← Back

Chrome

chrome

Vendor: Google • 6,253 CVEs

CVEs (6,253)

CVE
VENDORS
PRODUCTS
UPDATED
PUBLISHED
CVSS
1Google
1Chrome
Apr 29, 2026
Apr 5, 2012
N/A· v4
N/A· v3
6.8 MEDIUM· v2
Use-after-free vulnerability in Google Chrome before 18.0.1025.151 allows remote attackers to cause a denial of service or possibly have unspecified other impact via vectors involving the script bindings, related to a "r...Show more
Use-after-free vulnerability in Google Chrome before 18.0.1025.151 allows remote attackers to cause a denial of service or possibly have unspecified other impact via vectors involving the script bindings, related to a "read-after-free" issue.Show less
2Apple
Google
4Chrome
Iphone OsItunes+1 more
Apr 29, 2026
Apr 5, 2012
N/A· v4
N/A· v3
6.8 MEDIUM· v2
Use-after-free vulnerability in Google Chrome before 18.0.1025.151 allows remote attackers to cause a denial of service or possibly have unspecified other impact via vectors related to focus handling.
2Apple
Google
4Chrome
Iphone OsItunes+1 more
Apr 29, 2026
Apr 5, 2012
N/A· v4
N/A· v3
6.8 MEDIUM· v2
Use-after-free vulnerability in Google Chrome before 18.0.1025.151 allows remote attackers to cause a denial of service or possibly have unspecified other impact via vectors related to style-application commands.
2Apple
Google
4Chrome
Iphone OsItunes+1 more
Apr 29, 2026
Apr 5, 2012
N/A· v4
N/A· v3
6.8 MEDIUM· v2
Use-after-free vulnerability in Google Chrome before 18.0.1025.151 allows remote attackers to cause a denial of service or possibly have unspecified other impact via vectors related to the handling of media.
2Apple
Google
4Chrome
Iphone OsItunes+1 more
Apr 29, 2026
Apr 5, 2012
N/A· v4
N/A· v3
6.8 MEDIUM· v2
Use-after-free vulnerability in Google Chrome before 18.0.1025.151 allows remote attackers to cause a denial of service or possibly have unspecified other impact via vectors related to the handling of SVG resources.
1Google
1Chrome
Apr 29, 2026
Apr 5, 2012
N/A· v4
N/A· v3
6.8 MEDIUM· v2
Google Chrome before 18.0.1025.151 allows remote attackers to bypass the Same Origin Policy via vectors related to pop-up windows.
2Apple
Google
4Chrome
Iphone OsItunes+1 more
Apr 29, 2026
Apr 5, 2012
N/A· v4
N/A· v3
6.8 MEDIUM· v2
Use-after-free vulnerability in the HTMLMediaElement implementation in Google Chrome before 18.0.1025.151 allows remote attackers to cause a denial of service or possibly have unspecified other impact via unknown vectors...Show more
Use-after-free vulnerability in the HTMLMediaElement implementation in Google Chrome before 18.0.1025.151 allows remote attackers to cause a denial of service or possibly have unspecified other impact via unknown vectors.Show less
1Google
1Chrome
Apr 29, 2026
Apr 5, 2012
N/A· v4
N/A· v3
6.8 MEDIUM· v2
Use-after-free vulnerability in Google Chrome before 18.0.1025.151 allows remote attackers to cause a denial of service or possibly have unspecified other impact via vectors related to the Google V8 bindings.
2Apple
Google
4Chrome
Iphone OsItunes+1 more
Apr 29, 2026
Apr 5, 2012
N/A· v4
N/A· v3
6.8 MEDIUM· v2
Use-after-free vulnerability in the Cascading Style Sheets (CSS) implementation in Google Chrome before 18.0.1025.151 allows remote attackers to cause a denial of service or possibly have unspecified other impact via vec...Show more
Use-after-free vulnerability in the Cascading Style Sheets (CSS) implementation in Google Chrome before 18.0.1025.151 allows remote attackers to cause a denial of service or possibly have unspecified other impact via vectors related to line boxes.Show less
2Apple
Google
4Chrome
