CVE-2012-3290

Technical details (affected products, vulnerable components, exploit methods, and remediation) are not publicly available in the provided documents. Monitor for updates from authoritative sources.

CVE-2013-2835

CVE-2013-2835 : Google Chrome OS prior to 26.0.1410.57 contains an origin restriction bypass in the O3D and Google Talk plug-ins, allowing remote attackers to bypass the domain-whitelist protection via a crafted website. Affected product/version: Google Chrome OS

CVE-2011-0477

CVE-2011-0477 affects Google Chrome (before 8.0.552.237) and Chrome OS (before 8.0.552.344). The vulnerability arises from a mismatch in video frame sizes that can cause incorrect memory access, enabling remote attackers to trigger a denial of service and potentially other impacts via unknown vec...

CVE-2011-2170

CVE-2011-2170 affects Google Chrome OS prior to R12 0.12.433.38 Beta. When Guest mode is enabled, users can alter settings on the about:flags page, with impact described as unspecified and local attack vectors; no explicit exploitation path or affected versions beyond this line are detailed in th...

CVE-2011-0473

CVE-2011-0473 affects Google Chrome before 8.0.552.237 and Chrome OS before 8.0.552.344; vulnerability arises from improper handling of CSS token sequences with CANVAS elements, allowing remote denial of service or possibly other impact via unknown vectors that lead to a stale pointer. Root cause...

CVE-2011-3420

Technical details (affected products, root cause, impact, and patch information) are not publicly provided in the connected documents for CVE-2011-3420. Monitor for updates.

CVE-2012-0695

Technical details for CVE-2012-0695 are not publicly available in the provided documents. Monitor for updates as no affected products, impact, or mitigations are specified here.

CVE-2014-1711

The CVE-2014-1711 entry concerns Google Chrome OS where the kernel GPU driver vulnerable to an out-of-bounds write. Affects Chrome OS before 33.0.1750.152, allowing remote attackers to cause a denial of service or possibly other impact via unknown vectors through the GPU kernel driver. Exploitati...

CVE-2011-1306

Technical details about CVE-2011-1306 are not publicly available in the provided documents; no specifics on vulnerable component, impact, or remediation are provided. Monitor for updates.

CVE-2011-3421

CVE-2011-3421 concerns Google Chrome prior to 14.0.835.125 affecting Acer AC700, Samsung Series 5, and Cr-48 Chromebook platforms. The Connected documents reiterate multiple unspecified vulnerabilities with unknown impact and attack vectors on these Chromebook environments. No concrete root-cause...

CVE-2011-2171

Technical details for CVE-2011-2171 are not publicly provided in the supplied documents. The Connected records do not specify affected product/version, root cause, impact, or remediation. Monitor for updates from official sources.

CVE-2012-4050

The CVE-2012-4050 entry concerns Google Chrome OS prior to 21.0.1180.50 on Cr-48, Samsung Series 5/5 550 Chromebooks, and Samsung Chromebox Series 3. The description indicates multiple unspecified vulnerabilities with unknown impact and attack vectors; no concrete root cause, affected component d...

CVE-2016-5169

CVE-2016-5169 is a format-string vulnerability in Google Chrome OS up to version 53.0.2785.103, allowing remote attackers to cause a denial of service or possibly other impact via unknown vectors. The referenced Chrome OS security update (Stable Channel 53.0.2785.103) addresses this issue. Affect...

CVE-2011-1042

Affected software: Google Chrome OS (flimflam/flimflamd) prior to 0.9.130.14 Beta. Vulnerability: use-after-free in the network daemon that can be triggered by a crafted hidden Wi‑Fi network name, enabling user-assisted remote denial of service (daemon crash). Impact: partial availability loss of...

CVE-2011-2169

Summary: CVE-2011-2169 affects Google Chrome OS prior to R12 0.12.433.38 Beta. Vulnerability: Local privilege escalation via a misused /var/lib/chromeos-aliases.conf file, where an attacker can place commands that are executed with elevated privileges by a local user. Root cause/impact: The descr...

CVE-2025-6177

CVE-2025-6177 describes a local privilege-escalation in Google ChromeOS MiniOS, where a debug shell (VT3 console) is reachable via specific key combinations during developer mode entry and MiniOS access, allowing root code execution even when developer mode is blocked by policy or FWMP. Affected:...

CVE-2025-6044

CVE-2025-6044 concerns Google ChromeOS: an Improper Access Control in the Stylus Tools component on ChromeOS 16238.64.0 (garaged stylus devices) allows a physical attacker to bypass the lock screen and access user files by removing the stylus while the device is closed and using the screen captur...