7.5", "scorev3": "0.0", "scorev4": "0.0", "modified": "2026-06-17T00:22:08.000", "vector": "NETWORK", "vectorString": "AV:N/AC:L/Au:N/C:P/I:P/A:P", "detail": "fixed-version: Fixed from version >44.0.2403" }, { "id": "CVE-2015-1298", "status": "Patched", "link": "https://nvd.nist.gov/vuln/detail/CVE-2015-1298", "summary": "The RuntimeEventRouter::OnExtensionUninstalled function in extensions/browser/api/runtime/runtime_api.cc in Google Chrome before 45.0.2454.85 does not ensure that the setUninstallURL preference corresponds to the URL of a web site, which allows user-assisted remote attackers to trigger access to an arbitrary URL via a crafted extension that is uninstalled.", "scorev2": "4.3", "scorev3": "0.0", "scorev4": "0.0", "modified": "2026-06-17T00:22:08.000", "vector": "NETWORK", "vectorString": "AV:N/AC:M/Au:N/C:N/I:P/A:N", "detail": "fixed-version: Fixed from version >44.0.2403" }, { "id": "CVE-2015-1299", "status": "Patched", "link": "https://nvd.nist.gov/vuln/detail/CVE-2015-1299", "summary": "Use-after-free vulnerability in the shared-timer implementation in Blink, as used in Google Chrome before 45.0.2454.85, allows remote attackers to cause a denial of service or possibly have unspecified other impact by leveraging erroneous timer firing, related to ThreadTimers.cpp and Timer.cpp.", "scorev2": "7.5", "scorev3": "0.0", "scorev4": "0.0", "modified": "2026-06-17T00:22:08.000", "vector": "NETWORK", "vectorString": "AV:N/AC:L/Au:N/C:P/I:P/A:P", "detail": "fixed-version: Fixed from version >44.0.2403" }, { "id": "CVE-2015-1300", "status": "Patched", "link": "https://nvd.nist.gov/vuln/detail/CVE-2015-1300", "summary": "The FrameFetchContext::updateTimingInfoForIFrameNavigation function in core/loader/FrameFetchContext.cpp in Blink, as used in Google Chrome before 45.0.2454.85, does not properly restrict the availability of IFRAME Resource Timing API times, which allows remote attackers to obtain sensitive information via crafted JavaScript code that leverages a history.back call.", "scorev2": "5.0", "scorev3": "0.0", "scorev4": "0.0", "modified": "2026-06-17T00:22:08.000", "vector": "NETWORK", "vectorString": "AV:N/AC:L/Au:N/C:P/I:N/A:N", "detail": "fixed-version: Fixed from version >44.0.2403" }, { "id": "CVE-2015-1301", "status": "Patched", "link": "https://nvd.nist.gov/vuln/detail/CVE-2015-1301", "summary": "Multiple unspecified vulnerabilities in Google Chrome before 45.0.2454.85 allow attackers to cause a denial of service or possibly have other impact via unknown vectors.", "scorev2": "7.5", "scorev3": "0.0", "scorev4": "0.0", "modified": "2026-06-17T00:22:09.000", "vector": "NETWORK", "vectorString": "AV:N/AC:L/Au:N/C:P/I:P/A:P", "detail": "fixed-version: Fixed from version >44.0.2403" }, { "id": "CVE-2015-1302", "status": "Patched", "link": "https://nvd.nist.gov/vuln/detail/CVE-2015-1302", "summary": "The PDF viewer in Google Chrome before 46.0.2490.86 does not properly restrict scripting messages and API exposure, which allows remote attackers to bypass the Same Origin Policy via an unintended embedder or unintended plugin loading, related to pdf.js and out_of_process_instance.cc.", "scorev2": "7.5", "scorev3": "0.0", "scorev4": "0.0", "modified": "2026-06-17T00:22:09.000", "vector": "NETWORK", "vectorString": "AV:N/AC:L/Au:N/C:P/I:P/A:P", "detail": "fixed-version: Fixed from version >46.0.2490.80" }, { "id": "CVE-2015-1303", "status": "Patched", "link": "https://nvd.nist.gov/vuln/detail/CVE-2015-1303", "summary": "bindings/core/v8/V8DOMWrapper.h in Blink, as used in Google Chrome before 45.0.2454.101, does not perform a rethrow action to propagate information about a cross-context exception, which allows remote attackers to bypass the Same Origin Policy via a crafted HTML document containing an IFRAME element.", "scorev2": "7.5", "scorev3": "0.0", "scorev4": "0.0", "modified": "2026-06-17T00:22:09.000", "vector": "NETWORK", "vectorString": "AV:N/AC:L/Au:N/C:P/I:P/A:P", "detail": "fixed-version: Fixed from version >45.0.2454.93" }, { "id": "CVE-2015-1304", "status": "Patched", "link": "https://nvd.nist.gov/vuln/detail/CVE-2015-1304", "summary": "object-observe.js in Google V8, as used in Google Chrome before 45.0.2454.101, does not properly restrict method calls on access-checked objects, which allows remote attackers to bypass the Same Origin Policy via a (1) observe or (2) getNotifier call.", "scorev2": "7.5", "scorev3": "0.0", "scorev4": "0.0", "modified": "2026-06-17T00:22:09.000", "vector": "NETWORK", "vectorString": "AV:N/AC:L/Au:N/C:P/I:P/A:P", "detail": "fixed-version: Fixed from version >45.0.2454.93" }, { "id": "CVE-2015-1346", "status": "Patched", "link": "https://nvd.nist.gov/vuln/detail/CVE-2015-1346", "summary": "Multiple unspecified vulnerabilities in Google V8 before 3.30.33.15, as used in Google Chrome before 40.0.2214.91, allow attackers to cause a denial of service or possibly have other impact via unknown vectors.", "scorev2": "7.5", "scorev3": "0.0", "scorev4": "0.0", "modified": "2026-06-17T00:22:14.000", "vector": "NETWORK", "vectorString": "AV:N/AC:L/Au:N/C:P/I:P/A:P", "detail": "fixed-version: Fixed from version >40.0.2214.94" }, { "id": "CVE-2015-1359", "status": "Patched", "link": "https://nvd.nist.gov/vuln/detail/CVE-2015-1359", "summary": "Multiple off-by-one errors in fpdfapi/fpdf_font/font_int.h in PDFium, as used in Google Chrome before 40.0.2214.91, allow remote attackers to cause a denial of service (buffer overflow) or possibly have unspecified other impact via a crafted PDF document, related to an \"intra-object-overflow\" issue, a different vulnerability than CVE-2015-1205.", "scorev2": "6.8", "scorev3": "0.0", "scorev4": "0.0", "modified": "2026-06-17T00:22:15.000", "vector": "NETWORK", "vectorString": "AV:N/AC:M/Au:N/C:P/I:P/A:P", "detail": "fixed-version: Fixed from version >40.0.2214.85" }, { "id": "CVE-2015-1360", "status": "Patched", "link": "https://nvd.nist.gov/vuln/detail/CVE-2015-1360", "summary": "Skia, as used in Google Chrome before 40.0.2214.91, allows remote attackers to cause a denial of service (buffer over-read) or possibly have unspecified other impact via crafted data that is improperly handled during text drawing, related to gpu/GrBitmapTextContext.cpp and gpu/GrDistanceFieldTextContext.cpp, a different vulnerability than CVE-2015-1205.", "scorev2": "7.5", "scorev3": "0.0", "scorev4": "0.0", "modified": "2026-06-17T00:22:15.000", "vector": "NETWORK", "vectorString": "AV:N/AC:L/Au:N/C:P/I:P/A:P", "detail": "fixed-version: Fixed from version >40.0.2214.85" }, { "id": "CVE-2015-1361", "status": "Patched", "link": "https://nvd.nist.gov/vuln/detail/CVE-2015-1361", "summary": "platform/image-decoders/ImageFrame.h in Blink, as used in Google Chrome before 40.0.2214.91, does not initialize a variable that is used in calls to the Skia SkBitmap::setAlphaType function, which might allow remote attackers to cause a denial of service or possibly have unspecified other impact via a crafted HTML document, a different vulnerability than CVE-2015-1205.", "scorev2": "6.8", "scorev3": "0.0", "scorev4": "0.0", "modified": "2026-06-17T00:22:15.000", "vector": "NETWORK", "vectorString": "AV:N/AC:M/Au:N/C:P/I:P/A:P", "detail": "fixed-version: Fixed from version >40.0.2214.85" }, { "id": "CVE-2015-2238", "status": "Patched", "link": "https://nvd.nist.gov/vuln/detail/CVE-2015-2238", "summary": "Multiple unspecified vulnerabilities in Google V8 before 4.1.0.21, as used in Google Chrome before 41.0.2272.76, allow attackers to cause a denial of service or possibly have other impact via unknown vectors.", "scorev2": "7.5", "scorev3": "0.0", "scorev4": "0.0", "modified": "2026-06-17T00:23:47.000", "vector": "NETWORK", "vectorString": "AV:N/AC:L/Au:N/C:P/I:P/A:P", "detail": "fixed-version: Fixed from version >40.0.2214.115" }, { "id": "CVE-2015-2239", "status": "Patched", "link": "https://nvd.nist.gov/vuln/detail/CVE-2015-2239", "summary": "Google Chrome before 41.0.2272.76, when Instant Extended mode is used, does not properly consider the interaction between the \"1993 search\" features and restore-from-disk RELOAD transitions, which makes it easier for remote attackers to spoof the address bar for a search-results page by leveraging (1) a compromised search engine or (2) an XSS vulnerability in a search engine, a different vulnerability than CVE-2015-1231.", "scorev2": "4.3", "scorev3": "0.0", "scorev4": "0.0", "modified": "2026-06-17T00:23:48.000", "vector": "NETWORK", "vectorString": "AV:N/AC:M/Au:N/C:N/I:P/A:N", "detail": "fixed-version: Fixed from version >40.0.2214.115" }, { "id": "CVE-2015-3333", "status": "Patched", "link": "https://nvd.nist.gov/vuln/detail/CVE-2015-3333", "summary": "Multiple unspecified vulnerabilities in Google V8 before 4.2.77.14, as used in Google Chrome before 42.0.2311.90, allow attackers to cause a denial of service or possibly have other impact via unknown vectors.", "scorev2": "7.5", "scorev3": "0.0", "scorev4": "0.0", "modified": "2026-06-17T00:25:45.000", "vector": "NETWORK", "vectorString": "AV:N/AC:L/Au:N/C:P/I:P/A:P", "detail": "fixed-version: Fixed from version >42.0.2311.60" }, { "id": "CVE-2015-3334", "status": "Patched", "link": "https://nvd.nist.gov/vuln/detail/CVE-2015-3334", "summary": "browser/ui/website_settings/website_settings.cc in Google Chrome before 42.0.2311.90 does not always display \"Media: Allowed by you\" in a Permissions table after the user has granted camera permission to a web site, which might make it easier for user-assisted remote attackers to obtain sensitive video data from a device's physical environment via a crafted web site that turns on the camera at a time when the user believes that camera access is prohibited.", "scorev2": "4.3", "scorev3": "0.0", "scorev4": "0.0", "modified": "2026-06-17T00:25:45.000", "vector": "NETWORK", "vectorString": "AV:N/AC:M/Au:N/C:P/I:N/A:N", "detail": "fixed-version: Fixed from version >42.0.2311.60" }, { "id": "CVE-2015-3335", "status": "Patched", "link": "https://nvd.nist.gov/vuln/detail/CVE-2015-3335", "summary": "The NaClSandbox::InitializeLayerTwoSandbox function in components/nacl/loader/sandbox_linux/nacl_sandbox_linux.cc in Google Chrome before 42.0.2311.90 does not have RLIMIT_AS and RLIMIT_DATA limits for Native Client (aka NaCl) processes, which might make it easier for remote attackers to conduct row-hammer attacks or have unspecified other impact by leveraging the ability to run a crafted program in the NaCl sandbox.", "scorev2": "7.5", "scorev3": "0.0", "scorev4": "0.0", "modified": "2026-06-17T00:25:45.000", "vector": "NETWORK", "vectorString": "AV:N/AC:L/Au:N/C:P/I:P/A:P", "detail": "fixed-version: Fixed from version >42.0.2311.60" }, { "id": "CVE-2015-3336", "status": "Patched", "link": "https://nvd.nist.gov/vuln/detail/CVE-2015-3336", "summary": "Google Chrome before 42.0.2311.90 does not always ask the user before proceeding with CONTENT_SETTINGS_TYPE_FULLSCREEN and CONTENT_SETTINGS_TYPE_MOUSELOCK changes, which allows user-assisted remote attackers to cause a denial of service (UI disruption) by constructing a crafted HTML document containing JavaScript code with requestFullScreen and requestPointerLock calls, and arranging for the user to access this document with a file: URL.", "scorev2": "4.3", "scorev3": "0.0", "scorev4": "0.0", "modified": "2026-06-17T00:25:45.000", "vector": "NETWORK", "vectorString": "AV:N/AC:M/Au:N/C:N/I:N/A:P", "detail": "fixed-version: Fixed from version >42.0.2311.60" }, { "id": "CVE-2015-3910", "status": "Patched", "link": "https://nvd.nist.gov/vuln/detail/CVE-2015-3910", "summary": "Multiple unspecified vulnerabilities in Google V8 before 4.3.61.21, as used in Google Chrome before 43.0.2357.65, allow attackers to cause a denial of service or possibly have other impact via unknown vectors.", "scorev2": "7.5", "scorev3": "0.0", "scorev4": "0.0", "modified": "2026-06-17T00:26:29.000", "vector": "NETWORK", "vectorString": "AV:N/AC:L/Au:N/C:P/I:P/A:P", "detail": "fixed-version: Fixed from version >42.0.2311.152" }, { "id": "CVE-2015-4000", "status": "Unpatched", "link": "https://nvd.nist.gov/vuln/detail/CVE-2015-4000", "summary": "The TLS protocol 1.2 and earlier, when a DHE_EXPORT ciphersuite is enabled on a server but not on a client, does not properly convey a DHE_EXPORT choice, which allows man-in-the-middle attackers to conduct cipher-downgrade attacks by rewriting a ClientHello with DHE replaced by DHE_EXPORT and then rewriting a ServerHello with DHE_EXPORT replaced by DHE, aka the \"Logjam\" issue.", "scorev2": "4.3", "scorev3": "3.7", "scorev4": "0.0", "modified": "2026-06-17T00:26:36.000", "vector": "NETWORK", "vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:L/A:N", "detail": "no-version-ranges", "description": "Check package version" }, { "id": "CVE-2015-5605", "status": "Patched", "link": "https://nvd.nist.gov/vuln/detail/CVE-2015-5605", "summary": "The regular-expression implementation in Google V8, as used in Google Chrome before 44.0.2403.89, mishandles interrupts, which allows remote attackers to cause a denial of service (application crash) via crafted JavaScript code, as demonstrated by an error in garbage collection during allocation of a stack-overflow exception message.", "scorev2": "5.0", "scorev3": "0.0", "scorev4": "0.0", "modified": "2026-06-17T00:29:26.000", "vector": "NETWORK", "vectorString": "AV:N/AC:L/Au:N/C:N/I:N/A:P", "detail": "fixed-version: Fixed from version >43.0.2357.134" }, { "id": "CVE-2015-6580", "status": "Patched", "link": "https://nvd.nist.gov/vuln/detail/CVE-2015-6580", "summary": "Multiple unspecified vulnerabilities in Google V8 before 4.5.103.29, as used in Google Chrome before 45.0.2454.85, allow attackers to cause a denial of service or possibly have other impact via unknown vectors.", "scorev2": "7.5", "scorev3": "0.0", "scorev4": "0.0", "modified": "2026-06-17T00:31:05.000", "vector": "NETWORK", "vectorString": "AV:N/AC:L/Au:N/C:P/I:P/A:P", "detail": "fixed-version: Fixed from version >44.0.2403" }, { "id": "CVE-2015-6581", "status": "Patched", "link": "https://nvd.nist.gov/vuln/detail/CVE-2015-6581", "summary": "Double free vulnerability in the opj_j2k_copy_default_tcp_and_create_tcd function in j2k.c in OpenJPEG before r3002, as used in PDFium in Google Chrome before 45.0.2454.85, allows remote attackers to execute arbitrary code or cause a denial of service (heap memory corruption) by triggering a memory-allocation failure.", "scorev2": "7.5", "scorev3": "0.0", "scorev4": "0.0", "modified": "2026-06-17T00:31:05.000", "vector": "NETWORK", "vectorString": "AV:N/AC:L/Au:N/C:P/I:P/A:P", "detail": "fixed-version: Fixed from version >44.0.2403" }, { "id": "CVE-2015-6582", "status": "Patched", "link": "https://nvd.nist.gov/vuln/detail/CVE-2015-6582", "summary": "The decompose function in platform/transforms/TransformationMatrix.cpp in Blink, as used in Google Chrome before 45.0.2454.85, does not verify that a matrix inversion succeeded, which allows remote attackers to cause a denial of service (uninitialized memory access and application crash) or possibly have unspecified other impact via a crafted web site.", "scorev2": "6.8", "scorev3": "0.0", "scorev4": "0.0", "modified": "2026-06-17T00:31:05.000", "vector": "NETWORK", "vectorString": "AV:N/AC:M/Au:N/C:P/I:P/A:P", "detail": "fixed-version: Fixed from version >44.0.2403" }, { "id": "CVE-2015-6583", "status": "Patched", "link": "https://nvd.nist.gov/vuln/detail/CVE-2015-6583", "summary": "Google Chrome before 45.0.2454.85 does not display a location bar for a hosted app's window after navigation away from the installation site, which might make it easier for remote attackers to spoof content via a crafted app, related to browser.cc and hosted_app_browser_controller.cc.", "scorev2": "4.3", "scorev3": "0.0", "scorev4": "0.0", "modified": "2026-06-17T00:31:05.000", "vector": "NETWORK", "vectorString": "AV:N/AC:M/Au:N/C:N/I:P/A:N", "detail": "fixed-version: Fixed from version >44.0.2403" }, { "id": "CVE-2015-6755", "status": "Patched", "link": "https://nvd.nist.gov/vuln/detail/CVE-2015-6755", "summary": "The ContainerNode::parserInsertBefore function in core/dom/ContainerNode.cpp in Blink, as used in Google Chrome before 46.0.2490.71, proceeds with a DOM tree insertion in certain cases where a parent node no longer contains a child node, which allows remote attackers to bypass the Same Origin Policy via crafted JavaScript code.", "scorev2": "7.5", "scorev3": "0.0", "scorev4": "0.0", "modified": "2026-06-17T00:31:22.000", "vector": "NETWORK", "vectorString": "AV:N/AC:L/Au:N/C:P/I:P/A:P", "detail": "fixed-version: Fixed from version >45.0.2454.101" }, { "id": "CVE-2015-6756", "status": "Patched", "link": "https://nvd.nist.gov/vuln/detail/CVE-2015-6756", "summary": "Use-after-free vulnerability in the CPDFSDK_PageView implementation in fpdfsdk/src/fsdk_mgr.cpp in PDFium, as used in Google Chrome before 46.0.2490.71, allows remote attackers to cause a denial of service (heap memory corruption) or possibly have unspecified other impact by leveraging mishandling of a focused annotation in a PDF document.", "scorev2": "6.8", "scorev3": "0.0", "scorev4": "0.0", "modified": "2026-06-17T00:31:22.000", "vector": "NETWORK", "vectorString": "AV:N/AC:M/Au:N/C:P/I:P/A:P", "detail": "fixed-version: Fixed from version >45.0.2454.101" }, { "id": "CVE-2015-6757", "status": "Patched", "link": "https://nvd.nist.gov/vuln/detail/CVE-2015-6757", "summary": "Use-after-free vulnerability in content/browser/service_worker/embedded_worker_instance.cc in the ServiceWorker implementation in Google Chrome before 46.0.2490.71 allows remote attackers to cause a denial of service or possibly have unspecified other impact by leveraging object destruction in a callback.", "scorev2": "7.5", "scorev3": "0.0", "scorev4": "0.0", "modified": "2026-06-17T00:31:22.000", "vector": "NETWORK", "vectorString": "AV:N/AC:L/Au:N/C:P/I:P/A:P", "detail": "fixed-version: Fixed from version >45.0.2454.101" }, { "id": "CVE-2015-6758", "status": "Patched", "link": "https://nvd.nist.gov/vuln/detail/CVE-2015-6758", "summary": "The CPDF_Document::GetPage function in fpdfapi/fpdf_parser/fpdf_parser_document.cpp in PDFium, as used in Google Chrome before 46.0.2490.71, does not properly perform a cast of a dictionary object, which allows remote attackers to cause a denial of service or possibly have unspecified other impact via a crafted PDF document.", "scorev2": "6.8", "scorev3": "0.0", "scorev4": "0.0", "modified": "2026-06-17T00:31:22.000", "vector": "NETWORK", "vectorString": "AV:N/AC:M/Au:N/C:P/I:P/A:P", "detail": "fixed-version: Fixed from version >45.0.2454.101" }, { "id": "CVE-2015-6759", "status": "Patched", "link": "https://nvd.nist.gov/vuln/detail/CVE-2015-6759", "summary": "The shouldTreatAsUniqueOrigin function in platform/weborigin/SecurityOrigin.cpp in Blink, as used in Google Chrome before 46.0.2490.71, does not ensure that the origin of a LocalStorage resource is considered unique, which allows remote attackers to obtain sensitive information via vectors involving a blob: URL.", "scorev2": "5.0", "scorev3": "0.0", "scorev4": "0.0", "modified": "2026-06-17T00:31:22.000", "vector": "NETWORK", "vectorString": "AV:N/AC:L/Au:N/C:P/I:N/A:N", "detail": "fixed-version: Fixed from version >45.0.2454.101" }, { "id": "CVE-2015-6760", "status": "Patched", "link": "https://nvd.nist.gov/vuln/detail/CVE-2015-6760", "summary": "The Image11::map function in renderer/d3d/d3d11/Image11.cpp in libANGLE, as used in Google Chrome before 46.0.2490.71, mishandles mapping failures after device-lost events, which allows remote attackers to cause a denial of service (invalid read or write) or possibly have unspecified other impact via vectors involving a removed device.", "scorev2": "7.5", "scorev3": "0.0", "scorev4": "0.0", "modified": "2026-06-17T00:31:22.000", "vector": "NETWORK", "vectorString": "AV:N/AC:L/Au:N/C:P/I:P/A:P", "detail": "fixed-version: Fixed from version >45.0.2454.101" }, { "id": "CVE-2015-6761", "status": "Patched", "link": "https://nvd.nist.gov/vuln/detail/CVE-2015-6761", "summary": "The update_dimensions function in libavcodec/vp8.c in FFmpeg through 2.8.1, as used in Google Chrome before 46.0.2490.71 and other products, relies on a coefficient-partition count during multi-threaded operation, which allows remote attackers to cause a denial of service (race condition and memory corruption) or possibly have unspecified other impact via a crafted WebM file.", "scorev2": "6.8", "scorev3": "0.0", "scorev4": "0.0", "modified": "2026-06-17T00:31:22.000", "vector": "NETWORK", "vectorString": "AV:N/AC:M/Au:N/C:P/I:P/A:P", "detail": "fixed-version: Fixed from version >45.0.2454.101" }, { "id": "CVE-2015-6762", "status": "Patched", "link": "https://nvd.nist.gov/vuln/detail/CVE-2015-6762", "summary": "The CSSFontFaceSrcValue::fetch function in core/css/CSSFontFaceSrcValue.cpp in the Cascading Style Sheets (CSS) implementation in Blink, as used in Google Chrome before 46.0.2490.71, does not use the CORS cross-origin request algorithm when a font's URL appears to be a same-origin URL, which allows remote web servers to bypass the Same Origin Policy via a redirect.", "scorev2": "7.5", "scorev3": "0.0", "scorev4": "0.0", "modified": "2026-06-17T00:31:23.000", "vector": "NETWORK", "vectorString": "AV:N/AC:L/Au:N/C:P/I:P/A:P", "detail": "fixed-version: Fixed from version >45.0.2454.101" }, { "id": "CVE-2015-6763", "status": "Patched", "link": "https://nvd.nist.gov/vuln/detail/CVE-2015-6763", "summary": "Multiple unspecified vulnerabilities in Google Chrome before 46.0.2490.71 allow attackers to cause a denial of service or possibly have other impact via unknown vectors.", "scorev2": "7.5", "scorev3": "0.0", "scorev4": "0.0", "modified": "2026-06-17T00:31:23.000", "vector": "NETWORK", "vectorString": "AV:N/AC:L/Au:N/C:P/I:P/A:P", "detail": "fixed-version: Fixed from version >45.0.2454.101" }, { "id": "CVE-2015-6764", "status": "Patched", "link": "https://nvd.nist.gov/vuln/detail/CVE-2015-6764", "summary": "The BasicJsonStringifier::SerializeJSArray function in json-stringifier.h in the JSON stringifier in Google V8, as used in Google Chrome before 47.0.2526.73, improperly loads array elements, which allows remote attackers to cause a denial of service (out-of-bounds memory access) or possibly have unspecified other impact via crafted JavaScript code.", "scorev2": "7.5", "scorev3": "9.8", "scorev4": "0.0", "modified": "2026-06-17T00:31:23.000", "vector": "NETWORK", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H", "detail": "fixed-version: Fixed from version >46.0.2490.86" }, { "id": "CVE-2015-6765", "status": "Patched", "link": "https://nvd.nist.gov/vuln/detail/CVE-2015-6765", "summary": "Use-after-free vulnerability in content/browser/appcache/appcache_update_job.cc in Google Chrome before 47.0.2526.73 allows remote attackers to execute arbitrary code or cause a denial of service by leveraging the mishandling of AppCache update jobs.", "scorev2": "10.0", "scorev3": "0.0", "scorev4": "0.0", "modified": "2026-06-17T00:31:23.000", "vector": "NETWORK", "vectorString": "AV:N/AC:L/Au:N/C:C/I:C/A:C", "detail": "fixed-version: Fixed from version >46.0.2490.86" }, { "id": "CVE-2015-6766", "status": "Patched", "link": "https://nvd.nist.gov/vuln/detail/CVE-2015-6766", "summary": "Use-after-free vulnerability in the AppCache implementation in Google Chrome before 47.0.2526.73 allows remote attackers with renderer access to cause a denial of service or possibly have unspecified other impact by leveraging incorrect AppCacheUpdateJob behavior associated with duplicate cache selection.", "scorev2": "7.5", "scorev3": "0.0", "scorev4": "0.0", "modified": "2026-06-17T00:31:23.000", "vector": "NETWORK", "vectorString": "AV:N/AC:L/Au:N/C:P/I:P/A:P", "detail": "fixed-version: Fixed from version >46.0.2490.86" }, { "id": "CVE-2015-6767", "status": "Patched", "link": "https://nvd.nist.gov/vuln/detail/CVE-2015-6767", "summary": "Use-after-free vulnerability in content/browser/appcache/appcache_dispatcher_host.cc in the AppCache implementation in Google Chrome before 47.0.2526.73 allows remote attackers to cause a denial of service or possibly have unspecified other impact by leveraging incorrect pointer maintenance associated with certain callbacks.", "scorev2": "7.5", "scorev3": "0.0", "scorev4": "0.0", "modified": "2026-06-17T00:31:23.000", "vector": "NETWORK", "vectorString": "AV:N/AC:L/Au:N/C:P/I:P/A:P", "detail": "fixed-version: Fixed from version >46.0.2490.86" }, { "id": "CVE-2015-6768", "status": "Patched", "link": "https://nvd.nist.gov/vuln/detail/CVE-2015-6768", "summary": "The DOM implementation in Google Chrome before 47.0.2526.73 allows remote attackers to bypass the Same Origin Policy via unspecified vectors, a different vulnerability than CVE-2015-6770.", "scorev2": "7.5", "scorev3": "0.0", "scorev4": "0.0", "modified": "2026-06-17T00:31:23.000", "vector": "NETWORK", "vectorString": "AV:N/AC:L/Au:N/C:P/I:P/A:P", "detail": "fixed-version: Fixed from version >46.0.2490.86" }, { "id": "CVE-2015-6769", "status": "Patched", "link": "https://nvd.nist.gov/vuln/detail/CVE-2015-6769", "summary": "The provisional-load commit implementation in WebKit/Source/bindings/core/v8/WindowProxy.cpp in Google Chrome before 47.0.2526.73 allows remote attackers to bypass the Same Origin Policy by leveraging a delay in window proxy clearing.", "scorev2": "7.5", "scorev3": "0.0", "scorev4": "0.0", "modified": "2026-06-17T00:31:24.000", "vector": "NETWORK", "vectorString": "AV:N/AC:L/Au:N/C:P/I:P/A:P", "detail": "fixed-version: Fixed from version >46.0.2490.86" }, { "id": "CVE-2015-6770", "status": "Patched", "link": "https://nvd.nist.gov/vuln/detail/CVE-2015-6770", "summary": "The DOM implementation in Google Chrome before 47.0.2526.73 allows remote attackers to bypass the Same Origin Policy via unspecified vectors, a different vulnerability than CVE-2015-6768.", "scorev2": "7.5", "scorev3": "0.0", "scorev4": "0.0", "modified": "2026-06-17T00:31:24.000", "vector": "NETWORK", "vectorString": "AV:N/AC:L/Au:N/C:P/I:P/A:P", "detail": "fixed-version: Fixed from version >46.0.2490.86" }, { "id": "CVE-2015-6771", "status": "Patched", "link": "https://nvd.nist.gov/vuln/detail/CVE-2015-6771", "summary": "js/array.js in Google V8, as used in Google Chrome before 47.0.2526.73, improperly implements certain map and filter operations for arrays, which allows remote attackers to cause a denial of service (out-of-bounds memory access) or possibly have unspecified other impact via crafted JavaScript code.", "scorev2": "7.5", "scorev3": "0.0", "scorev4": "0.0", "modified": "2026-06-17T00:31:24.000", "vector": "NETWORK", "vectorString": "AV:N/AC:L/Au:N/C:P/I:P/A:P", "detail": "fixed-version: Fixed from version >46.0.2490.86" }, { "id": "CVE-2015-6772", "status": "Patched", "link": "https://nvd.nist.gov/vuln/detail/CVE-2015-6772", "summary": "The DOM implementation in Blink, as used in Google Chrome before 47.0.2526.73, does not prevent javascript: URL navigation while a document is being detached, which allows remote attackers to bypass the Same Origin Policy via crafted JavaScript code that improperly interacts with a plugin.", "scorev2": "7.5", "scorev3": "0.0", "scorev4": "0.0", "modified": "2026-06-17T00:31:24.000", "vector": "NETWORK", "vectorString": "AV:N/AC:L/Au:N/C:P/I:P/A:P", "detail": "fixed-version: Fixed from version >46.0.2490.86" }, { "id": "CVE-2015-6773", "status": "Patched", "link": "https://nvd.nist.gov/vuln/detail/CVE-2015-6773", "summary": "The convolution implementation in Skia, as used in Google Chrome before 47.0.2526.73, does not properly constrain row lengths, which allows remote attackers to cause a denial of service (out-of-bounds memory access) or possibly have unspecified other impact via crafted graphics data.", "scorev2": "7.5", "scorev3": "0.0", "scorev4": "0.0", "modified": "2026-06-17T00:31:24.000", "vector": "NETWORK", "vectorString": "AV:N/AC:L/Au:N/C:P/I:P/A:P", "detail": "fixed-version: Fixed from version >46.0.2490.86" }, { "id": "CVE-2015-6774", "status": "Patched", "link": "https://nvd.nist.gov/vuln/detail/CVE-2015-6774", "summary": "Use-after-free vulnerability in the GetLoadTimes function in renderer/loadtimes_extension_bindings.cc in the Extensions implementation in Google Chrome before 47.0.2526.73 allows remote attackers to cause a denial of service or possibly have unspecified other impact via crafted JavaScript code that modifies a pointer used for reporting loadTimes data.", "scorev2": "7.5", "scorev3": "0.0", "scorev4": "0.0", "modified": "2026-06-17T00:31:24.000", "vector": "NETWORK", "vectorString": "AV:N/AC:L/Au:N/C:P/I:P/A:P", "detail": "fixed-version: Fixed from version >46.0.2490.86" }, { "id": "CVE-2015-6775", "status": "Patched", "link": "https://nvd.nist.gov/vuln/detail/CVE-2015-6775", "summary": "fpdfsdk/src/jsapi/fxjs_v8.cpp in PDFium, as used in Google Chrome before 47.0.2526.73, does not use signatures, which allows remote attackers to cause a denial of service or possibly have unspecified other impact via vectors that leverage \"type confusion.\"", "scorev2": "7.5", "scorev3": "0.0", "scorev4": "0.0", "modified": "2026-06-17T00:31:24.000", "vector": "NETWORK", "vectorString": "AV:N/AC:L/Au:N/C:P/I:P/A:P", "detail": "fixed-version: Fixed from version >46.0.2490.86" }, { "id": "CVE-2015-6776", "status": "Patched", "link": "https://nvd.nist.gov/vuln/detail/CVE-2015-6776", "summary": "The opj_dwt_decode_1* functions in dwt.c in OpenJPEG, as used in PDFium in Google Chrome before 47.0.2526.73, allow remote attackers to cause a denial of service (out-of-bounds array access) or possibly have unspecified other impact via crafted JPEG 2000 data that is mishandled during a discrete wavelet transform.", "scorev2": "6.8", "scorev3": "0.0", "scorev4": "0.0", "modified": "2026-06-17T00:31:24.000", "vector": "NETWORK", "vectorString": "AV:N/AC:M/Au:N/C:P/I:P/A:P", "detail": "fixed-version: Fixed from version >46.0.2490.86" }, { "id": "CVE-2015-6777", "status": "Patched", "link": "https://nvd.nist.gov/vuln/detail/CVE-2015-6777", "summary": "Use-after-free vulnerability in the ContainerNode::notifyNodeInsertedInternal function in WebKit/Source/core/dom/ContainerNode.cpp in the DOM implementation in Google Chrome before 47.0.2526.73 allows remote attackers to cause a denial of service or possibly have unspecified other impact via vectors related to DOMCharacterDataModified events for certain detached-subtree insertions.", "scorev2": "7.5", "scorev3": "0.0", "scorev4": "0.0", "modified": "2026-06-17T00:31:24.000", "vector": "NETWORK", "vectorString": "AV:N/AC:L/Au:N/C:P/I:P/A:P", "detail": "fixed-version: Fixed from version >46.0.2490.86" }, { "id": "CVE-2015-6778", "status": "Patched", "link": "https://nvd.nist.gov/vuln/detail/CVE-2015-6778", "summary": "The CJBig2_SymbolDict class in fxcodec/jbig2/JBig2_SymbolDict.cpp in PDFium, as used in Google Chrome before 47.0.2526.73, allows remote attackers to cause a denial of service (out-of-bounds memory access) or possibly have unspecified other impact via a PDF document containing crafted data with JBIG2 compression.", "scorev2": "7.5", "scorev3": "0.0", "scorev4": "0.0", "modified": "2026-06-17T00:31:25.000", "vector": "NETWORK", "vectorString": "AV:N/AC:L/Au:N/C:P/I:P/A:P", "detail": "fixed-version: Fixed from version >46.0.2490.86" }, { "id": "CVE-2015-6779", "status": "Patched", "link": "https://nvd.nist.gov/vuln/detail/CVE-2015-6779", "summary": "PDFium, as used in Google Chrome before 47.0.2526.73, does not properly restrict use of chrome: URLs, which allows remote attackers to bypass intended scheme restrictions via a crafted PDF document, as demonstrated by a document with a link to a chrome://settings URL.", "scorev2": "4.3", "scorev3": "0.0", "scorev4": "0.0", "modified": "2026-06-17T00:31:25.000", "vector": "NETWORK", "vectorString": "AV:N/AC:M/Au:N/C:N/I:P/A:N", "detail": "fixed-version: Fixed from version >46.0.2490.86" }, { "id": "CVE-2015-6780", "status": "Patched", "link": "https://nvd.nist.gov/vuln/detail/CVE-2015-6780", "summary": "Use-after-free vulnerability in the Infobars implementation in Google Chrome before 47.0.2526.73 allows remote attackers to cause a denial of service or possibly have unspecified other impact via a crafted web site, related to browser/ui/views/website_settings/website_settings_popup_view.cc.", "scorev2": "6.8", "scorev3": "0.0", "scorev4": "0.0", "modified": "2026-06-17T00:31:25.000", "vector": "NETWORK", "vectorString": "AV:N/AC:M/Au:N/C:P/I:P/A:P", "detail": "fixed-version: Fixed from version >46.0.2490.86" }, { "id": "CVE-2015-6781", "status": "Patched", "link": "https://nvd.nist.gov/vuln/detail/CVE-2015-6781", "summary": "Integer overflow in the FontData::Bound function in data/font_data.cc in Google sfntly, as used in Google Chrome before 47.0.2526.73, allows remote attackers to cause a denial of service or possibly have unspecified other impact via a crafted offset or length value within font data in an SFNT container.", "scorev2": "7.5", "scorev3": "0.0", "scorev4": "0.0", "modified": "2026-06-17T00:31:25.000", "vector": "NETWORK", "vectorString": "AV:N/AC:L/Au:N/C:P/I:P/A:P", "detail": "fixed-version: Fixed from version >46.0.2490.86" }, { "id": "CVE-2015-6782", "status": "Patched", "link": "https://nvd.nist.gov/vuln/detail/CVE-2015-6782", "summary": "The Document::open function in WebKit/Source/core/dom/Document.cpp in Google Chrome before 47.0.2526.73 does not ensure that page-dismissal event handling is compatible with modal-dialog blocking, which makes it easier for remote attackers to spoof Omnibox content via a crafted web site.", "scorev2": "4.3", "scorev3": "0.0", "scorev4": "0.0", "modified": "2026-06-17T00:31:25.000", "vector": "NETWORK", "vectorString": "AV:N/AC:M/Au:N/C:N/I:P/A:N", "detail": "fixed-version: Fixed from version >46.0.2490.86" }, { "id": "CVE-2015-6784", "status": "Patched", "link": "https://nvd.nist.gov/vuln/detail/CVE-2015-6784", "summary": "The page serializer in Google Chrome before 47.0.2526.73 mishandles Mark of the Web (MOTW) comments for URLs containing a \"--\" sequence, which might allow remote attackers to inject HTML via a crafted URL, as demonstrated by an initial http://example.com?-- substring.", "scorev2": "4.3", "scorev3": "0.0", "scorev4": "0.0", "modified": "2026-06-17T00:31:25.000", "vector": "NETWORK", "vectorString": "AV:N/AC:M/Au:N/C:N/I:P/A:N", "detail": "fixed-version: Fixed from version >46.0.2490.86" }, { "id": "CVE-2015-6785", "status": "Patched", "link": "https://nvd.nist.gov/vuln/detail/CVE-2015-6785", "summary": "The CSPSource::hostMatches function in WebKit/Source/core/frame/csp/CSPSource.cpp in the Content Security Policy (CSP) implementation in Google Chrome before 47.0.2526.73 accepts an x.y hostname as a match for a *.x.y pattern, which might allow remote attackers to bypass intended access restrictions in opportunistic circumstances by leveraging a policy that was intended to be specific to subdomains.", "scorev2": "4.3", "scorev3": "0.0", "scorev4": "0.0", "modified": "2026-06-17T00:31:25.000", "vector": "NETWORK", "vectorString": "AV:N/AC:M/Au:N/C:N/I:P/A:N", "detail": "fixed-version: Fixed from version >46.0.2490.86" }, { "id": "CVE-2015-6786", "status": "Patched", "link": "https://nvd.nist.gov/vuln/detail/CVE-2015-6786", "summary": "The CSPSourceList::matches function in WebKit/Source/core/frame/csp/CSPSourceList.cpp in the Content Security Policy (CSP) implementation in Google Chrome before 47.0.2526.73 accepts a blob:, data:, or filesystem: URL as a match for a * pattern, which allows remote attackers to bypass intended scheme restrictions in opportunistic circumstances by leveraging a policy that relies on this pattern.", "scorev2": "4.3", "scorev3": "0.0", "scorev4": "0.0", "modified": "2026-06-17T00:31:26.000", "vector": "NETWORK", "vectorString": "AV:N/AC:M/Au:N/C:N/I:P/A:N", "detail": "fixed-version: Fixed from version >46.0.2490.86" }, { "id": "CVE-2015-6787", "status": "Patched", "link": "https://nvd.nist.gov/vuln/detail/CVE-2015-6787", "summary": "Multiple unspecified vulnerabilities in Google Chrome before 47.0.2526.73 allow attackers to cause a denial of service or possibly have other impact via unknown vectors.", "scorev2": "10.0", "scorev3": "0.0", "scorev4": "0.0", "modified": "2026-06-17T00:31:26.000", "vector": "NETWORK", "vectorString": "AV:N/AC:L/Au:N/C:C/I:C/A:C", "detail": "fixed-version: Fixed from version >46.0.2490.86" }, { "id": "CVE-2015-6788", "status": "Patched", "link": "https://nvd.nist.gov/vuln/detail/CVE-2015-6788", "summary": "The ObjectBackedNativeHandler class in extensions/renderer/object_backed_native_handler.cc in the extensions subsystem in Google Chrome before 47.0.2526.80 improperly implements handler functions, which allows remote attackers to cause a denial of service or possibly have unspecified other impact via vectors that leverage \"type confusion.