Google Chrome vulnerabilities
5,831 known vulnerabilities affecting google/chrome.
Total CVEs
5,831
CISA KEV
75
actively exploited
Public exploits
88
Exploited in wild
87
Severity breakdown
CRITICAL498HIGH2799MEDIUM2453LOW79UNKNOWN2
Vulnerabilities
Page 197 of 292
CVE-2013-6667P4HIGHCVSS 7.5≤ 33.0.1750.144v33.0.1750.0+104 more2014-03-05
CVE-2013-6667 [HIGH] CVE-2013-6667: Multiple unspecified vulnerabilities in Google Chrome before 33.0.1750.146 allow attackers to cause
Multiple unspecified vulnerabilities in Google Chrome before 33.0.1750.146 allow attackers to cause a denial of service or possibly have other impact via unknown vectors.
nvd
CVE-2013-2923P4HIGHCVSS 7.5≤ 30.0.1599.65v30.0.1599.0+57 more2013-10-02
CVE-2013-2923 [HIGH] CVE-2013-2923: Multiple unspecified vulnerabilities in Google Chrome before 30.0.1599.66 allow attackers to cause a
Multiple unspecified vulnerabilities in Google Chrome before 30.0.1599.66 allow attackers to cause a denial of service or possibly have other impact via unknown vectors.
nvd
CVE-2013-2928P4HIGHCVSS 7.5≤ 30.0.1599.100v30.0.1599.0+72 more2013-10-16
CVE-2013-2928 [HIGH] CVE-2013-2928: Multiple unspecified vulnerabilities in Google Chrome before 30.0.1599.101 allow attackers to cause
Multiple unspecified vulnerabilities in Google Chrome before 30.0.1599.101 allow attackers to cause a denial of service or possibly have other impact via unknown vectors.
nvd
CVE-2012-5128P4HIGHCVSS 7.5≤ 23.0.1271.62v23.0.1271.0+52 more2012-11-07
CVE-2012-5128 [HIGH] CWE-119 CVE-2012-5128: Google V8 before 3.13.7.5, as used in Google Chrome before 23.0.1271.64, does not properly perform w
Google V8 before 3.13.7.5, as used in Google Chrome before 23.0.1271.64, does not properly perform write operations, which allows remote attackers to cause a denial of service or possibly have unspecified other impact via unknown vectors.
nvd
CVE-2015-1231P4HIGHCVSS 7.5≤ 40.0.2214.1152015-03-09
CVE-2015-1231 [HIGH] CVE-2015-1231: Multiple unspecified vulnerabilities in Google Chrome before 41.0.2272.76 allow attackers to cause a
Multiple unspecified vulnerabilities in Google Chrome before 41.0.2272.76 allow attackers to cause a denial of service or possibly have other impact via unknown vectors.
nvd
CVE-2014-1728P4HIGHCVSS 7.5≤ 34.0.1847.1152014-04-09
CVE-2014-1728 [HIGH] CVE-2014-1728: Multiple unspecified vulnerabilities in Google Chrome before 34.0.1847.116 allow attackers to cause
Multiple unspecified vulnerabilities in Google Chrome before 34.0.1847.116 allow attackers to cause a denial of service or possibly have other impact via unknown vectors.
nvd
CVE-2010-2898P4CRITICALCVSS 10.0fixed in 5.0.375.1252010-07-28
CVE-2010-2898 [CRITICAL] CVE-2010-2898: Google Chrome before 5.0.375.125 does not properly mitigate an unspecified flaw in the GNU C Library
Google Chrome before 5.0.375.125 does not properly mitigate an unspecified flaw in the GNU C Library, which has unknown impact and attack vectors.
nvd
CVE-2010-2900P4CRITICALCVSS 10.0fixed in 5.0.375.1252010-07-28
CVE-2010-2900 [CRITICAL] CVE-2010-2900: Google Chrome before 5.0.375.125 does not properly handle a large canvas, which has unspecified impa
Google Chrome before 5.0.375.125 does not properly handle a large canvas, which has unspecified impact and remote attack vectors.
nvd
CVE-2014-3179P4HIGHCVSS 7.5v37.0.2062.0v37.0.2062.1+87 more2014-09-10
CVE-2014-3179 [HIGH] CVE-2014-3179: Multiple unspecified vulnerabilities in Google Chrome before 37.0.2062.120 allow attackers to cause
Multiple unspecified vulnerabilities in Google Chrome before 37.0.2062.120 allow attackers to cause a denial of service or possibly have other impact via unknown vectors.
nvd
CVE-2016-2052P4HIGHCVSS 7.6≤ 47.0.2526.1062016-01-25
CVE-2016-2052 [HIGH] CVE-2016-2052: Multiple unspecified vulnerabilities in HarfBuzz before 1.0.6, as used in Google Chrome before 48.0.
