ByteOS

Resource:

third-party-advisory

x_refsource_SECUNIA

▼Authorized Data Publishers (ADP)

CVE Program Container

References

Hyperlink	Resource
http://www.securityfocus.com/bid/38177	vdb-entry x_refsource_BID x_transferred
http://code.google.com/p/chromium/issues/detail?id=32915	x_refsource_CONFIRM x_transferred
http://www.osvdb.org/62320	vdb-entry x_refsource_OSVDB x_transferred
https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A14256	vdb-entry signature x_refsource_OVAL x_transferred
http://sites.google.com/a/chromium.org/dev/Home/chromium-security/chromium-security-bugs	x_refsource_CONFIRM x_transferred
https://exchange.xforce.ibmcloud.com/vulnerabilities/56217	vdb-entry x_refsource_XF x_transferred
http://securitytracker.com/id?1023583	vdb-entry x_refsource_SECTRACK x_transferred
http://www.vupen.com/english/advisories/2010/0361	vdb-entry x_refsource_VUPEN x_transferred
http://googlechromereleases.blogspot.com/2010/02/stable-channel-update.html	x_refsource_CONFIRM x_transferred
http://secunia.com/advisories/38545	third-party-advisory x_refsource_SECUNIA x_transferred

Hyperlink: http://www.securityfocus.com/bid/38177

Resource:

vdb-entry

x_refsource_BID

x_transferred

Hyperlink: http://code.google.com/p/chromium/issues/detail?id=32915

Resource:

x_refsource_CONFIRM

x_transferred

Hyperlink: http://www.osvdb.org/62320

Resource:

vdb-entry

x_refsource_OSVDB

x_transferred

Hyperlink: https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A14256

Resource:

vdb-entry

signature

x_refsource_OVAL

x_transferred

Hyperlink: http://sites.google.com/a/chromium.org/dev/Home/chromium-security/chromium-security-bugs

Resource:

x_refsource_CONFIRM

x_transferred

Hyperlink: https://exchange.xforce.ibmcloud.com/vulnerabilities/56217

Resource:

vdb-entry

x_refsource_XF

x_transferred

Hyperlink: http://securitytracker.com/id?1023583

Resource:

vdb-entry

x_refsource_SECTRACK

x_transferred

Hyperlink: http://www.vupen.com/english/advisories/2010/0361

Resource:

vdb-entry

x_refsource_VUPEN

x_transferred

Hyperlink: http://googlechromereleases.blogspot.com/2010/02/stable-channel-update.html

Resource:

x_refsource_CONFIRM

x_transferred

Resource:

third-party-advisory

x_refsource_SECUNIA

x_transferred

▼National Vulnerability Database (NVD)

nvd.nist.gov

Source:cve@mitre.org

Published At:18 Feb, 2010 | 18:00

Updated At:29 Apr, 2026 | 01:13

Date Added	Due Date	Vulnerability Name	Required Action
	N/A

Metrics

Type	Version	Base score	Base severity	Vector
Primary	2.0	9.3	HIGH	AV:N/AC:M/Au:N/C:C/I:C/A:C

Type: Primary

Version: 2.0

Base score: 9.3

Base severity: HIGH

Vector:

AV:N/AC:M/Au:N/C:C/I:C/A:C

CPE Matches

cpe:2.3:a:google:chrome:*:*:*:*:*:*:*:*

>>chrome>>Versions up to 4.0.249.78(inclusive)

