WebKit in Google Chrome before Blink M11 contains a bad cast to RenderBlock when anonymous blocks are renderblocks.
9.8CVSS
9.1AI Score
0.003EPSS
A wrong type is used for a return value from strlen in WebKit in Google Chrome before Blink M12 on 64-bit platforms.
9.8CVSS
9.1AI Score
0.002EPSS