CVE-2013-2922

Use-after-free vulnerability in core/html/HTMLTemplateElement.cpp in Blink, as used in Google Chrome before 30.0.1599.66, allows remote attackers to cause a denial of service or possibly have unspecified other impact via crafted JavaScript code that operates on a TEMPLATE element...

CVE-2013-2918

CVE-2013-2918 is a Use-after-free in Blink’s DOM implementation (RenderBlock/DOM-related code in core rendering). Connected sources confirm the issue affects Chromium/Google Chrome up to version 30.0.1599.66, with multiple security advisories and vendor updates listing CVE-2013-2918 among the fix...

CVE-2013-2921

Double free vulnerability in the ResourceFetcher::didLoadResource function in core/fetch/ResourceFetcher.cpp in the resource loader in Blink, as used in Google Chrome before 30.0.1599.66, allows remote attackers to cause a denial of service or possibly have unspecified other impact by triggering...

CVE-2013-2916

Removed by vendor...

CVE-2013-2909

Removed by vendor...

CVE-2013-2922

Removed by vendor...

CVE-2013-2906

Removed by vendor...

CVE-2013-2910

Use-after-free vulnerability in modules/webaudio/AudioScheduledSourceNode.cpp in the Web Audio implementation in Blink, as used in Google Chrome before 30.0.1599.66, allows remote attackers to cause a denial of service or possibly have unspecified other impact via unknown vectors...

CVE-2013-2910

CVE-2013-2910 is a use-after-free in Web Audio (AudioScheduledSourceNode.cpp) within Blink’s Web Audio implementation used by Chrome pre-30.0.1599.66. The vulnerability could allow a remote attacker to cause a denial of service or other unspecified impact via unknown vectors. Public documents in ...

CVE-2013-2911

Use-after-free vulnerability in the XSLStyleSheet::compileStyleSheet function in core/xml/XSLStyleSheetLibxslt.cpp in Blink, as used in Google Chrome before 30.0.1599.66, allows remote attackers to cause a denial of service or possibly have unspecified other impact by leveraging improper handling...

CVE-2013-2918

Use-after-free vulnerability in the RenderBlock::collapseAnonymousBlockChild function in core/rendering/RenderBlock.cpp in the DOM implementation in Blink, as used in Google Chrome before 30.0.1599.66, allows remote attackers to cause a denial of service or possibly have unspecified other impact ...

CVE-2013-2917

CVE-2013-2917 concerns the Chromium/Blink Web Audio implementation. The ReverbConvolverStage used in core/platform/audio/ReverbConvolverStage.cpp contains an out-of-bounds read in the impulseResponse array, enabling a remote attacker to trigger a denial of service. Affected product/version lineag...

CVE-2013-2906

CVE-2013-2906 involves race conditions in the Web Audio implementation (Blink) used by Google Chrome and Chromium up to version 30.0.1599.66. Exploitation could lead to denial of service or other impact; multiple vendor advisories list this fix as part of the Chrome/Chromium security updates. Aff...

CVE-2013-2918

Removed by vendor...

CVE-2013-2917

Removed by vendor...

CVE-2013-2921

Removed by vendor...

CVE-2013-2911

Removed by vendor...

CVE-2013-2910

Removed by vendor...

CVE-2013-2903

Use-after-free vulnerability in the HTMLMediaElement::didMoveToNewDocument function in core/html/HTMLMediaElement.cpp in Blink, as used in Google Chrome before 29.0.1547.57, allows remote attackers to cause a denial of service or possibly have unspecified other impact via vectors involving moving...

CVE-2013-2904

Use-after-free vulnerability in the Document::finishedParsing function in core/dom/Document.cpp in Blink, as used in Google Chrome before 29.0.1547.57, allows remote attackers to cause a denial of service or possibly have unspecified other impact via an onload event that changes an IFRAME element...