\"", "scorev2": "10.0", "scorev3": "0.0", "scorev4": "0.0", "modified": "2026-06-17T00:31:26.000", "vector": "NETWORK", "vectorString": "AV:N/AC:L/Au:N/C:C/I:C/A:C", "detail": "fixed-version: Fixed from version >47.0.2526.73" }, { "id": "CVE-2015-6789", "status": "Patched", "link": "https://nvd.nist.gov/vuln/detail/CVE-2015-6789", "summary": "Race condition in the MutationObserver implementation in Blink, as used in Google Chrome before 47.0.2526.80, allows remote attackers to cause a denial of service (use-after-free) or possibly have unspecified other impact by leveraging unanticipated object deletion.", "scorev2": "9.3", "scorev3": "0.0", "scorev4": "0.0", "modified": "2026-06-17T00:31:26.000", "vector": "NETWORK", "vectorString": "AV:N/AC:M/Au:N/C:C/I:C/A:C", "detail": "fixed-version: Fixed from version >47.0.2526.73" }, { "id": "CVE-2015-6790", "status": "Patched", "link": "https://nvd.nist.gov/vuln/detail/CVE-2015-6790", "summary": "The WebPageSerializerImpl::openTagToString function in WebKit/Source/web/WebPageSerializerImpl.cpp in the page serializer in Google Chrome before 47.0.2526.80 does not properly use HTML entities, which might allow remote attackers to inject arbitrary web script or HTML via a crafted document, as demonstrated by a double-quote character inside a single-quoted string.", "scorev2": "4.3", "scorev3": "0.0", "scorev4": "0.0", "modified": "2026-06-17T00:31:26.000", "vector": "NETWORK", "vectorString": "AV:N/AC:M/Au:N/C:N/I:P/A:N", "detail": "fixed-version: Fixed from version >47.0.2526.73" }, { "id": "CVE-2015-6791", "status": "Patched", "link": "https://nvd.nist.gov/vuln/detail/CVE-2015-6791", "summary": "Multiple unspecified vulnerabilities in Google Chrome before 47.0.2526.80 allow attackers to cause a denial of service or possibly have other impact via unknown vectors.", "scorev2": "10.0", "scorev3": "0.0", "scorev4": "0.0", "modified": "2026-06-17T00:31:26.000", "vector": "NETWORK", "vectorString": "AV:N/AC:L/Au:N/C:C/I:C/A:C", "detail": "fixed-version: Fixed from version >47.0.2526.73" }, { "id": "CVE-2015-6792", "status": "Patched", "link": "https://nvd.nist.gov/vuln/detail/CVE-2015-6792", "summary": "The MIDI subsystem in Google Chrome before 47.0.2526.106 does not properly handle the sending of data, which allows remote attackers to execute arbitrary code or cause a denial of service (application crash) via unspecified vectors, related to midi_manager.cc, midi_manager_alsa.cc, and midi_manager_mac.cc, a different vulnerability than CVE-2015-8664.", "scorev2": "10.0", "scorev3": "9.8", "scorev4": "0.0", "modified": "2026-06-17T00:31:26.000", "vector": "NETWORK", "vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H", "detail": "fixed-version: Fixed from version >47.0.2526.80" }, { "id": "CVE-2015-7834", "status": "Patched", "link": "https://nvd.nist.gov/vuln/detail/CVE-2015-7834", "summary": "Multiple unspecified vulnerabilities in Google V8 before 4.6.85.23, as used in Google Chrome before 46.0.2490.71, allow attackers to cause a denial of service or possibly have other impact via unknown vectors.", "scorev2": "7.5", "scorev3": "0.0", "scorev4": "0.0", "modified": "2026-06-17T00:33:13.000", "vector": "NETWORK", "vectorString": "AV:N/AC:L/Au:N/C:P/I:P/A:P", "detail": "fixed-version: Fixed from version >45.0.2454.101" }, { "id": "CVE-2015-8478", "status": "Patched", "link": "https://nvd.nist.gov/vuln/detail/CVE-2015-8478", "summary": "Multiple unspecified vulnerabilities in Google V8 before 4.7.80.23, as used in Google Chrome before 47.0.2526.73, allow attackers to cause a denial of service or possibly have other impact via unknown vectors.", "scorev2": "7.5", "scorev3": "0.0", "scorev4": "0.0", "modified": "2026-06-17T00:34:38.000", "vector": "NETWORK", "vectorString": "AV:N/AC:L/Au:N/C:P/I:P/A:P", "detail": "fixed-version: Fixed from version >46.0.2490.86" }, { "id": "CVE-2015-8479", "status": "Patched", "link": "https://nvd.nist.gov/vuln/detail/CVE-2015-8479", "summary": "Use-after-free vulnerability in the AudioOutputDevice::OnDeviceAuthorized function in media/audio/audio_output_device.cc in Google Chrome before 47.0.2526.73 allows attackers to cause a denial of service (heap memory corruption) or possibly have unspecified other impact by triggering access to an unauthorized audio output device.", "scorev2": "7.5", "scorev3": "0.0", "scorev4": "0.0", "modified": "2026-06-17T00:34:38.000", "vector": "NETWORK", "vectorString": "AV:N/AC:L/Au:N/C:P/I:P/A:P", "detail": "fixed-version: Fixed from version >46.0.2490.86" }, { "id": "CVE-2015-8480", "status": "Patched", "link": "https://nvd.nist.gov/vuln/detail/CVE-2015-8480", "summary": "The VideoFramePool::PoolImpl::CreateFrame function in media/base/video_frame_pool.cc in Google Chrome before 47.0.2526.73 does not initialize memory for a video-frame data structure, which might allow remote attackers to cause a denial of service (out-of-bounds memory access) or possibly have unspecified other impact by leveraging improper interaction with the vp3_h_loop_filter_c function in libavcodec/vp3dsp.c in FFmpeg.", "scorev2": "10.0", "scorev3": "0.0", "scorev4": "0.0", "modified": "2026-06-17T00:34:38.000", "vector": "NETWORK", "vectorString": "AV:N/AC:L/Au:N/C:C/I:C/A:C", "detail": "fixed-version: Fixed from version >46.0.2490.86" }, { "id": "CVE-2015-8548", "status": "Patched", "link": "https://nvd.nist.gov/vuln/detail/CVE-2015-8548", "summary": "Multiple unspecified vulnerabilities in Google V8 before 4.7.80.23, as used in Google Chrome before 47.0.2526.80, allow attackers to cause a denial of service or possibly have other impact via unknown vectors, a different issue than CVE-2015-8478.", "scorev2": "10.0", "scorev3": "0.0", "scorev4": "0.0", "modified": "2026-06-17T00:34:44.000", "vector": "NETWORK", "vectorString": "AV:N/AC:L/Au:N/C:C/I:C/A:C", "detail": "fixed-version: Fixed from version >47.0.2526.73" }, { "id": "CVE-2015-8664", "status": "Patched", "link": "https://nvd.nist.gov/vuln/detail/CVE-2015-8664", "summary": "Integer overflow in the WebCursor::Deserialize function in content/common/cursors/webcursor.cc in Google Chrome before 47.0.2526.106 allows remote attackers to cause a denial of service or possibly have unspecified other impact via an RGBA pixel array with crafted dimensions, a different vulnerability than CVE-2015-6792.", "scorev2": "7.5", "scorev3": "8.8", "scorev4": "0.0", "modified": "2026-06-17T00:34:59.000", "vector": "NETWORK", "vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H", "detail": "fixed-version: Fixed from version >47.0.2526.80" }, { "id": "CVE-2016-10403", "status": "Patched", "link": "https://nvd.nist.gov/vuln/detail/CVE-2016-10403", "summary": "Insufficient data validation on image data in PDFium in Google Chrome prior to 51.0.2704.63 allowed a remote attacker to perform an out of bounds memory read via a crafted PDF file.", "scorev2": "6.8", "scorev3": "8.8", "scorev4": "0.0", "modified": "2026-06-17T00:39:36.000", "vector": "NETWORK", "vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H", "detail": "fixed-version: Fixed from version 51.0.2704.63" }, { "id": "CVE-2016-1612", "status": "Patched", "link": "https://nvd.nist.gov/vuln/detail/CVE-2016-1612", "summary": "The LoadIC::UpdateCaches function in ic/ic.cc in Google V8, as used in Google Chrome before 48.0.2564.82, does not ensure receiver compatibility before performing a cast of an unspecified variable, which allows remote attackers to cause a denial of service or possibly have unknown other impact via crafted JavaScript code.", "scorev2": "6.8", "scorev3": "7.6", "scorev4": "0.0", "modified": "2026-06-17T00:42:15.000", "vector": "NETWORK", "vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:H", "detail": "fixed-version: Fixed from version >47.0.2526.106" }, { "id": "CVE-2016-1613", "status": "Patched", "link": "https://nvd.nist.gov/vuln/detail/CVE-2016-1613", "summary": "Multiple use-after-free vulnerabilities in the formfiller implementation in PDFium, as used in Google Chrome before 48.0.2564.82, allow remote attackers to cause a denial of service or possibly have unspecified other impact via a crafted PDF document, related to improper tracking of the destruction of (1) IPWL_FocusHandler and (2) IPWL_Provider objects.", "scorev2": "6.8", "scorev3": "7.6", "scorev4": "0.0", "modified": "2026-06-17T00:42:15.000", "vector": "NETWORK", "vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:H", "detail": "fixed-version: Fixed from version >47.0.2526.106" }, { "id": "CVE-2016-1614", "status": "Patched", "link": "https://nvd.nist.gov/vuln/detail/CVE-2016-1614", "summary": "The UnacceleratedImageBufferSurface class in WebKit/Source/platform/graphics/UnacceleratedImageBufferSurface.cpp in Blink, as used in Google Chrome before 48.0.2564.82, mishandles the initialization mode, which allows remote attackers to obtain sensitive information from process memory via a crafted web site.", "scorev2": "4.3", "scorev3": "4.3", "scorev4": "0.0", "modified": "2026-06-17T00:42:15.000", "vector": "NETWORK", "vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:N", "detail": "fixed-version: Fixed from version >47.0.2526.106" }, { "id": "CVE-2016-1615", "status": "Patched", "link": "https://nvd.nist.gov/vuln/detail/CVE-2016-1615", "summary": "The Omnibox implementation in Google Chrome before 48.0.2564.82 allows remote attackers to spoof a document's origin via unspecified vectors.", "scorev2": "4.3", "scorev3": "6.5", "scorev4": "0.0", "modified": "2026-06-17T00:42:15.000", "vector": "NETWORK", "vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:N", "detail": "fixed-version: Fixed from version >47.0.2526.106" }, { "id": "CVE-2016-1616", "status": "Patched", "link": "https://nvd.nist.gov/vuln/detail/CVE-2016-1616", "summary": "The CustomButton::AcceleratorPressed function in ui/views/controls/button/custom_button.cc in Google Chrome before 48.0.2564.82 allows remote attackers to spoof URLs via vectors involving an unfocused custom button.", "scorev2": "4.3", "scorev3": "4.3", "scorev4": "0.0", "modified": "2026-06-17T00:42:15.000", "vector": "NETWORK", "vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N", "detail": "fixed-version: Fixed from version >47.0.2526.106" }, { "id": "CVE-2016-1617", "status": "Patched", "link": "https://nvd.nist.gov/vuln/detail/CVE-2016-1617", "summary": "The CSPSource::schemeMatches function in WebKit/Source/core/frame/csp/CSPSource.cpp in the Content Security Policy (CSP) implementation in Blink, as used in Google Chrome before 48.0.2564.82, does not apply http policies to https URLs and does not apply ws policies to wss URLs, which makes it easier for remote attackers to determine whether a specific HSTS web site has been visited by reading a CSP report.", "scorev2": "4.3", "scorev3": "4.3", "scorev4": "0.0", "modified": "2026-06-17T00:42:16.000", "vector": "NETWORK", "vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:N", "detail": "fixed-version: Fixed from version >47.0.2526.106" }, { "id": "CVE-2016-1618", "status": "Patched", "link": "https://nvd.nist.gov/vuln/detail/CVE-2016-1618", "summary": "Blink, as used in Google Chrome before 48.0.2564.82, does not ensure that a proper cryptographicallyRandomValues random number generator is used, which makes it easier for remote attackers to defeat cryptographic protection mechanisms via unspecified vectors.", "scorev2": "4.3", "scorev3": "6.5", "scorev4": "0.0", "modified": "2026-06-17T00:42:16.000", "vector": "NETWORK", "vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N", "detail": "fixed-version: Fixed from version >47.0.2526.106" }, { "id": "CVE-2016-1619", "status": "Patched", "link": "https://nvd.nist.gov/vuln/detail/CVE-2016-1619", "summary": "Multiple integer overflows in the (1) sycc422_to_rgb and (2) sycc444_to_rgb functions in fxcodec/codec/fx_codec_jpx_opj.cpp in PDFium, as used in Google Chrome before 48.0.2564.82, allow remote attackers to cause a denial of service (out-of-bounds read) or possibly have unspecified other impact via a crafted PDF document.", "scorev2": "6.8", "scorev3": "7.6", "scorev4": "0.0", "modified": "2026-06-17T00:42:16.000", "vector": "NETWORK", "vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:H", "detail": "fixed-version: Fixed from version >47.0.2526.106" }, { "id": "CVE-2016-1620", "status": "Patched", "link": "https://nvd.nist.gov/vuln/detail/CVE-2016-1620", "summary": "Multiple unspecified vulnerabilities in Google Chrome before 48.0.2564.82 allow attackers to cause a denial of service or possibly have other impact via unknown vectors.", "scorev2": "9.3", "scorev3": "8.8", "scorev4": "0.0", "modified": "2026-06-17T00:42:16.000", "vector": "NETWORK", "vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H", "detail": "fixed-version: Fixed from version >47.0.2526.106" }, { "id": "CVE-2016-1622", "status": "Patched", "link": "https://nvd.nist.gov/vuln/detail/CVE-2016-1622", "summary": "The Extensions subsystem in Google Chrome before 48.0.2564.109 does not prevent use of the Object.defineProperty method to override intended extension behavior, which allows remote attackers to bypass the Same Origin Policy via crafted JavaScript code.", "scorev2": "6.8", "scorev3": "8.8", "scorev4": "0.0", "modified": "2026-06-17T00:42:16.000", "vector": "NETWORK", "vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H", "detail": "fixed-version: Fixed from version >48.0.2564.103" }, { "id": "CVE-2016-1623", "status": "Patched", "link": "https://nvd.nist.gov/vuln/detail/CVE-2016-1623", "summary": "The DOM implementation in Google Chrome before 48.0.2564.109 does not properly restrict frame-attach operations from occurring during or after frame-detach operations, which allows remote attackers to bypass the Same Origin Policy via a crafted web site, related to FrameLoader.cpp, HTMLFrameOwnerElement.h, LocalFrame.cpp, and WebLocalFrameImpl.cpp.", "scorev2": "6.8", "scorev3": "8.8", "scorev4": "0.0", "modified": "2026-06-17T00:42:16.000", "vector": "NETWORK", "vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H", "detail": "fixed-version: Fixed from version >48.0.2564.103" }, { "id": "CVE-2016-1624", "status": "Patched", "link": "https://nvd.nist.gov/vuln/detail/CVE-2016-1624", "summary": "Integer underflow in the ProcessCommandsInternal function in dec/decode.c in Brotli, as used in Google Chrome before 48.0.2564.109, allows remote attackers to cause a denial of service (buffer overflow) or possibly have unspecified other impact via crafted data with brotli compression.", "scorev2": "6.8", "scorev3": "8.8", "scorev4": "0.0", "modified": "2026-06-17T00:42:17.000", "vector": "NETWORK", "vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H", "detail": "fixed-version: Fixed from version >48.0.2564.103" }, { "id": "CVE-2016-1625", "status": "Patched", "link": "https://nvd.nist.gov/vuln/detail/CVE-2016-1625", "summary": "The Chrome Instant feature in Google Chrome before 48.0.2564.109 does not ensure that a New Tab Page (NTP) navigation target is on the most-visited or suggestions list, which allows remote attackers to bypass intended restrictions via unspecified vectors, related to instant_service.cc and search_tab_helper.cc.", "scorev2": "4.3", "scorev3": "4.3", "scorev4": "0.0", "modified": "2026-06-17T00:42:17.000", "vector": "NETWORK", "vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:N", "detail": "fixed-version: Fixed from version >48.0.2564.103" }, { "id": "CVE-2016-1626", "status": "Patched", "link": "https://nvd.nist.gov/vuln/detail/CVE-2016-1626", "summary": "The opj_pi_update_decode_poc function in pi.c in OpenJPEG, as used in PDFium in Google Chrome before 48.0.2564.109, miscalculates a certain layer index value, which allows remote attackers to cause a denial of service (out-of-bounds read) via a crafted PDF document.", "scorev2": "4.3", "scorev3": "4.3", "scorev4": "0.0", "modified": "2026-06-17T00:42:17.000", "vector": "NETWORK", "vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:N", "detail": "version-not-in-range" }, { "id": "CVE-2016-1627", "status": "Patched", "link": "https://nvd.nist.gov/vuln/detail/CVE-2016-1627", "summary": "The Developer Tools (aka DevTools) subsystem in Google Chrome before 48.0.2564.109 does not validate URL schemes and ensure that the remoteBase parameter is associated with a chrome-devtools-frontend.appspot.com URL, which allows remote attackers to bypass intended access restrictions via a crafted URL, related to browser/devtools/devtools_ui_bindings.cc and WebKit/Source/devtools/front_end/Runtime.js.", "scorev2": "6.8", "scorev3": "8.8", "scorev4": "0.0", "modified": "2026-06-17T00:42:17.000", "vector": "NETWORK", "vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H", "detail": "fixed-version: Fixed from version >48.0.2564.103" }, { "id": "CVE-2016-1628", "status": "Patched", "link": "https://nvd.nist.gov/vuln/detail/CVE-2016-1628", "summary": "pi.c in OpenJPEG, as used in PDFium in Google Chrome before 48.0.2564.109, does not validate a certain precision value, which allows remote attackers to execute arbitrary code or cause a denial of service (out-of-bounds read) via a crafted JPEG 2000 image in a PDF document, related to the opj_pi_next_rpcl, opj_pi_next_pcrl, and opj_pi_next_cprl functions.", "scorev2": "6.8", "scorev3": "6.3", "scorev4": "0.0", "modified": "2026-06-17T00:42:17.000", "vector": "NETWORK", "vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:L", "detail": "fixed-version: Fixed from version >48.0.2564.103" }, { "id": "CVE-2016-1629", "status": "Patched", "link": "https://nvd.nist.gov/vuln/detail/CVE-2016-1629", "summary": "Google Chrome before 48.0.2564.116 allows remote attackers to bypass the Blink Same Origin Policy and a sandbox protection mechanism via unspecified vectors.", "scorev2": "10.0", "scorev3": "9.8", "scorev4": "0.0", "modified": "2026-06-17T00:42:17.000", "vector": "NETWORK", "vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H", "detail": "fixed-version: Fixed from version >48.0.2564.109" }, { "id": "CVE-2016-1630", "status": "Patched", "link": "https://nvd.nist.gov/vuln/detail/CVE-2016-1630", "summary": "The ContainerNode::parserRemoveChild function in WebKit/Source/core/dom/ContainerNode.cpp in Blink, as used in Google Chrome before 49.0.2623.75, mishandles widget updates, which makes it easier for remote attackers to bypass the Same Origin Policy via a crafted web site.", "scorev2": "6.8", "scorev3": "8.8", "scorev4": "0.0", "modified": "2026-06-17T00:42:17.000", "vector": "NETWORK", "vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H", "detail": "fixed-version: Fixed from version >48.0.2564.116" }, { "id": "CVE-2016-1631", "status": "Patched", "link": "https://nvd.nist.gov/vuln/detail/CVE-2016-1631", "summary": "The PPB_Flash_MessageLoop_Impl::InternalRun function in content/renderer/pepper/ppb_flash_message_loop_impl.cc in the Pepper plugin in Google Chrome before 49.0.2623.75 mishandles nested message loops, which allows remote attackers to bypass the Same Origin Policy via a crafted web site.", "scorev2": "6.8", "scorev3": "8.8", "scorev4": "0.0", "modified": "2026-06-17T00:42:17.000", "vector": "NETWORK", "vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H", "detail": "fixed-version: Fixed from version >48.0.2564.116" }, { "id": "CVE-2016-1632", "status": "Patched", "link": "https://nvd.nist.gov/vuln/detail/CVE-2016-1632", "summary": "The Extensions subsystem in Google Chrome before 49.0.2623.75 does not properly maintain own properties, which allows remote attackers to bypass intended access restrictions via crafted JavaScript code that triggers an incorrect cast, related to extensions/renderer/v8_helpers.h and gin/converter.h.", "scorev2": "6.8", "scorev3": "8.8", "scorev4": "0.0", "modified": "2026-06-17T00:42:18.000", "vector": "NETWORK", "vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H", "detail": "fixed-version: Fixed from version >48.0.2564.116" }, { "id": "CVE-2016-1633", "status": "Patched", "link": "https://nvd.nist.gov/vuln/detail/CVE-2016-1633", "summary": "Use-after-free vulnerability in Blink, as used in Google Chrome before 49.0.2623.75, allows remote attackers to cause a denial of service or possibly have unspecified other impact via unknown vectors.", "scorev2": "10.0", "scorev3": "9.8", "scorev4": "0.0", "modified": "2026-06-17T00:42:18.000", "vector": "NETWORK", "vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H", "detail": "fixed-version: Fixed from version >48.0.2564.116" }, { "id": "CVE-2016-1634", "status": "Patched", "link": "https://nvd.nist.gov/vuln/detail/CVE-2016-1634", "summary": "Use-after-free vulnerability in the StyleResolver::appendCSSStyleSheet function in WebKit/Source/core/css/resolver/StyleResolver.cpp in Blink, as used in Google Chrome before 49.0.2623.75, allows remote attackers to cause a denial of service or possibly have unspecified other impact via a crafted web site that triggers Cascading Style Sheets (CSS) style invalidation during a certain subtree-removal action.", "scorev2": "9.3", "scorev3": "8.8", "scorev4": "0.0", "modified": "2026-06-17T00:42:18.000", "vector": "NETWORK", "vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H", "detail": "fixed-version: Fixed from version >48.0.2564.116" }, { "id": "CVE-2016-1635", "status": "Patched", "link": "https://nvd.nist.gov/vuln/detail/CVE-2016-1635", "summary": "extensions/renderer/render_frame_observer_natives.cc in Google Chrome before 49.0.2623.75 does not properly consider object lifetimes and re-entrancy issues during OnDocumentElementCreated handling, which allows remote attackers to cause a denial of service (use-after-free) or possibly have unspecified other impact via unknown vectors.", "scorev2": "10.0", "scorev3": "9.8", "scorev4": "0.0", "modified": "2026-06-17T00:42:18.000", "vector": "NETWORK", "vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H", "detail": "fixed-version: Fixed from version >48.0.2564.116" }, { "id": "CVE-2016-1636", "status": "Patched", "link": "https://nvd.nist.gov/vuln/detail/CVE-2016-1636", "summary": "The PendingScript::notifyFinished function in WebKit/Source/core/dom/PendingScript.cpp in Google Chrome before 49.0.2623.75 relies on memory-cache information about integrity-check occurrences instead of integrity-check successes, which allows remote attackers to bypass the Subresource Integrity (aka SRI) protection mechanism by triggering two loads of the same resource.", "scorev2": "7.5", "scorev3": "9.8", "scorev4": "0.0", "modified": "2026-06-17T00:42:18.000", "vector": "NETWORK", "vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H", "detail": "fixed-version: Fixed from version >48.0.2564.116" }, { "id": "CVE-2016-1637", "status": "Patched", "link": "https://nvd.nist.gov/vuln/detail/CVE-2016-1637", "summary": "The SkATan2_255 function in effects/gradients/SkSweepGradient.cpp in Skia, as used in Google Chrome before 49.0.2623.75, mishandles arctangent calculations, which allows remote attackers to obtain sensitive information via a crafted web site.", "scorev2": "4.3", "scorev3": "6.5", "scorev4": "0.0", "modified": "2026-06-17T00:42:18.000", "vector": "NETWORK", "vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N", "detail": "fixed-version: Fixed from version >48.0.2564.116" }, { "id": "CVE-2016-1638", "status": "Patched", "link": "https://nvd.nist.gov/vuln/detail/CVE-2016-1638", "summary": "extensions/renderer/resources/platform_app.js in the Extensions subsystem in Google Chrome before 49.0.2623.75 does not properly restrict use of Web APIs, which allows remote attackers to bypass intended access restrictions via a crafted platform app.", "scorev2": "6.8", "scorev3": "6.3", "scorev4": "0.0", "modified": "2026-06-17T00:42:18.000", "vector": "NETWORK", "vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:L", "detail": "fixed-version: Fixed from version >48.0.2564.116" }, { "id": "CVE-2016-1639", "status": "Patched", "link": "https://nvd.nist.gov/vuln/detail/CVE-2016-1639", "summary": "Use-after-free vulnerability in browser/extensions/api/webrtc_audio_private/webrtc_audio_private_api.cc in the WebRTC Audio Private API implementation in Google Chrome before 49.0.2623.75 allows remote attackers to cause a denial of service or possibly have unspecified other impact by leveraging incorrect reliance on the resource context pointer.", "scorev2": "10.0", "scorev3": "9.8", "scorev4": "0.0", "modified": "2026-06-17T00:42:19.000", "vector": "NETWORK", "vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H", "detail": "fixed-version: Fixed from version >48.0.2564.116" }, { "id": "CVE-2016-1640", "status": "Patched", "link": "https://nvd.nist.gov/vuln/detail/CVE-2016-1640", "summary": "The Web Store inline-installer implementation in the Extensions UI in Google Chrome before 49.0.2623.75 does not block installations upon deletion of an installation frame, which makes it easier for remote attackers to trick a user into believing that an installation request originated from the user's next navigation target via a crafted web site.", "scorev2": "4.3", "scorev3": "4.3", "scorev4": "0.0", "modified": "2026-06-17T00:42:19.000", "vector": "NETWORK", "vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N", "detail": "fixed-version: Fixed from version >48.0.2564.116" }, { "id": "CVE-2016-1641", "status": "Patched", "link": "https://nvd.nist.gov/vuln/detail/CVE-2016-1641", "summary": "Use-after-free vulnerability in content/browser/web_contents/web_contents_impl.cc in Google Chrome before 49.0.2623.75 allows remote attackers to cause a denial of service or possibly have unspecified other impact by triggering an image download after a certain data structure is deleted, as demonstrated by a favicon.ico download.", "scorev2": "9.3", "scorev3": "8.8", "scorev4": "0.0", "modified": "2026-06-17T00:42:19.000", "vector": "NETWORK", "vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H", "detail": "fixed-version: Fixed from version >48.0.2564.116" }, { "id": "CVE-2016-1642", "status": "Patched", "link": "https://nvd.nist.gov/vuln/detail/CVE-2016-1642", "summary": "Multiple unspecified vulnerabilities in Google Chrome before 49.0.2623.75 allow attackers to cause a denial of service or possibly have other impact via unknown vectors.", "scorev2": "10.0", "scorev3": "9.8", "scorev4": "0.0", "modified": "2026-06-17T00:42:19.000", "vector": "NETWORK", "vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H", "detail": "fixed-version: Fixed from version >48.0.2564.116" }, { "id": "CVE-2016-1643", "status": "Patched", "link": "https://nvd.nist.gov/vuln/detail/CVE-2016-1643", "summary": "The ImageInputType::ensurePrimaryContent function in WebKit/Source/core/html/forms/ImageInputType.cpp in Blink, as used in Google Chrome before 49.0.2623.87, does not properly maintain the user agent shadow DOM, which allows remote attackers to cause a denial of service or possibly have unspecified other impact via vectors that leverage \"type confusion.\"", "scorev2": "9.3", "scorev3": "8.8", "scorev4": "0.0", "modified": "2026-06-17T00:42:19.000", "vector": "NETWORK", "vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H", "detail": "fixed-version: Fixed from version >49.0.2623.75" }, { "id": "CVE-2016-1644", "status": "Patched", "link": "https://nvd.nist.gov/vuln/detail/CVE-2016-1644", "summary": "WebKit/Source/core/layout/LayoutObject.cpp in Blink, as used in Google Chrome before 49.0.2623.87, does not properly restrict relayout scheduling, which allows remote attackers to cause a denial of service (use-after-free) or possibly have unspecified other impact via a crafted HTML document.", "scorev2": "9.3", "scorev3": "8.8", "scorev4": "0.0", "modified": "2026-06-17T00:42:19.000", "vector": "NETWORK", "vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H", "detail": "fixed-version: Fixed from version >49.0.2623.75" }, { "id": "CVE-2016-1645", "status": "Patched", "link": "https://nvd.nist.gov/vuln/detail/CVE-2016-1645", "summary": "Multiple integer signedness errors in the opj_j2k_update_image_data function in j2k.c in OpenJPEG, as used in PDFium in Google Chrome before 49.0.2623.87, allow remote attackers to cause a denial of service (incorrect cast and out-of-bounds write) or possibly have unspecified other impact via crafted JPEG 2000 data.", "scorev2": "9.3", "scorev3": "8.8", "scorev4": "0.0", "modified": "2026-06-17T00:42:19.000", "vector": "NETWORK", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H", "detail": "fixed-version: Fixed from version >49.0.2623.75" }, { "id": "CVE-2016-1646", "status": "Patched", "link": "https://nvd.nist.gov/vuln/detail/CVE-2016-1646", "summary": "The Array.prototype.concat implementation in builtins.cc in Google V8, as used in Google Chrome before 49.0.2623.108, does not properly consider element data types, which allows remote attackers to cause a denial of service (out-of-bounds read) or possibly have unspecified other impact via crafted JavaScript code.", "scorev2": "9.3", "scorev3": "8.8", "scorev4": "0.0", "modified": "2026-06-17T00:42:19.000", "vector": "NETWORK", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H", "detail": "fixed-version: Fixed from version 49.0.2623.108" }, { "id": "CVE-2016-1647", "status": "Patched", "link": "https://nvd.nist.gov/vuln/detail/CVE-2016-1647", "summary": "Use-after-free vulnerability in the RenderWidgetHostImpl::Destroy function in content/browser/renderer_host/render_widget_host_impl.cc in the Navigation implementation in Google Chrome before 49.0.2623.108 allows remote attackers to cause a denial of service or possibly have unspecified other impact via unknown vectors.", "scorev2": "9.3", "scorev3": "8.8", "scorev4": "0.0", "modified": "2026-06-17T00:42:20.000", "vector": "NETWORK", "vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H", "detail": "fixed-version: Fixed from version >49.0.2623.95" }, { "id": "CVE-2016-1648", "status": "Patched", "link": "https://nvd.nist.gov/vuln/detail/CVE-2016-1648", "summary": "Use-after-free vulnerability in the GetLoadTimes function in renderer/loadtimes_extension_bindings.cc in the Extensions implementation in Google Chrome before 49.0.2623.108 allows remote attackers to cause a denial of service or possibly have unspecified other impact via crafted JavaScript code.", "scorev2": "9.3", "scorev3": "8.8", "scorev4": "0.0", "modified": "2026-06-17T00:42:20.000", "vector": "NETWORK", "vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H", "detail": "fixed-version: Fixed from version >49.0.2623.95" }, { "id": "CVE-2016-1649", "status": "Patched", "link": "https://nvd.nist.gov/vuln/detail/CVE-2016-1649", "summary": "The Program::getUniformInternal function in Program.cpp in libANGLE, as used in Google Chrome before 49.0.2623.108, does not properly handle a certain data-type mismatch, which allows remote attackers to cause a denial of service (buffer overflow) or possibly have unspecified other impact via crafted shader stages.", "scorev2": "9.3", "scorev3": "8.8", "scorev4": "0.0", "modified": "2026-06-17T00:42:20.000", "vector": "NETWORK", "vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H", "detail": "fixed-version: Fixed from version >49.0.2623.95" }, { "id": "CVE-2016-1650", "status": "Patched", "link": "https://nvd.nist.gov/vuln/detail/CVE-2016-1650", "summary": "The PageCaptureSaveAsMHTMLFunction::ReturnFailure function in browser/extensions/api/page_capture/page_capture_api.cc in Google Chrome before 49.0.2623.108 allows attackers to cause a denial of service or possibly have unspecified other impact by triggering an error in creating an MHTML document.", "scorev2": "9.3", "scorev3": "8.8", "scorev4": "0.0", "modified": "2026-06-17T00:42:20.000", "vector": "NETWORK", "vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H", "detail": "fixed-version: Fixed from version >49.0.2623.95" }, { "id": "CVE-2016-1651", "status": "Patched", "link": "https://nvd.nist.gov/vuln/detail/CVE-2016-1651", "summary": "fxcodec/codec/fx_codec_jpx_opj.cpp in PDFium, as used in Google Chrome before 50.0.2661.75, does not properly implement the sycc420_to_rgb and sycc422_to_rgb functions, which allows remote attackers to obtain sensitive information from process memory or cause a denial of service (out-of-bounds read) via crafted JPEG 2000 data in a PDF document.", "scorev2": "5.8", "scorev3": "8.1", "scorev4": "0.0", "modified": "2026-06-17T00:42:20.000", "vector": "NETWORK", "vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:H", "detail": "fixed-version: Fixed from version >49.0.2623.112" }, { "id": "CVE-2016-1652", "status": "Patched", "link": "https://nvd.nist.gov/vuln/detail/CVE-2016-1652", "summary": "Cross-site scripting (XSS) vulnerability in the ModuleSystem::RequireForJsInner function in extensions/renderer/module_system.cc in the Extensions subsystem in Google Chrome before 50.0.2661.75 allows remote attackers to inject arbitrary web script or HTML via a crafted web site, aka \"Universal XSS (UXSS).