Vulmon Recent Vulnerabilities Product List Research Posts Trends Blog About Contact

google chrome 33.0.1750.18 vulnerabilities and exploits

(subscribe to this query)
7.5
CVSSv2

CVE-2013-6652

Directory traversal vulnerability in sandbox/win/src/named_pipe_dispatcher.cc in Google Chrome prior to 33.0.1750.117 on Windows allows malicious users to bypass intended named-pipe policy restrictions in the sandbox via vectors related to (1) lack of checks for .. (dot dot) sequ...
Google ChromeGoogle Chrome 33.0.1750.0Google Chrome 33.0.1750.1Google Chrome 33.0.1750.2Google Chrome 33.0.1750.3Google Chrome 33.0.1750.4Google Chrome 33.0.1750.5Google Chrome 33.0.1750.6Google Chrome 33.0.1750.7Google Chrome 33.0.1750.8Google Chrome 33.0.1750.9Google Chrome 33.0.1750.10Google Chrome 33.0.1750.11Google Chrome 33.0.1750.12Google Chrome 33.0.1750.13Google Chrome 33.0.1750.14Google Chrome 33.0.1750.15Google Chrome 33.0.1750.16Google Chrome 33.0.1750.18Google Chrome 33.0.1750.19Google Chrome 33.0.1750.20Google Chrome 33.0.1750.21
7.5
CVSSv2

CVE-2013-6653

Use-after-free vulnerability in the web contents implementation in Google Chrome prior to 33.0.1750.117 allows remote malicious users to cause a denial of service or possibly have unspecified other impact via vectors involving attempted conflicting access to the color chooser.
Google Chrome 33.0.1750.1Google Chrome 33.0.1750.89Google Chrome 33.0.1750.51Google Chrome 33.0.1750.44Google Chrome 33.0.1750.39Google Chrome 33.0.1750.73Google Chrome 33.0.1750.70Google Chrome 33.0.1750.22Google Chrome 33.0.1750.41Google Chrome 33.0.1750.66Google Chrome 33.0.1750.12Google Chrome 33.0.1750.92Google Chrome 33.0.1750.16Google Chrome 33.0.1750.65Google Chrome 33.0.1750.46Google Chrome 33.0.1750.85Google Chrome 33.0.1750.79Google Chrome 33.0.1750.106Google Chrome 33.0.1750.52Google Chrome 33.0.1750.38Google Chrome 33.0.1750.88Google Chrome 33.0.1750.93
7.5
CVSSv2

CVE-2013-6654

The SVGAnimateElement::calculateAnimatedValue function in core/svg/SVGAnimateElement.cpp in Blink, as used in Google Chrome prior to 33.0.1750.117, does not properly handle unexpected data types, which allows remote malicious users to cause a denial of service (incorrect cast) or...
Google Chrome 33.0.1750.1Google Chrome 33.0.1750.89Google Chrome 33.0.1750.51Google Chrome 33.0.1750.44Google Chrome 33.0.1750.39Google Chrome 33.0.1750.73Google Chrome 33.0.1750.70Google Chrome 33.0.1750.22Google Chrome 33.0.1750.41Google Chrome 33.0.1750.66Google Chrome 33.0.1750.12Google Chrome 33.0.1750.92Google Chrome 33.0.1750.16Google Chrome 33.0.1750.65Google Chrome 33.0.1750.46Google Chrome 33.0.1750.85Google Chrome 33.0.1750.79Google Chrome 33.0.1750.106Google Chrome 33.0.1750.52Google Chrome 33.0.1750.38Google Chrome 33.0.1750.88Google Chrome 33.0.1750.93
7.5
CVSSv2

