Max CVSS | 10.0 | Min CVSS | 4.3 | Total Count | 2 |
ID | CVSS | Summary | Last (major) update | Published | |
CVE-2015-6764 | 7.5 |
The BasicJsonStringifier::SerializeJSArray function in json-stringifier.h in the JSON stringifier in Google V8, as used in Google Chrome before 47.0.2526.73, improperly loads array elements, which allows remote attackers to cause a denial of service
|
16-08-2022 - 13:22 | 06-12-2015 - 01:59 | |
CVE-2015-6772 | 7.5 |
The DOM implementation in Blink, as used in Google Chrome before 47.0.2526.73, does not prevent javascript: URL navigation while a document is being detached, which allows remote attackers to bypass the Same Origin Policy via crafted JavaScript code
|
14-09-2017 - 01:29 | 06-12-2015 - 01:59 | |
CVE-2015-6783 | 4.3 |
The FindStartOffsetOfFileInZipFile function in crazy_linker_zip.cpp in crazy_linker (aka Crazy Linker) in Android 5.x and 6.x, as used in Google Chrome before 47.0.2526.73, improperly searches for an EOCD record, which allows attackers to bypass a si
|
14-09-2017 - 01:29 | 06-12-2015 - 01:59 | |
CVE-2015-6785 | 4.3 |
The CSPSource::hostMatches function in WebKit/Source/core/frame/csp/CSPSource.cpp in the Content Security Policy (CSP) implementation in Google Chrome before 47.0.2526.73 accepts an x.y hostname as a match for a *.x.y pattern, which might allow remot
|
14-09-2017 - 01:29 | 06-12-2015 - 01:59 | |
CVE-2015-6775 | 7.5 |
fpdfsdk/src/jsapi/fxjs_v8.cpp in PDFium, as used in Google Chrome before 47.0.2526.73, does not use signatures, which allows remote attackers to cause a denial of service or possibly have unspecified other impact via vectors that leverage "type confu
|
14-09-2017 - 01:29 | 06-12-2015 - 01:59 | |
CVE-2015-6766 | 7.5 |
Use-after-free vulnerability in the AppCache implementation in Google Chrome before 47.0.2526.73 allows remote attackers with renderer access to cause a denial of service or possibly have unspecified other impact by leveraging incorrect AppCacheUpdat
|
14-09-2017 - 01:29 | 06-12-2015 - 01:59 | |
CVE-2015-6784 | 4.3 |
The page serializer in Google Chrome before 47.0.2526.73 mishandles Mark of the Web (MOTW) comments for URLs containing a "--" sequence, which might allow remote attackers to inject HTML via a crafted URL, as demonstrated by an initial http://example
|
14-09-2017 - 01:29 | 06-12-2015 - 01:59 | |
CVE-2015-6778 | 7.5 |
The CJBig2_SymbolDict class in fxcodec/jbig2/JBig2_SymbolDict.cpp in PDFium, as used in Google Chrome before 47.0.2526.73, allows remote attackers to cause a denial of service (out-of-bounds memory access) or possibly have unspecified other impact vi
|
14-09-2017 - 01:29 | 06-12-2015 - 01:59 | |
CVE-2015-6781 | 7.5 |
Integer overflow in the FontData::Bound function in data/font_data.cc in Google sfntly, as used in Google Chrome before 47.0.2526.73, allows remote attackers to cause a denial of service or possibly have unspecified other impact via a crafted offset
|
14-09-2017 - 01:29 | 06-12-2015 - 01:59 | |
CVE-2015-6767 | 7.5 |
Use-after-free vulnerability in content/browser/appcache/appcache_dispatcher_host.cc in the AppCache implementation in Google Chrome before 47.0.2526.73 allows remote attackers to cause a denial of service or possibly have unspecified other impact by
|
14-09-2017 - 01:29 | 06-12-2015 - 01:59 | |
CVE-2015-6771 | 7.5 |
js/array.js in Google V8, as used in Google Chrome before 47.0.2526.73, improperly implements certain map and filter operations for arrays, which allows remote attackers to cause a denial of service (out-of-bounds memory access) or possibly have unsp
|
14-09-2017 - 01:29 | 06-12-2015 - 01:59 | |
CVE-2015-6773 | 7.5 |
The convolution implementation in Skia, as used in Google Chrome before 47.0.2526.73, does not properly constrain row lengths, which allows remote attackers to cause a denial of service (out-of-bounds memory access) or possibly have unspecified other
|
14-09-2017 - 01:29 | 06-12-2015 - 01:59 | |
CVE-2015-6770 | 7.5 |
The DOM implementation in Google Chrome before 47.0.2526.73 allows remote attackers to bypass the Same Origin Policy via unspecified vectors, a different vulnerability than CVE-2015-6768.