\"", "scorev2": "4.3", "scorev3": "6.1", "scorev4": "0.0", "modified": "2026-06-17T00:42:20.000", "vector": "NETWORK", "vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N", "detail": "fixed-version: Fixed from version >49.0.2623.112" }, { "id": "CVE-2016-1653", "status": "Patched", "link": "https://nvd.nist.gov/vuln/detail/CVE-2016-1653", "summary": "The LoadBuffer implementation in Google V8, as used in Google Chrome before 50.0.2661.75, mishandles data types, which allows remote attackers to cause a denial of service or possibly have unspecified other impact via crafted JavaScript code that triggers an out-of-bounds write operation, related to compiler/pipeline.cc and compiler/simplified-lowering.cc.", "scorev2": "9.3", "scorev3": "8.8", "scorev4": "0.0", "modified": "2026-06-17T00:42:20.000", "vector": "NETWORK", "vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H", "detail": "fixed-version: Fixed from version >49.0.2623.112" }, { "id": "CVE-2016-1654", "status": "Patched", "link": "https://nvd.nist.gov/vuln/detail/CVE-2016-1654", "summary": "The media subsystem in Google Chrome before 50.0.2661.75 does not initialize an unspecified data structure, which allows remote attackers to cause a denial of service (invalid read operation) via unknown vectors.", "scorev2": "4.3", "scorev3": "6.5", "scorev4": "0.0", "modified": "2026-06-17T00:42:21.000", "vector": "NETWORK", "vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H", "detail": "fixed-version: Fixed from version >49.0.2623.112" }, { "id": "CVE-2016-1655", "status": "Patched", "link": "https://nvd.nist.gov/vuln/detail/CVE-2016-1655", "summary": "Google Chrome before 50.0.2661.75 does not properly consider that frame removal may occur during callback execution, which allows remote attackers to cause a denial of service (use-after-free) or possibly have unspecified other impact via a crafted extension.", "scorev2": "6.8", "scorev3": "8.8", "scorev4": "0.0", "modified": "2026-06-17T00:42:21.000", "vector": "NETWORK", "vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H", "detail": "fixed-version: Fixed from version >49.0.2623.112" }, { "id": "CVE-2016-1656", "status": "Patched", "link": "https://nvd.nist.gov/vuln/detail/CVE-2016-1656", "summary": "The download implementation in Google Chrome before 50.0.2661.75 on Android allows remote attackers to bypass intended pathname restrictions via unspecified vectors.", "scorev2": "5.0", "scorev3": "7.5", "scorev4": "0.0", "modified": "2026-06-17T00:42:21.000", "vector": "NETWORK", "vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N", "detail": "fixed-version: Fixed from version >49.0.2623.112" }, { "id": "CVE-2016-1657", "status": "Patched", "link": "https://nvd.nist.gov/vuln/detail/CVE-2016-1657", "summary": "The WebContentsImpl::FocusLocationBarByDefault function in content/browser/web_contents/web_contents_impl.cc in Google Chrome before 50.0.2661.75 mishandles focus for certain about:blank pages, which allows remote attackers to spoof the address bar via a crafted URL.", "scorev2": "4.3", "scorev3": "4.3", "scorev4": "0.0", "modified": "2026-06-17T00:42:21.000", "vector": "NETWORK", "vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N", "detail": "fixed-version: Fixed from version >49.0.2623.112" }, { "id": "CVE-2016-1658", "status": "Patched", "link": "https://nvd.nist.gov/vuln/detail/CVE-2016-1658", "summary": "The Extensions subsystem in Google Chrome before 50.0.2661.75 incorrectly relies on GetOrigin method calls for origin comparisons, which allows remote attackers to bypass the Same Origin Policy and obtain sensitive information via a crafted extension.", "scorev2": "4.3", "scorev3": "4.3", "scorev4": "0.0", "modified": "2026-06-17T00:42:21.000", "vector": "NETWORK", "vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:N", "detail": "fixed-version: Fixed from version >49.0.2623.112" }, { "id": "CVE-2016-1659", "status": "Patched", "link": "https://nvd.nist.gov/vuln/detail/CVE-2016-1659", "summary": "Multiple unspecified vulnerabilities in Google Chrome before 50.0.2661.75 allow attackers to cause a denial of service or possibly have other impact via unknown vectors.", "scorev2": "10.0", "scorev3": "9.8", "scorev4": "0.0", "modified": "2026-06-17T00:42:21.000", "vector": "NETWORK", "vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H", "detail": "fixed-version: Fixed from version >49.0.2623.112" }, { "id": "CVE-2016-1660", "status": "Patched", "link": "https://nvd.nist.gov/vuln/detail/CVE-2016-1660", "summary": "Blink, as used in Google Chrome before 50.0.2661.94, mishandles assertions in the WTF::BitArray and WTF::double_conversion::Vector classes, which allows remote attackers to cause a denial of service (out-of-bounds write) or possibly have unspecified other impact via a crafted web site.", "scorev2": "6.8", "scorev3": "8.8", "scorev4": "0.0", "modified": "2026-06-17T00:42:21.000", "vector": "NETWORK", "vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H", "detail": "fixed-version: Fixed from version >50.0.2661.87" }, { "id": "CVE-2016-1661", "status": "Patched", "link": "https://nvd.nist.gov/vuln/detail/CVE-2016-1661", "summary": "Blink, as used in Google Chrome before 50.0.2661.94, does not ensure that frames satisfy a check for the same renderer process in addition to a Same Origin Policy check, which allows remote attackers to cause a denial of service (memory corruption) or possibly have unspecified other impact via a crafted web site, related to BindingSecurity.cpp and DOMWindow.cpp.", "scorev2": "8.3", "scorev3": "8.0", "scorev4": "0.0", "modified": "2026-06-17T00:42:21.000", "vector": "NETWORK", "vectorString": "CVSS:3.0/AV:N/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:H", "detail": "fixed-version: Fixed from version >50.0.2661.87" }, { "id": "CVE-2016-1662", "status": "Patched", "link": "https://nvd.nist.gov/vuln/detail/CVE-2016-1662", "summary": "extensions/renderer/gc_callback.cc in Google Chrome before 50.0.2661.94 does not prevent fallback execution once the Garbage Collection callback has started, which allows remote attackers to cause a denial of service (use-after-free) or possibly have unspecified other impact via unknown vectors.", "scorev2": "10.0", "scorev3": "9.8", "scorev4": "0.0", "modified": "2026-06-17T00:42:22.000", "vector": "NETWORK", "vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H", "detail": "fixed-version: Fixed from version >50.0.2661.87" }, { "id": "CVE-2016-1663", "status": "Patched", "link": "https://nvd.nist.gov/vuln/detail/CVE-2016-1663", "summary": "The SerializedScriptValue::transferArrayBuffers function in WebKit/Source/bindings/core/v8/SerializedScriptValue.cpp in the V8 bindings in Blink, as used in Google Chrome before 50.0.2661.94, mishandles certain array-buffer data structures, which allows remote attackers to cause a denial of service (use-after-free) or possibly have unspecified other impact via a crafted web site.", "scorev2": "6.8", "scorev3": "8.8", "scorev4": "0.0", "modified": "2026-06-17T00:42:22.000", "vector": "NETWORK", "vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H", "detail": "fixed-version: Fixed from version >50.0.2661.87" }, { "id": "CVE-2016-1664", "status": "Patched", "link": "https://nvd.nist.gov/vuln/detail/CVE-2016-1664", "summary": "The HistoryController::UpdateForCommit function in content/renderer/history_controller.cc in Google Chrome before 50.0.2661.94 mishandles the interaction between subframe forward navigations and other forward navigations, which allows remote attackers to spoof the address bar via a crafted web site.", "scorev2": "4.3", "scorev3": "4.3", "scorev4": "0.0", "modified": "2026-06-17T00:42:22.000", "vector": "NETWORK", "vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N", "detail": "fixed-version: Fixed from version >50.0.2661.87" }, { "id": "CVE-2016-1665", "status": "Patched", "link": "https://nvd.nist.gov/vuln/detail/CVE-2016-1665", "summary": "The JSGenericLowering class in compiler/js-generic-lowering.cc in Google V8, as used in Google Chrome before 50.0.2661.94, mishandles comparison operators, which allows remote attackers to obtain sensitive information via crafted JavaScript code.", "scorev2": "4.3", "scorev3": "6.5", "scorev4": "0.0", "modified": "2026-06-17T00:42:22.000", "vector": "NETWORK", "vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N", "detail": "fixed-version: Fixed from version >50.0.2661.87" }, { "id": "CVE-2016-1666", "status": "Patched", "link": "https://nvd.nist.gov/vuln/detail/CVE-2016-1666", "summary": "Multiple unspecified vulnerabilities in Google Chrome before 50.0.2661.94 allow attackers to cause a denial of service or possibly have other impact via unknown vectors.", "scorev2": "7.5", "scorev3": "9.8", "scorev4": "0.0", "modified": "2026-06-17T00:42:22.000", "vector": "NETWORK", "vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H", "detail": "fixed-version: Fixed from version >50.0.2661.87" }, { "id": "CVE-2016-1667", "status": "Patched", "link": "https://nvd.nist.gov/vuln/detail/CVE-2016-1667", "summary": "The TreeScope::adoptIfNeeded function in WebKit/Source/core/dom/TreeScope.cpp in the DOM implementation in Blink, as used in Google Chrome before 50.0.2661.102, does not prevent script execution during node-adoption operations, which allows remote attackers to bypass the Same Origin Policy via a crafted web site.", "scorev2": "6.8", "scorev3": "8.8", "scorev4": "0.0", "modified": "2026-06-17T00:42:22.000", "vector": "NETWORK", "vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H", "detail": "fixed-version: Fixed from version >50.0.2661.87" }, { "id": "CVE-2016-1668", "status": "Patched", "link": "https://nvd.nist.gov/vuln/detail/CVE-2016-1668", "summary": "The forEachForBinding function in WebKit/Source/bindings/core/v8/Iterable.h in the V8 bindings in Blink, as used in Google Chrome before 50.0.2661.102, uses an improper creation context, which allows remote attackers to bypass the Same Origin Policy via a crafted web site.", "scorev2": "6.8", "scorev3": "8.8", "scorev4": "0.0", "modified": "2026-06-17T00:42:22.000", "vector": "NETWORK", "vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H", "detail": "fixed-version: Fixed from version >50.0.2661.87" }, { "id": "CVE-2016-1669", "status": "Patched", "link": "https://nvd.nist.gov/vuln/detail/CVE-2016-1669", "summary": "The Zone::New function in zone.cc in Google V8 before 5.0.71.47, as used in Google Chrome before 50.0.2661.102, does not properly determine when to expand certain memory allocations, which allows remote attackers to cause a denial of service (buffer overflow) or possibly have unspecified other impact via crafted JavaScript code.", "scorev2": "9.3", "scorev3": "8.8", "scorev4": "0.0", "modified": "2026-06-17T00:42:23.000", "vector": "NETWORK", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H", "detail": "fixed-version: Fixed from version >50.0.2661.87" }, { "id": "CVE-2016-1670", "status": "Patched", "link": "https://nvd.nist.gov/vuln/detail/CVE-2016-1670", "summary": "Race condition in the ResourceDispatcherHostImpl::BeginRequest function in content/browser/loader/resource_dispatcher_host_impl.cc in Google Chrome before 50.0.2661.102 allows remote attackers to make arbitrary HTTP requests by leveraging access to a renderer process and reusing a request ID.", "scorev2": "2.6", "scorev3": "5.3", "scorev4": "0.0", "modified": "2026-06-17T00:42:23.000", "vector": "NETWORK", "vectorString": "CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:N/I:H/A:N", "detail": "fixed-version: Fixed from version >50.0.2661.87" }, { "id": "CVE-2016-1671", "status": "Patched", "link": "https://nvd.nist.gov/vuln/detail/CVE-2016-1671", "summary": "Google Chrome before 50.0.2661.102 on Android mishandles / (slash) and \\ (backslash) characters, which allows attackers to conduct directory traversal attacks via a file: URL, related to net/base/escape.cc and net/base/filename_util.cc.", "scorev2": "6.8", "scorev3": "8.1", "scorev4": "0.0", "modified": "2026-06-17T00:42:23.000", "vector": "NETWORK", "vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:N", "detail": "fixed-version: Fixed from version >50.0.2661.87" }, { "id": "CVE-2016-1672", "status": "Patched", "link": "https://nvd.nist.gov/vuln/detail/CVE-2016-1672", "summary": "The ModuleSystem::RequireForJsInner function in extensions/renderer/module_system.cc in the extension bindings in Google Chrome before 51.0.2704.63 mishandles properties, which allows remote attackers to conduct bindings-interception attacks and bypass the Same Origin Policy via unspecified vectors.", "scorev2": "6.8", "scorev3": "8.8", "scorev4": "0.0", "modified": "2026-06-17T00:42:23.000", "vector": "NETWORK", "vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H", "detail": "fixed-version: Fixed from version >50.0.2661.102" }, { "id": "CVE-2016-1673", "status": "Patched", "link": "https://nvd.nist.gov/vuln/detail/CVE-2016-1673", "summary": "Blink, as used in Google Chrome before 51.0.2704.63, allows remote attackers to bypass the Same Origin Policy via unspecified vectors.", "scorev2": "6.8", "scorev3": "8.8", "scorev4": "0.0", "modified": "2026-06-17T00:42:23.000", "vector": "NETWORK", "vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H", "detail": "fixed-version: Fixed from version >50.0.2661.102" }, { "id": "CVE-2016-1674", "status": "Patched", "link": "https://nvd.nist.gov/vuln/detail/CVE-2016-1674", "summary": "The extensions subsystem in Google Chrome before 51.0.2704.63 allows remote attackers to bypass the Same Origin Policy via unspecified vectors.", "scorev2": "6.8", "scorev3": "8.8", "scorev4": "0.0", "modified": "2026-06-17T00:42:23.000", "vector": "NETWORK", "vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H", "detail": "fixed-version: Fixed from version >50.0.2661.102" }, { "id": "CVE-2016-1675", "status": "Patched", "link": "https://nvd.nist.gov/vuln/detail/CVE-2016-1675", "summary": "Blink, as used in Google Chrome before 51.0.2704.63, allows remote attackers to bypass the Same Origin Policy by leveraging the mishandling of Document reattachment during destruction, related to FrameLoader.cpp and LocalFrame.cpp.", "scorev2": "6.8", "scorev3": "8.8", "scorev4": "0.0", "modified": "2026-06-17T00:42:23.000", "vector": "NETWORK", "vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H", "detail": "fixed-version: Fixed from version >50.0.2661.102" }, { "id": "CVE-2016-1676", "status": "Patched", "link": "https://nvd.nist.gov/vuln/detail/CVE-2016-1676", "summary": "extensions/renderer/resources/binding.js in the extension bindings in Google Chrome before 51.0.2704.63 does not properly use prototypes, which allows remote attackers to bypass the Same Origin Policy via unspecified vectors.", "scorev2": "6.8", "scorev3": "8.8", "scorev4": "0.0", "modified": "2026-06-17T00:42:23.000", "vector": "NETWORK", "vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H", "detail": "fixed-version: Fixed from version >50.0.2661.102" }, { "id": "CVE-2016-1677", "status": "Patched", "link": "https://nvd.nist.gov/vuln/detail/CVE-2016-1677", "summary": "uri.js in Google V8 before 5.1.281.26, as used in Google Chrome before 51.0.2704.63, uses an incorrect array type, which allows remote attackers to obtain sensitive information by calling the decodeURI function and leveraging \"type confusion.\"", "scorev2": "4.3", "scorev3": "6.5", "scorev4": "0.0", "modified": "2026-06-17T00:42:24.000", "vector": "NETWORK", "vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N", "detail": "fixed-version: Fixed from version >50.0.2661.102" }, { "id": "CVE-2016-1678", "status": "Patched", "link": "https://nvd.nist.gov/vuln/detail/CVE-2016-1678", "summary": "objects.cc in Google V8 before 5.0.71.32, as used in Google Chrome before 51.0.2704.63, does not properly restrict lazy deoptimization, which allows remote attackers to cause a denial of service (heap-based buffer overflow) or possibly have unspecified other impact via crafted JavaScript code.", "scorev2": "6.8", "scorev3": "8.8", "scorev4": "0.0", "modified": "2026-06-17T00:42:24.000", "vector": "NETWORK", "vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H", "detail": "fixed-version: Fixed from version >50.0.2661.102" }, { "id": "CVE-2016-1679", "status": "Patched", "link": "https://nvd.nist.gov/vuln/detail/CVE-2016-1679", "summary": "The ToV8Value function in content/child/v8_value_converter_impl.cc in the V8 bindings in Google Chrome before 51.0.2704.63 does not properly restrict use of getters and setters, which allows remote attackers to cause a denial of service (use-after-free) or possibly have unspecified other impact via crafted JavaScript code.", "scorev2": "6.8", "scorev3": "8.8", "scorev4": "0.0", "modified": "2026-06-17T00:42:24.000", "vector": "NETWORK", "vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H", "detail": "fixed-version: Fixed from version >50.0.2661.102" }, { "id": "CVE-2016-1680", "status": "Patched", "link": "https://nvd.nist.gov/vuln/detail/CVE-2016-1680", "summary": "Use-after-free vulnerability in ports/SkFontHost_FreeType.cpp in Skia, as used in Google Chrome before 51.0.2704.63, allows remote attackers to cause a denial of service (heap memory corruption) or possibly have unspecified other impact via unknown vectors.", "scorev2": "6.8", "scorev3": "8.8", "scorev4": "0.0", "modified": "2026-06-17T00:42:24.000", "vector": "NETWORK", "vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H", "detail": "fixed-version: Fixed from version >50.0.2661.102" }, { "id": "CVE-2016-1681", "status": "Patched", "link": "https://nvd.nist.gov/vuln/detail/CVE-2016-1681", "summary": "Heap-based buffer overflow in the opj_j2k_read_SPCod_SPCoc function in j2k.c in OpenJPEG, as used in PDFium in Google Chrome before 51.0.2704.63, allows remote attackers to cause a denial of service or possibly have unspecified other impact via a crafted PDF document.", "scorev2": "6.8", "scorev3": "8.8", "scorev4": "0.0", "modified": "2026-06-17T00:42:24.000", "vector": "NETWORK", "vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H", "detail": "fixed-version: Fixed from version >50.0.2661.102" }, { "id": "CVE-2016-1682", "status": "Patched", "link": "https://nvd.nist.gov/vuln/detail/CVE-2016-1682", "summary": "The ServiceWorkerContainer::registerServiceWorkerImpl function in WebKit/Source/modules/serviceworkers/ServiceWorkerContainer.cpp in Blink, as used in Google Chrome before 51.0.2704.63, allows remote attackers to bypass the Content Security Policy (CSP) protection mechanism via a ServiceWorker registration.", "scorev2": "4.3", "scorev3": "6.1", "scorev4": "0.0", "modified": "2026-06-17T00:42:24.000", "vector": "NETWORK", "vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N", "detail": "fixed-version: Fixed from version >50.0.2661.102" }, { "id": "CVE-2016-1683", "status": "Patched", "link": "https://nvd.nist.gov/vuln/detail/CVE-2016-1683", "summary": "numbers.c in libxslt before 1.1.29, as used in Google Chrome before 51.0.2704.63, mishandles namespace nodes, which allows remote attackers to cause a denial of service (out-of-bounds heap memory access) or possibly have unspecified other impact via a crafted document.", "scorev2": "5.1", "scorev3": "7.5", "scorev4": "0.0", "modified": "2026-06-17T00:42:24.000", "vector": "NETWORK", "vectorString": "CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H", "detail": "fixed-version: Fixed from version >50.0.2661.102" }, { "id": "CVE-2016-1684", "status": "Patched", "link": "https://nvd.nist.gov/vuln/detail/CVE-2016-1684", "summary": "numbers.c in libxslt before 1.1.29, as used in Google Chrome before 51.0.2704.63, mishandles the i format token for xsl:number data, which allows remote attackers to cause a denial of service (integer overflow or resource consumption) or possibly have unspecified other impact via a crafted document.", "scorev2": "5.1", "scorev3": "7.5", "scorev4": "0.0", "modified": "2026-06-17T00:42:25.000", "vector": "NETWORK", "vectorString": "CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H", "detail": "fixed-version: Fixed from version >50.0.2661.102" }, { "id": "CVE-2016-1685", "status": "Patched", "link": "https://nvd.nist.gov/vuln/detail/CVE-2016-1685", "summary": "core/fxge/ge/fx_ge_text.cpp in PDFium, as used in Google Chrome before 51.0.2704.63, miscalculates certain index values, which allows remote attackers to cause a denial of service (out-of-bounds read) via a crafted PDF document.", "scorev2": "4.3", "scorev3": "6.5", "scorev4": "0.0", "modified": "2026-06-17T00:42:25.000", "vector": "NETWORK", "vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H", "detail": "fixed-version: Fixed from version >50.0.2661.102" }, { "id": "CVE-2016-1686", "status": "Patched", "link": "https://nvd.nist.gov/vuln/detail/CVE-2016-1686", "summary": "The CPDF_DIBSource::CreateDecoder function in core/fpdfapi/fpdf_render/fpdf_render_loadimage.cpp in PDFium, as used in Google Chrome before 51.0.2704.63, mishandles decoder-initialization failure, which allows remote attackers to cause a denial of service (out-of-bounds read) via a crafted PDF document.", "scorev2": "4.3", "scorev3": "6.5", "scorev4": "0.0", "modified": "2026-06-17T00:42:25.000", "vector": "NETWORK", "vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H", "detail": "fixed-version: Fixed from version >50.0.2661.102" }, { "id": "CVE-2016-1687", "status": "Patched", "link": "https://nvd.nist.gov/vuln/detail/CVE-2016-1687", "summary": "The renderer implementation in Google Chrome before 51.0.2704.63 does not properly restrict public exposure of classes, which allows remote attackers to obtain sensitive information via vectors related to extensions.", "scorev2": "4.3", "scorev3": "6.5", "scorev4": "0.0", "modified": "2026-06-17T00:42:25.000", "vector": "NETWORK", "vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N", "detail": "fixed-version: Fixed from version >50.0.2661.102" }, { "id": "CVE-2016-1688", "status": "Patched", "link": "https://nvd.nist.gov/vuln/detail/CVE-2016-1688", "summary": "The regexp (aka regular expression) implementation in Google V8 before 5.0.71.40, as used in Google Chrome before 51.0.2704.63, mishandles external string sizes, which allows remote attackers to cause a denial of service (out-of-bounds read) via crafted JavaScript code.", "scorev2": "4.3", "scorev3": "6.5", "scorev4": "0.0", "modified": "2026-06-17T00:42:25.000", "vector": "NETWORK", "vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H", "detail": "fixed-version: Fixed from version >50.0.2661.102" }, { "id": "CVE-2016-1689", "status": "Patched", "link": "https://nvd.nist.gov/vuln/detail/CVE-2016-1689", "summary": "Heap-based buffer overflow in content/renderer/media/canvas_capture_handler.cc in Google Chrome before 51.0.2704.63 allows remote attackers to cause a denial of service or possibly have unspecified other impact via a crafted web site.", "scorev2": "4.3", "scorev3": "6.5", "scorev4": "0.0", "modified": "2026-06-17T00:42:25.000", "vector": "NETWORK", "vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H", "detail": "fixed-version: Fixed from version >50.0.2661.102" }, { "id": "CVE-2016-1690", "status": "Patched", "link": "https://nvd.nist.gov/vuln/detail/CVE-2016-1690", "summary": "The Autofill implementation in Google Chrome before 51.0.2704.63 mishandles the interaction between field updates and JavaScript code that triggers a frame deletion, which allows remote attackers to cause a denial of service (use-after-free) or possibly have unspecified other impact via a crafted web site, a different vulnerability than CVE-2016-1701.", "scorev2": "5.1", "scorev3": "7.5", "scorev4": "0.0", "modified": "2026-06-17T00:42:25.000", "vector": "NETWORK", "vectorString": "CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H", "detail": "fixed-version: Fixed from version >50.0.2661.102" }, { "id": "CVE-2016-1691", "status": "Patched", "link": "https://nvd.nist.gov/vuln/detail/CVE-2016-1691", "summary": "Skia, as used in Google Chrome before 51.0.2704.63, mishandles coincidence runs, which allows remote attackers to cause a denial of service (heap-based buffer overflow) or possibly have unspecified other impact via crafted curves, related to SkOpCoincidence.cpp and SkPathOpsCommon.cpp.", "scorev2": "5.1", "scorev3": "7.5", "scorev4": "0.0", "modified": "2026-06-17T00:42:26.000", "vector": "NETWORK", "vectorString": "CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H", "detail": "fixed-version: Fixed from version >50.0.2661.102" }, { "id": "CVE-2016-1692", "status": "Patched", "link": "https://nvd.nist.gov/vuln/detail/CVE-2016-1692", "summary": "WebKit/Source/core/css/StyleSheetContents.cpp in Blink, as used in Google Chrome before 51.0.2704.63, permits cross-origin loading of CSS stylesheets by a ServiceWorker even when the stylesheet download has an incorrect MIME type, which allows remote attackers to bypass the Same Origin Policy via a crafted web site.", "scorev2": "4.3", "scorev3": "5.3", "scorev4": "0.0", "modified": "2026-06-17T00:42:26.000", "vector": "NETWORK", "vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N", "detail": "fixed-version: Fixed from version >50.0.2661.102" }, { "id": "CVE-2016-1693", "status": "Patched", "link": "https://nvd.nist.gov/vuln/detail/CVE-2016-1693", "summary": "browser/safe_browsing/srt_field_trial_win.cc in Google Chrome before 51.0.2704.63 does not use the HTTPS service on dl.google.com to obtain the Software Removal Tool, which allows remote attackers to spoof the chrome_cleanup_tool.exe (aka CCT) file via a man-in-the-middle attack on an HTTP session.", "scorev2": "2.6", "scorev3": "5.3", "scorev4": "0.0", "modified": "2026-06-17T00:42:26.000", "vector": "NETWORK", "vectorString": "CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:N/I:H/A:N", "detail": "fixed-version: Fixed from version >50.0.2661.102" }, { "id": "CVE-2016-1694", "status": "Patched", "link": "https://nvd.nist.gov/vuln/detail/CVE-2016-1694", "summary": "browser/browsing_data/browsing_data_remover.cc in Google Chrome before 51.0.2704.63 deletes HPKP pins during cache clearing, which makes it easier for remote attackers to spoof web sites via a valid certificate from an arbitrary recognized Certification Authority.", "scorev2": "4.3", "scorev3": "5.3", "scorev4": "0.0", "modified": "2026-06-17T00:42:26.000", "vector": "NETWORK", "vectorString": "CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:N/I:H/A:N", "detail": "fixed-version: Fixed from version >50.0.2661.102" }, { "id": "CVE-2016-1695", "status": "Patched", "link": "https://nvd.nist.gov/vuln/detail/CVE-2016-1695", "summary": "Multiple unspecified vulnerabilities in Google Chrome before 51.0.2704.63 allow attackers to cause a denial of service or possibly have other impact via unknown vectors.", "scorev2": "6.8", "scorev3": "8.8", "scorev4": "0.0", "modified": "2026-06-17T00:42:26.000", "vector": "NETWORK", "vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H", "detail": "fixed-version: Fixed from version >50.0.2661.102" }, { "id": "CVE-2016-1696", "status": "Patched", "link": "https://nvd.nist.gov/vuln/detail/CVE-2016-1696", "summary": "The extensions subsystem in Google Chrome before 51.0.2704.79 does not properly restrict bindings access, which allows remote attackers to bypass the Same Origin Policy via unspecified vectors.", "scorev2": "6.8", "scorev3": "8.8", "scorev4": "0.0", "modified": "2026-06-17T00:42:26.000", "vector": "NETWORK", "vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H", "detail": "fixed-version: Fixed from version >51.0.2704.63" }, { "id": "CVE-2016-1697", "status": "Patched", "link": "https://nvd.nist.gov/vuln/detail/CVE-2016-1697", "summary": "The FrameLoader::startLoad function in WebKit/Source/core/loader/FrameLoader.cpp in Blink, as used in Google Chrome before 51.0.2704.79, does not prevent frame navigations during DocumentLoader detach operations, which allows remote attackers to bypass the Same Origin Policy via crafted JavaScript code.", "scorev2": "6.8", "scorev3": "8.8", "scorev4": "0.0", "modified": "2026-06-17T00:42:26.000", "vector": "NETWORK", "vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H", "detail": "fixed-version: Fixed from version >51.0.2704.63" }, { "id": "CVE-2016-1698", "status": "Patched", "link": "https://nvd.nist.gov/vuln/detail/CVE-2016-1698", "summary": "The createCustomType function in extensions/renderer/resources/binding.js in the extension bindings in Google Chrome before 51.0.2704.79 does not validate module types, which might allow attackers to load arbitrary modules or obtain sensitive information by leveraging a poisoned definition.", "scorev2": "4.3", "scorev3": "6.5", "scorev4": "0.0", "modified": "2026-06-17T00:42:27.000", "vector": "NETWORK", "vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N", "detail": "fixed-version: Fixed from version >51.0.2704.63" }, { "id": "CVE-2016-1699", "status": "Patched", "link": "https://nvd.nist.gov/vuln/detail/CVE-2016-1699", "summary": "WebKit/Source/devtools/front_end/devtools.js in the Developer Tools (aka DevTools) subsystem in Blink, as used in Google Chrome before 51.0.2704.79, does not ensure that the remoteFrontendUrl parameter is associated with a chrome-devtools-frontend.appspot.com URL, which allows remote attackers to bypass intended access restrictions via a crafted URL.", "scorev2": "4.3", "scorev3": "6.5", "scorev4": "0.0", "modified": "2026-06-17T00:42:27.000", "vector": "NETWORK", "vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:N", "detail": "fixed-version: Fixed from version >51.0.2704.63" }, { "id": "CVE-2016-1700", "status": "Patched", "link": "https://nvd.nist.gov/vuln/detail/CVE-2016-1700", "summary": "extensions/renderer/runtime_custom_bindings.cc in Google Chrome before 51.0.2704.79 does not consider side effects during creation of an array of extension views, which allows remote attackers to cause a denial of service (use-after-free) or possibly have unspecified other impact via vectors related to extensions.", "scorev2": "5.1", "scorev3": "7.5", "scorev4": "0.0", "modified": "2026-06-17T00:42:27.000", "vector": "NETWORK", "vectorString": "CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H", "detail": "fixed-version: Fixed from version >51.0.2704.63" }, { "id": "CVE-2016-1701", "status": "Patched", "link": "https://nvd.nist.gov/vuln/detail/CVE-2016-1701", "summary": "The Autofill implementation in Google Chrome before 51.0.2704.79 mishandles the interaction between field updates and JavaScript code that triggers a frame deletion, which allows remote attackers to cause a denial of service (use-after-free) or possibly have unspecified other impact via a crafted web site, a different vulnerability than CVE-2016-1690.", "scorev2": "6.8", "scorev3": "8.8", "scorev4": "0.0", "modified": "2026-06-17T00:42:27.000", "vector": "NETWORK", "vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H", "detail": "fixed-version: Fixed from version >51.0.2704.63" }, { "id": "CVE-2016-1702", "status": "Patched", "link": "https://nvd.nist.gov/vuln/detail/CVE-2016-1702", "summary": "The SkRegion::readFromMemory function in core/SkRegion.cpp in Skia, as used in Google Chrome before 51.0.2704.79, does not validate the interval count, which allows remote attackers to cause a denial of service (out-of-bounds read) via crafted serialized data.", "scorev2": "4.3", "scorev3": "6.5", "scorev4": "0.0", "modified": "2026-06-17T00:42:27.000", "vector": "NETWORK", "vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H", "detail": "fixed-version: Fixed from version >51.0.2704.63" }, { "id": "CVE-2016-1703", "status": "Patched", "link": "https://nvd.nist.gov/vuln/detail/CVE-2016-1703", "summary": "Multiple unspecified vulnerabilities in Google Chrome before 51.0.2704.79 allow attackers to cause a denial of service or possibly have other impact via unknown vectors.", "scorev2": "6.8", "scorev3": "8.8", "scorev4": "0.0", "modified": "2026-06-17T00:42:27.000", "vector": "NETWORK", "vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H", "detail": "fixed-version: Fixed from version >51.0.2704.63" }, { "id": "CVE-2016-1704", "status": "Patched", "link": "https://nvd.nist.gov/vuln/detail/CVE-2016-1704", "summary": "Multiple unspecified vulnerabilities in Google Chrome before 51.0.2704.103 allow attackers to cause a denial of service or possibly have other impact via unknown vectors.", "scorev2": "6.8", "scorev3": "8.8", "scorev4": "0.0", "modified": "2026-06-17T00:42:27.000", "vector": "NETWORK", "vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H", "detail": "fixed-version: Fixed from version >51.0.2704.84" }, { "id": "CVE-2016-1705", "status": "Patched", "link": "https://nvd.nist.gov/vuln/detail/CVE-2016-1705", "summary": "Multiple unspecified vulnerabilities in Google Chrome before 52.0.2743.82 allow attackers to cause a denial of service or possibly have other impact via unknown vectors.", "scorev2": "6.8", "scorev3": "8.8", "scorev4": "0.0", "modified": "2026-06-17T00:42:27.000", "vector": "NETWORK", "vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H", "detail": "fixed-version: Fixed from version >51.0.2704.106" }, { "id": "CVE-2016-1706", "status": "Patched", "link": "https://nvd.nist.gov/vuln/detail/CVE-2016-1706", "summary": "The PPAPI implementation in Google Chrome before 52.0.2743.82 does not validate the origin of IPC messages to the plugin broker process that should have come from the browser process, which allows remote attackers to bypass a sandbox protection mechanism via an unexpected message type, related to broker_process_dispatcher.cc, ppapi_plugin_process_host.cc, ppapi_thread.cc, and render_frame_message_filter.cc.", "scorev2": "9.3", "scorev3": "9.6", "scorev4": "0.0", "modified": "2026-06-17T00:42:28.000", "vector": "NETWORK", "vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:H", "detail": "fixed-version: Fixed from version >51.0.2704.106" }, { "id": "CVE-2016-1707", "status": "Patched", "link": "https://nvd.nist.gov/vuln/detail/CVE-2016-1707", "summary": "ios/web/web_state/ui/crw_web_controller.mm in Google Chrome before 52.0.2743.82 on iOS does not ensure that an invalid URL is replaced with the about:blank URL, which allows remote attackers to spoof the URL display via a crafted web site.", "scorev2": "4.3", "scorev3": "6.5", "scorev4": "0.0", "modified": "2026-06-17T00:42:28.000", "vector": "NETWORK", "vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:N", "detail": "fixed-version: Fixed from version >51.0.2704.106" }, { "id": "CVE-2016-1708", "status": "Patched", "link": "https://nvd.nist.gov/vuln/detail/CVE-2016-1708", "summary": "The Chrome Web Store inline-installation implementation in the Extensions subsystem in Google Chrome before 52.0.2743.82 does not properly consider object lifetimes during progress observation, which allows remote attackers to cause a denial of service (use-after-free) or possibly have unspecified other impact via a crafted web site.", "scorev2": "6.8", "scorev3": "8.8", "scorev4": "0.0", "modified": "2026-06-17T00:42:28.000", "vector": "NETWORK", "vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H", "detail": "fixed-version: Fixed from version >51.0.2704.106" }, { "id": "CVE-2016-1709", "status": "Patched", "link": "https://nvd.nist.gov/vuln/detail/CVE-2016-1709", "summary": "Heap-based buffer overflow in the ByteArray::Get method in data/byte_array.cc in Google sfntly before 2016-06-10, as used in Google Chrome before 52.0.2743.82, allows remote attackers to cause a denial of service or possibly have unspecified other impact via a crafted SFNT font.", "scorev2": "6.8", "scorev3": "8.8", "scorev4": "0.0", "modified": "2026-06-17T00:42:28.000", "vector": "NETWORK", "vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H", "detail": "fixed-version: Fixed from version >51.0.2704.106" }, { "id": "CVE-2016-1710", "status": "Patched", "link": "https://nvd.nist.gov/vuln/detail/CVE-2016-1710", "summary": "The ChromeClientImpl::createWindow method in WebKit/Source/web/ChromeClientImpl.cpp in Blink, as used in Google Chrome before 52.0.2743.82, does not prevent window creation by a deferred frame, which allows remote attackers to bypass the Same Origin Policy via a crafted web site.", "scorev2": "6.8", "scorev3": "8.8", "scorev4": "0.0", "modified": "2026-06-17T00:42:28.000", "vector": "NETWORK", "vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H", "detail": "fixed-version: Fixed from version >51.0.2704.106" }, { "id": "CVE-2016-1711", "status": "Patched", "link": "https://nvd.nist.gov/vuln/detail/CVE-2016-1711", "summary": "WebKit/Source/core/loader/FrameLoader.cpp in Blink, as used in Google Chrome before 52.0.2743.82, does not disable frame navigation during a detach operation on a DocumentLoader object, which allows remote attackers to bypass the Same Origin Policy via a crafted web site.", "scorev2": "6.8", "scorev3": "8.8", "scorev4": "0.0", "modified": "2026-06-17T00:42:28.000", "vector": "NETWORK", "vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H", "detail": "fixed-version: Fixed from version >51.0.2704.106" }, { "id": "CVE-2016-2051", "status": "Patched", "link": "https://nvd.nist.gov/vuln/detail/CVE-2016-2051", "summary": "Multiple unspecified vulnerabilities in Google V8 before 4.8.271.17, as used in Google Chrome before 48.0.2564.82, allow attackers to cause a denial of service or possibly have other impact via unknown vectors.", "scorev2": "6.8", "scorev3": "9.8", "scorev4": "0.0", "modified": "2026-06-17T00:43:20.000", "vector": "NETWORK", "vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H", "detail": "fixed-version: Fixed from version >47.0.2526.111" }, { "id": "CVE-2016-2052", "status": "Patched", "link": "https://nvd.nist.gov/vuln/detail/CVE-2016-2052", "summary": "Multiple unspecified vulnerabilities in HarfBuzz before 1.0.6, as used in Google Chrome before 48.0.2564.82, allow attackers to cause a denial of service or possibly have other impact via crafted data, as demonstrated by a buffer over-read resulting from an inverted length check in hb-ot-font.cc, a different issue than CVE-2015-8947.", "scorev2": "6.8", "scorev3": "7.6", "scorev4": "0.0", "modified": "2026-06-17T00:43:20.000", "vector": "NETWORK", "vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:H", "detail": "fixed-version: Fixed from version >47.0.2526.106" }, { "id": "CVE-2016-2843", "status": "Patched", "link": "https://nvd.nist.gov/vuln/detail/CVE-2016-2843", "summary": "Multiple unspecified vulnerabilities in Google V8 before 4.9.385.26, as used in Google Chrome before 49.0.2623.75, allow attackers to cause a denial of service or possibly have other impact via unknown vectors.", "scorev2": "10.0", "scorev3": "9.8", "scorev4": "0.0", "modified": "2026-06-17T00:44:34.000", "vector": "NETWORK", "vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H", "detail": "fixed-version: Fixed from version >48.0.2564.116" }, { "id": "CVE-2016-2844", "status": "Patched", "link": "https://nvd.nist.gov/vuln/detail/CVE-2016-2844", "summary": "WebKit/Source/core/layout/LayoutBlock.cpp in Blink, as used in Google Chrome before 49.0.2623.75, does not properly determine when anonymous block wrappers may exist, which allows remote attackers to cause a denial of service (incorrect cast and assertion failure) or possibly have unspecified other impact via crafted JavaScript code.", "scorev2": "9.3", "scorev3": "8.8", "scorev4": "0.0", "modified": "2026-06-17T00:44:34.000", "vector": "NETWORK", "vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H", "detail": "fixed-version: Fixed from version >48.0.2564.116" }, { "id": "CVE-2016-2845", "status": "Patched", "link": "https://nvd.nist.gov/vuln/detail/CVE-2016-2845", "summary": "The Content Security Policy (CSP) implementation in Blink, as used in Google Chrome before 49.0.2623.75, does not ignore a URL's path component in the case of a ServiceWorker fetch, which allows remote attackers to obtain sensitive information about visited web pages by reading CSP violation reports, related to FrameFetchContext.cpp and ResourceFetcher.cpp.", "scorev2": "5.0", "scorev3": "5.3", "scorev4": "0.0", "modified": "2026-06-17T00:44:34.000", "vector": "NETWORK", "vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N", "detail": "fixed-version: Fixed from version >48.0.2564.116" }, { "id": "CVE-2016-3679", "status": "Patched", "link": "https://nvd.nist.gov/vuln/detail/CVE-2016-3679", "summary": "Multiple unspecified vulnerabilities in