Blink
Vendor:
First CVE: Nov 5, 2019 · Active for 6 years
12
Total CVEs
More Total CVEs than 90% of tracked products
12.0
Avg CVEs / Year
Higher CVE frequency than 97% of tracked products
7.2
Avg CVSS
Higher Avg CVSS than 45% of tracked products
0.0%
KEV Rate
Bottom 1%
Trends Over Time
The number and severity of CVEs published that impact Blink over time
Volume of CVEsAvg CVSS Base Score
First CVE
Nov 5, 2019
6 years ago
Most Recent CVE
Nov 12, 2019
2,446 days ago
CVE Severity & Scoring
Blink12 CVEs
67%
17%
17%
All CVEs352,231 CVEs
45%
40%
11%
MediumHighCritical
Attack Vector
Local0 (0.0%)
Network12 (100.0%)
Unknown0 (0.0%)
Physical0 (0.0%)
Adjacent Network0 (0.0%)
Attack Complexity
Low12 (100.0%)
High0 (0.0%)
Unknown0 (0.0%)
User Interaction
None4 (33.3%)
Unknown0 (0.0%)
Required8 (66.7%)
Privileges Required
Low0 (0.0%)
High0 (0.0%)
None12 (100.0%)
Unknown0 (0.0%)
Top CVEs
Signals from CVEs in this product scope (12 CVEs).
12 CVEs · Highest risk first
| CVE | Published | CVSS | Risk | KEV | Exploit |
|---|---|---|---|---|---|
CVE-2011-2337CRITICAL A wrong type is used for a return value from strlen in WebKit in Google Chrome before Blink M12 on 64-bit platforms. | Nov 7, 2019 | 9.8 | 28 | NO | NO |
CVE-2011-1460CRITICAL WebKit in Google Chrome before Blink M11 contains a bad cast to RenderBlock when anonymous blocks are renderblocks. | Nov 5, 2019 | 9.8 | 28 | NO | NO |
CVE-2011-2335HIGH A double-free vulnerability exists in WebKit in Google Chrome before Blink M12 in the WebCore::CSSSelector function. | Nov 12, 2019 | 7.5 | 24 | NO | NO |
CVE-2011-1298HIGH An Integer Overflow exists in WebKit in Google Chrome before Blink M11 in the macOS WebCore::GraphicsContext::fillRect function. | Nov 6, 2019 | 7.5 | 22 | NO | NO |
CVE-2011-1803MEDIUM An issue exists in third_party/WebKit/Source/WebCore/svg/animation/SVGSMILElement.h in WebKit in Google Chrome before Blink M11 and M12 when trying to access a removed smil element | Nov 12, 2019 | 6.5 | 21 | NO | NO |
CVE-2011-1802MEDIUM WebKit in Google Chrome before Blink M11 and M12 does not properly handle counter nodes, which allows remote attackers to cause a denial of service (memory corruption). | Nov 12, 2019 | 6.5 | 21 | NO | NO |
CVE-2011-2334MEDIUM Use after free vulnerability exists in WebKit in Google Chrome before Blink M12 in RenderLayerwhen removing elements with reflections. | Nov 12, 2019 | 6.5 | 21 | NO | NO |
CVE-2011-2336MEDIUM An issue exists in WebKit in Google Chrome before Blink M12. when clearing lists in AnimationControllerPrivate that signal when a hardware animation starts. | Nov 7, 2019 | 6.5 | 21 | NO | NO |
CVE-2011-2807MEDIUM Incorrect handling of timer information in Timer.cpp in WebKit in Google Chrome before Blink M13. | Nov 7, 2019 | 6.5 | 21 | NO | NO |
CVE-2011-2353MEDIUM Use after free vulnerability in documentloader in WebKit in Google Chrome before Blink M13 in DocumentWriter::replaceDocument function. | Nov 7, 2019 | 6.5 | 21 | NO | NO |
Exploit Exposure
Signals from CVEs in this product scope (12 CVEs).
CISA KEV
0 CVEs
0.0% of CVEs· Bottom 1%
Metasploit
0 CVEs
0.0% of CVEs· Bottom 1%
Nuclei
0 CVEs
0.0% of CVEs· Bottom 1%
ExploitDB
0 CVEs
0.0% of CVEs· Bottom 1%
Social Chatter
Signals from CVEs in this product scope (12 CVEs).
Media Mentions
Signals from CVEs in this product scope (12 CVEs).
Top CNAs Publishing CVEs For Blink
Top CWEs
Versions
No cataloged versions.