Chrome Os

chrome_os

Vendor: Google • 67 CVEs

CVEs (67)

CVE VENDORS PRODUCTS UPDATED PUBLISHED CVSS
CVE-2014-1710 1Google 1Chrome Os May 6, 2026 Mar 16, 2014 N/A· v4 N/A· v3 7.5 HIGH· v2 The AsyncPixelTransfersCompletedQuery::End function in gpu/command_buffer/service/query_manager.cc in Google Chrome, as used in Google Chrome OS before 33.0.1750.152, does not check whether a certain position is within t...Show more The AsyncPixelTransfersCompletedQuery::End function in gpu/command_buffer/service/query_manager.cc in Google Chrome, as used in Google Chrome OS before 33.0.1750.152, does not check whether a certain position is within the bounds of a shared-memory segment, which allows remote attackers to cause a denial of service (GPU command-buffer memory corruption) or possibly have unspecified other impact via unknown vectors.Show less
CVE-2014-1708 1Google 1Chrome Os May 6, 2026 Mar 16, 2014 N/A· v4 N/A· v3 10.0 HIGH· v2 The boot implementation in Google Chrome OS before 33.0.1750.152 does not properly consider file persistence, which allows remote attackers to execute arbitrary code via unspecified vectors.
CVE-2014-1707 1Google 1Chrome Os May 6, 2026 Mar 16, 2014 N/A· v4 N/A· v3 7.5 HIGH· v2 Directory traversal vulnerability in CrosDisks in Google Chrome OS before 33.0.1750.152 has unspecified impact and attack vectors.
CVE-2014-1706 1Google 1Chrome Os May 6, 2026 Mar 16, 2014 N/A· v4 N/A· v3 7.5 HIGH· v2 crosh in Google Chrome OS before 33.0.1750.152 allows attackers to inject commands via unspecified vectors.
CVE-2013-2866 1Google 2Chrome Chrome Os Apr 29, 2026 Jun 19, 2013 N/A· v4 N/A· v3 4.3 MEDIUM· v2 The Flash plug-in in Google Chrome before 27.0.1453.116, as used on Google Chrome OS before 27.0.1453.116 and separately, does not properly determine whether a user wishes to permit camera or microphone access by a Flash...Show more The Flash plug-in in Google Chrome before 27.0.1453.116, as used on Google Chrome OS before 27.0.1453.116 and separately, does not properly determine whether a user wishes to permit camera or microphone access by a Flash application, which allows remote attackers to obtain sensitive information from a machine's physical environment via a clickjacking attack, as demonstrated by an attack using a crafted Cascading Style Sheets (CSS) opacity property.Show less
CVE-2013-2835 1Google 1Chrome Os Apr 29, 2026 Apr 16, 2013 N/A· v4 N/A· v3 5.0 MEDIUM· v2 Google Chrome OS before 26.0.1410.57 does not properly enforce origin restrictions for the O3D and Google Talk plug-ins, which allows remote attackers to bypass the domain-whitelist protection mechanism via a crafted web...Show more Google Chrome OS before 26.0.1410.57 does not properly enforce origin restrictions for the O3D and Google Talk plug-ins, which allows remote attackers to bypass the domain-whitelist protection mechanism via a crafted web site, a different vulnerability than CVE-2013-2834.Show less
CVE-2013-2834 1Google 1Chrome Os Apr 29, 2026 Apr 16, 2013 N/A· v4 N/A· v3 5.0 MEDIUM· v2 Google Chrome OS before 26.0.1410.57 does not properly enforce origin restrictions for the O3D and Google Talk plug-ins, which allows remote attackers to bypass the domain-whitelist protection mechanism via a crafted web...Show more Google Chrome OS before 26.0.1410.57 does not properly enforce origin restrictions for the O3D and Google Talk plug-ins, which allows remote attackers to bypass the domain-whitelist protection mechanism via a crafted web site, a different vulnerability than CVE-2013-2835.Show less
CVE-2013-2833 1Google 1Chrome Os Apr 29, 2026 Apr 16, 2013 N/A· v4 N/A· v3 10.0 HIGH· v2 Use-after-free vulnerability in the O3D plug-in in Google Chrome OS before 26.0.1410.57 allows remote attackers to cause a denial of service or possibly have unspecified other impact via vectors related to improper manag...Show more Use-after-free vulnerability in the O3D plug-in in Google Chrome OS before 26.0.1410.57 allows remote attackers to cause a denial of service or possibly have unspecified other impact via vectors related to improper management of ownership relationships involving Elements and DrawElements.Show less
CVE-2013-2832 1Google 1Chrome Os Apr 29, 2026 Apr 16, 2013 N/A· v4 N/A· v3 5.0 MEDIUM· v2 The Buffer::Set function in core/cross/buffer.cc in the O3D plug-in in Google Chrome OS before 26.0.1410.57 does not prevent uninitialized data from remaining in a buffer, which might allow remote attackers to obtain sen...Show more The Buffer::Set function in core/cross/buffer.cc in the O3D plug-in in Google Chrome OS before 26.0.1410.57 does not prevent uninitialized data from remaining in a buffer, which might allow remote attackers to obtain sensitive information via unspecified vectors.Show less
