563 matches found
PT-2026-54177
Name of the Vulnerable Software and Affected Versions Google Chrome versions prior to 150.0.7871.47 Description An inappropriate implementation in the Chromecast component allows a remote attacker who has already compromised the renderer process to bypass navigation restrictions. This is achieved...
PT-2026-54081
Name of the Vulnerable Software and Affected Versions Google Chrome versions prior to 150.0.7871.47 Description A use after free issue exists in the Chromecast component. This flaw allows a remote attacker who has already compromised the renderer process to potentially achieve a sandbox escape by...
PT-2026-54174
Name of the Vulnerable Software and Affected Versions Google Chrome versions prior to 150.0.7871.47 Description Insufficient policy enforcement in the Chromecast component allows a remote attacker to perform privilege escalation by using a crafted HTML page. Recommendations Update Google Chrome t...
PT-2026-46667
Name of the Vulnerable Software and Affected Versions Google Chrome versions prior to 149.0.7827.53 Description An out of bounds read exists in Chromecast, which occurs when a program reads data outside the intended boundary of a buffer. This allows a remote attacker who has compromised the...
PT-2026-54078
Name of the Vulnerable Software and Affected Versions Google Chrome versions prior to 150.0.7871.47 Description An integer overflow exists in the Chromecast component. A remote attacker who has already compromised the renderer process can leverage a specially crafted HTML page to potentially...
PT-2026-54167
Name of the Vulnerable Software and Affected Versions Google Chrome versions prior to 150.0.7871.47 Description An out of bounds read in the Chromecast component allows a remote attacker who has already compromised the renderer process to access potentially sensitive information from process...
PT-2026-46453
Name of the Vulnerable Software and Affected Versions Google Chrome versions prior to 149.0.7827.53 Description An integer overflow in Chromecast allows a remote attacker who has compromised the renderer process to potentially perform a sandbox escape. This is achieved through the use of a crafte...
PT-2026-54161
Name of the Vulnerable Software and Affected Versions Google Chrome versions prior to 150.0.7871.47 Description An integer overflow in the Chromecast component allows a local attacker to execute arbitrary code by sending malicious network traffic. Recommendations Update Google Chrome to version...
PT-2026-54323
Name of the Vulnerable Software and Affected Versions Google Chrome versions prior to 150.0.7871.47 Description A use after free issue exists in the Chromecast component. This occurs when a program continues to use a pointer after the memory it points to has been freed, which can lead to crashes ...
PT-2026-54074
Name of the Vulnerable Software and Affected Versions Google Chrome versions prior to 150.0.7871.47 Description Insufficient validation of untrusted input in Chromecast allows a remote attacker who has compromised the renderer process to potentially perform a sandbox escape via a crafted HTML pag...
PT-2026-54075
Name of the Vulnerable Software and Affected Versions Google Chrome versions prior to 150.0.7871.47 Description A heap buffer overflow exists in the Chromecast component. A remote attacker who has already compromised the renderer process can potentially achieve a sandbox escape by inducing the...
PT-2026-42243
Name of the Vulnerable Software and Affected Versions Google Chrome on Android versions prior to 148.0.7778.179 Google Chrome on Linux versions prior to 148.0.7778.179 Google Chrome on ChromeOS versions prior to 148.0.7778.179 Description A heap buffer overflow in the Chromecast component allows ...
Malicious code in chromecast-receiver (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9ded3cbd70f99d1eeed4d998a82b13da94a22539d5783a36ad7c2651a01ca724 The package chromecast-receiver was found to contain malicious code...
MAL-2026-1691 Malicious code in chromecast-receiver (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9ded3cbd70f99d1eeed4d998a82b13da94a22539d5783a36ad7c2651a01ca724 The package chromecast-receiver was found to contain malicious code...
PT-2026-54073
Name of the Vulnerable Software and Affected Versions Google Chrome versions prior to 150.0.7871.47 Description An integer overflow exists in the Chromecast component. A remote attacker who has already compromised the renderer process can leverage a specially crafted HTML page to potentially...
CVE-2018-12716
The API service on Google Home and Chromecast devices before mid-July 2018 does not prevent DNS rebinding attacks from reading the scanresults JSON data, which allows remote attackers to determine the physical location of most web browsers by leveraging the presence of one of these devices on its...
CVE-2021-0467
In Chromecast bootROM, there is a possible out of bounds write due to an incorrect bounds check. This could lead to local escalation of privilege in the bootloader, with physical USB access, with no additional execution privileges needed. User interaction is not needed for exploitation.Product:...
Chromecast Security Bulletin—December 2025Stay organized with collectionsSave and categorize content based on your preferences.
The Chromecast & Google TV Streamer Security Bulletin contains details of security vulnerabilities affecting supported Chromecast & Google TV streamer devices streaming devices. For streaming devices, security patch levels of 2025-12-01 or later address all applicable issues in the December 2025...
