← Back

Chrome

chrome

Vendor: Google • 6,253 CVEs

CVEs (6,253)

CVE
VENDORS
PRODUCTS
UPDATED
PUBLISHED
CVSS
1Google
1Chrome
Apr 29, 2026
Mar 11, 2011
N/A· v4
N/A· v3
7.5 HIGH· v2
Use-after-free vulnerability in Google Chrome before 10.0.648.127 allows remote attackers to cause a denial of service or possibly have unspecified other impact via vectors related to the handling of DOM URLs.
2Apple
Google
3Chrome
Iphone OsSafari
Apr 29, 2026
Mar 11, 2011
N/A· v4
N/A· v3
5.0 MEDIUM· v2
The Web Workers implementation in Google Chrome before 10.0.648.127 allows remote attackers to bypass the Same Origin Policy via unspecified vectors, related to an "error message leak."
1Google
1Chrome
Apr 29, 2026
Mar 11, 2011
N/A· v4
N/A· v3
7.5 HIGH· v2
Google Chrome before 10.0.648.127 does not properly perform box layout, which allows remote attackers to cause a denial of service or possibly have unspecified other impact via unknown vectors that lead to a "stale node....Show more
Google Chrome before 10.0.648.127 does not properly perform box layout, which allows remote attackers to cause a denial of service or possibly have unspecified other impact via unknown vectors that lead to a "stale node."Show less
2Apple
Google
4Chrome
Iphone OsItunes+1 more
Apr 29, 2026
Mar 11, 2011
N/A· v4
N/A· v3
7.5 HIGH· v2
Google Chrome before 10.0.648.127 does not properly handle counter nodes, which allows remote attackers to cause a denial of service (memory corruption) or possibly have unspecified other impact via unknown vectors.
2Google
Mozilla
4Chrome
FirefoxSeamonkey+1 more
Apr 29, 2026
Mar 11, 2011
N/A· v4
N/A· v3
5.0 MEDIUM· v2
Google Chrome before 10.0.648.127 allows remote attackers to bypass the Same Origin Policy via unspecified vectors, related to an "error message leak."
1Google
1Chrome
Apr 29, 2026
Mar 11, 2011
N/A· v4
N/A· v3
5.0 MEDIUM· v2
Google Chrome before 10.0.648.127 on Linux does not properly handle parallel execution of calls to the print method, which might allow remote attackers to cause a denial of service (application crash) via crafted JavaScr...Show more
Google Chrome before 10.0.648.127 on Linux does not properly handle parallel execution of calls to the print method, which might allow remote attackers to cause a denial of service (application crash) via crafted JavaScript code.Show less
1Google
1Chrome
Apr 29, 2026
Mar 11, 2011
N/A· v4
N/A· v3
7.5 HIGH· v2
Google Chrome before 10.0.648.127 does not prevent (1) navigation and (2) close operations on the top location of a sandboxed frame, which has unspecified impact and remote attack vectors.
1Google
1Chrome
Apr 29, 2026
Mar 1, 2011
N/A· v4
N/A· v3
7.5 HIGH· v2
Google Chrome before 9.0.597.107 does not properly perform layout, which allows remote attackers to cause a denial of service or possibly have unspecified other impact via unknown vectors that lead to a "stale pointer."
1Google
1Chrome
Apr 29, 2026
Mar 1, 2011
N/A· v4
N/A· v3
7.5 HIGH· v2
Use-after-free vulnerability in Google Chrome before 9.0.597.107 allows remote attackers to cause a denial of service or possibly have unspecified other impact via vectors related to blocked plug-ins.
1Google
1Chrome
Apr 29, 2026
Mar 1, 2011
N/A· v4
N/A· v3
7.5 HIGH· v2
Google Chrome before 9.0.597.107 does not properly restrict access to internal extension functions, which has unspecified impact and remote attack vectors.
1Google
1Chrome
Apr 29, 2026
Mar 1, 2011
N/A· v4
N/A· v3
5.0 MEDIUM· v2
The WebGL implementation in Google Chrome before 9.0.597.107 allows remote attackers to cause a denial of service (out-of-bounds read) via unspecified vectors, aka Issue 71960.
2Apple
Google
