Vulmon Recent Vulnerabilities Research Posts Trends Blog About Contact

google chrome 33.0.1750.34 vulnerabilities and exploits

(subscribe to this query)
668
VMScore
CVE-2013-6653
Use-after-free vulnerability in the web contents implementation in Google Chrome prior to 33.0.1750.117 allows remote malicious users to cause a denial of service or possibly have unspecified other impact via vectors involving attempted conflicting access to the color chooser.
Google Chrome 33.0.1750.109Google Chrome 33.0.1750.108Google Chrome 33.0.1750.90Google Chrome 33.0.1750.89Google Chrome 33.0.1750.79Google Chrome 33.0.1750.77Google Chrome 33.0.1750.76Google Chrome 33.0.1750.68Google Chrome 33.0.1750.67Google Chrome 33.0.1750.60Google Chrome 33.0.1750.59Google Chrome 33.0.1750.51Google Chrome 33.0.1750.50Google Chrome 33.0.1750.43Google Chrome 33.0.1750.42Google Chrome 33.0.1750.35Google Chrome 33.0.1750.34Google Chrome 33.0.1750.24Google Chrome 33.0.1750.23Google Chrome 33.0.1750.15Google Chrome 33.0.1750.14Google Chrome 33.0.1750.7
668
VMScore
CVE-2013-6654
The SVGAnimateElement::calculateAnimatedValue function in core/svg/SVGAnimateElement.cpp in Blink, as used in Google Chrome prior to 33.0.1750.117, does not properly handle unexpected data types, which allows remote malicious users to cause a denial of service (incorrect cast) or...
Google ChromeGoogle Chrome 33.0.1750.113Google Chrome 33.0.1750.112Google Chrome 33.0.1750.104Google Chrome 33.0.1750.93Google Chrome 33.0.1750.83Google Chrome 33.0.1750.82Google Chrome 33.0.1750.81Google Chrome 33.0.1750.73Google Chrome 33.0.1750.71Google Chrome 33.0.1750.64Google Chrome 33.0.1750.63Google Chrome 33.0.1750.55Google Chrome 33.0.1750.54Google Chrome 33.0.1750.47Google Chrome 33.0.1750.46Google Chrome 33.0.1750.39Google Chrome 33.0.1750.38Google Chrome 33.0.1750.28Google Chrome 33.0.1750.27Google Chrome 33.0.1750.115Google Chrome 33.0.1750.107
668
VMScore
CVE-2013-6652
Directory traversal vulnerability in sandbox/win/src/named_pipe_dispatcher.cc in Google Chrome prior to 33.0.1750.117 on Windows allows malicious users to bypass intended named-pipe policy restrictions in the sandbox via vectors related to (1) lack of checks for .. (dot dot) sequ...
Google Chrome 33.0.1750.111Google Chrome 33.0.1750.110Google Chrome 33.0.1750.109Google Chrome 33.0.1750.108Google Chrome 33.0.1750.107Google Chrome 33.0.1750.80Google Chrome 33.0.1750.79Google Chrome 33.0.1750.77Google Chrome 33.0.1750.76Google Chrome 33.0.1750.61Google Chrome 33.0.1750.60Google Chrome 33.0.1750.59Google Chrome 33.0.1750.58Google Chrome 33.0.1750.44Google Chrome 33.0.1750.43Google Chrome 33.0.1750.42Google Chrome 33.0.1750.41Google Chrome 33.0.1750.26Google Chrome 33.0.1750.25Google Chrome 33.0.1750.24Google Chrome 33.0.1750.23Google Chrome 33.0.1750.8
668
VMScore
CVE-2013-6655
Use-after-free vulnerability in Blink, as used in Google Chrome prior to 33.0.1750.117, allows remote malicious users to cause a denial of service or possibly have unspecified other impact via vectors related to improper handling of overflowchanged DOM events during interaction b...
