← Back

Chrome

chrome

Vendor: Google • 6,405 CVEs

CVEs (6,405)

CVE
VENDORS
PRODUCTS
UPDATED
PUBLISHED
CVSS
1Google
1Chrome
Jun 17, 2026
Sep 26, 2022
N/A· v4
8.8 HIGH· v3
N/A· v2
Use after free in Browser Creation in Google Chrome prior to 104.0.5112.101 allowed a remote attacker who had convinced a user to engage in a specific UI interaction to potentially exploit heap corruption via a crafted H...Show more
Use after free in Browser Creation in Google Chrome prior to 104.0.5112.101 allowed a remote attacker who had convinced a user to engage in a specific UI interaction to potentially exploit heap corruption via a crafted HTML page.Show less
2Fedoraproject
Google
2Chrome
Fedora
Jun 17, 2026
Sep 26, 2022
N/A· v4
6.5 MEDIUM· v3
N/A· v2
Inappropriate implementation in Extensions API in Google Chrome prior to 104.0.5112.101 allowed an attacker who convinced a user to install a malicious extension to inject arbitrary scripts into WebUI via a crafted HTML...Show more
Inappropriate implementation in Extensions API in Google Chrome prior to 104.0.5112.101 allowed an attacker who convinced a user to install a malicious extension to inject arbitrary scripts into WebUI via a crafted HTML page.Show less
2Fedoraproject
Google
2Chrome
Fedora
Jun 17, 2026
Sep 26, 2022
N/A· v4
6.5 MEDIUM· v3
N/A· v2
Insufficient policy enforcement in Cookies in Google Chrome prior to 104.0.5112.101 allowed a remote attacker to bypass cookie prefix restrictions via a crafted HTML page.
2Fedoraproject
Google
2Chrome
Fedora
Jun 17, 2026
Sep 26, 2022
N/A· v4
8.8 HIGH· v3
N/A· v2
Use after free in Chrome OS Shell in Google Chrome prior to 104.0.5112.101 allowed a remote attacker who convinced a user to engage in specific UI interactions to potentially exploit heap corruption via specific UI inter...Show more
Use after free in Chrome OS Shell in Google Chrome prior to 104.0.5112.101 allowed a remote attacker who convinced a user to engage in specific UI interactions to potentially exploit heap corruption via specific UI interactions.Show less
2Fedoraproject
Google
2Chrome
Fedora
Jun 17, 2026
Sep 26, 2022
N/A· v4
8.8 HIGH· v3
N/A· v2
Use after free in Sign-In Flow in Google Chrome prior to 104.0.5112.101 allowed a remote attacker to potentially exploit heap corruption via specific UI interaction.
2Fedoraproject
Google
2Chrome
Fedora
Jun 17, 2026
Sep 26, 2022
N/A· v4
8.8 HIGH· v3
N/A· v2
Use after free in Blink in Google Chrome prior to 104.0.5112.101 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page.
2Fedoraproject
Google
2Chrome
Fedora
Jun 17, 2026
Sep 26, 2022
N/A· v4
6.5 MEDIUM· v3
N/A· v2
Insufficient validation of untrusted input in Intents in Google Chrome on Android prior to 104.0.5112.101 allowed a remote attacker to arbitrarily browse to a malicious website via a crafted HTML page.
2Fedoraproject
Google
2Chrome
Fedora
Jun 17, 2026
Sep 26, 2022
N/A· v4
8.8 HIGH· v3
N/A· v2
Use after free in ANGLE in Google Chrome prior to 104.0.5112.101 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page.
2Fedoraproject
Google
2Chrome
Fedora
Jun 17, 2026
Sep 26, 2022
N/A· v4
8.8 HIGH· v3
N/A· v2
Use after free in SwiftShader in Google Chrome prior to 104.0.5112.101 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page.
2Fedoraproject
Google
2Chrome
Fedora
Jun 17, 2026
Sep 26, 2022
N/A· v4
8.8 HIGH· v3
N/A· v2
Heap buffer overflow in Downloads in Google Chrome on Android prior to 104.0.5112.101 allowed a remote attacker who had compromised the renderer process to potentially exploit heap corruption via a crafted HTML page.
2Fedoraproject
Google
2Chrome
Fedora
Jun 17, 2026
Sep 26, 2022
N/A· v4
8.8 HIGH· v3
N/A· v2
Use after free in FedCM in Google Chrome prior to 104.0.5112.101 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page.
