← Back

Chrome

chrome

Vendor: Google • 5,445 CVEs

CVEs (5,445)

CVE
VENDORS
PRODUCTS
UPDATED
PUBLISHED
CVSS
CVE-2012-5116
1Google
1Chrome
Apr 29, 2026
Nov 7, 2012
N/A· v4
N/A· v3
7.5 HIGH· v2
Use-after-free vulnerability in Google Chrome before 23.0.1271.64 allows remote attackers to cause a denial of service or possibly have unspecified other impact via vectors related to the handling of SVG filters.
CVE-2012-5115
1Google
1Chrome
Apr 29, 2026
Nov 7, 2012
N/A· v4
N/A· v3
7.5 HIGH· v2
Google Chrome before 23.0.1271.64 on Mac OS X does not properly mitigate improper write behavior in graphics drivers, which allows remote attackers to cause a denial of service or possibly have unspecified other impact v...Show more
Google Chrome before 23.0.1271.64 on Mac OS X does not properly mitigate improper write behavior in graphics drivers, which allows remote attackers to cause a denial of service or possibly have unspecified other impact via unknown vectors that trigger "wild writes."Show less
CVE-2012-5376
1Google
1Chrome
Apr 29, 2026
Oct 11, 2012
N/A· v4
9.6 CRITICAL· v3
9.3 HIGH· v2
The Inter-process Communication (IPC) implementation in Google Chrome before 22.0.1229.94 allows remote attackers to bypass intended sandbox restrictions and write to arbitrary files by leveraging access to a renderer pr...Show more
The Inter-process Communication (IPC) implementation in Google Chrome before 22.0.1229.94 allows remote attackers to bypass intended sandbox restrictions and write to arbitrary files by leveraging access to a renderer process, a different vulnerability than CVE-2012-5112.Show less
CVE-2012-5112
2Apple
Google
2Chrome
Iphone Os
Apr 29, 2026
Oct 11, 2012
N/A· v4
N/A· v3
10.0 HIGH· v2
Use-after-free vulnerability in the SVG implementation in WebKit, as used in Google Chrome before 22.0.1229.94, allows remote attackers to execute arbitrary code via unspecified vectors.
CVE-2012-5111
1Google
1Chrome
Apr 29, 2026
Oct 9, 2012
N/A· v4
N/A· v3
7.5 HIGH· v2
Google Chrome before 22.0.1229.92 does not monitor for crashes of Pepper plug-ins, which has unspecified impact and remote attack vectors.
CVE-2012-5110
1Google
1Chrome
Apr 29, 2026
Oct 9, 2012
N/A· v4
N/A· v3
5.0 MEDIUM· v2
The compositor in Google Chrome before 22.0.1229.92 allows remote attackers to cause a denial of service (out-of-bounds read) via unspecified vectors.
CVE-2012-5109
1Google
1Chrome
Apr 29, 2026
Oct 9, 2012
N/A· v4
N/A· v3
5.0 MEDIUM· v2
The International Components for Unicode (ICU) functionality in Google Chrome before 22.0.1229.92 allows remote attackers to cause a denial of service (out-of-bounds read) via vectors related to a regular expression.
CVE-2012-5108
1Google
1Chrome
Apr 29, 2026
Oct 9, 2012
N/A· v4
N/A· v3
9.3 HIGH· v2
Race condition in Google Chrome before 22.0.1229.92 allows remote attackers to execute arbitrary code via vectors related to audio devices.
CVE-2012-2900
1Google
1Chrome
Apr 29, 2026
Oct 9, 2012
N/A· v4
N/A· v3
7.5 HIGH· v2
Skia, as used in Google Chrome before 22.0.1229.92, does not properly render text, which allows remote attackers to cause a denial of service (application crash) or possibly have unspecified other impact via unknown vect...Show more
Skia, as used in Google Chrome before 22.0.1229.92, does not properly render text, which allows remote attackers to cause a denial of service (application crash) or possibly have unspecified other impact via unknown vectors.Show less
CVE-2012-2897
2Google
Microsoft
9Chrome
Windows 7Windows 8+6 more
Apr 29, 2026
Sep 26, 2012
N/A· v4
7.8 HIGH· v3
10.0 HIGH· v2
The kernel-mode drivers in Microsoft Windows XP SP2 and SP3, Windows Server 2003 SP2, Windows Vista SP2, Windows Server 2008 SP2, R2, and R2 SP1, Windows 7 Gold and SP1, Windows 8, Windows Server 2012, and Windows RT, as...Show more
