Google

Chrome

651 Schwachstellen gefunden.

Hinweis: Diese Liste kann unvollständig sein. Daten werden ohne Gewähr im Ursprungsformat bereitgestellt.
8.8

CVE-2025-2476

  • EPSS 10.65%
  • Veröffentlicht 19.03.2025 18:59:42
  • Zuletzt bearbeitet 01.04.2025 20:37:56

Use after free in Lens in Google Chrome prior to 134.0.6998.117 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. (Chromium security severity: Critical)

8.8

CVE-2025-2135

  • EPSS 2.63%
  • Veröffentlicht 10.03.2025 20:39:17
  • Zuletzt bearbeitet 07.04.2025 18:54:36

Type Confusion in V8 in Google Chrome prior to 134.0.6998.88 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. (Chromium security severity: High)

8.8

CVE-2025-2136

  • EPSS 0.35%
  • Veröffentlicht 10.03.2025 20:39:17
  • Zuletzt bearbeitet 07.04.2025 18:54:29

Use after free in Inspector in Google Chrome prior to 134.0.6998.88 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. (Chromium security severity: Medium)

8.8

CVE-2025-2137

  • EPSS 0.22%
  • Veröffentlicht 10.03.2025 20:39:17
  • Zuletzt bearbeitet 07.04.2025 18:54:11

Out of bounds read in V8 in Google Chrome prior to 134.0.6998.88 allowed a remote attacker to perform out of bounds memory access via a crafted HTML page. (Chromium security severity: Medium)

8.8

CVE-2025-1920

  • EPSS 0.35%
  • Veröffentlicht 10.03.2025 20:39:16
  • Zuletzt bearbeitet 07.04.2025 18:54:46

Type Confusion in V8 in Google Chrome prior to 134.0.6998.88 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. (Chromium security severity: High)

4.3

CVE-2025-1923

  • EPSS 0.2%
  • Veröffentlicht 05.03.2025 04:15:12
  • Zuletzt bearbeitet 01.04.2025 20:41:40

Inappropriate implementation in Permission Prompts in Google Chrome prior to 134.0.6998.35 allowed an attacker who convinced a user to install a malicious extension to perform UI spoofing via a crafted Chrome Extension. (Chromium security severity: L...

8.1

CVE-2025-1915

  • EPSS 0.03%
  • Veröffentlicht 05.03.2025 04:15:11
  • Zuletzt bearbeitet 01.04.2025 20:42:45

Improper Limitation of a Pathname to a Restricted Directory in DevTools in Google Chrome on Windows prior to 134.0.6998.35 allowed an attacker who convinced a user to install a malicious extension to bypass file access restrictions via a crafted Chro...

8.8

CVE-2025-1916

  • EPSS 0.14%
  • Veröffentlicht 05.03.2025 04:15:11
  • Zuletzt bearbeitet 01.04.2025 20:42:36

Use after free in Profiles in Google Chrome prior to 134.0.6998.35 allowed an attacker who convinced a user to install a malicious extension to potentially exploit heap corruption via a crafted HTML page. (Chromium security severity: Medium)

4.3

CVE-2025-1917

  • EPSS 0.26%
  • Veröffentlicht 05.03.2025 04:15:11
  • Zuletzt bearbeitet 01.04.2025 20:42:28

Inappropriate implementation in Browser UI in Google Chrome on Android prior to 134.0.6998.35 allowed a remote attacker to perform UI spoofing via a crafted HTML page. (Chromium security severity: Medium)

8.8

CVE-2025-1918

  • EPSS 0.67%
  • Veröffentlicht 05.03.2025 04:15:11
  • Zuletzt bearbeitet 01.04.2025 20:42:21

Out of bounds read in PDFium in Google Chrome prior to 134.0.6998.35 allowed a remote attacker to potentially perform out of bounds memory access via a crafted PDF file. (Chromium security severity: Medium)