CVSS: 6.5EPSS: 0%CPEs: 1EXPL: 0CVE-2010-3250
https://notcve.org/view.php?id=CVE-2010-3250
07 Sep 2010 — Unspecified vulnerability in Google Chrome before 6.0.472.53 allows remote attackers to enumerate the set of installed extensions via unknown vectors. Vulnerabilidad sin especificar en Google Chrome anterior a v6.0.472.53 permite a atacantes remotos enumerar el conjunto de extensiones instaladas a través de vectores desconocidos. • http://code.google.com/p/chromium/issues/detail?id=45876 •
CVSS: 9.3EPSS: 13%CPEs: 8EXPL: 0CVE-2010-3257 – webkit: stale pointer issue with focusing
https://notcve.org/view.php?id=CVE-2010-3257
07 Sep 2010 — Use-after-free vulnerability in WebKit, as used in Apple Safari before 4.1.3 and 5.0.x before 5.0.3, Google Chrome before 6.0.472.53, and webkitgtk before 1.2.6, allows remote attackers to execute arbitrary code or cause a denial of service (application crash) via vectors involving element focus. Google Chrome anterior a v6.0.472.53 no realiza apropiadamente el manejo del foco, lo que permite a atacantes remotos causar una denegación de servicio o posiblemente tener otros impactos sin especificar a través d... • http://code.google.com/p/chromium/issues/detail?id=52443 • CWE-416: Use After Free •
CVSS: 6.5EPSS: 0%CPEs: 8EXPL: 0CVE-2010-3259 – webkit: cross-origin image theft
https://notcve.org/view.php?id=CVE-2010-3259
07 Sep 2010 — WebKit, as used in Apple Safari before 4.1.3 and 5.0.x before 5.0.3, Google Chrome before 6.0.472.53, and webkitgtk before 1.2.6, does not properly restrict read access to images derived from CANVAS elements, which allows remote attackers to bypass the Same Origin Policy and obtain potentially sensitive image data via a crafted web site. Google Chrome anterior a v6.0.472.53 no restringe apropiadamente el acceso de lectura a las imágenes, lo que permite a atacantes remotos evitar la "Same Origin Policy" y ob... • http://code.google.com/p/chromium/issues/detail?id=53001 • CWE-200: Exposure of Sensitive Information to an Unauthorized Actor •
CVSS: 9.8EPSS: 0%CPEs: 1EXPL: 0CVE-2010-3256
https://notcve.org/view.php?id=CVE-2010-3256
07 Sep 2010 — Google Chrome before 6.0.472.53 does not properly limit the number of stored autocomplete entries, which has unspecified impact and attack vectors. Google Chrome anterior a v6.0.472.53 no limita apropiadamente el número de entradas de autocompletado que se almacenan, lo que podría suponer un impacto y unos vectores de ataque sin especificar. • http://code.google.com/p/chromium/issues/detail?id=51727 •
CVSS: 10.0EPSS: 7%CPEs: 8EXPL: 0CVE-2010-3116 – webkit: memory corruption with MIME types
https://notcve.org/view.php?id=CVE-2010-3116
24 Aug 2010 — Multiple use-after-free vulnerabilities in WebKit, as used in Apple Safari before 4.1.3 and 5.0.x before 5.0.3, Google Chrome before 5.0.375.127, and webkitgtk before 1.2.6, allow remote attackers to execute arbitrary code or cause a denial of service (application crash) via vectors related to improper handling of MIME types by plug-ins. Google Chrome anterior a v5.0.375.127 no procesa correctamente los tipos MIME, lo que podría permitir a atacantes remotos provocar una denegación de servicio (corrupción de... • http://code.google.com/p/chromium/issues/detail?id=50515 • CWE-416: Use After Free •
CVSS: 10.0EPSS: 0%CPEs: 1EXPL: 0CVE-2010-3112
https://notcve.org/view.php?id=CVE-2010-3112
24 Aug 2010 — Google Chrome before 5.0.375.127 does not properly implement file dialogs, which allows attackers to cause a denial of service (memory corruption) or possibly have unspecified other impact via unknown vectors. Google Chrome anterior a v5.0.375.127 no implementa correctamente los diálogos de archivo, lo que podría permitir a atacantes provocar una denegación de servicio (corrupción de memoria) o posiblemente tenga otro impacto sin especificar a través de vectores desconocidos. • http://code.google.com/p/chromium/issues/detail?id=45400 • CWE-119: Improper Restriction of Operations within the Bounds of a Memory Buffer •
CVSS: 10.0EPSS: 0%CPEs: 2EXPL: 0CVE-2010-3119 – webkit: DoS due to improper Ruby support
https://notcve.org/view.php?id=CVE-2010-3119
24 Aug 2010 — Google Chrome before 5.0.375.127 and webkitgtk before 1.2.6 do not properly support the Ruby language, which allows attackers to cause a denial of service (memory corruption) or possibly have unspecified other impact via unknown vectors. Google Chrome anterior a versión 5.0.375.127 y webkitgtk anterior a versión 1.2.6, no admiten apropiadamente el lenguaje de Ruby, que permite a los atacantes causar una denegación de servicio (corrupción de memoria) o posiblemente tener otro impacto no especificado por medi... • http://code.google.com/p/chromium/issues/detail?id=51654 • CWE-119: Improper Restriction of Operations within the Bounds of a Memory Buffer •
CVSS: 10.0EPSS: 0%CPEs: 1EXPL: 0CVE-2010-3111
https://notcve.org/view.php?id=CVE-2010-3111
24 Aug 2010 — Google Chrome before 6.0.472.53 does not properly mitigate an unspecified flaw in the Windows kernel, which has unknown impact and attack vectors, a different vulnerability than CVE-2010-2897. Google Chrome anterior a versión 6.0.472.53, no mitiga apropiadamente un fallo no especificado en el kernel de Windows, que tiene un impacto y vectores de ataque desconocidos, una vulnerabilidad diferente de CVE-2010-2897. • http://code.google.com/p/chromium/issues/detail?id=51070 •
CVSS: 10.0EPSS: 0%CPEs: 5EXPL: 0CVE-2010-3113 – webkit: memory corruption when handling SVG documents
https://notcve.org/view.php?id=CVE-2010-3113
24 Aug 2010 — Google Chrome before 5.0.375.127, and webkitgtk before 1.2.5, does not properly handle SVG documents, which allows remote attackers to cause a denial of service (memory corruption) or possibly have unspecified other impact via unknown vectors related to state changes when using DeleteButtonController. Google Chrome anterior a v5.0.375.127 no maneja correctamente los documentos SVG, lo que podría permitir a atacantes remotos provocar una denegación de servicio (corrupción de memoria) o posiblemente tenga otr... • http://bugzilla.redhat.com/bugzilla/show_bug.cgi?id=628032 • CWE-119: Improper Restriction of Operations within the Bounds of a Memory Buffer •
CVSS: 10.0EPSS: 0%CPEs: 1EXPL: 0CVE-2010-3117
https://notcve.org/view.php?id=CVE-2010-3117
24 Aug 2010 — Google Chrome before 5.0.375.127 does not properly implement the notifications feature, which allows remote attackers to cause a denial of service (application crash) and possibly have unspecified other impact via unknown vectors. Google Chrome anterior a v5.0.375.127 no implementa correctamente la característica de notificaciones, lo que podría permitir a atacantes remotos provocar una denegación de servicios (fallo de la aplicación) y posiblemente tener otro impacto sin especificar mediante vectores desco... • http://code.google.com/p/chromium/issues/detail?id=50553 •