← Back

Chrome

chrome

Vendor: Google • 5,445 CVEs

CVEs (5,445)

CVE
VENDORS
PRODUCTS
UPDATED
PUBLISHED
CVSS
2Debian
Google
2Chrome
Debian Linux
Apr 29, 2026
Jun 5, 2013
N/A· v4
N/A· v3
5.0 MEDIUM· v2
The Developer Tools API in Google Chrome before 27.0.1453.110 allows remote attackers to cause a denial of service (memory corruption) or possibly have unspecified other impact via unknown vectors.
1Google
1Chrome
Apr 29, 2026
Jun 5, 2013
N/A· v4
N/A· v3
7.5 HIGH· v2
Google Chrome before 27.0.1453.110 on Windows provides an incorrect handle to a renderer process in unspecified circumstances, which allows remote attackers to cause a denial of service or possibly have other impact via...Show more
Google Chrome before 27.0.1453.110 on Windows provides an incorrect handle to a renderer process in unspecified circumstances, which allows remote attackers to cause a denial of service or possibly have other impact via unknown vectors.Show less
1Google
1Chrome
Apr 29, 2026
May 22, 2013
N/A· v4
N/A· v3
4.3 MEDIUM· v2
Multiple cross-site scripting (XSS) vulnerabilities in Google Chrome before 27.0.1453.93 allow user-assisted remote attackers to inject arbitrary web script or HTML via vectors involving a (1) drag-and-drop or (2) copy-a...Show more
Multiple cross-site scripting (XSS) vulnerabilities in Google Chrome before 27.0.1453.93 allow user-assisted remote attackers to inject arbitrary web script or HTML via vectors involving a (1) drag-and-drop or (2) copy-and-paste operation.Show less
1Google
1Chrome
Apr 29, 2026
May 22, 2013
N/A· v4
N/A· v3
5.0 MEDIUM· v2
The XSS Auditor in Google Chrome before 27.0.1453.93 might allow remote attackers to obtain sensitive information via unspecified vectors.
1Google
1Chrome
Apr 29, 2026
May 22, 2013
N/A· v4
N/A· v3
6.8 MEDIUM· v2
Race condition in the workers implementation in Google Chrome before 27.0.1453.93 allows remote attackers to cause a denial of service (use-after-free and application crash) or possibly have unspecified other impact via...Show more
Race condition in the workers implementation in Google Chrome before 27.0.1453.93 allows remote attackers to cause a denial of service (use-after-free and application crash) or possibly have unspecified other impact via unknown vectors.Show less
1Google
1Chrome
Apr 29, 2026
May 22, 2013
N/A· v4
N/A· v3
7.5 HIGH· v2
Use-after-free vulnerability in the media loader in Google Chrome before 27.0.1453.93 allows remote attackers to cause a denial of service or possibly have unspecified other impact via unknown vectors, a different vulner...Show more
Use-after-free vulnerability in the media loader in Google Chrome before 27.0.1453.93 allows remote attackers to cause a denial of service or possibly have unspecified other impact via unknown vectors, a different vulnerability than CVE-2013-2840.Show less
1Google
1Chrome
Apr 29, 2026
May 22, 2013
N/A· v4
N/A· v3
7.5 HIGH· v2
The Web Audio implementation in Google Chrome before 27.0.1453.93 allows remote attackers to cause a denial of service (memory corruption) or possibly have unspecified other impact via unknown vectors.
1Google
1Chrome
Apr 29, 2026
May 22, 2013
N/A· v4
N/A· v3
7.5 HIGH· v2
Use-after-free vulnerability in the Cascading Style Sheets (CSS) implementation in Google Chrome before 27.0.1453.93 allows remote attackers to cause a denial of service or possibly have unspecified other impact via vect...Show more
Use-after-free vulnerability in the Cascading Style Sheets (CSS) implementation in Google Chrome before 27.0.1453.93 allows remote attackers to cause a denial of service or possibly have unspecified other impact via vectors related to style resolution.Show less
1Google
1Chrome
Apr 29, 2026
May 22, 2013
N/A· v4
N/A· v3
7.5 HIGH· v2
Use-after-free vulnerability in Google Chrome before 27.0.1453.93 allows remote attackers to cause a denial of service or possibly have unspecified other impact via vectors related to the handling of speech data.
