# CVEs published 2011-10-25

18 CVEs were published on October 25, 2011: 0 critical, 0 high. Days are UTC.

- [CVE-2011-2845](https://cve.now/CVE-2011-2845.md): Google Chrome before 15.0.874.102 does not properly handle history data, which allows user-assisted remote attackers to spoof the URL bar… (no CVSS)
- [CVE-2011-3875](https://cve.now/CVE-2011-3875.md): Google Chrome before 15.0.874.102 does not properly handle drag and drop operations on URL strings, which allows user-assisted remote… (no CVSS)
- [CVE-2011-3876](https://cve.now/CVE-2011-3876.md): Google Chrome before 15.0.874.102 does not properly handle downloading files that have whitespace characters at the end of a filename… (no CVSS)
- [CVE-2011-3877](https://cve.now/CVE-2011-3877.md): Cross-site scripting (XSS) vulnerability in the appcache internals page in Google Chrome before 15.0.874.102 allows remote attackers to… (no CVSS)
- [CVE-2011-3878](https://cve.now/CVE-2011-3878.md): Race condition in Google Chrome before 15.0.874.102 allows remote attackers to cause a denial of service or possibly have unspecified… (no CVSS)
- [CVE-2011-3879](https://cve.now/CVE-2011-3879.md): Google Chrome before 15.0.874.102 does not prevent redirects to chrome: URLs, which has unspecified impact and remote attack vectors. (no CVSS)
- [CVE-2011-3880](https://cve.now/CVE-2011-3880.md): Google Chrome before 15.0.874.102 does not prevent use of an unspecified special character as a delimiter in HTTP headers, which has… (no CVSS)
- [CVE-2011-3881](https://cve.now/CVE-2011-3881.md): WebKit, as used in Google Chrome before 15.0.874.102 and Android before 4.4, allows remote attackers to bypass the Same Origin Policy and… (no CVSS)
- [CVE-2011-3882](https://cve.now/CVE-2011-3882.md): Use-after-free vulnerability in Google Chrome before 15.0.874.102 allows remote attackers to cause a denial of service or possibly have… (no CVSS)
- [CVE-2011-3883](https://cve.now/CVE-2011-3883.md): Use-after-free vulnerability in Google Chrome before 15.0.874.102 allows remote attackers to cause a denial of service or possibly have… (no CVSS)
- [CVE-2011-3884](https://cve.now/CVE-2011-3884.md): Google Chrome before 15.0.874.102 does not properly address timing issues during DOM traversal, which allows remote attackers to cause a… (no CVSS)
- [CVE-2011-3885](https://cve.now/CVE-2011-3885.md): Use-after-free vulnerability in Google Chrome before 15.0.874.102 allows remote attackers to cause a denial of service or possibly have… (no CVSS)
- [CVE-2011-3886](https://cve.now/CVE-2011-3886.md): Google V8, as used in Google Chrome before 15.0.874.102, allows remote attackers to cause a denial of service or possibly have unspecified… (no CVSS)
- [CVE-2011-3887](https://cve.now/CVE-2011-3887.md): Google Chrome before 15.0.874.102 does not properly handle javascript: URLs, which allows remote attackers to bypass intended access… (no CVSS)
- [CVE-2011-3888](https://cve.now/CVE-2011-3888.md): Use-after-free vulnerability in Google Chrome before 15.0.874.102 allows user-assisted remote attackers to cause a denial of service or… (no CVSS)
- [CVE-2011-3889](https://cve.now/CVE-2011-3889.md): Heap-based buffer overflow in the Web Audio implementation in Google Chrome before 15.0.874.102 allows remote attackers to cause a denial… (no CVSS)
- [CVE-2011-3890](https://cve.now/CVE-2011-3890.md): Use-after-free vulnerability in Google Chrome before 15.0.874.102 allows remote attackers to cause a denial of service or possibly have… (no CVSS)
- [CVE-2011-3891](https://cve.now/CVE-2011-3891.md): Google Chrome before 15.0.874.102 does not properly restrict access to internal Google V8 functions, which allows remote attackers to… (no CVSS)

---

Source: cve.now
Built by [Sazabi](https://www.sazabi.com/?utm_source=cve-now&utm_medium=markdown), AI-native observability and security: automatic issue detection, plain-language log search and live dashboards.
Page: https://cve.now/archive/2011-10-25
Site guide for agents: https://cve.now/llms.txt
Uses NVD data; not endorsed by NVD.