← Back

Chrome

chrome

Vendor: Google • 6,253 CVEs

CVEs (6,253)

CVE
VENDORS
PRODUCTS
UPDATED
PUBLISHED
CVSS
CVE-2011-0776
1Google
1Chrome
Apr 29, 2026
Feb 4, 2011
N/A· v4
N/A· v3
5.0 MEDIUM· v2
The sandbox implementation in Google Chrome before 9.0.597.84 on Mac OS X might allow remote attackers to obtain potentially sensitive information about local files via vectors related to the stat system call.
CVE-2011-0485
1Google
2Chrome
Chrome Os
Apr 29, 2026
Jan 14, 2011
N/A· v4
N/A· v3
10.0 HIGH· v2
Google Chrome before 8.0.552.237 and Chrome OS before 8.0.552.344 do not properly handle speech data, which allows remote attackers to execute arbitrary code via unspecified vectors that lead to a "stale pointer."
CVE-2011-0484
1Google
2Chrome
Chrome Os
Apr 29, 2026
Jan 14, 2011
N/A· v4
N/A· v3
7.5 HIGH· v2
Google Chrome before 8.0.552.237 and Chrome OS before 8.0.552.344 do not properly perform DOM node removal, which allows remote attackers to cause a denial of service or possibly have unspecified other impact via unknown...Show more
Google Chrome before 8.0.552.237 and Chrome OS before 8.0.552.344 do not properly perform DOM node removal, which allows remote attackers to cause a denial of service or possibly have unspecified other impact via unknown vectors that lead to a "stale rendering node."Show less
CVE-2011-0483
1Google
2Chrome
Chrome Os
Apr 29, 2026
Jan 14, 2011
N/A· v4
N/A· v3
5.0 MEDIUM· v2
Google Chrome before 8.0.552.237 and Chrome OS before 8.0.552.344 do not properly perform a cast of an unspecified variable during handling of video, which allows remote attackers to cause a denial of service or possibly...Show more
Google Chrome before 8.0.552.237 and Chrome OS before 8.0.552.344 do not properly perform a cast of an unspecified variable during handling of video, which allows remote attackers to cause a denial of service or possibly have unspecified other impact via unknown vectors.Show less
CVE-2011-0482
2Debian
Google
3Chrome
Chrome OsDebian Linux
Apr 29, 2026
Jan 14, 2011
N/A· v4
N/A· v3
4.3 MEDIUM· v2
Google Chrome before 8.0.552.237 and Chrome OS before 8.0.552.344 do not properly perform a cast of an unspecified variable during handling of anchors, which allows remote attackers to cause a denial of service or possib...Show more
Google Chrome before 8.0.552.237 and Chrome OS before 8.0.552.344 do not properly perform a cast of an unspecified variable during handling of anchors, which allows remote attackers to cause a denial of service or possibly have unspecified other impact via a crafted HTML document.Show less
CVE-2011-0481
1Google
2Chrome
Chrome Os
Apr 29, 2026
Jan 14, 2011
N/A· v4
N/A· v3
9.3 HIGH· v2
Buffer overflow in Google Chrome before 8.0.552.237 and Chrome OS before 8.0.552.344 allows remote attackers to cause a denial of service or possibly have unspecified other impact via vectors related to PDF shading.
CVE-2011-0480
3Canonical
DebianGoogle
4Chrome
Chrome OsDebian Linux+1 more
Apr 29, 2026
Jan 14, 2011
N/A· v4
N/A· v3
9.3 HIGH· v2
Multiple buffer overflows in vorbis_dec.c in the Vorbis decoder in FFmpeg, as used in Google Chrome before 8.0.552.237 and Chrome OS before 8.0.552.344, allow remote attackers to cause a denial of service (memory corrupt...Show more
Multiple buffer overflows in vorbis_dec.c in the Vorbis decoder in FFmpeg, as used in Google Chrome before 8.0.552.237 and Chrome OS before 8.0.552.344, allow remote attackers to cause a denial of service (memory corruption and application crash) or possibly have unspecified other impact via a crafted WebM file, related to buffers for (1) the channel floor and (2) the channel residue.Show less
CVE-2011-0479
1Google
2Chrome
Chrome Os
Apr 29, 2026
Jan 14, 2011
N/A· v4
N/A· v3
7.5 HIGH· v2
