Vulmon Recent Vulnerabilities Product List Research Posts Trends Blog About Contact

google chrome 2.0.172.31 vulnerabilities and exploits

(subscribe to this query)
9.3
CVSSv2

CVE-2010-0645

Multiple integer overflows in factory.cc in Google V8 before r3560, as used in Google Chrome prior to 4.0.249.89, allow remote malicious users to execute arbitrary code in the Chrome sandbox via crafted use of JavaScript arrays.
Google ChromeGoogle Chrome 0.2.149.27Google Chrome 0.2.149.29Google Chrome 0.2.149.30Google Chrome 0.2.152.1Google Chrome 0.2.153.1Google Chrome 0.3.154.0Google Chrome 0.3.154.3Google Chrome 0.4.154.18Google Chrome 0.4.154.22Google Chrome 0.4.154.31Google Chrome 0.4.154.33
9.3
CVSSv2

CVE-2010-0655

Use-after-free vulnerability in Google Chrome prior to 4.0.249.78 allows user-assisted remote malicious users to cause a denial of service (application crash) or possibly execute arbitrary code via vectors involving the display of a blocked popup window during navigation to a dif...
Google ChromeGoogle Chrome 0.2.149.27Google Chrome 0.2.149.29Google Chrome 0.2.149.30Google Chrome 0.2.152.1Google Chrome 0.2.153.1Google Chrome 0.3.154.0Google Chrome 0.3.154.3Google Chrome 0.4.154.18Google Chrome 0.4.154.22Google Chrome 0.4.154.31Google Chrome 0.4.154.33
5
CVSSv2

CVE-2010-0662

The ParamTraits<SkBitmap>::Read function in common/common_param_traits.cc in Google Chrome prior to 4.0.249.78 does not use the correct variables in calculations designed to prevent integer overflows, which allows malicious users to leverage renderer access to cause a denia...
Google ChromeGoogle Chrome 0.2.149.27Google Chrome 0.2.149.29Google Chrome 0.2.149.30Google Chrome 0.2.152.1Google Chrome 0.2.153.1Google Chrome 0.3.154.0Google Chrome 0.3.154.3Google Chrome 0.4.154.18Google Chrome 0.4.154.22Google Chrome 0.4.154.31Google Chrome 0.4.154.33
5
CVSSv2

CVE-2010-0663

The ParamTraits<SkBitmap>::Read function in common/common_param_traits.cc in Google Chrome prior to 4.0.249.78 does not initialize the memory locations that will hold bitmap data, which might allow remote malicious users to obtain potentially sensitive information from proc...
Google ChromeGoogle Chrome 0.2.149.27Google Chrome 0.2.149.29Google Chrome 0.2.149.30Google Chrome 0.2.152.1Google Chrome 0.2.153.1Google Chrome 0.3.154.0Google Chrome 0.3.154.3Google Chrome 0.4.154.18Google Chrome 0.4.154.22Google Chrome 0.4.154.31Google Chrome 0.4.154.33
5
CVSSv2

CVE-2010-0664

Stack consumption vulnerability in the ChildProcessSecurityPolicy::CanRequestURL function in browser/child_process_security_policy.cc in Google Chrome prior to 4.0.249.78 allows remote malicious users to cause a denial of service (memory consumption and application crash) via a U...
Google ChromeGoogle Chrome 0.2.149.27Google Chrome 0.2.149.29Google Chrome 0.2.149.30Google Chrome 0.2.152.1Google Chrome 0.2.153.1Google Chrome 0.3.154.0Google Chrome 0.3.154.3Google Chrome 0.4.154.18Google Chrome 0.4.154.22Google Chrome 0.4.154.31Google Chrome 0.4.154.33
5
CVSSv2

CVE-2010-0660

Google Chrome prior to 4.0.249.78 sends an https URL in the Referer header of an http request in certain circumstances involving https to http redirection, which allows remote HTTP servers to obtain potentially sensitive information via standard HTTP logging.
Google ChromeGoogle Chrome 0.2.149.27Google Chrome 0.2.149.29Google Chrome 0.2.149.30Google Chrome 0.2.152.1Google Chrome 0.2.153.1Google Chrome 0.3.154.0Google Chrome 0.3.154.3Google Chrome 0.4.154.18Google Chrome 0.4.154.22Google Chrome 0.4.154.31Google Chrome 0.4.154.33
9.3
CVSSv2

