Vulnerability index

Browse CVEs

617 matching
Filters 2 Clear all
Severity

Filters apply as you choose them.

Filtering by weakness Memory Buffer Bounds ErrorCWE-119 × clear
Picasa HIGH 7.5
CVE-2013-5359

Stack-based buffer overflow in Picasa3.exe in Google Picasa before 3.9.0 Build 137.69 might allow remote attackers to execute arbitrary code via a cr…

Mitigation only
Fix from $1,950 2014-01-09
Chrome HIGH 7.5
CVE-2013-6639

The DehoistArrayIndex function in hydrogen-dehoist.cc (aka hydrogen.cc) in Google V8 before 3.22.24.7, as used in Google Chrome before 31.0.1650.63, …

Fix: after 31.0.1650.62
Fix from $1,950 2013-12-07
Chrome HIGH 7.5
CVE-2013-6640

The DehoistArrayIndex function in hydrogen-dehoist.cc (aka hydrogen.cc) in Google V8 before 3.22.24.7, as used in Google Chrome before 31.0.1650.63, …

Fix: after 31.0.1650.62
Fix from $1,950 2013-12-07
Chrome HIGH 7.5
CVE-2013-6638

Multiple buffer overflows in runtime.cc in Google V8 before 3.22.24.7, as used in Google Chrome before 31.0.1650.63, allow remote attackers to cause …

Fix: after 31.0.1650.62
Fix from $1,950 2013-12-07
Chrome MEDIUM 5.0
CVE-2013-6627EPSS 5%

net/http/http_stream_parser.cc in Google Chrome before 31.0.1650.48 does not properly process HTTP Informational (aka 1xx) status codes, which allows…

Fix: after 31.0.1650.47
Fix from $1,600 2013-11-13
Chrome HIGH 7.5
CVE-2013-2919

Google V8, as used in Google Chrome before 30.0.1599.66, allows remote attackers to cause a denial of service (memory corruption) or possibly have un…

Fix: after 30.0.1599.65
Fix from $1,950 2013-10-02
Chrome MEDIUM 5.0
CVE-2013-2907

The Window.prototype object implementation in Google Chrome before 30.0.1599.66 allows remote attackers to cause a denial of service (out-of-bounds r…

Fix: after 30.0.1599.65
Fix from $1,600 2013-10-02
Chrome MEDIUM 5.0
CVE-2013-2917

The ReverbConvolverStage::ReverbConvolverStage function in core/platform/audio/ReverbConvolverStage.cpp in the Web Audio implementation in Blink, as …

Fix: after 30.0.1599.65
Fix from $1,600 2013-10-02
Chrome MEDIUM 5.0
CVE-2013-2920

The DoResolveRelativeHost function in url/url_canon_relative.cc in Google Chrome before 30.0.1599.66 allows remote attackers to cause a denial of ser…

Fix: after 30.0.1599.65
Fix from $1,600 2013-10-02
Android MEDIUM 6.9
CVE-2013-5933

Stack-based buffer overflow in the sub_E110 function in init in a certain configuration of Android 2.3.7 on the Motorola Defy XT phone for Republic W…

Mitigation only
Fix from $1,600 2013-09-25
Chrome MEDIUM 5.0
CVE-2013-2875

core/rendering/svg/SVGInlineTextBox.cpp in the SVG implementation in Blink, as used in Google Chrome before 28.0.1500.71, allows remote attackers to …

Fix: after 28.0.1500.70
Fix from $1,600 2013-07-10
Chrome MEDIUM 5.0
CVE-2013-2877

parser.c in libxml2 before 2.9.0, as used in Google Chrome before 28.0.1500.71 and other products, allows remote attackers to cause a denial of servi…

Fix: after 28.0.1500.70
Fix from $1,600 2013-07-10
Chrome MEDIUM 5.0
CVE-2013-2878

Google Chrome before 28.0.1500.71 allows remote attackers to cause a denial of service (out-of-bounds read) via vectors related to the handling of te…

Fix: after 28.0.1500.70
Fix from $1,600 2013-07-10
Chrome HIGH 10.0
CVE-2013-2863

Google Chrome before 27.0.1453.110 does not properly handle SSL sockets, which allows remote attackers to execute arbitrary code or cause a denial of…

Fix: after 27.0.1453.109
Fix from $1,950 2013-06-05
Chrome HIGH 7.5
CVE-2013-2862

