CVE-2013-6641: Use-after-free vulnerability in the FormAssociatedElement::formRemovedFromTree function in core/html/FormAssociatedElement.cpp in Blink, as used in Google…

PriorityP431high7.5CVSS 2.0

AVNACLAuNCPIPAP

EPSS

1.33%

68.3th percentile

Use-after-free vulnerability in the FormAssociatedElement::formRemovedFromTree function in core/html/FormAssociatedElement.cpp in Blink, as used in Google Chrome before 32.0.1700.76 on Windows and before 32.0.1700.77 on Mac OS X and Linux, allows remote attackers to cause a denial of service or possibly have unspecified other impact by leveraging improper handling of the past names map of a FORM element.

Affected

4 ranges

Vendor	Product	Version range	Fixed in
google	chrome	< 32.0.1700.77	32.0.1700.77
google	chrome	< 32.0.1700.76	32.0.1700.76
opensuse	opensuse	—	—
opensuse	opensuse	—	—

Stop checking back — get the weekly exploitation signal.

Every Monday: what got weaponized or added to CISA KEV in the last seven days — each CVE cross-linked to its PoC, Nuclei template, and detection rule. Free, one email a week, unsubscribe in one click.