VYPR
Vendor

Chromium

Products
6
CVEs
1,485
Across products
1,487
Status
Private

Products

6

Recent CVEs

1,485
View all 1,485 CVEs →
  • CVE-2024-7971CriKEVAug 21, 2024
    risk 0.76cvss 9.6epss 0.21

    Type confusion in V8 in Google Chrome prior to 128.0.6613.84 allowed a remote attacker to exploit heap corruption via a crafted HTML page. (Chromium security severity: High)

  • CVE-2024-5274CriKEVMay 28, 2024
    risk 0.75cvss 9.6epss 0.07

    Type Confusion in V8 in Google Chrome prior to 125.0.6422.112 allowed a remote attacker to execute arbitrary code inside a sandbox via a crafted HTML page. (Chromium security severity: High)

  • CVE-2024-4671CriKEVMay 14, 2024
    risk 0.75cvss 9.6epss 0.08

    Use after free in Visuals in Google Chrome prior to 124.0.6367.201 allowed a remote attacker who had compromised the renderer process to potentially perform a sandbox escape via a crafted HTML page. (Chromium security severity: High)

  • CVE-2026-2441HigKEVFeb 13, 2026
    risk 0.74cvss 8.8epss 0.55

    Use after free in CSS in Google Chrome prior to 145.0.7632.75 allowed a remote attacker to execute arbitrary code inside a sandbox via a crafted HTML page. (Chromium security severity: High)

  • CVE-2024-7965HigKEVAug 21, 2024
    risk 0.71cvss 8.8epss 0.19

    Inappropriate implementation in V8 in Google Chrome prior to 128.0.6613.84 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. (Chromium security severity: High)

  • CVE-2026-5281HigKEVApr 1, 2026
    risk 0.70cvss 8.8epss 0.01

    Use after free in Dawn in Google Chrome prior to 146.0.7680.178 allowed a remote attacker who had compromised the renderer process to execute arbitrary code via a crafted HTML page. (Chromium security severity: High)

  • CVE-2025-13223HigKEVNov 17, 2025
    risk 0.70cvss 8.8epss 0.05

    Type Confusion in V8 in Google Chrome prior to 142.0.7444.175 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. (Chromium security severity: High)

  • CVE-2025-2783HigKEVMar 26, 2025
    risk 0.70cvss 8.3epss 0.09

    Incorrect handle provided in unspecified circumstances in Mojo in Google Chrome on Windows prior to 134.0.6998.177 allowed a remote attacker to perform a sandbox escape via a malicious file. (Chromium security severity: High)

  • CVE-2023-7024HigKEVDec 21, 2023
    risk 0.70cvss 8.8epss 0.07

    Heap buffer overflow in WebRTC in Google Chrome prior to 120.0.6099.129 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. (Chromium security severity: High)

  • CVE-2026-87491HigKEVSep 9, 2026
    risk 0.69cvss 8.8epss 0.03

    Out of bounds write in V8 in Google Chrome prior to 153.0.8010.36 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML page. (Chromium security severity: Medium)

  • CVE-2026-3910HigKEVMar 13, 2026
    risk 0.69cvss 8.8epss 0.01

    Inappropriate implementation in V8 in Google Chrome prior to 146.0.7680.75 allowed a remote attacker to execute arbitrary code inside a sandbox via a crafted HTML page. (Chromium security severity: High)

  • CVE-2026-13782CriJun 30, 2026
    risk 0.65cvss 10.0epss 0.00

    Use after free in Browser in Google Chrome prior to 150.0.7871.47 allowed a remote attacker who had compromised the renderer process to potentially perform a sandbox escape via a crafted HTML page. (Chromium security severity: Critical)

  • CVE-2025-6554HigKEVJun 30, 2025
    risk 0.65cvss 8.1epss 0.13

    Type confusion in V8 in Google Chrome prior to 138.0.7204.96 allowed a remote attacker to perform arbitrary read/write via a crafted HTML page. (Chromium security severity: High)

  • CVE-2026-87544CriSep 9, 2026
    risk 0.64cvss 9.8epss 0.00

    Incorrect authorization in Extensions in Google Chrome prior to 153.0.8010.36 allowed a remote attacker to bypass system access restrictions into a privileged page via a crafted HTML page. (Chromium security severity: Low)

  • CVE-2026-14121CriJun 30, 2026
    risk 0.64cvss 9.8epss 0.00

    Use after free in Chromoting in Google Chrome on Linux prior to 150.0.7871.47 allowed a remote attacker to execute arbitrary code via malicious network traffic. (Chromium security severity: Low)

  • CVE-2026-13776CriJun 30, 2026
    risk 0.64cvss 9.8epss 0.00

    Type Confusion in Dawn in Google Chrome prior to 150.0.7871.47 allowed a remote attacker who had compromised the renderer process to potentially perform a sandbox escape via a crafted HTML page. (Chromium security severity: Critical)

  • CVE-2026-13775CriJun 30, 2026
    risk 0.64cvss 9.8epss 0.00

    Use after free in GPU in Google Chrome prior to 150.0.7871.47 allowed a remote attacker who had compromised the renderer process to potentially perform a sandbox escape via a crafted HTML page. (Chromium security severity: Critical)

  • CVE-2024-1284CriFeb 7, 2024
    risk 0.64cvss 9.8epss 0.01

    Use after free in Mojo in Google Chrome prior to 121.0.6167.160 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. (Chromium security severity: High)

  • CVE-2024-1283CriFeb 7, 2024
    risk 0.64cvss 9.8epss 0.19

    Heap buffer overflow in Skia in Google Chrome prior to 121.0.6167.160 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. (Chromium security severity: High)

  • CVE-2026-102306CriSep 29, 2026
    risk 0.62cvss 9.6epss —

    Use after free in Bluetooth in Google Chrome prior to 154.0.8037.92 allowed a remote attacker to potentially execute arbitrary code outside the sandbox via a crafted HTML page. (Chromium security severity: High)