CVE-2013-6802

Technical details for CVE-2013-6802 are not publicly available in the provided documents. Monitor for updates.

PT-2013-6118

Name of the Vulnerable Software and Affected Versions Google Chrome versions prior to 31.0.1650.57 Description The issue allows remote attackers to bypass intended sandbox restrictions by leveraging access to a renderer process. This was demonstrated during a Mobile Pwn2Own competition at PacSec...

CVE-2013-6802: Undefined Security Weakness

Google Chrome before 31.0.1650.57 allows remote attackers to bypass intended sandbox restrictions by leveraging access to a renderer process, as demonstrated during a Mobile Pwn2Own competition at PacSec 2013, a different vulnerability than CVE-2013-6632...

[SECURITY] [DSA 2724-1] chromium-browser security update

------------------------------------------------------------------------- Debian Security Advisory DSA-2724-1 [email protected] http://www.debian.org/security/ Michael Gilbert July 17, 2013 http://www.debian.org/security/faq -...

DSA-2724-1 chromium-browser - several

Bulletin has no description...

CVE-2013-2879

Google Chrome before 28.0.1500.71 does not properly determine the circumstances in which a renderer process can be considered a trusted process for sign-in and subsequent sync operations, which makes it easier for remote attackers to conduct phishing attacks via a crafted web site...

PT-2013-3999

Name of the Vulnerable Software and Affected Versions Google Chrome versions prior to 28.0.1500.71 Description The issue arises from improper determination of the circumstances under which a renderer process can be considered a trusted process for sign-in and subsequent sync operations. This make...

CVE-2013-2879: Exposure of Sensitive Information to an Unauthorized Actor

Google Chrome before 28.0.1500.71 does not properly determine the circumstances in which a renderer process can be considered a trusted process for sign-in and subsequent sync operations, which makes it easier for remote attackers to conduct phishing attacks via a crafted web site...

PT-2013-3975

Name of the Vulnerable Software and Affected Versions Google Chrome versions prior to 27.0.1453.110 Description The issue allows remote attackers to cause a denial of service or possibly have other impact via unknown vectors due to an incorrect handle being provided to a renderer process in...

CVE-2012-5376

The Inter-process Communication IPC implementation in Google Chrome before 22.0.1229.94 allows remote attackers to bypass intended sandbox restrictions and write to arbitrary files by leveraging access to a renderer process, a different vulnerability than CVE-2012-5112...

CVE-2012-5376

The Inter-process Communication IPC implementation in Google Chrome before 22.0.1229.94 allows remote attackers to bypass intended sandbox restrictions and write to arbitrary files by leveraging access to a renderer process, a different vulnerability than CVE-2012-5112...

CVE-2012-5376: Improper Privilege Management

The Inter-process Communication IPC implementation in Google Chrome before 22.0.1229.94 allows remote attackers to bypass intended sandbox restrictions and write to arbitrary files by leveraging access to a renderer process, a different vulnerability than CVE-2012-5112...

PT-2012-5958

Name of the Vulnerable Software and Affected Versions Google Chrome versions prior to 22.0.1229.94 Description The issue concerns the Inter-process Communication IPC implementation, allowing remote attackers to bypass sandbox restrictions and write to arbitrary files by leveraging access to a...

CVE-2012-2854

Google Chrome before 21.0.1180.57 on Mac OS X and Linux, and before 21.0.1180.60 on Windows and Chrome Frame, allows remote attackers to obtain potentially sensitive information about pointer values by leveraging access to a WebUI renderer process...

Null pointer dereference

Google Chrome before 21.0.1180.57 on Mac OS X and Linux, and before 21.0.1180.60 on Windows and Chrome Frame, allows remote attackers to obtain potentially sensitive information about pointer values by leveraging access to a WebUI renderer process...

CVE-2012-2846

Google Chrome before 21.0.1180.57 on Linux does not properly isolate renderer processes, which allows remote attackers to cause a denial of service cross-process interference via unspecified vectors...

CVE-2012-2854

Google Chrome before 21.0.1180.57 on macOS/Linux and before 21.0.1180.60 on Windows/Chrome Frame is affected by CVE-2012-2854, which allows a remote attacker with access to a WebUI renderer process to obtain potentially sensitive pointer values. The issue is documented in multiple advisories and ...

CVE-2012-2854

Google Chrome before 21.0.1180.57 on Mac OS X and Linux, and before 21.0.1180.60 on Windows and Chrome Frame, allows remote attackers to obtain potentially sensitive information about pointer values by leveraging access to a WebUI renderer process...

CVE-2012-2854

Removed by vendor...

CVE-2012-2854

Google Chrome before 21.0.1180.57 on Mac OS X and Linux, and before 21.0.1180.60 on Windows and Chrome Frame, allows remote attackers to obtain potentially sensitive information about pointer values by leveraging access to a WebUI renderer process...