Google Chrome vulnerabilities

CVE-2025-0443 [HIGH] CWE-79 CVE-2025-0443: Insufficient data validation in Extensions in Google Chrome prior to 132.0.6834.83 allowed a remote Insufficient data validation in Extensions in Google Chrome prior to 132.0.6834.83 allowed a remote attacker who convinced a user to engage in specific UI gestures to perform privilege escalation via a crafted HTML page. (Chromium security severity: Medium)

CVE-2024-8636 [HIGH] CWE-122 CVE-2024-8636: Heap buffer overflow in Skia in Google Chrome prior to 128.0.6613.137 allowed a remote attacker to p Heap buffer overflow in Skia in Google Chrome prior to 128.0.6613.137 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. (Chromium security severity: High)

CVE-2023-7010 [HIGH] CWE-416 CVE-2023-7010: Use after free in WebRTC in Google Chrome prior to 117.0.5938.62 allowed a remote attacker to potent Use after free in WebRTC in Google Chrome prior to 117.0.5938.62 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. (Chromium security severity: High)

CVE-2024-8198 [HIGH] CWE-122 CVE-2024-8198: Heap buffer overflow in Skia in Google Chrome prior to 128.0.6613.113 allowed a remote attacker who Heap buffer overflow in Skia in Google Chrome prior to 128.0.6613.113 allowed a remote attacker who had compromised the renderer process to potentially exploit heap corruption via a crafted HTML page. (Chromium security severity: High)

CVE-2025-1918 [HIGH] CWE-125 CVE-2025-1918: Out of bounds read in PDFium in Google Chrome prior to 134.0.6998.35 allowed a remote attacker to po Out of bounds read in PDFium in Google Chrome prior to 134.0.6998.35 allowed a remote attacker to potentially perform out of bounds memory access via a crafted PDF file. (Chromium security severity: Medium)

CVE-2024-8193 [HIGH] CWE-122 CVE-2024-8193: Heap buffer overflow in Skia in Google Chrome prior to 128.0.6613.113 allowed a remote attacker who Heap buffer overflow in Skia in Google Chrome prior to 128.0.6613.113 allowed a remote attacker who had compromised the renderer process to potentially exploit heap corruption via a crafted HTML page. (Chromium security severity: High)

CVE-2024-8194 [HIGH] CWE-843 CVE-2024-8194: Type Confusion in V8 in Google Chrome prior to 128.0.6613.113 allowed a remote attacker to potential Type Confusion in V8 in Google Chrome prior to 128.0.6613.113 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. (Chromium security severity: High)

CVE-2024-11395 [HIGH] CWE-843 CVE-2024-11395: Type Confusion in V8 in Google Chrome prior to 131.0.6778.85 allowed a remote attacker to potentiall Type Confusion in V8 in Google Chrome prior to 131.0.6778.85 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. (Chromium security severity: High)

CVE-2025-9866 [HIGH] CWE-693 CVE-2025-9866: Inappropriate implementation in Extensions in Google Chrome prior to 140.0.7339.80 allowed a remote Inappropriate implementation in Extensions in Google Chrome prior to 140.0.7339.80 allowed a remote attacker to bypass content security policy via a crafted HTML page. (Chromium security severity: Medium)

CVE-2024-11113 [HIGH] CWE-416 CVE-2024-11113: Use after free in Accessibility in Google Chrome prior to 131.0.6778.69 allowed a remote attacker wh Use after free in Accessibility in Google Chrome prior to 131.0.6778.69 allowed a remote attacker who had compromised the renderer process to potentially exploit heap corruption via a crafted HTML page. (Chromium security severity: Medium)

CVE-2024-3169 [HIGH] CWE-416 CVE-2024-3169: Use after free in V8 in Google Chrome prior to 121.0.6167.139 allowed a remote attacker to potential Use after free in V8 in Google Chrome prior to 121.0.6167.139 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. (Chromium security severity: High)

CVE-2024-3170 [HIGH] CWE-416 CVE-2024-3170: Use after free in WebRTC in Google Chrome prior to 121.0.6167.85 allowed a remote attacker to potent Use after free in WebRTC in Google Chrome prior to 121.0.6167.85 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. (Chromium security severity: High)

CVE-2025-3066 [HIGH] CWE-416 CVE-2025-3066: Use after free in Site Isolation in Google Chrome prior to 135.0.7049.84 allowed a remote attacker t Use after free in Site Isolation in Google Chrome prior to 135.0.7049.84 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. (Chromium security severity: High)

CVE-2025-1920 [HIGH] CWE-843 CVE-2025-1920: Type Confusion in V8 in Google Chrome prior to 134.0.6998.88 allowed a remote attacker to potentiall Type Confusion in V8 in Google Chrome prior to 134.0.6998.88 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. (Chromium security severity: High)

CVE-2025-2136 [HIGH] CWE-416 CVE-2025-2136: Use after free in Inspector in Google Chrome prior to 134.0.6998.88 allowed a remote attacker to pot Use after free in Inspector in Google Chrome prior to 134.0.6998.88 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. (Chromium security severity: Medium)

CVE-2024-12694 [HIGH] CWE-416 CVE-2024-12694: Use after free in Compositing in Google Chrome prior to 131.0.6778.204 allowed a remote attacker to Use after free in Compositing in Google Chrome prior to 131.0.6778.204 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. (Chromium security severity: High)

CVE-2021-38023 [HIGH] CWE-416 CVE-2021-38023: Use after free in Extensions in Google Chrome prior to 92.0.4515.107 allowed a remote attacker to po Use after free in Extensions in Google Chrome prior to 92.0.4515.107 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. (Chromium security severity: High)

CVE-2025-8879 [HIGH] CWE-122 CVE-2025-8879: Heap buffer overflow in libaom in Google Chrome prior to 139.0.7258.127 allowed a remote attacker to Heap buffer overflow in libaom in Google Chrome prior to 139.0.7258.127 allowed a remote attacker to potentially exploit heap corruption via a curated set of gestures. (Chromium security severity: High)

CVE-2025-12725 [HIGH] CWE-125 CVE-2025-12725: Out of bounds read in WebGPU in Google Chrome on Android prior to 142.0.7444.137 allowed a remote at Out of bounds read in WebGPU in Google Chrome on Android prior to 142.0.7444.137 allowed a remote attacker to perform an out of bounds memory write via a crafted HTML page. (Chromium security severity: High)

CVE-2025-3620 [HIGH] CWE-416 CVE-2025-3620: Use after free in USB in Google Chrome prior to 135.0.7049.95 allowed a remote attacker to potential Use after free in USB in Google Chrome prior to 135.0.7049.95 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. (Chromium security severity: High)