Chrome Security Vulnerabilities and Issues — Chrome CVE List

Lucene search

GoogleChrome

9 matches found

CVE•added 2025/02/04 7:15 p.m.•268 views

CVE-2025-0444

Use after free in Skia in Google Chrome prior to 133.0.6943.53 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. (Chromium security severity: High)

6.3CVSS7.1AI score0.00283EPSS

CVE•added 2025/02/04 7:15 p.m.•242 views

CVE-2025-0451

Inappropriate implementation in Extensions API in Google Chrome prior to 133.0.6943.53 allowed a remote attacker who convinced a user to engage in specific UI gestures to perform UI spoofing via a crafted Chrome Extension. (Chromium security severity: Medium)

6.3CVSS6.4AI score0.00217EPSS

CVE•added 2025/02/04 7:15 p.m.•225 views

CVE-2025-0445

Use after free in V8 in Google Chrome prior to 133.0.6943.53 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. (Chromium security severity: High)

5.4CVSS7.1AI score0.00149EPSS

CVE•added 2025/02/19 5:15 p.m.•82 views

CVE-2025-1426

Heap buffer overflow in GPU in Google Chrome on Android prior to 133.0.6943.126 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. (Chromium security severity: High)

8.8CVSS8.9AI score0.00085EPSS

CVE•added 2025/02/15 2:15 a.m.•81 views

CVE-2025-0995

Use after free in V8 in Google Chrome prior to 133.0.6943.98 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. (Chromium security severity: High)

8.8CVSS6.9AI score0.0015EPSS

CVE•added 2025/02/15 2:15 a.m.•79 views

CVE-2025-0997

Use after free in Navigation in Google Chrome prior to 133.0.6943.98 allowed a remote attacker to potentially exploit heap corruption via a crafted Chrome Extension. (Chromium security severity: High)

8.1CVSS7.1AI score0.0007EPSS

CVE•added 2025/02/19 5:15 p.m.•79 views

CVE-2025-0999

Heap buffer overflow in V8 in Google Chrome prior to 133.0.6943.126 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. (Chromium security severity: High)

8.8CVSS7.3AI score0.00167EPSS

CVE•added 2025/02/15 2:15 a.m.•78 views

CVE-2025-0996

Inappropriate implementation in Browser UI in Google Chrome on Android prior to 133.0.6943.98 allowed a remote attacker to spoof the contents of the Omnibox (URL bar) via a crafted HTML page. (Chromium security severity: High)

5.4CVSS5.8AI score0.00066EPSS

CVE•added 2025/02/19 5:15 p.m.•77 views

CVE-2025-1006

Use after free in Network in Google Chrome prior to 133.0.6943.126 allowed a remote attacker to potentially exploit heap corruption via a crafted web app. (Chromium security severity: Medium)

8.8CVSS9.1AI score0.00116EPSS