← Back

Chrome Os

chrome_os

Vendor: Google • 67 CVEs

CVEs (67)

CVE
VENDORS
PRODUCTS
UPDATED
PUBLISHED
CVSS
3Acer
GoogleSamsung
4Ac700 Chromebook
Chrome OsCr 48 Chromebook+1 more
Apr 29, 2026
Sep 12, 2011
N/A· v4
N/A· v3
10.0 HIGH· v2
Multiple unspecified vulnerabilities in Google Chrome before 14.0.835.157 on the Acer AC700, Samsung Series 5, and Cr-48 Chromebook platforms have unknown impact and attack vectors.
1Google
1Chrome Os
Apr 29, 2026
May 24, 2011
N/A· v4
N/A· v3
10.0 HIGH· v2
Unspecified vulnerability in the dbugs package in Google Chrome OS before R12 0.12.433.38 Beta has unknown impact and attack vectors.
1Google
1Chrome Os
Apr 29, 2026
May 24, 2011
N/A· v4
N/A· v3
4.4 MEDIUM· v2
Google Chrome OS before R12 0.12.433.38 Beta, when Guest mode is enabled, does not prevent changes on the about:flags page, which has unspecified impact and local attack vectors.
1Google
1Chrome Os
Apr 29, 2026
May 24, 2011
N/A· v4
N/A· v3
7.2 HIGH· v2
Google Chrome OS before R12 0.12.433.38 Beta allows local users to gain privileges by creating a /var/lib/chromeos-aliases.conf file and placing commands in it.
1Google
1Chrome Os
Apr 29, 2026
Mar 8, 2011
N/A· v4
N/A· v3
10.0 HIGH· v2
Unspecified vulnerability in the Scratchpad application in Google Chrome OS before R10 0.10.156.46 Beta has unknown impact and attack vectors.
1Google
1Chrome Os
Apr 29, 2026
Feb 18, 2011
N/A· v4
N/A· v3
4.3 MEDIUM· v2
Use-after-free vulnerability in flimflamd in flimflam in Google Chrome OS before 0.9.130.14 Beta allows user-assisted remote attackers to cause a denial of service (daemon crash) by providing the name of a hidden WiFi ne...Show more
Use-after-free vulnerability in flimflamd in flimflam in Google Chrome OS before 0.9.130.14 Beta allows user-assisted remote attackers to cause a denial of service (daemon crash) by providing the name of a hidden WiFi network that does not respond to connection attempts.Show less
1Google
2Chrome
Chrome Os
Apr 29, 2026
Jan 14, 2011
N/A· v4
N/A· v3
10.0 HIGH· v2
Google Chrome before 8.0.552.237 and Chrome OS before 8.0.552.344 do not properly handle speech data, which allows remote attackers to execute arbitrary code via unspecified vectors that lead to a "stale pointer."
1Google
2Chrome
Chrome Os
Apr 29, 2026
Jan 14, 2011
N/A· v4
N/A· v3
7.5 HIGH· v2
Google Chrome before 8.0.552.237 and Chrome OS before 8.0.552.344 do not properly perform DOM node removal, which allows remote attackers to cause a denial of service or possibly have unspecified other impact via unknown...Show more
Google Chrome before 8.0.552.237 and Chrome OS before 8.0.552.344 do not properly perform DOM node removal, which allows remote attackers to cause a denial of service or possibly have unspecified other impact via unknown vectors that lead to a "stale rendering node."Show less
1Google
2Chrome
Chrome Os
Apr 29, 2026
Jan 14, 2011
N/A· v4
N/A· v3
5.0 MEDIUM· v2
Google Chrome before 8.0.552.237 and Chrome OS before 8.0.552.344 do not properly perform a cast of an unspecified variable during handling of video, which allows remote attackers to cause a denial of service or possibly...Show more
Google Chrome before 8.0.552.237 and Chrome OS before 8.0.552.344 do not properly perform a cast of an unspecified variable during handling of video, which allows remote attackers to cause a denial of service or possibly have unspecified other impact via unknown vectors.Show less
2Debian
Google
3Chrome
Chrome OsDebian Linux
Apr 29, 2026
Jan 14, 2011
N/A· v4
N/A· v3
4.3 MEDIUM· v2
Google Chrome before 8.0.552.237 and Chrome OS before 8.0.552.344 do not properly perform a cast of an unspecified variable during handling of anchors, which allows remote attackers to cause a denial of service or possib...Show more
Google Chrome before 8.0.552.237 and Chrome OS before 8.0.552.344 do not properly perform a cast of an unspecified variable during handling of anchors, which allows remote attackers to cause a denial of service or possibly have unspecified other impact via a crafted HTML document.Show less
1Google
2Chrome
Chrome Os
Apr 29, 2026
Jan 14, 2011
N/A· v4
N/A· v3
9.3 HIGH· v2
Buffer overflow in Google Chrome before 8.0.552.237 and Chrome OS before 8.0.552.344 allows remote attackers to cause a denial of service or possibly have unspecified other impact via vectors related to PDF shading.
3Canonical
DebianGoogle
4Chrome
Chrome OsDebian Linux+1 more
Apr 29, 2026
Jan 14, 2011
N/A· v4
N/A· v3
9.3 HIGH· v2
Multiple buffer overflows in vorbis_dec.c in the Vorbis decoder in FFmpeg, as used in Google Chrome before 8.0.552.237 and Chrome OS before 8.0.552.344, allow remote attackers to cause a denial of service (memory corrupt...Show more
