Google

CVE VENDORS PRODUCTS UPDATED PUBLISHED CVSS
CVE-2010-4488 1Google 1Chrome Apr 29, 2026 Dec 7, 2010 N/A· v4 N/A· v3 5.0 MEDIUM· v2 Google Chrome before 8.0.552.215 does not properly handle HTTP proxy authentication, which allows remote attackers to cause a denial of service (application crash) via unspecified vectors.
CVE-2010-4487 1Google 1Chrome Apr 29, 2026 Dec 7, 2010 N/A· v4 N/A· v3 7.5 HIGH· v2 Incomplete blacklist vulnerability in Google Chrome before 8.0.552.215 on Linux and Mac OS X allows remote attackers to have an unspecified impact via a "dangerous file."
CVE-2010-4486 1Google 1Chrome Apr 29, 2026 Dec 7, 2010 N/A· v4 N/A· v3 9.3 HIGH· v2 Use-after-free vulnerability in Google Chrome before 8.0.552.215 allows remote attackers to cause a denial of service or possibly have unspecified other impact via vectors related to history handling.
CVE-2010-4485 1Google 1Chrome Apr 29, 2026 Dec 7, 2010 N/A· v4 N/A· v3 4.3 MEDIUM· v2 Google Chrome before 8.0.552.215 does not properly restrict the generation of file dialogs, which allows remote attackers to cause a denial of service (reduced usability and possible application crash) via a crafted web...Show more Google Chrome before 8.0.552.215 does not properly restrict the generation of file dialogs, which allows remote attackers to cause a denial of service (reduced usability and possible application crash) via a crafted web site.Show less
CVE-2010-4484 1Google 1Chrome Apr 29, 2026 Dec 7, 2010 N/A· v4 N/A· v3 5.0 MEDIUM· v2 Google Chrome before 8.0.552.215 does not properly handle HTML5 databases, which allows attackers to cause a denial of service (application crash) via unspecified vectors.
CVE-2010-4483 1Google 1Chrome Apr 29, 2026 Dec 7, 2010 N/A· v4 N/A· v3 4.3 MEDIUM· v2 Google Chrome before 8.0.552.215 does not properly restrict read access to videos derived from CANVAS elements, which allows remote attackers to bypass the Same Origin Policy and obtain potentially sensitive video data v...Show more Google Chrome before 8.0.552.215 does not properly restrict read access to videos derived from CANVAS elements, which allows remote attackers to bypass the Same Origin Policy and obtain potentially sensitive video data via a crafted web site.Show less
CVE-2010-4482 1Google 1Chrome Apr 29, 2026 Dec 7, 2010 N/A· v4 N/A· v3 5.0 MEDIUM· v2 Unspecified vulnerability in Google Chrome before 8.0.552.215 allows remote attackers to bypass the pop-up blocker via unknown vectors.
CVE-2010-4008 9Apache AppleCanonical+6 more 15Chrome Debian LinuxEnterprise Linux Desktop+12 more Apr 29, 2026 Nov 17, 2010 N/A· v4 N/A· v3 4.3 MEDIUM· v2 libxml2 before 2.7.8, as used in Google Chrome before 7.0.517.44, Apple Safari 5.0.2 and earlier, and other products, reads from invalid memory locations during processing of malformed XPath expressions, which allows con...Show more libxml2 before 2.7.8, as used in Google Chrome before 7.0.517.44, Apple Safari 5.0.2 and earlier, and other products, reads from invalid memory locations during processing of malformed XPath expressions, which allows context-dependent attackers to cause a denial of service (application crash) via a crafted XML document.Show less
CVE-2010-4206 3Fedoraproject GoogleWebkitgtk 3Chrome FedoraWebkitgtk Apr 29, 2026 Nov 6, 2010 N/A· v4 8.8 HIGH· v3 6.8 MEDIUM· v2 Array index error in the FEBlend::apply function in WebCore/platform/graphics/filters/FEBlend.cpp in WebKit, as used in Google Chrome before 7.0.517.44, webkitgtk before 1.2.6, and other products, allows remote attackers...Show more Array index error in the FEBlend::apply function in WebCore/platform/graphics/filters/FEBlend.cpp in WebKit, as used in Google Chrome before 7.0.517.44, webkitgtk before 1.2.6, and other products, allows remote attackers to cause a denial of service and possibly execute arbitrary code via a crafted SVG document, related to effects in the application of filters.Show less
CVE-2010-4205 1Google 1Chrome Apr 29, 2026 Nov 6, 2010 N/A· v4 9.8 CRITICAL· v3 7.5 HIGH· v2 Google Chrome before 7.0.517.44 does not properly handle the data types of event objects, which allows remote attackers to cause a denial of service or possibly have unspecified other impact via unknown vectors.