cpe:2.3:a:google:chrome:0.2.149.27:*:*:*:*:*:*:*

>>chrome>>0.2.149.27

cpe:2.3:a:google:chrome:0.2.149.29:*:*:*:*:*:*:*

>>chrome>>0.2.149.29

cpe:2.3:a:google:chrome:0.2.149.30:*:*:*:*:*:*:*

>>chrome>>0.2.149.30

cpe:2.3:a:google:chrome:0.2.152.1:*:*:*:*:*:*:*

>>chrome>>0.2.152.1

cpe:2.3:a:google:chrome:0.2.153.1:*:*:*:*:*:*:*

>>chrome>>0.2.153.1

cpe:2.3:a:google:chrome:0.3.154.0:*:*:*:*:*:*:*

>>chrome>>0.3.154.0

cpe:2.3:a:google:chrome:0.3.154.3:*:*:*:*:*:*:*

>>chrome>>0.3.154.3

cpe:2.3:a:google:chrome:0.4.154.18:*:*:*:*:*:*:*

>>chrome>>0.4.154.18

cpe:2.3:a:google:chrome:0.4.154.22:*:*:*:*:*:*:*

>>chrome>>0.4.154.22

cpe:2.3:a:google:chrome:0.4.154.31:*:*:*:*:*:*:*

>>chrome>>0.4.154.31

cpe:2.3:a:google:chrome:0.4.154.33:*:*:*:*:*:*:*

>>chrome>>0.4.154.33

cpe:2.3:a:google:chrome:1.0.154.36:*:*:*:*:*:*:*

>>chrome>>1.0.154.36

cpe:2.3:a:google:chrome:1.0.154.39:*:*:*:*:*:*:*

>>chrome>>1.0.154.39

cpe:2.3:a:google:chrome:1.0.154.42:*:*:*:*:*:*:*

>>chrome>>1.0.154.42

cpe:2.3:a:google:chrome:1.0.154.43:*:*:*:*:*:*:*

>>chrome>>1.0.154.43

cpe:2.3:a:google:chrome:1.0.154.46:*:*:*:*:*:*:*

>>chrome>>1.0.154.46

cpe:2.3:a:google:chrome:1.0.154.48:*:*:*:*:*:*:*

>>chrome>>1.0.154.48

cpe:2.3:a:google:chrome:1.0.154.52:*:*:*:*:*:*:*

>>chrome>>1.0.154.52

cpe:2.3:a:google:chrome:1.0.154.53:*:*:*:*:*:*:*

>>chrome>>1.0.154.53

cpe:2.3:a:google:chrome:1.0.154.59:*:*:*:*:*:*:*

>>chrome>>1.0.154.59

cpe:2.3:a:google:chrome:1.0.154.65:*:*:*:*:*:*:*

>>chrome>>1.0.154.65

cpe:2.3:a:google:chrome:2.0.156.1:*:*:*:*:*:*:*

>>chrome>>2.0.156.1

cpe:2.3:a:google:chrome:2.0.157.0:*:*:*:*:*:*:*

>>chrome>>2.0.157.0

cpe:2.3:a:google:chrome:2.0.157.2:*:*:*:*:*:*:*

>>chrome>>2.0.157.2

cpe:2.3:a:google:chrome:2.0.158.0:*:*:*:*:*:*:*

>>chrome>>2.0.158.0

cpe:2.3:a:google:chrome:2.0.159.0:*:*:*:*:*:*:*

>>chrome>>2.0.159.0

cpe:2.3:a:google:chrome:2.0.169.0:*:*:*:*:*:*:*

>>chrome>>2.0.169.0

cpe:2.3:a:google:chrome:2.0.169.1:*:*:*:*:*:*:*

>>chrome>>2.0.169.1

cpe:2.3:a:google:chrome:2.0.170.0:*:*:*:*:*:*:*

>>chrome>>2.0.170.0

cpe:2.3:a:google:chrome:2.0.172:*:*:*:*:*:*:*

>>chrome>>2.0.172

cpe:2.3:a:google:chrome:2.0.172.2:*:*:*:*:*:*:*

>>chrome>>2.0.172.2

cpe:2.3:a:google:chrome:2.0.172.8:*:*:*:*:*:*:*

>>chrome>>2.0.172.8

cpe:2.3:a:google:chrome:2.0.172.27:*:*:*:*:*:*:*

>>chrome>>2.0.172.27

cpe:2.3:a:google:chrome:2.0.172.28:*:*:*:*:*:*:*

>>chrome>>2.0.172.28

cpe:2.3:a:google:chrome:2.0.172.30:*:*:*:*:*:*:*

>>chrome>>2.0.172.30

cpe:2.3:a:google:chrome:2.0.172.31:*:*:*:*:*:*:*

>>chrome>>2.0.172.31

cpe:2.3:a:google:chrome:2.0.172.33:*:*:*:*:*:*:*

>>chrome>>2.0.172.33

cpe:2.3:a:google:chrome:2.0.172.37:*:*:*:*:*:*:*

>>chrome>>2.0.172.37

cpe:2.3:a:google:chrome:2.0.172.38:*:*:*:*:*:*:*

>>chrome>>2.0.172.38

cpe:2.3:a:google:chrome:3.0.182.2:*:*:*:*:*:*:*

>>chrome>>3.0.182.2

cpe:2.3:a:google:chrome:3.0.190.2:*:*:*:*:*:*:*

>>chrome>>3.0.190.2

cpe:2.3:a:google:chrome:3.0.193.2:beta:*:*:*:*:*:*

>>chrome>>3.0.193.2

cpe:2.3:a:google:chrome:3.0.195.21:*:*:*:*:*:*:*

>>chrome>>3.0.195.21

cpe:2.3:a:google:chrome:3.0.195.24:*:*:*:*:*:*:*

>>chrome>>3.0.195.24

cpe:2.3:a:google:chrome:3.0.195.32:*:*:*:*:*:*:*

>>chrome>>3.0.195.32

cpe:2.3:a:google:chrome:3.0.195.33:*:*:*:*:*:*:*

>>chrome>>3.0.195.33

Weaknesses

CWE ID	Type	Source
CWE-189	Primary	nvd@nist.gov

CWE ID: CWE-189

Type: Primary

Source: nvd@nist.gov

References

Hyperlink	Source	Resource
http://code.google.com/p/chromium/issues/detail?id=32915	cve@mitre.org	N/A
http://googlechromereleases.blogspot.com/2010/02/stable-channel-update.html	cve@mitre.org	Patch
http://secunia.com/advisories/38545	cve@mitre.org	Vendor Advisory
http://securitytracker.com/id?1023583	cve@mitre.org	N/A
http://sites.google.com/a/chromium.org/dev/Home/chromium-security/chromium-security-bugs	cve@mitre.org	Vendor Advisory
http://www.osvdb.org/62320	cve@mitre.org	N/A
http://www.securityfocus.com/bid/38177	cve@mitre.org	N/A
http://www.vupen.com/english/advisories/2010/0361	cve@mitre.org	Vendor Advisory
https://exchange.xforce.ibmcloud.com/vulnerabilities/56217	cve@mitre.org	N/A
https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A14256	cve@mitre.org	N/A
http://code.google.com/p/chromium/issues/detail?id=32915	af854a3a-2127-422b-91ae-364da2661108	N/A
http://googlechromereleases.blogspot.com/2010/02/stable-channel-update.html	af854a3a-2127-422b-91ae-364da2661108	Patch
http://secunia.com/advisories/38545	af854a3a-2127-422b-91ae-364da2661108	Vendor Advisory
http://securitytracker.com/id?1023583	af854a3a-2127-422b-91ae-364da2661108	N/A
http://sites.google.com/a/chromium.org/dev/Home/chromium-security/chromium-security-bugs	af854a3a-2127-422b-91ae-364da2661108	Vendor Advisory
http://www.osvdb.org/62320	af854a3a-2127-422b-91ae-364da2661108	N/A
http://www.securityfocus.com/bid/38177	af854a3a-2127-422b-91ae-364da2661108	N/A
http://www.vupen.com/english/advisories/2010/0361	af854a3a-2127-422b-91ae-364da2661108	Vendor Advisory
https://exchange.xforce.ibmcloud.com/vulnerabilities/56217	af854a3a-2127-422b-91ae-364da2661108	N/A
https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A14256	af854a3a-2127-422b-91ae-364da2661108	N/A

Hyperlink: http://code.google.com/p/chromium/issues/detail?id=32915

Source: cve@mitre.org

Resource: N/A

Hyperlink: http://googlechromereleases.blogspot.com/2010/02/stable-channel-update.html

Source: cve@mitre.org

Resource:

Patch

Source: cve@mitre.org

Resource:

Vendor Advisory

Hyperlink: http://securitytracker.com/id?1023583

Source: cve@mitre.org

Resource: N/A

Hyperlink: http://sites.google.com/a/chromium.org/dev/Home/chromium-security/chromium-security-bugs

Source: cve@mitre.org

Resource:

Vendor Advisory

Hyperlink: http://www.osvdb.org/62320

Source: cve@mitre.org

Resource: N/A

Hyperlink: http://www.securityfocus.com/bid/38177

Source: cve@mitre.org

Resource: N/A

Hyperlink: http://www.vupen.com/english/advisories/2010/0361

Source: cve@mitre.org

Resource:

