← Back

Chrome

chrome

Vendor: Google • 6,253 CVEs

CVEs (6,253)

CVE
VENDORS
PRODUCTS
UPDATED
PUBLISHED
CVSS
CVE-2011-3095
1Google
1Chrome
Apr 29, 2026
May 16, 2012
N/A· v4
N/A· v3
10.0 HIGH· v2
The OGG container in Google Chrome before 19.0.1084.46 allows remote attackers to cause a denial of service or possibly have unspecified other impact via unknown vectors that trigger an out-of-bounds write.
CVE-2011-3094
1Google
1Chrome
Apr 29, 2026
May 16, 2012
N/A· v4
N/A· v3
5.0 MEDIUM· v2
Google Chrome before 19.0.1084.46 does not properly handle Tibetan text, which allows remote attackers to cause a denial of service (out-of-bounds read) via unspecified vectors.
CVE-2011-3093
1Google
1Chrome
Apr 29, 2026
May 16, 2012
N/A· v4
N/A· v3
5.0 MEDIUM· v2
Google Chrome before 19.0.1084.46 does not properly handle glyphs, which allows remote attackers to cause a denial of service (out-of-bounds read) via unspecified vectors.
CVE-2011-3092
1Google
1Chrome
Apr 29, 2026
May 16, 2012
N/A· v4
N/A· v3
10.0 HIGH· v2
The regex implementation in Google V8, as used in Google Chrome before 19.0.1084.46, allows remote attackers to cause a denial of service (invalid write operation) or possibly have unspecified other impact via unknown ve...Show more
The regex implementation in Google V8, as used in Google Chrome before 19.0.1084.46, allows remote attackers to cause a denial of service (invalid write operation) or possibly have unspecified other impact via unknown vectors.Show less
CVE-2011-3091
1Google
1Chrome
Apr 29, 2026
May 16, 2012
N/A· v4
N/A· v3
10.0 HIGH· v2
Use-after-free vulnerability in the IndexedDB implementation in Google Chrome before 19.0.1084.46 allows remote attackers to cause a denial of service or possibly have unspecified other impact via unknown vectors.
CVE-2011-3090
1Google
1Chrome
Apr 29, 2026
May 16, 2012
N/A· v4
N/A· v3
7.6 HIGH· v2
Race condition in Google Chrome before 19.0.1084.46 allows remote attackers to cause a denial of service or possibly have unspecified other impact via vectors related to worker processes.
CVE-2011-3089
1Google
1Chrome
Apr 29, 2026
May 16, 2012
N/A· v4
N/A· v3
10.0 HIGH· v2
Use-after-free vulnerability in Google Chrome before 19.0.1084.46 allows remote attackers to cause a denial of service or possibly have unspecified other impact via vectors involving tables.
CVE-2011-3088
1Google
1Chrome
Apr 29, 2026
May 16, 2012
N/A· v4
N/A· v3
5.0 MEDIUM· v2
Google Chrome before 19.0.1084.46 does not properly draw hairlines, which allows remote attackers to cause a denial of service (out-of-bounds read) via unspecified vectors.
CVE-2011-3087
1Google
1Chrome
Apr 29, 2026
May 16, 2012
N/A· v4
N/A· v3
10.0 HIGH· v2
Google Chrome before 19.0.1084.46 does not properly perform window navigation, which has unspecified impact and remote attack vectors.
CVE-2011-3086
1Google
1Chrome
Apr 29, 2026
May 16, 2012
N/A· v4
N/A· v3
10.0 HIGH· v2
Use-after-free vulnerability in Google Chrome before 19.0.1084.46 allows remote attackers to cause a denial of service or possibly have unspecified other impact via vectors involving a STYLE element.
CVE-2011-3085
1Google
1Chrome
Apr 29, 2026
May 16, 2012
N/A· v4
N/A· v3
5.0 MEDIUM· v2
The Autofill feature in Google Chrome before 19.0.1084.46 does not properly restrict field values, which allows remote attackers to cause a denial of service (UI corruption) and possibly conduct spoofing attacks via vect...Show more
The Autofill feature in Google Chrome before 19.0.1084.46 does not properly restrict field values, which allows remote attackers to cause a denial of service (UI corruption) and possibly conduct spoofing attacks via vectors involving long values.Show less
CVE-2011-3084
1Google
1Chrome
Apr 29, 2026
May 16, 2012
N/A· v4
N/A· v3
7.5 HIGH· v2
Google Chrome before 19.0.1084.46 does not use a dedicated process for the loading of links found on an internal page, which might allow attackers to bypass intended sandbox restrictions via a crafted page.
CVE-2011-3083
1Google
1Chrome
Apr 29, 2026
May 16, 2012
N/A· v4
N/A· v3
5.0 MEDIUM· v2
