NVD や CVE、ほか複数の脅威フィードを束ね、RCE など高リスクな事象を深く追える一覧です。CVSS と EPSS を組み合わせ、Exploit 参照や PoC の有無から悪用しやすさを追跡します。ベンダー修正や緩和策の文脈とあわせて優先度を決め、対応サイクルを短く保ちつつ重要資産を守る支援をします。
Assigner（CNA／発行元）：[email protected] この条件を外す
| CVE | 説明 | CVSS 最大値 | EPSS（%） | 公開 | 更新 |
|---|---|---|---|---|---|
| CVE-2011-2789 | Use-after-free vulnerability in Google Chrome before 13.0.782.107 allows remote attackers to cause a denial of service or possibly have unspecified other impact via vectors related to instantiation of the Pepper plug-in. | 6.8 | 1.19% | 2011-08-02 | 2026-06-16 |
| CVE-2011-2790 | Use-after-free vulnerability in Google Chrome before 13.0.782.107 allows remote attackers to cause a denial of service or possibly have unspecified other impact via vectors involving floating styles. | 6.8 | 1.61% | 2011-08-02 | 2026-06-16 |
| CVE-2011-2791 | The International Components for Unicode (ICU) functionality in Google Chrome before 13.0.782.107 allows remote attackers to cause a denial of service or possibly have unspecified other impact via unknown vectors that trigger an out-of-bounds write. | 6.8 | 1.19% | 2011-08-02 | 2026-06-16 |
| CVE-2011-2792 | Use-after-free vulnerability in Google Chrome before 13.0.782.107 allows remote attackers to cause a denial of service or possibly have unspecified other impact via vectors related to float removal. | 6.8 | 1.57% | 2011-08-02 | 2026-06-16 |
| CVE-2011-2793 | Use-after-free vulnerability in Google Chrome before 13.0.782.107 allows remote attackers to cause a denial of service or possibly have unspecified other impact via vectors related to media selectors. | 6.8 | 1.22% | 2011-08-02 | 2026-06-16 |
| CVE-2011-2794 | Google Chrome before 13.0.782.107 does not properly perform text iteration, which allows remote attackers to cause a denial of service (out-of-bounds read) via unspecified vectors. | 6.8 | 1.19% | 2011-08-02 | 2026-06-16 |
| CVE-2011-2795 | Google Chrome before 13.0.782.107 does not prevent calls to functions in other frames, which allows remote attackers to bypass intended access restrictions via a crafted web site, related to a "cross-frame function leak." | 4.3 | 1.17% | 2011-08-02 | 2026-06-16 |
| CVE-2011-2796 | Use-after-free vulnerability in Skia, as used in Google Chrome before 13.0.782.107, allows remote attackers to cause a denial of service or possibly have unspecified other impact via unknown vectors. | 6.8 | 1.19% | 2011-08-02 | 2026-06-16 |
| CVE-2011-2797 | Use-after-free vulnerability in Google Chrome before 13.0.782.107 allows remote attackers to cause a denial of service or possibly have unspecified other impact via vectors related to resource caching. | 6.8 | 1.61% | 2011-08-02 | 2026-06-16 |
| CVE-2011-2798 | Google Chrome before 13.0.782.107 does not properly restrict access to internal schemes, which allows remote attackers to have an unspecified impact via a crafted web site. | 6.8 | 0.95% | 2011-08-02 | 2026-06-16 |
| CVE-2011-2799 | Use-after-free vulnerability in Google Chrome before 13.0.782.107 allows remote attackers to cause a denial of service or possibly have unspecified other impact via vectors related to HTML range handling. | 6.8 | 1.61% | 2011-08-02 | 2026-06-16 |
| CVE-2011-2800 | Google Chrome before 13.0.782.107 allows remote attackers to obtain potentially sensitive information about client-side redirect targets via a crafted web site. | 4.3 | 1.43% | 2011-08-02 | 2026-06-16 |
| CVE-2011-2801 | Use-after-free vulnerability in Google Chrome before 13.0.782.107 allows remote attackers to cause a denial of service or possibly have unspecified other impact via vectors related to the frame loader. | 6.8 | 1.19% | 2011-08-02 | 2026-06-16 |
| CVE-2011-2802 | Google V8, as used in Google Chrome before 13.0.782.107, does not properly perform const lookups, which allows remote attackers to cause a denial of service (application crash) or possibly have unspecified other impact via a crafted web site. | 6.8 | 1.03% | 2011-08-02 | 2026-06-16 |
| CVE-2011-2803 | Google Chrome before 13.0.782.107 does not properly handle Skia paths, which allows remote attackers to cause a denial of service (out-of-bounds read) via unspecified vectors. | 6.8 | 1.22% | 2011-08-02 | 2026-06-16 |
| CVE-2011-2804 | Google Chrome before 13.0.782.107 does not properly handle nested functions in PDF documents, which allows remote attackers to cause a denial of service (application crash) or possibly have unspecified other impact via a crafted document. | 4.3 | 1.41% | 2011-08-02 | 2026-06-16 |
| CVE-2011-2805 | Google Chrome before 13.0.782.107 allows remote attackers to bypass the Same Origin Policy and conduct script injection attacks via unspecified vectors. | 6.8 | 1.38% | 2011-08-02 | 2026-06-16 |
| CVE-2011-2818 | Use-after-free vulnerability in Google Chrome before 13.0.782.107 allows remote attackers to cause a denial of service or possibly have unspecified other impact via vectors related to display box rendering. | 6.8 | 1.38% | 2011-08-02 | 2026-06-16 |
| CVE-2011-2819 | Google Chrome before 13.0.782.107 allows remote attackers to bypass the Same Origin Policy via vectors related to handling of the base URI. | 6.8 | 1.38% | 2011-08-02 | 2026-06-16 |
| CVE-2011-2357 | Cross-application scripting vulnerability in the Browser URL loading functionality in Android 2.3.4 and 3.1 allows local applications to bypass the sandbox and execute arbitrary Javascript in arbitrary domains by (1) causing the MAX_TAB number of tabs to be opened, then loading a URI to the targeted domain into the current tab, or (2) making two startActivity function calls beginning with the targeted domain's URI followed by the malicious Javascript while the UI focus is still associated with t | 4.3 | 4.61% | 2011-08-12 | 2026-06-16 |