2Apple
Google
2Chrome
Iphone Os
Apr 29, 2026
May 22, 2013
N/A· v4
N/A· v3
7.5 HIGH· v2
Use-after-free vulnerability in Google Chrome before 27.0.1453.93 allows remote attackers to cause a denial of service or possibly have unspecified other impact via vectors related to the handling of widgets.
1Google
1Chrome
Apr 29, 2026
May 22, 2013
N/A· v4
N/A· v3
7.5 HIGH· v2
Use-after-free vulnerability in Google Chrome before 27.0.1453.93 allows remote attackers to cause a denial of service or possibly have unspecified other impact via vectors related to the handling of Pepper resources.
1Google
1Chrome
Apr 29, 2026
May 22, 2013
N/A· v4
N/A· v3
7.5 HIGH· v2
Use-after-free vulnerability in the media loader in Google Chrome before 27.0.1453.93 allows remote attackers to cause a denial of service or possibly have unspecified other impact via unknown vectors, a different vulner...Show more
Use-after-free vulnerability in the media loader in Google Chrome before 27.0.1453.93 allows remote attackers to cause a denial of service or possibly have unspecified other impact via unknown vectors, a different vulnerability than CVE-2013-2846.Show less
1Google
1Chrome
Apr 29, 2026
May 22, 2013
N/A· v4
N/A· v3
7.5 HIGH· v2
Google Chrome before 27.0.1453.93 does not properly perform a cast of an unspecified variable during handling of clipboard data, which allows remote attackers to cause a denial of service or possibly have other impact vi...Show more
Google Chrome before 27.0.1453.93 does not properly perform a cast of an unspecified variable during handling of clipboard data, which allows remote attackers to cause a denial of service or possibly have other impact via unknown vectors.Show less
1Google
2Chrome
V8
Apr 29, 2026
May 22, 2013
N/A· v4
N/A· v3
5.0 MEDIUM· v2
Google V8, as used in Google Chrome before 27.0.1453.93, allows remote attackers to cause a denial of service (out-of-bounds read) via unspecified vectors.
1Google
1Chrome
Apr 29, 2026
May 22, 2013
N/A· v4
N/A· v3
7.5 HIGH· v2
Use-after-free vulnerability in the SVG implementation in Google Chrome before 27.0.1453.93 allows remote attackers to cause a denial of service or possibly have unspecified other impact via unknown vectors.
1Google
1Chrome
Apr 29, 2026
May 22, 2013
N/A· v4
N/A· v3
7.5 HIGH· v2
Multiple unspecified vulnerabilities in Google Chrome before 27.0.1453.93 allow attackers to cause a denial of service or possibly have other impact via unknown vectors.
1Google
1Chrome
Apr 29, 2026
Mar 28, 2013
N/A· v4
N/A· v3
6.8 MEDIUM· v2
Google Chrome before 26.0.1410.43 does not properly handle active content in an EMBED element during a copy-and-paste operation, which allows user-assisted remote attackers to have an unspecified impact via a crafted web...Show more
Google Chrome before 26.0.1410.43 does not properly handle active content in an EMBED element during a copy-and-paste operation, which allows user-assisted remote attackers to have an unspecified impact via a crafted web site.Show less
1Google
1Chrome
Apr 29, 2026
Mar 28, 2013
N/A· v4
N/A· v3
7.5 HIGH· v2
Google Chrome before 26.0.1410.43 does not ensure that an extension has the tabs (aka APIPermission::kTab) permission before providing a URL to this extension, which has unspecified impact and remote attack vectors.
1Google
1Chrome
Apr 29, 2026
Mar 28, 2013
N/A· v4
N/A· v3
7.5 HIGH· v2
The extension functionality in Google Chrome before 26.0.1410.43 does not verify that use of the permissions API is consistent with file permissions, which has unspecified impact and attack vectors.
1Google
1Chrome
Apr 29, 2026
Mar 28, 2013
N/A· v4
N/A· v3
5.0 MEDIUM· v2
The USB Apps API in Google Chrome before 26.0.1410.43 allows remote attackers to cause a denial of service (memory corruption) via unspecified vectors.