Vulmon Recent Vulnerabilities Research Posts Trends Blog About Contact

google chrome 35.0.1916.42 vulnerabilities and exploits

(subscribe to this query)
4.3
CVSSv2
CVE-2014-3803
The SpeechInput feature in Blink, as used in Google Chrome prior to 35.0.1916.114, allows remote malicious users to enable microphone access and obtain speech-recognition text without indication via an INPUT element with a -x-webkit-speech attribute.
Google Chrome 35.0.1916.10Google Chrome 35.0.1916.101Google Chrome 35.0.1916.109Google Chrome 35.0.1916.11Google Chrome 35.0.1916.15Google Chrome 35.0.1916.17Google Chrome 35.0.1916.27Google Chrome 35.0.1916.3Google Chrome 35.0.1916.37Google Chrome 35.0.1916.38Google Chrome 35.0.1916.103Google Chrome 35.0.1916.104Google Chrome 35.0.1916.110Google Chrome 35.0.1916.111Google Chrome 35.0.1916.18Google Chrome 35.0.1916.19Google Chrome 35.0.1916.2Google Chrome 35.0.1916.31Google Chrome 35.0.1916.32Google Chrome 35.0.1916.39Google Chrome 35.0.1916.4Google Chrome 35.0.1916.47
7.5
CVSSv2
CVE-2014-1743
Use-after-free vulnerability in the StyleElement::removedFromDocument function in core/dom/StyleElement.cpp in Blink, as used in Google Chrome prior to 35.0.1916.114, allows remote malicious users to cause a denial of service (application crash) or possibly have unspecified other...
Google ChromeGoogle Chrome 35.0.1916.99Google Chrome 35.0.1916.57Google Chrome 35.0.1916.3Google Chrome 35.0.1916.38Google Chrome 35.0.1916.105Google Chrome 35.0.1916.95Google Chrome 35.0.1916.52Google Chrome 35.0.1916.82Google Chrome 35.0.1916.42Google Chrome 35.0.1916.36Google Chrome 35.0.1916.111Google Chrome 35.0.1916.61Google Chrome 35.0.1916.98Google Chrome 35.0.1916.47Google Chrome 35.0.1916.110Google Chrome 35.0.1916.10Google Chrome 35.0.1916.20Google Chrome 35.0.1916.85Google Chrome 35.0.1916.9Google Chrome 35.0.1916.92Google Chrome 35.0.1916.23
7.5
CVSSv2
CVE-2014-1744
Integer overflow in the AudioInputRendererHost::OnCreateStream function in content/browser/renderer_host/media/audio_input_renderer_host.cc in Google Chrome prior to 35.0.1916.114 allows remote malicious users to cause a denial of service or possibly have unspecified other impact...
Google ChromeGoogle Chrome 35.0.1916.99Google Chrome 35.0.1916.57Google Chrome 35.0.1916.3Google Chrome 35.0.1916.38Google Chrome 35.0.1916.105Google Chrome 35.0.1916.95Google Chrome 35.0.1916.52Google Chrome 35.0.1916.82Google Chrome 35.0.1916.42Google Chrome 35.0.1916.36Google Chrome 35.0.1916.111Google Chrome 35.0.1916.61Google Chrome 35.0.1916.98Google Chrome 35.0.1916.47Google Chrome 35.0.1916.110Google Chrome 35.0.1916.10Google Chrome 35.0.1916.20Google Chrome 35.0.1916.85Google Chrome 35.0.1916.9Google Chrome 35.0.1916.92Google Chrome 35.0.1916.23
7.5
CVSSv2
CVE-2014-1745
Use-after-free vulnerability in the SVG implementation in Blink, as used in Google Chrome prior to 35.0.1916.114, allows remote malicious users to cause a denial of service or possibly have unspecified other impact via vectors that trigger removal of an SVGFontFaceElement object,...
