← Back

Chrome

chrome

Vendor: Google • 5,450 CVEs

CVEs (5,450)

CVE
VENDORS
PRODUCTS
UPDATED
PUBLISHED
CVSS
2Fedoraproject
Google
2Chrome
Fedora
Jun 17, 2026
Aug 12, 2022
N/A· v4
8.8 HIGH· v3
N/A· v2
Use after free in WebUI in Google Chrome on Chrome OS prior to 104.0.5112.79 allowed a remote attacker who convinced a user to engage in specific user interactions to potentially exploit heap corruption via specific UI i...Show more
Use after free in WebUI in Google Chrome on Chrome OS prior to 104.0.5112.79 allowed a remote attacker who convinced a user to engage in specific user interactions to potentially exploit heap corruption via specific UI interactions.Show less
2Fedoraproject
Google
2Chrome
Fedora
Jun 17, 2026
Aug 12, 2022
N/A· v4
4.3 MEDIUM· v3
N/A· v2
Insufficient validation of untrusted input in Settings in Google Chrome prior to 104.0.5112.79 allowed an attacker who convinced a user to install a malicious extension to inject scripts or HTML into a privileged page vi...Show more
Insufficient validation of untrusted input in Settings in Google Chrome prior to 104.0.5112.79 allowed an attacker who convinced a user to install a malicious extension to inject scripts or HTML into a privileged page via a crafted HTML page.Show less
2Fedoraproject
Google
2Chrome
Fedora
Jun 17, 2026
Aug 12, 2022
N/A· v4
6.5 MEDIUM· v3
N/A· v2
Insufficient validation of untrusted input in Internals in Google Chrome prior to 104.0.5112.79 allowed a remote attacker to bypass download restrictions via a malicious file .
2Fedoraproject
Google
2Chrome
Fedora
Jun 17, 2026
Aug 12, 2022
N/A· v4
8.8 HIGH· v3
N/A· v2
Use after free in Extensions API in Google Chrome prior to 104.0.5112.79 allowed an attacker who convinced a user to install a malicious extension to potentially exploit heap corruption via specific UI interactions.
2Fedoraproject
Google
2Chrome
Fedora
Jun 17, 2026
Aug 12, 2022
N/A· v4
6.5 MEDIUM· v3
N/A· v2
Inappropriate implementation in Extensions API in Google Chrome prior to 104.0.5112.79 allowed an attacker who convinced a user to install a malicious extension to spoof the contents of the Omnibox (URL bar) via a crafte...Show more
Inappropriate implementation in Extensions API in Google Chrome prior to 104.0.5112.79 allowed an attacker who convinced a user to install a malicious extension to spoof the contents of the Omnibox (URL bar) via a crafted Chrome Extension.Show less
2Fedoraproject
Google
2Chrome
Fedora
Jun 17, 2026
Aug 12, 2022
N/A· v4
6.5 MEDIUM· v3
N/A· v2
Insufficient policy enforcement in Cookies in Google Chrome prior to 104.0.5112.79 allowed a remote attacker to leak cross-origin data via a crafted HTML page.
2Fedoraproject
Google
2Chrome
Fedora
Jun 17, 2026
Aug 12, 2022
N/A· v4
8.8 HIGH· v3
N/A· v2
Use after free in Sign-In Flow in Google Chrome prior to 104.0.5112.79 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page.
2Fedoraproject
Google
2Chrome
Fedora
Jun 17, 2026
Aug 12, 2022
N/A· v4
8.8 HIGH· v3
N/A· v2
Use after free in Input in Google Chrome on Chrome OS prior to 104.0.5112.79 allowed a remote attacker who convinced a user to enage in specific user interactions to potentially exploit heap corruption via specific UI in...Show more
Use after free in Input in Google Chrome on Chrome OS prior to 104.0.5112.79 allowed a remote attacker who convinced a user to enage in specific user interactions to potentially exploit heap corruption via specific UI interactions.Show less
2Fedoraproject
Google
2Chrome
Fedora
Jun 17, 2026
Aug 12, 2022
N/A· v4
6.5 MEDIUM· v3
N/A· v2
Side-channel information leakage in Keyboard input in Google Chrome prior to 104.0.5112.79 allowed a remote attacker who had compromised the renderer process to obtain potentially sensitive information from process memor...Show more
Side-channel information leakage in Keyboard input in Google Chrome prior to 104.0.5112.79 allowed a remote attacker who had compromised the renderer process to obtain potentially sensitive information from process memory via a crafted HTML page.Show less
