← Back

Chrome

chrome

Vendor: Google • 6,253 CVEs

CVEs (6,253)

CVE
VENDORS
PRODUCTS
UPDATED
PUBLISHED
CVSS
CVE-2012-5124
1Google
1Chrome
Apr 29, 2026
Nov 7, 2012
N/A· v4
N/A· v3
7.5 HIGH· v2
Google Chrome before 23.0.1271.64 does not properly handle textures, which allows remote attackers to cause a denial of service (memory corruption) or possibly have unspecified other impact via unknown vectors.
CVE-2012-5123
1Google
1Chrome
Apr 29, 2026
Nov 7, 2012
N/A· v4
N/A· v3
5.0 MEDIUM· v2
Skia, as used in Google Chrome before 23.0.1271.64, allows remote attackers to cause a denial of service (out-of-bounds read) via unspecified vectors.
CVE-2012-5122
1Google
1Chrome
Apr 29, 2026
Nov 7, 2012
N/A· v4
N/A· v3
7.5 HIGH· v2
Google Chrome before 23.0.1271.64 does not properly perform a cast of an unspecified variable during handling of input, which allows remote attackers to cause a denial of service or possibly have other impact via unknown...Show more
Google Chrome before 23.0.1271.64 does not properly perform a cast of an unspecified variable during handling of input, which allows remote attackers to cause a denial of service or possibly have other impact via unknown vectors.Show less
CVE-2012-5121
1Google
1Chrome
Apr 29, 2026
Nov 7, 2012
N/A· v4
N/A· v3
7.5 HIGH· v2
Use-after-free vulnerability in Google Chrome before 23.0.1271.64 allows remote attackers to cause a denial of service or possibly have unspecified other impact via vectors related to video layout.
CVE-2012-5120
1Google
2Chrome
V8
Apr 29, 2026
Nov 7, 2012
N/A· v4
N/A· v3
7.5 HIGH· v2
Google V8 before 3.13.7.5, as used in Google Chrome before 23.0.1271.64, on 64-bit Linux platforms allows remote attackers to cause a denial of service or possibly have unspecified other impact via crafted JavaScript cod...Show more
Google V8 before 3.13.7.5, as used in Google Chrome before 23.0.1271.64, on 64-bit Linux platforms allows remote attackers to cause a denial of service or possibly have unspecified other impact via crafted JavaScript code that triggers an out-of-bounds access to an array.Show less
CVE-2012-5119
1Google
1Chrome
Apr 29, 2026
Nov 7, 2012
N/A· v4
N/A· v3
6.8 MEDIUM· v2
Race condition in Pepper, as used in Google Chrome before 23.0.1271.64, allows remote attackers to cause a denial of service or possibly have unspecified other impact via vectors related to buffers.
CVE-2012-5118
1Google
1Chrome
Apr 29, 2026
Nov 7, 2012
N/A· v4
N/A· v3
7.5 HIGH· v2
Google Chrome before 23.0.1271.64 on Mac OS X does not properly validate an integer value during the handling of GPU command buffers, which allows remote attackers to cause a denial of service or possibly have unspecifie...Show more
Google Chrome before 23.0.1271.64 on Mac OS X does not properly validate an integer value during the handling of GPU command buffers, which allows remote attackers to cause a denial of service or possibly have unspecified other impact via unknown vectors.Show less
CVE-2012-5117
1Google
1Chrome
Apr 29, 2026
Nov 7, 2012
N/A· v4
N/A· v3
7.5 HIGH· v2
Google Chrome before 23.0.1271.64 does not properly restrict the loading of an SVG subresource in the context of an IMG element, which has unspecified impact and remote attack vectors.
CVE-2012-5116
1Google
1Chrome
Apr 29, 2026
Nov 7, 2012
N/A· v4
N/A· v3
7.5 HIGH· v2
Use-after-free vulnerability in Google Chrome before 23.0.1271.64 allows remote attackers to cause a denial of service or possibly have unspecified other impact via vectors related to the handling of SVG filters.
CVE-2012-5115
1Google
1Chrome
Apr 29, 2026
Nov 7, 2012
N/A· v4
N/A· v3
7.5 HIGH· v2
Google Chrome before 23.0.1271.64 on Mac OS X does not properly mitigate improper write behavior in graphics drivers, which allows remote attackers to cause a denial of service or possibly have unspecified other impact v...Show more
Google Chrome before 23.0.1271.64 on Mac OS X does not properly mitigate improper write behavior in graphics drivers, which allows remote attackers to cause a denial of service or possibly have unspecified other impact via unknown vectors that trigger "wild writes."Show less
