Google

Chrome

3754 Schwachstellen gefunden.

Hinweis: Diese Liste kann unvollständig sein. Daten werden ohne Gewähr im Ursprungsformat bereitgestellt.
4.2

CVE-2025-12446

  • EPSS 0.07%
  • Veröffentlicht 10.11.2025 20:00:22
  • Zuletzt bearbeitet 13.11.2025 15:21:41

Incorrect security UI in SplitView in Google Chrome prior to 142.0.7444.59 allowed a remote attacker who convinced a user to engage in specific UI gestures to perform UI spoofing via a crafted domain name. (Chromium security severity: Low)

4.3

CVE-2025-12443

  • EPSS 0.03%
  • Veröffentlicht 10.11.2025 20:00:21
  • Zuletzt bearbeitet 13.11.2025 15:23:52

Out of bounds read in WebXR in Google Chrome prior to 142.0.7444.59 allowed a remote attacker to perform an out of bounds memory read via a crafted HTML page. (Chromium security severity: Medium)

4.2

CVE-2025-12444

  • EPSS 0.07%
  • Veröffentlicht 10.11.2025 20:00:21
  • Zuletzt bearbeitet 13.11.2025 15:22:09

Incorrect security UI in Fullscreen UI in Google Chrome prior to 142.0.7444.59 allowed a remote attacker who convinced a user to engage in specific UI gestures to perform UI spoofing via a crafted HTML page. (Chromium security severity: Low)

4.3

CVE-2025-12441

  • EPSS 0.03%
  • Veröffentlicht 10.11.2025 20:00:20
  • Zuletzt bearbeitet 13.11.2025 15:24:03

Out of bounds read in V8 in Google Chrome prior to 142.0.7444.59 allowed a remote attacker to perform an out of bounds memory read via a crafted HTML page. (Chromium security severity: Medium)

5.5

CVE-2025-12439

Exploit
  • EPSS 0%
  • Veröffentlicht 10.11.2025 20:00:19
  • Zuletzt bearbeitet 13.11.2025 15:24:28

Inappropriate implementation in App-Bound Encryption in Google Chrome on Windows prior to 142.0.7444.59 allowed a local attacker to obtain potentially sensitive information from process memory via a malicious file. (Chromium security severity: Medium...

5.3

CVE-2025-12440

  • EPSS 0.03%
  • Veröffentlicht 10.11.2025 20:00:19
  • Zuletzt bearbeitet 13.11.2025 15:24:13

Inappropriate implementation in Autofill in Google Chrome prior to 142.0.7444.59 allowed a remote attacker who convinced a user to engage in specific UI gestures to obtain potentially sensitive information from process memory via a crafted HTML page....

7.5

CVE-2025-12437

  • EPSS 0.11%
  • Veröffentlicht 10.11.2025 20:00:18
  • Zuletzt bearbeitet 13.11.2025 15:24:55

Use after free in PageInfo in Google Chrome prior to 142.0.7444.59 allowed a remote attacker who convinced a user to engage in specific UI gestures to potentially exploit heap corruption via a crafted HTML page. (Chromium security severity: Medium)

8.8

CVE-2025-12438

  • EPSS 0.11%
  • Veröffentlicht 10.11.2025 20:00:18
  • Zuletzt bearbeitet 13.11.2025 15:24:40

Use after free in Ozone in Google Chrome on Linux and ChromeOS prior to 142.0.7444.59 allowed a remote attacker to potentially exploit object corruption via a crafted HTML page. (Chromium security severity: Medium)

5.4

CVE-2025-12435

  • EPSS 0.07%
  • Veröffentlicht 10.11.2025 20:00:17
  • Zuletzt bearbeitet 13.11.2025 15:25:22

Incorrect security UI in Omnibox in Google Chrome on Android prior to 142.0.7444.59 allowed a remote attacker to perform UI spoofing via a crafted HTML page. (Chromium security severity: Medium)

5.9

CVE-2025-12436

  • EPSS 0.02%
  • Veröffentlicht 10.11.2025 20:00:17
  • Zuletzt bearbeitet 13.11.2025 15:25:13

Policy bypass in Extensions in Google Chrome prior to 142.0.7444.59 allowed an attacker who convinced a user to install a malicious extension to obtain potentially sensitive information from process memory via a crafted Chrome Extension. (Chromium se...