Vendor Advisory

Hyperlink: https://exchange.xforce.ibmcloud.com/vulnerabilities/56217

Source: cve@mitre.org

Resource: N/A

Hyperlink: https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A14256

Source: cve@mitre.org

Resource: N/A

Hyperlink: http://code.google.com/p/chromium/issues/detail?id=32915

Source: af854a3a-2127-422b-91ae-364da2661108

Resource: N/A

Hyperlink: http://googlechromereleases.blogspot.com/2010/02/stable-channel-update.html

Source: af854a3a-2127-422b-91ae-364da2661108

Resource:

Patch

Source: af854a3a-2127-422b-91ae-364da2661108

Resource:

Vendor Advisory

Hyperlink: http://securitytracker.com/id?1023583

Source: af854a3a-2127-422b-91ae-364da2661108

Resource: N/A

Hyperlink: http://sites.google.com/a/chromium.org/dev/Home/chromium-security/chromium-security-bugs

Source: af854a3a-2127-422b-91ae-364da2661108

Resource:

Vendor Advisory

Hyperlink: http://www.osvdb.org/62320

Source: af854a3a-2127-422b-91ae-364da2661108

Resource: N/A

Hyperlink: http://www.securityfocus.com/bid/38177

Source: af854a3a-2127-422b-91ae-364da2661108

Resource: N/A

Hyperlink: http://www.vupen.com/english/advisories/2010/0361

Source: af854a3a-2127-422b-91ae-364da2661108

Resource:

Vendor Advisory

Hyperlink: https://exchange.xforce.ibmcloud.com/vulnerabilities/56217

Source: af854a3a-2127-422b-91ae-364da2661108

Resource: N/A

Hyperlink: https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A14256

Source: af854a3a-2127-422b-91ae-364da2661108

Resource: N/A

Similar CVEs

1094Records found

CVE-2016-6987

Matching Score-8

Matching Score-8

CVSS Score-8.8||HIGH

EPSS-2.87% / 86.43%

7 Day CHG~0.00%

Published-13 Oct, 2016 | 19:00

Updated-06 May, 2026 | 22:30

Use-after-free vulnerability in Adobe Flash Player before 18.0.0.382 and 19.x through 23.x before 23.0.0.185 on Windows and OS X and before 11.2.202.637 on Linux allows attackers to execute arbitrary code via unspecified vectors, a different vulnerability than CVE-2016-6981.

Vendor-n/a Apple Inc.Google LLC Linux Kernel Organization, Inc Microsoft Corporation Adobe Inc.

Product-windows_10 mac_os_x windows_8.1 windows flash_player linux_kernel flash_player_desktop_runtime chrome_os n/a

CWE ID-CWE-416

Use After Free

CVE-2018-12391

Matching Score-8

Assigner-Mozilla Corporation

Matching Score-8

Assigner-Mozilla Corporation

CVSS Score-8.8||HIGH

EPSS-0.55% / 68.08%

7 Day CHG~0.00%

Published-28 Feb, 2019 | 18:00

Updated-05 Aug, 2024 | 08:31

During HTTP Live Stream playback on Firefox for Android, audio data can be accessed across origins in violation of security policies. Because the problem is in the underlying Android service, this issue is addressed by treating all HLS streams as cross-origin and opaque to access. *Note: this issue only affects Firefox for Android. Desktop versions of Firefox are unaffected.*. This vulnerability affects Firefox < 63, Firefox ESR < 60.3, and Thunderbird < 60.3.

Vendor-Mozilla Corporation Google LLC

Product-firefox android thunderbird firefox_esr Firefox Firefox ESR Thunderbird

CWE ID-CWE-863

Incorrect Authorization

CVE-2011-1301

Matching Score-8

Assigner-MITRE Corporation

Matching Score-8

Assigner-MITRE Corporation

CVSS Score-9.3||HIGH

EPSS-2.51% / 85.52%

7 Day CHG~0.00%

Published-15 Apr, 2011 | 19:00

Updated-29 Apr, 2026 | 01:13

Use-after-free vulnerability in the GPU process in Google Chrome before 10.0.648.205 allows remote attackers to execute arbitrary code via unknown vectors.

Vendor-n/a Google LLC

Product-chrome n/a

CWE ID-CWE-416

Use After Free

CVE-2011-0475

Matching Score-8

Assigner-MITRE Corporation

Matching Score-8

Assigner-MITRE Corporation

CVSS Score-9.3||HIGH

EPSS-5.37% / 90.19%

7 Day CHG~0.00%

Published-14 Jan, 2011 | 16:00

Updated-29 Apr, 2026 | 01:13

Use-after-free vulnerability in Google Chrome before 8.0.552.237 and Chrome OS before 8.0.552.344 allows remote attackers to cause a denial of service or possibly have unspecified other impact via a PDF document.

Vendor-n/a Google LLC

Product-chrome chrome_os n/a

CWE ID-CWE-416

Use After Free

CVE-2011-0625

Matching Score-8

Matching Score-8

CVSS Score-9.3||HIGH

EPSS-4.49% / 89.22%

7 Day CHG~0.00%

Published-13 May, 2011 | 22:00

Updated-29 Apr, 2026 | 01:13

Adobe Flash Player before 10.3.181.14 on Windows, Mac OS X, Linux, and Solaris and before 10.3.185.21 on Android allows attackers to execute arbitrary code via unspecified vectors, related to a "bounds checking" issue, a different vulnerability than CVE-2011-0623, CVE-2011-0624, and CVE-2011-0626.

Vendor-n/a Apple Inc.Oracle Corporation Google LLC Linux Kernel Organization, Inc Microsoft Corporation Adobe Inc.

Product-mac_os_x solaris windows flash_player android linux_kernel n/a

CWE ID-CWE-20

Improper Input Validation

CVE-2011-0619

Matching Score-8

Matching Score-8

CVSS Score-9.3||HIGH

EPSS-5.70% / 90.50%

7 Day CHG~0.00%

Published-13 May, 2011 | 22:00

Updated-29 Apr, 2026 | 01:13

Adobe Flash Player before 10.3.181.14 on Windows, Mac OS X, Linux, and Solaris and before 10.3.185.21 on Android allows attackers to execute arbitrary code or cause a denial of service (memory corruption) via unspecified vectors, a different vulnerability than CVE-2011-0620, CVE-2011-0621, and CVE-2011-0622.

Vendor-n/a Apple Inc.Oracle Corporation Google LLC Linux Kernel Organization, Inc Microsoft Corporation Adobe Inc.

