Vulnerabilities > Google > Chrome > 32.0.1700.64

DATE CVE VULNERABILITY TITLE RISK
2014-02-24 CVE-2013-6652 Path Traversal vulnerability in Google Chrome
Directory traversal vulnerability in sandbox/win/src/named_pipe_dispatcher.cc in Google Chrome before 33.0.1750.117 on Windows allows attackers to bypass intended named-pipe policy restrictions in the sandbox via vectors related to (1) lack of checks for ..
network
low complexity
google microsoft CWE-22
7.5
2014-01-28 CVE-2014-1681 Security vulnerability in Google Chrome
Multiple unspecified vulnerabilities in Google Chrome before 32.0.1700.102 have unknown impact and attack vectors, related to 12 "security fixes [that were not] either contributed by external researchers or particularly interesting."
network
low complexity
google
critical
10.0
2014-01-28 CVE-2013-6650 Improper Input Validation vulnerability in multiple products
The StoreBuffer::ExemptPopularPages function in store-buffer.cc in Google V8 before 3.22.24.16, as used in Google Chrome before 32.0.1700.102, allows remote attackers to cause a denial of service (memory corruption) or possibly have unspecified other impact via vectors that trigger incorrect handling of "popular pages."
network
low complexity
debian google opensuse CWE-20
7.5
2014-01-28 CVE-2013-6649 Resource Management Errors vulnerability in Google Chrome
Use-after-free vulnerability in the RenderSVGImage::paint function in core/rendering/svg/RenderSVGImage.cpp in Blink, as used in Google Chrome before 32.0.1700.102, allows remote attackers to cause a denial of service or possibly have unspecified other impact via vectors involving a zero-size SVG image.
network
low complexity
google debian opensuse CWE-399
7.5
2014-01-16 CVE-2013-6643 Improper Authentication vulnerability in multiple products
The OneClickSigninBubbleView::WindowClosing function in browser/ui/views/sync/one_click_signin_bubble_view.cc in Google Chrome before 32.0.1700.76 on Windows and before 32.0.1700.77 on Mac OS X and Linux allows attackers to trigger a sync with an arbitrary Google account by leveraging improper handling of the closing of an untrusted signin confirm dialog.
network
low complexity
google apple linux opensuse microsoft debian CWE-287
7.5