WebKit in Google Chrome before Blink M11 contains a bad cast to RenderBlock when anonymous blocks are renderblocks.
CVSS Vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:HGoogle Blink
APPGoogle< m11
🔵
CHECK WITH VENDOR
No clear patch data available. Check vendor references.
CWE
Related vulnerabilities
CVE-2011-2337CRITICAL9.8PL ✓same product
Błędny typ wartości zwracanej przez strlen w WebKit na platformach 64-bit
CVE-2011-2335HIGH7.5same product
A double-free vulnerability exists in WebKit in Google Chrome before Blink M12 in the WebCore::CSSSelector fun...
CVE-2011-1298HIGH7.5same product
An Integer Overflow exists in WebKit in Google Chrome before Blink M11 in the macOS WebCore::GraphicsContext::...
CVE-2011-1802MEDIUM6.5same product
WebKit in Google Chrome before Blink M11 and M12 does not properly handle counter nodes, which allows remote a...
CVE-2011-2334MEDIUM6.5same product
Use after free vulnerability exists in WebKit in Google Chrome before Blink M12 in RenderLayerwhen removing el...