Google Chrome before 8.0.552.237 and Chrome OS before 8.0.552.344 do not properly interact with extensions, which allows remote attackers to cause a denial of service via a crafted extension that triggers an uninitialize...Show more
Google Chrome before 8.0.552.237 and Chrome OS before 8.0.552.344 do not properly interact with extensions, which allows remote attackers to cause a denial of service via a crafted extension that triggers an uninitialized pointer.Show less
CVE-2011-0478
1Google
2Chrome
Chrome Os
Apr 29, 2026
Jan 14, 2011
N/A· v4
N/A· v3
10.0 HIGH· v2
Google Chrome before 8.0.552.237 and Chrome OS before 8.0.552.344 do not properly handle SVG use elements, which allows remote attackers to cause a denial of service or possibly have unspecified other impact via unknown...Show more
Google Chrome before 8.0.552.237 and Chrome OS before 8.0.552.344 do not properly handle SVG use elements, which allows remote attackers to cause a denial of service or possibly have unspecified other impact via unknown vectors that lead to a "stale pointer."Show less
CVE-2011-0477
1Google
2Chrome
Chrome Os
Apr 29, 2026
Jan 14, 2011
N/A· v4
N/A· v3
10.0 HIGH· v2
Google Chrome before 8.0.552.237 and Chrome OS before 8.0.552.344 do not properly handle a mismatch in video frame sizes, which allows remote attackers to cause a denial of service (incorrect memory access) or possibly h...Show more
Google Chrome before 8.0.552.237 and Chrome OS before 8.0.552.344 do not properly handle a mismatch in video frame sizes, which allows remote attackers to cause a denial of service (incorrect memory access) or possibly have unspecified other impact via unknown vectors.Show less
CVE-2011-0476
1Google
2Chrome
Chrome Os
Apr 29, 2026
Jan 14, 2011
N/A· v4
N/A· v3
10.0 HIGH· v2
Google Chrome before 8.0.552.237 and Chrome OS before 8.0.552.344 allow remote attackers to cause a denial of service (stack memory corruption) or possibly have unspecified other impact via a PDF document that triggers a...Show more
Google Chrome before 8.0.552.237 and Chrome OS before 8.0.552.344 allow remote attackers to cause a denial of service (stack memory corruption) or possibly have unspecified other impact via a PDF document that triggers an out-of-memory error.Show less
CVE-2011-0475
1Google
2Chrome
Chrome Os
Apr 29, 2026
Jan 14, 2011
N/A· v4
N/A· v3
9.3 HIGH· v2
Use-after-free vulnerability in Google Chrome before 8.0.552.237 and Chrome OS before 8.0.552.344 allows remote attackers to cause a denial of service or possibly have unspecified other impact via a PDF document.
CVE-2011-0474
2Debian
Google
3Chrome
Chrome OsDebian Linux
Apr 29, 2026
Jan 14, 2011
N/A· v4
N/A· v3
10.0 HIGH· v2
Google Chrome before 8.0.552.237 and Chrome OS before 8.0.552.344 do not properly handle Cascading Style Sheets (CSS) token sequences in conjunction with cursors, which allows remote attackers to cause a denial of servic...Show more
Google Chrome before 8.0.552.237 and Chrome OS before 8.0.552.344 do not properly handle Cascading Style Sheets (CSS) token sequences in conjunction with cursors, which allows remote attackers to cause a denial of service or possibly have unspecified other impact via unknown vectors that lead to a "stale pointer."Show less
CVE-2011-0473
1Google
2Chrome
Chrome Os
Apr 29, 2026
Jan 14, 2011
N/A· v4
N/A· v3
10.0 HIGH· v2
Google Chrome before 8.0.552.237 and Chrome OS before 8.0.552.344 do not properly handle Cascading Style Sheets (CSS) token sequences in conjunction with CANVAS elements, which allows remote attackers to cause a denial o...Show more
Google Chrome before 8.0.552.237 and Chrome OS before 8.0.552.344 do not properly handle Cascading Style Sheets (CSS) token sequences in conjunction with CANVAS elements, which allows remote attackers to cause a denial of service or possibly have unspecified other impact via unknown vectors that lead to a "stale pointer."Show less