2Fedoraproject
Google
2Chrome
Fedora
Jun 17, 2026
Aug 12, 2022
N/A· v4
4.3 MEDIUM· v3
N/A· v2
Inappropriate implementation in Fullscreen API in Google Chrome on Android prior to 104.0.5112.79 allowed a remote attacker to spoof the contents of the Omnibox (URL bar) via a crafted HTML page.
2Fedoraproject
Google
2Chrome
Fedora
Jun 17, 2026
Aug 12, 2022
N/A· v4
6.5 MEDIUM· v3
N/A· v2
Insufficient policy enforcement in Background Fetch in Google Chrome prior to 104.0.5112.79 allowed a remote attacker to leak cross-origin data via a crafted HTML page.
2Fedoraproject
Google
2Chrome
Fedora
Jun 17, 2026
Aug 12, 2022
N/A· v4
8.8 HIGH· v3
N/A· v2
Use after free in Nearby Share in Google Chrome on Chrome OS prior to 104.0.5112.79 allowed a remote attacker who convinced a user to engage in specific user interactions to potentially exploit heap corruption via specif...Show more
Use after free in Nearby Share in Google Chrome on Chrome OS prior to 104.0.5112.79 allowed a remote attacker who convinced a user to engage in specific user interactions to potentially exploit heap corruption via specific UI interactions.Show less
2Fedoraproject
Google
2Chrome
Fedora
Jun 17, 2026
Aug 12, 2022
N/A· v4
8.8 HIGH· v3
N/A· v2
Use after free in Overview Mode in Google Chrome on Chrome OS prior to 104.0.5112.79 allowed a remote attacker who convinced a user to engage in specific user interactions to potentially exploit heap corruption via speci...Show more
Use after free in Overview Mode in Google Chrome on Chrome OS prior to 104.0.5112.79 allowed a remote attacker who convinced a user to engage in specific user interactions to potentially exploit heap corruption via specific UI interactions.Show less
2Fedoraproject
Google
2Chrome
Fedora
Jun 17, 2026
Aug 12, 2022
N/A· v4
8.8 HIGH· v3
N/A· v2
Use after free in Tab Strip in Google Chrome on Chrome OS prior to 104.0.5112.79 allowed a remote attacker who convinced a user to engage in specific user interactions to potentially exploit heap corruption via specific...Show more
Use after free in Tab Strip in Google Chrome on Chrome OS prior to 104.0.5112.79 allowed a remote attacker who convinced a user to engage in specific user interactions to potentially exploit heap corruption via specific UI interactions.Show less
2Fedoraproject
Google
2Chrome
Fedora
Jun 17, 2026
Aug 12, 2022
N/A· v4
8.8 HIGH· v3
N/A· v2
Use after free in Managed devices API in Google Chrome prior to 104.0.5112.79 allowed a remote attacker who convinced a user to enable a specific Enterprise policy to potentially exploit heap corruption via a crafted HTM...Show more
Use after free in Managed devices API in Google Chrome prior to 104.0.5112.79 allowed a remote attacker who convinced a user to enable a specific Enterprise policy to potentially exploit heap corruption via a crafted HTML page.Show less
2Fedoraproject
Google
2Chrome
Fedora
Jun 17, 2026
Aug 12, 2022
N/A· v4
6.5 MEDIUM· v3
N/A· v2
Out of bounds read in Dawn in Google Chrome prior to 104.0.5112.79 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page.
2Fedoraproject
Google
2Chrome
Fedora
Jun 17, 2026
Aug 12, 2022
N/A· v4
8.8 HIGH· v3
N/A· v2
Use after free in Safe Browsing in Google Chrome prior to 104.0.5112.79 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page.
2Fedoraproject
Google
2Chrome
Fedora
Jun 17, 2026
Aug 12, 2022
N/A· v4
8.8 HIGH· v3
N/A· v2
Use after free in Omnibox in Google Chrome prior to 104.0.5112.79 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page.
1Google
1Chrome
Jun 17, 2026
Aug 12, 2022
N/A· v4
9.8 CRITICAL· v3
N/A· v2
Out of bounds write in Chrome OS Audio Server in Google Chrome on Chrome OS prior to 102.0.5005.125 allowed a remote attacker to potentially exploit heap corruption via crafted audio metadata.
1Google
1Chrome
Jun 17, 2026
Jul 28, 2022
N/A· v4
8.8 HIGH· v3
N/A· v2
Use after free in WebGPU in Google Chrome prior to 100.0.4896.88 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page.