CVE-2010-0649

Integer overflow in the CrossCallParamsEx::CreateFromBuffer function in sandbox/src/crosscall_server.cc in Google Chrome prior to 4.0.249.89 allows malicious users to leverage renderer access to cause a denial of service (heap memory corruption) or possibly have unspecified other...
Google ChromeGoogle Chrome 0.2.149.27Google Chrome 0.2.149.29Google Chrome 0.2.149.30Google Chrome 0.2.152.1Google Chrome 0.2.153.1Google Chrome 0.3.154.0Google Chrome 0.3.154.3Google Chrome 0.4.154.18Google Chrome 0.4.154.22Google Chrome 0.4.154.31Google Chrome 0.4.154.33
5
CVSSv2

CVE-2010-0315

WebKit before r53607, as used in Google Chrome prior to 4.0.249.89, allows remote malicious users to discover a redirect's target URL, for the session of a specific user of a web site, by placing the site's URL in the HREF attribute of a stylesheet LINK element, and the...
Google ChromeGoogle Chrome 0.2.149.27Google Chrome 0.2.149.29Google Chrome 0.2.149.30Google Chrome 0.2.152.1Google Chrome 0.2.153.1Google Chrome 0.3.154.0Google Chrome 0.3.154.3Google Chrome 0.4.154.18Google Chrome 0.4.154.22Google Chrome 0.4.154.31Google Chrome 0.4.154.33
4.3
CVSSv2

CVE-2010-0556

browser/login/login_prompt.cc in Google Chrome prior to 4.0.249.89 populates an authentication dialog with credentials that were stored by Password Manager for a different web site, which allows user-assisted remote HTTP servers to obtain sensitive information via a URL that requ...
Google ChromeGoogle Chrome 0.2.149.27Google Chrome 0.2.149.29Google Chrome 0.2.149.30Google Chrome 0.2.152.1Google Chrome 0.2.153.1Google Chrome 0.3.154.0Google Chrome 0.3.154.3Google Chrome 0.4.154.18Google Chrome 0.4.154.22Google Chrome 0.4.154.31Google Chrome 0.4.154.33
5.8
CVSSv2

CVE-2008-7294

Google Chrome prior to 4.0.211.0 cannot properly restrict modifications to cookies established in HTTPS sessions, which allows man-in-the-middle malicious users to overwrite or delete arbitrary cookies via a Set-Cookie header in an HTTP response, related to lack of the HTTP Stric...
Google ChromeGoogle Chrome 0.1.38.1Google Chrome 0.1.38.2Google Chrome 0.1.38.4Google Chrome 0.1.40.1Google Chrome 0.1.42.2Google Chrome 0.1.42.3Google Chrome 0.2.149.27Google Chrome 0.2.149.29Google Chrome 0.2.149.30Google Chrome 0.2.152.1Google Chrome 0.2.153.1
Preferred Score:
CVSSv3
CVSSv2
CVSSv3
CVSSv4
EPSS
VMScore
Recommendations:
CVE-2025-22207joomla! cmsCVE-2024-45774post smtp – wordpress smtp plugin with email logs and mobile app for failure notifications – gmail smtp, office 365, brevo, mailgun, amazon ses and moreXSSCVE-2025-1094CVE-2025-22656malicious code‎CVE-2025-0108CVE-2024-13438infusionsoftXXEsupporthost
Home
/
Search Results
Vulmon Logo Vulnerability Notification Service
You don’t have to wait for vulnerability scanning results
Get Started

Vulmon Search

Vulmon Search is a vulnerability search engine. It gives comprehensive vulnerability information through a very simple user interface.

About

Home Recent Vulnerabilities Product List Vendor List Research Posts Trends Blog About Contact

Products

Vulmon Search Vulmon Research Vulmon Alerts Vulmap

Connect

Twitter Reddit Linkedin Facebook