Google

CVE VENDORS PRODUCTS UPDATED PUBLISHED CVSS
CVE-2011-1823 1Google 1Android Apr 21, 2026 Jun 9, 2011 N/A· v4 7.8 HIGH· v3 7.2 HIGH· v2 The vold volume manager daemon on Android 3.0 and 2.x before 2.3.4 trusts messages that are received from a PF_NETLINK socket, which allows local users to execute arbitrary code and gain root privileges via a negative in...Show more The vold volume manager daemon on Android 3.0 and 2.x before 2.3.4 trusts messages that are received from a PF_NETLINK socket, which allows local users to execute arbitrary code and gain root privileges via a negative index that bypasses a maximum-only signed integer check in the DirectVolume::handlePartitionAdded method, which triggers memory corruption, as demonstrated by Gingerbreak.Show less
CVE-2010-4804 1Google 1Android Apr 29, 2026 Jun 9, 2011 N/A· v4 N/A· v3 4.3 MEDIUM· v2 The Android browser in Android before 2.3.4 allows remote attackers to obtain SD card contents via crafted content:// URIs, related to (1) BrowserActivity.java and (2) BrowserSettings.java in com/android/browser/.
CVE-2011-1807 1Google 1Chrome Apr 29, 2026 May 26, 2011 N/A· v4 N/A· v3 10.0 HIGH· v2 Google Chrome before 11.0.696.71 does not properly handle blobs, which allows remote attackers to execute arbitrary code via unspecified vectors that trigger an out-of-bounds write.
CVE-2011-1806 1Google 1Chrome Apr 29, 2026 May 26, 2011 N/A· v4 N/A· v3 10.0 HIGH· v2 Google Chrome before 11.0.696.71 does not properly implement the GPU command buffer, which allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via unspecified vectors.
CVE-2011-1804 1Google 1Chrome Apr 29, 2026 May 26, 2011 N/A· v4 N/A· v3 7.5 HIGH· v2 rendering/RenderBox.cpp in WebCore in WebKit before r86862, as used in Google Chrome before 11.0.696.71, does not properly render floats, which allows remote attackers to cause a denial of service or possibly have unspec...Show more rendering/RenderBox.cpp in WebCore in WebKit before r86862, as used in Google Chrome before 11.0.696.71, does not properly render floats, which allows remote attackers to cause a denial of service or possibly have unspecified other impact via unknown vectors that lead to a "stale pointer."Show less
CVE-2011-1801 1Google 1Chrome Apr 29, 2026 May 26, 2011 N/A· v4 N/A· v3 5.0 MEDIUM· v2 Unspecified vulnerability in Google Chrome before 11.0.696.71 allows remote attackers to bypass the pop-up blocker via unknown vectors.
CVE-2011-2171 1Google 1Chrome Os Apr 29, 2026 May 24, 2011 N/A· v4 N/A· v3 10.0 HIGH· v2 Unspecified vulnerability in the dbugs package in Google Chrome OS before R12 0.12.433.38 Beta has unknown impact and attack vectors.
CVE-2011-2170 1Google 1Chrome Os Apr 29, 2026 May 24, 2011 N/A· v4 N/A· v3 4.4 MEDIUM· v2 Google Chrome OS before R12 0.12.433.38 Beta, when Guest mode is enabled, does not prevent changes on the about:flags page, which has unspecified impact and local attack vectors.
CVE-2011-2169 1Google 1Chrome Os Apr 29, 2026 May 24, 2011 N/A· v4 N/A· v3 7.2 HIGH· v2 Google Chrome OS before R12 0.12.433.38 Beta allows local users to gain privileges by creating a /var/lib/chromeos-aliases.conf file and placing commands in it.