Iphone OsItunes+1 more
Apr 29, 2026
Apr 5, 2012
N/A· v4
N/A· v3
6.8 MEDIUM· v2
Use-after-free vulnerability in the Cascading Style Sheets (CSS) implementation in Google Chrome before 18.0.1025.151 allows remote attackers to cause a denial of service or possibly have unspecified other impact via vec...Show more
Use-after-free vulnerability in the Cascading Style Sheets (CSS) implementation in Google Chrome before 18.0.1025.151 allows remote attackers to cause a denial of service or possibly have unspecified other impact via vectors related to run-in boxes.Show less
2Apple
Google
3Chrome
Iphone OsSafari
Apr 29, 2026
Apr 5, 2012
N/A· v4
N/A· v3
6.8 MEDIUM· v2
Google Chrome before 18.0.1025.151 allows remote attackers to bypass the Same Origin Policy via vectors related to replacement of IFRAME elements.
1Google
1Chrome
Apr 29, 2026
Apr 5, 2012
N/A· v4
N/A· v3
6.8 MEDIUM· v2
Skia, as used in Google Chrome before 18.0.1025.151, does not properly perform clipping, which allows remote attackers to cause a denial of service (out-of-bounds read) via unspecified vectors.
1Google
1Chrome
Apr 29, 2026
Mar 30, 2012
N/A· v4
N/A· v3
6.8 MEDIUM· v2
Skia, as used in Google Chrome before 18.0.1025.142, allows remote attackers to cause a denial of service (memory corruption) or possibly have unspecified other impact via unknown vectors.
2Apple
Google
4Chrome
Iphone OsItunes+1 more
Apr 29, 2026
Mar 30, 2012
N/A· v4
N/A· v3
7.5 HIGH· v2
Use-after-free vulnerability in Google Chrome before 18.0.1025.142 allows remote attackers to cause a denial of service or possibly have unspecified other impact via vectors related to SVG clipping.
1Google
1Chrome
Apr 29, 2026
Mar 30, 2012
N/A· v4
N/A· v3
4.3 MEDIUM· v2
Google Chrome before 18.0.1025.142 does not properly validate the renderer's navigation requests, which has unspecified impact and remote attack vectors.
2Google
Mozilla
5Chrome
FirefoxSeamonkey+2 more
Apr 29, 2026
Mar 30, 2012
N/A· v4
N/A· v3
6.8 MEDIUM· v2
Off-by-one error in the OpenType Sanitizer in Google Chrome before 18.0.1025.142 allows remote attackers to cause a denial of service or possibly have unspecified other impact via a crafted OpenType file.
1Google
1Chrome
Apr 29, 2026
Mar 30, 2012
N/A· v4
N/A· v3
5.8 MEDIUM· v2
Google Chrome before 18.0.1025.142 does not properly check X.509 certificates before use of a SPDY proxy, which might allow man-in-the-middle attackers to spoof servers or obtain sensitive information via a crafted certi...Show more
Google Chrome before 18.0.1025.142 does not properly check X.509 certificates before use of a SPDY proxy, which might allow man-in-the-middle attackers to spoof servers or obtain sensitive information via a crafted certificate.Show less
2Apple
Google
4Chrome
Iphone OsItunes+1 more
Apr 29, 2026
Mar 30, 2012
N/A· v4
N/A· v3
6.8 MEDIUM· v2
Google Chrome before 18.0.1025.142 does not properly handle text fragments, which allows remote attackers to cause a denial of service (out-of-bounds read) via unspecified vectors.
2Apple
Google
4Chrome
Iphone OsItunes+1 more
Apr 29, 2026
Mar 30, 2012
N/A· v4
N/A· v3
6.8 MEDIUM· v2
Google Chrome before 18.0.1025.142 does not properly handle SVG text elements, which allows remote attackers to cause a denial of service (out-of-bounds read) via unspecified vectors.
2Apple
Google
3Chrome
Iphone OsMac Os X
Apr 29, 2026
Mar 30, 2012
N/A· v4
N/A· v3
4.3 MEDIUM· v2
Google Chrome before 18.0.1025.142 does not properly handle the EUC-JP encoding system, which might allow remote attackers to conduct cross-site scripting (XSS) attacks via unspecified vectors.