CVE-2010-4204 3Fedoraproject GoogleWebkitgtk 3Chrome FedoraWebkitgtk Apr 29, 2026 Nov 6, 2010 N/A· v4 9.8 CRITICAL· v3 7.5 HIGH· v2 WebKit, as used in Google Chrome before 7.0.517.44, webkitgtk before 1.2.6, and other products, accesses a frame object after this object has been destroyed, which allows remote attackers to cause a denial of service or...Show more WebKit, as used in Google Chrome before 7.0.517.44, webkitgtk before 1.2.6, and other products, accesses a frame object after this object has been destroyed, which allows remote attackers to cause a denial of service or possibly have unspecified other impact via unknown vectors.Show less
CVE-2010-4203 3Google RedhatWebmproject 5Chrome Enterprise Linux DesktopEnterprise Linux Server+2 more Apr 29, 2026 Nov 6, 2010 N/A· v4 9.8 CRITICAL· v3 10.0 HIGH· v2 WebM libvpx (aka the VP8 Codec SDK) before 0.9.5, as used in Google Chrome before 7.0.517.44, allows remote attackers to cause a denial of service (memory corruption) or possibly execute arbitrary code via invalid frames...Show more WebM libvpx (aka the VP8 Codec SDK) before 0.9.5, as used in Google Chrome before 7.0.517.44, allows remote attackers to cause a denial of service (memory corruption) or possibly execute arbitrary code via invalid frames.Show less
CVE-2010-4202 1Google 1Chrome Apr 29, 2026 Nov 6, 2010 N/A· v4 9.8 CRITICAL· v3 7.5 HIGH· v2 Multiple integer overflows in Google Chrome before 7.0.517.44 on Linux allow remote attackers to cause a denial of service or possibly have unspecified other impact via a crafted font.
CVE-2010-4201 1Google 1Chrome Apr 29, 2026 Nov 6, 2010 N/A· v4 9.8 CRITICAL· v3 7.5 HIGH· v2 Use-after-free vulnerability in Google Chrome before 7.0.517.44 allows remote attackers to cause a denial of service or possibly have unspecified other impact via vectors involving text control selections.
CVE-2010-4199 2Debian Google 2Chrome Debian Linux Apr 29, 2026 Nov 6, 2010 N/A· v4 8.8 HIGH· v3 6.8 MEDIUM· v2 Google Chrome before 7.0.517.44 does not properly perform a cast of an unspecified variable during processing of an SVG use element, which allows remote attackers to cause a denial of service or possibly have unspecified...Show more Google Chrome before 7.0.517.44 does not properly perform a cast of an unspecified variable during processing of an SVG use element, which allows remote attackers to cause a denial of service or possibly have unspecified other impact via a crafted SVG document.Show less
CVE-2010-4198 3Fedoraproject GoogleWebkitgtk 3Chrome FedoraWebkitgtk Apr 29, 2026 Nov 6, 2010 N/A· v4 8.8 HIGH· v3 6.8 MEDIUM· v2 WebKit, as used in Google Chrome before 7.0.517.44, webkitgtk before 1.2.6, and other products, does not properly handle large text areas, which allows remote attackers to cause a denial of service (memory corruption) or...Show more WebKit, as used in Google Chrome before 7.0.517.44, webkitgtk before 1.2.6, and other products, does not properly handle large text areas, which allows remote attackers to cause a denial of service (memory corruption) or possibly have unspecified other impact via a crafted HTML document.Show less
CVE-2010-4197 3Fedoraproject GoogleWebkitgtk 3Chrome FedoraWebkitgtk Apr 29, 2026 Nov 6, 2010 N/A· v4 9.8 CRITICAL· v3 7.5 HIGH· v2 Use-after-free vulnerability in WebKit, as used in Google Chrome before 7.0.517.44, webkitgtk before 1.2.6, and other products, allows remote attackers to cause a denial of service or possibly have unspecified other impa...Show more Use-after-free vulnerability in WebKit, as used in Google Chrome before 7.0.517.44, webkitgtk before 1.2.6, and other products, allows remote attackers to cause a denial of service or possibly have unspecified other impact via vectors involving text editing.Show less
CVE-2010-4042 2Google Opensuse 2Chrome Opensuse Apr 29, 2026 Oct 21, 2010 N/A· v4 9.8 CRITICAL· v3 7.5 HIGH· v2 Google Chrome before 7.0.517.41 does not properly handle element maps, which allows remote attackers to cause a denial of service or possibly have unspecified other impact via vectors related to "stale elements."
CVE-2010-4041 1Google 1Chrome Apr 29, 2026 Oct 21, 2010 N/A· v4 9.8 CRITICAL· v3 7.5 HIGH· v2 The sandbox implementation in Google Chrome before 7.0.517.41 on Linux does not properly constrain worker processes, which might allow remote attackers to bypass intended access restrictions via unspecified vectors.
CVE-2010-4040 3Debian GoogleOpensuse 3Chrome Debian LinuxOpensuse Apr 29, 2026 Oct 21, 2010 N/A· v4 7.8 HIGH· v3 6.8 MEDIUM· v2 Google Chrome before 7.0.517.41 does not properly handle animated GIF images, which allows remote attackers to cause a denial of service (memory corruption) or possibly have unspecified other impact via a crafted image.

Previous 1...650651652...662 Next