google chrome 37.0.2062.36 vulnerabilities and exploits

(subscribe to this query)

Google Chrome prior to 37.0.2062.60 and 38.x prior to 38.0.2125.59 on iOS does not properly restrict processing of (1) facetime:// and (2) facetime-audio:// URLs, which allows remote malicious users to obtain video and audio data from a device via a crafted web site.

1 Github repository

Google Chrome prior to 37.0.2062.94 does not properly handle the interaction of extensions, IPC, the sync API, and Google V8, which allows remote malicious users to execute arbitrary code via unspecified vectors, a different vulnerability than CVE-2014-3176.

Use-after-free vulnerability in the V8 bindings in Blink, as used in Google Chrome prior to 37.0.2062.94, allows remote malicious users to cause a denial of service or possibly have unspecified other impact by leveraging improper use of HashMap add operations instead of HashMap s...

The Debugger extension API in browser/extensions/api/debugger/debugger_api.cc in Google Chrome prior to 37.0.2062.94 does not validate a tab's URL before an attach operation, which allows remote malicious users to bypass intended access limitations via an extension that uses...

The WebGL implementation in Google Chrome prior to 37.0.2062.94 does not ensure that clear calls interact properly with the state of a draw buffer, which allows remote malicious users to cause a denial of service (read of uninitialized memory) via a crafted CANVAS element, relate...

modules/webaudio/BiquadDSPKernel.cpp in the Web Audio API implementation in Blink, as used in Google Chrome prior to 37.0.2062.94, does not properly consider concurrent threads during attempts to update biquad filter coefficients, which allows remote malicious users to cause a de...

Multiple unspecified vulnerabilities in Google Chrome prior to 37.0.2062.94 allow malicious users to cause a denial of service or possibly have other impact via unknown vectors, related to the load_truetype_glyph function in truetype/ttgload.c in FreeType and other functions in o...

Google Chrome prior to 37.0.2062.94 does not properly handle the interaction of extensions, IPC, the sync API, and Google V8, which allows remote malicious users to execute arbitrary code via unspecified vectors, a different vulnerability than CVE-2014-3177.

Use-after-free vulnerability in the SVG implementation in Blink, as used in Google Chrome prior to 37.0.2062.94, allows remote malicious users to cause a denial of service or possibly have unspecified other impact by leveraging improper caching associated with animation.

1 2 NEXT »

Vulmon Search is a vulnerability search engine. It gives comprehensive vulnerability information through a very simple user interface.

Home Recent Vulnerabilities Research Posts Trends Blog About Contact

Vulmon Search Vulmon Research Vulmon Alerts Vulmap

Twitter Reddit Linkedin Facebook