← Back

Chrome

chrome

Vendor: Google • 5,445 CVEs

CVEs (5,445)

CVE
VENDORS
PRODUCTS
UPDATED
PUBLISHED
CVSS
2Apple
Google
2Chrome
Iphone Os
Apr 29, 2026
Jun 27, 2012
N/A· v4
N/A· v3
7.5 HIGH· v2
Use-after-free vulnerability in Google Chrome before 20.0.1132.43 allows remote attackers to cause a denial of service or possibly have unspecified other impact via vectors related to SVG painting.
1Google
1Chrome
Apr 29, 2026
Jun 27, 2012
N/A· v4
N/A· v3
7.5 HIGH· v2
Use-after-free vulnerability in Google Chrome before 20.0.1132.43 allows remote attackers to cause a denial of service or possibly have unspecified other impact via vectors related to SVG resources.
1Google
1Chrome
Apr 29, 2026
Jun 27, 2012
N/A· v4
N/A· v3
5.0 MEDIUM· v2
The PDF functionality in Google Chrome before 20.0.1132.43 allows remote attackers to cause a denial of service (out-of-bounds read) via unspecified vectors.
1Google
1Chrome
Apr 29, 2026
Jun 27, 2012
N/A· v4
N/A· v3
7.5 HIGH· v2
The autofill implementation in Google Chrome before 20.0.1132.43 does not properly display text, which has unspecified impact and remote attack vectors.
1Google
1Chrome
Apr 29, 2026
Jun 27, 2012
N/A· v4
N/A· v3
5.0 MEDIUM· v2
Google Chrome before 20.0.1132.43 does not properly implement SVG filters, which allows remote attackers to cause a denial of service (out-of-bounds read) via unspecified vectors.
1Google
1Chrome
Apr 29, 2026
Jun 27, 2012
N/A· v4
N/A· v3
6.8 MEDIUM· v2
The texSubImage2D implementation in the WebGL subsystem in Google Chrome before 20.0.1132.43 does not properly handle uploads to floating-point textures, which allows remote attackers to cause a denial of service (assert...Show more
The texSubImage2D implementation in the WebGL subsystem in Google Chrome before 20.0.1132.43 does not properly handle uploads to floating-point textures, which allows remote attackers to cause a denial of service (assertion failure and application crash) or possibly have unspecified other impact via a crafted web page, as demonstrated by certain WebGL performance tests, aka rdar problem 11520387.Show less
1Google
1Chrome
Apr 29, 2026
Jun 27, 2012
N/A· v4
N/A· v3
7.5 HIGH· v2
Use-after-free vulnerability in Google Chrome before 20.0.1132.43 allows remote attackers to cause a denial of service or possibly have unspecified other impact via vectors related to the layout of documents that use the...Show more
Use-after-free vulnerability in Google Chrome before 20.0.1132.43 allows remote attackers to cause a denial of service or possibly have unspecified other impact via vectors related to the layout of documents that use the Cascading Style Sheets (CSS) counters feature.Show less
1Google
1Chrome
Apr 29, 2026
Jun 27, 2012
N/A· v4
N/A· v3
7.5 HIGH· v2
Use-after-free vulnerability in Google Chrome before 20.0.1132.43 allows remote attackers to cause a denial of service or possibly have unspecified other impact via vectors related to tables that have sections.
1Google
1Chrome
Apr 29, 2026
Jun 27, 2012
N/A· v4
N/A· v3
7.8 HIGH· v2
Google Chrome before 20.0.1132.43 on Windows does not properly isolate sandboxed processes, which might allow remote attackers to cause a denial of service (process interference) via unspecified vectors.
1Google
1Chrome
Apr 29, 2026
Jun 27, 2012
N/A· v4
N/A· v3
5.0 MEDIUM· v2
Google Chrome before 20.0.1132.43 allows remote attackers to obtain potentially sensitive information from a fragment identifier by leveraging access to an IFRAME element associated with a different domain.
2Apple
Google
2Chrome
Iphone Os
Apr 29, 2026
Jun 27, 2012
N/A· v4
N/A· v3
6.8 MEDIUM· v2
