The vulnerability of the Systems Extensions component in the Google Chrome browser for ChromeOS operating systems allows a hacker to install any desired extension.

The vulnerability of the Systems Extensions component in the Google Chrome browser for ChromeOS operating systems is related to lack of access control. Exploiting this vulnerability allows a malicious actor to install arbitrary extensions remotely...

PT-2023-8651 · Google · Chrome Os

Name of the Vulnerable Software and Affected Versions: ChromeOS affected versions not specified Description: The issue is related to a driver for the PowerVR graphics processor in ChromeOS, involving the use of memory after it has been freed. This could allow an attacker to execute arbitrary code...

PT-2023-8652 · Google · Chrome Os

Name of the Vulnerable Software and Affected Versions: ChromeOS affected versions not specified Description: The issue is related to an integer overflow in the DevmemIntChangeSparse function of the PowerVR graphics driver in ChromeOS, which can be exploited to execute arbitrary code and elevate...

The vulnerability of the Arm Mali driver for ChromeOS and ChromeOS Flex operating systems allows attackers to gain increased privileges.

The vulnerability of the Arm Mali driver for ChromeOS and ChromeOS Flex operating systems is related to operations that occur outside of the buffer in memory. Exploiting this vulnerability can allow an attacker to gain increased privileges...

CVE-2019-13690

Inappropriate implementation in OS in Google Chrome on ChromeOS prior to 75.0.3770.80 allowed a remote attacker to perform OS-level privilege escalation via a malicious file. Chromium security severity: High...

CVE-2019-13689

Inappropriate implementation in OS in Google Chrome on ChromeOS prior to 75.0.3770.80 allowed a remote attacker to perform arbitrary read/write via a malicious file. Chromium security severity: Critical...

CVE-2019-13689

Inappropriate implementation in OS in Google Chrome on ChromeOS prior to 75.0.3770.80 allowed a remote attacker to perform arbitrary read/write via a malicious file. Chromium security severity: Critical...

Privilege escalation

Inappropriate implementation in OS in Google Chrome on ChromeOS prior to 75.0.3770.80 allowed a remote attacker to perform OS-level privilege escalation via a malicious file. Chromium security severity: High...

CVE-2019-13689

Affected software: Google Chrome on ChromeOS. The CVE-2019-13689 issue stems from an inappropriate OS implementation that allows a remote attacker with local access and user interaction to perform arbitrary read/write via a malicious file. Impact is high (confidentiality, integrity, availability)...

CVE-2019-13689

Inappropriate implementation in OS in Google Chrome on ChromeOS prior to 75.0.3770.80 allowed a remote attacker to perform arbitrary read/write via a malicious file. Chromium security severity: Critical...

CVE-2019-13690

Inappropriate implementation in OS in Google Chrome on ChromeOS prior to 75.0.3770.80 allowed a remote attacker to perform OS-level privilege escalation via a malicious file. Chromium security severity: High...

CVE-2019-13690

Inappropriate implementation in OS in Google Chrome on ChromeOS prior to 75.0.3770.80 allowed a remote attacker to perform OS-level privilege escalation via a malicious file. Chromium security severity: High...

CVE-2023-4369

Insufficient data validation in Systems Extensions in Google Chrome on ChromeOS prior to 116.0.5845.120 allowed an attacker who convinced a user to install a malicious extension to bypass file restrictions via a crafted HTML page. Chromium security severity: Medium...

CVE-2023-4369

Insufficient data validation in Systems Extensions in Google Chrome on ChromeOS prior to 116.0.5845.120 allowed an attacker who convinced a user to install a malicious extension to bypass file restrictions via a crafted HTML page. Chromium security severity: Medium...

Design/Logic Flaw

Insufficient data validation in Systems Extensions in Google Chrome on ChromeOS prior to 116.0.5845.120 allowed an attacker who convinced a user to install a malicious extension to bypass file restrictions via a crafted HTML page. Chromium security severity: Medium...

CVE-2023-4369

Insufficient data validation in Systems Extensions in Google Chrome on ChromeOS prior to 116.0.5845.120 allowed an attacker who convinced a user to install a malicious extension to bypass file restrictions via a crafted HTML page. Chromium security severity: Medium...

CVE-2023-4369

CVE-2023-4369 affects Google Chrome on ChromeOS prior to 116.0.5845.120. The issue is insufficient data validation in Systems Extensions, which could allow a user who is convinced to install a malicious extension to bypass file restrictions via a crafted HTML page. Connected sources corroborate t...

PT-2023-5022 · Google · Google Chrome

Name of the Vulnerable Software and Affected Versions: Google Chrome on ChromeOS versions prior to 116.0.5845.120 Description: The issue is related to insufficient data validation in Systems Extensions in Google Chrome on ChromeOS, which can be exploited by an attacker to bypass file restrictions...

Stable Channel Update for ChromeOS / ChromeOS Flex

ChromeOS M115 Stable The Stable channel is being updated to OS version: 15474.84.0 Browser version: 115.0.5790.182 for most ChromeOS devices. If you find new issues, please let us know one of the following ways 1. File a bug 2. Visit our ChromeOS communities 1. General: Chromebook Help Community ...

Google Chrome Input Validation Error Vulnerability (CNVD-2023-65158)

Google Chrome is a web browser from Google, an American company. An input validation error vulnerability previously existed in Google Chrome on ChromeOS version 115.0.5790.98, which stemmed from an insufficient validation of untrusted input in Chromad. An attacker could exploit the vulnerability ...