Product-mac_os_x solaris windows flash_player android linux_kernel n/a

CWE ID-CWE-119

Improper Restriction of Operations within the Bounds of a Memory Buffer

CVE-2011-0624

Matching Score-8

Matching Score-8

CVSS Score-9.3||HIGH

EPSS-4.49% / 89.22%

7 Day CHG~0.00%

Published-13 May, 2011 | 22:00

Updated-29 Apr, 2026 | 01:13

Vendor-n/a Apple Inc.Oracle Corporation Google LLC Linux Kernel Organization, Inc Microsoft Corporation Adobe Inc.

Product-mac_os_x solaris windows flash_player android linux_kernel n/a

CWE ID-CWE-20

Improper Input Validation

CVE-2021-0305

Matching Score-8

Assigner-Android (associated with Google Inc. or Open Handset Alliance)

Matching Score-8

Assigner-Android (associated with Google Inc. or Open Handset Alliance)

CVSS Score-7.8||HIGH

EPSS-0.06% / 17.81%

7 Day CHG~0.00%

Published-10 Feb, 2021 | 16:48

Updated-03 Aug, 2024 | 15:32

In PackageInstaller, there is a possible tapjacking attack due to an insecure default value. This could lead to local escalation of privilege and permissions with no additional execution privileges needed. User interaction is needed for exploitation.Product: AndroidVersions: Android-8.1 Android-9 Android-10Android ID: A-154015447

Vendor-n/a Google LLC

Product-android Android

CWE ID-CWE-1021

Improper Restriction of Rendered UI Layers or Frames

CVE-2011-0626

Matching Score-8

Matching Score-8

CVSS Score-9.3||HIGH

EPSS-4.49% / 89.22%

7 Day CHG~0.00%

Published-13 May, 2011 | 22:00

Updated-29 Apr, 2026 | 01:13

Vendor-n/a Apple Inc.Oracle Corporation Google LLC Linux Kernel Organization, Inc Microsoft Corporation Adobe Inc.

Product-mac_os_x solaris windows flash_player android linux_kernel n/a

CWE ID-CWE-20

Improper Input Validation

CVE-2011-0611

Matching Score-8

Matching Score-8

CVSS Score-8.8||HIGH

EPSS-93.53% / 99.83%

7 Day CHG~0.00%

Published-13 Apr, 2011 | 14:00

Updated-21 Apr, 2026 | 20:30

Known KEV||Action Due Date - 2022-03-24||The impacted product is end-of-life and should be disconnected if still in use.

Adobe Flash Player before 10.2.154.27 on Windows, Mac OS X, Linux, and Solaris and 10.2.156.12 and earlier on Android; Adobe AIR before 2.6.19140; and Authplay.dll (aka AuthPlayLib.bundle) in Adobe Reader 9.x before 9.4.4 and 10.x through 10.0.1 on Windows, Adobe Reader 9.x before 9.4.4 and 10.x before 10.0.3 on Mac OS X, and Adobe Acrobat 9.x before 9.4.4 and 10.x before 10.0.3 on Windows and Mac OS X allow remote attackers to execute arbitrary code or cause a denial of service (application crash) via crafted Flash content; as demonstrated by a Microsoft Office document with an embedded .swf file that has a size inconsistency in a "group of included constants," object type confusion, ActionScript that adds custom functions to prototypes, and Date objects; and as exploited in the wild in April 2011.

Vendor-n/a Apple Inc.openSUSE Google LLC Oracle Corporation Linux Kernel Organization, Inc SUSE Microsoft Corporation Adobe Inc.

Product-acrobat acrobat_reader adobe_air mac_os_x linux_enterprise_desktop solaris windows flash_player chrome android linux_kernel chrome_os opensuse n/a reader flash_player air acrobat Flash Player

CWE ID-CWE-843

Access of Resource Using Incompatible Type ('Type Confusion')

CVE-2011-0609

Matching Score-8

Matching Score-8

CVSS Score-7.8||HIGH

EPSS-92.08% / 99.72%

7 Day CHG~0.00%

Published-15 Mar, 2011 | 17:00

Updated-21 Apr, 2026 | 20:30

Known KEV||Action Due Date - 2022-06-22||The impacted product is end-of-life and should be disconnected if still in use.

Unspecified vulnerability in Adobe Flash Player 10.2.154.13 and earlier on Windows, Mac OS X, Linux, and Solaris; 10.1.106.16 and earlier on Android; Adobe AIR 2.5.1 and earlier; and Authplay.dll (aka AuthPlayLib.bundle) in Adobe Reader and Acrobat 9.x through 9.4.2 and 10.x through 10.0.1 on Windows and Mac OS X, allows remote attackers to execute arbitrary code or cause a denial of service (application crash) via crafted Flash content, as demonstrated by a .swf file embedded in an Excel spreadsheet, and as exploited in the wild in March 2011.

Vendor-n/a Apple Inc.openSUSE Google LLC Oracle Corporation Linux Kernel Organization, Inc SUSE Microsoft Corporation Adobe Inc.

Product-acrobat acrobat_reader mac_os_x air linux_enterprise solaris windows flash_player macos chrome android linux_kernel chrome_os opensuse n/a Flash Player

CVE-2011-0480

Matching Score-8

Assigner-MITRE Corporation

Matching Score-8

Assigner-MITRE Corporation

CVSS Score-9.3||HIGH

EPSS-1.29% / 79.86%

7 Day CHG~0.00%

Published-14 Jan, 2011 | 16:00

Updated-29 Apr, 2026 | 01:13

Multiple buffer overflows in vorbis_dec.c in the Vorbis decoder in FFmpeg, as used in Google Chrome before 8.0.552.237 and Chrome OS before 8.0.552.344, allow remote attackers to cause a denial of service (memory corruption and application crash) or possibly have unspecified other impact via a crafted WebM file, related to buffers for (1) the channel floor and (2) the channel residue.

Vendor-n/a Debian GNU/Linux Canonical Ltd.Google LLC

Product-chrome debian_linux ubuntu_linux chrome_os n/a

CWE ID-CWE-120

Buffer Copy without Checking Size of Input ('Classic Buffer Overflow')

CVE-2011-0472

Matching Score-8

Assigner-MITRE Corporation

Matching Score-8

Assigner-MITRE Corporation

CVSS Score-9.3||HIGH

EPSS-4.49% / 89.23%

7 Day CHG~0.00%

Published-14 Jan, 2011 | 16:00

Updated-29 Apr, 2026 | 01:13

Google Chrome before 8.0.552.237 and Chrome OS before 8.0.552.344 do not properly handle the printing of PDF documents, which allows user-assisted remote attackers to cause a denial of service (application crash) or possibly have unspecified other impact via a multi-page document.

