Vulmon Recent Vulnerabilities Research Posts Trends Blog About Contact

google chrome 4.1.249.1007 vulnerabilities and exploits

(subscribe to this query)
7.5
CVSSv2
CVE-2010-1500
Google Chrome prior to 4.1.249.1059 does not properly support forms, which has unknown impact and attack vectors, related to a "type confusion error."
Google Chrome 4.1.249.1014Google Chrome 4.1.249.1013Google Chrome 4.1.249.1006Google Chrome 4.1.249.1004Google Chrome 4.1.249.1026Google Chrome 4.1.249.1019Google Chrome 4.1.249.1018Google Chrome 4.1.249.1033Google Chrome 4.1.249.1036Google Chrome 4.1.249.1046Google Chrome 4.1.249.1047Google Chrome 4.1.249.1054Google Chrome 4.1.249.1055Google Chrome 4.0.303.0Google Chrome 4.0.302.3Google Chrome 4.0.295.0Google Chrome 4.0.294.0Google Chrome 4.0.286.0Google Chrome 4.0.278.0Google Chrome 4.0.269.0Google Chrome 4.0.268.0Google Chrome 4.0.260.0
9.3
CVSSv2
CVE-2010-1502
Unspecified vulnerability in Google Chrome prior to 4.1.249.1059 allows remote malicious users to access local files via vectors related to "developer tools."
Google Chrome 4.1.249.1008Google Chrome 4.1.249.1007Google Chrome 4.1.249.1027Google Chrome 4.1.249.1028Google Chrome 4.1.249.1020Google Chrome 4.1.249.1021Google Chrome 4.1.249.1034Google Chrome 4.1.249.1031Google Chrome 4.1.249.1047Google Chrome 4.1.249.1048Google Chrome 4.1.249.1049Google Chrome 4.1.249.1056Google Chrome 4.1.249.1057Google Chrome 4.0.302.2Google Chrome 4.0.302.1Google Chrome 4.0.292.0Google Chrome 4.1.249.1012Google Chrome 4.1.249.1011Google Chrome 4.1.249.1001Google Chrome 4.1.249.0Google Chrome 4.1.249.1024Google Chrome 4.1.249.1025
4.3
CVSSv2
CVE-2010-1503
Cross-site scripting (XSS) vulnerability in Google Chrome prior to 4.1.249.1059 allows remote malicious users to inject arbitrary web script or HTML via vectors related to a chrome://net-internals URI.
Google Chrome 4.1.249.1010Google Chrome 4.1.249.1009Google Chrome 4.1.249.1030Google Chrome 4.1.249.1023Google Chrome 4.1.249.1022Google Chrome 4.1.249.1015Google Chrome 4.1.249.1032Google Chrome 4.1.249.1042Google Chrome 4.1.249.1050Google Chrome 4.1.249.1051Google ChromeGoogle Chrome 4.0.244.0Google Chrome 4.0.302.0Google Chrome 4.0.301.0Google Chrome 4.1.249.1012Google Chrome 4.1.249.1011Google Chrome 4.1.249.1001Google Chrome 4.1.249.0Google Chrome 4.1.249.1024Google Chrome 4.1.249.1025Google Chrome 4.1.249.1016Google Chrome 4.1.249.1017
4.3
CVSSv2
CVE-2010-1504
Cross-site scripting (XSS) vulnerability in Google Chrome prior to 4.1.249.1059 allows remote malicious users to inject arbitrary web script or HTML via vectors related to a chrome://downloads URI.
Google Chrome 4.1.249.1012Google Chrome 4.1.249.1011Google Chrome 4.1.249.1001Google Chrome 4.1.249.0Google Chrome 4.1.249.1006Google Chrome 4.1.249.1024Google Chrome 4.1.249.1025Google Chrome 4.1.249.1016Google Chrome 4.1.249.1017Google Chrome 4.1.249.1035Google Chrome 4.1.249.1045Google Chrome 4.1.249.1036Google Chrome 4.1.249.1052Google Chrome 4.1.249.1053Google Chrome 4.0.305.0Google Chrome 4.0.304.0Google Chrome 4.0.299.0Google Chrome 4.0.296.0Google Chrome 4.0.288.0Google Chrome 4.0.287.0Google Chrome 4.0.272.0Google Chrome 4.1.249.1008
10
CVSSv2
CVE-2010-1505
Google Chrome prior to 4.1.249.1059 does not prevent pages from loading with the New Tab page's privileges, which has unknown impact and attack vectors.
Google Chrome 4.1.249.1008Google Chrome 4.1.249.1007Google Chrome 4.1.249.1028Google Chrome 4.1.249.1029Google Chrome 4.1.249.1020Google Chrome 4.1.249.1021Google Chrome 4.1.249.1034Google Chrome 4.1.249.1031Google Chrome 4.1.249.1048Google Chrome 4.1.249.1049Google Chrome 4.1.249.1056Google Chrome 4.1.249.1057Google Chrome 4.0.302.2Google Chrome 4.1.249.1012Google Chrome 4.1.249.1011Google Chrome 4.1.249.1001Google Chrome 4.1.249.0Google Chrome 4.1.249.1006Google Chrome 4.1.249.1024Google Chrome 4.1.249.1025Google Chrome 4.1.249.1016Google Chrome 4.1.249.1017
6.8
CVSSv2
CVE-2010-1767
Cross-site request forgery (CSRF) vulnerability in loader/DocumentThreadableLoader.cpp in WebCore in WebKit before r57041, as used in Google Chrome prior to 4.1.249.1059, allows remote malicious users to hijack the authentication of unspecified victims via a crafted synchronous p...
