CVE-2013-2922

Use-after-free vulnerability in core/html/HTMLTemplateElement.cpp in Blink, as used in Google Chrome before 30.0.1599.66, allows remote attackers to cause a denial of service or possibly have unspecified other impact via crafted JavaScript code that operates on a TEMPLATE element...

CVE-2013-2909

Use-after-free vulnerability in Blink, as used in Google Chrome before 30.0.1599.66, allows remote attackers to cause a denial of service or possibly have unspecified other impact via vectors related to inline-block rendering for bidirectional Unicode text in an element isolated from its siblings...

Out-of-bounds

The ReverbConvolverStage::ReverbConvolverStage function in core/platform/audio/ReverbConvolverStage.cpp in the Web Audio implementation in Blink, as used in Google Chrome before 30.0.1599.66, allows remote attackers to cause a denial of service out-of-bounds read via vectors related to the...

CVE-2013-2916

Blink, as used in Google Chrome before 30.0.1599.66, allows remote attackers to spoof the address bar via vectors involving a response with a 204 aka No Content status code, in conjunction with a delay in notifying the user of an attempted spoof...

CVE-2013-2917

The ReverbConvolverStage::ReverbConvolverStage function in core/platform/audio/ReverbConvolverStage.cpp in the Web Audio implementation in Blink, as used in Google Chrome before 30.0.1599.66, allows remote attackers to cause a denial of service out-of-bounds read via vectors related to the...

CVE-2013-2916

CVE-2013-2916 refers to an address bar spoofing vulnerability in Blink/Chrome prior to 30.0.1599.66, where a response with a 204 No Content status and a delay in notifying the user could enable spoofing of the address bar. Publicly documented in Chrome/chromium update notes and openSUSE/Chromium ...

CVE-2013-2922

Removed by vendor...

CVE-2013-2918

Removed by vendor...

CVE-2013-2921

Removed by vendor...

CVE-2013-2917

Removed by vendor...

CVE-2013-2916

Removed by vendor...

CVE-2013-2911

Removed by vendor...

CVE-2013-2910

Removed by vendor...

CVE-2013-2906

Multiple race conditions in the Web Audio implementation in Blink, as used in Google Chrome before 30.0.1599.66, allow remote attackers to cause a denial of service or possibly have unspecified other impact via vectors related to threading in core/html/HTMLMediaElement.cpp,...

CVE-2013-2909

Use-after-free vulnerability in Blink, as used in Google Chrome before 30.0.1599.66, allows remote attackers to cause a denial of service or possibly have unspecified other impact via vectors related to inline-block rendering for bidirectional Unicode text in an element isolated from its siblings...

CVE-2013-2911

Use-after-free vulnerability in the XSLStyleSheet::compileStyleSheet function in core/xml/XSLStyleSheetLibxslt.cpp in Blink, as used in Google Chrome before 30.0.1599.66, allows remote attackers to cause a denial of service or possibly have unspecified other impact by leveraging improper handling...

CVE-2013-2916

Blink, as used in Google Chrome before 30.0.1599.66, allows remote attackers to spoof the address bar via vectors involving a response with a 204 aka No Content status code, in conjunction with a delay in notifying the user of an attempted spoof...

CVE-2013-2922

Use-after-free vulnerability in core/html/HTMLTemplateElement.cpp in Blink, as used in Google Chrome before 30.0.1599.66, allows remote attackers to cause a denial of service or possibly have unspecified other impact via crafted JavaScript code that operates on a TEMPLATE element...

CVE-2013-2906

CVE-2013-2906 involves race conditions in the Web Audio implementation (Blink) used by Google Chrome and Chromium up to version 30.0.1599.66. Exploitation could lead to denial of service or other impact; multiple vendor advisories list this fix as part of the Chrome/Chromium security updates. Aff...

CVE-2013-2909

CVE-2013-2909 is a use-after-free vulnerability in Blink used by Google Chrome prior to 30.0.1599.66. It arises in inline-block rendering for bidirectional Unicode text in an element isolated from its siblings, potentially enabling a remote denial-of-service or other impact. Public references in ...