Google

Chrome

3754 Schwachstellen gefunden.

Hinweis: Diese Liste kann unvollständig sein. Daten werden ohne Gewähr im Ursprungsformat bereitgestellt.
5.4

CVE-2025-13097

Exploit
  • EPSS 0.03%
  • Veröffentlicht 14.11.2025 02:29:54
  • Zuletzt bearbeitet 17.11.2025 12:23:36

Inappropriate implementation in DevTools in Google Chrome prior to 136.0.7103.59 allowed a remote attacker to potentially perform a sandbox escape via a crafted HTML page. (Chromium security severity: Medium)

4.3

CVE-2025-9479

Exploit
  • EPSS 0.06%
  • Veröffentlicht 14.11.2025 02:29:54
  • Zuletzt bearbeitet 17.11.2025 12:18:37

Out of bounds read in V8 in Google Chrome prior to 133.0.6943.141 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. (Chromium security severity: Medium)

8.8

CVE-2025-13042

  • EPSS 0.08%
  • Veröffentlicht 12.11.2025 16:48:43
  • Zuletzt bearbeitet 25.11.2025 15:03:24

Inappropriate implementation in V8 in Google Chrome prior to 142.0.7444.166 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. (Chromium security severity: High)

4.2

CVE-2025-12728

  • EPSS 0.07%
  • Veröffentlicht 10.11.2025 20:00:56
  • Zuletzt bearbeitet 25.11.2025 14:59:53

Inappropriate implementation in Omnibox in Google Chrome on Android prior to 142.0.7444.137 allowed a remote attacker who convinced a user to engage in specific UI gestures to perform UI spoofing via a crafted HTML page. (Chromium security severity: ...

4.2

CVE-2025-12729

  • EPSS 0.03%
  • Veröffentlicht 10.11.2025 20:00:56
  • Zuletzt bearbeitet 14.11.2025 17:26:03

Inappropriate implementation in Omnibox in Google Chrome on Android prior to 142.0.7444.137 allowed a remote attacker who convinced a user to engage in specific UI gestures to perform UI spoofing via a crafted HTML page. (Chromium security severity: ...

7.5

CVE-2025-12726

  • EPSS 0.08%
  • Veröffentlicht 10.11.2025 20:00:55
  • Zuletzt bearbeitet 25.11.2025 15:02:18

Inappropriate implementation in Views in Google Chrome on Windows prior to 142.0.7444.137 allowed a remote attacker who had compromised the renderer process to perform privilege escalation via a crafted HTML page. (Chromium security severity: High)

8.8

CVE-2025-12727

  • EPSS 0.08%
  • Veröffentlicht 10.11.2025 20:00:55
  • Zuletzt bearbeitet 25.11.2025 14:53:03

Inappropriate implementation in V8 in Google Chrome prior to 142.0.7444.137 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. (Chromium security severity: High)

8.8

CVE-2025-12725

  • EPSS 0.09%
  • Veröffentlicht 10.11.2025 20:00:54
  • Zuletzt bearbeitet 25.11.2025 15:05:54

Out of bounds read in WebGPU in Google Chrome on Android prior to 142.0.7444.137 allowed a remote attacker to perform an out of bounds memory write via a crafted HTML page. (Chromium security severity: High)

4.2

CVE-2025-12447

  • EPSS 0.07%
  • Veröffentlicht 10.11.2025 20:00:23
  • Zuletzt bearbeitet 13.11.2025 15:21:29

Incorrect security UI in Omnibox in Google Chrome on Android prior to 142.0.7444.59 allowed a remote attacker who convinced a user to engage in specific UI gestures to perform UI spoofing via a crafted HTML page. (Chromium security severity: Low)

6.5

CVE-2025-12445

  • EPSS 0.02%
  • Veröffentlicht 10.11.2025 20:00:22
  • Zuletzt bearbeitet 13.11.2025 15:21:53

Policy bypass in Extensions in Google Chrome prior to 142.0.7444.59 allowed an attacker who convinced a user to install a malicious extension to leak cross-origin data via a crafted Chrome Extension. (Chromium security severity: Low)