Vulmon Recent Vulnerabilities Research Posts Trends Blog About Contact

google chrome 26.0.1410.40 vulnerabilities and exploits

(subscribe to this query)
7.5
CVSSv2
CVE-2013-0925
Google Chrome prior to 26.0.1410.43 does not ensure that an extension has the tabs (aka APIPermission::kTab) permission before providing a URL to this extension, which has unspecified impact and remote attack vectors.
Google Chrome 26.0.1410.19Google Chrome 26.0.1410.37Google Chrome 26.0.1410.30Google Chrome 26.0.1410.0Google Chrome 26.0.1410.6Google Chrome 26.0.1410.26Google Chrome 26.0.1410.12Google Chrome 26.0.1410.40Google Chrome 26.0.1410.27Google Chrome 26.0.1410.16Google Chrome 26.0.1410.11Google Chrome 26.0.1410.38Google Chrome 26.0.1410.21Google Chrome 26.0.1410.17Google Chrome 26.0.1410.18Google Chrome 26.0.1410.36Google Chrome 26.0.1410.2Google Chrome 26.0.1410.35Google Chrome 26.0.1410.20Google Chrome 26.0.1410.34Google Chrome 26.0.1410.32Google Chrome 26.0.1410.3
5
CVSSv2
CVE-2013-0917
The URL loader in Google Chrome prior to 26.0.1410.43 allows remote malicious users to cause a denial of service (out-of-bounds read) via unspecified vectors.
Google Chrome 26.0.1410.19Google Chrome 26.0.1410.37Google Chrome 26.0.1410.30Google Chrome 26.0.1410.0Google Chrome 26.0.1410.6Google Chrome 26.0.1410.26Google Chrome 26.0.1410.12Google Chrome 26.0.1410.40Google Chrome 26.0.1410.27Google Chrome 26.0.1410.16Google Chrome 26.0.1410.11Google Chrome 26.0.1410.38Google Chrome 26.0.1410.21Google Chrome 26.0.1410.17Google Chrome 26.0.1410.18Google Chrome 26.0.1410.36Google Chrome 26.0.1410.2Google Chrome 26.0.1410.35Google Chrome 26.0.1410.20Google Chrome 26.0.1410.34Google Chrome 26.0.1410.32Google Chrome 26.0.1410.3
6.8
CVSSv2
CVE-2013-0918
Google Chrome prior to 26.0.1410.43 does not prevent navigation to developer tools in response to a drag-and-drop operation, which allows user-assisted remote malicious users to have an unspecified impact via a crafted web site.
Google Chrome 26.0.1410.19Google Chrome 26.0.1410.37Google Chrome 26.0.1410.30Google Chrome 26.0.1410.0Google Chrome 26.0.1410.6Google Chrome 26.0.1410.26Google Chrome 26.0.1410.12Google Chrome 26.0.1410.40Google Chrome 26.0.1410.27Google Chrome 26.0.1410.16Google Chrome 26.0.1410.11Google Chrome 26.0.1410.38Google Chrome 26.0.1410.21Google Chrome 26.0.1410.17Google Chrome 26.0.1410.18Google Chrome 26.0.1410.36Google Chrome 26.0.1410.2Google Chrome 26.0.1410.35Google Chrome 26.0.1410.20Google Chrome 26.0.1410.34Google Chrome 26.0.1410.32Google Chrome 26.0.1410.3
7.5
CVSSv2
CVE-2013-0919
Use-after-free vulnerability in Google Chrome prior to 26.0.1410.43 on Linux allows remote malicious users to cause a denial of service or possibly have unspecified other impact by leveraging the presence of an extension that creates a pop-up window.
Google ChromeGoogle Chrome 26.0.1410.0Google Chrome 26.0.1410.1Google Chrome 26.0.1410.2Google Chrome 26.0.1410.3Google Chrome 26.0.1410.4Google Chrome 26.0.1410.5Google Chrome 26.0.1410.6Google Chrome 26.0.1410.7Google Chrome 26.0.1410.8Google Chrome 26.0.1410.9Google Chrome 26.0.1410.10Google Chrome 26.0.1410.11Google Chrome 26.0.1410.12Google Chrome 26.0.1410.14Google Chrome 26.0.1410.15Google Chrome 26.0.1410.16Google Chrome 26.0.1410.17Google Chrome 26.0.1410.18Google Chrome 26.0.1410.19Google Chrome 26.0.1410.20Google Chrome 26.0.1410.21
7.5
CVSSv2
CVE-2013-0920
Use-after-free vulnerability in the extension bookmarks API in Google Chrome prior to 26.0.1410.43 allows remote malicious users to cause a denial of service or possibly have unspecified other impact via unknown vectors.
Google Chrome 26.0.1410.19Google Chrome 26.0.1410.37Google Chrome 26.0.1410.30Google Chrome 26.0.1410.0Google Chrome 26.0.1410.6Google Chrome 26.0.1410.26Google Chrome 26.0.1410.12Google Chrome 26.0.1410.40Google Chrome 26.0.1410.27Google Chrome 26.0.1410.16Google Chrome 26.0.1410.11Google Chrome 26.0.1410.38Google Chrome 26.0.1410.21Google Chrome 26.0.1410.17Google Chrome 26.0.1410.18Google Chrome 26.0.1410.36Google Chrome 26.0.1410.2Google Chrome 26.0.1410.35Google Chrome 26.0.1410.20Google Chrome 26.0.1410.34Google Chrome 26.0.1410.32Google Chrome 26.0.1410.3
6.8
CVSSv2
CVE-2013-0921
The Isolated Sites feature in Google Chrome prior to 26.0.1410.43 does not properly enforce the use of separate processes, which makes it easier for remote malicious users to bypass intended access restrictions via a crafted web site.