Multiple integer overflows in libxml2, as used in Google Chrome before 20.0.1132.43 and other products, on 64-bit Linux platforms allow remote attackers to cause a denial of service or possibly have unspecified other imp...Show more
Multiple integer overflows in libxml2, as used in Google Chrome before 20.0.1132.43 and other products, on 64-bit Linux platforms allow remote attackers to cause a denial of service or possibly have unspecified other impact via unknown vectors.Show less
1Google
1Chrome
Apr 29, 2026
Jun 27, 2012
N/A· v4
N/A· v3
7.2 HIGH· v2
Untrusted search path vulnerability in Google Chrome before 20.0.1132.43 on Windows might allow local users to gain privileges via a Trojan horse Metro DLL in the current working directory.
1Google
1Chrome
Apr 29, 2026
May 24, 2012
N/A· v4
N/A· v3
7.5 HIGH· v2
Google V8, as used in Google Chrome before 19.0.1084.52, allows remote attackers to cause a denial of service or possibly have unspecified other impact via vectors that trigger "type corruption."
1Google
1Chrome
Apr 29, 2026
May 24, 2012
N/A· v4
N/A· v3
7.5 HIGH· v2
Multiple buffer overflows in the PDF functionality in Google Chrome before 19.0.1084.52 allow remote attackers to cause a denial of service or possibly have unspecified other impact via vectors that trigger unknown funct...Show more
Multiple buffer overflows in the PDF functionality in Google Chrome before 19.0.1084.52 allow remote attackers to cause a denial of service or possibly have unspecified other impact via vectors that trigger unknown function calls.Show less
1Google
1Chrome
Apr 29, 2026
May 24, 2012
N/A· v4
N/A· v3
7.5 HIGH· v2
The PDF functionality in Google Chrome before 19.0.1084.52 does not properly perform a cast of an unspecified variable during handling of color spaces, which allows remote attackers to cause a denial of service or possib...Show more
The PDF functionality in Google Chrome before 19.0.1084.52 does not properly perform a cast of an unspecified variable during handling of color spaces, which allows remote attackers to cause a denial of service or possibly have unknown other impact via a crafted document.Show less
1Google
1Chrome
Apr 29, 2026
May 24, 2012
N/A· v4
N/A· v3
5.0 MEDIUM· v2
Use-after-free vulnerability in the PDF functionality in Google Chrome before 19.0.1084.52 allows remote attackers to cause a denial of service or possibly have unspecified other impact via an invalid encrypted document.
1Google
1Chrome
Apr 29, 2026
May 24, 2012
N/A· v4
N/A· v3
5.0 MEDIUM· v2
Google V8, as used in Google Chrome before 19.0.1084.52, allows remote attackers to cause a denial of service (invalid read operation) via unspecified vectors.
1Google
1Chrome
Apr 29, 2026
May 24, 2012
N/A· v4
N/A· v3
7.5 HIGH· v2
The PDF functionality in Google Chrome before 19.0.1084.52 allows remote attackers to cause a denial of service or possibly have unspecified other impact via vectors that trigger out-of-bounds write operations.
1Google
1Chrome
Apr 29, 2026
May 24, 2012
N/A· v4
N/A· v3
7.5 HIGH· v2
Google Chrome before 19.0.1084.52 on Linux does not properly perform a cast of an unspecified variable, which allows remote attackers to cause a denial of service or possibly have unknown other impact by leveraging an er...Show more
Google Chrome before 19.0.1084.52 on Linux does not properly perform a cast of an unspecified variable, which allows remote attackers to cause a denial of service or possibly have unknown other impact by leveraging an error in the GTK implementation of the UI.Show less
1Google
1Chrome
Apr 29, 2026
May 24, 2012
N/A· v4
N/A· v3
10.0 HIGH· v2
Use-after-free vulnerability in Google Chrome before 19.0.1084.52 allows remote attackers to execute arbitrary code via vectors related to the browser cache.