Vulmon Recent Vulnerabilities Research Posts Trends Blog About Contact

google chrome 2.0.169.1 vulnerabilities and exploits

(subscribe to this query)

4.3
CVSSv2
CVE-2009-3263
Cross-site scripting (XSS) vulnerability in Google Chrome 2.x and 3.x before 3.0.195.21 allows remote attackers to inject arbitrary web script or HTML via a (1) RSS or (2) Atom feed, related to the rendering of the application/rss+xml content type as XML "active...
Google Chrome 2.0.156.1Google Chrome 2.0.157.0Google Chrome 2.0.157.2Google Chrome 2.0.158.0Google Chrome 2.0.159.0Google Chrome 2.0.169.0Google Chrome 2.0.169.1Google Chrome 2.0.170.0Google Chrome 2.0.172Google Chrome 2.0.172.2Google Chrome 2.0.172.8Google Chrome 2.0.172.27Google Chrome 2.0.172.28Google Chrome 2.0.172.30Google Chrome 2.0.172.31Google Chrome 2.0.172.33Google Chrome 2.0.172.37Google Chrome 2.0.172.38Google Chrome 3.0.182.2Google Chrome 3.0.190.2Google Chrome 3.0.193.2
9.3
CVSSv2
CVE-2009-3932
The Gears plugin in Google Chrome before 3.0.195.32 allows user-assisted remote attackers to cause a denial of service (memory corruption and plugin crash) or possibly execute arbitrary code via unspecified use of the Gears SQL API, related to putting "SQL metadata into a...
Google Chrome 0.2.149.27Google Chrome 0.2.149.29Google Chrome 0.2.149.30Google Chrome 0.2.152.1Google Chrome 0.2.153.1Google Chrome 0.3.154.0Google Chrome 0.3.154.3Google Chrome 0.4.154.18Google Chrome 0.4.154.22Google Chrome 0.4.154.31Google Chrome 0.4.154.33Google Chrome 1.0.154.36Google Chrome 1.0.154.39Google Chrome 1.0.154.42Google Chrome 1.0.154.43Google Chrome 1.0.154.46Google Chrome 1.0.154.48Google Chrome 1.0.154.52Google Chrome 1.0.154.53Google Chrome 1.0.154.59Google Chrome 1.0.154.65Google Chrome 2.0.156.1Google Chrome 2.0.157.0Google Chrome 2.0.157.2Google Chrome 2.0.158.0Google Chrome 2.0.159.0Google Chrome 2.0.169.0Google Chrome 2.0.169.1Google Chrome 2.0.170.0Google Chrome 2.0.172Google Chrome 2.0.172.2Google Chrome 2.0.172.8Google Chrome 2.0.172.27Google Chrome 2.0.172.28Google Chrome 2.0.172.30Google Chrome 2.0.172.31Google Chrome 2.0.172.33Google Chrome 2.0.172.37Google Chrome 2.0.172.38Google Chrome 3.0.182.2Google Chrome 3.0.190.2Google Chrome 3.0.193.2Google Chrome
7.5
CVSSv2
CVE-2009-3456
Google Chrome, possibly 3.0.195.21 and earlier, does not properly handle a '\0' character in a domain name in the subject's Common Name (CN) field of an X.509 certificate, which allows man-in-the-middle attackers to spoof arbitrary SSL servers via a crafted...
Google Chrome 0.2.149.27Google Chrome 0.2.149.29Google Chrome 0.2.149.30Google Chrome 0.2.152.1Google Chrome 0.2.153.1Google Chrome 0.3.154.0Google Chrome 0.3.154.3Google Chrome 0.4.154.18Google Chrome 0.4.154.22Google Chrome 0.4.154.31Google Chrome 0.4.154.33Google Chrome 1.0.154.36Google Chrome 1.0.154.39Google Chrome 1.0.154.42Google Chrome 1.0.154.43Google Chrome 1.0.154.46Google Chrome 1.0.154.48Google Chrome 1.0.154.52Google Chrome 1.0.154.53Google Chrome 1.0.154.59Google Chrome 1.0.154.65Google Chrome 2.0.156.1Google Chrome 2.0.157.0Google Chrome 2.0.157.2Google Chrome 2.0.158.0Google Chrome 2.0.159.0Google Chrome 2.0.169.0Google Chrome 2.0.169.1Google Chrome 2.0.170.0Google Chrome 2.0.172Google Chrome 2.0.172.2Google Chrome 2.0.172.8Google Chrome 2.0.172.27Google Chrome 2.0.172.28Google Chrome 2.0.172.30Google Chrome 2.0.172.31Google Chrome 2.0.172.33Google Chrome 2.0.172.37Google Chrome 2.0.172.38Google Chrome 3.0.182.2Google Chrome 3.0.190.2Google Chrome 3.0.193.2Google Chrome
9.3
CVSSv2
CVE-2010-0655
Use-after-free vulnerability in Google Chrome before 4.0.249.78 allows user-assisted remote attackers to cause a denial of service (application crash) or possibly execute arbitrary code via vectors involving the display of a blocked popup window during navigation to a different...