Vendor-n/a Google LLC

Product-chrome chrome_os n/a

CVE-2011-0623

Matching Score-8

Matching Score-8

CVSS Score-9.3||HIGH

EPSS-4.49% / 89.22%

7 Day CHG~0.00%

Published-13 May, 2011 | 22:00

Updated-29 Apr, 2026 | 01:13

Vendor-n/a Apple Inc.Oracle Corporation Google LLC Linux Kernel Organization, Inc Microsoft Corporation Adobe Inc.

Product-mac_os_x solaris windows flash_player android linux_kernel n/a

CWE ID-CWE-20

Improper Input Validation

CVE-2011-0620

Matching Score-8

Matching Score-8

CVSS Score-9.3||HIGH

EPSS-5.70% / 90.50%

7 Day CHG~0.00%

Published-13 May, 2011 | 22:00

Updated-29 Apr, 2026 | 01:13

Vendor-n/a Apple Inc.Oracle Corporation Google LLC Linux Kernel Organization, Inc Microsoft Corporation Adobe Inc.

Product-mac_os_x solaris windows flash_player android linux_kernel n/a

CWE ID-CWE-119

Improper Restriction of Operations within the Bounds of a Memory Buffer

CVE-2011-0621

Matching Score-8

Matching Score-8

CVSS Score-9.3||HIGH

EPSS-5.70% / 90.50%

7 Day CHG~0.00%

Published-13 May, 2011 | 22:00

Updated-29 Apr, 2026 | 01:13

Vendor-n/a Apple Inc.Oracle Corporation Google LLC Linux Kernel Organization, Inc Microsoft Corporation Adobe Inc.

Product-mac_os_x solaris windows flash_player android linux_kernel n/a

CWE ID-CWE-119

Improper Restriction of Operations within the Bounds of a Memory Buffer

CVE-2011-0628

Matching Score-8

Matching Score-8

CVSS Score-9.3||HIGH

EPSS-11.15% / 93.56%

7 Day CHG~0.00%

Published-31 May, 2011 | 20:00

Updated-29 Apr, 2026 | 01:13

Integer overflow in Adobe Flash Player before 10.3.181.14 on Windows, Mac OS X, Linux, and Solaris and before 10.3.185.21 on Android allows remote attackers to execute arbitrary code via ActionScript that improperly handles a long array object.

Vendor-n/a Apple Inc.Oracle Corporation Google LLC Linux Kernel Organization, Inc Microsoft Corporation Adobe Inc.

Product-mac_os_x solaris windows flash_player android linux_kernel n/a

CVE-2011-0622

Matching Score-8

Matching Score-8

CVSS Score-9.3||HIGH

EPSS-5.70% / 90.50%

7 Day CHG~0.00%

Published-13 May, 2011 | 22:00

Updated-29 Apr, 2026 | 01:13

Vendor-n/a Apple Inc.Oracle Corporation Google LLC Linux Kernel Organization, Inc Microsoft Corporation Adobe Inc.

Product-mac_os_x solaris windows flash_player android linux_kernel n/a

CWE ID-CWE-119

Improper Restriction of Operations within the Bounds of a Memory Buffer

CVE-2011-0627

Matching Score-8

Matching Score-8

CVSS Score-9.3||HIGH

EPSS-7.86% / 92.08%

7 Day CHG~0.00%

Published-13 May, 2011 | 22:00

Updated-29 Apr, 2026 | 01:13

Adobe Flash Player before 10.3.181.14 on Windows, Mac OS X, Linux, and Solaris and before 10.3.185.21 on Android allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via crafted Flash content, as possibly exploited in the wild in May 2011 by a Microsoft Office document with an embedded .swf file.

Vendor-n/a Apple Inc.Oracle Corporation Google LLC Linux Kernel Organization, Inc Microsoft Corporation Adobe Inc.

Product-mac_os_x solaris windows flash_player android linux_kernel n/a

CWE ID-CWE-20

Improper Input Validation

CVE-2020-6515

Matching Score-8

Assigner-Chrome

Matching Score-8

Assigner-Chrome

CVSS Score-8.8||HIGH

EPSS-3.21% / 87.15%

7 Day CHG~0.00%

Published-22 Jul, 2020 | 16:16

Updated-04 Aug, 2024 | 09:02

Use after free in tab strip in Google Chrome prior to 84.0.4147.89 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page.

Vendor-Google LLC openSUSE Fedora Project Debian GNU/Linux

Product-debian_linux chrome fedora backports_sle leap Chrome

CWE ID-CWE-416

Use After Free

CWE ID-CWE-787

Out-of-bounds Write

CVE-2020-6517

Matching Score-8

Assigner-Chrome

Matching Score-8

Assigner-Chrome

CVSS Score-8.8||HIGH

EPSS-1.73% / 82.66%

7 Day CHG~0.00%

Published-22 Jul, 2020 | 16:16

Updated-04 Aug, 2024 | 09:02

Heap buffer overflow in history in Google Chrome prior to 84.0.4147.89 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page.

Vendor-Google LLC openSUSE Fedora Project Debian GNU/Linux

Product-debian_linux chrome fedora backports_sle leap Chrome

CWE ID-CWE-787

Out-of-bounds Write

CVE-2020-6512

Matching Score-8

Assigner-Chrome

Matching Score-8

Assigner-Chrome

CVSS Score-8.8||HIGH

EPSS-4.25% / 88.89%

7 Day CHG~0.00%

Published-22 Jul, 2020 | 16:16

Updated-04 Aug, 2024 | 09:02

Type Confusion in V8 in Google Chrome prior to 84.0.4147.89 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page.

Vendor-Google LLC openSUSE Fedora Project Debian GNU/Linux

Product-debian_linux chrome fedora backports_sle leap Chrome

CWE ID-CWE-787

Out-of-bounds Write

CWE ID-CWE-843

Access of Resource Using Incompatible Type ('Type Confusion')

CVE-2020-6572

Matching Score-8

Assigner-Chrome

Matching Score-8

Assigner-Chrome

CVSS Score-8.8||HIGH

EPSS-19.07% / 95.41%

7 Day CHG~0.00%

Published-14 Jan, 2021 | 20:55

Updated-13 Jan, 2026 | 22:22

Known KEV||Action Due Date - 2022-07-10||Apply updates per vendor instructions.

