Vulmon Recent Vulnerabilities Product List Research Posts Trends Blog About Contact

chrome vulnerabilities and exploits

(subscribe to this query)
10
CVSSv2

CVE-2011-3106

The WebSockets implementation in Google Chrome prior to 19.0.1084.52 does not properly handle use of SSL, which allows remote malicious users to execute arbitrary code or cause a denial of service (memory corruption) via unspecified vectors.
Google ChromeGoogle Chrome 19.0.1028.0Google Chrome 19.0.1029.0Google Chrome 19.0.1030.0Google Chrome 19.0.1031.0Google Chrome 19.0.1032.0Google Chrome 19.0.1033.0Google Chrome 19.0.1034.0Google Chrome 19.0.1035.0Google Chrome 19.0.1036.0Google Chrome 19.0.1036.2Google Chrome 19.0.1036.3
7.5
CVSSv2

CVE-2011-3107

Google Chrome prior to 19.0.1084.52 does not properly implement JavaScript bindings for plug-ins, which allows remote malicious users to cause a denial of service (application crash) or possibly have unspecified other impact via unknown vectors.
Google ChromeGoogle Chrome 19.0.1028.0Google Chrome 19.0.1029.0Google Chrome 19.0.1030.0Google Chrome 19.0.1031.0Google Chrome 19.0.1032.0Google Chrome 19.0.1033.0Google Chrome 19.0.1034.0Google Chrome 19.0.1035.0Google Chrome 19.0.1036.0Google Chrome 19.0.1036.2Google Chrome 19.0.1036.3
10
CVSSv2

CVE-2011-3108

Use-after-free vulnerability in Google Chrome prior to 19.0.1084.52 allows remote malicious users to execute arbitrary code via vectors related to the browser cache.
Google ChromeGoogle Chrome 19.0.1028.0Google Chrome 19.0.1029.0Google Chrome 19.0.1030.0Google Chrome 19.0.1031.0Google Chrome 19.0.1032.0Google Chrome 19.0.1033.0Google Chrome 19.0.1034.0Google Chrome 19.0.1035.0Google Chrome 19.0.1036.0Google Chrome 19.0.1036.2Google Chrome 19.0.1036.3
7.5
CVSSv2

CVE-2011-3109

Google Chrome prior to 19.0.1084.52 on Linux does not properly perform a cast of an unspecified variable, which allows remote malicious users to cause a denial of service or possibly have unknown other impact by leveraging an error in the GTK implementation of the UI.
Google ChromeGoogle Chrome 19.0.1028.0Google Chrome 19.0.1029.0Google Chrome 19.0.1030.0Google Chrome 19.0.1031.0Google Chrome 19.0.1032.0Google Chrome 19.0.1033.0Google Chrome 19.0.1034.0Google Chrome 19.0.1035.0Google Chrome 19.0.1036.0Google Chrome 19.0.1036.2Google Chrome 19.0.1036.3
7.5
CVSSv2

CVE-2011-3110

The PDF functionality in Google Chrome prior to 19.0.1084.52 allows remote malicious users to cause a denial of service or possibly have unspecified other impact via vectors that trigger out-of-bounds write operations.
Google ChromeGoogle Chrome 19.0.1028.0Google Chrome 19.0.1029.0Google Chrome 19.0.1030.0Google Chrome 19.0.1031.0Google Chrome 19.0.1032.0Google Chrome 19.0.1033.0Google Chrome 19.0.1034.0Google Chrome 19.0.1035.0Google Chrome 19.0.1036.0Google Chrome 19.0.1036.2Google Chrome 19.0.1036.3
7.5
CVSSv2

CVE-2013-6652

Directory traversal vulnerability in sandbox/win/src/named_pipe_dispatcher.cc in Google Chrome prior to 33.0.1750.117 on Windows allows malicious users to bypass intended named-pipe policy restrictions in the sandbox via vectors related to (1) lack of checks for .. (dot dot) sequ...
Google ChromeGoogle Chrome 33.0.1750.0Google Chrome 33.0.1750.1Google Chrome 33.0.1750.2Google Chrome 33.0.1750.3Google Chrome 33.0.1750.4Google Chrome 33.0.1750.5Google Chrome 33.0.1750.6Google Chrome 33.0.1750.7Google Chrome 33.0.1750.8Google Chrome 33.0.1750.9Google Chrome 33.0.1750.10
7.5
CVSSv2