The kernel-mode drivers in Microsoft Windows XP SP2 and SP3, Windows Server 2003 SP2, Windows Vista SP2, Windows Server 2008 SP2, R2, and R2 SP1, Windows 7 Gold and SP1, Windows 8, Windows Server 2012, and Windows RT, as used by Google Chrome before 22.0.1229.79 and other programs, do not properly handle objects in memory, which allows remote attackers to execute arbitrary code via a crafted TrueType font file, aka "Windows Font Parsing Vulnerability" or "TrueType Font Parsing Vulnerability."Show less
CVE-2012-2896
1Google
1Chrome
Apr 29, 2026
Sep 26, 2012
N/A· v4
N/A· v3
7.5 HIGH· v2
Integer overflow in the WebGL implementation in Google Chrome before 22.0.1229.79 on Mac OS X allows remote attackers to cause a denial of service or possibly have unspecified other impact via unknown vectors.
CVE-2012-2895
1Google
1Chrome
Apr 29, 2026
Sep 26, 2012
N/A· v4
N/A· v3
6.8 MEDIUM· v2
The PDF functionality in Google Chrome before 22.0.1229.79 allows remote attackers to cause a denial of service or possibly have unspecified other impact via vectors that trigger out-of-bounds write operations.
CVE-2012-2894
1Google
1Chrome
Apr 29, 2026
Sep 26, 2012
N/A· v4
N/A· v3
6.8 MEDIUM· v2
Google Chrome before 22.0.1229.79 does not properly handle graphics-context data structures, which allows remote attackers to cause a denial of service (application crash) or possibly have unspecified other impact via un...Show more
Google Chrome before 22.0.1229.79 does not properly handle graphics-context data structures, which allows remote attackers to cause a denial of service (application crash) or possibly have unspecified other impact via unknown vectors.Show less
CVE-2012-2893
1Google
1Chrome
Apr 29, 2026
Sep 26, 2012
N/A· v4
N/A· v3
6.8 MEDIUM· v2
Double free vulnerability in libxslt, as used in Google Chrome before 22.0.1229.79, allows remote attackers to cause a denial of service or possibly have unspecified other impact via vectors related to XSL transforms.
CVE-2012-2892
1Google
1Chrome
Apr 29, 2026
Sep 26, 2012
N/A· v4
N/A· v3
5.0 MEDIUM· v2
Unspecified vulnerability in Google Chrome before 22.0.1229.79 allows remote attackers to bypass the pop-up blocker via unknown vectors.
CVE-2012-2891
1Google
1Chrome
Apr 29, 2026
Sep 26, 2012
N/A· v4
N/A· v3
5.0 MEDIUM· v2
The IPC implementation in Google Chrome before 22.0.1229.79 allows attackers to obtain potentially sensitive information about memory addresses via unspecified vectors.
CVE-2012-2890
1Google
1Chrome
Apr 29, 2026
Sep 26, 2012
N/A· v4
N/A· v3
6.8 MEDIUM· v2
Use-after-free vulnerability in the PDF functionality in Google Chrome before 22.0.1229.79 allows remote attackers to cause a denial of service or possibly have unspecified other impact via a crafted document.
CVE-2012-2889
2Apple
Google
2Chrome
Iphone Os
Apr 29, 2026
Sep 26, 2012
N/A· v4
N/A· v3
4.3 MEDIUM· v2
Cross-site scripting (XSS) vulnerability in Google Chrome before 22.0.1229.79 allows remote attackers to inject arbitrary web script or HTML via vectors involving frames, aka "Universal XSS (UXSS)."
CVE-2012-2888
2Google
Opensuse
2Chrome
Opensuse
Apr 29, 2026
Sep 26, 2012
N/A· v4
N/A· v3
7.5 HIGH· v2
Use-after-free vulnerability in Google Chrome before 22.0.1229.79 allows remote attackers to cause a denial of service or possibly have unspecified other impact via vectors involving SVG text references.
CVE-2012-2887
2Google
Opensuse
2Chrome
Opensuse
Apr 29, 2026
Sep 26, 2012
N/A· v4
N/A· v3
7.5 HIGH· v2
Use-after-free vulnerability in Google Chrome before 22.0.1229.79 allows remote attackers to cause a denial of service or possibly have unspecified other impact via vectors involving onclick events.