← Back

Chrome

chrome

Vendor: Google • 5,450 CVEs

CVEs (5,450)

CVE
VENDORS
PRODUCTS
UPDATED
PUBLISHED
CVSS
1Google
1Chrome
Jun 17, 2026
Dec 2, 2025
N/A· v4
8.8 HIGH· v3
N/A· v2
Use after free in Media Stream in Google Chrome prior to 143.0.7499.41 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. (Chromium security severity: Low)
1Google
1Chrome
Jun 17, 2026
Dec 2, 2025
N/A· v4
4.3 MEDIUM· v3
N/A· v2
Inappropriate implementation in Downloads in Google Chrome prior to 143.0.7499.41 allowed a remote attacker who convinced a user to engage in specific UI gestures to bypass download protections via a crafted HTML page. (...Show more
Inappropriate implementation in Downloads in Google Chrome prior to 143.0.7499.41 allowed a remote attacker who convinced a user to engage in specific UI gestures to bypass download protections via a crafted HTML page. (Chromium security severity: Low)Show less
1Google
1Chrome
Jun 17, 2026
Dec 2, 2025
N/A· v4
4.3 MEDIUM· v3
N/A· v2
Inappropriate implementation in Split View in Google Chrome prior to 143.0.7499.41 allowed a remote attacker who convinced a user to engage in specific UI gestures to perform UI spoofing via a crafted domain name. (Chrom...Show more
Inappropriate implementation in Split View in Google Chrome prior to 143.0.7499.41 allowed a remote attacker who convinced a user to engage in specific UI gestures to perform UI spoofing via a crafted domain name. (Chromium security severity: Low)Show less
1Google
1Chrome
Jun 17, 2026
Dec 2, 2025
N/A· v4
4.4 MEDIUM· v3
N/A· v2
Inappropriate implementation in Downloads in Google Chrome prior to 143.0.7499.41 allowed a local attacker to perform UI spoofing via a crafted HTML page. (Chromium security severity: Low)
1Google
1Chrome
Jun 17, 2026
Dec 2, 2025
N/A· v4
4.4 MEDIUM· v3
N/A· v2
Inappropriate implementation in Downloads in Google Chrome on Windows prior to 143.0.7499.41 allowed a local attacker to bypass mark of the web via a crafted HTML page. (Chromium security severity: Medium)
1Google
1Chrome
Jun 17, 2026
Dec 2, 2025
N/A· v4
8.8 HIGH· v3
N/A· v2
Use after free in Digital Credentials in Google Chrome prior to 143.0.7499.41 allowed a remote attacker who had compromised the renderer process to potentially exploit heap corruption via a crafted HTML page. (Chromium s...Show more
Use after free in Digital Credentials in Google Chrome prior to 143.0.7499.41 allowed a remote attacker who had compromised the renderer process to potentially exploit heap corruption via a crafted HTML page. (Chromium security severity: High)Show less
1Google
1Chrome
Jun 17, 2026
Dec 2, 2025
N/A· v4
5.4 MEDIUM· v3
N/A· v2
Inappropriate implementation in DevTools in Google Chrome prior to 143.0.7499.41 allowed an attacker who convinced a user to install a malicious extension to potentially perform a sandbox escape via a crafted Chrome Exte...Show more
Inappropriate implementation in DevTools in Google Chrome prior to 143.0.7499.41 allowed an attacker who convinced a user to install a malicious extension to potentially perform a sandbox escape via a crafted Chrome Extension. (Chromium security severity: High)Show less
1Google
1Chrome
Jun 17, 2026
Dec 2, 2025
N/A· v4
8.8 HIGH· v3
N/A· v2
Inappropriate implementation in Google Updater in Google Chrome on Mac prior to 143.0.7499.41 allowed a remote attacker to perform privilege escalation via a crafted file. (Chromium security severity: High)
1Google
1Chrome
Jun 17, 2026
Dec 2, 2025
N/A· v4
8.8 HIGH· v3
N/A· v2
Type Confusion in V8 in Google Chrome prior to 143.0.7499.41 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. (Chromium security severity: High)
1Google
1Chrome
Jun 17, 2026
Nov 18, 2025
N/A· v4
8.8 HIGH· v3
N/A· v2
Type Confusion in V8 in Google Chrome prior to 142.0.7444.59 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. (Chromium security severity: High)
1Google
1Chrome
Jun 17, 2026
Nov 18, 2025
N/A· v4
8.8 HIGH· v3
N/A· v2
Type Confusion in V8 in Google Chrome prior to 142.0.7444.59 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. (Chromium security severity: High)
1Google
1Chrome
Jun 17, 2026
Nov 18, 2025
N/A· v4
8.8 HIGH· v3
N/A· v2
Type Confusion in V8 in Google Chrome prior to 142.0.7444.59 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. (Chromium security severity: High)
1Google
1Chrome
Jun 17, 2026
Nov 18, 2025
N/A· v4
8.8 HIGH· v3
N/A· v2
Type Confusion in V8 in Google Chrome prior to 142.0.7444.59 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. (Chromium security severity: High)
1Google
1Chrome
Jun 17, 2026
Nov 18, 2025
N/A· v4
8.8 HIGH· v3
N/A· v2
Type Confusion in V8 in Google Chrome prior to 142.0.7444.59 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. (Chromium security severity: High)
1Google
1Chrome
Jun 17, 2026
Nov 17, 2025
N/A· v4
8.8 HIGH· v3
N/A· v2
Type Confusion in V8 in Google Chrome prior to 142.0.7444.175 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. (Chromium security severity: High)
2Google
Siemens
2Cadra
Chrome
Jul 14, 2026
Nov 17, 2025
N/A· v4
8.8 HIGH· v3
N/A· v2
Type Confusion in V8 in Google Chrome prior to 142.0.7444.175 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. (Chromium security severity: High)
1Google
1Chrome
Jun 17, 2026
Nov 14, 2025
N/A· v4
4.3 MEDIUM· v3
N/A· v2
Out of bounds read in V8 in Google Chrome prior to 133.0.6943.141 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. (Chromium security severity: Medium)
1Google
1Chrome
Jun 17, 2026
Nov 14, 2025
N/A· v4
4.3 MEDIUM· v3
N/A· v2
Inappropriate implementation in Compositing in Google Chrome prior to 140.0.7339.80 allowed a remote attacker to perform UI spoofing via a crafted HTML page. (Chromium security severity: Low)
1Google
1Chrome
Jun 17, 2026
Nov 14, 2025
N/A· v4
4.3 MEDIUM· v3
N/A· v2
Inappropriate implementation in WebApp Installs in Google Chrome on Android prior to 134.0.6998.35 allowed a remote attacker to perform UI spoofing via a crafted HTML page. (Chromium security severity: Low)
1Google
1Chrome
Jun 17, 2026
Nov 14, 2025
N/A· v4
5.4 MEDIUM· v3
N/A· v2
Inappropriate implementation in DevTools in Google Chrome prior to 136.0.7103.59 allowed a remote attacker to potentially perform a sandbox escape via a crafted HTML page. (Chromium security severity: Medium)