4Chrome
Iphone OsItunes+1 more
Apr 29, 2026
Mar 1, 2011
N/A· v4
N/A· v3
7.5 HIGH· v2
Integer overflow in Google Chrome before 9.0.597.107 allows remote attackers to cause a denial of service or possibly have unspecified other impact via vectors involving a TEXTAREA element.
1Google
1Chrome
Apr 29, 2026
Mar 1, 2011
N/A· v4
N/A· v3
5.0 MEDIUM· v2
The WebGL implementation in Google Chrome before 9.0.597.107 allows remote attackers to cause a denial of service (out-of-bounds read) via unspecified vectors, aka Issue 71717.
1Google
1Chrome
Apr 29, 2026
Mar 1, 2011
N/A· v4
N/A· v3
7.5 HIGH· v2
Google Chrome before 9.0.597.107 does not properly determine device orientation, which allows remote attackers to cause a denial of service or possibly have unspecified other impact via unknown vectors that lead to a "st...Show more
Google Chrome before 9.0.597.107 does not properly determine device orientation, which allows remote attackers to cause a denial of service or possibly have unspecified other impact via unknown vectors that lead to a "stale pointer."Show less
1Google
1Chrome
Apr 29, 2026
Mar 1, 2011
N/A· v4
N/A· v3
6.8 MEDIUM· v2
Google Chrome before 9.0.597.107 does not properly handle TEXTAREA elements, which allows remote attackers to cause a denial of service (application crash) or possibly have unspecified other impact via a crafted HTML doc...Show more
Google Chrome before 9.0.597.107 does not properly handle TEXTAREA elements, which allows remote attackers to cause a denial of service (application crash) or possibly have unspecified other impact via a crafted HTML document.Show less
2Apple
Google
4Chrome
Iphone OsItunes+1 more
Apr 29, 2026
Mar 1, 2011
N/A· v4
N/A· v3
7.5 HIGH· v2
Google Chrome before 9.0.597.107 does not properly handle XHTML documents, which allows remote attackers to cause a denial of service or possibly have unspecified other impact via unknown vectors that lead to "stale node...Show more
Google Chrome before 9.0.597.107 does not properly handle XHTML documents, which allows remote attackers to cause a denial of service or possibly have unspecified other impact via unknown vectors that lead to "stale nodes."Show less
1Google
1Chrome
Apr 29, 2026
Mar 1, 2011
N/A· v4
N/A· v3
7.5 HIGH· v2
Google Chrome before 9.0.597.107 does not properly handle SVG animations, which allows remote attackers to cause a denial of service or possibly have unspecified other impact via unknown vectors that lead to a "stale poi...Show more
Google Chrome before 9.0.597.107 does not properly handle SVG animations, which allows remote attackers to cause a denial of service or possibly have unspecified other impact via unknown vectors that lead to a "stale pointer."Show less
2Apple
Google
4Chrome
Iphone OsItunes+1 more
Apr 29, 2026
Mar 1, 2011
N/A· v4
N/A· v3
7.5 HIGH· v2
Google Chrome before 9.0.597.107 does not properly render tables, which allows remote attackers to cause a denial of service or possibly have unspecified other impact via unknown vectors that lead to a "stale pointer."
2Apple
Google
4Chrome
Iphone OsItunes+1 more
Apr 29, 2026
Mar 1, 2011
N/A· v4
N/A· v3
7.5 HIGH· v2
Google Chrome before 9.0.597.107 does not properly handle tables, which allows remote attackers to cause a denial of service or possibly have unspecified other impact via unknown vectors that lead to a "stale node."
1Google
1Chrome
Apr 29, 2026
Mar 1, 2011
N/A· v4
N/A· v3
5.0 MEDIUM· v2
Google Chrome before 9.0.597.107 on 64-bit Linux platforms does not properly perform pickle deserialization, which allows remote attackers to cause a denial of service (out-of-bounds read) via unspecified vectors.