|
14-09-2017 - 01:29 | 06-12-2015 - 01:59 | |
CVE-2015-6782 | 4.3 |
The Document::open function in WebKit/Source/core/dom/Document.cpp in Google Chrome before 47.0.2526.73 does not ensure that page-dismissal event handling is compatible with modal-dialog blocking, which makes it easier for remote attackers to spoof O
|
14-09-2017 - 01:29 | 06-12-2015 - 01:59 | |
CVE-2015-6768 | 7.5 |
The DOM implementation in Google Chrome before 47.0.2526.73 allows remote attackers to bypass the Same Origin Policy via unspecified vectors, a different vulnerability than CVE-2015-6770.
|
14-09-2017 - 01:29 | 06-12-2015 - 01:59 | |
CVE-2015-6774 | 7.5 |
Use-after-free vulnerability in the GetLoadTimes function in renderer/loadtimes_extension_bindings.cc in the Extensions implementation in Google Chrome before 47.0.2526.73 allows remote attackers to cause a denial of service or possibly have unspecif
|
14-09-2017 - 01:29 | 06-12-2015 - 01:59 | |
CVE-2015-6777 | 7.5 |
Use-after-free vulnerability in the ContainerNode::notifyNodeInsertedInternal function in WebKit/Source/core/dom/ContainerNode.cpp in the DOM implementation in Google Chrome before 47.0.2526.73 allows remote attackers to cause a denial of service or
|
14-09-2017 - 01:29 | 06-12-2015 - 01:59 | |
CVE-2015-6776 | 6.8 |
The opj_dwt_decode_1* functions in dwt.c in OpenJPEG, as used in PDFium in Google Chrome before 47.0.2526.73, allow remote attackers to cause a denial of service (out-of-bounds array access) or possibly have unspecified other impact via crafted JPEG
|
14-09-2017 - 01:29 | 06-12-2015 - 01:59 | |
CVE-2015-6787 | 10.0 |
Multiple unspecified vulnerabilities in Google Chrome before 47.0.2526.73 allow attackers to cause a denial of service or possibly have other impact via unknown vectors.
|
14-09-2017 - 01:29 | 06-12-2015 - 01:59 | |
CVE-2015-6779 | 4.3 |
PDFium, as used in Google Chrome before 47.0.2526.73, does not properly restrict use of chrome: URLs, which allows remote attackers to bypass intended scheme restrictions via a crafted PDF document, as demonstrated by a document with a link to a chro
|
14-09-2017 - 01:29 | 06-12-2015 - 01:59 | |
CVE-2015-6786 | 4.3 |
The CSPSourceList::matches function in WebKit/Source/core/frame/csp/CSPSourceList.cpp in the Content Security Policy (CSP) implementation in Google Chrome before 47.0.2526.73 accepts a blob:, data:, or filesystem: URL as a match for a * pattern, whic
|
14-09-2017 - 01:29 | 06-12-2015 - 01:59 | |
CVE-2015-6765 | 10.0 |
Use-after-free vulnerability in content/browser/appcache/appcache_update_job.cc in Google Chrome before 47.0.2526.73 allows remote attackers to execute arbitrary code or cause a denial of service by leveraging the mishandling of AppCache update jobs.
|
14-09-2017 - 01:29 | 06-12-2015 - 01:59 | |
CVE-2015-6780 | 6.8 |
Use-after-free vulnerability in the Infobars implementation in Google Chrome before 47.0.2526.73 allows remote attackers to cause a denial of service or possibly have unspecified other impact via a crafted web site, related to browser/ui/views/websit
|
14-09-2017 - 01:29 | 06-12-2015 - 01:59 | |
CVE-2015-6769 | 7.5 |
The provisional-load commit implementation in WebKit/Source/bindings/core/v8/WindowProxy.cpp in Google Chrome before 47.0.2526.73 allows remote attackers to bypass the Same Origin Policy by leveraging a delay in window proxy clearing.
|
14-09-2017 - 01:29 | 06-12-2015 - 01:59 | |
CVE-2015-8478 | 7.5 |
Multiple unspecified vulnerabilities in Google V8 before 4.7.80.23, as used in Google Chrome before 47.0.2526.73, allow attackers to cause a denial of service or possibly have other impact via unknown vectors.
|
07-12-2016 - 18:28 | 06-12-2015 - 01:59 | |
CVE-2015-8480 | 10.0 |
The VideoFramePool::PoolImpl::CreateFrame function in media/base/video_frame_pool.cc in Google Chrome before 47.0.2526.73 does not initialize memory for a video-frame data structure, which might allow remote attackers to cause a denial of service (ou
|
07-12-2015 - 20:25 | 06-12-2015 - 01:59 | |
CVE-2015-8479 | 7.5 |
Use-after-free vulnerability in the AudioOutputDevice::OnDeviceAuthorized function in media/audio/audio_output_device.cc in Google Chrome before 47.0.2526.73 allows attackers to cause a denial of service (heap memory corruption) or possibly have unsp
|
07-12-2015 - 20:24 | 06-12-2015 - 01:59 |