CVE-2013-6653

Use-after-free vulnerability in the web contents implementation in Google Chrome prior to 33.0.1750.117 allows remote malicious users to cause a denial of service or possibly have unspecified other impact via vectors involving attempted conflicting access to the color chooser.
Google ChromeGoogle Chrome 33.0.1750.0Google Chrome 33.0.1750.1Google Chrome 33.0.1750.2Google Chrome 33.0.1750.3Google Chrome 33.0.1750.4Google Chrome 33.0.1750.5Google Chrome 33.0.1750.6Google Chrome 33.0.1750.7Google Chrome 33.0.1750.8Google Chrome 33.0.1750.9Google Chrome 33.0.1750.10
7.5
CVSSv2

CVE-2013-6654

The SVGAnimateElement::calculateAnimatedValue function in core/svg/SVGAnimateElement.cpp in Blink, as used in Google Chrome prior to 33.0.1750.117, does not properly handle unexpected data types, which allows remote malicious users to cause a denial of service (incorrect cast) or...
Google ChromeGoogle Chrome 33.0.1750.0Google Chrome 33.0.1750.1Google Chrome 33.0.1750.2Google Chrome 33.0.1750.3Google Chrome 33.0.1750.4Google Chrome 33.0.1750.5Google Chrome 33.0.1750.6Google Chrome 33.0.1750.7Google Chrome 33.0.1750.8Google Chrome 33.0.1750.9Google Chrome 33.0.1750.10
7.5
CVSSv2

CVE-2013-6655

Use-after-free vulnerability in Blink, as used in Google Chrome prior to 33.0.1750.117, allows remote malicious users to cause a denial of service or possibly have unspecified other impact via vectors related to improper handling of overflowchanged DOM events during interaction b...
Google ChromeGoogle Chrome 33.0.1750.0Google Chrome 33.0.1750.1Google Chrome 33.0.1750.2Google Chrome 33.0.1750.3Google Chrome 33.0.1750.4Google Chrome 33.0.1750.5Google Chrome 33.0.1750.6Google Chrome 33.0.1750.7Google Chrome 33.0.1750.8Google Chrome 33.0.1750.9Google Chrome 33.0.1750.10
5
CVSSv2

CVE-2013-6656

The XSSAuditor::init function in core/html/parser/XSSAuditor.cpp in the XSS auditor in Blink, as used in Google Chrome prior to 33.0.1750.117, processes POST requests by using the body of a redirecting page instead of the body of a redirect target, which allows remote malicious u...
Google ChromeGoogle Chrome 33.0.1750.0Google Chrome 33.0.1750.1Google Chrome 33.0.1750.2Google Chrome 33.0.1750.3Google Chrome 33.0.1750.4Google Chrome 33.0.1750.5Google Chrome 33.0.1750.6Google Chrome 33.0.1750.7Google Chrome 33.0.1750.8Google Chrome 33.0.1750.9Google Chrome 33.0.1750.10
Preferred Score:
CVSSv3
CVSSv2
CVSSv3
CVSSv4
EPSS
VMScore
Recommendations:
CVE-2025-46656unknownCVE-2025-46577CVE-2025-32979paicodingXPath injectionhackmdCVE-2025-3643opplusCSRFlocal usersCVE-2025-32433CVE-2025-32432
Home
/
Search Results
Vulmon Logo Vulnerability Notification Service
You don’t have to wait for vulnerability scanning results
Get Started

Vulmon Search

Vulmon Search is a vulnerability search engine. It gives comprehensive vulnerability information through a very simple user interface.

About

Home Recent Vulnerabilities Product List Vendor List Research Posts Trends Blog About Contact

Products

Vulmon Search Vulmon Research Vulmon Alerts Vulmap

Connect

Twitter Reddit Linkedin Facebook