Vulnerabilities > Google > Chrome

DATE CVE VULNERABILITY TITLE RISK
2017-06-06 CVE-2015-1207 Double Free vulnerability in multiple products
Double-free vulnerability in libavformat/mov.c in FFMPEG in Google Chrome 41.0.2251.0 allows remote attackers to cause a denial of service (memory corruption and crash) via a crafted .m4a file.
network
low complexity
google debian CWE-415
6.5
2017-05-23 CVE-2016-5178 Improper Input Validation vulnerability in multiple products
Multiple unspecified vulnerabilities in Google Chrome before 53.0.2785.143 allow remote attackers to cause a denial of service or possibly have other impact via unknown vectors.
network
low complexity
google opensuse debian redhat fedoraproject CWE-20
critical
9.8
2017-05-23 CVE-2016-5177 Use After Free vulnerability in multiple products
Use-after-free vulnerability in V8 in Google Chrome before 53.0.2785.143 allows remote attackers to cause a denial of service (crash) or possibly have unspecified other impact via unknown vectors.
8.8
2017-04-25 CVE-2017-5051 Integer Overflow or Wraparound vulnerability in Google Chrome
An integer overflow in FFmpeg in Google Chrome prior to 57.0.2987.98 for Mac, Windows, and Linux and 57.0.2987.108 for Android allowed a remote attacker to perform an out of bounds memory write via a crafted video file, related to ChunkDemuxer.
network
low complexity
google CWE-190
8.8
2017-04-25 CVE-2017-5050 Integer Overflow or Wraparound vulnerability in Google Chrome
An integer overflow in FFmpeg in Google Chrome prior to 57.0.2987.98 for Mac, Windows, and Linux and 57.0.2987.108 for Android allowed a remote attacker to perform an out of bounds memory write via a crafted video file, related to ChunkDemuxer.
network
low complexity
google CWE-190
8.8
2017-04-25 CVE-2017-5049 Integer Overflow or Wraparound vulnerability in Google Chrome
An integer overflow in FFmpeg in Google Chrome prior to 57.0.2987.98 for Mac, Windows, and Linux and 57.0.2987.108 for Android allowed a remote attacker to perform an out of bounds memory write via a crafted video file, related to ChunkDemuxer.
network
low complexity
google CWE-190
8.8
2017-04-25 CVE-2017-5048 Integer Overflow or Wraparound vulnerability in Google Chrome
An integer overflow in FFmpeg in Google Chrome prior to 57.0.2987.98 for Mac, Windows, and Linux and 57.0.2987.108 for Android allowed a remote attacker to perform an out of bounds memory write via a crafted video file, related to ChunkDemuxer.
network
low complexity
google CWE-190
8.8
2017-04-25 CVE-2017-5047 Integer Overflow or Wraparound vulnerability in Google Chrome
An integer overflow in FFmpeg in Google Chrome prior to 57.0.2987.98 for Mac, Windows, and Linux and 57.0.2987.108 for Android allowed a remote attacker to perform an out of bounds memory write via a crafted video file, related to ChunkDemuxer.
network
low complexity
google CWE-190
8.8
2017-04-24 CVE-2017-5046 V8 in Google Chrome prior to 57.0.2987.98 for Mac, Windows, and Linux and 57.0.2987.108 for Android had insufficient policy enforcement, which allowed a remote attacker to spoof the location object via a crafted HTML page, related to Blink information disclosure.
network
low complexity
google redhat debian
4.3
2017-04-24 CVE-2017-5045 Cross-site Scripting vulnerability in multiple products
XSS Auditor in Google Chrome prior to 57.0.2987.98 for Mac, Windows, and Linux and 57.0.2987.108 for Android allowed detection of a blocked iframe load, which allowed a remote attacker to brute force JavaScript variables via a crafted HTML page.
network
low complexity
google redhat debian CWE-79
6.1