Multiple unspecified vulnerabilities in HarfBuzz before 1.0.6, as used in Google Chrome before 48.0.2564.82, allow attackers to cause a denial of service or possibly have other impact via crafted data, as demonstrated by a buffer over-read resulting from an inverted length check in hb-ot-font.cc, a different issue than CVE-2015-8947.
nvd
CVE-2014-3167P4HIGHCVSS 7.5≤ 36.0.1985.142v36.0.1985.1+116 more2014-08-13
CVE-2014-3167 [HIGH] CVE-2014-3167: Multiple unspecified vulnerabilities in Google Chrome before 36.0.1985.143 allow attackers to cause
Multiple unspecified vulnerabilities in Google Chrome before 36.0.1985.143 allow attackers to cause a denial of service or possibly have other impact via unknown vectors.
nvd
CVE-2011-3915P4HIGHCVSS 7.5fixed in 16.0.912.632011-12-13
CVE-2011-3915 [HIGH] CWE-120 CVE-2011-3915: Buffer overflow in Google Chrome before 16.0.912.63 allows remote attackers to cause a denial of ser
Buffer overflow in Google Chrome before 16.0.912.63 allows remote attackers to cause a denial of service or possibly have unspecified other impact via vectors related to PDF fonts.
nvd
CVE-2011-3896P4HIGHCVSS 7.5fixed in 15.0.874.1202011-11-11
CVE-2011-3896 [HIGH] CWE-120 CVE-2011-3896: Buffer overflow in Google Chrome before 15.0.874.120 allows remote attackers to cause a denial of se
Buffer overflow in Google Chrome before 15.0.874.120 allows remote attackers to cause a denial of service or possibly have unspecified other impact via vectors related to shader variable mapping.
nvd
CVE-2011-1800P4HIGHCVSS 7.5fixed in 11.0.696.712011-05-16
CVE-2011-1800 [HIGH] CWE-190 CVE-2011-1800: Multiple integer overflows in the SVG Filters implementation in WebCore in WebKit in Google Chrome b
Multiple integer overflows in the SVG Filters implementation in WebCore in WebKit in Google Chrome before 11.0.696.68 allow remote attackers to cause a denial of service or possibly have unspecified other impact via unknown vectors.
nvd
CVE-2010-4205P4CRITICALCVSS 9.8fixed in 7.0.517.442010-11-06
CVE-2010-4205 [CRITICAL] CVE-2010-4205: Google Chrome before 7.0.517.44 does not properly handle the data types of event objects, which allo
Google Chrome before 7.0.517.44 does not properly handle the data types of event objects, which allows remote attackers to cause a denial of service or possibly have unspecified other impact via unknown vectors.
nvd
CVE-2011-3894P4HIGHCVSS 7.5fixed in 15.0.874.1202011-11-11
CVE-2011-3894 [HIGH] CWE-119 CVE-2011-3894: Google Chrome before 15.0.874.120 does not properly perform VP8 decoding, which allows remote attack
Google Chrome before 15.0.874.120 does not properly perform VP8 decoding, which allows remote attackers to cause a denial of service (memory corruption) or possibly have unspecified other impact via a crafted stream.
nvd
CVE-2011-3912P4HIGHCVSS 7.5fixed in 16.0.912.632011-12-13
CVE-2011-3912 [HIGH] CWE-416 CVE-2011-3912: Use-after-free vulnerability in Google Chrome before 16.0.912.63 allows remote attackers to cause a
Use-after-free vulnerability in Google Chrome before 16.0.912.63 allows remote attackers to cause a denial of service or possibly have unspecified other impact via vectors related to SVG filters.
nvd
CVE-2011-2824P4HIGHCVSS 7.5fixed in 13.0.782.2152011-08-29
CVE-2011-2824 [HIGH] CWE-416 CVE-2011-2824: Use-after-free vulnerability in Google Chrome before 13.0.782.215 allows remote attackers to cause a
Use-after-free vulnerability in Google Chrome before 13.0.782.215 allows remote attackers to cause a denial of service or possibly have unspecified other impact via vectors involving counter nodes.
nvd
CVE-2013-2856P4HIGHCVSS 7.5≤ 27.0.1453.109v27.0.1453.0+79 more2013-06-05
CVE-2013-2856 [HIGH] CWE-416 CVE-2013-2856: Use-after-free vulnerability in Google Chrome before 27.0.1453.110 allows remote attackers to cause
Use-after-free vulnerability in Google Chrome before 27.0.1453.110 allows remote attackers to cause a denial of service or possibly have unspecified other impact via vectors related to the handling of input.
nvd
CVE-2013-2864P4HIGHCVSS 7.5≤ 27.0.1453.109v27.0.1453.0+79 more2013-06-05
CVE-2013-2864 [HIGH] CWE-119 CVE-2013-2864: The PDF functionality in Google Chrome before 27.0.1453.110 allows remote attackers to cause a denia
The PDF functionality in Google Chrome before 27.0.1453.110 allows remote attackers to cause a denial of service (invalid free operation) or possibly have unspecified other impact via unknown vectors.
nvd