Multiple buffer overflows in vorbis_dec.c in the Vorbis decoder in FFmpeg, as used in Google Chrome before 8.0.552.237 and Chrome OS before 8.0.552.344, allow remote attackers to cause a denial of service (memory corruption and application crash) or possibly have unspecified other impact via a crafted WebM file, related to buffers for (1) the channel floor and (2) the channel residue.Show less
1Google
2Chrome
Chrome Os
Apr 29, 2026
Jan 14, 2011
N/A· v4
N/A· v3
7.5 HIGH· v2
Google Chrome before 8.0.552.237 and Chrome OS before 8.0.552.344 do not properly interact with extensions, which allows remote attackers to cause a denial of service via a crafted extension that triggers an uninitialize...Show more
Google Chrome before 8.0.552.237 and Chrome OS before 8.0.552.344 do not properly interact with extensions, which allows remote attackers to cause a denial of service via a crafted extension that triggers an uninitialized pointer.Show less
1Google
2Chrome
Chrome Os
Apr 29, 2026
Jan 14, 2011
N/A· v4
N/A· v3
10.0 HIGH· v2
Google Chrome before 8.0.552.237 and Chrome OS before 8.0.552.344 do not properly handle SVG use elements, which allows remote attackers to cause a denial of service or possibly have unspecified other impact via unknown...Show more
Google Chrome before 8.0.552.237 and Chrome OS before 8.0.552.344 do not properly handle SVG use elements, which allows remote attackers to cause a denial of service or possibly have unspecified other impact via unknown vectors that lead to a "stale pointer."Show less
1Google
2Chrome
Chrome Os
Apr 29, 2026
Jan 14, 2011
N/A· v4
N/A· v3
10.0 HIGH· v2
Google Chrome before 8.0.552.237 and Chrome OS before 8.0.552.344 do not properly handle a mismatch in video frame sizes, which allows remote attackers to cause a denial of service (incorrect memory access) or possibly h...Show more
Google Chrome before 8.0.552.237 and Chrome OS before 8.0.552.344 do not properly handle a mismatch in video frame sizes, which allows remote attackers to cause a denial of service (incorrect memory access) or possibly have unspecified other impact via unknown vectors.Show less
1Google
2Chrome
Chrome Os
Apr 29, 2026
Jan 14, 2011
N/A· v4
N/A· v3
10.0 HIGH· v2
Google Chrome before 8.0.552.237 and Chrome OS before 8.0.552.344 allow remote attackers to cause a denial of service (stack memory corruption) or possibly have unspecified other impact via a PDF document that triggers a...Show more
Google Chrome before 8.0.552.237 and Chrome OS before 8.0.552.344 allow remote attackers to cause a denial of service (stack memory corruption) or possibly have unspecified other impact via a PDF document that triggers an out-of-memory error.Show less
1Google
2Chrome
Chrome Os
Apr 29, 2026
Jan 14, 2011
N/A· v4
N/A· v3
9.3 HIGH· v2
Use-after-free vulnerability in Google Chrome before 8.0.552.237 and Chrome OS before 8.0.552.344 allows remote attackers to cause a denial of service or possibly have unspecified other impact via a PDF document.
2Debian
Google
3Chrome
Chrome OsDebian Linux
Apr 29, 2026
Jan 14, 2011
N/A· v4
N/A· v3
10.0 HIGH· v2
Google Chrome before 8.0.552.237 and Chrome OS before 8.0.552.344 do not properly handle Cascading Style Sheets (CSS) token sequences in conjunction with cursors, which allows remote attackers to cause a denial of servic...Show more
Google Chrome before 8.0.552.237 and Chrome OS before 8.0.552.344 do not properly handle Cascading Style Sheets (CSS) token sequences in conjunction with cursors, which allows remote attackers to cause a denial of service or possibly have unspecified other impact via unknown vectors that lead to a "stale pointer."Show less
1Google
2Chrome
Chrome Os
Apr 29, 2026
Jan 14, 2011
N/A· v4
N/A· v3
10.0 HIGH· v2
Google Chrome before 8.0.552.237 and Chrome OS before 8.0.552.344 do not properly handle Cascading Style Sheets (CSS) token sequences in conjunction with CANVAS elements, which allows remote attackers to cause a denial o...Show more
Google Chrome before 8.0.552.237 and Chrome OS before 8.0.552.344 do not properly handle Cascading Style Sheets (CSS) token sequences in conjunction with CANVAS elements, which allows remote attackers to cause a denial of service or possibly have unspecified other impact via unknown vectors that lead to a "stale pointer."Show less
1Google
2Chrome
Chrome Os
Apr 29, 2026
Jan 14, 2011
N/A· v4
N/A· v3
9.3 HIGH· v2
Google Chrome before 8.0.552.237 and Chrome OS before 8.0.552.344 do not properly handle the printing of PDF documents, which allows user-assisted remote attackers to cause a denial of service (application crash) or poss...Show more
Google Chrome before 8.0.552.237 and Chrome OS before 8.0.552.344 do not properly handle the printing of PDF documents, which allows user-assisted remote attackers to cause a denial of service (application crash) or possibly have unspecified other impact via a multi-page document.Show less