CVE-2013-0927 1Google 1Chrome Os Apr 29, 2026 Apr 10, 2013 N/A· v4 N/A· v3 7.5 HIGH· v2 Google Chrome OS before 26.0.1410.57 relies on a Pango pango-utils.c read_config implementation that loads the contents of the .pangorc file in the user's home directory, and the file referenced by the PANGO_RC_FILE envi...Show more Google Chrome OS before 26.0.1410.57 relies on a Pango pango-utils.c read_config implementation that loads the contents of the .pangorc file in the user's home directory, and the file referenced by the PANGO_RC_FILE environment variable, which allows attackers to bypass intended access restrictions via crafted configuration data.Show less
CVE-2013-0915 1Google 1Chrome Os Apr 29, 2026 Mar 18, 2013 N/A· v4 N/A· v3 10.0 HIGH· v2 The GPU process in Google Chrome OS before 25.0.1364.173 allows attackers to cause a denial of service or possibly have unspecified other impact via vectors related to an "overflow."
CVE-2012-5129 1Google 2Chrome Chrome Os Apr 29, 2026 Dec 4, 2012 N/A· v4 N/A· v3 7.5 HIGH· v2 Heap-based buffer overflow in the WebGL subsystem in Google Chrome OS before 23.0.1271.94 allows remote attackers to cause a denial of service (GPU process crash) or possibly have unspecified other impact via unknown vec...Show more Heap-based buffer overflow in the WebGL subsystem in Google Chrome OS before 23.0.1271.94 allows remote attackers to cause a denial of service (GPU process crash) or possibly have unspecified other impact via unknown vectors.Show less
CVE-2012-2864 1Google 1Chrome Os Apr 29, 2026 Aug 22, 2012 N/A· v4 N/A· v3 10.0 HIGH· v2 Mesa, as used in Google Chrome before 21.0.1183.0 on the Acer AC700, Cr-48, and Samsung Series 5 and 5 550 Chromebook platforms, and the Samsung Chromebox Series 3, allows remote attackers to execute arbitrary code via u...Show more Mesa, as used in Google Chrome before 21.0.1183.0 on the Acer AC700, Cr-48, and Samsung Series 5 and 5 550 Chromebook platforms, and the Samsung Chromebox Series 3, allows remote attackers to execute arbitrary code via unspecified vectors that trigger an "array overflow."Show less
CVE-2012-4050 1Google 1Chrome Os Apr 29, 2026 Jul 24, 2012 N/A· v4 N/A· v3 10.0 HIGH· v2 Multiple unspecified vulnerabilities in Google Chrome OS before 21.0.1180.50 on the Cr-48 and Samsung Series 5 and 5 550 Chromebook platforms, and the Samsung Chromebox Series 3, have unknown impact and attack vectors.
CVE-2012-3290 3Acer GoogleSamsung 6Ac700 Chromebook Chrome OsChromebox 3+3 more Apr 29, 2026 Jun 7, 2012 N/A· v4 N/A· v3 10.0 HIGH· v2 Multiple unspecified vulnerabilities in Google Chrome before 20.0.1132.22 on the Acer AC700; Samsung Series 5, 5 550, and Chromebox 3; and Cr-48 Chromebook platforms have unknown impact and attack vectors.
CVE-2012-1418 3Acer GoogleSamsung 4Ac700 Chromebook Chrome OsCr 48 Chromebook+1 more Apr 29, 2026 Feb 29, 2012 N/A· v4 N/A· v3 10.0 HIGH· v2 Multiple unspecified vulnerabilities in Google Chrome before 17.0.963.60 on the Acer AC700, Samsung Series 5, and Cr-48 Chromebook platforms have unknown impact and attack vectors.
CVE-2012-0695 3Acer GoogleSamsung 4Ac700 Chromebook Chrome OsCr 48 Chromebook+1 more Apr 29, 2026 Jan 12, 2012 N/A· v4 N/A· v3 10.0 HIGH· v2 Multiple unspecified vulnerabilities in Google Chrome before 17.0.963.27 on the Acer AC700, Samsung Series 5, and Cr-48 Chromebook platforms have unknown impact and attack vectors.
CVE-2011-4719 3Acer GoogleSamsung 4Ac700 Chromebook Chrome OsCr 48 Chromebook+1 more Apr 29, 2026 Dec 9, 2011 N/A· v4 N/A· v3 10.0 HIGH· v2 Multiple unspecified vulnerabilities in Google Chrome before 16.0.912.63 on the Acer AC700, Samsung Series 5, and Cr-48 Chromebook platforms have unknown impact and attack vectors.
CVE-2011-4548 3Acer GoogleSamsung 4Ac700 Chromebook Chrome OsCr 48 Chromebook+1 more Apr 29, 2026 Nov 24, 2011 N/A· v4 N/A· v3 10.0 HIGH· v2 Multiple unspecified vulnerabilities in Google Chrome before 16.0.912.44 on the Acer AC700, Samsung Series 5, and Cr-48 Chromebook platforms have unknown impact and attack vectors.
CVE-2011-3421 3Acer GoogleSamsung 4Ac700 Chromebook Chrome OsCr 48 Chromebook+1 more Apr 29, 2026 Sep 12, 2011 N/A· v4 N/A· v3 10.0 HIGH· v2 Multiple unspecified vulnerabilities in Google Chrome before 14.0.835.125 on the Acer AC700, Samsung Series 5, and Cr-48 Chromebook platforms have unknown impact and attack vectors.

Previous 123 4 Next