2Fedoraproject
Google
2Chrome
Fedora
Jun 17, 2026
Aug 12, 2022
N/A· v4
8.8 HIGH· v3
N/A· v2
Heap buffer overflow in PDF in Google Chrome prior to 104.0.5112.79 allowed a remote attacker who convinced a user to engage in specific user interactions to potentially exploit heap corruption via a crafted PDF file.
2Fedoraproject
Google
2Chrome
Fedora
Jun 17, 2026
Aug 12, 2022
N/A· v4
8.8 HIGH· v3
N/A· v2
Use after free in Offline in Google Chrome on Android prior to 104.0.5112.79 allowed a remote attacker who convinced a user to engage in specific user interactions to potentially exploit heap corruption via specific UI i...Show more
Use after free in Offline in Google Chrome on Android prior to 104.0.5112.79 allowed a remote attacker who convinced a user to engage in specific user interactions to potentially exploit heap corruption via specific UI interactions.Show less
2Fedoraproject
Google
2Chrome
Fedora
Jun 17, 2026
Aug 12, 2022
N/A· v4
6.5 MEDIUM· v3
N/A· v2
Insufficient validation of untrusted input in Safe Browsing in Google Chrome on Windows prior to 104.0.5112.79 allowed a remote attacker to bypass download restrictions via a crafted file.
2Fedoraproject
Google
2Chrome
Fedora
Jun 17, 2026
Aug 12, 2022
N/A· v4
8.8 HIGH· v3
N/A· v2
Use after free in Extensions in Google Chrome prior to 104.0.5112.79 allowed an attacker who convinced a user to install a malicious extension to potentially exploit heap corruption via specific UI interactions.
2Fedoraproject
Google
2Chrome
Fedora
Jun 17, 2026
Aug 12, 2022
N/A· v4
8.8 HIGH· v3
N/A· v2
Use after free in WebUI in Google Chrome on Chrome OS prior to 104.0.5112.79 allowed a remote attacker who convinced a user to engage in specific user interactions to potentially exploit heap corruption via specific UI i...Show more
Use after free in WebUI in Google Chrome on Chrome OS prior to 104.0.5112.79 allowed a remote attacker who convinced a user to engage in specific user interactions to potentially exploit heap corruption via specific UI interactions.Show less
2Fedoraproject
Google
2Chrome
Fedora
Jun 17, 2026
Aug 12, 2022
N/A· v4
4.3 MEDIUM· v3
N/A· v2
Insufficient validation of untrusted input in Settings in Google Chrome prior to 104.0.5112.79 allowed an attacker who convinced a user to install a malicious extension to inject scripts or HTML into a privileged page vi...Show more
Insufficient validation of untrusted input in Settings in Google Chrome prior to 104.0.5112.79 allowed an attacker who convinced a user to install a malicious extension to inject scripts or HTML into a privileged page via a crafted HTML page.Show less
2Fedoraproject
Google
2Chrome
Fedora
Jun 17, 2026
Aug 12, 2022
N/A· v4
6.5 MEDIUM· v3
N/A· v2
Insufficient validation of untrusted input in Internals in Google Chrome prior to 104.0.5112.79 allowed a remote attacker to bypass download restrictions via a malicious file .
2Fedoraproject
Google
2Chrome
Fedora
Jun 17, 2026
Aug 12, 2022
N/A· v4
8.8 HIGH· v3
N/A· v2
Use after free in Extensions API in Google Chrome prior to 104.0.5112.79 allowed an attacker who convinced a user to install a malicious extension to potentially exploit heap corruption via specific UI interactions.
2Fedoraproject
Google
2Chrome
Fedora
Jun 17, 2026
Aug 12, 2022
N/A· v4
6.5 MEDIUM· v3
N/A· v2
Inappropriate implementation in Extensions API in Google Chrome prior to 104.0.5112.79 allowed an attacker who convinced a user to install a malicious extension to spoof the contents of the Omnibox (URL bar) via a crafte...Show more
Inappropriate implementation in Extensions API in Google Chrome prior to 104.0.5112.79 allowed an attacker who convinced a user to install a malicious extension to spoof the contents of the Omnibox (URL bar) via a crafted Chrome Extension.Show less