CVE-2011-1800 1Google 1Chrome Apr 29, 2026 May 16, 2011 N/A· v4 N/A· v3 7.5 HIGH· v2 Multiple integer overflows in the SVG Filters implementation in WebCore in WebKit in Google Chrome before 11.0.696.68 allow remote attackers to cause a denial of service or possibly have unspecified other impact via unkn...Show more Multiple integer overflows in the SVG Filters implementation in WebCore in WebKit in Google Chrome before 11.0.696.68 allow remote attackers to cause a denial of service or possibly have unspecified other impact via unknown vectors.Show less
CVE-2011-1799 2Debian Google 2Chrome Debian Linux Apr 29, 2026 May 16, 2011 N/A· v4 N/A· v3 6.8 MEDIUM· v2 Google Chrome before 11.0.696.68 does not properly perform casts of variables during interaction with the WebKit engine, which allows remote attackers to cause a denial of service or possibly have unspecified other impac...Show more Google Chrome before 11.0.696.68 does not properly perform casts of variables during interaction with the WebKit engine, which allows remote attackers to cause a denial of service or possibly have unspecified other impact via unknown vectors.Show less
CVE-2011-0419 9Apache AppleDebian+6 more 10Android Debian LinuxFreebsd+7 more Apr 29, 2026 May 16, 2011 N/A· v4 N/A· v3 4.3 MEDIUM· v2 Stack consumption vulnerability in the fnmatch implementation in apr_fnmatch.c in the Apache Portable Runtime (APR) library before 1.4.3 and the Apache HTTP Server before 2.2.18, and in fnmatch.c in libc in NetBSD 5.1, O...Show more Stack consumption vulnerability in the fnmatch implementation in apr_fnmatch.c in the Apache Portable Runtime (APR) library before 1.4.3 and the Apache HTTP Server before 2.2.18, and in fnmatch.c in libc in NetBSD 5.1, OpenBSD 4.8, FreeBSD, Apple Mac OS X 10.6, Oracle Solaris 10, and Android, allows context-dependent attackers to cause a denial of service (CPU and memory consumption) via *? sequences in the first argument, as demonstrated by attacks against mod_autoindex in httpd.Show less
CVE-2011-2075 1Google 1Chrome Apr 29, 2026 May 10, 2011 N/A· v4 N/A· v3 9.3 HIGH· v2 Unspecified vulnerability in Google Chrome 11.0.696.65 on Windows 7 SP1 allows remote attackers to execute arbitrary code via unknown vectors. NOTE: as of 20110510, the only disclosure is a vague advisory that possibly...Show more Unspecified vulnerability in Google Chrome 11.0.696.65 on Windows 7 SP1 allows remote attackers to execute arbitrary code via unknown vectors. NOTE: as of 20110510, the only disclosure is a vague advisory that possibly relates to multiple vulnerabilities or multiple products. However, because it is from a well-known researcher, it is being assigned a CVE identifier for tracking purposes.Show less
CVE-2011-1456 1Google 1Chrome Apr 29, 2026 May 3, 2011 N/A· v4 N/A· v3 6.8 MEDIUM· v2 Google Chrome before 11.0.696.57 does not properly handle PDF forms, which allows remote attackers to cause a denial of service or possibly have unspecified other impact via unknown vectors that lead to "stale pointers."
CVE-2011-1455 1Google 1Chrome Apr 29, 2026 May 3, 2011 N/A· v4 N/A· v3 6.8 MEDIUM· v2 Google Chrome before 11.0.696.57 does not properly handle PDF documents with multipart encoding, which allows remote attackers to cause a denial of service (out-of-bounds read) via a crafted document.
CVE-2011-1454 1Google 1Chrome Apr 29, 2026 May 3, 2011 N/A· v4 N/A· v3 6.8 MEDIUM· v2 Use-after-free vulnerability in the DOM id handling functionality in Google Chrome before 11.0.696.57 allows remote attackers to cause a denial of service or possibly have unspecified other impact via a crafted HTML docu...Show more Use-after-free vulnerability in the DOM id handling functionality in Google Chrome before 11.0.696.57 allows remote attackers to cause a denial of service or possibly have unspecified other impact via a crafted HTML document.Show less
CVE-2011-1452 1Google 1Chrome Apr 29, 2026 May 3, 2011 N/A· v4 N/A· v3 5.8 MEDIUM· v2 Google Chrome before 11.0.696.57 allows user-assisted remote attackers to spoof the URL bar via vectors involving a redirect and a manual reload.
CVE-2011-1451 2Apple Google 4Chrome Iphone OsItunes+1 more Apr 29, 2026 May 3, 2011 N/A· v4 N/A· v3 7.5 HIGH· v2 Google Chrome before 11.0.696.57 does not properly handle DOM id maps, which allows remote attackers to cause a denial of service or possibly have unspecified other impact via unknown vectors that lead to "dangling point...Show more Google Chrome before 11.0.696.57 does not properly handle DOM id maps, which allows remote attackers to cause a denial of service or possibly have unspecified other impact via unknown vectors that lead to "dangling pointers."Show less
CVE-2011-1450 1Google 1Chrome Apr 29, 2026 May 3, 2011 N/A· v4 N/A· v3 5.0 MEDIUM· v2 Google Chrome before 11.0.696.57 does not properly present file dialogs, which allows remote attackers to cause a denial of service or possibly have unspecified other impact via unknown vectors that lead to "dangling poi...Show more Google Chrome before 11.0.696.57 does not properly present file dialogs, which allows remote attackers to cause a denial of service or possibly have unspecified other impact via unknown vectors that lead to "dangling pointers."Show less
CVE-2011-1449 2Apple Google 4Chrome Iphone OsItunes+1 more Apr 29, 2026 May 3, 2011 N/A· v4 N/A· v3 6.8 MEDIUM· v2 Use-after-free vulnerability in the WebSockets implementation in Google Chrome before 11.0.696.57 allows remote attackers to cause a denial of service or possibly have unspecified other impact via unknown vectors.

Previous 1...643644645...662 Next