Google Chrome 4.1.249.1012Google Chrome 4.1.249.1009Google Chrome 4.1.249.1001Google Chrome 4.1.249.1030Google Chrome 4.1.249.1023Google Chrome 4.1.249.1015Google Chrome 4.1.249.1016Google Chrome 4.1.249.1042Google Chrome 4.1.249.1035Google Chrome 4.1.249.1050Google Chrome 4.1.249.1051Google Chrome 4.0.244.0Google Chrome 4.0.305.0Google Chrome 4.0.301.0Google Chrome 4.0.300.0Google Chrome 4.0.289.0Google Chrome 4.0.288.1Google Chrome 4.0.275.0Google Chrome 4.0.272.0Google Chrome 4.0.264.0Google Chrome 4.0.263.0Google Chrome 4.0.256.0
4.3
CVSSv2
CVE-2010-5069
The Cascading Style Sheets (CSS) implementation in Google Chrome 4 does not properly handle the :visited pseudo-class, which allows remote malicious users to obtain sensitive information about visited web pages via a crafted HTML document. NOTE: this may overlap CVE-2010-2264.
Google Chrome 4.0.241.0Google Chrome 4.0.240.0Google Chrome 4.0.224.0Google Chrome 4.0.223.9Google Chrome 4.0.249.60Google Chrome 4.0.239.0Google Chrome 4.0.237.0Google Chrome 4.0.223.8Google Chrome 4.0.223.7Google Chrome 4.0.222.5Google Chrome 4.0.221.8Google Chrome 4.0.249.24Google Chrome 4.0.249.25Google Chrome 4.0.249.32Google Chrome 4.0.249.33Google Chrome 4.0.249.34Google Chrome 4.0.249.1Google Chrome 4.0.248.0Google Chrome 4.0.249.19Google Chrome 4.0.249.18Google Chrome 4.0.249.57Google Chrome 4.0.249.54
5
CVSSv2
CVE-2010-5073
The JavaScript implementation in Google Chrome 4 does not properly restrict the set of values contained in the object returned by the getComputedStyle method, which allows remote malicious users to obtain sensitive information about visited web pages by calling this method. NOTE:...
Google Chrome 4.0.241.0Google Chrome 4.0.240.0Google Chrome 4.0.239.0Google Chrome 4.0.223.9Google Chrome 4.0.223.8Google Chrome 4.0.223.0Google Chrome 4.0.222.12Google Chrome 4.0.249.60Google Chrome 4.0.237.0Google Chrome 4.0.237.1Google Chrome 4.0.223.7Google Chrome 4.0.223.5Google Chrome 4.0.222.5Google Chrome 4.0.221.8Google Chrome 4.0.249.25Google Chrome 4.0.249.26Google Chrome 4.0.249.33Google Chrome 4.0.249.34Google Chrome 4.0.249.1Google Chrome 4.0.248.0Google Chrome 4.0.249.18Google Chrome 4.0.249.20
7.5
CVSSv2
CVE-2010-1234
Unspecified vulnerability in Google Chrome prior to 4.1.249.1036 allows remote malicious users to truncate the URL shown in the HTTP Basic Authentication dialog via unknown vectors.
Google Chrome 4.1.249.0Google Chrome 4.1.249.1001Google Chrome 4.1.249.1004Google Chrome 4.1.249.1006Google Chrome 4.1.249.1014Google Chrome 4.1.249.1015Google Chrome 4.1.249.1022Google Chrome 4.1.249.1023Google Chrome 4.1.249.1030Google Chrome 4.1.249.1031Google Chrome 4.0.243.0Google Chrome 4.0.242.0Google Chrome 4.0.235.0Google Chrome 4.0.229.1Google Chrome 4.0.223.1Google Chrome 4.0.223.2Google Chrome 4.0.222.0Google Chrome 4.0.212.1Google Chrome 4.0.249.21Google Chrome 4.0.249.28Google Chrome 4.0.249.29Google Chrome 4.0.245.1
4.3
CVSSv2
CVE-2010-1236
The protocolIs function in platform/KURLGoogle.cpp in WebCore in WebKit before r55822, as used in Google Chrome prior to 4.1.249.1036 and Flock Browser 3.x prior to 3.0.0.4112, does not properly handle whitespace at the beginning of a URL, which allows remote malicious users to c...
Google Chrome 4.1.249.1010Google Chrome 4.1.249.1011Google Chrome 4.1.249.1018Google Chrome 4.1.249.1019Google Chrome 4.1.249.1026Google Chrome 4.1.249.1027Google Chrome 4.1.249.1028Google ChromeGoogle Chrome 4.0.249.60Google Chrome 4.0.239.0Google Chrome 4.0.237.0Google Chrome 4.0.223.8Google Chrome 4.0.223.7Google Chrome 4.0.223.5Google Chrome 4.0.222.5Google Chrome 4.0.221.8Google Chrome 4.0.249.24Google Chrome 4.0.249.25Google Chrome 4.0.249.33Google Chrome 4.1.249.0Google Chrome 4.1.249.1001Google Chrome 4.1.249.1004
CVSSv2
CVSSv2
CVSSv3
VMScore
Recommendations:
CVE-2024-32744privilege escalationCVE-2024-30253CVE-2024-3914cross-site scriptingCVE-2024-31497CVE-2024-3400CVE-2024-32341hardcoded
Vulnerability Notification Service
You don’t have to wait for vulnerability scanning results
Get Started

Vulmon Search

Vulmon Search is a vulnerability search engine. It gives comprehensive vulnerability information through a very simple user interface.

About

Home Recent Vulnerabilities Research Posts Trends Blog About Contact

Products

Vulmon Search Vulmon Research Vulmon Alerts Vulmap

Connect

Twitter Reddit Linkedin Facebook