Google ChromeGoogle Chrome 33.0.1750.108Google Chrome 33.0.1750.107Google Chrome 33.0.1750.88Google Chrome 33.0.1750.85Google Chrome 33.0.1750.76Google Chrome 33.0.1750.75Google Chrome 33.0.1750.67Google Chrome 33.0.1750.66Google Chrome 33.0.1750.58Google Chrome 33.0.1750.57Google Chrome 33.0.1750.50Google Chrome 33.0.1750.49Google Chrome 33.0.1750.42Google Chrome 33.0.1750.41Google Chrome 33.0.1750.115Google Chrome 33.0.1750.113Google Chrome 33.0.1750.106Google Chrome 33.0.1750.104Google Chrome 33.0.1750.83Google Chrome 33.0.1750.82Google Chrome 33.0.1750.74
445
VMScore
CVE-2013-6656
The XSSAuditor::init function in core/html/parser/XSSAuditor.cpp in the XSS auditor in Blink, as used in Google Chrome prior to 33.0.1750.117, processes POST requests by using the body of a redirecting page instead of the body of a redirect target, which allows remote malicious u...
Google Chrome 33.0.1750.113Google Chrome 33.0.1750.112Google Chrome 33.0.1750.104Google Chrome 33.0.1750.93Google Chrome 33.0.1750.83Google Chrome 33.0.1750.82Google Chrome 33.0.1750.73Google Chrome 33.0.1750.71Google Chrome 33.0.1750.64Google Chrome 33.0.1750.63Google Chrome 33.0.1750.56Google Chrome 33.0.1750.55Google Chrome 33.0.1750.47Google Chrome 33.0.1750.46Google Chrome 33.0.1750.39Google Chrome 33.0.1750.38Google Chrome 33.0.1750.29Google Chrome 33.0.1750.28Google Chrome 33.0.1750.27Google Chrome 33.0.1750.20Google Chrome 33.0.1750.19Google Chrome 33.0.1750.11
570
VMScore
CVE-2013-6657
core/html/parser/XSSAuditor.cpp in the XSS auditor in Blink, as used in Google Chrome prior to 33.0.1750.117, inserts the about:blank URL during certain blocking of FORM elements within HTTP requests, which allows remote malicious users to bypass the Same Origin Policy and obtain...
Google Chrome 33.0.1750.111Google Chrome 33.0.1750.110Google Chrome 33.0.1750.109Google Chrome 33.0.1750.91Google Chrome 33.0.1750.90Google Chrome 33.0.1750.80Google Chrome 33.0.1750.79Google Chrome 33.0.1750.69Google Chrome 33.0.1750.68Google Chrome 33.0.1750.61Google Chrome 33.0.1750.60Google Chrome 33.0.1750.113Google Chrome 33.0.1750.112Google Chrome 33.0.1750.93Google Chrome 33.0.1750.92Google Chrome 33.0.1750.82Google Chrome 33.0.1750.81Google Chrome 33.0.1750.73Google Chrome 33.0.1750.71Google Chrome 33.0.1750.70Google Chrome 33.0.1750.63Google Chrome 33.0.1750.62
668
VMScore
CVE-2013-6658
Multiple use-after-free vulnerabilities in the layout implementation in Blink, as used in Google Chrome prior to 33.0.1750.117, allow remote malicious users to cause a denial of service or possibly have unspecified other impact via vectors involving (1) running JavaScript code du...
Google Chrome 33.0.1750.110Google Chrome 33.0.1750.109Google Chrome 33.0.1750.91Google Chrome 33.0.1750.90Google Chrome 33.0.1750.79Google Chrome 33.0.1750.77Google Chrome 33.0.1750.69Google Chrome 33.0.1750.68Google Chrome 33.0.1750.61Google Chrome 33.0.1750.60Google Chrome 33.0.1750.52Google Chrome 33.0.1750.51Google Chrome 33.0.1750.44Google Chrome 33.0.1750.43Google Chrome 33.0.1750.36Google Chrome 33.0.1750.35Google Chrome 33.0.1750.34Google Chrome 33.0.1750.25Google Chrome 33.0.1750.24Google Chrome 33.0.1750.16Google Chrome 33.0.1750.15Google Chrome 33.0.1750.8