Google ChromeGoogle Chrome 35.0.1916.99Google Chrome 35.0.1916.57Google Chrome 35.0.1916.3Google Chrome 35.0.1916.38Google Chrome 35.0.1916.105Google Chrome 35.0.1916.95Google Chrome 35.0.1916.52Google Chrome 35.0.1916.82Google Chrome 35.0.1916.42Google Chrome 35.0.1916.36Google Chrome 35.0.1916.111Google Chrome 35.0.1916.61Google Chrome 35.0.1916.98Google Chrome 35.0.1916.47Google Chrome 35.0.1916.110Google Chrome 35.0.1916.10Google Chrome 35.0.1916.20Google Chrome 35.0.1916.85Google Chrome 35.0.1916.9Google Chrome 35.0.1916.92Google Chrome 35.0.1916.23
5
CVSSv2
CVE-2014-1746
The InMemoryUrlProtocol::Read function in media/filters/in_memory_url_protocol.cc in Google Chrome prior to 35.0.1916.114 relies on an insufficiently large integer data type, which allows remote malicious users to cause a denial of service (out-of-bounds read) via vectors that tr...
Google ChromeGoogle Chrome 35.0.1916.99Google Chrome 35.0.1916.57Google Chrome 35.0.1916.3Google Chrome 35.0.1916.38Google Chrome 35.0.1916.105Google Chrome 35.0.1916.95Google Chrome 35.0.1916.52Google Chrome 35.0.1916.82Google Chrome 35.0.1916.42Google Chrome 35.0.1916.36Google Chrome 35.0.1916.111Google Chrome 35.0.1916.61Google Chrome 35.0.1916.98Google Chrome 35.0.1916.47Google Chrome 35.0.1916.110Google Chrome 35.0.1916.10Google Chrome 35.0.1916.20Google Chrome 35.0.1916.85Google Chrome 35.0.1916.9Google Chrome 35.0.1916.92Google Chrome 35.0.1916.23
4.3
CVSSv2
CVE-2014-1747
Cross-site scripting (XSS) vulnerability in the DocumentLoader::maybeCreateArchive function in core/loader/DocumentLoader.cpp in Blink, as used in Google Chrome prior to 35.0.1916.114, allows remote malicious users to inject arbitrary web script or HTML via crafted MHTML content,...
Google ChromeGoogle Chrome 35.0.1916.99Google Chrome 35.0.1916.57Google Chrome 35.0.1916.3Google Chrome 35.0.1916.38Google Chrome 35.0.1916.105Google Chrome 35.0.1916.95Google Chrome 35.0.1916.52Google Chrome 35.0.1916.82Google Chrome 35.0.1916.42Google Chrome 35.0.1916.36Google Chrome 35.0.1916.111Google Chrome 35.0.1916.61Google Chrome 35.0.1916.98Google Chrome 35.0.1916.47Google Chrome 35.0.1916.110Google Chrome 35.0.1916.10Google Chrome 35.0.1916.20Google Chrome 35.0.1916.85Google Chrome 35.0.1916.9Google Chrome 35.0.1916.92Google Chrome 35.0.1916.23
5
CVSSv2
CVE-2014-1748
The ScrollView::paint function in platform/scroll/ScrollView.cpp in Blink, as used in Google Chrome prior to 35.0.1916.114, allows remote malicious users to spoof the UI by extending scrollbar painting into the parent frame.
Google ChromeGoogle Chrome 35.0.1916.99Google Chrome 35.0.1916.57Google Chrome 35.0.1916.3Google Chrome 35.0.1916.38Google Chrome 35.0.1916.105Google Chrome 35.0.1916.95Google Chrome 35.0.1916.52Google Chrome 35.0.1916.82Google Chrome 35.0.1916.42Google Chrome 35.0.1916.36Google Chrome 35.0.1916.111Google Chrome 35.0.1916.61Google Chrome 35.0.1916.98Google Chrome 35.0.1916.47Google Chrome 35.0.1916.110Google Chrome 35.0.1916.10Google Chrome 35.0.1916.20Google Chrome 35.0.1916.85Google Chrome 35.0.1916.9Google Chrome 35.0.1916.92Google Chrome 35.0.1916.23
7.5
CVSSv2