CVE-2013-6655

Use-after-free vulnerability in Blink, as used in Google Chrome prior to 33.0.1750.117, allows remote malicious users to cause a denial of service or possibly have unspecified other impact via vectors related to improper handling of overflowchanged DOM events during interaction b...
Google Chrome 33.0.1750.1Google Chrome 33.0.1750.89Google Chrome 33.0.1750.51Google Chrome 33.0.1750.44Google Chrome 33.0.1750.39Google Chrome 33.0.1750.73Google Chrome 33.0.1750.70Google Chrome 33.0.1750.22Google Chrome 33.0.1750.41Google Chrome 33.0.1750.66Google Chrome 33.0.1750.12Google Chrome 33.0.1750.92Google Chrome 33.0.1750.16Google Chrome 33.0.1750.65Google Chrome 33.0.1750.46Google Chrome 33.0.1750.85Google Chrome 33.0.1750.79Google Chrome 33.0.1750.106Google Chrome 33.0.1750.52Google Chrome 33.0.1750.38Google Chrome 33.0.1750.88Google Chrome 33.0.1750.93
5
CVSSv2

CVE-2013-6656

The XSSAuditor::init function in core/html/parser/XSSAuditor.cpp in the XSS auditor in Blink, as used in Google Chrome prior to 33.0.1750.117, processes POST requests by using the body of a redirecting page instead of the body of a redirect target, which allows remote malicious u...
Google Chrome 33.0.1750.1Google Chrome 33.0.1750.89Google Chrome 33.0.1750.51Google Chrome 33.0.1750.44Google Chrome 33.0.1750.39Google Chrome 33.0.1750.73Google Chrome 33.0.1750.70Google Chrome 33.0.1750.22Google Chrome 33.0.1750.41Google Chrome 33.0.1750.66Google Chrome 33.0.1750.12Google Chrome 33.0.1750.92Google Chrome 33.0.1750.16Google Chrome 33.0.1750.65Google Chrome 33.0.1750.46Google Chrome 33.0.1750.85Google Chrome 33.0.1750.79Google Chrome 33.0.1750.106Google Chrome 33.0.1750.52Google Chrome 33.0.1750.38Google Chrome 33.0.1750.88Google Chrome 33.0.1750.93
6.4
CVSSv2

CVE-2013-6657

core/html/parser/XSSAuditor.cpp in the XSS auditor in Blink, as used in Google Chrome prior to 33.0.1750.117, inserts the about:blank URL during certain blocking of FORM elements within HTTP requests, which allows remote malicious users to bypass the Same Origin Policy and obtain...
Google Chrome 33.0.1750.1Google Chrome 33.0.1750.89Google Chrome 33.0.1750.51Google Chrome 33.0.1750.44Google Chrome 33.0.1750.39Google Chrome 33.0.1750.73Google Chrome 33.0.1750.70Google Chrome 33.0.1750.22Google Chrome 33.0.1750.41Google Chrome 33.0.1750.66Google Chrome 33.0.1750.12Google Chrome 33.0.1750.92Google Chrome 33.0.1750.16Google Chrome 33.0.1750.65Google Chrome 33.0.1750.46Google Chrome 33.0.1750.85Google Chrome 33.0.1750.79Google Chrome 33.0.1750.106Google Chrome 33.0.1750.52Google Chrome 33.0.1750.38Google Chrome 33.0.1750.88Google Chrome 33.0.1750.93
7.5
CVSSv2

CVE-2013-6658

Multiple use-after-free vulnerabilities in the layout implementation in Blink, as used in Google Chrome prior to 33.0.1750.117, allow remote malicious users to cause a denial of service or possibly have unspecified other impact via vectors involving (1) running JavaScript code du...
Google Chrome 33.0.1750.1Google Chrome 33.0.1750.89Google Chrome 33.0.1750.51Google Chrome 33.0.1750.44Google Chrome 33.0.1750.39Google Chrome 33.0.1750.73Google Chrome 33.0.1750.70Google Chrome 33.0.1750.22Google Chrome 33.0.1750.41Google Chrome 33.0.1750.66Google Chrome 33.0.1750.12Google Chrome 33.0.1750.92Google Chrome 33.0.1750.16Google Chrome 33.0.1750.65Google Chrome 33.0.1750.46Google Chrome 33.0.1750.85Google Chrome 33.0.1750.79Google Chrome 33.0.1750.106Google Chrome 33.0.1750.52Google Chrome 33.0.1750.38Google Chrome 33.0.1750.88Google Chrome 33.0.1750.93
6.4
CVSSv2