Google Chrome 0.2.149.27Google Chrome 0.2.149.29Google Chrome 0.2.149.30Google Chrome 0.2.152.1Google Chrome 0.2.153.1Google Chrome 0.3.154.0Google Chrome 0.3.154.3Google Chrome 0.4.154.18Google Chrome 0.4.154.22Google Chrome 0.4.154.31Google Chrome 0.4.154.33Google Chrome 1.0.154.36Google Chrome 1.0.154.39Google Chrome 1.0.154.42Google Chrome 1.0.154.43Google Chrome 1.0.154.46Google Chrome 1.0.154.48Google Chrome 1.0.154.52Google Chrome 1.0.154.53Google Chrome 1.0.154.59Google Chrome 1.0.154.65Google Chrome 2.0.156.1Google Chrome 2.0.157.0Google Chrome 2.0.157.2Google Chrome 2.0.158.0Google Chrome 2.0.159.0Google Chrome 2.0.169.0Google Chrome 2.0.169.1Google Chrome 2.0.170.0Google Chrome 2.0.172Google Chrome 2.0.172.2Google Chrome 2.0.172.8Google Chrome 2.0.172.27Google Chrome 2.0.172.28Google Chrome 2.0.172.30Google Chrome 2.0.172.31Google Chrome 2.0.172.33Google Chrome 2.0.172.37Google Chrome 2.0.172.38Google Chrome 3.0.182.2Google Chrome 3.0.190.2Google Chrome 3.0.193.2Google Chrome 3.0.195.21Google Chrome 3.0.195.24Google Chrome 3.0.195.32Google Chrome 3.0.195.33Google Chrome
5
CVSSv2
CVE-2010-0660
Google Chrome before 4.0.249.78 sends an https URL in the Referer header of an http request in certain circumstances involving https to http redirection, which allows remote HTTP servers to obtain potentially sensitive information via standard HTTP logging....
Google Chrome 0.2.149.27Google Chrome 0.2.149.29Google Chrome 0.2.149.30Google Chrome 0.2.152.1Google Chrome 0.2.153.1Google Chrome 0.3.154.0Google Chrome 0.3.154.3Google Chrome 0.4.154.18Google Chrome 0.4.154.22Google Chrome 0.4.154.31Google Chrome 0.4.154.33Google Chrome 1.0.154.36Google Chrome 1.0.154.39Google Chrome 1.0.154.42Google Chrome 1.0.154.43Google Chrome 1.0.154.46Google Chrome 1.0.154.48Google Chrome 1.0.154.52Google Chrome 1.0.154.53Google Chrome 1.0.154.59Google Chrome 1.0.154.65Google Chrome 2.0.156.1Google Chrome 2.0.157.0Google Chrome 2.0.157.2Google Chrome 2.0.158.0Google Chrome 2.0.159.0Google Chrome 2.0.169.0Google Chrome 2.0.169.1Google Chrome 2.0.170.0Google Chrome 2.0.172Google Chrome 2.0.172.2Google Chrome 2.0.172.8Google Chrome 2.0.172.27Google Chrome 2.0.172.28Google Chrome 2.0.172.30Google Chrome 2.0.172.31Google Chrome 2.0.172.33Google Chrome 2.0.172.37Google Chrome 2.0.172.38Google Chrome 3.0.182.2Google Chrome 3.0.190.2Google Chrome 3.0.193.2Google Chrome 3.0.195.21Google Chrome 3.0.195.24Google Chrome 3.0.195.32Google Chrome 3.0.195.33Google Chrome
5
CVSSv2
CVE-2010-0662
The ParamTraits<SkBitmap>::Read function in common/common_param_traits.cc in Google Chrome before 4.0.249.78 does not use the correct variables in calculations designed to prevent integer overflows, which allows attackers to leverage renderer access to cause a denial of...