Google V8 before 4.9.385.33, as used in Google Chrome before 49.0.2623.108, allow attackers to cause a denial of service or possibly have other impact via unknown vectors.", "scorev2": "9.3", "scorev3": "8.8", "scorev4": "0.0", "modified": "2026-06-17T00:46:10.000", "vector": "NETWORK", "vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H", "detail": "fixed-version: Fixed from version >49.0.2623.95" }, { "id": "CVE-2016-5127", "status": "Patched", "link": "https://nvd.nist.gov/vuln/detail/CVE-2016-5127", "summary": "Use-after-free vulnerability in WebKit/Source/core/editing/VisibleUnits.cpp in Blink, as used in Google Chrome before 52.0.2743.82, allows remote attackers to cause a denial of service or possibly have unspecified other impact via crafted JavaScript code involving an @import at-rule in a Cascading Style Sheets (CSS) token sequence in conjunction with a rel=import attribute of a LINK element.", "scorev2": "6.8", "scorev3": "7.5", "scorev4": "0.0", "modified": "2026-06-17T00:48:47.000", "vector": "NETWORK", "vectorString": "CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H", "detail": "fixed-version: Fixed from version >51.0.2704.106" }, { "id": "CVE-2016-5128", "status": "Patched", "link": "https://nvd.nist.gov/vuln/detail/CVE-2016-5128", "summary": "objects.cc in Google V8 before 5.2.361.27, as used in Google Chrome before 52.0.2743.82, does not prevent API interceptors from modifying a store target without setting a property, which allows remote attackers to bypass the Same Origin Policy via a crafted web site.", "scorev2": "6.8", "scorev3": "8.8", "scorev4": "0.0", "modified": "2026-06-17T00:48:48.000", "vector": "NETWORK", "vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H", "detail": "fixed-version: Fixed from version >51.0.2704.106" }, { "id": "CVE-2016-5129", "status": "Patched", "link": "https://nvd.nist.gov/vuln/detail/CVE-2016-5129", "summary": "Google V8 before 5.2.361.32, as used in Google Chrome before 52.0.2743.82, does not properly process left-trimmed objects, which allows remote attackers to cause a denial of service (memory corruption) or possibly have unspecified other impact via crafted JavaScript code.", "scorev2": "6.8", "scorev3": "8.8", "scorev4": "0.0", "modified": "2026-06-17T00:48:48.000", "vector": "NETWORK", "vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H", "detail": "version-not-in-range" }, { "id": "CVE-2016-5130", "status": "Patched", "link": "https://nvd.nist.gov/vuln/detail/CVE-2016-5130", "summary": "content/renderer/history_controller.cc in Google Chrome before 52.0.2743.82 does not properly restrict multiple uses of a JavaScript forward method, which allows remote attackers to spoof the URL display via a crafted web site.", "scorev2": "4.3", "scorev3": "6.5", "scorev4": "0.0", "modified": "2026-06-17T00:48:48.000", "vector": "NETWORK", "vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:N", "detail": "fixed-version: Fixed from version >51.0.2704.106" }, { "id": "CVE-2016-5131", "status": "Patched", "link": "https://nvd.nist.gov/vuln/detail/CVE-2016-5131", "summary": "Use-after-free vulnerability in libxml2 through 2.9.4, as used in Google Chrome before 52.0.2743.82, allows remote attackers to cause a denial of service or possibly have unspecified other impact via vectors related to the XPointer range-to function.", "scorev2": "6.8", "scorev3": "8.8", "scorev4": "0.0", "modified": "2026-06-17T00:48:48.000", "vector": "NETWORK", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H", "detail": "fixed-version: Fixed from version 52.0.2743.82" }, { "id": "CVE-2016-5132", "status": "Patched", "link": "https://nvd.nist.gov/vuln/detail/CVE-2016-5132", "summary": "The Service Workers subsystem in Google Chrome before 52.0.2743.82 does not properly implement the Secure Contexts specification during decisions about whether to control a subframe, which allows remote attackers to bypass the Same Origin Policy via an https IFRAME element inside an http IFRAME element.", "scorev2": "6.8", "scorev3": "8.8", "scorev4": "0.0", "modified": "2026-06-17T00:48:48.000", "vector": "NETWORK", "vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H", "detail": "fixed-version: Fixed from version >51.0.2704.106" }, { "id": "CVE-2016-5133", "status": "Patched", "link": "https://nvd.nist.gov/vuln/detail/CVE-2016-5133", "summary": "Google Chrome before 52.0.2743.82 mishandles origin information during proxy authentication, which allows man-in-the-middle attackers to spoof a proxy-authentication login prompt or trigger incorrect credential storage by modifying the client-server data stream.", "scorev2": "4.3", "scorev3": "5.3", "scorev4": "0.0", "modified": "2026-06-17T00:48:48.000", "vector": "NETWORK", "vectorString": "CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:N/I:H/A:N", "detail": "fixed-version: Fixed from version >51.0.2704.106" }, { "id": "CVE-2016-5134", "status": "Patched", "link": "https://nvd.nist.gov/vuln/detail/CVE-2016-5134", "summary": "net/proxy/proxy_service.cc in the Proxy Auto-Config (PAC) feature in Google Chrome before 52.0.2743.82 does not ensure that URL information is restricted to a scheme, host, and port, which allows remote attackers to discover credentials by operating a server with a PAC script, a related issue to CVE-2016-3763.", "scorev2": "4.3", "scorev3": "8.8", "scorev4": "0.0", "modified": "2026-06-17T00:48:49.000", "vector": "NETWORK", "vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H", "detail": "fixed-version: Fixed from version >51.0.2704.106" }, { "id": "CVE-2016-5135", "status": "Patched", "link": "https://nvd.nist.gov/vuln/detail/CVE-2016-5135", "summary": "WebKit/Source/core/html/parser/HTMLPreloadScanner.cpp in Blink, as used in Google Chrome before 52.0.2743.82, does not consider referrer-policy information inside an HTML document during a preload request, which allows remote attackers to bypass the Content Security Policy (CSP) protection mechanism via a crafted web site, as demonstrated by a \"Content-Security-Policy: referrer origin-when-cross-origin\" header that overrides a \"\" element.", "scorev2": "4.3", "scorev3": "6.5", "scorev4": "0.0", "modified": "2026-06-17T00:48:49.000", "vector": "NETWORK", "vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:N", "detail": "fixed-version: Fixed from version >51.0.2704.106" }, { "id": "CVE-2016-5136", "status": "Patched", "link": "https://nvd.nist.gov/vuln/detail/CVE-2016-5136", "summary": "Use-after-free vulnerability in extensions/renderer/user_script_injector.cc in the Extensions subsystem in Google Chrome before 52.0.2743.82 allows remote attackers to cause a denial of service or possibly have unspecified other impact via vectors related to script deletion.", "scorev2": "6.8", "scorev3": "8.8", "scorev4": "0.0", "modified": "2026-06-17T00:48:49.000", "vector": "NETWORK", "vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H", "detail": "fixed-version: Fixed from version >51.0.2704.106" }, { "id": "CVE-2016-5137", "status": "Patched", "link": "https://nvd.nist.gov/vuln/detail/CVE-2016-5137", "summary": "The CSPSource::schemeMatches function in WebKit/Source/core/frame/csp/CSPSource.cpp in the Content Security Policy (CSP) implementation in Blink, as used in Google Chrome before 52.0.2743.82, does not apply http :80 policies to https :443 URLs and does not apply ws :80 policies to wss :443 URLs, which makes it easier for remote attackers to determine whether a specific HSTS web site has been visited by reading a CSP report. NOTE: this vulnerability is associated with a specification change after CVE-2016-1617 resolution.", "scorev2": "4.3", "scorev3": "4.3", "scorev4": "0.0", "modified": "2026-06-17T00:48:49.000", "vector": "NETWORK", "vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:N", "detail": "fixed-version: Fixed from version >51.0.2704.106" }, { "id": "CVE-2016-5138", "status": "Patched", "link": "https://nvd.nist.gov/vuln/detail/CVE-2016-5138", "summary": "Integer overflow in the kbasep_vinstr_attach_client function in midgard/mali_kbase_vinstr.c in Google Chrome before 52.0.2743.85 allows remote attackers to cause a denial of service (heap-based buffer overflow and use-after-free) by leveraging an unrestricted multiplication.", "scorev2": "6.8", "scorev3": "8.8", "scorev4": "0.0", "modified": "2026-06-17T00:48:49.000", "vector": "NETWORK", "vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H", "detail": "fixed-version: Fixed from version >52.0.2743.82" }, { "id": "CVE-2016-5139", "status": "Patched", "link": "https://nvd.nist.gov/vuln/detail/CVE-2016-5139", "summary": "Multiple integer overflows in the opj_tcd_init_tile function in tcd.c in OpenJPEG, as used in PDFium in Google Chrome before 52.0.2743.116, allow remote attackers to cause a denial of service (heap-based buffer overflow) or possibly have unspecified other impact via crafted JPEG 2000 data.", "scorev2": "6.8", "scorev3": "7.6", "scorev4": "0.0", "modified": "2026-06-17T00:48:49.000", "vector": "NETWORK", "vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:H", "detail": "version-not-in-range" }, { "id": "CVE-2016-5140", "status": "Patched", "link": "https://nvd.nist.gov/vuln/detail/CVE-2016-5140", "summary": "Heap-based buffer overflow in the opj_j2k_read_SQcd_SQcc function in j2k.c in OpenJPEG, as used in PDFium in Google Chrome before 52.0.2743.116, allows remote attackers to cause a denial of service or possibly have unspecified other impact via crafted JPEG 2000 data.", "scorev2": "7.5", "scorev3": "9.8", "scorev4": "0.0", "modified": "2026-06-17T00:48:49.000", "vector": "NETWORK", "vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H", "detail": "fixed-version: Fixed from version >52.0.2743.82" }, { "id": "CVE-2016-5141", "status": "Patched", "link": "https://nvd.nist.gov/vuln/detail/CVE-2016-5141", "summary": "Blink, as used in Google Chrome before 52.0.2743.116, allows remote attackers to spoof the address bar via vectors involving a provisional URL for an initially empty document, related to FrameLoader.cpp and ScopedPageLoadDeferrer.cpp.", "scorev2": "5.0", "scorev3": "7.5", "scorev4": "0.0", "modified": "2026-06-17T00:48:49.000", "vector": "NETWORK", "vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N", "detail": "fixed-version: Fixed from version >52.0.2743.82" }, { "id": "CVE-2016-5142", "status": "Patched", "link": "https://nvd.nist.gov/vuln/detail/CVE-2016-5142", "summary": "The Web Cryptography API (aka WebCrypto) implementation in Blink, as used in Google Chrome before 52.0.2743.116, does not properly copy data buffers, which allows remote attackers to cause a denial of service (use-after-free) or possibly have unspecified other impact via crafted JavaScript code, related to NormalizeAlgorithm.cpp and SubtleCrypto.cpp.", "scorev2": "7.5", "scorev3": "9.8", "scorev4": "0.0", "modified": "2026-06-17T00:48:50.000", "vector": "NETWORK", "vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H", "detail": "fixed-version: Fixed from version >52.0.2743.82" }, { "id": "CVE-2016-5143", "status": "Patched", "link": "https://nvd.nist.gov/vuln/detail/CVE-2016-5143", "summary": "The Developer Tools (aka DevTools) subsystem in Blink, as used in Google Chrome before 52.0.2743.116, mishandles the script-path hostname, remoteBase parameter, and remoteFrontendUrl parameter, which allows remote attackers to bypass intended access restrictions via a crafted URL, a different vulnerability than CVE-2016-5144.", "scorev2": "7.5", "scorev3": "9.8", "scorev4": "0.0", "modified": "2026-06-17T00:48:50.000", "vector": "NETWORK", "vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H", "detail": "fixed-version: Fixed from version >52.0.2743.82" }, { "id": "CVE-2016-5144", "status": "Patched", "link": "https://nvd.nist.gov/vuln/detail/CVE-2016-5144", "summary": "The Developer Tools (aka DevTools) subsystem in Blink, as used in Google Chrome before 52.0.2743.116, mishandles the script-path hostname, remoteBase parameter, and remoteFrontendUrl parameter, which allows remote attackers to bypass intended access restrictions via a crafted URL, a different vulnerability than CVE-2016-5143.", "scorev2": "7.5", "scorev3": "9.8", "scorev4": "0.0", "modified": "2026-06-17T00:48:50.000", "vector": "NETWORK", "vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H", "detail": "fixed-version: Fixed from version >52.0.2743.82" }, { "id": "CVE-2016-5145", "status": "Patched", "link": "https://nvd.nist.gov/vuln/detail/CVE-2016-5145", "summary": "Blink, as used in Google Chrome before 52.0.2743.116, does not ensure that a taint property is preserved after a structure-clone operation on an ImageBitmap object derived from a cross-origin image, which allows remote attackers to bypass the Same Origin Policy via crafted JavaScript code.", "scorev2": "6.8", "scorev3": "8.8", "scorev4": "0.0", "modified": "2026-06-17T00:48:50.000", "vector": "NETWORK", "vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H", "detail": "fixed-version: Fixed from version >52.0.2743.82" }, { "id": "CVE-2016-5146", "status": "Patched", "link": "https://nvd.nist.gov/vuln/detail/CVE-2016-5146", "summary": "Multiple unspecified vulnerabilities in Google Chrome before 52.0.2743.116 allow attackers to cause a denial of service or possibly have other impact via unknown vectors.", "scorev2": "7.5", "scorev3": "9.8", "scorev4": "0.0", "modified": "2026-06-17T00:48:50.000", "vector": "NETWORK", "vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H", "detail": "fixed-version: Fixed from version >52.0.2743.82" }, { "id": "CVE-2016-5147", "status": "Patched", "link": "https://nvd.nist.gov/vuln/detail/CVE-2016-5147", "summary": "Blink, as used in Google Chrome before 53.0.2785.89 on Windows and OS X and before 53.0.2785.92 on Linux, mishandles deferred page loads, which allows remote attackers to inject arbitrary web script or HTML via a crafted web site, aka \"Universal XSS (UXSS).\"", "scorev2": "4.3", "scorev3": "6.1", "scorev4": "0.0", "modified": "2026-06-17T00:48:50.000", "vector": "NETWORK", "vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N", "detail": "fixed-version: Fixed from version >52.0.2743.116" }, { "id": "CVE-2016-5148", "status": "Patched", "link": "https://nvd.nist.gov/vuln/detail/CVE-2016-5148", "summary": "Cross-site scripting (XSS) vulnerability in Blink, as used in Google Chrome before 53.0.2785.89 on Windows and OS X and before 53.0.2785.92 on Linux, allows remote attackers to inject arbitrary web script or HTML via vectors related to widget updates, aka \"Universal XSS (UXSS).\"", "scorev2": "4.3", "scorev3": "6.1", "scorev4": "0.0", "modified": "2026-06-17T00:48:50.000", "vector": "NETWORK", "vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N", "detail": "fixed-version: Fixed from version >52.0.2743.116" }, { "id": "CVE-2016-5149", "status": "Patched", "link": "https://nvd.nist.gov/vuln/detail/CVE-2016-5149", "summary": "The extensions subsystem in Google Chrome before 53.0.2785.89 on Windows and OS X and before 53.0.2785.92 on Linux relies on an IFRAME source URL to identify an associated extension, which allows remote attackers to conduct extension-bindings injection attacks by leveraging script access to a resource that initially has the about:blank URL.", "scorev2": "6.8", "scorev3": "8.8", "scorev4": "0.0", "modified": "2026-06-17T00:48:51.000", "vector": "NETWORK", "vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H", "detail": "fixed-version: Fixed from version >52.0.2743.116" }, { "id": "CVE-2016-5150", "status": "Patched", "link": "https://nvd.nist.gov/vuln/detail/CVE-2016-5150", "summary": "WebKit/Source/bindings/modules/v8/V8BindingForModules.cpp in Blink, as used in Google Chrome before 53.0.2785.89 on Windows and OS X and before 53.0.2785.92 on Linux, has an Indexed Database (aka IndexedDB) API implementation that does not properly restrict key-path evaluation, which allows remote attackers to cause a denial of service (use-after-free) or possibly have unspecified other impact via crafted JavaScript code that leverages certain side effects.", "scorev2": "6.8", "scorev3": "8.8", "scorev4": "0.0", "modified": "2026-06-17T00:48:51.000", "vector": "NETWORK", "vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H", "detail": "fixed-version: Fixed from version >52.0.2743.116" }, { "id": "CVE-2016-5151", "status": "Patched", "link": "https://nvd.nist.gov/vuln/detail/CVE-2016-5151", "summary": "PDFium in Google Chrome before 53.0.2785.89 on Windows and OS X and before 53.0.2785.92 on Linux mishandles timers, which allows remote attackers to cause a denial of service (use-after-free) or possibly have unspecified other impact via a crafted PDF document, related to fpdfsdk/javascript/JS_Object.cpp and fpdfsdk/javascript/app.cpp.", "scorev2": "6.8", "scorev3": "8.8", "scorev4": "0.0", "modified": "2026-06-17T00:48:51.000", "vector": "NETWORK", "vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H", "detail": "fixed-version: Fixed from version >52.0.2743.116" }, { "id": "CVE-2016-5152", "status": "Patched", "link": "https://nvd.nist.gov/vuln/detail/CVE-2016-5152", "summary": "Integer overflow in the opj_tcd_get_decoded_tile_size function in tcd.c in OpenJPEG, as used in PDFium in Google Chrome before 53.0.2785.89 on Windows and OS X and before 53.0.2785.92 on Linux, allows remote attackers to cause a denial of service (heap-based buffer overflow) or possibly have unspecified other impact via crafted JPEG 2000 data.", "scorev2": "6.8", "scorev3": "8.8", "scorev4": "0.0", "modified": "2026-06-17T00:48:51.000", "vector": "NETWORK", "vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H", "detail": "fixed-version: Fixed from version >52.0.2743.116" }, { "id": "CVE-2016-5153", "status": "Patched", "link": "https://nvd.nist.gov/vuln/detail/CVE-2016-5153", "summary": "The Web Animations implementation in Blink, as used in Google Chrome before 53.0.2785.89 on Windows and OS X and before 53.0.2785.92 on Linux, improperly relies on list iteration, which allows remote attackers to cause a denial of service (use-after-destruction) or possibly have unspecified other impact via a crafted web site.", "scorev2": "6.8", "scorev3": "8.8", "scorev4": "0.0", "modified": "2026-06-17T00:48:51.000", "vector": "NETWORK", "vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H", "detail": "fixed-version: Fixed from version >52.0.2743.116" }, { "id": "CVE-2016-5154", "status": "Patched", "link": "https://nvd.nist.gov/vuln/detail/CVE-2016-5154", "summary": "Multiple heap-based buffer overflows in PDFium, as used in Google Chrome before 53.0.2785.89 on Windows and OS X and before 53.0.2785.92 on Linux, allow remote attackers to cause a denial of service or possibly have unspecified other impact via a crafted JBig2 image.", "scorev2": "6.8", "scorev3": "8.8", "scorev4": "0.0", "modified": "2026-06-17T00:48:51.000", "vector": "NETWORK", "vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H", "detail": "fixed-version: Fixed from version >52.0.2743.116" }, { "id": "CVE-2016-5155", "status": "Patched", "link": "https://nvd.nist.gov/vuln/detail/CVE-2016-5155", "summary": "Google Chrome before 53.0.2785.89 on Windows and OS X and before 53.0.2785.92 on Linux does not properly validate access to the initial document, which allows remote attackers to spoof the address bar via a crafted web site.", "scorev2": "4.3", "scorev3": "6.5", "scorev4": "0.0", "modified": "2026-06-17T00:48:51.000", "vector": "NETWORK", "vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:N", "detail": "fixed-version: Fixed from version >52.0.2743.116" }, { "id": "CVE-2016-5156", "status": "Patched", "link": "https://nvd.nist.gov/vuln/detail/CVE-2016-5156", "summary": "extensions/renderer/event_bindings.cc in the event bindings in Google Chrome before 53.0.2785.89 on Windows and OS X and before 53.0.2785.92 on Linux attempts to process filtered events after failure to add an event matcher, which allows remote attackers to cause a denial of service (use-after-free) or possibly have unspecified other impact via unknown vectors.", "scorev2": "6.8", "scorev3": "8.8", "scorev4": "0.0", "modified": "2026-06-17T00:48:51.000", "vector": "NETWORK", "vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H", "detail": "fixed-version: Fixed from version >52.0.2743.116" }, { "id": "CVE-2016-5157", "status": "Patched", "link": "https://nvd.nist.gov/vuln/detail/CVE-2016-5157", "summary": "Heap-based buffer overflow in the opj_dwt_interleave_v function in dwt.c in OpenJPEG, as used in PDFium in Google Chrome before 53.0.2785.89 on Windows and OS X and before 53.0.2785.92 on Linux, allows remote attackers to execute arbitrary code via crafted coordinate values in JPEG 2000 data.", "scorev2": "6.8", "scorev3": "8.8", "scorev4": "0.0", "modified": "2026-06-17T00:48:52.000", "vector": "NETWORK", "vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H", "detail": "fixed-version: Fixed from version >52.0.2743.116" }, { "id": "CVE-2016-5158", "status": "Patched", "link": "https://nvd.nist.gov/vuln/detail/CVE-2016-5158", "summary": "Multiple integer overflows in the opj_tcd_init_tile function in tcd.c in OpenJPEG, as used in PDFium in Google Chrome before 53.0.2785.89 on Windows and OS X and before 53.0.2785.92 on Linux, allow remote attackers to cause a denial of service (heap-based buffer overflow) or possibly have unspecified other impact via crafted JPEG 2000 data.", "scorev2": "6.8", "scorev3": "8.8", "scorev4": "0.0", "modified": "2026-06-17T00:48:52.000", "vector": "NETWORK", "vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H", "detail": "fixed-version: Fixed from version >52.0.2743.116" }, { "id": "CVE-2016-5159", "status": "Patched", "link": "https://nvd.nist.gov/vuln/detail/CVE-2016-5159", "summary": "Multiple integer overflows in OpenJPEG, as used in PDFium in Google Chrome before 53.0.2785.89 on Windows and OS X and before 53.0.2785.92 on Linux, allow remote attackers to cause a denial of service (heap-based buffer overflow) or possibly have unspecified other impact via crafted JPEG 2000 data that is mishandled during opj_aligned_malloc calls in dwt.c and t1.c.", "scorev2": "6.8", "scorev3": "8.8", "scorev4": "0.0", "modified": "2026-06-17T00:48:52.000", "vector": "NETWORK", "vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H", "detail": "fixed-version: Fixed from version >52.0.2743.116" }, { "id": "CVE-2016-5160", "status": "Patched", "link": "https://nvd.nist.gov/vuln/detail/CVE-2016-5160", "summary": "The AllowCrossRendererResourceLoad function in extensions/browser/url_request_util.cc in Google Chrome before 53.0.2785.89 on Windows and OS X and before 53.0.2785.92 on Linux does not properly use an extension's manifest.json web_accessible_resources field for restrictions on IFRAME elements, which makes it easier for remote attackers to conduct clickjacking attacks, and trick users into changing extension settings, via a crafted web site, a different vulnerability than CVE-2016-5162.", "scorev2": "4.3", "scorev3": "6.5", "scorev4": "0.0", "modified": "2026-06-17T00:48:52.000", "vector": "NETWORK", "vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:N", "detail": "fixed-version: Fixed from version >52.0.2743.116" }, { "id": "CVE-2016-5161", "status": "Patched", "link": "https://nvd.nist.gov/vuln/detail/CVE-2016-5161", "summary": "The EditingStyle::mergeStyle function in WebKit/Source/core/editing/EditingStyle.cpp in Blink, as used in Google Chrome before 53.0.2785.89 on Windows and OS X and before 53.0.2785.92 on Linux, mishandles custom properties, which allows remote attackers to cause a denial of service or possibly have unspecified other impact via a crafted web site that leverages \"type confusion\" in the StylePropertySerializer class.", "scorev2": "6.8", "scorev3": "8.8", "scorev4": "0.0", "modified": "2026-06-17T00:48:52.000", "vector": "NETWORK", "vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H", "detail": "fixed-version: Fixed from version >52.0.2743.116" }, { "id": "CVE-2016-5162", "status": "Patched", "link": "https://nvd.nist.gov/vuln/detail/CVE-2016-5162", "summary": "The AllowCrossRendererResourceLoad function in extensions/browser/url_request_util.cc in Google Chrome before 53.0.2785.89 on Windows and OS X and before 53.0.2785.92 on Linux does not properly use an extension's manifest.json web_accessible_resources field for restrictions on IFRAME elements, which makes it easier for remote attackers to conduct clickjacking attacks, and trick users into changing extension settings, via a crafted web site, a different vulnerability than CVE-2016-5160.", "scorev2": "4.3", "scorev3": "6.5", "scorev4": "0.0", "modified": "2026-06-17T00:48:52.000", "vector": "NETWORK", "vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:N", "detail": "fixed-version: Fixed from version >52.0.2743.116" }, { "id": "CVE-2016-5163", "status": "Patched", "link": "https://nvd.nist.gov/vuln/detail/CVE-2016-5163", "summary": "The bidirectional-text implementation in Google Chrome before 53.0.2785.89 on Windows and OS X and before 53.0.2785.92 on Linux does not ensure left-to-right (LTR) rendering of URLs, which allows remote attackers to spoof the address bar via crafted right-to-left (RTL) Unicode text, related to omnibox/SuggestionView.java and omnibox/UrlBar.java in Chrome for Android.", "scorev2": "4.3", "scorev3": "4.3", "scorev4": "0.0", "modified": "2026-06-17T00:48:53.000", "vector": "NETWORK", "vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N", "detail": "fixed-version: Fixed from version >52.0.2743.116" }, { "id": "CVE-2016-5164", "status": "Patched", "link": "https://nvd.nist.gov/vuln/detail/CVE-2016-5164", "summary": "Cross-site scripting (XSS) vulnerability in WebKit/Source/platform/v8_inspector/V8Debugger.cpp in Blink, as used in Google Chrome before 53.0.2785.89 on Windows and OS X and before 53.0.2785.92 on Linux, allows remote attackers to inject arbitrary web script or HTML into the Developer Tools (aka DevTools) subsystem via a crafted web site, aka \"Universal XSS (UXSS).\"", "scorev2": "4.3", "scorev3": "6.1", "scorev4": "0.0", "modified": "2026-06-17T00:48:53.000", "vector": "NETWORK", "vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N", "detail": "fixed-version: Fixed from version >52.0.2743.116" }, { "id": "CVE-2016-5165", "status": "Patched", "link": "https://nvd.nist.gov/vuln/detail/CVE-2016-5165", "summary": "Cross-site scripting (XSS) vulnerability in the Developer Tools (aka DevTools) subsystem in Google Chrome before 53.0.2785.89 on Windows and OS X and before 53.0.2785.92 on Linux allows remote attackers to inject arbitrary web script or HTML via the settings parameter in a chrome-devtools-frontend.appspot.com URL's query string.", "scorev2": "4.3", "scorev3": "6.1", "scorev4": "0.0", "modified": "2026-06-17T00:48:53.000", "vector": "NETWORK", "vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N", "detail": "fixed-version: Fixed from version >52.0.2743.116" }, { "id": "CVE-2016-5166", "status": "Patched", "link": "https://nvd.nist.gov/vuln/detail/CVE-2016-5166", "summary": "The download implementation in Google Chrome before 53.0.2785.89 on Windows and OS X and before 53.0.2785.92 on Linux does not properly restrict saving a file:// URL that is referenced by an http:// URL, which makes it easier for user-assisted remote attackers to discover NetNTLM hashes and conduct SMB relay attacks via a crafted web page that is accessed with the \"Save page as\" menu choice.", "scorev2": "2.6", "scorev3": "3.1", "scorev4": "0.0", "modified": "2026-06-17T00:48:53.000", "vector": "NETWORK", "vectorString": "CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:L/I:N/A:N", "detail": "fixed-version: Fixed from version >52.0.2743.116" }, { "id": "CVE-2016-5167", "status": "Patched", "link": "https://nvd.nist.gov/vuln/detail/CVE-2016-5167", "summary": "Multiple unspecified vulnerabilities in Google Chrome before 53.0.2785.89 on Windows and OS X and before 53.0.2785.92 on Linux allow attackers to cause a denial of service or possibly have other impact via unknown vectors.", "scorev2": "7.5", "scorev3": "8.8", "scorev4": "0.0", "modified": "2026-06-17T00:48:53.000", "vector": "NETWORK", "vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H", "detail": "fixed-version: Fixed from version >52.0.2743.116" }, { "id": "CVE-2016-5168", "status": "Patched", "link": "https://nvd.nist.gov/vuln/detail/CVE-2016-5168", "summary": "Skia, as used in Google Chrome before 50.0.2661.94, allows remote attackers to bypass the Same Origin Policy and obtain sensitive information.", "scorev2": "5.0", "scorev3": "7.5", "scorev4": "0.0", "modified": "2026-06-17T00:48:53.000", "vector": "NETWORK", "vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N", "detail": "fixed-version: Fixed from version >50.0.2661.91" }, { "id": "CVE-2016-5170", "status": "Patched", "link": "https://nvd.nist.gov/vuln/detail/CVE-2016-5170", "summary": "WebKit/Source/bindings/modules/v8/V8BindingForModules.cpp in Blink, as used in Google Chrome before 53.0.2785.113, does not properly consider getter side effects during array key conversion, which allows remote attackers to cause a denial of service (use-after-free) or possibly have unspecified other impact via crafted Indexed Database (aka IndexedDB) API calls.", "scorev2": "6.8", "scorev3": "8.8", "scorev4": "0.0", "modified": "2026-06-17T00:48:53.000", "vector": "NETWORK", "vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H", "detail": "fixed-version: Fixed from version >53.0.2785.101" }, { "id": "CVE-2016-5171", "status": "Patched", "link": "https://nvd.nist.gov/vuln/detail/CVE-2016-5171", "summary": "WebKit/Source/bindings/templates/interface.cpp in Blink, as used in Google Chrome before 53.0.2785.113, does not prevent certain constructor calls, which allows remote attackers to cause a denial of service (use-after-free) or possibly have unspecified other impact via crafted JavaScript code.", "scorev2": "6.8", "scorev3": "8.8", "scorev4": "0.0", "modified": "2026-06-17T00:48:54.000", "vector": "NETWORK", "vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H", "detail": "fixed-version: Fixed from version >53.0.2785.101" }, { "id": "CVE-2016-5172", "status": "Patched", "link": "https://nvd.nist.gov/vuln/detail/CVE-2016-5172", "summary": "The parser in Google V8, as used in Google Chrome before 53.0.2785.113, mishandles scopes, which allows remote attackers to obtain sensitive information from arbitrary memory locations via crafted JavaScript code.", "scorev2": "4.3", "scorev3": "6.5", "scorev4": "0.0", "modified": "2026-06-17T00:48:54.000", "vector": "NETWORK", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N", "detail": "fixed-version: Fixed from version >53.0.2785.101" }, { "id": "CVE-2016-5173", "status": "Patched", "link": "https://nvd.nist.gov/vuln/detail/CVE-2016-5173", "summary": "The extensions subsystem in Google Chrome before 53.0.2785.113 does not properly restrict access to Object.prototype, which allows remote attackers to load unintended resources, and consequently trigger unintended JavaScript function calls and bypass the Same Origin Policy via an indirect interception attack.", "scorev2": "6.8", "scorev3": "7.1", "scorev4": "0.0", "modified": "2026-06-17T00:48:54.000", "vector": "NETWORK", "vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:L", "detail": "fixed-version: Fixed from version >53.0.2785.101" }, { "id": "CVE-2016-5174", "status": "Patched", "link": "https://nvd.nist.gov/vuln/detail/CVE-2016-5174", "summary": "browser/ui/cocoa/browser_window_controller_private.mm in Google Chrome before 53.0.2785.113 does not process fullscreen toggle requests during a fullscreen transition, which allows remote attackers to cause a denial of service (unsuppressed popup) via a crafted web site.", "scorev2": "4.3", "scorev3": "6.5", "scorev4": "0.0", "modified": "2026-06-17T00:48:54.000", "vector": "NETWORK", "vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H", "detail": "fixed-version: Fixed from version >53.0.2785.101" }, { "id": "CVE-2016-5175", "status": "Patched", "link": "https://nvd.nist.gov/vuln/detail/CVE-2016-5175", "summary": "Multiple unspecified vulnerabilities in Google Chrome before 53.0.2785.113 allow attackers to cause a denial of service or possibly have other impact via unknown vectors.", "scorev2": "6.8", "scorev3": "8.8", "scorev4": "0.0", "modified": "2026-06-17T00:48:54.000", "vector": "NETWORK", "vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H", "detail": "fixed-version: Fixed from version >53.0.2785.101" }, { "id": "CVE-2016-5176", "status": "Patched", "link": "https://nvd.nist.gov/vuln/detail/CVE-2016-5176", "summary": "Google Chrome before 53.0.2785.113 allows remote attackers to bypass the SafeBrowsing protection mechanism via unspecified vectors.", "scorev2": "4.3", "scorev3": "6.5", "scorev4": "0.0", "modified": "2026-06-17T00:48:54.000", "vector": "NETWORK", "vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:N", "detail": "fixed-version: Fixed from version >53.0.2785.101" }, { "id": "CVE-2016-5177", "status": "Patched", "link": "https://nvd.nist.gov/vuln/detail/CVE-2016-5177", "summary": "Use-after-free vulnerability in V8 in Google Chrome before 53.0.2785.143 allows remote attackers to cause a denial of service (crash) or possibly have unspecified other impact via unknown vectors.", "scorev2": "6.8", "scorev3": "8.8", "scorev4": "0.0", "modified": "2026-06-17T00:48:54.000", "vector": "NETWORK", "vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H", "detail": "fixed-version: Fixed from version >53.0.2785.129" }, { "id": "CVE-2016-5178", "status": "Patched", "link": "https://nvd.nist.gov/vuln/detail/CVE-2016-5178", "summary": "Multiple unspecified vulnerabilities in Google Chrome before 53.0.2785.143 allow remote attackers to cause a denial of service or possibly have other impact via unknown vectors.", "scorev2": "7.5", "scorev3": "9.8", "scorev4": "0.0", "modified": "2026-06-17T00:48:54.000", "vector": "NETWORK", "vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H", "detail": "fixed-version: Fixed from version >53.0.2785.129" }, { "id": "CVE-2016-5181", "status": "Patched", "link": "https://nvd.nist.gov/vuln/detail/CVE-2016-5181", "summary": "Blink in Google Chrome prior to 54.0.2840.59 for Windows, Mac, and Linux; 54.0.2840.85 for Android permitted execution of v8 microtasks while the DOM was in an inconsistent state, which allowed a remote attacker to inject arbitrary scripts or HTML (UXSS) via crafted HTML pages.", "scorev2": "4.3", "scorev3": "6.1", "scorev4": "0.0", "modified": "2026-06-17T00:48:55.000", "vector": "NETWORK", "vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N", "detail": "fixed-version: Fixed from version >53.0.2785.143" }, { "id": "CVE-2016-5182", "status": "Patched", "link": "https://nvd.nist.gov/vuln/detail/CVE-2016-5182", "summary": "Blink in Google Chrome prior to 54.0.2840.59 for Windows, Mac, and Linux; 54.0.2840.85 for Android had insufficient validation in bitmap handling, which allowed a remote attacker to potentially exploit heap corruption via crafted HTML pages.", "scorev2": "6.8", "scorev3": "8.8", "scorev4": "0.0", "modified": "2026-06-17T00:48:55.000", "vector": "NETWORK", "vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H", "detail": "fixed-version: Fixed from version >53.0.2785.143" }, { "id": "CVE-2016-5183", "status": "Patched", "link": "https://nvd.nist.gov/vuln/detail/CVE-2016-5183", "summary": "A heap use after free in PDFium in Google Chrome prior to 54.0.2840.59 for Windows, Mac, and Linux; 54.0.2840.85 for Android allows a remote attacker to potentially exploit heap corruption via crafted PDF files.", "scorev2": "6.8", "scorev3": "8.8", "scorev4": "0.0", "modified": "2026-06-17T00:48:55.000", "vector": "NETWORK", "vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H", "detail": "fixed-version: Fixed from version >53.0.2785.143" }, { "id": "CVE-2016-5184", "status": "Patched", "link": "https://nvd.nist.gov/vuln/detail/CVE-2016-5184", "summary": "PDFium in Google Chrome prior to 54.0.2840.59 for Windows, Mac, and Linux; 54.0.2840.85 for Android incorrectly handled object lifecycles in CFFL_FormFillter::KillFocusForAnnot, which allowed a remote attacker to potentially exploit heap corruption via crafted PDF files.", "scorev2": "6.8", "scorev3": "8.8", "scorev4": "0.0", "modified": "2026-06-17T00:48:55.000", "vector": "NETWORK", "vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H", "detail": "fixed-version: Fixed from version >53.0.2785.143" }, { "id": "CVE-2016-5185", "status": "Patched", "link": "https://nvd.nist.gov/vuln/detail/CVE-2016-5185", "summary": "Blink in Google Chrome prior to 54.0.2840.59 for Windows, Mac, and Linux; 54.0.2840.85 for Android incorrectly allowed reentrance of