← Back

Chrome

chrome

Vendor: Google • 5,445 CVEs

CVEs (5,445)

CVE
VENDORS
PRODUCTS
UPDATED
PUBLISHED
CVSS
1Google
1Chrome
Apr 29, 2026
Aug 24, 2010
N/A· v4
N/A· v3
10.0 HIGH· v2
Google Chrome before 5.0.375.127 does not properly implement the notifications feature, which allows remote attackers to cause a denial of service (application crash) and possibly have unspecified other impact via unknow...Show more
Google Chrome before 5.0.375.127 does not properly implement the notifications feature, which allows remote attackers to cause a denial of service (application crash) and possibly have unspecified other impact via unknown vectors.Show less
4Apple
CanonicalGoogle+1 more
5Chrome
Iphone OsSafari+2 more
Apr 29, 2026
Aug 24, 2010
N/A· v4
N/A· v3
10.0 HIGH· v2
Multiple use-after-free vulnerabilities in WebKit, as used in Apple Safari before 4.1.3 and 5.0.x before 5.0.3, Google Chrome before 5.0.375.127, and webkitgtk before 1.2.6, allow remote attackers to execute arbitrary co...Show more
Multiple use-after-free vulnerabilities in WebKit, as used in Apple Safari before 4.1.3 and 5.0.x before 5.0.3, Google Chrome before 5.0.375.127, and webkitgtk before 1.2.6, allow remote attackers to execute arbitrary code or cause a denial of service (application crash) via vectors related to improper handling of MIME types by plug-ins.Show less
3Canonical
GoogleWebkitgtk
3Chrome
Ubuntu LinuxWebkitgtk
Apr 29, 2026
Aug 24, 2010
N/A· v4
N/A· v3
5.0 MEDIUM· v2
Google Chrome before 5.0.375.127, and webkitgtk before 1.2.6, does not properly implement the history feature, which might allow remote attackers to spoof the address bar via unspecified vectors.
3Canonical
GoogleWebkitgtk
3Chrome
Ubuntu LinuxWebkitgtk
Apr 29, 2026
Aug 24, 2010
N/A· v4
N/A· v3
10.0 HIGH· v2
The text-editing implementation in Google Chrome before 5.0.375.127, and webkitgtk before 1.2.6, does not check a node type before performing a cast, which has unspecified impact and attack vectors related to (1) DeleteS...Show more
The text-editing implementation in Google Chrome before 5.0.375.127, and webkitgtk before 1.2.6, does not check a node type before performing a cast, which has unspecified impact and attack vectors related to (1) DeleteSelectionCommand.cpp, (2) InsertLineBreakCommand.cpp, or (3) InsertParagraphSeparatorCommand.cpp in WebCore/editing/.Show less
3Canonical
GoogleWebkitgtk
3Chrome
Ubuntu LinuxWebkitgtk
Apr 29, 2026
Aug 24, 2010
N/A· v4
N/A· v3
10.0 HIGH· v2
Google Chrome before 5.0.375.127, and webkitgtk before 1.2.5, does not properly handle SVG documents, which allows remote attackers to cause a denial of service (memory corruption) or possibly have unspecified other impa...Show more
Google Chrome before 5.0.375.127, and webkitgtk before 1.2.5, does not properly handle SVG documents, which allows remote attackers to cause a denial of service (memory corruption) or possibly have unspecified other impact via unknown vectors related to state changes when using DeleteButtonController.Show less
1Google
1Chrome
Apr 29, 2026
Aug 24, 2010
N/A· v4
N/A· v3
10.0 HIGH· v2
Google Chrome before 5.0.375.127 does not properly implement file dialogs, which allows attackers to cause a denial of service (memory corruption) or possibly have unspecified other impact via unknown vectors.
1Google
1Chrome
Apr 29, 2026
Aug 24, 2010
N/A· v4
N/A· v3
10.0 HIGH· v2
Google Chrome before 6.0.472.53 does not properly mitigate an unspecified flaw in the Windows kernel, which has unknown impact and attack vectors, a different vulnerability than CVE-2010-2897.
1Google
1Chrome
Apr 29, 2026
Jul 28, 2010
N/A· v4
N/A· v3
7.5 HIGH· v2