Skia, as used in Google Chrome before 27.0.1453.110, does not properly handle GPU acceleration, which allows remote attackers to cause a denial of se…

Fix: after 27.0.1453.109
Fix from $1,950 2013-06-05
Chrome HIGH 7.5
CVE-2013-2864

The PDF functionality in Google Chrome before 27.0.1453.110 allows remote attackers to cause a denial of service (invalid free operation) or possibly…

Fix: after 27.0.1453.109
Fix from $1,950 2013-06-05
Chrome MEDIUM 5.0
CVE-2013-2855

The Developer Tools API in Google Chrome before 27.0.1453.110 allows remote attackers to cause a denial of service (memory corruption) or possibly ha…

Fix: after 27.0.1453.109
Fix from $1,600 2013-06-05
Chrome HIGH 7.5
CVE-2013-2845

The Web Audio implementation in Google Chrome before 27.0.1453.93 allows remote attackers to cause a denial of service (memory corruption) or possibl…

Fix: after 27.0.1453.91
Fix from $1,950 2013-05-22
Chrome MEDIUM 5.0
CVE-2013-2838

Google V8, as used in Google Chrome before 27.0.1453.93, allows remote attackers to cause a denial of service (out-of-bounds read) via unspecified ve…

Fix: after 27.0.1453.91
Fix from $1,600 2013-05-22
Chrome Os MEDIUM 5.0
CVE-2013-2832

The Buffer::Set function in core/cross/buffer.cc in the O3D plug-in in Google Chrome OS before 26.0.1410.57 does not prevent uninitialized data from …

Fix: after 26.0.1410.56
Fix from $1,600 2013-04-16
Chrome MEDIUM 5.0
CVE-2013-0917

The URL loader in Google Chrome before 26.0.1410.43 allows remote attackers to cause a denial of service (out-of-bounds read) via unspecified vectors.

Fix: after 26.0.1410.42
Fix from $1,600 2013-03-28
Chrome MEDIUM 5.0
CVE-2013-0923

The USB Apps API in Google Chrome before 26.0.1410.43 allows remote attackers to cause a denial of service (memory corruption) via unspecified vector…

Fix: after 26.0.1410.42
Fix from $1,600 2013-03-28
Chrome Os HIGH 10.0
CVE-2013-0915

The GPU process in Google Chrome OS before 25.0.1364.173 allows attackers to cause a denial of service or possibly have unspecified other impact via …

Fix: after 25.0.1364.172
Fix from $1,950 2013-03-18
Chrome HIGH 7.5
CVE-2013-0904

The Web Audio implementation in Google Chrome before 25.0.1364.152 allows remote attackers to cause a denial of service (memory corruption) or possib…

Fix: after 25.0.1364.126
Fix from $1,950 2013-03-05
Chrome HIGH 7.5
CVE-2013-0906

The IndexedDB implementation in Google Chrome before 25.0.1364.152 allows remote attackers to cause a denial of service (memory corruption) or possib…

Fix: after 25.0.1364.126
Fix from $1,950 2013-03-05
Chrome HIGH 7.5
CVE-2013-0896

Google Chrome before 25.0.1364.97 on Windows and Linux, and before 25.0.1364.99 on Mac OS X, does not properly manage memory during message handling …

Fix: 25.0.1364.97 / 25.0.1364.99+
Fix from $1,950 2013-02-23
Android MEDIUM 6.9
CVE-2011-1352

The PowerVR SGX driver in Android before 2.3.6 allows attackers to gain root privileges via an application that triggers kernel memory corruption usi…

Fix: after 2.3.5
Fix from $1,600 2013-02-05
Chrome HIGH 7.5
CVE-2013-0843

content/renderer/media/webrtc_audio_renderer.cc in Google Chrome before 24.0.1312.56 on Mac OS X does not use an appropriate buffer size for the 96 k…

Mitigation only
Fix from $1,950 2013-01-24
Chrome MEDIUM 5.0
CVE-2013-0833

Google Chrome before 24.0.1312.52 allows remote attackers to cause a denial of service (out-of-bounds read) via vectors related to printing.

Fix: after 24.0.1312.51
Fix from $1,600 2013-01-15
Chrome MEDIUM 5.0
CVE-2013-0834

Google Chrome before 24.0.1312.52 allows remote attackers to cause a denial of service (out-of-bounds read) via vectors involving glyphs.

Fix: after 24.0.1312.51
Fix from $1,600 2013-01-15