FrameView::updateLifecyclePhasesInternal(), which allowed a remote attacker to perform an out of bounds memory read via crafted HTML pages.", "scorev2": "6.8", "scorev3": "8.8", "scorev4": "0.0", "modified": "2026-06-17T00:48:55.000", "vector": "NETWORK", "vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H", "detail": "fixed-version: Fixed from version >53.0.2785.143" }, { "id": "CVE-2016-5186", "status": "Patched", "link": "https://nvd.nist.gov/vuln/detail/CVE-2016-5186", "summary": "Devtools in Google Chrome prior to 54.0.2840.59 for Windows, Mac, and Linux; 54.0.2840.85 for Android incorrectly handled objects after a tab crash, which allowed a remote attacker to perform an out of bounds memory read via crafted PDF files.", "scorev2": "6.8", "scorev3": "5.3", "scorev4": "0.0", "modified": "2026-06-17T00:48:55.000", "vector": "LOCAL", "vectorString": "CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:L", "detail": "fixed-version: Fixed from version >53.0.2785.143" }, { "id": "CVE-2016-5187", "status": "Patched", "link": "https://nvd.nist.gov/vuln/detail/CVE-2016-5187", "summary": "Google Chrome prior to 54.0.2840.85 for Android incorrectly handled rapid transition into and out of full screen mode, which allowed a remote attacker to spoof the contents of the Omnibox (URL bar) via crafted HTML pages.", "scorev2": "4.3", "scorev3": "6.5", "scorev4": "0.0", "modified": "2026-06-17T00:48:55.000", "vector": "NETWORK", "vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:N", "detail": "fixed-version: Fixed from version >53.0.2785.143" }, { "id": "CVE-2016-5188", "status": "Patched", "link": "https://nvd.nist.gov/vuln/detail/CVE-2016-5188", "summary": "Multiple issues in Blink in Google Chrome prior to 54.0.2840.59 for Windows, Mac, and Linux allow a remote attacker to spoof various parts of browser UI via crafted HTML pages.", "scorev2": "4.3", "scorev3": "4.3", "scorev4": "0.0", "modified": "2026-06-17T00:48:55.000", "vector": "NETWORK", "vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N", "detail": "fixed-version: Fixed from version >53.0.2785.143" }, { "id": "CVE-2016-5189", "status": "Patched", "link": "https://nvd.nist.gov/vuln/detail/CVE-2016-5189", "summary": "Google Chrome prior to 54.0.2840.59 for Windows, Mac, and Linux; 54.0.2840.85 for Android permitted navigation to blob URLs with non-canonical origins, which allowed a remote attacker to spoof the contents of the Omnibox (URL bar) via crafted HTML pages.", "scorev2": "4.3", "scorev3": "6.5", "scorev4": "0.0", "modified": "2026-06-17T00:48:56.000", "vector": "NETWORK", "vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:N", "detail": "fixed-version: Fixed from version >53.0.2785.143" }, { "id": "CVE-2016-5190", "status": "Patched", "link": "https://nvd.nist.gov/vuln/detail/CVE-2016-5190", "summary": "Google Chrome prior to 54.0.2840.59 for Windows, Mac, and Linux; 54.0.2840.85 for Android incorrectly handled object lifecycles during shutdown, which allowed a remote attacker to perform an out of bounds memory read via crafted HTML pages.", "scorev2": "6.8", "scorev3": "6.3", "scorev4": "0.0", "modified": "2026-06-17T00:48:56.000", "vector": "NETWORK", "vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:L", "detail": "fixed-version: Fixed from version >53.0.2785.143" }, { "id": "CVE-2016-5191", "status": "Patched", "link": "https://nvd.nist.gov/vuln/detail/CVE-2016-5191", "summary": "Bookmark handling in Google Chrome prior to 54.0.2840.59 for Windows, Mac, and Linux; 54.0.2840.85 for Android had insufficient validation of supplied data, which allowed a remote attacker to inject arbitrary scripts or HTML (UXSS) via crafted HTML pages, as demonstrated by an interpretation conflict between userinfo and scheme in an http://javascript:payload@example.com URL.", "scorev2": "4.3", "scorev3": "6.1", "scorev4": "0.0", "modified": "2026-06-17T00:48:56.000", "vector": "NETWORK", "vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N", "detail": "fixed-version: Fixed from version >53.0.2785.143" }, { "id": "CVE-2016-5192", "status": "Patched", "link": "https://nvd.nist.gov/vuln/detail/CVE-2016-5192", "summary": "Blink in Google Chrome prior to 54.0.2840.59 for Windows missed a CORS check on redirect in TextTrackLoader, which allowed a remote attacker to bypass cross-origin restrictions via crafted HTML pages.", "scorev2": "4.3", "scorev3": "6.5", "scorev4": "0.0", "modified": "2026-06-17T00:48:56.000", "vector": "NETWORK", "vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:N", "detail": "fixed-version: Fixed from version >53.0.2785.143" }, { "id": "CVE-2016-5193", "status": "Patched", "link": "https://nvd.nist.gov/vuln/detail/CVE-2016-5193", "summary": "Google Chrome prior to 54.0 for iOS had insufficient validation of URLs for windows open by DOM, which allowed a remote attacker to bypass restrictions on navigation to certain URL schemes via crafted HTML pages.", "scorev2": "4.3", "scorev3": "4.3", "scorev4": "0.0", "modified": "2026-06-17T00:48:56.000", "vector": "NETWORK", "vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:N", "detail": "fixed-version: Fixed from version >53.0.2785.143" }, { "id": "CVE-2016-5194", "status": "Patched", "link": "https://nvd.nist.gov/vuln/detail/CVE-2016-5194", "summary": "Unspecified vulnerabilities in Google Chrome before 54.0.2840.59.", "scorev2": "10.0", "scorev3": "9.8", "scorev4": "0.0", "modified": "2026-06-17T00:48:56.000", "vector": "NETWORK", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H", "detail": "fixed-version: Fixed from version 54.0.2840.59" }, { "id": "CVE-2016-5196", "status": "Patched", "link": "https://nvd.nist.gov/vuln/detail/CVE-2016-5196", "summary": "The content renderer client in Google Chrome prior to 54.0.2840.85 for Android insufficiently enforced the Same Origin Policy amongst downloaded files, which allowed a remote attacker to access any downloaded file and interact with sites, including those the user was logged into, via a crafted HTML page.", "scorev2": "6.8", "scorev3": "8.8", "scorev4": "0.0", "modified": "2026-06-17T00:48:57.000", "vector": "NETWORK", "vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H", "detail": "fixed-version: Fixed from version >54.0.2840.68" }, { "id": "CVE-2016-5197", "status": "Patched", "link": "https://nvd.nist.gov/vuln/detail/CVE-2016-5197", "summary": "The content view client in Google Chrome prior to 54.0.2840.85 for Android insufficiently validated intent URLs, which allowed a remote attacker who had compromised the renderer process to start arbitrary activity on the system via a crafted HTML page.", "scorev2": "6.8", "scorev3": "8.8", "scorev4": "0.0", "modified": "2026-06-17T00:48:57.000", "vector": "NETWORK", "vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H", "detail": "fixed-version: Fixed from version >54.0.2840.68" }, { "id": "CVE-2016-5198", "status": "Patched", "link": "https://nvd.nist.gov/vuln/detail/CVE-2016-5198", "summary": "V8 in Google Chrome prior to 54.0.2840.90 for Linux, and 54.0.2840.85 for Android, and 54.0.2840.87 for Windows and Mac included incorrect optimisation assumptions, which allowed a remote attacker to perform arbitrary read/write operations, leading to code execution, via a crafted HTML page.", "scorev2": "6.8", "scorev3": "8.8", "scorev4": "0.0", "modified": "2026-06-17T00:48:57.000", "vector": "NETWORK", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H", "detail": "fixed-version: Fixed from version 54.0.2840.90" }, { "id": "CVE-2016-5199", "status": "Patched", "link": "https://nvd.nist.gov/vuln/detail/CVE-2016-5199", "summary": "An off by one error resulting in an allocation of zero size in FFmpeg in Google Chrome prior to 54.0.2840.98 for Mac, and 54.0.2840.99 for Windows, and 54.0.2840.100 for Linux, and 55.0.2883.84 for Android allowed a remote attacker to potentially exploit heap corruption via a crafted video file.", "scorev2": "6.8", "scorev3": "8.8", "scorev4": "0.0", "modified": "2026-06-17T00:48:57.000", "vector": "NETWORK", "vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H", "detail": "fixed-version: Fixed from version >54.0.2840.87" }, { "id": "CVE-2016-5200", "status": "Patched", "link": "https://nvd.nist.gov/vuln/detail/CVE-2016-5200", "summary": "V8 in Google Chrome prior to 54.0.2840.98 for Mac, and 54.0.2840.99 for Windows, and 54.0.2840.100 for Linux, and 55.0.2883.84 for Android incorrectly applied type rules, which allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page.", "scorev2": "6.8", "scorev3": "8.8", "scorev4": "0.0", "modified": "2026-06-17T00:48:57.000", "vector": "NETWORK", "vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H", "detail": "fixed-version: Fixed from version >54.0.2840.87" }, { "id": "CVE-2016-5201", "status": "Patched", "link": "https://nvd.nist.gov/vuln/detail/CVE-2016-5201", "summary": "A leak of privateClass in the extensions API in Google Chrome prior to 54.0.2840.100 for Linux, and 54.0.2840.99 for Windows, and 54.0.2840.98 for Mac allowed a remote attacker to access privileged JavaScript code via a crafted HTML page.", "scorev2": "4.3", "scorev3": "6.5", "scorev4": "0.0", "modified": "2026-06-17T00:48:58.000", "vector": "NETWORK", "vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N", "detail": "fixed-version: Fixed from version >54.0.2840.87" }, { "id": "CVE-2016-5202", "status": "Patched", "link": "https://nvd.nist.gov/vuln/detail/CVE-2016-5202", "summary": "browser/extensions/api/dial/dial_registry.cc in Google Chrome before 54.0.2840.98 on macOS, before 54.0.2840.99 on Windows, and before 54.0.2840.100 on Linux neglects to copy a device ID before an erase() call, which causes the erase operation to access data that that erase operation will destroy.", "scorev2": "7.5", "scorev3": "9.1", "scorev4": "0.0", "modified": "2026-06-17T00:48:58.000", "vector": "NETWORK", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N", "detail": "fixed-version: Fixed from version 54.0.2840.100" }, { "id": "CVE-2016-5203", "status": "Patched", "link": "https://nvd.nist.gov/vuln/detail/CVE-2016-5203", "summary": "A use after free in PDFium in Google Chrome prior to 55.0.2883.75 for Mac, Windows and Linux, and 55.0.2883.84 for Android allowed a remote attacker to potentially exploit heap corruption via a crafted PDF file.", "scorev2": "6.8", "scorev3": "8.8", "scorev4": "0.0", "modified": "2026-06-17T00:48:58.000", "vector": "NETWORK", "vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H", "detail": "fixed-version: Fixed from version >54.0.2840.99" }, { "id": "CVE-2016-5204", "status": "Patched", "link": "https://nvd.nist.gov/vuln/detail/CVE-2016-5204", "summary": "Leaking of an SVG shadow tree leading to corruption of the DOM tree in Blink in Google Chrome prior to 55.0.2883.75 for Mac, Windows and Linux, and 55.0.2883.84 for Android allowed a remote attacker to inject arbitrary scripts or HTML (UXSS) via a crafted HTML page.", "scorev2": "4.3", "scorev3": "6.1", "scorev4": "0.0", "modified": "2026-06-17T00:48:58.000", "vector": "NETWORK", "vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N", "detail": "fixed-version: Fixed from version >54.0.2840.99" }, { "id": "CVE-2016-5205", "status": "Patched", "link": "https://nvd.nist.gov/vuln/detail/CVE-2016-5205", "summary": "Blink in Google Chrome prior to 55.0.2883.75 for Linux, Windows and Mac, incorrectly handles deferred page loads, which allowed a remote attacker to inject arbitrary scripts or HTML (UXSS) via a crafted HTML page.", "scorev2": "4.3", "scorev3": "6.1", "scorev4": "0.0", "modified": "2026-06-17T00:48:58.000", "vector": "NETWORK", "vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N", "detail": "fixed-version: Fixed from version >54.0.2840.99" }, { "id": "CVE-2016-5206", "status": "Patched", "link": "https://nvd.nist.gov/vuln/detail/CVE-2016-5206", "summary": "The PDF plugin in Google Chrome prior to 55.0.2883.75 for Mac, Windows and Linux, and 55.0.2883.84 for Android incorrectly followed redirects, which allowed a remote attacker to bypass the Same Origin Policy via a crafted HTML page.", "scorev2": "6.8", "scorev3": "8.8", "scorev4": "0.0", "modified": "2026-06-17T00:48:58.000", "vector": "NETWORK", "vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H", "detail": "fixed-version: Fixed from version >54.0.2840.99" }, { "id": "CVE-2016-5207", "status": "Patched", "link": "https://nvd.nist.gov/vuln/detail/CVE-2016-5207", "summary": "In Blink in Google Chrome prior to 55.0.2883.75 for Mac, Windows and Linux, and 55.0.2883.84 for Android, corruption of the DOM tree could occur during the removal of a full screen element, which allowed a remote attacker to achieve arbitrary code execution via a crafted HTML page.", "scorev2": "4.3", "scorev3": "6.1", "scorev4": "0.0", "modified": "2026-06-17T00:48:58.000", "vector": "NETWORK", "vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N", "detail": "fixed-version: Fixed from version >54.0.2840.99" }, { "id": "CVE-2016-5208", "status": "Patched", "link": "https://nvd.nist.gov/vuln/detail/CVE-2016-5208", "summary": "Blink in Google Chrome prior to 55.0.2883.75 for Linux and Windows, and 55.0.2883.84 for Android allowed possible corruption of the DOM tree during synchronous event handling, which allowed a remote attacker to inject arbitrary scripts or HTML (UXSS) via a crafted HTML page.", "scorev2": "4.3", "scorev3": "6.1", "scorev4": "0.0", "modified": "2026-06-17T00:48:58.000", "vector": "NETWORK", "vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N", "detail": "fixed-version: Fixed from version >54.0.2840.99" }, { "id": "CVE-2016-5209", "status": "Patched", "link": "https://nvd.nist.gov/vuln/detail/CVE-2016-5209", "summary": "Bad casting in bitmap manipulation in Blink in Google Chrome prior to 55.0.2883.75 for Mac, Windows and Linux, and 55.0.2883.84 for Android allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page.", "scorev2": "6.8", "scorev3": "8.8", "scorev4": "0.0", "modified": "2026-06-17T00:48:58.000", "vector": "NETWORK", "vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H", "detail": "fixed-version: Fixed from version >54.0.2840.99" }, { "id": "CVE-2016-5210", "status": "Patched", "link": "https://nvd.nist.gov/vuln/detail/CVE-2016-5210", "summary": "Heap buffer overflow during TIFF image parsing in PDFium in Google Chrome prior to 55.0.2883.75 for Mac, Windows and Linux, and 55.0.2883.84 for Android allowed a remote attacker to potentially exploit heap corruption via a crafted PDF file.", "scorev2": "6.8", "scorev3": "8.8", "scorev4": "0.0", "modified": "2026-06-17T00:48:58.000", "vector": "NETWORK", "vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H", "detail": "fixed-version: Fixed from version >54.0.2840.99" }, { "id": "CVE-2016-5211", "status": "Patched", "link": "https://nvd.nist.gov/vuln/detail/CVE-2016-5211", "summary": "A use after free in PDFium in Google Chrome prior to 55.0.2883.75 for Mac, Windows and Linux, and 55.0.2883.84 for Android allowed a remote attacker to potentially exploit heap corruption via a crafted PDF file.", "scorev2": "6.8", "scorev3": "8.8", "scorev4": "0.0", "modified": "2026-06-17T00:48:59.000", "vector": "NETWORK", "vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H", "detail": "fixed-version: Fixed from version >54.0.2840.99" }, { "id": "CVE-2016-5212", "status": "Patched", "link": "https://nvd.nist.gov/vuln/detail/CVE-2016-5212", "summary": "Google Chrome prior to 55.0.2883.75 for Mac, Windows and Linux, and 55.0.2883.84 for Android insufficiently sanitized DevTools URLs, which allowed a remote attacker to read local files via a crafted HTML page.", "scorev2": "4.3", "scorev3": "6.5", "scorev4": "0.0", "modified": "2026-06-17T00:48:59.000", "vector": "NETWORK", "vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N", "detail": "fixed-version: Fixed from version >54.0.2840.99" }, { "id": "CVE-2016-5213", "status": "Patched", "link": "https://nvd.nist.gov/vuln/detail/CVE-2016-5213", "summary": "A use after free in V8 in Google Chrome prior to 55.0.2883.75 for Mac, Windows and Linux, and 55.0.2883.84 for Android allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page.", "scorev2": "6.8", "scorev3": "8.8", "scorev4": "0.0", "modified": "2026-06-17T00:48:59.000", "vector": "NETWORK", "vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H", "detail": "fixed-version: Fixed from version >54.0.2840.99" }, { "id": "CVE-2016-5214", "status": "Patched", "link": "https://nvd.nist.gov/vuln/detail/CVE-2016-5214", "summary": "Google Chrome prior to 55.0.2883.75 for Windows mishandled downloaded files, which allowed a remote attacker to prevent the downloaded file from receiving the Mark of the Web via a crafted HTML page.", "scorev2": "4.3", "scorev3": "4.3", "scorev4": "0.0", "modified": "2026-06-17T00:48:59.000", "vector": "NETWORK", "vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N", "detail": "fixed-version: Fixed from version >54.0.2840.99" }, { "id": "CVE-2016-5215", "status": "Patched", "link": "https://nvd.nist.gov/vuln/detail/CVE-2016-5215", "summary": "A use after free in webaudio in Google Chrome prior to 55.0.2883.75 for Mac, Windows and Linux, and 55.0.2883.84 for Android allowed a remote attacker to perform an out of bounds memory read via a crafted HTML page.", "scorev2": "6.8", "scorev3": "6.3", "scorev4": "0.0", "modified": "2026-06-17T00:48:59.000", "vector": "NETWORK", "vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:L", "detail": "fixed-version: Fixed from version >54.0.2840.99" }, { "id": "CVE-2016-5216", "status": "Patched", "link": "https://nvd.nist.gov/vuln/detail/CVE-2016-5216", "summary": "A use after free in PDFium in Google Chrome prior to 55.0.2883.75 for Mac, Windows and Linux, and 55.0.2883.84 for Android allowed a remote attacker to perform an out of bounds memory read via a crafted PDF file.", "scorev2": "6.8", "scorev3": "6.3", "scorev4": "0.0", "modified": "2026-06-17T00:48:59.000", "vector": "NETWORK", "vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:L", "detail": "fixed-version: Fixed from version >54.0.2840.99" }, { "id": "CVE-2016-5217", "status": "Patched", "link": "https://nvd.nist.gov/vuln/detail/CVE-2016-5217", "summary": "The extensions API in Google Chrome prior to 55.0.2883.75 for Mac, Windows and Linux, and 55.0.2883.84 for Android incorrectly permitted access to privileged plugins, which allowed a remote attacker to bypass site isolation via a crafted HTML page.", "scorev2": "4.3", "scorev3": "6.5", "scorev4": "0.0", "modified": "2026-06-17T00:48:59.000", "vector": "NETWORK", "vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:N", "detail": "fixed-version: Fixed from version >54.0.2840.99" }, { "id": "CVE-2016-5218", "status": "Patched", "link": "https://nvd.nist.gov/vuln/detail/CVE-2016-5218", "summary": "The extensions API in Google Chrome prior to 55.0.2883.75 for Mac, Windows and Linux, and 55.0.2883.84 for Android incorrectly handled navigation within PDFs, which allowed a remote attacker to temporarily spoof the contents of the Omnibox (URL bar) via a crafted HTML page containing PDF data.", "scorev2": "4.3", "scorev3": "6.5", "scorev4": "0.0", "modified": "2026-06-17T00:48:59.000", "vector": "NETWORK", "vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:N", "detail": "fixed-version: Fixed from version >54.0.2840.99" }, { "id": "CVE-2016-5219", "status": "Patched", "link": "https://nvd.nist.gov/vuln/detail/CVE-2016-5219", "summary": "A heap use after free in V8 in Google Chrome prior to 55.0.2883.75 for Mac, Windows and Linux, and 55.0.2883.84 for Android allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page.", "scorev2": "6.8", "scorev3": "6.3", "scorev4": "0.0", "modified": "2026-06-17T00:48:59.000", "vector": "NETWORK", "vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:L", "detail": "fixed-version: Fixed from version >54.0.2840.99" }, { "id": "CVE-2016-5220", "status": "Patched", "link": "https://nvd.nist.gov/vuln/detail/CVE-2016-5220", "summary": "PDFium in Google Chrome prior to 55.0.2883.75 for Mac, Windows and Linux, and 55.0.2883.84 for Android incorrectly handled navigation within PDFs, which allowed a remote attacker to read local files via a crafted PDF file.", "scorev2": "4.3", "scorev3": "6.5", "scorev4": "0.0", "modified": "2026-06-17T00:48:59.000", "vector": "NETWORK", "vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N", "detail": "fixed-version: Fixed from version >54.0.2840.99" }, { "id": "CVE-2016-5221", "status": "Patched", "link": "https://nvd.nist.gov/vuln/detail/CVE-2016-5221", "summary": "Type confusion in libGLESv2 in ANGLE in Google Chrome prior to 55.0.2883.75 for Mac, Windows and Linux, and 55.0.2883.84 for Android possibly allowed a remote attacker to bypass buffer validation via a crafted HTML page.", "scorev2": "6.8", "scorev3": "6.3", "scorev4": "0.0", "modified": "2026-06-17T00:49:00.000", "vector": "NETWORK", "vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:L", "detail": "fixed-version: Fixed from version >54.0.2840.99" }, { "id": "CVE-2016-5222", "status": "Patched", "link": "https://nvd.nist.gov/vuln/detail/CVE-2016-5222", "summary": "Incorrect handling of invalid URLs in Google Chrome prior to 55.0.2883.75 for Mac, Windows and Linux, and 55.0.2883.84 for Android allowed a remote attacker to spoof the contents of the Omnibox (URL bar) via a crafted HTML page.", "scorev2": "4.3", "scorev3": "6.5", "scorev4": "0.0", "modified": "2026-06-17T00:49:00.000", "vector": "NETWORK", "vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:N", "detail": "fixed-version: Fixed from version >54.0.2840.99" }, { "id": "CVE-2016-5223", "status": "Patched", "link": "https://nvd.nist.gov/vuln/detail/CVE-2016-5223", "summary": "Integer overflow in PDFium in Google Chrome prior to 55.0.2883.75 for Mac, Windows and Linux, and 55.0.2883.84 for Android allowed a remote attacker to potentially exploit heap corruption or DoS via a crafted PDF file.", "scorev2": "4.3", "scorev3": "6.5", "scorev4": "0.0", "modified": "2026-06-17T00:49:00.000", "vector": "NETWORK", "vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H", "detail": "fixed-version: Fixed from version >54.0.2840.99" }, { "id": "CVE-2016-5224", "status": "Patched", "link": "https://nvd.nist.gov/vuln/detail/CVE-2016-5224", "summary": "A timing attack on denormalized floating point arithmetic in SVG filters in Blink in Google Chrome prior to 55.0.2883.75 for Mac, Windows and Linux, and 55.0.2883.84 for Android allowed a remote attacker to bypass the Same Origin Policy via a crafted HTML page.", "scorev2": "4.3", "scorev3": "4.3", "scorev4": "0.0", "modified": "2026-06-17T00:49:00.000", "vector": "NETWORK", "vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N", "detail": "fixed-version: Fixed from version >54.0.2840.99" }, { "id": "CVE-2016-5225", "status": "Patched", "link": "https://nvd.nist.gov/vuln/detail/CVE-2016-5225", "summary": "Blink in Google Chrome prior to 55.0.2883.75 for Mac, Windows and Linux, and 55.0.2883.84 for Android incorrectly handled form actions, which allowed a remote attacker to bypass Content Security Policy via a crafted HTML page.", "scorev2": "4.3", "scorev3": "4.3", "scorev4": "0.0", "modified": "2026-06-17T00:49:00.000", "vector": "NETWORK", "vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N", "detail": "fixed-version: Fixed from version >54.0.2840.99" }, { "id": "CVE-2016-5226", "status": "Patched", "link": "https://nvd.nist.gov/vuln/detail/CVE-2016-5226", "summary": "Blink in Google Chrome prior to 55.0.2883.75 for Linux, Windows and Mac executed javascript: URLs entered in the URL bar in the context of the current tab, which allowed a socially engineered user to XSS themselves by dragging and dropping a javascript: URL into the URL bar.", "scorev2": "4.3", "scorev3": "6.1", "scorev4": "0.0", "modified": "2026-06-17T00:49:00.000", "vector": "NETWORK", "vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N", "detail": "fixed-version: Fixed from version >54.0.2840.99" }, { "id": "CVE-2016-7152", "status": "Unpatched", "link": "https://nvd.nist.gov/vuln/detail/CVE-2016-7152", "summary": "The HTTPS protocol does not consider the role of the TCP congestion window in providing information about content length, which makes it easier for remote attackers to obtain cleartext data by leveraging a web-browser configuration in which third-party cookies are sent, aka a \"HEIST\" attack.", "scorev2": "5.0", "scorev3": "5.3", "scorev4": "0.0", "modified": "2026-06-17T00:52:41.000", "vector": "NETWORK", "vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N", "detail": "no-version-ranges", "description": "Check package version" }, { "id": "CVE-2016-7153", "status": "Unpatched", "link": "https://nvd.nist.gov/vuln/detail/CVE-2016-7153", "summary": "The HTTP/2 protocol does not consider the role of the TCP congestion window in providing information about content length, which makes it easier for remote attackers to obtain cleartext data by leveraging a web-browser configuration in which third-party cookies are sent, aka a \"HEIST\" attack.", "scorev2": "5.0", "scorev3": "5.3", "scorev4": "0.0", "modified": "2026-06-17T00:52:41.000", "vector": "NETWORK", "vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N", "detail": "no-version-ranges", "description": "Check package version" }, { "id": "CVE-2016-7395", "status": "Patched", "link": "https://nvd.nist.gov/vuln/detail/CVE-2016-7395", "summary": "SkPath.cpp in Skia, as used in Google Chrome before 53.0.2785.89 on Windows and OS X and before 53.0.2785.92 on Linux, does not properly validate the return values of ChopMonoAtY calls, which allows remote attackers to cause a denial of service (uninitialized memory access and application crash) or possibly have unspecified other impact via crafted graphics data.", "scorev2": "6.8", "scorev3": "8.8", "scorev4": "0.0", "modified": "2026-06-17T00:52:59.000", "vector": "NETWORK", "vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H", "detail": "fixed-version: Fixed from version >52.0.2743.116" }, { "id": "CVE-2016-7549", "status": "Patched", "link": "https://nvd.nist.gov/vuln/detail/CVE-2016-7549", "summary": "Google Chrome before 53.0.2785.113 does not ensure that the recipient of a certain IPC message is a valid RenderFrame or RenderWidget, which allows remote attackers to cause a denial of service (invalid pointer dereference and application crash) or possibly have unspecified other impact by leveraging access to a renderer process, related to render_frame_host_impl.cc and render_widget_host_impl.cc, as demonstrated by a Password Manager message.", "scorev2": "6.8", "scorev3": "8.8", "scorev4": "0.0", "modified": "2026-06-17T00:53:13.000", "vector": "NETWORK", "vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H", "detail": "fixed-version: Fixed from version >53.0.2785.101" }, { "id": "CVE-2016-9650", "status": "Patched", "link": "https://nvd.nist.gov/vuln/detail/CVE-2016-9650", "summary": "Blink in Google Chrome prior to 55.0.2883.75 for Mac, Windows and Linux, and 55.0.2883.84 for Android incorrectly handled iframes, which allowed a remote attacker to bypass a no-referrer policy via a crafted HTML page.", "scorev2": "4.3", "scorev3": "4.3", "scorev4": "0.0", "modified": "2026-06-17T00:56:24.000", "vector": "NETWORK", "vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N", "detail": "fixed-version: Fixed from version >54.0.2840.99" }, { "id": "CVE-2016-9651", "status": "Patched", "link": "https://nvd.nist.gov/vuln/detail/CVE-2016-9651", "summary": "A missing check for whether a property of a JS object is private in V8 in Google Chrome prior to 55.0.2883.75 allowed a remote attacker to execute arbitrary code inside a sandbox via a crafted HTML page.", "scorev2": "6.8", "scorev3": "8.8", "scorev4": "0.0", "modified": "2026-06-17T00:56:24.000", "vector": "NETWORK", "vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H", "detail": "fixed-version: Fixed from version 55.0.2883.75" }, { "id": "CVE-2016-9652", "status": "Patched", "link": "https://nvd.nist.gov/vuln/detail/CVE-2016-9652", "summary": "Multiple unspecified vulnerabilities in Google Chrome before 55.0.2883.75.", "scorev2": "10.0", "scorev3": "9.8", "scorev4": "0.0", "modified": "2026-06-17T00:56:24.000", "vector": "NETWORK", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H", "detail": "fixed-version: Fixed from version 55.0.2883.75" }, { "id": "CVE-2017-1000460", "status": "Patched", "link": "https://nvd.nist.gov/vuln/detail/CVE-2017-1000460", "summary": "In line libavcodec/h264dec.c:500 in libav(v13_dev0), ffmpeg(n3.4), chromium(56 prior Feb 13, 2017), the return value of init_get_bits is ignored and get_ue_golomb(&gb) is called on an uninitialized get_bits context, which causes a NULL deref exception.", "scorev2": "4.3", "scorev3": "6.5", "scorev4": "0.0", "modified": "2026-06-17T00:59:12.000", "vector": "NETWORK", "vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H", "detail": "fixed-version: Fixed from version >56.0.2924" }, { "id": "CVE-2017-15386", "status": "Patched", "link": "https://nvd.nist.gov/vuln/detail/CVE-2017-15386", "summary": "Incorrect implementation in Blink in Google Chrome prior to 62.0.3202.62 allowed a remote attacker to spoof the contents of the Omnibox (URL bar) via a crafted HTML page.", "scorev2": "4.3", "scorev3": "6.5", "scorev4": "0.0", "modified": "2026-06-17T01:07:44.000", "vector": "NETWORK", "vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:N", "detail": "fixed-version: Fixed from version 62.0.3202.62" }, { "id": "CVE-2017-15387", "status": "Patched", "link": "https://nvd.nist.gov/vuln/detail/CVE-2017-15387", "summary": "Insufficient enforcement of Content Security Policy in Blink in Google Chrome prior to 62.0.3202.62 allowed a remote attacker to open javascript: URL windows when they should not be allowed to via a crafted HTML page.", "scorev2": "6.8", "scorev3": "8.8", "scorev4": "0.0", "modified": "2026-06-17T01:07:44.000", "vector": "NETWORK", "vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H", "detail": "fixed-version: Fixed from version 62.0.3202.62" }, { "id": "CVE-2017-15388", "status": "Patched", "link": "https://nvd.nist.gov/vuln/detail/CVE-2017-15388", "summary": "Iteration through non-finite points in Skia in Google Chrome prior to 62.0.3202.62 allowed a remote attacker to perform an out of bounds memory read via a crafted HTML page.", "scorev2": "6.8", "scorev3": "8.8", "scorev4": "0.0", "modified": "2026-06-17T01:07:44.000", "vector": "NETWORK", "vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H", "detail": "fixed-version: Fixed from version 62.0.3202.62" }, { "id": "CVE-2017-15389", "status": "Patched", "link": "https://nvd.nist.gov/vuln/detail/CVE-2017-15389", "summary": "An insufficient watchdog timer in navigation in Google Chrome prior to 62.0.3202.62 allowed a remote attacker to spoof the contents of the Omnibox (URL bar) via a crafted HTML page.", "scorev2": "4.3", "scorev3": "6.5", "scorev4": "0.0", "modified": "2026-06-17T01:07:44.000", "vector": "NETWORK", "vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:N", "detail": "fixed-version: Fixed from version 62.0.3202.62" }, { "id": "CVE-2017-15390", "status": "Patched", "link": "https://nvd.nist.gov/vuln/detail/CVE-2017-15390", "summary": "Insufficient Policy Enforcement in Omnibox in Google Chrome prior to 62.0.3202.62 allowed a remote attacker to perform domain spoofing via IDN homographs in a crafted domain name.", "scorev2": "4.3", "scorev3": "6.5", "scorev4": "0.0", "modified": "2026-06-17T01:07:44.000", "vector": "NETWORK", "vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:N", "detail": "fixed-version: Fixed from version 62.0.3202.62" }, { "id": "CVE-2017-15391", "status": "Patched", "link": "https://nvd.nist.gov/vuln/detail/CVE-2017-15391", "summary": "Insufficient Policy Enforcement in Extensions in Google Chrome prior to 62.0.3202.62 allowed a remote attacker to access Extension pages without authorisation via a crafted HTML page.", "scorev2": "4.3", "scorev3": "6.5", "scorev4": "0.0", "modified": "2026-06-17T01:07:44.000", "vector": "NETWORK", "vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:N", "detail": "fixed-version: Fixed from version 62.0.3202.62" }, { "id": "CVE-2017-15392", "status": "Patched", "link": "https://nvd.nist.gov/vuln/detail/CVE-2017-15392", "summary": "Insufficient data validation in V8 in Google Chrome prior to 62.0.3202.62 allowed an attacker who can write to the Windows Registry to potentially exploit heap corruption via a crafted Windows Registry entry, related to PlatformIntegration.", "scorev2": "4.0", "scorev3": "4.3", "scorev4": "0.0", "modified": "2026-06-17T01:07:45.000", "vector": "NETWORK", "vectorString": "CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:N", "detail": "fixed-version: Fixed from version 62.0.3202.62" }, { "id": "CVE-2017-15393", "status": "Patched", "link": "https://nvd.nist.gov/vuln/detail/CVE-2017-15393", "summary": "Insufficient Policy Enforcement in Devtools remote debugging in Google Chrome prior to 62.0.3202.62 allowed a remote attacker to obtain access to remote debugging functionality via a crafted HTML page, aka a Referer leak.", "scorev2": "6.8", "scorev3": "8.8", "scorev4": "0.0", "modified": "2026-06-17T01:07:45.000", "vector": "NETWORK", "vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H", "detail": "fixed-version: Fixed from version 62.0.3202.62" }, { "id": "CVE-2017-15394", "status": "Patched", "link": "https://nvd.nist.gov/vuln/detail/CVE-2017-15394", "summary": "Insufficient Policy Enforcement in Extensions in Google Chrome prior to 62.0.3202.62 allowed a remote attacker to perform domain spoofing in permission dialogs via IDN homographs in a crafted Chrome Extension.", "scorev2": "4.3", "scorev3": "6.5", "scorev4": "0.0", "modified": "2026-06-17T01:07:45.000", "vector": "NETWORK", "vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:N", "detail": "fixed-version: Fixed from version 62.0.3202.62" }, { "id": "CVE-2017-15395", "status": "Patched", "link": "https://nvd.nist.gov/vuln/detail/CVE-2017-15395", "summary": "A use after free in Blink in Google Chrome prior to 62.0.3202.62 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page, aka an ImageCapture NULL pointer dereference.", "scorev2": "4.3", "scorev3": "6.5", "scorev4": "0.0", "modified": "2026-06-17T01:07:45.000", "vector": "NETWORK", "vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H", "detail": "fixed-version: Fixed from version 62.0.3202.62" }, { "id": "CVE-2017-15396", "status": "Patched", "link": "https://nvd.nist.gov/vuln/detail/CVE-2017-15396", "summary": "A stack buffer overflow in NumberingSystem in International Components for Unicode (ICU) for C/C++ before 60.2, as used in V8 in Google Chrome prior to 62.0.3202.75 and other products, allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page.", "scorev2": "4.3", "scorev3": "6.5", "scorev4": "0.0", "modified": "2026-06-17T01:07:45.000", "vector": "NETWORK", "vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H", "detail": "fixed-version: Fixed from version 62.0.3202.75" }, { "id": "CVE-2017-15398", "status": "Patched", "link": "https://nvd.nist.gov/vuln/detail/CVE-2017-15398", "summary": "A stack buffer overflow in the QUIC networking stack in Google Chrome prior to 62.0.3202.89 allowed a remote attacker to gain code execution via a malicious server.", "scorev2": "7.5", "scorev3": "9.8", "scorev4": "0.0", "modified": "2026-06-17T01:07:45.000", "vector": "NETWORK", "vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H", "detail": "fixed-version: Fixed from version 62.0.3202.89" }, { "id": "CVE-2017-15399", "status": "Patched", "link": "https://nvd.nist.gov/vuln/detail/CVE-2017-15399", "summary": "A use after free in V8 in Google Chrome prior to 62.0.3202.89 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page.", "scorev2": "9.3", "scorev3": "8.8", "scorev4": "0.0", "modified": "2026-06-17T01:07:45.000", "vector": "NETWORK", "vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H", "detail": "fixed-version: Fixed from version 62.0.3202.89" }, { "id": "CVE-2017-15401", "status": "Patched", "link": "https://nvd.nist.gov/vuln/detail/CVE-2017-15401", "summary": "A memory corruption bug in WebAssembly could lead to out of bounds read and write through V8 in WebAssembly in Google Chrome prior to 62.0.3202.62 allowed a remote attacker to execute arbitrary code inside a sandbox via a crafted HTML page.", "scorev2": "6.8", "scorev3": "8.8", "scorev4": "0.0", "modified": "2026-06-17T01:07:46.000", "vector": "NETWORK", "vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H", "detail": "fixed-version: Fixed from version 62.0.3202.62" }, { "id": "CVE-2017-15402", "status": "Patched", "link": "https://nvd.nist.gov/vuln/detail/CVE-2017-15402", "summary": "Using