Use after free in Media in Google Chrome prior to 81.0.4044.92 allowed a remote attacker to execute arbitrary code via a crafted HTML page.

Vendor-Google LLC

Product-chrome Chrome Chrome Media

CWE ID-CWE-416

Use After Free

CVE-2010-4486

Matching Score-8

Assigner-MITRE Corporation

Matching Score-8

Assigner-MITRE Corporation

CVSS Score-9.3||HIGH

EPSS-1.47% / 81.10%

7 Day CHG~0.00%

Published-07 Dec, 2010 | 20:00

Updated-29 Apr, 2026 | 01:13

Use-after-free vulnerability in Google Chrome before 8.0.552.215 allows remote attackers to cause a denial of service or possibly have unspecified other impact via vectors related to history handling.

Vendor-n/a Google LLC

Product-chrome n/a

CVE-2010-4490

Matching Score-8

Assigner-MITRE Corporation

Matching Score-8

Assigner-MITRE Corporation

CVSS Score-9.3||HIGH

EPSS-1.33% / 80.14%

7 Day CHG~0.00%

Published-07 Dec, 2010 | 20:00

Updated-29 Apr, 2026 | 01:13

Google Chrome before 8.0.552.215 allows remote attackers to cause a denial of service (application crash) or possibly have unspecified other impact via malformed video content that triggers an indexing error.

Vendor-n/a Google LLC

Product-chrome n/a

CVE-2010-3648

Matching Score-8

Matching Score-8

Vendor-n/a Apple Inc.Sun Microsystems (Oracle Corporation)Google LLC Linux Kernel Organization, Inc Microsoft Corporation Adobe Inc.

CVSS Score-9.3||HIGH

EPSS-2.96% / 86.63%

7 Day CHG~0.00%

Published-07 Nov, 2010 | 21:00

Updated-29 Apr, 2026 | 01:13

Unspecified vulnerability in Adobe Flash Player before 9.0.289.0 and 10.x before 10.1.102.64 on Windows, Mac OS X, Linux, and Solaris, and 10.1.95.1 on Android, allows attackers to execute arbitrary code or cause a denial of service (memory corruption) via unknown vectors, a different vulnerability than CVE-2010-3640, CVE-2010-3641, CVE-2010-3642, CVE-2010-3643, CVE-2010-3644, CVE-2010-3645, CVE-2010-3646, CVE-2010-3647, CVE-2010-3649, CVE-2010-3650, and CVE-2010-3652.

Product-mac_os_x solaris windows flash_player android linux_kernel n/a

CVE-2010-3134

Matching Score-8

Assigner-MITRE Corporation

Matching Score-8

Assigner-MITRE Corporation

CVSS Score-9.3||HIGH

EPSS-1.47% / 81.11%

7 Day CHG~0.00%

Published-26 Aug, 2010 | 18:00

Updated-29 Apr, 2026 | 01:13

Untrusted search path vulnerability in Google Earth 5.1.3535.3218 allows local users, and possibly remote attackers, to execute arbitrary code and conduct DLL hijacking attacks via a Trojan horse quserex.dll that is located in the same folder as a .kmz file.

Vendor-n/a Google LLC

Product-earth n/a

CVE-2010-3641

Matching Score-8

Matching Score-8

Vendor-n/a Apple Inc.Sun Microsystems (Oracle Corporation)Google LLC Linux Kernel Organization, Inc Microsoft Corporation Adobe Inc.

CVSS Score-9.3||HIGH

EPSS-2.96% / 86.63%

7 Day CHG~0.00%

Published-07 Nov, 2010 | 21:00

Updated-29 Apr, 2026 | 01:13

Unspecified vulnerability in Adobe Flash Player before 9.0.289.0 and 10.x before 10.1.102.64 on Windows, Mac OS X, Linux, and Solaris, and 10.1.95.1 on Android, allows attackers to execute arbitrary code or cause a denial of service (memory corruption) via unknown vectors, a different vulnerability than CVE-2010-3640, CVE-2010-3642, CVE-2010-3643, CVE-2010-3644, CVE-2010-3645, CVE-2010-3646, CVE-2010-3647, CVE-2010-3648, CVE-2010-3649, CVE-2010-3650, and CVE-2010-3652.

Product-mac_os_x solaris windows flash_player android linux_kernel n/a

CVE-2010-3646

Matching Score-8

Matching Score-8

Vendor-n/a Apple Inc.Sun Microsystems (Oracle Corporation)Google LLC Linux Kernel Organization, Inc Microsoft Corporation Adobe Inc.

CVSS Score-9.3||HIGH

EPSS-2.96% / 86.63%

7 Day CHG~0.00%

Published-07 Nov, 2010 | 21:00

Updated-29 Apr, 2026 | 01:13

Unspecified vulnerability in Adobe Flash Player before 9.0.289.0 and 10.x before 10.1.102.64 on Windows, Mac OS X, Linux, and Solaris, and 10.1.95.1 on Android, allows attackers to execute arbitrary code or cause a denial of service (memory corruption) via unknown vectors, a different vulnerability than CVE-2010-3640, CVE-2010-3641, CVE-2010-3642, CVE-2010-3643, CVE-2010-3644, CVE-2010-3645, CVE-2010-3647, CVE-2010-3648, CVE-2010-3649, CVE-2010-3650, and CVE-2010-3652.

Product-mac_os_x solaris windows flash_player android linux_kernel n/a

CVE-2010-3258

Matching Score-8

Assigner-MITRE Corporation

Matching Score-8

Assigner-MITRE Corporation

CVSS Score-9.3||HIGH

EPSS-0.17% / 38.45%

7 Day CHG~0.00%

Published-07 Sep, 2010 | 17:00

Updated-29 Apr, 2026 | 01:13

The sandbox implementation in Google Chrome before 6.0.472.53 does not properly deserialize parameters, which has unspecified impact and remote attack vectors.

Vendor-n/a Google LLC

Product-chrome n/a

CWE ID-CWE-502

Deserialization of Untrusted Data

CVE-2010-3649

Matching Score-8

Matching Score-8

Vendor-n/a Apple Inc.Sun Microsystems (Oracle Corporation)Google LLC Linux Kernel Organization, Inc Microsoft Corporation Adobe Inc.