570
VMScore
CVE-2013-6659
The SSLClientSocketNSS::Core::OwnAuthCertHandler function in net/socket/ssl_client_socket_nss.cc in Google Chrome prior to 33.0.1750.117 does not prevent changes to server X.509 certificates during renegotiations, which allows remote SSL servers to trigger use of a new certificat...
Google Chrome 33.0.1750.109Google Chrome 33.0.1750.108Google Chrome 33.0.1750.90Google Chrome 33.0.1750.89Google Chrome 33.0.1750.77Google Chrome 33.0.1750.76Google Chrome 33.0.1750.68Google Chrome 33.0.1750.67Google Chrome 33.0.1750.60Google Chrome 33.0.1750.59Google Chrome 33.0.1750.51Google Chrome 33.0.1750.50Google Chrome 33.0.1750.43Google Chrome 33.0.1750.42Google Chrome 33.0.1750.35Google Chrome 33.0.1750.34Google Chrome 33.0.1750.31Google Chrome 33.0.1750.24Google Chrome 33.0.1750.23Google Chrome 33.0.1750.15Google Chrome 33.0.1750.14Google Chrome 33.0.1750.6
445
VMScore
CVE-2013-6660
The drag-and-drop implementation in Google Chrome prior to 33.0.1750.117 does not properly restrict the information in WebDropData data structures, which allows remote malicious users to discover full pathnames via a crafted web site.
Google Chrome 33.0.1750.111Google Chrome 33.0.1750.110Google Chrome 33.0.1750.92Google Chrome 33.0.1750.91Google Chrome 33.0.1750.80Google Chrome 33.0.1750.79Google Chrome 33.0.1750.70Google Chrome 33.0.1750.69Google Chrome 33.0.1750.62Google Chrome 33.0.1750.61Google Chrome 33.0.1750.53Google Chrome 33.0.1750.52Google Chrome 33.0.1750.45Google Chrome 33.0.1750.44Google Chrome 33.0.1750.37Google Chrome 33.0.1750.36Google Chrome 33.0.1750.26Google Chrome 33.0.1750.113Google Chrome 33.0.1750.112Google Chrome 33.0.1750.104Google Chrome 33.0.1750.93Google Chrome 33.0.1750.82
668
VMScore
CVE-2013-6661
Multiple unspecified vulnerabilities in Google Chrome prior to 33.0.1750.117 allow malicious users to bypass the sandbox protection mechanism after obtaining renderer access, or have other impact, via unknown vectors.
Google Chrome 33.0.1750.111Google Chrome 33.0.1750.110Google Chrome 33.0.1750.92Google Chrome 33.0.1750.91Google Chrome 33.0.1750.90Google Chrome 33.0.1750.80Google Chrome 33.0.1750.79Google Chrome 33.0.1750.70Google Chrome 33.0.1750.69Google Chrome 33.0.1750.62Google Chrome 33.0.1750.61Google Chrome 33.0.1750.60Google Chrome 33.0.1750.109Google Chrome 33.0.1750.108Google Chrome 33.0.1750.89Google Chrome 33.0.1750.88Google Chrome 33.0.1750.77Google Chrome 33.0.1750.76Google Chrome 33.0.1750.68Google Chrome 33.0.1750.67Google Chrome 33.0.1750.59Google Chrome 33.0.1750.58
VMScore
CVSSv2
CVSSv3
VMScore
Recommendations:
CVE-2024-27322cross-site request forgeryunauthorizedCVE-2024-33925reflected XSSCVE-2023-51580CVE-2023-51579CVE-2015-2051CVE-2023-51609
Vulnerability Notification Service
You don’t have to wait for vulnerability scanning results
Get Started

Vulmon Search

Vulmon Search is a vulnerability search engine. It gives comprehensive vulnerability information through a very simple user interface.

About

Home Recent Vulnerabilities Research Posts Trends Blog About Contact

Products

Vulmon Search Vulmon Research Vulmon Alerts Vulmap

Connect

Twitter Reddit Linkedin Facebook