an ID that can be controlled by a compromised renderer which allows any frame to overwrite the page_state of any other frame in the same process in Navigation in Google Chrome on Chrome OS prior to 62.0.3202.74 allowed a remote attacker who had compromised the renderer process to potentially perform a sandbox escape via a crafted HTML page.", "scorev2": "6.8", "scorev3": "9.6", "scorev4": "0.0", "modified": "2026-06-17T01:07:46.000", "vector": "NETWORK", "vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:H", "detail": "fixed-version: Fixed from version 62.0.3202.74" }, { "id": "CVE-2017-15403", "status": "Patched", "link": "https://nvd.nist.gov/vuln/detail/CVE-2017-15403", "summary": "Insufficient data validation in crosh could lead to a command injection under chronos privileges in Networking in Google Chrome on Chrome OS prior to 61.0.3163.113 allowed a local attacker to execute arbitrary code via a crafted HTML page.", "scorev2": "4.4", "scorev3": "7.3", "scorev4": "0.0", "modified": "2026-06-17T01:07:46.000", "vector": "LOCAL", "vectorString": "CVSS:3.0/AV:L/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:H", "detail": "fixed-version: Fixed from version 61.0.3163.113" }, { "id": "CVE-2017-15404", "status": "Patched", "link": "https://nvd.nist.gov/vuln/detail/CVE-2017-15404", "summary": "An ability to process crash dumps under root privileges and inappropriate symlinks handling could lead to a local privilege escalation in Crash Reporting in Google Chrome on Chrome OS prior to 61.0.3163.113 allowed a local attacker to perform privilege escalation via a crafted HTML page.", "scorev2": "7.2", "scorev3": "7.8", "scorev4": "0.0", "modified": "2026-06-17T01:07:46.000", "vector": "LOCAL", "vectorString": "CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H", "detail": "fixed-version: Fixed from version 61.0.3163.113" }, { "id": "CVE-2017-15405", "status": "Patched", "link": "https://nvd.nist.gov/vuln/detail/CVE-2017-15405", "summary": "Inappropriate symlink handling and a race condition in the stateful recovery feature implementation could lead to a persistance established by a malicious code running with root privileges in cryptohomed in Google Chrome on Chrome OS prior to 61.0.3163.113 allowed a local attacker to execute arbitrary code via a crafted HTML page.", "scorev2": "6.9", "scorev3": "7.0", "scorev4": "0.0", "modified": "2026-06-17T01:07:46.000", "vector": "LOCAL", "vectorString": "CVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H", "detail": "fixed-version: Fixed from version 61.0.3163.113" }, { "id": "CVE-2017-15406", "status": "Patched", "link": "https://nvd.nist.gov/vuln/detail/CVE-2017-15406", "summary": "A stack buffer overflow in V8 in Google Chrome prior to 62.0.3202.75 allowed a remote attacker to perform an out of bounds memory read via a crafted HTML page.", "scorev2": "6.8", "scorev3": "8.8", "scorev4": "0.0", "modified": "2026-06-17T01:07:46.000", "vector": "NETWORK", "vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H", "detail": "fixed-version: Fixed from version 62.0.3202.75" }, { "id": "CVE-2017-15407", "status": "Patched", "link": "https://nvd.nist.gov/vuln/detail/CVE-2017-15407", "summary": "Out-of-bounds Write in the QUIC networking stack in Google Chrome prior to 63.0.3239.84 allowed a remote attacker to gain code execution via a malicious server.", "scorev2": "6.8", "scorev3": "8.8", "scorev4": "0.0", "modified": "2026-06-17T01:07:46.000", "vector": "NETWORK", "vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H", "detail": "fixed-version: Fixed from version 63.0.3239.84" }, { "id": "CVE-2017-15408", "status": "Patched", "link": "https://nvd.nist.gov/vuln/detail/CVE-2017-15408", "summary": "Heap buffer overflow in Omnibox in Google Chrome prior to 63.0.3239.84 allowed a remote attacker to potentially exploit heap corruption via a crafted PDF file that is mishandled by PDFium.", "scorev2": "6.8", "scorev3": "8.8", "scorev4": "0.0", "modified": "2026-06-17T01:07:46.000", "vector": "NETWORK", "vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H", "detail": "fixed-version: Fixed from version 63.0.3239.84" }, { "id": "CVE-2017-15409", "status": "Patched", "link": "https://nvd.nist.gov/vuln/detail/CVE-2017-15409", "summary": "Heap buffer overflow in Skia in Google Chrome prior to 63.0.3239.84 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page.", "scorev2": "6.8", "scorev3": "8.8", "scorev4": "0.0", "modified": "2026-06-17T01:07:46.000", "vector": "NETWORK", "vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H", "detail": "fixed-version: Fixed from version 63.0.3239.84" }, { "id": "CVE-2017-15410", "status": "Patched", "link": "https://nvd.nist.gov/vuln/detail/CVE-2017-15410", "summary": "Use after free in PDFium in Google Chrome prior to 63.0.3239.84 allowed a remote attacker to potentially exploit heap corruption via a crafted PDF file.", "scorev2": "6.8", "scorev3": "8.8", "scorev4": "0.0", "modified": "2026-06-17T01:07:46.000", "vector": "NETWORK", "vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H", "detail": "fixed-version: Fixed from version 63.0.3239.84" }, { "id": "CVE-2017-15411", "status": "Patched", "link": "https://nvd.nist.gov/vuln/detail/CVE-2017-15411", "summary": "Use after free in PDFium in Google Chrome prior to 63.0.3239.84 allowed a remote attacker to potentially exploit heap corruption via a crafted PDF file.", "scorev2": "6.8", "scorev3": "8.8", "scorev4": "0.0", "modified": "2026-06-17T01:07:47.000", "vector": "NETWORK", "vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H", "detail": "fixed-version: Fixed from version 63.0.3239.84" }, { "id": "CVE-2017-15412", "status": "Patched", "link": "https://nvd.nist.gov/vuln/detail/CVE-2017-15412", "summary": "Use after free in libxml2 before 2.9.5, as used in Google Chrome prior to 63.0.3239.84 and other products, allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page.", "scorev2": "6.8", "scorev3": "8.8", "scorev4": "0.0", "modified": "2026-06-17T01:07:47.000", "vector": "NETWORK", "vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H", "detail": "fixed-version: Fixed from version 63.0.3239.84" }, { "id": "CVE-2017-15413", "status": "Patched", "link": "https://nvd.nist.gov/vuln/detail/CVE-2017-15413", "summary": "Type confusion in WebAssembly in V8 in Google Chrome prior to 63.0.3239.84 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page.", "scorev2": "6.8", "scorev3": "8.8", "scorev4": "0.0", "modified": "2026-06-17T01:07:47.000", "vector": "NETWORK", "vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H", "detail": "fixed-version: Fixed from version 63.0.3239.84" }, { "id": "CVE-2017-15415", "status": "Patched", "link": "https://nvd.nist.gov/vuln/detail/CVE-2017-15415", "summary": "Incorrect serialization in IPC in Google Chrome prior to 63.0.3239.84 allowed a remote attacker to leak the value of a pointer via a crafted HTML page.", "scorev2": "4.3", "scorev3": "6.5", "scorev4": "0.0", "modified": "2026-06-17T01:07:47.000", "vector": "NETWORK", "vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N", "detail": "fixed-version: Fixed from version 63.0.3239.84" }, { "id": "CVE-2017-15416", "status": "Patched", "link": "https://nvd.nist.gov/vuln/detail/CVE-2017-15416", "summary": "Heap buffer overflow in Blob API in Google Chrome prior to 63.0.3239.84 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page, aka a Blink out-of-bounds read.", "scorev2": "4.3", "scorev3": "6.5", "scorev4": "0.0", "modified": "2026-06-17T01:07:47.000", "vector": "NETWORK", "vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N", "detail": "fixed-version: Fixed from version 63.0.3239.84" }, { "id": "CVE-2017-15417", "status": "Patched", "link": "https://nvd.nist.gov/vuln/detail/CVE-2017-15417", "summary": "Inappropriate implementation in Skia canvas composite operations in Google Chrome prior to 63.0.3239.84 allowed a remote attacker to leak cross-origin data via a crafted HTML page.", "scorev2": "2.6", "scorev3": "5.3", "scorev4": "0.0", "modified": "2026-06-17T01:07:47.000", "vector": "NETWORK", "vectorString": "CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:N/A:N", "detail": "fixed-version: Fixed from version 63.0.3239.84" }, { "id": "CVE-2017-15418", "status": "Patched", "link": "https://nvd.nist.gov/vuln/detail/CVE-2017-15418", "summary": "Use of uninitialized memory in Skia in Google Chrome prior to 63.0.3239.84 allowed a remote attacker to obtain potentially sensitive information from process memory via a crafted HTML page.", "scorev2": "4.3", "scorev3": "4.3", "scorev4": "0.0", "modified": "2026-06-17T01:07:47.000", "vector": "NETWORK", "vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:N", "detail": "fixed-version: Fixed from version 63.0.3239.84" }, { "id": "CVE-2017-15419", "status": "Patched", "link": "https://nvd.nist.gov/vuln/detail/CVE-2017-15419", "summary": "Insufficient policy enforcement in Resource Timing API in Google Chrome prior to 63.0.3239.84 allowed a remote attacker to infer browsing history by triggering a leaked cross-origin URL via a crafted HTML page.", "scorev2": "4.3", "scorev3": "6.5", "scorev4": "0.0", "modified": "2026-06-17T01:07:47.000", "vector": "NETWORK", "vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N", "detail": "fixed-version: Fixed from version 63.0.3239.84" }, { "id": "CVE-2017-15420", "status": "Patched", "link": "https://nvd.nist.gov/vuln/detail/CVE-2017-15420", "summary": "Incorrect handling of back navigations in error pages in Navigation in Google Chrome prior to 63.0.3239.84 allowed a remote attacker to spoof the contents of the Omnibox (URL bar) via a crafted HTML page.", "scorev2": "4.3", "scorev3": "6.5", "scorev4": "0.0", "modified": "2026-06-17T01:07:47.000", "vector": "NETWORK", "vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:N", "detail": "fixed-version: Fixed from version 63.0.3239.84" }, { "id": "CVE-2017-15422", "status": "Patched", "link": "https://nvd.nist.gov/vuln/detail/CVE-2017-15422", "summary": "Integer overflow in international date handling in International Components for Unicode (ICU) for C/C++ before 60.1, as used in V8 in Google Chrome prior to 63.0.3239.84 and other products, allowed a remote attacker to perform an out of bounds memory read via a crafted HTML page.", "scorev2": "4.3", "scorev3": "6.5", "scorev4": "0.0", "modified": "2026-06-17T01:07:48.000", "vector": "NETWORK", "vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H", "detail": "fixed-version: Fixed from version 63.0.3239.84" }, { "id": "CVE-2017-15423", "status": "Patched", "link": "https://nvd.nist.gov/vuln/detail/CVE-2017-15423", "summary": "Inappropriate implementation in BoringSSL SPAKE2 in Google Chrome prior to 63.0.3239.84 allowed a remote attacker to leak the low-order bits of SHA512(password) by inspecting protocol traffic.", "scorev2": "5.0", "scorev3": "5.3", "scorev4": "0.0", "modified": "2026-06-17T01:07:48.000", "vector": "NETWORK", "vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N", "detail": "fixed-version: Fixed from version 63.0.3239.84" }, { "id": "CVE-2017-15424", "status": "Patched", "link": "https://nvd.nist.gov/vuln/detail/CVE-2017-15424", "summary": "Insufficient policy enforcement in Omnibox in Google Chrome prior to 63.0.3239.84 allowed a remote attacker to perform domain spoofing via IDN homographs in a crafted domain name.", "scorev2": "4.3", "scorev3": "6.5", "scorev4": "0.0", "modified": "2026-06-17T01:07:48.000", "vector": "NETWORK", "vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:N", "detail": "fixed-version: Fixed from version 63.0.3239.84" }, { "id": "CVE-2017-15425", "status": "Patched", "link": "https://nvd.nist.gov/vuln/detail/CVE-2017-15425", "summary": "Insufficient policy enforcement in Omnibox in Google Chrome prior to 63.0.3239.84 allowed a remote attacker to perform domain spoofing via IDN homographs in a crafted domain name.", "scorev2": "4.3", "scorev3": "6.5", "scorev4": "0.0", "modified": "2026-06-17T01:07:48.000", "vector": "NETWORK", "vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:N", "detail": "fixed-version: Fixed from version 63.0.3239.84" }, { "id": "CVE-2017-15426", "status": "Patched", "link": "https://nvd.nist.gov/vuln/detail/CVE-2017-15426", "summary": "Insufficient policy enforcement in Omnibox in Google Chrome prior to 63.0.3239.84 allowed a remote attacker to perform domain spoofing via IDN homographs in a crafted domain name.", "scorev2": "4.3", "scorev3": "6.5", "scorev4": "0.0", "modified": "2026-06-17T01:07:48.000", "vector": "NETWORK", "vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:N", "detail": "fixed-version: Fixed from version 63.0.3239.84" }, { "id": "CVE-2017-15427", "status": "Patched", "link": "https://nvd.nist.gov/vuln/detail/CVE-2017-15427", "summary": "Insufficient policy enforcement in Omnibox in Google Chrome prior to 63.0.3239.84 allowed a socially engineered user to XSS themselves by dragging and dropping a javascript: URL into the URL bar.", "scorev2": "4.3", "scorev3": "6.1", "scorev4": "0.0", "modified": "2026-06-17T01:07:48.000", "vector": "NETWORK", "vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N", "detail": "fixed-version: Fixed from version 63.0.3239.84" }, { "id": "CVE-2017-15428", "status": "Patched", "link": "https://nvd.nist.gov/vuln/detail/CVE-2017-15428", "summary": "Insufficient data validation in V8 builtins string generator could lead to out of bounds read and write access in V8 in Google Chrome prior to 62.0.3202.94 and allowed a remote attacker to execute arbitrary code inside a sandbox via a crafted HTML page.", "scorev2": "6.8", "scorev3": "8.8", "scorev4": "0.0", "modified": "2026-06-17T01:07:48.000", "vector": "NETWORK", "vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H", "detail": "fixed-version: Fixed from version 62.0.3202.94" }, { "id": "CVE-2017-15429", "status": "Patched", "link": "https://nvd.nist.gov/vuln/detail/CVE-2017-15429", "summary": "Inappropriate implementation in V8 WebAssembly JS bindings in Google Chrome prior to 63.0.3239.108 allowed a remote attacker to inject arbitrary scripts or HTML (UXSS) via a crafted HTML page.", "scorev2": "4.3", "scorev3": "6.1", "scorev4": "0.0", "modified": "2026-06-17T01:07:48.000", "vector": "NETWORK", "vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N", "detail": "fixed-version: Fixed from version 63.0.3239.108" }, { "id": "CVE-2017-15430", "status": "Patched", "link": "https://nvd.nist.gov/vuln/detail/CVE-2017-15430", "summary": "Insufficient data validation in Chromecast plugin in Google Chrome prior to 63.0.3239.84 allowed a remote attacker to inject arbitrary scripts or HTML (UXSS) via a crafted HTML page.", "scorev2": "4.3", "scorev3": "4.3", "scorev4": "0.0", "modified": "2026-06-17T01:07:48.000", "vector": "NETWORK", "vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:N", "detail": "fixed-version: Fixed from version 63.0.3239.84" }, { "id": "CVE-2017-5006", "status": "Patched", "link": "https://nvd.nist.gov/vuln/detail/CVE-2017-5006", "summary": "Blink in Google Chrome prior to 56.0.2924.76 for Linux, Windows and Mac, and 56.0.2924.87 for Android, incorrectly handled object owner relationships, which allowed a remote attacker to inject arbitrary scripts or HTML (UXSS) via a crafted HTML page.", "scorev2": "4.3", "scorev3": "6.1", "scorev4": "0.0", "modified": "2026-06-17T01:19:43.000", "vector": "NETWORK", "vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N", "detail": "fixed-version: Fixed from version >55.0.2883.87" }, { "id": "CVE-2017-5007", "status": "Patched", "link": "https://nvd.nist.gov/vuln/detail/CVE-2017-5007", "summary": "Blink in Google Chrome prior to 56.0.2924.76 for Linux, Windows and Mac, and 56.0.2924.87 for Android, incorrectly handled the sequence of events when closing a page, which allowed a remote attacker to inject arbitrary scripts or HTML (UXSS) via a crafted HTML page.", "scorev2": "4.3", "scorev3": "6.1", "scorev4": "0.0", "modified": "2026-06-17T01:19:43.000", "vector": "NETWORK", "vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N", "detail": "fixed-version: Fixed from version >55.0.2883.87" }, { "id": "CVE-2017-5008", "status": "Patched", "link": "https://nvd.nist.gov/vuln/detail/CVE-2017-5008", "summary": "Blink in Google Chrome prior to 56.0.2924.76 for Linux, Windows and Mac, and 56.0.2924.87 for Android, allowed attacker controlled JavaScript to be run during the invocation of a private script method, which allowed a remote attacker to inject arbitrary scripts or HTML (UXSS) via a crafted HTML page.", "scorev2": "4.3", "scorev3": "6.1", "scorev4": "0.0", "modified": "2026-06-17T01:19:43.000", "vector": "NETWORK", "vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N", "detail": "fixed-version: Fixed from version >55.0.2883.87" }, { "id": "CVE-2017-5009", "status": "Patched", "link": "https://nvd.nist.gov/vuln/detail/CVE-2017-5009", "summary": "WebRTC in Google Chrome prior to 56.0.2924.76 for Linux, Windows and Mac, and 56.0.2924.87 for Android, failed to perform proper bounds checking, which allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page.", "scorev2": "6.8", "scorev3": "8.8", "scorev4": "0.0", "modified": "2026-06-17T01:19:44.000", "vector": "NETWORK", "vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H", "detail": "fixed-version: Fixed from version >55.0.2883.87" }, { "id": "CVE-2017-5010", "status": "Patched", "link": "https://nvd.nist.gov/vuln/detail/CVE-2017-5010", "summary": "Blink in Google Chrome prior to 56.0.2924.76 for Linux, Windows and Mac, and 56.0.2924.87 for Android, resolved promises in an inappropriate context, which allowed a remote attacker to inject arbitrary scripts or HTML (UXSS) via a crafted HTML page.", "scorev2": "4.3", "scorev3": "6.1", "scorev4": "0.0", "modified": "2026-06-17T01:19:44.000", "vector": "NETWORK", "vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N", "detail": "fixed-version: Fixed from version >55.0.2883.87" }, { "id": "CVE-2017-5011", "status": "Patched", "link": "https://nvd.nist.gov/vuln/detail/CVE-2017-5011", "summary": "Google Chrome prior to 56.0.2924.76 for Windows insufficiently sanitized DevTools URLs, which allowed a remote attacker who convinced a user to install a malicious extension to read filesystem contents via a crafted HTML page.", "scorev2": "4.3", "scorev3": "6.5", "scorev4": "0.0", "modified": "2026-06-17T01:19:44.000", "vector": "NETWORK", "vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N", "detail": "fixed-version: Fixed from version >55.0.2883.87" }, { "id": "CVE-2017-5012", "status": "Patched", "link": "https://nvd.nist.gov/vuln/detail/CVE-2017-5012", "summary": "A heap buffer overflow in V8 in Google Chrome prior to 56.0.2924.76 for Linux, Windows and Mac, and 56.0.2924.87 for Android, allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page.", "scorev2": "6.8", "scorev3": "8.8", "scorev4": "0.0", "modified": "2026-06-17T01:19:44.000", "vector": "NETWORK", "vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H", "detail": "fixed-version: Fixed from version >55.0.2883.87" }, { "id": "CVE-2017-5013", "status": "Patched", "link": "https://nvd.nist.gov/vuln/detail/CVE-2017-5013", "summary": "Google Chrome prior to 56.0.2924.76 for Linux incorrectly handled new tab page navigations in non-selected tabs, which allowed a remote attacker to spoof the contents of the Omnibox (URL bar) via a crafted HTML page.", "scorev2": "4.3", "scorev3": "6.5", "scorev4": "0.0", "modified": "2026-06-17T01:19:44.000", "vector": "NETWORK", "vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:N", "detail": "fixed-version: Fixed from version >55.0.2883.87" }, { "id": "CVE-2017-5014", "status": "Patched", "link": "https://nvd.nist.gov/vuln/detail/CVE-2017-5014", "summary": "Heap buffer overflow during image processing in Skia in Google Chrome prior to 56.0.2924.76 for Linux, Windows and Mac, and 56.0.2924.87 for Android, allowed a remote attacker to perform an out of bounds memory read via a crafted HTML page.", "scorev2": "6.8", "scorev3": "6.3", "scorev4": "0.0", "modified": "2026-06-17T01:19:44.000", "vector": "NETWORK", "vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:L", "detail": "fixed-version: Fixed from version >55.0.2883.87" }, { "id": "CVE-2017-5015", "status": "Patched", "link": "https://nvd.nist.gov/vuln/detail/CVE-2017-5015", "summary": "Google Chrome prior to 56.0.2924.76 for Linux, Windows and Mac, and 56.0.2924.87 for Android, incorrectly handled Unicode glyphs, which allowed a remote attacker to perform domain spoofing via IDN homographs in a crafted domain name.", "scorev2": "4.3", "scorev3": "6.5", "scorev4": "0.0", "modified": "2026-06-17T01:19:44.000", "vector": "NETWORK", "vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:N", "detail": "fixed-version: Fixed from version >55.0.2883.87" }, { "id": "CVE-2017-5016", "status": "Patched", "link": "https://nvd.nist.gov/vuln/detail/CVE-2017-5016", "summary": "Blink in Google Chrome prior to 56.0.2924.76 for Linux, Windows and Mac, and 56.0.2924.87 for Android, failed to prevent certain UI elements from being displayed by non-visible pages, which allowed a remote attacker to show certain UI elements on a page they don't control via a crafted HTML page.", "scorev2": "4.3", "scorev3": "6.5", "scorev4": "0.0", "modified": "2026-06-17T01:19:44.000", "vector": "NETWORK", "vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:N", "detail": "fixed-version: Fixed from version >55.0.2883.87" }, { "id": "CVE-2017-5017", "status": "Patched", "link": "https://nvd.nist.gov/vuln/detail/CVE-2017-5017", "summary": "Interactions with the OS in Google Chrome prior to 56.0.2924.76 for Mac insufficiently cleared video memory, which allowed a remote attacker to possibly extract image fragments on systems with GeForce 8600M graphics chips via a crafted HTML page.", "scorev2": "4.3", "scorev3": "4.3", "scorev4": "0.0", "modified": "2026-06-17T01:19:45.000", "vector": "NETWORK", "vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:N", "detail": "fixed-version: Fixed from version >55.0.2883.87" }, { "id": "CVE-2017-5018", "status": "Patched", "link": "https://nvd.nist.gov/vuln/detail/CVE-2017-5018", "summary": "Google Chrome prior to 56.0.2924.76 for Linux, Windows and Mac, and 56.0.2924.87 for Android, had an insufficiently strict content security policy on the Chrome app launcher page, which allowed a remote attacker to inject scripts or HTML into a privileged page via a crafted HTML page.", "scorev2": "4.3", "scorev3": "6.1", "scorev4": "0.0", "modified": "2026-06-17T01:19:45.000", "vector": "NETWORK", "vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N", "detail": "fixed-version: Fixed from version >55.0.2883.87" }, { "id": "CVE-2017-5019", "status": "Patched", "link": "https://nvd.nist.gov/vuln/detail/CVE-2017-5019", "summary": "A use after free in Google Chrome prior to 56.0.2924.76 for Linux, Windows and Mac, and 56.0.2924.87 for Android, allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page.", "scorev2": "6.8", "scorev3": "6.3", "scorev4": "0.0", "modified": "2026-06-17T01:19:45.000", "vector": "NETWORK", "vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:L", "detail": "fixed-version: Fixed from version >55.0.2883.87" }, { "id": "CVE-2017-5020", "status": "Patched", "link": "https://nvd.nist.gov/vuln/detail/CVE-2017-5020", "summary": "Google Chrome prior to 56.0.2924.76 for Linux, Windows and Mac, and 56.0.2924.87 for Android, failed to require a user gesture for powerful download operations, which allowed a remote attacker who convinced a user to install a malicious extension to execute arbitrary code via a crafted HTML page.", "scorev2": "4.3", "scorev3": "6.1", "scorev4": "0.0", "modified": "2026-06-17T01:19:45.000", "vector": "NETWORK", "vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N", "detail": "fixed-version: Fixed from version >55.0.2883.87" }, { "id": "CVE-2017-5021", "status": "Patched", "link": "https://nvd.nist.gov/vuln/detail/CVE-2017-5021", "summary": "A use after free in Google Chrome prior to 56.0.2924.76 for Linux, Windows and Mac, and 56.0.2924.87 for Android, allowed a remote attacker to perform an out of bounds memory read via a crafted HTML page.", "scorev2": "4.3", "scorev3": "4.3", "scorev4": "0.0", "modified": "2026-06-17T01:19:45.000", "vector": "NETWORK", "vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L", "detail": "fixed-version: Fixed from version >55.0.2883.87" }, { "id": "CVE-2017-5022", "status": "Patched", "link": "https://nvd.nist.gov/vuln/detail/CVE-2017-5022", "summary": "Blink in Google Chrome prior to 56.0.2924.76 for Linux, Windows and Mac, and 56.0.2924.87 for Android, failed to properly enforce unsafe-inline content security policy, which allowed a remote attacker to bypass content security policy via a crafted HTML page.", "scorev2": "4.3", "scorev3": "4.3", "scorev4": "0.0", "modified": "2026-06-17T01:19:45.000", "vector": "NETWORK", "vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N", "detail": "fixed-version: Fixed from version >55.0.2883.87" }, { "id": "CVE-2017-5023", "status": "Patched", "link": "https://nvd.nist.gov/vuln/detail/CVE-2017-5023", "summary": "Type confusion in Histogram in Google Chrome prior to 56.0.2924.76 for Linux, Windows and Mac, and 56.0.2924.87 for Android, allowed a remote attacker to potentially exploit a near null dereference via a crafted HTML page.", "scorev2": "4.3", "scorev3": "4.3", "scorev4": "0.0", "modified": "2026-06-17T01:19:45.000", "vector": "NETWORK", "vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L", "detail": "fixed-version: Fixed from version >55.0.2883.87" }, { "id": "CVE-2017-5024", "status": "Patched", "link": "https://nvd.nist.gov/vuln/detail/CVE-2017-5024", "summary": "FFmpeg in Google Chrome prior to 56.0.2924.76 for Linux, Windows and Mac, failed to perform proper bounds checking, which allowed a remote attacker to potentially exploit heap corruption via a crafted video file.", "scorev2": "4.3", "scorev3": "5.5", "scorev4": "0.0", "modified": "2026-06-17T01:19:45.000", "vector": "LOCAL", "vectorString": "CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H", "detail": "fixed-version: Fixed from version >55.0.2883.87" }, { "id": "CVE-2017-5025", "status": "Patched", "link": "https://nvd.nist.gov/vuln/detail/CVE-2017-5025", "summary": "FFmpeg in Google Chrome prior to 56.0.2924.76 for Linux, Windows and Mac, failed to perform proper bounds checking, which allowed a remote attacker to potentially exploit heap corruption via a crafted video file.", "scorev2": "4.3", "scorev3": "5.5", "scorev4": "0.0", "modified": "2026-06-17T01:19:46.000", "vector": "LOCAL", "vectorString": "CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H", "detail": "fixed-version: Fixed from version >55.0.2883.87" }, { "id": "CVE-2017-5026", "status": "Patched", "link": "https://nvd.nist.gov/vuln/detail/CVE-2017-5026", "summary": "Google Chrome prior to 56.0.2924.76 for Linux, Windows and Mac, failed to prevent alerts from being displayed by swapped out frames, which allowed a remote attacker to show alerts on a page they don't control via a crafted HTML page.", "scorev2": "4.3", "scorev3": "4.3", "scorev4": "0.0", "modified": "2026-06-17T01:19:46.000", "vector": "NETWORK", "vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N", "detail": "fixed-version: Fixed from version >55.0.2883.87" }, { "id": "CVE-2017-5027", "status": "Patched", "link": "https://nvd.nist.gov/vuln/detail/CVE-2017-5027", "summary": "Blink in Google Chrome prior to 56.0.2924.76 for Linux, Windows and Mac, and 56.0.2924.87 for Android, failed to properly enforce unsafe-inline content security policy, which allowed a remote attacker to bypass content security policy via a crafted HTML page.", "scorev2": "4.3", "scorev3": "4.3", "scorev4": "0.0", "modified": "2026-06-17T01:19:46.000", "vector": "NETWORK", "vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N", "detail": "fixed-version: Fixed from version >55.0.2883.87" }, { "id": "CVE-2017-5028", "status": "Patched", "link": "https://nvd.nist.gov/vuln/detail/CVE-2017-5028", "summary": "Insufficient data validation in V8 in Google Chrome prior to 56.0.2924.76 allowed a remote attacker to leak cross-origin data via a crafted HTML page.", "scorev2": "4.3", "scorev3": "6.5", "scorev4": "0.0", "modified": "2026-06-17T01:19:46.000", "vector": "NETWORK", "vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N", "detail": "fixed-version: Fixed from version 56.0.2924.76" }, { "id": "CVE-2017-5029", "status": "Patched", "link": "https://nvd.nist.gov/vuln/detail/CVE-2017-5029", "summary": "The xsltAddTextString function in transform.c in libxslt 1.1.29, as used in Blink in Google Chrome prior to 57.0.2987.98 for Mac, Windows, and Linux and 57.0.2987.108 for Android, lacked a check for integer overflow during a size calculation, which allowed a remote attacker to perform an out of bounds memory write via a crafted HTML page.", "scorev2": "6.8", "scorev3": "8.8", "scorev4": "0.0", "modified": "2026-06-17T01:19:46.000", "vector": "NETWORK", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H", "detail": "fixed-version: Fixed from version >57.0.2987.100" }, { "id": "CVE-2017-5030", "status": "Patched", "link": "https://nvd.nist.gov/vuln/detail/CVE-2017-5030", "summary": "Incorrect handling of complex species in V8 in Google Chrome prior to 57.0.2987.98 for Linux, Windows, and Mac and 57.0.2987.108 for Android allowed a remote attacker to execute arbitrary code via a crafted HTML page.", "scorev2": "6.8", "scorev3": "8.8", "scorev4": "0.0", "modified": "2026-06-17T01:19:46.000", "vector": "NETWORK", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H", "detail": "fixed-version: Fixed from version 57.0.2987.108" }, { "id": "CVE-2017-5031", "status": "Patched", "link": "https://nvd.nist.gov/vuln/detail/CVE-2017-5031", "summary": "A use after free in ANGLE in Google Chrome prior to 57.0.2987.98 for Windows allowed a remote attacker to perform an out of bounds memory read via a crafted HTML page.", "scorev2": "6.8", "scorev3": "8.8", "scorev4": "0.0", "modified": "2026-06-17T01:19:46.000", "vector": "NETWORK", "vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H", "detail": "fixed-version: Fixed from version >57.0.2987.75" }, { "id": "CVE-2017-5032", "status": "Patched", "link": "https://nvd.nist.gov/vuln/detail/CVE-2017-5032", "summary": "PDFium in Google Chrome prior to 57.0.2987.98 for Windows could be made to increment off the end of a buffer, which allowed a remote attacker to potentially exploit heap corruption via a crafted PDF file.", "scorev2": "6.8", "scorev3": "8.8", "scorev4": "0.0", "modified": "2026-06-17T01:19:47.000", "vector": "NETWORK", "vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H", "detail": "fixed-version: Fixed from version >57.0.2987.75" }, { "id": "CVE-2017-5033", "status": "Patched", "link": "https://nvd.nist.gov/vuln/detail/CVE-2017-5033", "summary": "Blink in Google Chrome prior to 57.0.2987.98 for Mac, Windows, and Linux and 57.0.2987.108 for Android failed to correctly propagate CSP restrictions to local scheme pages, which allowed a remote attacker to bypass content security policy via a crafted HTML page, related to the unsafe-inline keyword.", "scorev2": "4.3", "scorev3": "4.3", "scorev4": "0.0", "modified": "2026-06-17T01:19:47.000", "vector": "NETWORK", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N", "detail": "fixed-version: Fixed from version >57.0.2987.100" }, { "id": "CVE-2017-5034", "status": "Patched", "link": "https://nvd.nist.gov/vuln/detail/CVE-2017-5034", "summary": "A use after free in PDFium in Google Chrome prior to 57.0.2987.98 for Linux and Windows allowed a remote attacker to perform an out of bounds memory read via a crafted PDF file.", "scorev2": "6.8", "scorev3": "8.8", "scorev4": "0.0", "modified": "2026-06-17T01:19:47.000", "vector": "NETWORK", "vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H", "detail": "fixed-version: Fixed from version >57.0.2987.75" }, { "id": "CVE-2017-5035", "status": "Patched", "link": "https://nvd.nist.gov/vuln/detail/CVE-2017-5035", "summary": "Google Chrome prior to 57.0.2987.98 for Windows and Mac had a race condition, which could cause Chrome to display incorrect certificate information for a site.", "scorev2": "6.8", "scorev3": "8.1", "scorev4": "0.0", "modified": "2026-06-17T01:19:47.000", "vector": "NETWORK", "vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H", "detail": "fixed-version: Fixed from version >57.0.2987.75" }, { "id": "CVE-2017-5036", "status": "Patched", "link": "https://nvd.nist.gov/vuln/detail/CVE-2017-5036", "summary": "A use after free in PDFium in Google Chrome prior to 57.0.2987.98 for Mac, Windows, and Linux and 57.0.2987.108 for Android allowed a remote attacker to have an unspecified impact via a crafted PDF file.", "scorev2": "6.8", "scorev3": "7.8", "scorev4": "0.0", "modified": "2026-06-17T01:19:47.000", "vector": "LOCAL", "vectorString": "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H", "detail": "fixed-version: Fixed from version >57.0.2987.100" }, { "id": "CVE-2017-5037", "status": "Patched", "link": "https://nvd.nist.gov/vuln/detail/CVE-2017-5037", "summary": "An integer overflow in FFmpeg in Google Chrome prior to 57.0.2987.98 for Mac, Windows, and Linux and 57.0.2987.108 for Android allowed a remote attacker to perform an out of bounds memory write via a crafted video file, related to ChunkDemuxer.", "scorev2": "6.8", "scorev3": "7.8", "scorev4": "0.0", "modified": "2026-06-17T01:19:47.000", "vector": "LOCAL", "vectorString": "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H", "detail": "fixed-version: Fixed from version >57.0.2987.100" }, { "id": "CVE-2017-5038", "status": "Patched", "link": "https://nvd.nist.gov/vuln/detail/CVE-2017-5038", "summary": "Chrome Apps in Google Chrome prior to 57.0.2987.98 for Linux, Windows, and Mac had a use after free bug in GuestView, which allowed a remote attacker to perform an out of bounds memory read via a crafted Chrome extension.", "scorev2": "6.8", "scorev3": "6.3", "scorev4": "0.0", "modified": "2026-06-17T01:19:47.000", "vector": "NETWORK", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:L", "detail": "fixed-version: Fixed from version >57.0.2987.75" }, { "id": "CVE-2017-5039", "status": "Patched", "link": "https://nvd.nist.gov/vuln/detail/CVE-2017-5039", "summary": "A use after free in PDFium in Google Chrome prior to 57.0.2987.98 for Mac, Windows, and Linux and 57.0.2987.108 for Android allowed a remote attacker to potentially exploit heap corruption via a crafted PDF file.", "scorev2": "6.8", "scorev3": "7.8", "scorev4": "0.0", "modified": "2026-06-17T01:19:48.000", "vector": "LOCAL", "vectorString": "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H", "detail": "fixed-version: Fixed from version >57.0.2987.100" }, { "id": "CVE-2017-5040", "status": "Patched", "link": "https://nvd.nist.gov/vuln/detail/CVE-2017-5040", "summary": "V8 in Google Chrome prior to 57.0.2987.98 for Mac, Windows, and Linux and 57.0.2987.108 for Android was missing a neutering check, which allowed a remote attacker to read values in memory via a crafted HTML page.", "scorev2": "4.3", "scorev3": "4.3", "scorev4": "0.0", "modified": "2026-06-17T01:19:48.000", "vector": "NETWORK", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:N", "detail": "fixed-version: Fixed from version >57.0.2987.100" }, { "id": "CVE-2017-5041", "status": "Patched", "link": "https://nvd.nist.gov/vuln/detail/CVE-2017-5041", "summary": "Google Chrome prior to 57.0.2987.100 incorrectly handled back-forward navigation, which allowed a remote attacker to display incorrect information for a site via a crafted HTML page.", "scorev2": "4.3", "scorev3": "4.3", "scorev4": "0.0", "modified": "2026-06-17T01:19:48.000", "vector": "NETWORK", "vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N", "detail": "fixed-version: Fixed from version >57.0.2987.98" }, { "id": "CVE-2017-5042", "status": "Patched", "link": "https://nvd.nist.gov/vuln/detail/CVE-2017-5042", "summary": "Cast in Google Chrome prior to 57.0.2987.98 for Mac, Windows, and Linux and 57.0.2987.108 for Android sent cookies to sites discovered via SSDP, which allowed an attacker on the local network segment to initiate connections to arbitrary URLs and observe any plaintext cookies sent.", "scorev2": "3.3", "scorev3": "5.7", "scorev4": "0.0", "modified": "2026-06-17T01:19:48.000", "vector": "ADJACENT_NETWORK", "vectorString": "CVSS:3.1/AV:A/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N", "detail": "fixed-version: Fixed from version >57.0.2987.100" }, { "id": "CVE-2017-5043", "status": "Patched", "link": "https://nvd.nist.gov/vuln/detail/CVE-2017-5043", "summary": "Chrome