CVSS Score-9.3||HIGH

EPSS-2.96% / 86.63%

7 Day CHG~0.00%

Published-07 Nov, 2010 | 21:00

Updated-29 Apr, 2026 | 01:13

Product-mac_os_x solaris windows flash_player android linux_kernel n/a

CVE-2010-3249

Matching Score-8

Assigner-MITRE Corporation

Matching Score-8

Assigner-MITRE Corporation

CVSS Score-9.3||HIGH

EPSS-0.76% / 73.44%

7 Day CHG~0.00%

Published-07 Sep, 2010 | 17:00

Updated-29 Apr, 2026 | 01:13

Google Chrome before 6.0.472.53 does not properly implement SVG filters, which allows remote attackers to cause a denial of service or possibly have unspecified other impact via unknown vectors, related to a "stale pointer" issue.

Vendor-n/a Google LLC

Product-chrome n/a

CVE-2010-3645

Matching Score-8

Matching Score-8

Vendor-n/a Apple Inc.Sun Microsystems (Oracle Corporation)Google LLC Linux Kernel Organization, Inc Microsoft Corporation Adobe Inc.

CVSS Score-9.3||HIGH

EPSS-2.96% / 86.63%

7 Day CHG~0.00%

Published-07 Nov, 2010 | 21:00

Updated-29 Apr, 2026 | 01:13

Unspecified vulnerability in Adobe Flash Player before 9.0.289.0 and 10.x before 10.1.102.64 on Windows, Mac OS X, Linux, and Solaris, and 10.1.95.1 on Android, allows attackers to execute arbitrary code or cause a denial of service (memory corruption) via unknown vectors, a different vulnerability than CVE-2010-3640, CVE-2010-3641, CVE-2010-3642, CVE-2010-3643, CVE-2010-3644, CVE-2010-3646, CVE-2010-3647, CVE-2010-3648, CVE-2010-3649, CVE-2010-3650, and CVE-2010-3652.

Product-mac_os_x solaris windows flash_player android linux_kernel n/a

CVE-2021-0870

Matching Score-8

Assigner-Android (associated with Google Inc. or Open Handset Alliance)

Matching Score-8

Assigner-Android (associated with Google Inc. or Open Handset Alliance)

CVSS Score-8.1||HIGH

EPSS-0.95% / 76.54%

7 Day CHG~0.00%

Published-22 Oct, 2021 | 13:27

Updated-03 Aug, 2024 | 15:47

In RW_SetActivatedTagType of rw_main.cc, there is possible memory corruption due to a race condition. This could lead to remote code execution with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-9 Android-10 Android-11 Android-8.1Android ID: A-192472262

Vendor-n/a Google LLC

Product-android Android

CWE ID-CWE-362

Concurrent Execution using Shared Resource with Improper Synchronization ('Race Condition')

CVE-2010-3650

Matching Score-8

Matching Score-8

Vendor-n/a Apple Inc.Sun Microsystems (Oracle Corporation)Google LLC Linux Kernel Organization, Inc Microsoft Corporation Adobe Inc.

CVSS Score-9.3||HIGH

EPSS-2.96% / 86.63%

7 Day CHG~0.00%

Published-07 Nov, 2010 | 21:00

Updated-29 Apr, 2026 | 01:13

Product-mac_os_x solaris windows flash_player android linux_kernel n/a

CVE-2010-3643

Matching Score-8

Matching Score-8

Vendor-n/a Apple Inc.Sun Microsystems (Oracle Corporation)Google LLC Linux Kernel Organization, Inc Microsoft Corporation Adobe Inc.

CVSS Score-9.3||HIGH

EPSS-2.96% / 86.63%

7 Day CHG~0.00%

Published-07 Nov, 2010 | 21:00

Updated-29 Apr, 2026 | 01:13

Unspecified vulnerability in Adobe Flash Player before 9.0.289.0 and 10.x before 10.1.102.64 on Windows, Mac OS X, Linux, and Solaris, and 10.1.95.1 on Android, allows attackers to execute arbitrary code or cause a denial of service (memory corruption) via unknown vectors, a different vulnerability than CVE-2010-3640, CVE-2010-3641, CVE-2010-3642, CVE-2010-3644, CVE-2010-3645, CVE-2010-3646, CVE-2010-3647, CVE-2010-3648, CVE-2010-3649, CVE-2010-3650, and CVE-2010-3652.

Product-mac_os_x solaris windows flash_player android linux_kernel n/a

CVE-2010-3636

Matching Score-8

Matching Score-8

Vendor-n/a Apple Inc.Sun Microsystems (Oracle Corporation)Google LLC Linux Kernel Organization, Inc Microsoft Corporation Adobe Inc.

CVSS Score-9.3||HIGH

EPSS-1.68% / 82.35%

7 Day CHG~0.00%

Published-07 Nov, 2010 | 21:00

Updated-29 Apr, 2026 | 01:13

Adobe Flash Player before 9.0.289.0 and 10.x before 10.1.102.64 on Windows, Mac OS X, Linux, and Solaris, and 10.1.95.1 on Android, does not properly handle unspecified encodings during the parsing of a cross-domain policy file, which allows remote web servers to bypass intended access restrictions via unknown vectors.

Product-mac_os_x solaris windows flash_player android linux_kernel n/a

CVE-2010-3639

Matching Score-8

Matching Score-8

Vendor-n/a Apple Inc.Sun Microsystems (Oracle Corporation)Google LLC Linux Kernel Organization, Inc Microsoft Corporation Adobe Inc.

CVSS Score-9.3||HIGH

EPSS-24.43% / 96.17%

7 Day CHG~0.00%

Published-07 Nov, 2010 | 21:00

Updated-29 Apr, 2026 | 01:13

Product-mac_os_x solaris windows flash_player android linux_kernel n/a

CVE-2010-3255

Matching Score-8

Assigner-MITRE Corporation

Matching Score-8

Assigner-MITRE Corporation

CVSS Score-9.3||HIGH

EPSS-0.87% / 75.38%

7 Day CHG~0.00%

Published-07 Sep, 2010 | 17:00

Updated-29 Apr, 2026 | 01:13

Google Chrome before 6.0.472.53 and webkitgtk before 1.2.6 do not properly handle counter nodes, which allows remote attackers to cause a denial of service (memory corruption) or possibly have unspecified other impact via unknown vectors.

