Google Chrome OS out-of-bounds write vulnerability (CNVD-2025-09154)

Google Chrome OS is a lightweight, open source, web-based operating system from Google. Google Chrome OS suffers from an out-of-bounds write vulnerability that can be exploited by an attacker to bypass operating system authentication...

Google Chrome OS Access Control Error Vulnerability (CNVD-2025-09151)

Google Chrome OS is a lightweight, open source, web-based operating system from Google. Google Chrome OS suffers from an Access Control Error vulnerability that stems from insufficient configuration access control in the Gerrit project, which can be exploited by an attacker to cause remote code...

CVE-2025-1704

ComponentInstaller Modification in ComponentInstaller in Google ChromeOS 15823.23.0 on Chromebooks allows enrolled users with local access to unenroll devices and intercept device management requests via loading components from the unencrypted stateful partition...

Google Chrome OS 安全漏洞

Google ChromeOS is a set of Web-based lightweight open source operating system from Google Google. Google ChromeOS suffers from a memory misreference vulnerability that is caused by a flaw in ComponentInstaller. An attacker could exploit the vulnerability to intercept device management requests b...

Google Chrome OS 安全漏洞

Google Chrome OS is a lightweight, open source, web-based operating system from Google. Google Chrome OS suffers from an information disclosure vulnerability that stems from a failure to properly tunnel DNS traffic during VPN state transitions, for which no detailed vulnerability details are...

CVE-2025-1292

Out-Of-Bounds Write in TPM2 Reference Library in Google ChromeOS 122.0.6261.132 stable on Cr50 Boards allows an attacker with root access to gain persistence and bypass operating system verification via exploiting the NVRead functionality during the Challenge-Response process...

Google Chrome OS 安全漏洞

Google Chrome OS is a lightweight, open source, web-based operating system from Google. Google Chrome OS suffers from an out-of-bounds write vulnerability that can be exploited by an attacker to bypass operating system authentication...

Google Chrome OS 安全漏洞

Google ChromeOS is a Web-based lightweight open source operating system from Google Google. Google ChromeOS suffers from an elevation of privilege vulnerability that originates from elevation of privilege in the installer and recovery image handling, which can be exploited by an attacker to cause...

Advisory ROSA-SA-2025-2677

software: qt4 4.8.7 OS: ROSA-CHROME packageevrstring: qt4-4.8.7-18 CVE-ID: CVE-2023-32763 BDU-ID: 2023-03802 CVE-Crit: HIGH CVE-DESC.: A vulnerability in the QTextLayout component of the Qt cross-platform software development framework is related to buffer copying without input validation...

Advisory ROSA-SA-2025-2596

software: procps-ng 3.3.17 OS: ROSA-CHROME packageevrstring: procps-ng-3.3.17-4 CVE-ID: CVE-2023-4016 BDU-ID: 2023-07117 CVE-Crit: LOW CVE-DESC.: A vulnerability in the running processes information collection utility ps of the procps-ng command line utility set is related to an operation exceedi...

Advisory ROSA-SA-2025-2594

software: freerdp 2.11.7 OS: ROSA-CHROME packageevrstring: freerdp-2.11.7-1 CVE-ID: CVE-2024-22211 BDU-ID: 2024-00706 CVE-Crit: MEDIUM CVE-DESC.: A vulnerability in the freerdpbitmapplanarcontextreset function of the FreeRDP RDP client is related to an integer overflow when processing the...

Advisory ROSA-SA-2024-2534

software: zchunk 1.2.2 OS: ROSA-CHROME packageevrstring: zchunk-1.2.2.2-2 CVE-ID: CVE-2023-46228 BDU-ID: 2023-07324 CVE-Crit: HIGH CVE-DESC.: A vulnerability in the lib/comp/comp.c, lib/comp/zstd/zstd.c, lib/dl/multipart.c, or lib/header.c components of the RPM zchunk file size reduction software...

DEBIAN-CVE-2024-35977

In the Linux kernel, the following vulnerability has been resolved: platform/chrome: crosecuart: properly fix race condition The crosecuartprobe function calls devmserdevdeviceopen before it calls serdevdevicesetclientops. This can trigger a NULL pointer dereference: BUG: kernel NULL pointer...

"Failed to launch application" with Citrix Workspace App for Chrome OS version 2402.

Users encounter the "Failed to launch application" error message when attempting to start a desktop session using Citrix Workspace App for Chrome OS version 2402. This behavior is observed when initiating sessions from a delivery group that contains non-English characters while the Service...

The vulnerability of the cam_lrme_mgr_hw_prepare_update function in the Chrome OS operating system allows a hacker to increase their privileges.

The vulnerability of the camlrmemgrhwprepareupdate function in the Chrome OS operating system is related to writing beyond the buffer boundaries. Exploiting this vulnerability can allow an attacker to increase their privileges...

The vulnerability of the CAMX driver for the Chrome OS operating system allows a hacker to escalate their privileges and execute arbitrary code.

The vulnerability of the CAMX driver for the Chrome OS operating system is related to writing beyond buffer boundaries. Exploiting this vulnerability can allow an attacker to increase their privileges and execute arbitrary code...

The vulnerability of the Android Debug Bridge (ADB) component of Google Chrome browser on the Chrome OS allows a hacker to bypass security restrictions.

The vulnerability of the Android Debug Bridge ADB component in Google Chrome browser for the Chrome OS is related to deficiencies in access control. Exploiting this vulnerability could allow a hacker to bypass security restrictions...

PT-2023-8467 · Imagination Technologies · Powervr Gpu Driver

Name of the Vulnerable Software and Affected Versions: PowerVR GPU driver versions affected versions not specified Description: The issue is related to the PMRChangeSparseMemOSMem function of the PowerVR GPU driver in Android and ChromeOS, which is vulnerable to a buffer overflow in memory. This...

PT-2023-36379 · Google · Chrome Os

Уязвимость ядра операционной системы ChromeOS существует из-за недостаточной проверки входных данных. Эксплуатация уязвимости может позволить нарушителю выполнить произвольный код...

The vulnerability of the command shell of the Google Chrome browser on the Chrome OS allows a perpetrator to compromise the confidentiality, integrity, and accessibility of the protected information.

The vulnerability of the command shell of the Google Chrome browser on the Chrome OS is related to the use of memory after it is freed. Exploiting this vulnerability can allow a malicious actor to compromise the confidentiality, integrity, and accessibility of the protected information...