The base64DecodeInternal function in wtf/text/Base64.cpp in Blink, as used in Google Chrome before 34.0.1847.116, does not properly handle string data composed exclusively of whitespace characters,. Rated medium severity (CVSS 5.0), this vulnerability is remotely exploitable, low attack complexity. No vendor patch available.
Denial Of Service
Google
Buffer Overflow
Chrome
NVD
VulDB
CVSS 2.0
5.0
EPSS
1.4%
The drag implementation in Google Chrome before 34.0.1847.116 allows user-assisted remote attackers to bypass the Same Origin Policy and forge local pathnames by leveraging renderer access. Rated medium severity (CVSS 4.3), this vulnerability is remotely exploitable. No vendor patch available.
Google
Authentication Bypass
Chrome
NVD
VulDB
CVSS 2.0
4.3
EPSS
0.5%