CVE-2012-5376
1Google
1Chrome
Apr 29, 2026
Oct 11, 2012
N/A· v4
9.6 CRITICAL· v3
9.3 HIGH· v2
The Inter-process Communication (IPC) implementation in Google Chrome before 22.0.1229.94 allows remote attackers to bypass intended sandbox restrictions and write to arbitrary files by leveraging access to a renderer pr...Show more
The Inter-process Communication (IPC) implementation in Google Chrome before 22.0.1229.94 allows remote attackers to bypass intended sandbox restrictions and write to arbitrary files by leveraging access to a renderer process, a different vulnerability than CVE-2012-5112.Show less
CVE-2012-5112
2Apple
Google
2Chrome
Iphone Os
Apr 29, 2026
Oct 11, 2012
N/A· v4
N/A· v3
10.0 HIGH· v2
Use-after-free vulnerability in the SVG implementation in WebKit, as used in Google Chrome before 22.0.1229.94, allows remote attackers to execute arbitrary code via unspecified vectors.
CVE-2012-5111
1Google
1Chrome
Apr 29, 2026
Oct 9, 2012
N/A· v4
N/A· v3
7.5 HIGH· v2
Google Chrome before 22.0.1229.92 does not monitor for crashes of Pepper plug-ins, which has unspecified impact and remote attack vectors.
CVE-2012-5110
1Google
1Chrome
Apr 29, 2026
Oct 9, 2012
N/A· v4
N/A· v3
5.0 MEDIUM· v2
The compositor in Google Chrome before 22.0.1229.92 allows remote attackers to cause a denial of service (out-of-bounds read) via unspecified vectors.
CVE-2012-5109
1Google
1Chrome
Apr 29, 2026
Oct 9, 2012
N/A· v4
N/A· v3
5.0 MEDIUM· v2
The International Components for Unicode (ICU) functionality in Google Chrome before 22.0.1229.92 allows remote attackers to cause a denial of service (out-of-bounds read) via vectors related to a regular expression.
CVE-2012-5108
1Google
1Chrome
Apr 29, 2026
Oct 9, 2012
N/A· v4
N/A· v3
9.3 HIGH· v2
Race condition in Google Chrome before 22.0.1229.92 allows remote attackers to execute arbitrary code via vectors related to audio devices.
CVE-2012-2900
1Google
1Chrome
Apr 29, 2026
Oct 9, 2012
N/A· v4
N/A· v3
7.5 HIGH· v2
Skia, as used in Google Chrome before 22.0.1229.92, does not properly render text, which allows remote attackers to cause a denial of service (application crash) or possibly have unspecified other impact via unknown vect...Show more
Skia, as used in Google Chrome before 22.0.1229.92, does not properly render text, which allows remote attackers to cause a denial of service (application crash) or possibly have unspecified other impact via unknown vectors.Show less
CVE-2012-2897
2Google
Microsoft
9Chrome
Windows 7Windows 8+6 more
Apr 29, 2026
Sep 26, 2012
N/A· v4
7.8 HIGH· v3
10.0 HIGH· v2
The kernel-mode drivers in Microsoft Windows XP SP2 and SP3, Windows Server 2003 SP2, Windows Vista SP2, Windows Server 2008 SP2, R2, and R2 SP1, Windows 7 Gold and SP1, Windows 8, Windows Server 2012, and Windows RT, as...Show more
The kernel-mode drivers in Microsoft Windows XP SP2 and SP3, Windows Server 2003 SP2, Windows Vista SP2, Windows Server 2008 SP2, R2, and R2 SP1, Windows 7 Gold and SP1, Windows 8, Windows Server 2012, and Windows RT, as used by Google Chrome before 22.0.1229.79 and other programs, do not properly handle objects in memory, which allows remote attackers to execute arbitrary code via a crafted TrueType font file, aka "Windows Font Parsing Vulnerability" or "TrueType Font Parsing Vulnerability."Show less
CVE-2012-2896
1Google
1Chrome
Apr 29, 2026
Sep 26, 2012
N/A· v4
N/A· v3
7.5 HIGH· v2
Integer overflow in the WebGL implementation in Google Chrome before 22.0.1229.79 on Mac OS X allows remote attackers to cause a denial of service or possibly have unspecified other impact via unknown vectors.
CVE-2012-2895
1Google
1Chrome
Apr 29, 2026
Sep 26, 2012
N/A· v4
N/A· v3
6.8 MEDIUM· v2
The PDF functionality in Google Chrome before 22.0.1229.79 allows remote attackers to cause a denial of service or possibly have unspecified other impact via vectors that trigger out-of-bounds write operations.