Vendor-webkitgtk n/a Google LLC

Product-chrome webkitgtk n/a

CWE ID-CWE-119

Improper Restriction of Operations within the Bounds of a Memory Buffer

CVE-2010-3257

Matching Score-8

Assigner-MITRE Corporation

Matching Score-8

Assigner-MITRE Corporation

CVSS Score-9.3||HIGH

EPSS-10.34% / 93.27%

7 Day CHG~0.00%

Published-07 Sep, 2010 | 17:00

Updated-29 Apr, 2026 | 01:13

Use-after-free vulnerability in WebKit, as used in Apple Safari before 4.1.3 and 5.0.x before 5.0.3, Google Chrome before 6.0.472.53, and webkitgtk before 1.2.6, allows remote attackers to execute arbitrary code or cause a denial of service (application crash) via vectors involving element focus.

Vendor-webkitgtk n/a Canonical Ltd.Apple Inc.Google LLC

Product-ubuntu_linux iphone_os safari chrome webkitgtk n/a

CWE ID-CWE-416

Use After Free

CVE-2016-6492

Matching Score-8

Assigner-MITRE Corporation

Matching Score-8

Assigner-MITRE Corporation

CVSS Score-7.8||HIGH

EPSS-0.06% / 18.24%

7 Day CHG~0.00%

Published-12 Jan, 2017 | 23:00

Updated-13 May, 2026 | 00:24

The MT6573FDVT_SetRegHW function in camera_fdvt.c in the MediaTek driver for Linux allows local users to gain privileges via a crafted application that makes an MT6573FDVTIOC_T_SET_FDCONF_CMD IOCTL call.

Vendor-n/a Google LLC

Product-android n/a

CVE-2010-4034

Matching Score-8

Assigner-MITRE Corporation

Matching Score-8

Assigner-MITRE Corporation

CVSS Score-9.3||HIGH

EPSS-2.09% / 84.20%

7 Day CHG~0.00%

Published-21 Oct, 2010 | 18:12

Updated-29 Apr, 2026 | 01:13

Google Chrome before 7.0.517.41 does not properly handle forms, which allows remote attackers to cause a denial of service (application crash) or possibly have unspecified other impact via a crafted HTML document.

Vendor-n/a Google LLC

Product-chrome n/a

CWE ID-CWE-20

Improper Input Validation

CVE-2010-3652

Matching Score-8

Matching Score-8

Vendor-n/a Apple Inc.Sun Microsystems (Oracle Corporation)Google LLC Linux Kernel Organization, Inc Microsoft Corporation Adobe Inc.

CVSS Score-9.3||HIGH

EPSS-2.96% / 86.63%

7 Day CHG~0.00%

Published-07 Nov, 2010 | 21:00

Updated-29 Apr, 2026 | 01:13

Product-mac_os_x solaris windows flash_player android linux_kernel n/a

CVE-2010-3642

Matching Score-8

Matching Score-8

Vendor-n/a Apple Inc.Sun Microsystems (Oracle Corporation)Google LLC Linux Kernel Organization, Inc Microsoft Corporation Adobe Inc.

CVSS Score-9.3||HIGH

EPSS-2.96% / 86.63%

7 Day CHG~0.00%

Published-07 Nov, 2010 | 21:00

Updated-29 Apr, 2026 | 01:13

Unspecified vulnerability in Adobe Flash Player before 9.0.289.0 and 10.x before 10.1.102.64 on Windows, Mac OS X, Linux, and Solaris, and 10.1.95.1 on Android, allows attackers to execute arbitrary code or cause a denial of service (memory corruption) via unknown vectors, a different vulnerability than CVE-2010-3640, CVE-2010-3641, CVE-2010-3643, CVE-2010-3644, CVE-2010-3645, CVE-2010-3646, CVE-2010-3647, CVE-2010-3648, CVE-2010-3649, CVE-2010-3650, and CVE-2010-3652.

Product-mac_os_x solaris windows flash_player android linux_kernel n/a

CVE-2010-3647

Matching Score-8

Matching Score-8

Vendor-n/a Apple Inc.Sun Microsystems (Oracle Corporation)Google LLC Linux Kernel Organization, Inc Microsoft Corporation Adobe Inc.

CVSS Score-9.3||HIGH

EPSS-2.96% / 86.63%

7 Day CHG~0.00%

Published-07 Nov, 2010 | 21:00

Updated-29 Apr, 2026 | 01:13

Unspecified vulnerability in Adobe Flash Player before 9.0.289.0 and 10.x before 10.1.102.64 on Windows, Mac OS X, Linux, and Solaris, and 10.1.95.1 on Android, allows attackers to execute arbitrary code or cause a denial of service (memory corruption) via unknown vectors, a different vulnerability than CVE-2010-3640, CVE-2010-3641, CVE-2010-3642, CVE-2010-3643, CVE-2010-3644, CVE-2010-3645, CVE-2010-3646, CVE-2010-3648, CVE-2010-3649, CVE-2010-3650, and CVE-2010-3652.

Product-mac_os_x solaris windows flash_player android linux_kernel n/a

CVE-2010-4035

Matching Score-8

Assigner-MITRE Corporation

Matching Score-8

Assigner-MITRE Corporation

CVSS Score-9.3||HIGH

EPSS-2.09% / 84.20%

7 Day CHG~0.00%

Published-21 Oct, 2010 | 18:12

Updated-29 Apr, 2026 | 01:13

Google Chrome before 7.0.517.41 does not properly perform autofill operations for forms, which allows remote attackers to cause a denial of service (application crash) or possibly have unspecified other impact via a crafted HTML document.

Vendor-n/a Google LLC

Product-chrome n/a

CWE ID-CWE-20

Improper Input Validation

CVE-2010-3640

Matching Score-8

Matching Score-8

Vendor-n/a Apple Inc.Sun Microsystems (Oracle Corporation)Google LLC Linux Kernel Organization, Inc Microsoft Corporation Adobe Inc.

CVSS Score-9.3||HIGH

EPSS-2.96% / 86.63%

7 Day CHG~0.00%

Published-07 Nov, 2010 | 21:00

Updated-29 Apr, 2026 | 01:13

Unspecified vulnerability in Adobe Flash Player before 9.0.289.0 and 10.x before 10.1.102.64 on Windows, Mac OS X, Linux, and Solaris, and 10.1.95.1 on Android, allows attackers to execute arbitrary code or cause a denial of service (memory corruption) via unknown vectors, a different vulnerability than CVE-2010-3641, CVE-2010-3642, CVE-2010-3643, CVE-2010-3644, CVE-2010-3645, CVE-2010-3646, CVE-2010-3647, CVE-2010-3648, CVE-2010-3649, CVE-2010-3650, and CVE-2010-3652.

Product-mac_os_x solaris windows flash_player android linux_kernel n/a

CVE-2010-3654

Matching Score-8

Matching Score-8