CVE-2014-1749
Multiple unspecified vulnerabilities in Google Chrome prior to 35.0.1916.114 allow malicious users to cause a denial of service or possibly have other impact via unknown vectors.
Google ChromeGoogle Chrome 35.0.1916.99Google Chrome 35.0.1916.57Google Chrome 35.0.1916.3Google Chrome 35.0.1916.38Google Chrome 35.0.1916.105Google Chrome 35.0.1916.95Google Chrome 35.0.1916.52Google Chrome 35.0.1916.82Google Chrome 35.0.1916.42Google Chrome 35.0.1916.36Google Chrome 35.0.1916.111Google Chrome 35.0.1916.61Google Chrome 35.0.1916.98Google Chrome 35.0.1916.47Google Chrome 35.0.1916.110Google Chrome 35.0.1916.10Google Chrome 35.0.1916.20Google Chrome 35.0.1916.85Google Chrome 35.0.1916.9Google Chrome 35.0.1916.92Google Chrome 35.0.1916.23
5
CVSSv2
CVE-2014-3155
net/spdy/spdy_write_queue.cc in the SPDY implementation in Google Chrome prior to 35.0.1916.153 allows remote malicious users to cause a denial of service (out-of-bounds read) by leveraging incorrect queue maintenance.
Google Chrome 35.0.1916.114Google Chrome 35.0.1916.99Google Chrome 35.0.1916.57Google Chrome 35.0.1916.122Google Chrome 35.0.1916.3Google Chrome 35.0.1916.38Google Chrome 35.0.1916.105Google Chrome 35.0.1916.128Google Chrome 35.0.1916.95Google Chrome 35.0.1916.52Google Chrome 35.0.1916.82Google Chrome 35.0.1916.42Google Chrome 35.0.1916.36Google Chrome 35.0.1916.111Google Chrome 35.0.1916.124Google Chrome 35.0.1916.61Google Chrome 35.0.1916.98Google Chrome 35.0.1916.47Google Chrome 35.0.1916.110Google Chrome 35.0.1916.10Google Chrome 35.0.1916.20Google Chrome 35.0.1916.85
7.5
CVSSv2
CVE-2014-3156
Buffer overflow in the clipboard implementation in Google Chrome prior to 35.0.1916.153 allows remote malicious users to cause a denial of service or possibly have unspecified other impact via vectors that trigger unexpected bitmap data, related to content/renderer/renderer_clipb...
Google Chrome 35.0.1916.114Google Chrome 35.0.1916.99Google Chrome 35.0.1916.57Google Chrome 35.0.1916.122Google Chrome 35.0.1916.3Google Chrome 35.0.1916.38Google Chrome 35.0.1916.105Google Chrome 35.0.1916.128Google Chrome 35.0.1916.95Google Chrome 35.0.1916.52Google Chrome 35.0.1916.82Google Chrome 35.0.1916.42Google Chrome 35.0.1916.36Google Chrome 35.0.1916.111Google Chrome 35.0.1916.124Google Chrome 35.0.1916.61Google Chrome 35.0.1916.98Google Chrome 35.0.1916.47Google Chrome 35.0.1916.110Google Chrome 35.0.1916.10Google Chrome 35.0.1916.20Google Chrome 35.0.1916.85
CVSSv2
CVSSv2
CVSSv3
VMScore
Recommendations:
blind SQL injectionCVE-2006-4304CVE-2023-26603CVE-2024-28327CVE-2023-50363CVE-2024-21905template injectionCVE-2024-3400cross-site request forgery
Vulnerability Notification Service
You don’t have to wait for vulnerability scanning results
Get Started

Vulmon Search

Vulmon Search is a vulnerability search engine. It gives comprehensive vulnerability information through a very simple user interface.

About

Home Recent Vulnerabilities Research Posts Trends Blog About Contact

Products

Vulmon Search Vulmon Research Vulmon Alerts Vulmap

Connect

Twitter Reddit Linkedin Facebook