Apps in Google Chrome prior to 57.0.2987.98 for Linux, Windows, and Mac had a use after free bug in GuestView, which allowed a remote attacker to perform an out of bounds memory read via a crafted Chrome extension.", "scorev2": "6.8", "scorev3": "8.8", "scorev4": "0.0", "modified": "2026-06-17T01:19:48.000", "vector": "NETWORK", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H", "detail": "fixed-version: Fixed from version >57.0.2987.75" }, { "id": "CVE-2017-5044", "status": "Patched", "link": "https://nvd.nist.gov/vuln/detail/CVE-2017-5044", "summary": "Heap buffer overflow in filter processing in Skia in Google Chrome prior to 57.0.2987.98 for Mac, Windows, and Linux and 57.0.2987.108 for Android allowed a remote attacker to perform an out of bounds memory read via a crafted HTML page.", "scorev2": "6.8", "scorev3": "6.3", "scorev4": "0.0", "modified": "2026-06-17T01:19:48.000", "vector": "NETWORK", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:L", "detail": "fixed-version: Fixed from version >57.0.2987.100" }, { "id": "CVE-2017-5045", "status": "Patched", "link": "https://nvd.nist.gov/vuln/detail/CVE-2017-5045", "summary": "XSS Auditor in Google Chrome prior to 57.0.2987.98 for Mac, Windows, and Linux and 57.0.2987.108 for Android allowed detection of a blocked iframe load, which allowed a remote attacker to brute force JavaScript variables via a crafted HTML page.", "scorev2": "4.3", "scorev3": "6.1", "scorev4": "0.0", "modified": "2026-06-17T01:19:48.000", "vector": "NETWORK", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N", "detail": "fixed-version: Fixed from version >57.0.2987.100" }, { "id": "CVE-2017-5046", "status": "Patched", "link": "https://nvd.nist.gov/vuln/detail/CVE-2017-5046", "summary": "V8 in Google Chrome prior to 57.0.2987.98 for Mac, Windows, and Linux and 57.0.2987.108 for Android had insufficient policy enforcement, which allowed a remote attacker to spoof the location object via a crafted HTML page, related to Blink information disclosure.", "scorev2": "4.3", "scorev3": "4.3", "scorev4": "0.0", "modified": "2026-06-17T01:19:48.000", "vector": "NETWORK", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:N", "detail": "fixed-version: Fixed from version >57.0.2987.100" }, { "id": "CVE-2017-5047", "status": "Patched", "link": "https://nvd.nist.gov/vuln/detail/CVE-2017-5047", "summary": "An integer overflow in FFmpeg in Google Chrome prior to 57.0.2987.98 for Mac, Windows, and Linux and 57.0.2987.108 for Android allowed a remote attacker to perform an out of bounds memory write via a crafted video file, related to ChunkDemuxer.", "scorev2": "6.8", "scorev3": "8.8", "scorev4": "0.0", "modified": "2026-06-17T01:19:49.000", "vector": "NETWORK", "vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H", "detail": "fixed-version: Fixed from version >57.0.2987.100" }, { "id": "CVE-2017-5048", "status": "Patched", "link": "https://nvd.nist.gov/vuln/detail/CVE-2017-5048", "summary": "An integer overflow in FFmpeg in Google Chrome prior to 57.0.2987.98 for Mac, Windows, and Linux and 57.0.2987.108 for Android allowed a remote attacker to perform an out of bounds memory write via a crafted video file, related to ChunkDemuxer.", "scorev2": "6.8", "scorev3": "8.8", "scorev4": "0.0", "modified": "2026-06-17T01:19:49.000", "vector": "NETWORK", "vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H", "detail": "fixed-version: Fixed from version >57.0.2987.100" }, { "id": "CVE-2017-5049", "status": "Patched", "link": "https://nvd.nist.gov/vuln/detail/CVE-2017-5049", "summary": "An integer overflow in FFmpeg in Google Chrome prior to 57.0.2987.98 for Mac, Windows, and Linux and 57.0.2987.108 for Android allowed a remote attacker to perform an out of bounds memory write via a crafted video file, related to ChunkDemuxer.", "scorev2": "6.8", "scorev3": "8.8", "scorev4": "0.0", "modified": "2026-06-17T01:19:49.000", "vector": "NETWORK", "vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H", "detail": "fixed-version: Fixed from version >57.0.2987.100" }, { "id": "CVE-2017-5050", "status": "Patched", "link": "https://nvd.nist.gov/vuln/detail/CVE-2017-5050", "summary": "An integer overflow in FFmpeg in Google Chrome prior to 57.0.2987.98 for Mac, Windows, and Linux and 57.0.2987.108 for Android allowed a remote attacker to perform an out of bounds memory write via a crafted video file, related to ChunkDemuxer.", "scorev2": "6.8", "scorev3": "8.8", "scorev4": "0.0", "modified": "2026-06-17T01:19:49.000", "vector": "NETWORK", "vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H", "detail": "fixed-version: Fixed from version >57.0.2987.100" }, { "id": "CVE-2017-5051", "status": "Patched", "link": "https://nvd.nist.gov/vuln/detail/CVE-2017-5051", "summary": "An integer overflow in FFmpeg in Google Chrome prior to 57.0.2987.98 for Mac, Windows, and Linux and 57.0.2987.108 for Android allowed a remote attacker to perform an out of bounds memory write via a crafted video file, related to ChunkDemuxer.", "scorev2": "6.8", "scorev3": "8.8", "scorev4": "0.0", "modified": "2026-06-17T01:19:49.000", "vector": "NETWORK", "vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H", "detail": "fixed-version: Fixed from version >57.0.2987.100" }, { "id": "CVE-2017-5052", "status": "Patched", "link": "https://nvd.nist.gov/vuln/detail/CVE-2017-5052", "summary": "An incorrect assumption about block structure in Blink in Google Chrome prior to 57.0.2987.133 for Mac, Windows, and Linux, and 57.0.2987.132 for Android, allowed a remote attacker to potentially exploit memory corruption via a crafted HTML page that triggers improper casting.", "scorev2": "6.8", "scorev3": "8.8", "scorev4": "0.0", "modified": "2026-06-17T01:19:49.000", "vector": "NETWORK", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H", "detail": "fixed-version: Fixed from version 57.0.2987.133" }, { "id": "CVE-2017-5053", "status": "Patched", "link": "https://nvd.nist.gov/vuln/detail/CVE-2017-5053", "summary": "An out-of-bounds read in V8 in Google Chrome prior to 57.0.2987.133 for Linux, Windows, and Mac, and 57.0.2987.132 for Android, allowed a remote attacker to execute arbitrary code inside a sandbox via a crafted HTML page, related to Array.prototype.indexOf.", "scorev2": "6.8", "scorev3": "9.6", "scorev4": "0.0", "modified": "2026-06-17T01:19:49.000", "vector": "NETWORK", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:H", "detail": "fixed-version: Fixed from version 57.0.2987.133" }, { "id": "CVE-2017-5054", "status": "Patched", "link": "https://nvd.nist.gov/vuln/detail/CVE-2017-5054", "summary": "An out-of-bounds read in V8 in Google Chrome prior to 57.0.2987.133 for Linux, Windows, and Mac, and 57.0.2987.132 for Android, allowed a remote attacker to obtain heap memory contents via a crafted HTML page.", "scorev2": "6.8", "scorev3": "8.8", "scorev4": "0.0", "modified": "2026-06-17T01:19:49.000", "vector": "NETWORK", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H", "detail": "fixed-version: Fixed from version 57.0.2987.133" }, { "id": "CVE-2017-5055", "status": "Patched", "link": "https://nvd.nist.gov/vuln/detail/CVE-2017-5055", "summary": "A use after free in printing in Google Chrome prior to 57.0.2987.133 for Linux and Windows allowed a remote attacker to perform an out of bounds memory read via a crafted HTML page.", "scorev2": "9.3", "scorev3": "8.8", "scorev4": "0.0", "modified": "2026-06-17T01:19:50.000", "vector": "NETWORK", "vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H", "detail": "fixed-version: Fixed from version 57.0.2987.133" }, { "id": "CVE-2017-5056", "status": "Patched", "link": "https://nvd.nist.gov/vuln/detail/CVE-2017-5056", "summary": "A use after free in Blink in Google Chrome prior to 57.0.2987.133 for Linux, Windows, and Mac, and 57.0.2987.132 for Android, allowed a remote attacker to perform an out of bounds memory read via a crafted HTML page.", "scorev2": "6.8", "scorev3": "8.8", "scorev4": "0.0", "modified": "2026-06-17T01:19:50.000", "vector": "NETWORK", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H", "detail": "fixed-version: Fixed from version 57.0.2987.133" }, { "id": "CVE-2017-5057", "status": "Patched", "link": "https://nvd.nist.gov/vuln/detail/CVE-2017-5057", "summary": "Type confusion in PDFium in Google Chrome prior to 58.0.3029.81 for Mac, Windows, and Linux, and 58.0.3029.83 for Android, allowed a remote attacker to perform an out of bounds memory read via a crafted PDF file.", "scorev2": "6.8", "scorev3": "8.8", "scorev4": "0.0", "modified": "2026-06-17T01:19:50.000", "vector": "NETWORK", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H", "detail": "fixed-version: Fixed from version 58.0.3029.83" }, { "id": "CVE-2017-5058", "status": "Patched", "link": "https://nvd.nist.gov/vuln/detail/CVE-2017-5058", "summary": "A use after free in PrintPreview in Google Chrome prior to 58.0.3029.81 for Windows allowed a remote attacker to potentially perform out of bounds memory access via a crafted HTML page.", "scorev2": "6.8", "scorev3": "8.8", "scorev4": "0.0", "modified": "2026-06-17T01:19:50.000", "vector": "NETWORK", "vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H", "detail": "fixed-version: Fixed from version 58.0.3029.81" }, { "id": "CVE-2017-5059", "status": "Patched", "link": "https://nvd.nist.gov/vuln/detail/CVE-2017-5059", "summary": "Type confusion in Blink in Google Chrome prior to 58.0.3029.81 for Linux, Windows, and Mac, and 58.0.3029.83 for Android, allowed a remote attacker to potentially obtain code execution via a crafted HTML page.", "scorev2": "6.8", "scorev3": "8.8", "scorev4": "0.0", "modified": "2026-06-17T01:19:50.000", "vector": "NETWORK", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H", "detail": "fixed-version: Fixed from version 58.0.3029.83" }, { "id": "CVE-2017-5060", "status": "Patched", "link": "https://nvd.nist.gov/vuln/detail/CVE-2017-5060", "summary": "Insufficient Policy Enforcement in Omnibox in Google Chrome prior to 58.0.3029.81 for Mac, Windows, and Linux, and 58.0.3029.83 for Android, allowed a remote attacker to perform domain spoofing via IDN homographs in a crafted domain name.", "scorev2": "4.3", "scorev3": "6.5", "scorev4": "0.0", "modified": "2026-06-17T01:19:50.000", "vector": "NETWORK", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:N", "detail": "fixed-version: Fixed from version 58.0.3029.83" }, { "id": "CVE-2017-5061", "status": "Patched", "link": "https://nvd.nist.gov/vuln/detail/CVE-2017-5061", "summary": "A race condition in navigation in Google Chrome prior to 58.0.3029.81 for Linux, Windows, and Mac allowed a remote attacker to spoof the contents of the Omnibox (URL bar) via a crafted HTML page.", "scorev2": "2.6", "scorev3": "5.3", "scorev4": "0.0", "modified": "2026-06-17T01:19:50.000", "vector": "NETWORK", "vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:N/I:H/A:N", "detail": "fixed-version: Fixed from version 58.0.3029.81" }, { "id": "CVE-2017-5062", "status": "Patched", "link": "https://nvd.nist.gov/vuln/detail/CVE-2017-5062", "summary": "A use after free in Chrome Apps in Google Chrome prior to 58.0.3029.81 for Mac, Windows, and Linux, and 58.0.3029.83 for Android, allowed a remote attacker to potentially perform out of bounds memory access via a crafted Chrome extension.", "scorev2": "6.8", "scorev3": "8.8", "scorev4": "0.0", "modified": "2026-06-17T01:19:50.000", "vector": "NETWORK", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H", "detail": "fixed-version: Fixed from version 58.0.3029.83" }, { "id": "CVE-2017-5063", "status": "Patched", "link": "https://nvd.nist.gov/vuln/detail/CVE-2017-5063", "summary": "A numeric overflow in Skia in Google Chrome prior to 58.0.3029.81 for Linux, Windows, and Mac, and 58.0.3029.83 for Android, allowed a remote attacker to perform an out of bounds memory read via a crafted HTML page.", "scorev2": "6.8", "scorev3": "8.8", "scorev4": "0.0", "modified": "2026-06-17T01:19:51.000", "vector": "NETWORK", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H", "detail": "fixed-version: Fixed from version 58.0.3029.83" }, { "id": "CVE-2017-5064", "status": "Patched", "link": "https://nvd.nist.gov/vuln/detail/CVE-2017-5064", "summary": "Incorrect handling of DOM changes in Blink in Google Chrome prior to 58.0.3029.81 for Windows allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page.", "scorev2": "6.8", "scorev3": "8.8", "scorev4": "0.0", "modified": "2026-06-17T01:19:51.000", "vector": "NETWORK", "vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H", "detail": "fixed-version: Fixed from version 58.0.3029.81" }, { "id": "CVE-2017-5065", "status": "Patched", "link": "https://nvd.nist.gov/vuln/detail/CVE-2017-5065", "summary": "Lack of an appropriate action on page navigation in Blink in Google Chrome prior to 58.0.3029.81 for Windows and Mac allowed a remote attacker to potentially confuse a user into making an incorrect security decision via a crafted HTML page.", "scorev2": "4.3", "scorev3": "4.7", "scorev4": "0.0", "modified": "2026-06-17T01:19:51.000", "vector": "NETWORK", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:N/I:L/A:N", "detail": "fixed-version: Fixed from version 58.0.3029.81" }, { "id": "CVE-2017-5066", "status": "Patched", "link": "https://nvd.nist.gov/vuln/detail/CVE-2017-5066", "summary": "Insufficient consistency checks in signature handling in the networking stack in Google Chrome prior to 58.0.3029.81 for Mac, Windows, and Linux, and 58.0.3029.83 for Android, allowed a remote attacker to incorrectly accept a badly formed X.509 certificate via a crafted HTML page.", "scorev2": "4.3", "scorev3": "6.5", "scorev4": "0.0", "modified": "2026-06-17T01:19:51.000", "vector": "NETWORK", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:N", "detail": "fixed-version: Fixed from version 58.0.3029.83" }, { "id": "CVE-2017-5067", "status": "Patched", "link": "https://nvd.nist.gov/vuln/detail/CVE-2017-5067", "summary": "An insufficient watchdog timer in navigation in Google Chrome prior to 58.0.3029.81 for Linux, Windows, and Mac allowed a remote attacker to spoof the contents of the Omnibox (URL bar) via a crafted HTML page.", "scorev2": "4.3", "scorev3": "6.5", "scorev4": "0.0", "modified": "2026-06-17T01:19:51.000", "vector": "NETWORK", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:N", "detail": "fixed-version: Fixed from version 58.0.3029.81" }, { "id": "CVE-2017-5068", "status": "Patched", "link": "https://nvd.nist.gov/vuln/detail/CVE-2017-5068", "summary": "Incorrect handling of picture ID in WebRTC in Google Chrome prior to 58.0.3029.96 for Mac, Windows, and Linux allowed a remote attacker to trigger a race condition via a crafted HTML page.", "scorev2": "5.1", "scorev3": "7.5", "scorev4": "0.0", "modified": "2026-06-17T01:19:51.000", "vector": "NETWORK", "vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H", "detail": "fixed-version: Fixed from version 58.0.3029.96" }, { "id": "CVE-2017-5069", "status": "Patched", "link": "https://nvd.nist.gov/vuln/detail/CVE-2017-5069", "summary": "Incorrect MIME type of XSS-Protection reports in Blink in Google Chrome prior to 58.0.3029.81 for Linux, Windows, and Mac, and 58.0.3029.83 for Android, allowed a remote attacker to circumvent Cross-Origin Resource Sharing checks via a crafted HTML page.", "scorev2": "4.3", "scorev3": "6.1", "scorev4": "0.0", "modified": "2026-06-17T01:19:51.000", "vector": "NETWORK", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N", "detail": "fixed-version: Fixed from version 58.0.3029.83" }, { "id": "CVE-2017-5070", "status": "Patched", "link": "https://nvd.nist.gov/vuln/detail/CVE-2017-5070", "summary": "Type confusion in V8 in Google Chrome prior to 59.0.3071.86 for Linux, Windows, and Mac, and 59.0.3071.92 for Android, allowed a remote attacker to execute arbitrary code inside a sandbox via a crafted HTML page.", "scorev2": "6.8", "scorev3": "8.8", "scorev4": "0.0", "modified": "2026-06-17T01:19:51.000", "vector": "NETWORK", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H", "detail": "fixed-version: Fixed from version 59.0.3071.92" }, { "id": "CVE-2017-5071", "status": "Patched", "link": "https://nvd.nist.gov/vuln/detail/CVE-2017-5071", "summary": "Insufficient validation of untrusted input in V8 in Google Chrome prior to 59.0.3071.86 for Linux, Windows and Mac, and 59.0.3071.92 for Android allowed a remote attacker to perform an out of bounds memory read via a crafted HTML page.", "scorev2": "6.8", "scorev3": "6.3", "scorev4": "0.0", "modified": "2026-06-17T01:19:52.000", "vector": "NETWORK", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:L", "detail": "fixed-version: Fixed from version 59.0.3071.92" }, { "id": "CVE-2017-5072", "status": "Patched", "link": "https://nvd.nist.gov/vuln/detail/CVE-2017-5072", "summary": "Inappropriate implementation in Omnibox in Google Chrome prior to 59.0.3071.92 for Android allowed a remote attacker to perform domain spoofing with RTL characters via a crafted URL page.", "scorev2": "4.3", "scorev3": "6.5", "scorev4": "0.0", "modified": "2026-06-17T01:19:52.000", "vector": "NETWORK", "vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:N", "detail": "fixed-version: Fixed from version 59.0.3071.92" }, { "id": "CVE-2017-5073", "status": "Patched", "link": "https://nvd.nist.gov/vuln/detail/CVE-2017-5073", "summary": "Use after free in print preview in Blink in Google Chrome prior to 59.0.3071.86 for Linux, Windows, and Mac, and 59.0.3071.92 for Android, allowed a remote attacker to perform an out of bounds memory read via a crafted HTML page.", "scorev2": "6.8", "scorev3": "8.8", "scorev4": "0.0", "modified": "2026-06-17T01:19:52.000", "vector": "NETWORK", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H", "detail": "fixed-version: Fixed from version 59.0.3071.92" }, { "id": "CVE-2017-5074", "status": "Patched", "link": "https://nvd.nist.gov/vuln/detail/CVE-2017-5074", "summary": "A use after free in Chrome Apps in Google Chrome prior to 59.0.3071.86 for Windows allowed a remote attacker to perform an out of bounds memory read via a crafted HTML page, related to Bluetooth.", "scorev2": "5.4", "scorev3": "8.0", "scorev4": "0.0", "modified": "2026-06-17T01:19:52.000", "vector": "ADJACENT_NETWORK", "vectorString": "CVSS:3.0/AV:A/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H", "detail": "fixed-version: Fixed from version 59.0.3071.86" }, { "id": "CVE-2017-5075", "status": "Patched", "link": "https://nvd.nist.gov/vuln/detail/CVE-2017-5075", "summary": "Inappropriate implementation in CSP reporting in Blink in Google Chrome prior to 59.0.3071.86 for Linux, Windows, and Mac, and 59.0.3071.92 for Android, allowed a remote attacker to obtain the value of url fragments via a crafted HTML page.", "scorev2": "4.3", "scorev3": "4.3", "scorev4": "0.0", "modified": "2026-06-17T01:19:52.000", "vector": "NETWORK", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:N", "detail": "fixed-version: Fixed from version 59.0.3071.92" }, { "id": "CVE-2017-5076", "status": "Patched", "link": "https://nvd.nist.gov/vuln/detail/CVE-2017-5076", "summary": "Insufficient Policy Enforcement in Omnibox in Google Chrome prior to 59.0.3071.86 for Mac, Windows, and Linux, and 59.0.3071.92 for Android, allowed a remote attacker to perform domain spoofing via IDN homographs in a crafted domain name.", "scorev2": "4.3", "scorev3": "6.5", "scorev4": "0.0", "modified": "2026-06-17T01:19:52.000", "vector": "NETWORK", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:N", "detail": "fixed-version: Fixed from version 59.0.3071.92" }, { "id": "CVE-2017-5077", "status": "Patched", "link": "https://nvd.nist.gov/vuln/detail/CVE-2017-5077", "summary": "Insufficient validation of untrusted input in Skia in Google Chrome prior to 59.0.3071.86 for Linux, Windows, and Mac, and 59.0.3071.92 for Android, allowed a remote attacker to perform an out of bounds memory read via a crafted HTML page.", "scorev2": "6.8", "scorev3": "8.8", "scorev4": "0.0", "modified": "2026-06-17T01:19:52.000", "vector": "NETWORK", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H", "detail": "fixed-version: Fixed from version 59.0.3071.92" }, { "id": "CVE-2017-5078", "status": "Patched", "link": "https://nvd.nist.gov/vuln/detail/CVE-2017-5078", "summary": "Insufficient validation of untrusted input in Blink's mailto: handling in Google Chrome prior to 59.0.3071.86 for Linux, Windows, and Mac allowed a remote attacker to perform command injection via a crafted HTML page, a similar issue to CVE-2004-0121. For example, characters such as * have an incorrect interaction with xdg-email in xdg-utils, and a space character can be used in front of a command-line argument.", "scorev2": "6.8", "scorev3": "8.8", "scorev4": "0.0", "modified": "2026-06-17T01:19:53.000", "vector": "NETWORK", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H", "detail": "fixed-version: Fixed from version 59.0.3071.86" }, { "id": "CVE-2017-5079", "status": "Patched", "link": "https://nvd.nist.gov/vuln/detail/CVE-2017-5079", "summary": "Inappropriate implementation in Blink in Google Chrome prior to 59.0.3071.86 for Mac, Windows, and Linux, and 59.0.3071.92 for Android, allowed a remote attacker to display UI on a non attacker controlled tab via a crafted HTML page.", "scorev2": "4.3", "scorev3": "4.3", "scorev4": "0.0", "modified": "2026-06-17T01:19:53.000", "vector": "NETWORK", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N", "detail": "fixed-version: Fixed from version 59.0.3071.92" }, { "id": "CVE-2017-5080", "status": "Patched", "link": "https://nvd.nist.gov/vuln/detail/CVE-2017-5080", "summary": "A use after free in credit card autofill in Google Chrome prior to 59.0.3071.86 for Linux and Windows allowed a remote attacker to perform an out of bounds memory read via a crafted HTML page.", "scorev2": "6.8", "scorev3": "8.8", "scorev4": "0.0", "modified": "2026-06-17T01:19:53.000", "vector": "NETWORK", "vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H", "detail": "fixed-version: Fixed from version 59.0.3071.86" }, { "id": "CVE-2017-5081", "status": "Patched", "link": "https://nvd.nist.gov/vuln/detail/CVE-2017-5081", "summary": "Lack of verification of an extension's locale folder in Google Chrome prior to 59.0.3071.86 for Mac, Windows, and Linux, and 59.0.3071.92 for Android, allowed an attacker with local write access to modify extensions by modifying extension files.", "scorev2": "2.1", "scorev3": "3.3", "scorev4": "0.0", "modified": "2026-06-17T01:19:53.000", "vector": "LOCAL", "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:N", "detail": "fixed-version: Fixed from version 59.0.3071.92" }, { "id": "CVE-2017-5082", "status": "Patched", "link": "https://nvd.nist.gov/vuln/detail/CVE-2017-5082", "summary": "Failure to take advantage of available mitigations in credit card autofill in Google Chrome prior to 59.0.3071.92 for Android allowed a local attacker to take screen shots of credit card information via a crafted HTML page.", "scorev2": "2.1", "scorev3": "5.5", "scorev4": "0.0", "modified": "2026-06-17T01:19:53.000", "vector": "LOCAL", "vectorString": "CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N", "detail": "fixed-version: Fixed from version 59.0.3071.92" }, { "id": "CVE-2017-5083", "status": "Patched", "link": "https://nvd.nist.gov/vuln/detail/CVE-2017-5083", "summary": "Inappropriate implementation in Blink in Google Chrome prior to 59.0.3071.86 for Mac, Windows, and Linux, and 59.0.3071.92 for Android, allowed a remote attacker to display UI on a non attacker controlled tab via a crafted HTML page.", "scorev2": "4.3", "scorev3": "4.3", "scorev4": "0.0", "modified": "2026-06-17T01:19:53.000", "vector": "NETWORK", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N", "detail": "fixed-version: Fixed from version 59.0.3071.92" }, { "id": "CVE-2017-5085", "status": "Patched", "link": "https://nvd.nist.gov/vuln/detail/CVE-2017-5085", "summary": "Inappropriate implementation in Bookmarks in Google Chrome prior to 59 for iOS allowed a remote attacker who convinced the user to perform certain operations to run JavaScript on chrome:// pages via a crafted bookmark.", "scorev2": "4.3", "scorev3": "6.1", "scorev4": "0.0", "modified": "2026-06-17T01:19:54.000", "vector": "NETWORK", "vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N", "detail": "version-not-in-range" }, { "id": "CVE-2017-5086", "status": "Patched", "link": "https://nvd.nist.gov/vuln/detail/CVE-2017-5086", "summary": "Insufficient Policy Enforcement in Omnibox in Google Chrome prior to 59.0.3071.86 for Windows and Mac allowed a remote attacker to perform domain spoofing via IDN homographs in a crafted domain name.", "scorev2": "4.3", "scorev3": "6.5", "scorev4": "0.0", "modified": "2026-06-17T01:19:54.000", "vector": "NETWORK", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:N", "detail": "fixed-version: Fixed from version 59.0.3071.86" }, { "id": "CVE-2017-5087", "status": "Patched", "link": "https://nvd.nist.gov/vuln/detail/CVE-2017-5087", "summary": "A use after free in Blink in Google Chrome prior to 59.0.3071.104 for Mac, Windows, and Linux, and 59.0.3071.117 for Android, allowed a remote attacker to perform an out of bounds memory read via a crafted HTML page, aka an IndexedDB sandbox escape.", "scorev2": "6.8", "scorev3": "8.8", "scorev4": "0.0", "modified": "2026-06-17T01:19:55.000", "vector": "NETWORK", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H", "detail": "fixed-version: Fixed from version 59.0.3071.117" }, { "id": "CVE-2017-5088", "status": "Patched", "link": "https://nvd.nist.gov/vuln/detail/CVE-2017-5088", "summary": "Insufficient validation of untrusted input in V8 in Google Chrome prior to 59.0.3071.104 for Mac, Windows, and Linux, and 59.0.3071.117 for Android, allowed a remote attacker to perform out of bounds memory access via a crafted HTML page.", "scorev2": "6.8", "scorev3": "8.8", "scorev4": "0.0", "modified": "2026-06-17T01:19:55.000", "vector": "NETWORK", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H", "detail": "fixed-version: Fixed from version 59.0.3071.117" }, { "id": "CVE-2017-5089", "status": "Patched", "link": "https://nvd.nist.gov/vuln/detail/CVE-2017-5089", "summary": "Insufficient Policy Enforcement in Omnibox in Google Chrome prior to 59.0.3071.104 for Mac allowed a remote attacker to perform domain spoofing via a crafted domain name.", "scorev2": "4.3", "scorev3": "6.5", "scorev4": "0.0", "modified": "2026-06-17T01:19:55.000", "vector": "NETWORK", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:N", "detail": "fixed-version: Fixed from version 59.0.3071.104" }, { "id": "CVE-2017-5090", "status": "Patched", "link": "https://nvd.nist.gov/vuln/detail/CVE-2017-5090", "summary": "Insufficient Policy Enforcement in Omnibox in Google Chrome prior to 59.0.3071.115 for Mac allowed a remote attacker to perform domain spoofing via a crafted domain name containing a U+0620 character, aka Apple rdar problem 32458012.", "scorev2": "4.3", "scorev3": "6.5", "scorev4": "0.0", "modified": "2026-06-17T01:19:55.000", "vector": "NETWORK", "vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:N", "detail": "fixed-version: Fixed from version 59.0.3071.115" }, { "id": "CVE-2017-5091", "status": "Patched", "link": "https://nvd.nist.gov/vuln/detail/CVE-2017-5091", "summary": "A use after free in IndexedDB in Google Chrome prior to 60.0.3112.78 for Linux, Android, Windows, and Mac allowed a remote attacker to perform an out of bounds memory read via a crafted HTML page.", "scorev2": "6.8", "scorev3": "8.8", "scorev4": "0.0", "modified": "2026-06-17T01:19:55.000", "vector": "NETWORK", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H", "detail": "fixed-version: Fixed from version 60.0.3112.78" }, { "id": "CVE-2017-5092", "status": "Patched", "link": "https://nvd.nist.gov/vuln/detail/CVE-2017-5092", "summary": "Insufficient validation of untrusted input in PPAPI Plugins in Google Chrome prior to 60.0.3112.78 for Windows allowed a remote attacker to potentially perform a sandbox escape via a crafted HTML page.", "scorev2": "6.8", "scorev3": "8.8", "scorev4": "0.0", "modified": "2026-06-17T01:19:56.000", "vector": "NETWORK", "vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H", "detail": "fixed-version: Fixed from version 60.0.3112.78" }, { "id": "CVE-2017-5093", "status": "Patched", "link": "https://nvd.nist.gov/vuln/detail/CVE-2017-5093", "summary": "Inappropriate implementation in modal dialog handling in Blink in Google Chrome prior to 60.0.3112.78 for Mac, Windows, Linux, and Android allowed a remote attacker to prevent a full screen warning from being displayed via a crafted HTML page.", "scorev2": "4.3", "scorev3": "6.5", "scorev4": "0.0", "modified": "2026-06-17T01:19:56.000", "vector": "NETWORK", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:N", "detail": "fixed-version: Fixed from version 60.0.3112.78" }, { "id": "CVE-2017-5094", "status": "Patched", "link": "https://nvd.nist.gov/vuln/detail/CVE-2017-5094", "summary": "Type confusion in extensions JavaScript bindings in Google Chrome prior to 60.0.3112.78 for Mac, Windows, Linux, and Android allowed a remote attacker to potentially maliciously modify objects via a crafted HTML page.", "scorev2": "4.3", "scorev3": "6.5", "scorev4": "0.0", "modified": "2026-06-17T01:19:56.000", "vector": "NETWORK", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:N", "detail": "fixed-version: Fixed from version 60.0.3112.78" }, { "id": "CVE-2017-5095", "status": "Patched", "link": "https://nvd.nist.gov/vuln/detail/CVE-2017-5095", "summary": "Stack overflow in PDFium in Google Chrome prior to 60.0.3112.78 for Linux, Windows, and Mac allowed a remote attacker to potentially exploit stack corruption via a crafted PDF file.", "scorev2": "6.8", "scorev3": "8.8", "scorev4": "0.0", "modified": "2026-06-17T01:19:56.000", "vector": "NETWORK", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H", "detail": "fixed-version: Fixed from version >60.0.3112.78" }, { "id": "CVE-2017-5096", "status": "Patched", "link": "https://nvd.nist.gov/vuln/detail/CVE-2017-5096", "summary": "Insufficient policy enforcement during navigation between different schemes in Google Chrome prior to 60.0.3112.78 for Android allowed a remote attacker to perform cross origin content download via a crafted HTML page, related to intents.", "scorev2": "4.3", "scorev3": "4.3", "scorev4": "0.0", "modified": "2026-06-17T01:19:56.000", "vector": "NETWORK", "vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:N", "detail": "fixed-version: Fixed from version 60.0.3112.78" }, { "id": "CVE-2017-5097", "status": "Patched", "link": "https://nvd.nist.gov/vuln/detail/CVE-2017-5097", "summary": "Insufficient validation of untrusted input in Skia in Google Chrome prior to 60.0.3112.78 for Linux allowed a remote attacker to perform an out of bounds memory read via a crafted HTML page.", "scorev2": "6.8", "scorev3": "8.8", "scorev4": "0.0", "modified": "2026-06-17T01:19:56.000", "vector": "NETWORK", "vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H", "detail": "fixed-version: Fixed from version >60.0.3112.76" }, { "id": "CVE-2017-5098", "status": "Patched", "link": "https://nvd.nist.gov/vuln/detail/CVE-2017-5098", "summary": "A use after free in V8 in Google Chrome prior to 60.0.3112.78 for Mac, Windows, Linux, and Android allowed a remote attacker to perform an out of bounds memory read via a crafted HTML page.", "scorev2": "6.8", "scorev3": "8.8", "scorev4": "0.0", "modified": "2026-06-17T01:19:56.000", "vector": "NETWORK", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H", "detail": "fixed-version: Fixed from version >60.0.3112.78" }, { "id": "CVE-2017-5099", "status": "Patched", "link": "https://nvd.nist.gov/vuln/detail/CVE-2017-5099", "summary": "Insufficient validation of untrusted input in PPAPI Plugins in Google Chrome prior to 60.0.3112.78 for Mac allowed a remote attacker to potentially gain privilege elevation via a crafted HTML page.", "scorev2": "6.8", "scorev3": "8.8", "scorev4": "0.0", "modified": "2026-06-17T01:19:56.000", "vector": "NETWORK", "vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H", "detail": "fixed-version: Fixed from version >60.0.3112.76" }, { "id": "CVE-2017-5100", "status": "Patched", "link": "https://nvd.nist.gov/vuln/detail/CVE-2017-5100", "summary": "A use after free in Apps in Google Chrome prior to 60.0.3112.78 for Windows allowed a remote attacker to perform an out of bounds memory read via a crafted HTML page.", "scorev2": "6.8", "scorev3": "8.8", "scorev4": "0.0", "modified": "2026-06-17T01:19:57.000", "vector": "NETWORK", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H", "detail": "fixed-version: Fixed from version >60.0.3112.78" }, { "id": "CVE-2017-5101", "status": "Patched", "link": "https://nvd.nist.gov/vuln/detail/CVE-2017-5101", "summary": "Inappropriate implementation in Omnibox in Google Chrome prior to 60.0.3112.78 for Linux, Windows, and Mac allowed a remote attacker to spoof the contents of the Omnibox via a crafted HTML page.", "scorev2": "4.3", "scorev3": "6.5", "scorev4": "0.0", "modified": "2026-06-17T01:19:57.000", "vector": "NETWORK", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:N", "detail": "fixed-version: Fixed from version >60.0.3112.78" }, { "id": "CVE-2017-5102", "status": "Patched", "link": "https://nvd.nist.gov/vuln/detail/CVE-2017-5102", "summary": "Use of an uninitialized value in Skia in Google Chrome prior to 60.0.3112.78 for Mac, Windows, Linux, and Android allowed a remote attacker to obtain potentially sensitive information from process memory via a crafted HTML page.", "scorev2": "4.3", "scorev3": "4.3", "scorev4": "0.0", "modified": "2026-06-17T01:19:57.000", "vector": "NETWORK", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:N", "detail": "fixed-version: Fixed from version >60.0.3112.78" }, { "id": "CVE-2017-5103", "status": "Patched", "link": "https://nvd.nist.gov/vuln/detail/CVE-2017-5103", "summary": "Use of an uninitialized value in Skia in Google Chrome prior to 60.0.3112.78 for Linux, Windows, and Mac allowed a remote attacker to obtain potentially sensitive information from process memory via a crafted HTML page.", "scorev2": "4.3", "scorev3": "4.3", "scorev4": "0.0", "modified": "2026-06-17T01:19:57.000", "vector": "NETWORK", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:N", "detail": "fixed-version: Fixed from version >60.0.3112.78" }, { "id": "CVE-2017-5104", "status": "Patched", "link": "https://nvd.nist.gov/vuln/detail/CVE-2017-5104", "summary": "Inappropriate implementation in interstitials in Google Chrome prior to 60.0.3112.78 for Mac allowed a remote attacker to spoof the contents of the omnibox via a crafted HTML page.", "scorev2": "4.3", "scorev3": "6.5", "scorev4": "0.0", "modified": "2026-06-17T01:19:57.000", "vector": "NETWORK", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:N", "detail": "fixed-version: Fixed from version >60.0.3112.78" }, { "id": "CVE-2017-5105", "status": "Patched", "link": "https://nvd.nist.gov/vuln/detail/CVE-2017-5105", "summary": "Insufficient Policy Enforcement in Omnibox in Google Chrome prior to 60.0.3112.78 for Mac, Windows, Linux, and Android allowed a remote attacker to perform domain spoofing via IDN homographs in a crafted domain name.", "scorev2": "4.3", "scorev3": "6.5", "scorev4": "0.0", "modified": "2026-06-17T01:19:57.000", "vector": "NETWORK", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:N", "detail": "fixed-version: Fixed from version >60.0.3112.78" }, { "id": "CVE-2017-5106", "status": "Patched", "link": "https://nvd.nist.gov/vuln/detail/CVE-2017-5106", "summary": "Insufficient Policy Enforcement in Omnibox in Google Chrome prior to 60.0.3112.78 for Mac, Windows, Linux, and Android allowed a remote attacker to perform domain spoofing via IDN homographs in a crafted domain name.", "scorev2": "4.3", "scorev3": "6.5", "scorev4": "0.0", "modified": "2026-06-17T01:19:57.000", "vector": "NETWORK", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:N", "detail": "fixed-version: Fixed from version >60.0.3112.78" }, { "id": "CVE-2017-5107", "status": "Patched", "link": "https://nvd.nist.gov/vuln/detail/CVE-2017-5107", "summary": "A timing attack in SVG rendering in Google Chrome prior to 60.0.3112.78 for Linux, Windows, and Mac allowed a remote attacker to extract pixel values from a cross-origin page being iframe'd via a crafted HTML page.", "scorev2": "2.6", "scorev3": "5.3", "scorev4": "0.0", "modified": "2026-06-17T01:19:57.000", "vector": "NETWORK", "vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:N/A:N", "detail": "fixed-version: Fixed from version 60.0.3112.78" }, { "id": "CVE-2017-5108", "status": "Patched", "link": "https://nvd.nist.gov/vuln/detail/CVE-2017-5108", "summary": "Type