Google Chrome before 5.0.375.125 performs unexpected truncation and improper eliding of hostnames, which has unspecified impact and remote attack vectors.
1Google
1Chrome
Apr 29, 2026
Jul 28, 2010
N/A· v4
N/A· v3
10.0 HIGH· v2
The SVG implementation in Google Chrome before 5.0.375.125 allows remote attackers to cause a denial of service (memory corruption) or possibly have unspecified other impact via unknown vectors.
2Debian
Google
2Chrome
Debian Linux
Apr 29, 2026
Jul 28, 2010
N/A· v4
N/A· v3
10.0 HIGH· v2
The rendering implementation in Google Chrome before 5.0.375.125 allows remote attackers to cause a denial of service (memory corruption) or possibly have unspecified other impact via unknown vectors.
1Google
1Chrome
Apr 29, 2026
Jul 28, 2010
N/A· v4
N/A· v3
10.0 HIGH· v2
Google Chrome before 5.0.375.125 does not properly handle a large canvas, which has unspecified impact and remote attack vectors.
1Google
1Chrome
Apr 29, 2026
Jul 28, 2010
N/A· v4
N/A· v3
5.0 MEDIUM· v2
Unspecified vulnerability in the layout implementation in Google Chrome before 5.0.375.125 allows remote attackers to obtain sensitive information from process memory via unknown vectors.
1Google
1Chrome
Apr 29, 2026
Jul 28, 2010
N/A· v4
N/A· v3
10.0 HIGH· v2
Google Chrome before 5.0.375.125 does not properly mitigate an unspecified flaw in the GNU C Library, which has unknown impact and attack vectors.
1Google
1Chrome
Apr 29, 2026
Jul 28, 2010
N/A· v4
N/A· v3
10.0 HIGH· v2
Google Chrome before 5.0.375.125 does not properly mitigate an unspecified flaw in the Windows kernel, which has unknown impact and attack vectors.
1Google
1Chrome
Apr 29, 2026
Jul 6, 2010
N/A· v4
N/A· v3
5.0 MEDIUM· v2
Google Chrome before 5.0.375.99 does not properly implement modal dialogs, which allows attackers to cause a denial of service (application crash) via unspecified vectors.
1Google
1Chrome
Apr 29, 2026
Jul 6, 2010
N/A· v4
N/A· v3
9.3 HIGH· v2
The Cascading Style Sheets (CSS) implementation in Google Chrome before 5.0.375.99 does not properly perform style rendering, which allows remote attackers to cause a denial of service (memory corruption) or possibly hav...Show more
The Cascading Style Sheets (CSS) implementation in Google Chrome before 5.0.375.99 does not properly perform style rendering, which allows remote attackers to cause a denial of service (memory corruption) or possibly have unspecified other impact via unknown vectors.Show less
1Google
1Chrome
Apr 29, 2026
Jul 6, 2010
N/A· v4
N/A· v3
9.3 HIGH· v2
Unspecified vulnerability in Google Chrome before 5.0.375.99 has unknown impact and attack vectors, related to an "annoyance with print dialogs."
1Google
1Chrome
Apr 29, 2026
Jul 6, 2010
N/A· v4
N/A· v3
4.3 MEDIUM· v2
Unspecified vulnerability in Google Chrome before 5.0.375.99 allows remote attackers to cause a denial of service (application crash) via an invalid image.
3Canonical
GoogleOpensuse
3Chrome
OpensuseUbuntu Linux
Apr 29, 2026
Jul 6, 2010
N/A· v4
N/A· v3
9.3 HIGH· v2
The implementation of the Unicode Bidirectional Algorithm (aka Bidi algorithm or UBA) in Google Chrome before 5.0.375.99 allows remote attackers to cause a denial of service (memory corruption) or possibly have unspecifi...Show more
The implementation of the Unicode Bidirectional Algorithm (aka Bidi algorithm or UBA) in Google Chrome before 5.0.375.99 allows remote attackers to cause a denial of service (memory corruption) or possibly have unspecified other impact via unknown vectors.Show less
2Canonical
Google
2Chrome
Ubuntu Linux
Apr 29, 2026
Jul 6, 2010
N/A· v4
N/A· v3
9.3 HIGH· v2
Google Chrome before 5.0.375.99 allows remote attackers to cause a denial of service (memory corruption) or possibly have unspecified other impact via an invalid SVG document.