Google Chrome 0.2.149.27Google Chrome 0.2.149.29Google Chrome 0.2.149.30Google Chrome 0.2.152.1Google Chrome 0.2.153.1Google Chrome 0.3.154.0Google Chrome 0.3.154.3Google Chrome 0.4.154.18Google Chrome 0.4.154.22Google Chrome 0.4.154.31Google Chrome 0.4.154.33Google Chrome 1.0.154.36Google Chrome 1.0.154.39Google Chrome 1.0.154.42Google Chrome 1.0.154.43Google Chrome 1.0.154.46Google Chrome 1.0.154.48Google Chrome 1.0.154.52Google Chrome 1.0.154.53Google Chrome 1.0.154.59Google Chrome 1.0.154.65Google Chrome 2.0.156.1Google Chrome 2.0.157.0Google Chrome 2.0.157.2Google Chrome 2.0.158.0Google Chrome 2.0.159.0Google Chrome 2.0.169.0Google Chrome 2.0.169.1Google Chrome 2.0.170.0Google Chrome 2.0.172Google Chrome 2.0.172.2Google Chrome 2.0.172.8Google Chrome 2.0.172.27Google Chrome 2.0.172.28Google Chrome 2.0.172.30Google Chrome 2.0.172.31Google Chrome 2.0.172.33Google Chrome 2.0.172.37Google Chrome 2.0.172.38Google Chrome 3.0.182.2Google Chrome 3.0.190.2Google Chrome 3.0.193.2Google Chrome 3.0.195.21Google Chrome 3.0.195.24Google Chrome 3.0.195.32Google Chrome 3.0.195.33Google Chrome
5
CVSSv2
CVE-2010-0664
Stack consumption vulnerability in the ChildProcessSecurityPolicy::CanRequestURL function in browser/child_process_security_policy.cc in Google Chrome before 4.0.249.78 allows remote attackers to cause a denial of service (memory consumption and application crash) via a URL that...
Google Chrome 0.2.149.27Google Chrome 0.2.149.29Google Chrome 0.2.149.30Google Chrome 0.2.152.1Google Chrome 0.2.153.1Google Chrome 0.3.154.0Google Chrome 0.3.154.3Google Chrome 0.4.154.18Google Chrome 0.4.154.22Google Chrome 0.4.154.31Google Chrome 0.4.154.33Google Chrome 1.0.154.36Google Chrome 1.0.154.39Google Chrome 1.0.154.42Google Chrome 1.0.154.43Google Chrome 1.0.154.46Google Chrome 1.0.154.48Google Chrome 1.0.154.52Google Chrome 1.0.154.53Google Chrome 1.0.154.59Google Chrome 1.0.154.65Google Chrome 2.0.156.1Google Chrome 2.0.157.0Google Chrome 2.0.157.2Google Chrome 2.0.158.0Google Chrome 2.0.159.0Google Chrome 2.0.169.0Google Chrome 2.0.169.1Google Chrome 2.0.170.0Google Chrome 2.0.172Google Chrome 2.0.172.2Google Chrome 2.0.172.8Google Chrome 2.0.172.27Google Chrome 2.0.172.28Google Chrome 2.0.172.30Google Chrome 2.0.172.31Google Chrome 2.0.172.33Google Chrome 2.0.172.37Google Chrome 2.0.172.38Google Chrome 3.0.182.2Google Chrome 3.0.190.2Google Chrome 3.0.193.2Google Chrome 3.0.195.21Google Chrome 3.0.195.24Google Chrome 3.0.195.32Google Chrome 3.0.195.33Google Chrome
4.3
CVSSv2
CVE-2010-0643
Google Chrome before 4.0.249.89 attempts to make direct connections to web sites when all configured proxy servers are unavailable, which allows remote HTTP servers to obtain potentially sensitive information about the identity of a client user via standard HTTP logging, as...
Google Chrome 0.2.149.27Google Chrome 0.2.149.29Google Chrome 0.2.149.30Google Chrome 0.2.152.1Google Chrome 0.2.153.1Google Chrome 0.3.154.0Google Chrome 0.3.154.3Google Chrome 0.4.154.18Google Chrome 0.4.154.22Google Chrome 0.4.154.31Google Chrome 0.4.154.33Google Chrome 1.0.154.36Google Chrome 1.0.154.39Google Chrome 1.0.154.42Google Chrome 1.0.154.43Google Chrome 1.0.154.46Google Chrome 1.0.154.48Google Chrome 1.0.154.52Google Chrome 1.0.154.53Google Chrome 1.0.154.59Google Chrome 1.0.154.65Google Chrome 2.0.156.1Google Chrome 2.0.157.0Google Chrome 2.0.157.2Google Chrome 2.0.158.0Google Chrome 2.0.159.0Google Chrome 2.0.169.0Google Chrome 2.0.169.1Google Chrome 2.0.170.0Google Chrome 2.0.172Google Chrome 2.0.172.2Google Chrome 2.0.172.8Google Chrome 2.0.172.27Google Chrome 2.0.172.28Google Chrome 2.0.172.30Google Chrome 2.0.172.31Google Chrome 2.0.172.33Google Chrome 2.0.172.37Google Chrome 2.0.172.38Google Chrome 3.0.182.2Google Chrome 3.0.190.2Google Chrome 3.0.193.2Google Chrome 3.0.195.21Google Chrome 3.0.195.24Google Chrome 3.0.195.32Google Chrome 3.0.195.33Google Chrome
9.3
CVSSv2
CVE-2010-0657
Google Chrome before 4.0.249.78 on Windows does not perform the expected encoding, escaping, and quoting for the URL in the --app argument in a desktop shortcut, which allows user-assisted remote attackers to execute arbitrary programs or obtain sensitive information by tricking...