Google Chrome 26.0.1410.19Google Chrome 26.0.1410.37Google Chrome 26.0.1410.30Google Chrome 26.0.1410.0Google Chrome 26.0.1410.6Google Chrome 26.0.1410.26Google Chrome 26.0.1410.12Google Chrome 26.0.1410.40Google Chrome 26.0.1410.27Google Chrome 26.0.1410.16Google Chrome 26.0.1410.11Google Chrome 26.0.1410.38Google Chrome 26.0.1410.21Google Chrome 26.0.1410.17Google Chrome 26.0.1410.18Google Chrome 26.0.1410.36Google Chrome 26.0.1410.2Google Chrome 26.0.1410.35Google Chrome 26.0.1410.20Google Chrome 26.0.1410.34Google Chrome 26.0.1410.32Google Chrome 26.0.1410.3
7.5
CVSSv2
CVE-2013-0922
Google Chrome prior to 26.0.1410.43 does not properly restrict brute-force access attempts against web sites that require HTTP Basic Authentication, which has unspecified impact and attack vectors.
Google Chrome 26.0.1410.19Google Chrome 26.0.1410.37Google Chrome 26.0.1410.30Google Chrome 26.0.1410.0Google Chrome 26.0.1410.6Google Chrome 26.0.1410.26Google Chrome 26.0.1410.12Google Chrome 26.0.1410.40Google Chrome 26.0.1410.27Google Chrome 26.0.1410.16Google Chrome 26.0.1410.11Google Chrome 26.0.1410.38Google Chrome 26.0.1410.21Google Chrome 26.0.1410.17Google Chrome 26.0.1410.18Google Chrome 26.0.1410.36Google Chrome 26.0.1410.2Google Chrome 26.0.1410.35Google Chrome 26.0.1410.20Google Chrome 26.0.1410.34Google Chrome 26.0.1410.32Google Chrome 26.0.1410.3
5
CVSSv2
CVE-2013-0923
The USB Apps API in Google Chrome prior to 26.0.1410.43 allows remote malicious users to cause a denial of service (memory corruption) via unspecified vectors.
Google Chrome 26.0.1410.19Google Chrome 26.0.1410.37Google Chrome 26.0.1410.30Google Chrome 26.0.1410.0Google Chrome 26.0.1410.6Google Chrome 26.0.1410.26Google Chrome 26.0.1410.12Google Chrome 26.0.1410.40Google Chrome 26.0.1410.27Google Chrome 26.0.1410.16Google Chrome 26.0.1410.11Google Chrome 26.0.1410.38Google Chrome 26.0.1410.21Google Chrome 26.0.1410.17Google Chrome 26.0.1410.18Google Chrome 26.0.1410.36Google Chrome 26.0.1410.2Google Chrome 26.0.1410.35Google Chrome 26.0.1410.20Google Chrome 26.0.1410.34Google Chrome 26.0.1410.32Google Chrome 26.0.1410.3
7.5
CVSSv2
CVE-2013-0924
The extension functionality in Google Chrome prior to 26.0.1410.43 does not verify that use of the permissions API is consistent with file permissions, which has unspecified impact and attack vectors.
Google Chrome 26.0.1410.19Google Chrome 26.0.1410.37Google Chrome 26.0.1410.30Google Chrome 26.0.1410.0Google Chrome 26.0.1410.6Google Chrome 26.0.1410.26Google Chrome 26.0.1410.12Google Chrome 26.0.1410.40Google Chrome 26.0.1410.27Google Chrome 26.0.1410.16Google Chrome 26.0.1410.11Google Chrome 26.0.1410.38Google Chrome 26.0.1410.21Google Chrome 26.0.1410.17Google Chrome 26.0.1410.18Google Chrome 26.0.1410.36Google Chrome 26.0.1410.2Google Chrome 26.0.1410.35Google Chrome 26.0.1410.20Google Chrome 26.0.1410.34Google Chrome 26.0.1410.32Google Chrome 26.0.1410.3
6.8
CVSSv2
CVE-2013-0926
Google Chrome prior to 26.0.1410.43 does not properly handle active content in an EMBED element during a copy-and-paste operation, which allows user-assisted remote malicious users to have an unspecified impact via a crafted web site.
Google Chrome 26.0.1410.19Google Chrome 26.0.1410.37Google Chrome 26.0.1410.30Google Chrome 26.0.1410.0Google Chrome 26.0.1410.6Google Chrome 26.0.1410.26Google Chrome 26.0.1410.12Google Chrome 26.0.1410.40Google Chrome 26.0.1410.27Google Chrome 26.0.1410.16Google Chrome 26.0.1410.11Google Chrome 26.0.1410.38Google Chrome 26.0.1410.21Google Chrome 26.0.1410.17Google Chrome 26.0.1410.18Google Chrome 26.0.1410.36Google Chrome 26.0.1410.2Google Chrome 26.0.1410.35Google Chrome 26.0.1410.20Google Chrome 26.0.1410.34Google Chrome 26.0.1410.32Google Chrome 26.0.1410.3
CVSSv2
CVSSv2
CVSSv3
VMScore
Recommendations:
authentication bypassCVE-2024-30051remoteCVE-2024-27954CVE-2023-51483CVE-2023-47782SSRFCVE-2024-24715CVE-2023-52424
Vulnerability Notification Service
You don’t have to wait for vulnerability scanning results
Get Started

Vulmon Search

Vulmon Search is a vulnerability search engine. It gives comprehensive vulnerability information through a very simple user interface.

About

Home Recent Vulnerabilities Research Posts Trends Blog About Contact

Products

Vulmon Search Vulmon Research Vulmon Alerts Vulmap

Connect

Twitter Reddit Linkedin Facebook