CVE-2011-0472
1Google
2Chrome
Chrome Os
Apr 29, 2026
Jan 14, 2011
N/A· v4
N/A· v3
9.3 HIGH· v2
Google Chrome before 8.0.552.237 and Chrome OS before 8.0.552.344 do not properly handle the printing of PDF documents, which allows user-assisted remote attackers to cause a denial of service (application crash) or poss...Show more
Google Chrome before 8.0.552.237 and Chrome OS before 8.0.552.344 do not properly handle the printing of PDF documents, which allows user-assisted remote attackers to cause a denial of service (application crash) or possibly have unspecified other impact via a multi-page document.Show less
CVE-2011-0471
1Google
2Chrome
Chrome Os
Apr 29, 2026
Jan 14, 2011
N/A· v4
N/A· v3
10.0 HIGH· v2
The node-iteration implementation in Google Chrome before 8.0.552.237 and Chrome OS before 8.0.552.344 does not properly handle pointers, which allows remote attackers to cause a denial of service or possibly have unspec...Show more
The node-iteration implementation in Google Chrome before 8.0.552.237 and Chrome OS before 8.0.552.344 does not properly handle pointers, which allows remote attackers to cause a denial of service or possibly have unspecified other impact via unknown vectors.Show less
CVE-2011-0470
1Google
2Chrome
Chrome Os
Apr 29, 2026
Jan 14, 2011
N/A· v4
N/A· v3
5.0 MEDIUM· v2
Google Chrome before 8.0.552.237 and Chrome OS before 8.0.552.344 do not properly handle extensions notification, which allows remote attackers to cause a denial of service (application crash) via unspecified vectors.
CVE-2010-4578
2Debian
Google
3Chrome
Chrome OsDebian Linux
Apr 29, 2026
Dec 22, 2010
N/A· v4
N/A· v3
7.5 HIGH· v2
Google Chrome before 8.0.552.224 and Chrome OS before 8.0.552.343 do not properly perform cursor handling, which allows remote attackers to cause a denial of service or possibly have unspecified other impact via unknown...Show more
Google Chrome before 8.0.552.224 and Chrome OS before 8.0.552.343 do not properly perform cursor handling, which allows remote attackers to cause a denial of service or possibly have unspecified other impact via unknown vectors that lead to "stale pointers."Show less
CVE-2010-4577
4Debian
FedoraprojectGoogle+1 more
5Chrome
Chrome OsDebian Linux+2 more
Apr 29, 2026
Dec 22, 2010
N/A· v4
7.5 HIGH· v3
5.0 MEDIUM· v2
The CSSParser::parseFontFaceSrc function in WebCore/css/CSSParser.cpp in WebKit, as used in Google Chrome before 8.0.552.224, Chrome OS before 8.0.552.343, webkitgtk before 1.2.6, and other products does not properly par...Show more
The CSSParser::parseFontFaceSrc function in WebCore/css/CSSParser.cpp in WebKit, as used in Google Chrome before 8.0.552.224, Chrome OS before 8.0.552.343, webkitgtk before 1.2.6, and other products does not properly parse Cascading Style Sheets (CSS) token sequences, which allows remote attackers to cause a denial of service (out-of-bounds read) via a crafted local font, related to "Type Confusion."Show less
CVE-2010-4576
1Google
2Chrome
Chrome Os
Apr 29, 2026
Dec 22, 2010
N/A· v4
N/A· v3
5.0 MEDIUM· v2
browser/worker_host/message_port_dispatcher.cc in Google Chrome before 8.0.552.224 and Chrome OS before 8.0.552.343 does not properly handle certain postMessage calls, which allows remote attackers to cause a denial of s...Show more
browser/worker_host/message_port_dispatcher.cc in Google Chrome before 8.0.552.224 and Chrome OS before 8.0.552.343 does not properly handle certain postMessage calls, which allows remote attackers to cause a denial of service (NULL pointer dereference and application crash) via crafted JavaScript code that creates a web worker.Show less