Google

Chrome

3770 Schwachstellen gefunden.

Hinweis: Diese Liste kann unvollständig sein. Daten werden ohne Gewähr im Ursprungsformat bereitgestellt.
5.5

CVE-2025-12439

Exploit
  • EPSS 0%
  • Veröffentlicht 10.11.2025 20:00:19
  • Zuletzt bearbeitet 13.11.2025 15:24:28

Inappropriate implementation in App-Bound Encryption in Google Chrome on Windows prior to 142.0.7444.59 allowed a local attacker to obtain potentially sensitive information from process memory via a malicious file. (Chromium security severity: Medium...

5.3

CVE-2025-12440

  • EPSS 0.04%
  • Veröffentlicht 10.11.2025 20:00:19
  • Zuletzt bearbeitet 13.11.2025 15:24:13

Inappropriate implementation in Autofill in Google Chrome prior to 142.0.7444.59 allowed a remote attacker who convinced a user to engage in specific UI gestures to obtain potentially sensitive information from process memory via a crafted HTML page....

7.5

CVE-2025-12437

  • EPSS 0.14%
  • Veröffentlicht 10.11.2025 20:00:18
  • Zuletzt bearbeitet 13.11.2025 15:24:55

Use after free in PageInfo in Google Chrome prior to 142.0.7444.59 allowed a remote attacker who convinced a user to engage in specific UI gestures to potentially exploit heap corruption via a crafted HTML page. (Chromium security severity: Medium)

8.8

CVE-2025-12438

  • EPSS 0.14%
  • Veröffentlicht 10.11.2025 20:00:18
  • Zuletzt bearbeitet 13.11.2025 15:24:40

Use after free in Ozone in Google Chrome on Linux and ChromeOS prior to 142.0.7444.59 allowed a remote attacker to potentially exploit object corruption via a crafted HTML page. (Chromium security severity: Medium)

5.4

CVE-2025-12435

  • EPSS 0.09%
  • Veröffentlicht 10.11.2025 20:00:17
  • Zuletzt bearbeitet 13.11.2025 15:25:22

Incorrect security UI in Omnibox in Google Chrome on Android prior to 142.0.7444.59 allowed a remote attacker to perform UI spoofing via a crafted HTML page. (Chromium security severity: Medium)

5.9

CVE-2025-12436

  • EPSS 0.02%
  • Veröffentlicht 10.11.2025 20:00:17
  • Zuletzt bearbeitet 13.11.2025 15:25:13

Policy bypass in Extensions in Google Chrome prior to 142.0.7444.59 allowed an attacker who convinced a user to install a malicious extension to obtain potentially sensitive information from process memory via a crafted Chrome Extension. (Chromium se...

4.2

CVE-2025-12434

  • EPSS 0.06%
  • Veröffentlicht 10.11.2025 20:00:16
  • Zuletzt bearbeitet 13.11.2025 15:25:28

Race in Storage in Google Chrome on Windows prior to 142.0.7444.59 allowed a remote attacker who convinced a user to engage in specific UI gestures to perform UI spoofing via a crafted HTML page. (Chromium security severity: Medium)

8.8

CVE-2025-12432

  • EPSS 0.08%
  • Veröffentlicht 10.11.2025 20:00:15
  • Zuletzt bearbeitet 13.11.2025 15:26:15

Race in V8 in Google Chrome prior to 142.0.7444.59 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. (Chromium security severity: High)

4.3

CVE-2025-12433

  • EPSS 0.04%
  • Veröffentlicht 10.11.2025 20:00:15
  • Zuletzt bearbeitet 13.11.2025 15:26:04

Inappropriate implementation in V8 in Google Chrome prior to 142.0.7444.59 allowed a remote attacker to perform out of bounds memory access via a crafted HTML page. (Chromium security severity: High)

7.5

CVE-2025-12430

  • EPSS 0.05%
  • Veröffentlicht 10.11.2025 20:00:14
  • Zuletzt bearbeitet 13.11.2025 15:26:35

Object lifecycle issue in Media in Google Chrome prior to 142.0.7444.59 allowed a remote attacker to perform UI spoofing via a crafted HTML page. (Chromium security severity: High)