Vulmon Recent Vulnerabilities Product List Research Posts Trends Blog About Contact

google chrome 0.2.149.30 vulnerabilities and exploits

(subscribe to this query)
530
VMScore

CVE-2008-4340

Google Chrome 0.2.149.29 and 0.2.149.30 allows remote malicious users to cause a denial of service (memory consumption) via an HTML document containing a carriage return ("\r\n\r\n") argument to the window.open function.
Google Chrome 0.2.149.29Google Chrome 0.2.149.30
530
VMScore

CVE-2008-4724

Multiple cross-site scripting (XSS) vulnerabilities in Google Chrome 0.2.149.30 allow remote malicious users to inject arbitrary web script or HTML via an ftp:// URL for an HTML document within a (1) JPG, (2) PDF, or (3) TXT file. NOTE: the provenance of this information is unkno...
Google Chrome 0.2.149.30
880
VMScore

CVE-2009-1412

Argument injection vulnerability in the chromehtml: protocol handler in Google Chrome prior to 1.0.154.59, when invoked by Internet Explorer, allows remote malicious users to determine the existence of files, and open tabs for URLs that do not satisfy the IsWebSafeScheme restrict...
Google ChromeGoogle Chrome 0.2.149.29Google Chrome 0.2.149.30Google Chrome 0.2.152.1Google Chrome 0.2.153.1Google Chrome 0.3.154.0Google Chrome 0.3.154.3Google Chrome 0.4.154.18Google Chrome 0.4.154.22Google Chrome 0.4.154.31Google Chrome 0.4.154.33Google Chrome 1.0.154.36
680
VMScore

CVE-2009-2060

src/net/http/http_transaction_winhttp.cc in Google Chrome prior to 1.0.154.53 uses the HTTP Host header to determine the context of a document provided in a (1) 4xx or (2) 5xx CONNECT response from a proxy server, which allows man-in-the-middle malicious users to execute arbitrar...
Google ChromeGoogle Chrome 0.2.149.29Google Chrome 0.2.149.30Google Chrome 0.2.152.1Google Chrome 0.2.153.1Google Chrome 0.3.154.0Google Chrome 0.3.154.3Google Chrome 0.4.154.18Google Chrome 0.4.154.22Google Chrome 0.4.154.31Google Chrome 0.4.154.33Google Chrome 1.0.154.36
780
VMScore

CVE-2009-2071

Google Chrome prior to 1.0.154.53 displays a cached certificate for a (1) 4xx or (2) 5xx CONNECT response page returned by a proxy server, which allows man-in-the-middle malicious users to spoof an arbitrary https site by letting a browser obtain a valid certificate from this sit...
Google ChromeGoogle Chrome 0.2.149.29Google Chrome 0.2.149.30Google Chrome 0.2.152.1Google Chrome 0.2.153.1Google Chrome 0.3.154.0Google Chrome 0.3.154.3Google Chrome 0.4.154.18Google Chrome 0.4.154.22Google Chrome 0.4.154.31Google Chrome 0.4.154.33Google Chrome 1.0.154.36
530
VMScore

CVE-2009-2352

Google Chrome 1.0.154.48 and previous versions does not block javascript: URIs in Refresh headers in HTTP responses, which allows remote malicious users to conduct cross-site scripting (XSS) attacks via vectors related to (1) injecting a Refresh header or (2) specifying the conte...
Google ChromeGoogle Chrome 0.2.149.29Google Chrome 0.2.149.30Google Chrome 0.2.152.1Google Chrome 0.2.153.1Google Chrome 0.3.154.0Google Chrome 0.3.154.3Google Chrome 0.4.154.18Google Chrome 0.4.154.22Google Chrome 0.4.154.31Google Chrome 0.4.154.33Google Chrome 1.0.154.36
600
VMScore

CVE-2009-3268

Google Chrome 1.0.154.48 and previous versions allows remote malicious users to cause a denial of service (CPU consumption) via an automatically submitted form containing a KEYGEN element, a related issue to CVE-2009-1828.
Google ChromeGoogle Chrome 0.2.149.27Google Chrome 0.2.149.29Google Chrome 0.2.149.30Google Chrome 0.2.152.1Google Chrome 0.2.153.1Google Chrome 0.3.154.0Google Chrome 0.3.154.3Google Chrome 0.4.154.18Google Chrome 0.4.154.22Google Chrome 0.4.154.31Google Chrome 0.4.154.33
1000
VMScore

CVE-2009-1441

Heap-based buffer overflow in the ParamTraits<SkBitmap>::Read function in Google Chrome prior to 1.0.154.64 allows malicious users to leverage renderer access to cause a denial of service (application crash) or possibly execute arbitrary code via vectors related to a large ...
Google ChromeGoogle Chrome 0.2.149.29Google Chrome 0.2.149.30Google Chrome 0.2.152.1Google Chrome 0.2.153.1Google Chrome 0.3.154.0Google Chrome 0.3.154.3Google Chrome 0.4.154.18Google Chrome 0.4.154.22Google Chrome 0.4.154.31Google Chrome 0.4.154.33Google Chrome 1.0.154.36
600
VMScore

CVE-2009-2955

Google Chrome 1.0.154.48 and previous versions allows remote malicious users to cause a denial of service (CPU consumption and application hang) via JavaScript code with a long string value for the hash property (aka location.hash), a related issue to CVE-2008-5715.
Google ChromeGoogle Chrome 0.2.149.27Google Chrome 0.2.149.29Google Chrome 0.2.149.30Google Chrome 0.2.152.1Google Chrome 0.2.153.1Google Chrome 0.3.154.0Google Chrome 0.3.154.3Google Chrome 0.4.154.18Google Chrome 0.4.154.22Google Chrome 0.4.154.31Google Chrome 0.4.154.33
530
VMScore

CVE-2009-3011

Google Chrome 1.0.154.48 and previous versions, 2.0.172.28, 2.0.172.37, and 3.0.193.2 Beta does not properly block data: URIs in Refresh headers in HTTP responses, which allows remote malicious users to conduct cross-site scripting (XSS) attacks via vectors related to (1) injecti...
Google ChromeGoogle Chrome 0.2.149.27Google Chrome 0.2.149.29Google Chrome 0.2.149.30Google Chrome 0.2.152.1Google Chrome 0.2.153.1Google Chrome 0.3.154.0Google Chrome 0.3.154.3Google Chrome 0.4.154.18Google Chrome 0.4.154.22Google Chrome 0.4.154.31Google Chrome 0.4.154.33
Preferred Score:
VMScore
CVSSv2
CVSSv3
CVSSv4
EPSS
VMScore
Recommendations:
physicalpicture galleryCVE-2025-30352administrator privilegesgdpr toolsCVE-2025-26007CVE-2025-24514CVE-2025-26581CVE-2025-1098wp multistore locatorCVE-2025-26986nous ouvert utile et simplecommand injection
Home
/
Search Results
Vulmon Logo Vulnerability Notification Service
You don’t have to wait for vulnerability scanning results
Get Started

Vulmon Search

Vulmon Search is a vulnerability search engine. It gives comprehensive vulnerability information through a very simple user interface.

About

Home Recent Vulnerabilities Product List Vendor List Research Posts Trends Blog About Contact

Products

Vulmon Search Vulmon Research Vulmon Alerts Vulmap

Connect

Twitter Reddit Linkedin Facebook