browser/profiles/profile_impl_io_data.cc in Google Chrome before 19.0.1084.46 does not properly handle a malformed ftp URL in the SRC attribute of a VIDEO element, which allows remote attackers to cause a denial of servi...Show more
browser/profiles/profile_impl_io_data.cc in Google Chrome before 19.0.1084.46 does not properly handle a malformed ftp URL in the SRC attribute of a VIDEO element, which allows remote attackers to cause a denial of service (NULL pointer dereference and application crash) via a crafted web page.Show less
CVE-2012-1521
2Apple
Google
4Chrome
Iphone OsItunes+1 more
Apr 29, 2026
May 1, 2012
N/A· v4
N/A· v3
6.8 MEDIUM· v2
Use-after-free vulnerability in the XML parser in Google Chrome before 18.0.1025.168 allows remote attackers to cause a denial of service or possibly have unspecified other impact via unknown vectors.
CVE-2011-3081
2Apple
Google
4Chrome
Iphone OsItunes+1 more
Apr 29, 2026
May 1, 2012
N/A· v4
N/A· v3
9.3 HIGH· v2
Use-after-free vulnerability in Google Chrome before 18.0.1025.168 allows remote attackers to cause a denial of service or possibly have unspecified other impact via vectors related to the floating of elements, a differe...Show more
Use-after-free vulnerability in Google Chrome before 18.0.1025.168 allows remote attackers to cause a denial of service or possibly have unspecified other impact via vectors related to the floating of elements, a different vulnerability than CVE-2011-3078.Show less
CVE-2011-3080
1Google
1Chrome
Apr 29, 2026
May 1, 2012
N/A· v4
N/A· v3
7.6 HIGH· v2
Race condition in the Inter-process Communication (IPC) implementation in Google Chrome before 18.0.1025.168 allows attackers to bypass intended sandbox restrictions via unspecified vectors.
CVE-2011-3079
3Google
MozillaOpensuse
5Chrome
FirefoxOpensuse+2 more
Apr 29, 2026
May 1, 2012
N/A· v4
N/A· v3
10.0 HIGH· v2
The Inter-process Communication (IPC) implementation in Google Chrome before 18.0.1025.168, as used in Mozilla Firefox before 38.0 and other products, does not properly validate messages, which has unspecified impact and...Show more
The Inter-process Communication (IPC) implementation in Google Chrome before 18.0.1025.168, as used in Mozilla Firefox before 38.0 and other products, does not properly validate messages, which has unspecified impact and attack vectors.Show less
CVE-2011-3078
2Apple
Google
4Chrome
Iphone OsItunes+1 more
Apr 29, 2026
May 1, 2012
N/A· v4
N/A· v3
6.8 MEDIUM· v2
Use-after-free vulnerability in Google Chrome before 18.0.1025.168 allows remote attackers to cause a denial of service or possibly have unspecified other impact via vectors related to the floating of elements, a differe...Show more
Use-after-free vulnerability in Google Chrome before 18.0.1025.168 allows remote attackers to cause a denial of service or possibly have unspecified other impact via vectors related to the floating of elements, a different vulnerability than CVE-2011-3081.Show less
CVE-2012-0725
2Adobe
Google
3Air
ChromeFlash Player
Apr 29, 2026
Apr 6, 2012
N/A· v4
N/A· v3
9.3 HIGH· v2
Adobe Flash Player before 11.2.202.229 in Google Chrome before 18.0.1025.151 allow attackers to cause a denial of service (memory corruption) or possibly have unspecified other impact via unknown vectors, a different vul...Show more
Adobe Flash Player before 11.2.202.229 in Google Chrome before 18.0.1025.151 allow attackers to cause a denial of service (memory corruption) or possibly have unspecified other impact via unknown vectors, a different vulnerability than CVE-2012-0724.Show less
CVE-2012-0724
2Adobe
Google
3Air
ChromeFlash Player
Apr 29, 2026
Apr 6, 2012
N/A· v4
N/A· v3
9.3 HIGH· v2
Adobe Flash Player before 11.2.202.229 in Google Chrome before 18.0.1025.151 allow attackers to cause a denial of service (memory corruption) or possibly have unspecified other impact via unknown vectors, a different vul...Show more
Adobe Flash Player before 11.2.202.229 in Google Chrome before 18.0.1025.151 allow attackers to cause a denial of service (memory corruption) or possibly have unspecified other impact via unknown vectors, a different vulnerability than CVE-2012-0725.Show less