CVE-2013-6659

The SSLClientSocketNSS::Core::OwnAuthCertHandler function in net/socket/ssl_client_socket_nss.cc in Google Chrome prior to 33.0.1750.117 does not prevent changes to server X.509 certificates during renegotiations, which allows remote SSL servers to trigger use of a new certificat...
Google Chrome 33.0.1750.1Google Chrome 33.0.1750.89Google Chrome 33.0.1750.51Google Chrome 33.0.1750.44Google Chrome 33.0.1750.39Google Chrome 33.0.1750.73Google Chrome 33.0.1750.70Google Chrome 33.0.1750.22Google Chrome 33.0.1750.41Google Chrome 33.0.1750.66Google Chrome 33.0.1750.12Google Chrome 33.0.1750.92Google Chrome 33.0.1750.16Google Chrome 33.0.1750.65Google Chrome 33.0.1750.46Google Chrome 33.0.1750.85Google Chrome 33.0.1750.79Google Chrome 33.0.1750.106Google Chrome 33.0.1750.52Google Chrome 33.0.1750.38Google Chrome 33.0.1750.88Google Chrome 33.0.1750.93
5
CVSSv2

CVE-2013-6660

The drag-and-drop implementation in Google Chrome prior to 33.0.1750.117 does not properly restrict the information in WebDropData data structures, which allows remote malicious users to discover full pathnames via a crafted web site.
Google Chrome 33.0.1750.1Google Chrome 33.0.1750.89Google Chrome 33.0.1750.51Google Chrome 33.0.1750.44Google Chrome 33.0.1750.39Google Chrome 33.0.1750.73Google Chrome 33.0.1750.70Google Chrome 33.0.1750.22Google Chrome 33.0.1750.41Google Chrome 33.0.1750.66Google Chrome 33.0.1750.12Google Chrome 33.0.1750.92Google Chrome 33.0.1750.16Google Chrome 33.0.1750.65Google Chrome 33.0.1750.46Google Chrome 33.0.1750.85Google Chrome 33.0.1750.79Google Chrome 33.0.1750.106Google Chrome 33.0.1750.52Google Chrome 33.0.1750.38Google Chrome 33.0.1750.88Google Chrome 33.0.1750.93
7.5
CVSSv2

CVE-2013-6661

Multiple unspecified vulnerabilities in Google Chrome prior to 33.0.1750.117 allow malicious users to bypass the sandbox protection mechanism after obtaining renderer access, or have other impact, via unknown vectors.
Google Chrome 33.0.1750.1Google Chrome 33.0.1750.89Google Chrome 33.0.1750.51Google Chrome 33.0.1750.44Google Chrome 33.0.1750.39Google Chrome 33.0.1750.73Google Chrome 33.0.1750.70Google Chrome 33.0.1750.22Google Chrome 33.0.1750.41Google Chrome 33.0.1750.66Google Chrome 33.0.1750.12Google Chrome 33.0.1750.92Google Chrome 33.0.1750.16Google Chrome 33.0.1750.65Google Chrome 33.0.1750.46Google Chrome 33.0.1750.85Google Chrome 33.0.1750.79Google Chrome 33.0.1750.106Google Chrome 33.0.1750.52Google Chrome 33.0.1750.38Google Chrome 33.0.1750.88Google Chrome 33.0.1750.93
CVSSv2
CVSSv2
CVSSv3
VMScore
Recommendations:
privilegeCVE-2022-48762CVE-2022-48751CVE-2024-37079CVE-2024-30848LFIman-in-the-middleCVE-2022-48736CVE-2024-30103
Vulmon Logo Vulnerability Notification Service
You don’t have to wait for vulnerability scanning results
Get Started

Vulmon Search

Vulmon Search is a vulnerability search engine. It gives comprehensive vulnerability information through a very simple user interface.

About

Home Recent Vulnerabilities Product List Vendor List Research Posts Trends Blog About Contact

Products

Vulmon Search Vulmon Research Vulmon Alerts Vulmap

Connect

Twitter Reddit Linkedin Facebook