confusion in PDFium in Google Chrome prior to 60.0.3112.78 for Mac, Windows, Linux, and Android allowed a remote attacker to potentially maliciously modify objects via a crafted PDF file.", "scorev2": "6.8", "scorev3": "8.8", "scorev4": "0.0", "modified": "2026-06-17T01:19:58.000", "vector": "NETWORK", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H", "detail": "fixed-version: Fixed from version 60.0.3112.78" }, { "id": "CVE-2017-5109", "status": "Patched", "link": "https://nvd.nist.gov/vuln/detail/CVE-2017-5109", "summary": "Inappropriate implementation of unload handler handling in permission prompts in Google Chrome prior to 60.0.3112.78 for Linux, Windows, and Mac allowed a remote attacker to display UI on a non attacker controlled tab via a crafted HTML page.", "scorev2": "4.3", "scorev3": "4.3", "scorev4": "0.0", "modified": "2026-06-17T01:19:58.000", "vector": "NETWORK", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N", "detail": "fixed-version: Fixed from version 60.0.3112.78" }, { "id": "CVE-2017-5110", "status": "Patched", "link": "https://nvd.nist.gov/vuln/detail/CVE-2017-5110", "summary": "Inappropriate implementation of the web payments API on blob: and data: schemes in Web Payments in Google Chrome prior to 60.0.3112.78 for Mac, Windows, Linux, and Android allowed a remote attacker to spoof the contents of the Omnibox via a crafted HTML page.", "scorev2": "4.3", "scorev3": "6.5", "scorev4": "0.0", "modified": "2026-06-17T01:19:58.000", "vector": "NETWORK", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:N", "detail": "fixed-version: Fixed from version 60.0.3112.78" }, { "id": "CVE-2017-5111", "status": "Patched", "link": "https://nvd.nist.gov/vuln/detail/CVE-2017-5111", "summary": "A use after free in PDFium in Google Chrome prior to 61.0.3163.79 for Linux, Windows, and Mac allowed a remote attacker to potentially exploit memory corruption via a crafted PDF file.", "scorev2": "6.8", "scorev3": "8.8", "scorev4": "0.0", "modified": "2026-06-17T01:19:58.000", "vector": "NETWORK", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H", "detail": "fixed-version: Fixed from version 61.0.3163.79" }, { "id": "CVE-2017-5112", "status": "Patched", "link": "https://nvd.nist.gov/vuln/detail/CVE-2017-5112", "summary": "Heap buffer overflow in WebGL in Google Chrome prior to 61.0.3163.79 for Windows allowed a remote attacker to execute arbitrary code inside a sandbox via a crafted HTML page.", "scorev2": "6.8", "scorev3": "8.8", "scorev4": "0.0", "modified": "2026-06-17T01:19:58.000", "vector": "NETWORK", "vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H", "detail": "fixed-version: Fixed from version 61.0.3163.79" }, { "id": "CVE-2017-5113", "status": "Patched", "link": "https://nvd.nist.gov/vuln/detail/CVE-2017-5113", "summary": "Math overflow in Skia in Google Chrome prior to 61.0.3163.79 for Mac, Windows, and Linux, and 61.0.3163.81 for Android, allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page.", "scorev2": "6.8", "scorev3": "8.8", "scorev4": "0.0", "modified": "2026-06-17T01:19:58.000", "vector": "NETWORK", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H", "detail": "fixed-version: Fixed from version 61.0.3163.81" }, { "id": "CVE-2017-5114", "status": "Patched", "link": "https://nvd.nist.gov/vuln/detail/CVE-2017-5114", "summary": "Inappropriate use of partition alloc in PDFium in Google Chrome prior to 61.0.3163.79 for Linux, Windows, and Mac, and 61.0.3163.81 for Android, allowed a remote attacker to potentially exploit memory corruption via a crafted PDF file.", "scorev2": "6.8", "scorev3": "8.8", "scorev4": "0.0", "modified": "2026-06-17T01:19:58.000", "vector": "NETWORK", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H", "detail": "fixed-version: Fixed from version 61.0.3163.81" }, { "id": "CVE-2017-5115", "status": "Patched", "link": "https://nvd.nist.gov/vuln/detail/CVE-2017-5115", "summary": "Type confusion in V8 in Google Chrome prior to 61.0.3163.79 for Windows allowed a remote attacker to potentially exploit object corruption via a crafted HTML page.", "scorev2": "6.8", "scorev3": "8.8", "scorev4": "0.0", "modified": "2026-06-17T01:19:59.000", "vector": "NETWORK", "vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H", "detail": "fixed-version: Fixed from version 61.0.3163.79" }, { "id": "CVE-2017-5116", "status": "Patched", "link": "https://nvd.nist.gov/vuln/detail/CVE-2017-5116", "summary": "Type confusion in V8 in Google Chrome prior to 61.0.3163.79 for Mac, Windows, and Linux, and 61.0.3163.81 for Android, allowed a remote attacker to execute arbitrary code inside a sandbox via a crafted HTML page.", "scorev2": "6.8", "scorev3": "8.8", "scorev4": "0.0", "modified": "2026-06-17T01:19:59.000", "vector": "NETWORK", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H", "detail": "fixed-version: Fixed from version 61.0.3163.81" }, { "id": "CVE-2017-5117", "status": "Patched", "link": "https://nvd.nist.gov/vuln/detail/CVE-2017-5117", "summary": "Use of an uninitialized value in Skia in Google Chrome prior to 61.0.3163.79 for Linux and Windows allowed a remote attacker to obtain potentially sensitive information from process memory via a crafted HTML page.", "scorev2": "4.3", "scorev3": "6.5", "scorev4": "0.0", "modified": "2026-06-17T01:19:59.000", "vector": "NETWORK", "vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N", "detail": "fixed-version: Fixed from version 61.0.3163.79" }, { "id": "CVE-2017-5118", "status": "Patched", "link": "https://nvd.nist.gov/vuln/detail/CVE-2017-5118", "summary": "Blink in Google Chrome prior to 61.0.3163.79 for Mac, Windows, and Linux, and 61.0.3163.81 for Android, failed to correctly propagate CSP restrictions to javascript scheme pages, which allowed a remote attacker to bypass content security policy via a crafted HTML page.", "scorev2": "4.3", "scorev3": "4.3", "scorev4": "0.0", "modified": "2026-06-17T01:19:59.000", "vector": "NETWORK", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N", "detail": "fixed-version: Fixed from version 61.0.3163.81" }, { "id": "CVE-2017-5119", "status": "Patched", "link": "https://nvd.nist.gov/vuln/detail/CVE-2017-5119", "summary": "Use of an uninitialized value in Skia in Google Chrome prior to 61.0.3163.79 for Mac, Windows, and Linux, and 61.0.3163.81 for Android, allowed a remote attacker to obtain potentially sensitive information from process memory via a crafted HTML page.", "scorev2": "4.3", "scorev3": "4.3", "scorev4": "0.0", "modified": "2026-06-17T01:19:59.000", "vector": "NETWORK", "vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:N", "detail": "fixed-version: Fixed from version 61.0.3163.100" }, { "id": "CVE-2017-5120", "status": "Patched", "link": "https://nvd.nist.gov/vuln/detail/CVE-2017-5120", "summary": "Inappropriate use of www mismatch redirects in browser navigation in Google Chrome prior to 61.0.3163.79 for Mac, Windows, and Linux, and 61.0.3163.81 for Android, allowed a remote attacker to potentially downgrade HTTPS requests to HTTP via a crafted HTML page. In other words, Chrome could transmit cleartext even though the user had entered an https URL, because of a misdesigned workaround for cases where the domain name in a URL almost matches the domain name in an X.509 server certificate (but differs in the initial \"www.\" substring).", "scorev2": "4.3", "scorev3": "6.5", "scorev4": "0.0", "modified": "2026-06-17T01:19:59.000", "vector": "NETWORK", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:N", "detail": "fixed-version: Fixed from version 61.0.3163.81" }, { "id": "CVE-2017-5121", "status": "Patched", "link": "https://nvd.nist.gov/vuln/detail/CVE-2017-5121", "summary": "Inappropriate use of JIT optimisation in V8 in Google Chrome prior to 61.0.3163.100 for Linux, Windows, and Mac allowed a remote attacker to execute arbitrary code inside a sandbox via a crafted HTML page, related to the escape analysis phase.", "scorev2": "6.8", "scorev3": "8.8", "scorev4": "0.0", "modified": "2026-06-17T01:19:59.000", "vector": "NETWORK", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H", "detail": "fixed-version: Fixed from version 61.0.3163.100" }, { "id": "CVE-2017-5122", "status": "Patched", "link": "https://nvd.nist.gov/vuln/detail/CVE-2017-5122", "summary": "Inappropriate use of table size handling in V8 in Google Chrome prior to 61.0.3163.100 for Windows allowed a remote attacker to trigger out-of-bounds access via a crafted HTML page.", "scorev2": "6.8", "scorev3": "8.8", "scorev4": "0.0", "modified": "2026-06-17T01:19:59.000", "vector": "NETWORK", "vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H", "detail": "fixed-version: Fixed from version 61.0.3163.100" }, { "id": "CVE-2017-5124", "status": "Patched", "link": "https://nvd.nist.gov/vuln/detail/CVE-2017-5124", "summary": "Incorrect application of sandboxing in Blink in Google Chrome prior to 62.0.3202.62 allowed a remote attacker to inject arbitrary scripts or HTML (UXSS) via a crafted MHTML page.", "scorev2": "4.3", "scorev3": "6.1", "scorev4": "0.0", "modified": "2026-06-17T01:20:00.000", "vector": "NETWORK", "vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N", "detail": "fixed-version: Fixed from version 62.0.3202.62" }, { "id": "CVE-2017-5125", "status": "Patched", "link": "https://nvd.nist.gov/vuln/detail/CVE-2017-5125", "summary": "Heap buffer overflow in Skia in Google Chrome prior to 62.0.3202.62 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page.", "scorev2": "6.8", "scorev3": "8.8", "scorev4": "0.0", "modified": "2026-06-17T01:20:00.000", "vector": "NETWORK", "vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H", "detail": "fixed-version: Fixed from version 62.0.3202.62" }, { "id": "CVE-2017-5126", "status": "Patched", "link": "https://nvd.nist.gov/vuln/detail/CVE-2017-5126", "summary": "A use after free in PDFium in Google Chrome prior to 62.0.3202.62 allowed a remote attacker to potentially exploit heap corruption via a crafted PDF file.", "scorev2": "6.8", "scorev3": "8.8", "scorev4": "0.0", "modified": "2026-06-17T01:20:00.000", "vector": "NETWORK", "vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H", "detail": "fixed-version: Fixed from version 62.0.3202.62" }, { "id": "CVE-2017-5127", "status": "Patched", "link": "https://nvd.nist.gov/vuln/detail/CVE-2017-5127", "summary": "Use after free in PDFium in Google Chrome prior to 62.0.3202.62 allowed a remote attacker to potentially exploit heap corruption via a crafted PDF file.", "scorev2": "6.8", "scorev3": "8.8", "scorev4": "0.0", "modified": "2026-06-17T01:20:00.000", "vector": "NETWORK", "vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H", "detail": "fixed-version: Fixed from version 62.0.3202.62" }, { "id": "CVE-2017-5128", "status": "Patched", "link": "https://nvd.nist.gov/vuln/detail/CVE-2017-5128", "summary": "Heap buffer overflow in Blink in Google Chrome prior to 62.0.3202.62 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page, related to WebGL.", "scorev2": "6.8", "scorev3": "8.8", "scorev4": "0.0", "modified": "2026-06-17T01:20:00.000", "vector": "NETWORK", "vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H", "detail": "fixed-version: Fixed from version 62.0.3202.62" }, { "id": "CVE-2017-5129", "status": "Patched", "link": "https://nvd.nist.gov/vuln/detail/CVE-2017-5129", "summary": "A use after free in WebAudio in Blink in Google Chrome prior to 62.0.3202.62 allowed a remote attacker to perform an out of bounds memory read via a crafted HTML page.", "scorev2": "6.8", "scorev3": "8.8", "scorev4": "0.0", "modified": "2026-06-17T01:20:00.000", "vector": "NETWORK", "vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H", "detail": "fixed-version: Fixed from version 62.0.3202.62" }, { "id": "CVE-2017-5130", "status": "Patched", "link": "https://nvd.nist.gov/vuln/detail/CVE-2017-5130", "summary": "An integer overflow in xmlmemory.c in libxml2 before 2.9.5, as used in Google Chrome prior to 62.0.3202.62 and other products, allowed a remote attacker to potentially exploit heap corruption via a crafted XML file.", "scorev2": "6.8", "scorev3": "8.8", "scorev4": "0.0", "modified": "2026-06-17T01:20:01.000", "vector": "NETWORK", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H", "detail": "fixed-version: Fixed from version 62.0.3202.62" }, { "id": "CVE-2017-5131", "status": "Patched", "link": "https://nvd.nist.gov/vuln/detail/CVE-2017-5131", "summary": "An integer overflow in Skia in Google Chrome prior to 62.0.3202.62 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page, aka an out-of-bounds write.", "scorev2": "6.8", "scorev3": "8.8", "scorev4": "0.0", "modified": "2026-06-17T01:20:01.000", "vector": "NETWORK", "vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H", "detail": "fixed-version: Fixed from version 62.0.3202.62" }, { "id": "CVE-2017-5132", "status": "Patched", "link": "https://nvd.nist.gov/vuln/detail/CVE-2017-5132", "summary": "Inappropriate implementation in V8 in Google Chrome prior to 62.0.3202.62 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page, aka incorrect WebAssembly stack manipulation.", "scorev2": "6.8", "scorev3": "8.8", "scorev4": "0.0", "modified": "2026-06-17T01:20:01.000", "vector": "NETWORK", "vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H", "detail": "fixed-version: Fixed from version 62.0.3202.62" }, { "id": "CVE-2017-5133", "status": "Patched", "link": "https://nvd.nist.gov/vuln/detail/CVE-2017-5133", "summary": "Off-by-one read/write on the heap in Blink in Google Chrome prior to 62.0.3202.62 allowed a remote attacker to corrupt memory and possibly leak information and potentially execute code via a crafted PDF file.", "scorev2": "6.8", "scorev3": "8.8", "scorev4": "0.0", "modified": "2026-06-17T01:20:01.000", "vector": "NETWORK", "vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H", "detail": "fixed-version: Fixed from version 62.0.3202.62" }, { "id": "CVE-2017-7000", "status": "Patched", "link": "https://nvd.nist.gov/vuln/detail/CVE-2017-7000", "summary": "An issue was discovered in certain Apple products. iOS before 10.3.2 is affected. macOS before 10.12.5 is affected. The issue involves the \"SQLite\" component. It allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption and application crash) via a crafted web site.", "scorev2": "6.8", "scorev3": "8.8", "scorev4": "0.0", "modified": "2026-06-17T01:23:27.000", "vector": "NETWORK", "vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H", "detail": "fixed-version: Fixed from version 61.0.3163.79" }, { "id": "CVE-2018-10229", "status": "Unpatched", "link": "https://nvd.nist.gov/vuln/detail/CVE-2018-10229", "summary": "A hardware vulnerability in GPU memory modules allows attackers to accelerate micro-architectural attacks through the use of the JavaScript WebGL API.", "scorev2": "5.8", "scorev3": "4.8", "scorev4": "0.0", "modified": "2026-06-17T01:33:42.000", "vector": "NETWORK", "vectorString": "CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:N", "detail": "no-version-ranges", "description": "Check package version" }, { "id": "CVE-2018-16064", "status": "Patched", "link": "https://nvd.nist.gov/vuln/detail/CVE-2018-16064", "summary": "Insufficient data validation in Extensions API in Google Chrome prior to 68.0.3440.75 allowed an attacker who convinced a user to install a malicious extension to bypass navigation restrictions via a crafted Chrome Extension.", "scorev2": "4.3", "scorev3": "6.5", "scorev4": "0.0", "modified": "2026-06-17T01:43:37.000", "vector": "NETWORK", "vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:N", "detail": "fixed-version: Fixed from version 68.0.3440.75" }, { "id": "CVE-2018-16065", "status": "Patched", "link": "https://nvd.nist.gov/vuln/detail/CVE-2018-16065", "summary": "A Javascript reentrancy issues that caused a use-after-free in V8 in Google Chrome prior to 69.0.3497.81 allowed a remote attacker to execute arbitrary code inside a sandbox via a crafted HTML page.", "scorev2": "6.8", "scorev3": "8.8", "scorev4": "0.0", "modified": "2026-06-17T01:43:37.000", "vector": "NETWORK", "vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H", "detail": "fixed-version: Fixed from version 69.0.3497.81" }, { "id": "CVE-2018-16066", "status": "Patched", "link": "https://nvd.nist.gov/vuln/detail/CVE-2018-16066", "summary": "A use after free in Blink in Google Chrome prior to 69.0.3497.81 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page.", "scorev2": "4.3", "scorev3": "6.5", "scorev4": "0.0", "modified": "2026-06-17T01:43:37.000", "vector": "NETWORK", "vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H", "detail": "fixed-version: Fixed from version 69.0.3497.81" }, { "id": "CVE-2018-16067", "status": "Patched", "link": "https://nvd.nist.gov/vuln/detail/CVE-2018-16067", "summary": "A use after free in WebAudio in Google Chrome prior to 69.0.3497.81 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page.", "scorev2": "4.3", "scorev3": "6.5", "scorev4": "0.0", "modified": "2026-06-17T01:43:38.000", "vector": "NETWORK", "vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H", "detail": "fixed-version: Fixed from version 69.0.3497.81" }, { "id": "CVE-2018-16068", "status": "Patched", "link": "https://nvd.nist.gov/vuln/detail/CVE-2018-16068", "summary": "Missing validation in Mojo in Google Chrome prior to 69.0.3497.81 allowed a remote attacker to potentially perform a sandbox escape via a crafted HTML page.", "scorev2": "6.8", "scorev3": "9.6", "scorev4": "0.0", "modified": "2026-06-17T01:43:38.000", "vector": "NETWORK", "vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:H", "detail": "fixed-version: Fixed from version 69.0.3497.81" }, { "id": "CVE-2018-16069", "status": "Patched", "link": "https://nvd.nist.gov/vuln/detail/CVE-2018-16069", "summary": "Unintended floating-point error accumulation in SwiftShader in Google Chrome prior to 69.0.3497.81 allowed a remote attacker to leak cross-origin data via a crafted HTML page.", "scorev2": "4.3", "scorev3": "6.5", "scorev4": "0.0", "modified": "2026-06-17T01:43:38.000", "vector": "NETWORK", "vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N", "detail": "fixed-version: Fixed from version 69.0.3497.81" }, { "id": "CVE-2018-16070", "status": "Patched", "link": "https://nvd.nist.gov/vuln/detail/CVE-2018-16070", "summary": "Integer overflows in Skia in Google Chrome prior to 69.0.3497.81 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page.", "scorev2": "6.8", "scorev3": "8.8", "scorev4": "0.0", "modified": "2026-06-17T01:43:38.000", "vector": "NETWORK", "vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H", "detail": "fixed-version: Fixed from version 69.0.3497.81" }, { "id": "CVE-2018-16071", "status": "Patched", "link": "https://nvd.nist.gov/vuln/detail/CVE-2018-16071", "summary": "A use after free in WebRTC in Google Chrome prior to 69.0.3497.81 allowed a remote attacker to potentially exploit heap corruption via a crafted video file.", "scorev2": "6.8", "scorev3": "8.8", "scorev4": "0.0", "modified": "2026-06-17T01:43:38.000", "vector": "NETWORK", "vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H", "detail": "fixed-version: Fixed from version 69.0.3497.81" }, { "id": "CVE-2018-16072", "status": "Patched", "link": "https://nvd.nist.gov/vuln/detail/CVE-2018-16072", "summary": "A missing origin check related to HLS manifests in Blink in Google Chrome prior to 69.0.3497.81 allowed a remote attacker to bypass same origin policy via a crafted HTML page.", "scorev2": "4.3", "scorev3": "6.5", "scorev4": "0.0", "modified": "2026-06-17T01:43:38.000", "vector": "NETWORK", "vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N", "detail": "fixed-version: Fixed from version 69.0.3497.81" }, { "id": "CVE-2018-16073", "status": "Patched", "link": "https://nvd.nist.gov/vuln/detail/CVE-2018-16073", "summary": "Insufficient policy enforcement in site isolation in Google Chrome prior to 69.0.3497.81 allowed a remote attacker to bypass site isolation via a crafted HTML page.", "scorev2": "4.3", "scorev3": "6.5", "scorev4": "0.0", "modified": "2026-06-17T01:43:40.000", "vector": "NETWORK", "vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N", "detail": "fixed-version: Fixed from version 69.0.3497.81" }, { "id": "CVE-2018-16074", "status": "Patched", "link": "https://nvd.nist.gov/vuln/detail/CVE-2018-16074", "summary": "Insufficient policy enforcement in site isolation in Google Chrome prior to 69.0.3497.81 allowed a remote attacker to bypass site isolation via a crafted HTML page.", "scorev2": "4.3", "scorev3": "6.5", "scorev4": "0.0", "modified": "2026-06-17T01:43:40.000", "vector": "NETWORK", "vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N", "detail": "fixed-version: Fixed from version 69.0.3497.81" }, { "id": "CVE-2018-16075", "status": "Patched", "link": "https://nvd.nist.gov/vuln/detail/CVE-2018-16075", "summary": "Insufficient file type enforcement in Blink in Google Chrome prior to 69.0.3497.81 allowed a remote attacker to obtain local file data via a crafted HTML page.", "scorev2": "2.6", "scorev3": "5.3", "scorev4": "0.0", "modified": "2026-06-17T01:43:40.000", "vector": "NETWORK", "vectorString": "CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:N/A:N", "detail": "fixed-version: Fixed from version 69.0.3497.81" }, { "id": "CVE-2018-16076", "status": "Patched", "link": "https://nvd.nist.gov/vuln/detail/CVE-2018-16076", "summary": "Missing bounds check in PDFium in Google Chrome prior to 69.0.3497.81 allowed a remote attacker to perform an out of bounds memory read via a crafted PDF file.", "scorev2": "6.8", "scorev3": "8.8", "scorev4": "0.0", "modified": "2026-06-17T01:43:40.000", "vector": "NETWORK", "vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H", "detail": "fixed-version: Fixed from version 69.0.3497.81" }, { "id": "CVE-2018-16077", "status": "Patched", "link": "https://nvd.nist.gov/vuln/detail/CVE-2018-16077", "summary": "Object lifecycle issue in Blink in Google Chrome prior to 69.0.3497.81 allowed a remote attacker to bypass content security policy via a crafted HTML page.", "scorev2": "4.3", "scorev3": "6.5", "scorev4": "0.0", "modified": "2026-06-17T01:43:40.000", "vector": "NETWORK", "vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:N", "detail": "fixed-version: Fixed from version 69.0.3497.81" }, { "id": "CVE-2018-16078", "status": "Patched", "link": "https://nvd.nist.gov/vuln/detail/CVE-2018-16078", "summary": "Unsafe handling of credit card details in Autofill in Google Chrome prior to 69.0.3497.81 allowed a remote attacker to obtain potentially sensitive information from process memory via a crafted HTML page.", "scorev2": "4.3", "scorev3": "6.5", "scorev4": "0.0", "modified": "2026-06-17T01:43:40.000", "vector": "NETWORK", "vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N", "detail": "fixed-version: Fixed from version 69.0.3497.81" }, { "id": "CVE-2018-16079", "status": "Patched", "link": "https://nvd.nist.gov/vuln/detail/CVE-2018-16079", "summary": "A race condition between permission prompts and navigations in Prompts in Google Chrome prior to 69.0.3497.81 allowed a remote attacker to spoof the contents of the Omnibox (URL bar) via a crafted HTML page.", "scorev2": "2.6", "scorev3": "5.3", "scorev4": "0.0", "modified": "2026-06-17T01:43:41.000", "vector": "NETWORK", "vectorString": "CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:N/I:H/A:N", "detail": "fixed-version: Fixed from version 69.0.3497.81" }, { "id": "CVE-2018-16080", "status": "Patched", "link": "https://nvd.nist.gov/vuln/detail/CVE-2018-16080", "summary": "A missing check for popup window handling in Fullscreen in Google Chrome on macOS prior to 69.0.3497.81 allowed a remote attacker to spoof the contents of the Omnibox (URL bar) via a crafted HTML page.", "scorev2": "4.3", "scorev3": "6.5", "scorev4": "0.0", "modified": "2026-06-17T01:43:41.000", "vector": "NETWORK", "vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:N", "detail": "fixed-version: Fixed from version 69.0.3497.81" }, { "id": "CVE-2018-16081", "status": "Patched", "link": "https://nvd.nist.gov/vuln/detail/CVE-2018-16081", "summary": "Allowing the chrome.debugger API to run on file:// URLs in DevTools in Google Chrome prior to 69.0.3497.81 allowed an attacker who convinced a user to install a malicious extension to access files on the local file system without file access permission via a crafted Chrome Extension.", "scorev2": "4.3", "scorev3": "7.4", "scorev4": "0.0", "modified": "2026-06-17T01:43:41.000", "vector": "NETWORK", "vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:N/A:N", "detail": "fixed-version: Fixed from version 69.0.3497.81" }, { "id": "CVE-2018-16082", "status": "Patched", "link": "https://nvd.nist.gov/vuln/detail/CVE-2018-16082", "summary": "An out of bounds read in Swiftshader in Google Chrome prior to 69.0.3497.81 allowed a remote attacker to potentially perform out of bounds memory access via a crafted HTML page.", "scorev2": "4.3", "scorev3": "6.5", "scorev4": "0.0", "modified": "2026-06-17T01:43:41.000", "vector": "NETWORK", "vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H", "detail": "fixed-version: Fixed from version 69.0.3497.81" }, { "id": "CVE-2018-16083", "status": "Patched", "link": "https://nvd.nist.gov/vuln/detail/CVE-2018-16083", "summary": "An out of bounds read in forward error correction code in WebRTC in Google Chrome prior to 69.0.3497.81 allowed a remote attacker to perform an out of bounds memory read via a crafted HTML page.", "scorev2": "6.8", "scorev3": "8.8", "scorev4": "0.0", "modified": "2026-06-17T01:43:41.000", "vector": "NETWORK", "vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H", "detail": "fixed-version: Fixed from version 69.0.3497.81" }, { "id": "CVE-2018-16084", "status": "Patched", "link": "https://nvd.nist.gov/vuln/detail/CVE-2018-16084", "summary": "The default selected dialog button in CustomHandlers in Google Chrome prior to 69.0.3497.81 allowed a remote attacker who convinced the user to perform certain operations to open external programs via a crafted HTML page.", "scorev2": "4.3", "scorev3": "6.1", "scorev4": "0.0", "modified": "2026-06-17T01:43:41.000", "vector": "NETWORK", "vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N", "detail": "fixed-version: Fixed from version 69.0.3497.81" }, { "id": "CVE-2018-16085", "status": "Patched", "link": "https://nvd.nist.gov/vuln/detail/CVE-2018-16085", "summary": "A use after free in ResourceCoordinator in Google Chrome prior to 69.0.3497.81 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page.", "scorev2": "6.8", "scorev3": "8.8", "scorev4": "0.0", "modified": "2026-06-17T01:43:41.000", "vector": "NETWORK", "vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H", "detail": "fixed-version: Fixed from version 69.0.3497.81" }, { "id": "CVE-2018-16086", "status": "Patched", "link": "https://nvd.nist.gov/vuln/detail/CVE-2018-16086", "summary": "Insufficient policy enforcement in extensions API in Google Chrome prior to 69.0.3497.81 allowed an attacker who convinced a user to install a malicious extension to bypass navigation restrictions via a crafted Chrome Extension.", "scorev2": "5.8", "scorev3": "5.4", "scorev4": "0.0", "modified": "2026-06-17T01:43:41.000", "vector": "NETWORK", "vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:N", "detail": "fixed-version: Fixed from version 69.0.3497.81" }, { "id": "CVE-2018-16087", "status": "Patched", "link": "https://nvd.nist.gov/vuln/detail/CVE-2018-16087", "summary": "Lack of proper state tracking in Permissions in Google Chrome prior to 69.0.3497.81 allowed a remote attacker to bypass navigation restrictions via a crafted HTML page.", "scorev2": "4.3", "scorev3": "4.3", "scorev4": "0.0", "modified": "2026-06-17T01:43:42.000", "vector": "NETWORK", "vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:N", "detail": "fixed-version: Fixed from version 69.0.3497.81" }, { "id": "CVE-2018-16088", "status": "Patched", "link": "https://nvd.nist.gov/vuln/detail/CVE-2018-16088", "summary": "A missing check for JS-simulated input events in Blink in Google Chrome prior to 69.0.3497.81 allowed a remote attacker to download arbitrary files with no user input via a crafted HTML page.", "scorev2": "4.3", "scorev3": "6.5", "scorev4": "0.0", "modified": "2026-06-17T01:43:42.000", "vector": "NETWORK", "vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N", "detail": "fixed-version: Fixed from version 69.0.3497.81" }, { "id": "CVE-2018-17457", "status": "Patched", "link": "https://nvd.nist.gov/vuln/detail/CVE-2018-17457", "summary": "An object lifecycle issue in Blink could lead to a use after free in WebAudio in Google Chrome prior to 69.0.3497.81 allowed a remote attacker to execute arbitrary code inside a sandbox via a crafted HTML page.", "scorev2": "6.8", "scorev3": "8.8", "scorev4": "0.0", "modified": "2026-06-17T01:45:53.000", "vector": "NETWORK", "vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H", "detail": "fixed-version: Fixed from version 69.0.3497.81" }, { "id": "CVE-2018-17458", "status": "Patched", "link": "https://nvd.nist.gov/vuln/detail/CVE-2018-17458", "summary": "An improper update of the WebAssembly dispatch table in WebAssembly in Google Chrome prior to 69.0.3497.92 allowed a remote attacker to execute arbitrary code inside a sandbox via a crafted HTML page.", "scorev2": "6.8", "scorev3": "8.8", "scorev4": "0.0", "modified": "2026-06-17T01:45:53.000", "vector": "NETWORK", "vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H", "detail": "fixed-version: Fixed from version 69.0.3497.92" }, { "id": "CVE-2018-17459", "status": "Patched", "link": "https://nvd.nist.gov/vuln/detail/CVE-2018-17459", "summary": "Incorrect handling of clicks in the omnibox in Navigation in Google Chrome prior to 69.0.3497.92 allowed a remote attacker to spoof the contents of the Omnibox (URL bar) via a crafted HTML page.", "scorev2": "4.3", "scorev3": "6.5", "scorev4": "0.0", "modified": "2026-06-17T01:45:53.000", "vector": "NETWORK", "vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:N", "detail": "fixed-version: Fixed from version 69.0.3497.92" }, { "id": "CVE-2018-17460", "status": "Patched", "link": "https://nvd.nist.gov/vuln/detail/CVE-2018-17460", "summary": "Insufficient data validation in filesystem URIs in Google Chrome prior to 68.0.3440.75 allowed a remote attacker to spoof the contents of the Omnibox (URL bar) via a crafted domain name.", "scorev2": "4.3", "scorev3": "6.5", "scorev4": "0.0", "modified": "2026-06-17T01:45:53.000", "vector": "NETWORK", "vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:N", "detail": "fixed-version: Fixed from version 68.0.3440.75" }, { "id": "CVE-2018-17461", "status": "Patched", "link": "https://nvd.nist.gov/vuln/detail/CVE-2018-17461", "summary": "An out of bounds read in PDFium in Google Chrome prior to 68.0.3440.75 allowed a remote attacker to perform an out of bounds memory read via a crafted PDF file.", "scorev2": "6.8", "scorev3": "8.8", "scorev4": "0.0", "modified": "2026-06-17T01:45:53.000", "vector": "NETWORK", "vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H", "detail": "fixed-version: Fixed from version 68.0.3440.75" }, { "id": "CVE-2018-17462", "status": "Patched", "link": "https://nvd.nist.gov/vuln/detail/CVE-2018-17462", "summary": "Incorrect refcounting in AppCache in Google Chrome prior to 70.0.3538.67 allowed a remote attacker to perform a sandbox escape via a crafted HTML page.", "scorev2": "6.8", "scorev3": "9.6", "scorev4": "0.0", "modified": "2026-06-17T01:45:53.000", "vector": "NETWORK", "vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:H", "detail": "fixed-version: Fixed from version 70.0.3538.67" }, { "id": "CVE-2018-17463", "status": "Patched", "link": "https://nvd.nist.gov/vuln/detail/CVE-2018-17463", "summary": "Incorrect side effect annotation in V8 in Google Chrome prior to 70.0.3538.64 allowed a remote attacker to execute arbitrary code inside a sandbox via a crafted HTML page.", "scorev2": "6.8", "scorev3": "8.8", "scorev4": "0.0", "modified": "2026-06-17T01:45:53.000", "vector": "NETWORK", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H", "detail": "fixed-version: Fixed from version 70.0.3538.67" }, { "id": "CVE-2018-17464", "status": "Patched", "link": "https://nvd.nist.gov/vuln/detail/CVE-2018-17464", "summary": "Incorrect handling of history on iOS in Navigation in Google Chrome prior to 70.0.3538.67 allowed a remote attacker to spoof the contents of the Omnibox (URL bar) via a crafted HTML page.", "scorev2": "4.3", "scorev3": "4.3", "scorev4": "0.0", "modified": "2026-06-17T01:45:54.000", "vector": "NETWORK", "vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N", "detail": "fixed-version: Fixed from version 70.0.3538.67" }, { "id": "CVE-2018-17465", "status": "Patched", "link": "https://nvd.nist.gov/vuln/detail/CVE-2018-17465", "summary": "Incorrect implementation of object trimming in V8 in Google Chrome prior to 70.0.3538.67 allowed a remote attacker to potentially exploit object corruption via a crafted HTML page.", "scorev2": "6.8", "scorev3": "8.8", "scorev4": "0.0", "modified": "2026-06-17T01:45:54.000", "vector": "NETWORK", "vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H", "detail": "fixed-version: Fixed from version 70.0.3538.67" }, { "id": "CVE-2018-17466", "status": "Patched", "link": "https://nvd.nist.gov/vuln/detail/CVE-2018-17466", "summary": "Incorrect texture handling in Angle in Google Chrome prior to 70.0.3538.67 allowed a remote attacker to perform an out of bounds memory read via a crafted HTML page.", "scorev2": "6.8", "scorev3": "8.8", "scorev4": "0.0", "modified": "2026-06-17T01:45:54.000", "vector": "NETWORK", "vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H", "detail": "fixed-version: Fixed from version 70.0.3538.67" }, { "id": "CVE-2018-17467", "status": "Patched", "link": "https://nvd.nist.gov/vuln/detail/CVE-2018-17467", "summary": "Insufficiently quick clearing of stale rendered content in Navigation in Google Chrome prior to 70.0.3538.67 allowed a remote attacker to spoof the contents of the Omnibox (URL bar) via a crafted HTML page.", "scorev2": "4.3", "scorev3": "4.3", "scorev4": "0.0", "modified": "2026-06-17T01:45:54.000", "vector": "NETWORK", "vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N", "detail": "fixed-version: Fixed from version 70.0.3538.67" }, { "id": "CVE-2018-17468", "status": "Patched", "link": "https://nvd.nist.gov/vuln/detail/CVE-2018-17468", "summary": "Incorrect handling of timer information during navigation in Blink in Google Chrome prior to 70.0.3538.67 allowed a remote attacker to obtain cross origin URLs via a crafted HTML page.", "scorev2": "4.3", "scorev3": "6.5", "scorev4": "0.0", "modified": "2026-06-17T01:45:54.000", "vector": "NETWORK", "vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N", "detail": "fixed-version: Fixed from version 70.0.3538.67" }, { "id": "CVE-2018-17469", "status": "Patched", "link": "https://nvd.nist.gov/vuln/detail/CVE-2018-17469", "summary": "Incorrect handling of PDF filter chains in PDFium in Google Chrome prior to 70.0.3538.67 allowed a remote attacker to perform an out of bounds memory read via a crafted PDF file.", "scorev2": "6.8", "scorev3": "8.8", "scorev4": "0.0", "modified": "2026-06-17T01:45:54.000", "vector": "NETWORK", "vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H", "detail": "fixed-version: Fixed from version 70.0.3538.67" }, { "id": "CVE-2018-17470", "status": "Patched", "link": "https://nvd.nist.gov/vuln/detail/CVE-2018-17470", "summary": "A heap buffer overflow in GPU in Google Chrome prior to 70.0.3538.67 allowed a remote attacker who had compromised the renderer process to potentially perform a sandbox escape via a crafted HTML page.", "scorev2": "4.3", "scorev3": "7.4", "scorev4": "0.0", "modified": "2026-06-17T01:45:54.000", "vector": "NETWORK", "vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:N/I:N/A:H", "detail": "fixed-version: Fixed from version 70.0.3538.67" }, { "id": "CVE-2018-17471", "status": "Patched", "link": "https://nvd.nist.gov/vuln/detail/CVE-2018-17471", "summary": "Incorrect dialog placement in WebContents in Google Chrome prior to 70.0.3538.67 allowed a remote attacker to obscure the full screen warning via a crafted HTML page.", "scorev2": "4.3", "scorev3": "4.3", "scorev4": "0.0", "modified": "2026-06-17T01:45:55.000", "vector": "NETWORK", "vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N", "detail": "fixed-version: Fixed from version 70.0.3538.67" }, { "id": "CVE-2018-17472", "status": "Patched", "link": "https://nvd.nist.gov/vuln/detail/CVE-2018-17472", "summary": "Incorrect handling of googlechrome:// URL scheme on iOS in Intents in Google Chrome prior to 70.0.3538.67 allowed a remote attacker to escape the