google chrome 37.0.2062.6 vulnerabilities and exploits

(subscribe to this query)

Multiple unspecified vulnerabilities in Google Chrome prior to 37.0.2062.94 allow malicious users to cause a denial of service or possibly have other impact via unknown vectors, related to the load_truetype_glyph function in truetype/ttgload.c in FreeType and other functions in o...

Google Chrome prior to 37.0.2062.94 does not properly handle the interaction of extensions, IPC, the sync API, and Google V8, which allows remote malicious users to execute arbitrary code via unspecified vectors, a different vulnerability than CVE-2014-3177.

Google Chrome prior to 37.0.2062.94 does not properly handle the interaction of extensions, IPC, the sync API, and Google V8, which allows remote malicious users to execute arbitrary code via unspecified vectors, a different vulnerability than CVE-2014-3176.

Use-after-free vulnerability in core/dom/Node.cpp in Blink, as used in Google Chrome prior to 37.0.2062.120, allows remote malicious users to cause a denial of service or possibly have unspecified other impact by leveraging improper handling of render-tree inconsistencies.

Use-after-free vulnerability in the SVG implementation in Blink, as used in Google Chrome prior to 37.0.2062.94, allows remote malicious users to cause a denial of service or possibly have unspecified other impact by leveraging improper caching associated with animation.

Use-after-free vulnerability in core/dom/ContainerNode.cpp in the DOM implementation in Blink, as used in Google Chrome prior to 37.0.2062.94, allows remote malicious users to cause a denial of service or possibly have unspecified other impact by leveraging script execution that ...

Use-after-free vulnerability in the V8 bindings in Blink, as used in Google Chrome prior to 37.0.2062.94, allows remote malicious users to cause a denial of service or possibly have unspecified other impact by leveraging improper use of HashMap add operations instead of HashMap s...

Google Chrome prior to 37.0.2062.60 and 38.x prior to 38.0.2125.59 on iOS does not properly restrict processing of (1) facetime:// and (2) facetime-audio:// URLs, which allows remote malicious users to obtain video and audio data from a device via a crafted web site.

1 Github repository

The Debugger extension API in browser/extensions/api/debugger/debugger_api.cc in Google Chrome prior to 37.0.2062.94 does not validate a tab's URL before an attach operation, which allows remote malicious users to bypass intended access limitations via an extension that uses...

1 2 NEXT »

Vulmon Search is a vulnerability search engine. It gives comprehensive vulnerability information through a very simple user interface.

Home Recent Vulnerabilities Research Posts Trends Blog About Contact

Vulmon Search Vulmon Research Vulmon Alerts Vulmap

Twitter Reddit Linkedin Facebook