← Back

Chrome

chrome

Vendor: Google • 5,450 CVEs

CVEs (5,450)

CVE
VENDORS
PRODUCTS
UPDATED
PUBLISHED
CVSS
1Google
1Chrome
Jun 17, 2026
Jul 21, 2022
N/A· v4
9.6 CRITICAL· v3
N/A· v2
Use after free in Safe Browsing in Google Chrome prior to 99.0.4844.74 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page.
1Google
1Chrome
Jun 17, 2026
Jul 21, 2022
N/A· v4
8.8 HIGH· v3
N/A· v2
Use after free in Extensions in Google Chrome prior to 99.0.4844.74 allowed an attacker who convinced a user to install a malicious extension to potentially exploit heap corruption via a crafted HTML page.
1Google
1Chrome
Jun 17, 2026
Jul 21, 2022
N/A· v4
8.8 HIGH· v3
N/A· v2
Use after free in Blink Layout in Google Chrome on Android prior to 99.0.4844.74 allowed a remote attacker who had compromised the renderer process to potentially exploit heap corruption via a crafted HTML page.
1Google
1Chrome
Jun 17, 2026
Apr 5, 2022
N/A· v4
8.8 HIGH· v3
6.8 MEDIUM· v2
Out of bounds memory access in WebXR in Google Chrome prior to 99.0.4844.51 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page.
1Google
1Chrome
Jun 17, 2026
Apr 5, 2022
N/A· v4
8.8 HIGH· v3
6.8 MEDIUM· v2
Use after free in Chrome OS Shell in Google Chrome on Chrome OS prior to 99.0.4844.51 allowed a remote attacker who convinced a user to engage in a series of user interaction to potentially exploit heap corruption via us...Show more
Use after free in Chrome OS Shell in Google Chrome on Chrome OS prior to 99.0.4844.51 allowed a remote attacker who convinced a user to engage in a series of user interaction to potentially exploit heap corruption via user interactions.Show less
1Google
1Chrome
Jun 17, 2026
Apr 5, 2022
N/A· v4
6.5 MEDIUM· v3
4.3 MEDIUM· v2
Inappropriate implementation in Autofill in Google Chrome prior to 99.0.4844.51 allowed a remote attacker to bypass navigation restrictions via a crafted HTML page.
1Google
1Chrome
Jun 17, 2026
Apr 5, 2022
N/A· v4
6.5 MEDIUM· v3
4.3 MEDIUM· v2
Data leak in Canvas in Google Chrome prior to 99.0.4844.51 allowed a remote attacker who convinced a user to engage in screen sharing to potentially leak cross-origin data via a crafted HTML page.
1Google
1Chrome
Jun 17, 2026
Apr 5, 2022
N/A· v4
8.8 HIGH· v3
6.8 MEDIUM· v2
Use after free in Browser Switcher in Google Chrome prior to 99.0.4844.51 allowed a remote attacker who convinced a user to engage in specific user interaction to potentially exploit heap corruption via user interaction.
1Google
1Chrome
Jun 17, 2026
Apr 5, 2022
N/A· v4
6.5 MEDIUM· v3
4.3 MEDIUM· v2
Inappropriate implementation in Full screen mode in Google Chrome on Android prior to 99.0.4844.51 allowed a remote attacker to hide the contents of the Omnibox (URL bar) via a crafted HTML page.
1Google
1Chrome
Jun 17, 2026
Apr 5, 2022
N/A· v4
6.5 MEDIUM· v3
4.3 MEDIUM· v2
Inappropriate implementation in Permissions in Google Chrome prior to 99.0.4844.51 allowed a remote attacker to tamper with the contents of the Omnibox (URL bar) via a crafted HTML page.
1Google
1Chrome
Jun 17, 2026
Apr 5, 2022
N/A· v4
6.5 MEDIUM· v3
4.3 MEDIUM· v2
Inappropriate implementation in Full screen mode in Google Chrome on Android prior to 99.0.4844.51 allowed a remote attacker to hide the contents of the Omnibox (URL bar) via a crafted HTML page.
1Google
1Chrome
Jun 17, 2026
Apr 5, 2022
N/A· v4
8.8 HIGH· v3
6.8 MEDIUM· v2
Heap buffer overflow in Cast UI in Google Chrome prior to 99.0.4844.51 allowed a remote attacker who convinced a user to engage in specific user interaction to potentially exploit heap corruption via a crafted HTML page.
1Google
1Chrome
Jun 17, 2026
Apr 5, 2022
N/A· v4
8.8 HIGH· v3
6.8 MEDIUM· v2
Insufficient policy enforcement in Installer in Google Chrome on Windows prior to 99.0.4844.51 allowed a remote attacker to perform local privilege escalation via a crafted offline installer file.
1Google
1Chrome
Jun 17, 2026
Apr 5, 2022
N/A· v4
8.8 HIGH· v3
6.8 MEDIUM· v2
Use after free in MediaStream in Google Chrome prior to 99.0.4844.51 allowed an attacker who convinced a user to install a malicious extension to potentially exploit heap corruption via a crafted Chrome Extension.
1Google
1Chrome
Jun 17, 2026
Apr 5, 2022
N/A· v4
8.8 HIGH· v3
6.8 MEDIUM· v2
Out of bounds memory access in Mojo in Google Chrome prior to 99.0.4844.51 allowed a remote attacker to perform an out of bounds memory write via a crafted HTML page.
1Google
1Chrome
Jun 17, 2026
Apr 5, 2022
N/A· v4
8.8 HIGH· v3
6.8 MEDIUM· v2
Use after free in Media in Google Chrome prior to 99.0.4844.51 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page.
1Google
1Chrome
Jun 17, 2026
Apr 5, 2022
N/A· v4
8.8 HIGH· v3
6.8 MEDIUM· v2
Type confusion in Blink Layout in Google Chrome prior to 99.0.4844.51 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page.
1Google
1Chrome
Jun 17, 2026
Apr 5, 2022
N/A· v4
8.8 HIGH· v3
6.8 MEDIUM· v2
Use after free in WebShare in Google Chrome prior to 99.0.4844.51 allowed a remote attacker who convinced a user to engage in specific user interaction to potentially exploit heap corruption via a crafted HTML page.
1Google
1Chrome
Jun 17, 2026
Apr 5, 2022
N/A· v4
8.8 HIGH· v3
6.8 MEDIUM· v2
Use after free in Cast in Google Chrome prior to 99.0.4844.51 allowed an attacker who convinced a user to install a malicious extension and engage in specific user interaction to potentially exploit heap corruption via a...Show more
Use after free in Cast in Google Chrome prior to 99.0.4844.51 allowed an attacker who convinced a user to install a malicious extension and engage in specific user interaction to potentially exploit heap corruption via a crafted Chrome Extension.Show less
1Google
1Chrome
Jun 17, 2026
Apr 5, 2022
N/A· v4
6.5 MEDIUM· v3
4.3 MEDIUM· v2
Out of bounds read in ANGLE in Google Chrome prior to 99.0.4844.51 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page.