Google Chrome 0.2.149.27Google Chrome 0.2.149.29Google Chrome 0.2.149.30Google Chrome 0.2.152.1Google Chrome 0.2.153.1Google Chrome 0.3.154.0Google Chrome 0.3.154.3Google Chrome 0.4.154.18Google Chrome 0.4.154.22Google Chrome 0.4.154.31Google Chrome 0.4.154.33Google Chrome 1.0.154.36Google Chrome 1.0.154.39Google Chrome 1.0.154.42Google Chrome 1.0.154.43Google Chrome 1.0.154.46Google Chrome 1.0.154.48Google Chrome 1.0.154.52Google Chrome 1.0.154.53Google Chrome 1.0.154.59Google Chrome 1.0.154.65Google Chrome 2.0.156.1Google Chrome 2.0.157.0Google Chrome 2.0.157.2Google Chrome 2.0.158.0Google Chrome 2.0.159.0Google Chrome 2.0.169.0Google Chrome 2.0.169.1Google Chrome 2.0.170.0Google Chrome 2.0.172Google Chrome 2.0.172.2Google Chrome 2.0.172.8Google Chrome 2.0.172.27Google Chrome 2.0.172.28Google Chrome 2.0.172.30Google Chrome 2.0.172.31Google Chrome 2.0.172.33Google Chrome 2.0.172.37Google Chrome 2.0.172.38Google Chrome 3.0.182.2Google Chrome 3.0.190.2Google Chrome 3.0.193.2Google Chrome 3.0.195.21Google Chrome 3.0.195.24Google Chrome 3.0.195.32Google Chrome 3.0.195.33
4.3
CVSSv2
CVE-2010-0644
Google Chrome before 4.0.249.89, when a SOCKS 5 proxy server is configured, sends DNS queries directly, which allows remote DNS servers to obtain potentially sensitive information about the identity of a client user via request logging, as demonstrated by a proxy server that was...
Google Chrome 0.2.149.27Google Chrome 0.2.149.29Google Chrome 0.2.149.30Google Chrome 0.2.152.1Google Chrome 0.2.153.1Google Chrome 0.3.154.0Google Chrome 0.3.154.3Google Chrome 0.4.154.18Google Chrome 0.4.154.22Google Chrome 0.4.154.31Google Chrome 0.4.154.33Google Chrome 1.0.154.36Google Chrome 1.0.154.39Google Chrome 1.0.154.42Google Chrome 1.0.154.43Google Chrome 1.0.154.46Google Chrome 1.0.154.48Google Chrome 1.0.154.52Google Chrome 1.0.154.53Google Chrome 1.0.154.59Google Chrome 1.0.154.65Google Chrome 2.0.156.1Google Chrome 2.0.157.0Google Chrome 2.0.157.2Google Chrome 2.0.158.0Google Chrome 2.0.159.0Google Chrome 2.0.169.0Google Chrome 2.0.169.1Google Chrome 2.0.170.0Google Chrome 2.0.172Google Chrome 2.0.172.2Google Chrome 2.0.172.8Google Chrome 2.0.172.27Google Chrome 2.0.172.28Google Chrome 2.0.172.30Google Chrome 2.0.172.31Google Chrome 2.0.172.33Google Chrome 2.0.172.37Google Chrome 2.0.172.38Google Chrome 3.0.182.2Google Chrome 3.0.190.2Google Chrome 3.0.193.2Google Chrome 3.0.195.21Google Chrome 3.0.195.24Google Chrome 3.0.195.32Google Chrome 3.0.195.33Google Chrome
CVSSv2
CVSSv2
CVSSv3
VMScore
Recommendations:
denial of serviceCVE-2021-3378CVE-2021-21321CVE-2020-12530CVE-2021-22182CVE-2020-1350elevation of privilegeCVE-2021-21979physical