CVE-2014-1702: Undefined Security Weakness

Use-after-free vulnerability in the DatabaseThread::cleanupDatabaseThread function in modules/webdatabase/DatabaseThread.cpp in the web database implementation in Blink, as used in Google Chrome before 33.0.1750.149, allows remote attackers to cause a denial of service or possibly have unspecifie...

CVE-2014-1701: Improper Neutralization of Input During Web Page Generation

The GenerateFunction function in bindings/scripts/codegeneratorv8.pm in Blink, as used in Google Chrome before 33.0.1750.149, does not implement a certain cross-origin restriction for the EventTarget::dispatchEvent function, which allows remote attackers to conduct Universal XSS UXSS attacks via...

PT-2014-1101

Name of the Vulnerable Software and Affected Versions Google Chrome versions prior to 33.0.1750.152 on OS X and Linux Google Chrome versions prior to 33.0.1750.154 on Windows Description The issue is related to the ScopedClipboardWriter::WritePickledData function not verifying a certain format...

CVE-2014-1713: Use After Free

Use-after-free vulnerability in the AttributeSetter function in bindings/templates/attributes.cpp in the bindings in Blink, as used in Google Chrome before 33.0.1750.152 on OS X and Linux and before 33.0.1750.154 on Windows, allows remote attackers to cause a denial of service or possibly have...

PT-2014-1064

Name of the Vulnerable Software and Affected Versions Google Chrome versions prior to 33.0.1750.152 on OS X and Linux Google Chrome versions prior to 33.0.1750.154 on Windows Description The issue is related to a use-after-free vulnerability in the AttributeSetter function in...

Stable Channel Update for Chrome OS

The Stable channel has been updated to 33.0.1750.152 Platform version: 5116.115.4/5116.115.5 for all devices. This build contains security fixes for Pwnium. Systems will be receiving the updates over the next few days. Security Fixes and Rewards Congratulations to geohot for an epic Pwnium...

www/chromium -- multiple vulnerabilities

Google Chrome Releases reports: New vulnerabilities after the Pwn2Own competition: 352369 Code execution outside sandbox. Credit to VUPEN. 352374 High CVE-2014-1713: Use-after-free in Blink bindings 352395 High CVE-2014-1714: Windows clipboard vulnerability 352420 Code execution outside sandbox...

PT-2014-4299

Name of the Vulnerable Software and Affected Versions Google Chrome versions prior to 33.0.1750.149 Description The issue is related to a use-after-free vulnerability in the modules/speech/SpeechSynthesis.cpp component of Blink, used in Google Chrome. This vulnerability can be exploited by remote...

PT-2014-4301

Name of the Vulnerable Software and Affected Versions Google Chrome versions prior to 33.0.1750.149 Description The issue is related to a use-after-free vulnerability in the DatabaseThread::cleanupDatabaseThread function, which is part of the web database implementation in Blink. This vulnerabili...

PT-2014-4300

Name of the Vulnerable Software and Affected Versions Google Chrome versions prior to 33.0.1750.149 Description The issue concerns the GenerateFunction in bindings/scripts/code generator v8.pm in Blink, which does not implement a certain cross-origin restriction for the EventTarget::dispatchEvent...

CVE-2013-6663

Use-after-free vulnerability in the SVGImage::setContainerSize function in core/svg/graphics/SVGImage.cpp in the SVG implementation in Blink, as used in Google Chrome before 33.0.1750.146, allows remote attackers to cause a denial of service or possibly have unspecified other impact via vectors...

Design/Logic Flaw

Use-after-free vulnerability in the FormAssociatedElement::formRemovedFromTree function in core/html/FormAssociatedElement.cpp in Blink, as used in Google Chrome before 33.0.1750.146, allows remote attackers to cause a denial of service or possibly have unspecified other impact via vectors...

Design/Logic Flaw

Use-after-free vulnerability in the SVGImage::setContainerSize function in core/svg/graphics/SVGImage.cpp in the SVG implementation in Blink, as used in Google Chrome before 33.0.1750.146, allows remote attackers to cause a denial of service or possibly have unspecified other impact via vectors...

CVE-2013-6664

Use-after-free vulnerability in the FormAssociatedElement::formRemovedFromTree function in core/html/FormAssociatedElement.cpp in Blink, as used in Google Chrome before 33.0.1750.146, allows remote attackers to cause a denial of service or possibly have unspecified other impact via vectors...

CVE-2013-6664

CVE-2013-6664 is a use-after-free in Blink’s FormAssociatedElement::formRemovedFromTree (core/html/FormAssociatedElement.cpp) used by Google Chrome before 33.0.1750.146. The vulnerability could allow remote denial of service or other unspecified impact via vectors involving FORM elements, demonst...

CVE-2013-6663

CVE-2013-6663 is a use-after-free in Chromium/Blink’s SVG handling (SVGImage::setContainerSize) that affects Chrome prior to 33.0.1750.146. The issue can cause a crash/denial of service and possibly other impacts via SVG view resizing; connected sources confirm a use-after-free in SVG handling in...

CVE-2013-6663

Use-after-free vulnerability in the SVGImage::setContainerSize function in core/svg/graphics/SVGImage.cpp in the SVG implementation in Blink, as used in Google Chrome before 33.0.1750.146, allows remote attackers to cause a denial of service or possibly have unspecified other impact via vectors...

CVE-2013-6664: Undefined Security Weakness

Use-after-free vulnerability in the FormAssociatedElement::formRemovedFromTree function in core/html/FormAssociatedElement.cpp in Blink, as used in Google Chrome before 33.0.1750.146, allows remote attackers to cause a denial of service or possibly have unspecified other impact via vectors...

CVE-2013-6663: Undefined Security Weakness

Use-after-free vulnerability in the SVGImage::setContainerSize function in core/svg/graphics/SVGImage.cpp in the SVG implementation in Blink, as used in Google Chrome before 33.0.1750.146, allows remote attackers to cause a denial of service or possibly have unspecified other impact via vectors...

PT-2014-3162

Name of the Vulnerable Software and Affected Versions Google Chrome versions prior to 33.0.1750.146 Description A use-after-free issue in the FormAssociatedElement::formRemovedFromTree function in core/html/FormAssociatedElement.cpp in Blink allows remote attackers to cause a denial of service or...