Google

Chrome

3754 Schwachstellen gefunden.

Hinweis: Diese Liste kann unvollständig sein. Daten werden ohne Gewähr im Ursprungsformat bereitgestellt.
4.3

CVE-2025-8583

  • EPSS 0.05%
  • Veröffentlicht 07.08.2025 01:30:40
  • Zuletzt bearbeitet 08.08.2025 18:23:49

Inappropriate implementation in Permissions in Google Chrome prior to 139.0.7258.66 allowed a remote attacker to perform UI spoofing via a crafted HTML page. (Chromium security severity: Low)

4.3

CVE-2025-8579

  • EPSS 0.07%
  • Veröffentlicht 07.08.2025 01:30:39
  • Zuletzt bearbeitet 08.08.2025 18:24:30

Inappropriate implementation in Picture In Picture in Google Chrome prior to 139.0.7258.66 allowed a remote attacker who convinced a user to engage in specific UI gestures to perform UI spoofing via a crafted HTML page. (Chromium security severity: L...

4.3

CVE-2025-8580

  • EPSS 0.07%
  • Veröffentlicht 07.08.2025 01:30:39
  • Zuletzt bearbeitet 08.08.2025 18:24:21

Inappropriate implementation in Filesystems in Google Chrome prior to 139.0.7258.66 allowed a remote attacker to perform UI spoofing via a crafted HTML page. (Chromium security severity: Low)

4.3

CVE-2025-8581

  • EPSS 0.07%
  • Veröffentlicht 07.08.2025 01:30:39
  • Zuletzt bearbeitet 08.08.2025 18:24:14

Inappropriate implementation in Extensions in Google Chrome prior to 139.0.7258.66 allowed a remote attacker who convinced a user to engage in specific UI gestures to leak cross-origin data via a crafted HTML page. (Chromium security severity: Low)

4.3

CVE-2025-8582

  • EPSS 0.09%
  • Veröffentlicht 07.08.2025 01:30:39
  • Zuletzt bearbeitet 13.11.2025 18:46:49

Insufficient validation of untrusted input in Core in Google Chrome prior to 139.0.7258.66 allowed a remote attacker to spoof the contents of the Omnibox (URL bar) via a crafted HTML page. (Chromium security severity: Low)

8.8

CVE-2025-8576

  • EPSS 0.19%
  • Veröffentlicht 07.08.2025 01:30:38
  • Zuletzt bearbeitet 13.11.2025 17:59:00

Use after free in Extensions in Google Chrome prior to 139.0.7258.66 allowed a remote attacker to potentially exploit heap corruption via a crafted Chrome Extension. (Chromium security severity: Medium)

4.3

CVE-2025-8577

  • EPSS 0.07%
  • Veröffentlicht 07.08.2025 01:30:38
  • Zuletzt bearbeitet 08.08.2025 18:24:45

Inappropriate implementation in Picture In Picture in Google Chrome prior to 139.0.7258.66 allowed a remote attacker who convinced a user to engage in specific UI gestures to perform UI spoofing via a crafted HTML page. (Chromium security severity: M...

8.8

CVE-2025-8578

  • EPSS 0.19%
  • Veröffentlicht 07.08.2025 01:30:38
  • Zuletzt bearbeitet 13.11.2025 18:43:36

Use after free in Cast in Google Chrome prior to 139.0.7258.66 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. (Chromium security severity: Medium)

8.8

CVE-2025-8292

  • EPSS 0.2%
  • Veröffentlicht 30.07.2025 01:18:27
  • Zuletzt bearbeitet 01.08.2025 14:37:02

Use after free in Media Stream in Google Chrome prior to 138.0.7204.183 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. (Chromium security severity: High)

8.8

CVE-2025-8010

Medienbericht
  • EPSS 0.15%
  • Veröffentlicht 22.07.2025 21:11:18
  • Zuletzt bearbeitet 26.09.2025 17:33:32

Type Confusion in V8 in Google Chrome prior to 138.0.7204.168 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. (Chromium security severity: High)