Browse CVEs

HIGH 8.8 CVE-2025-0443 Insufficient data validation in Extensions in Google Chrome prior to 132.0.6834.83 allowed a remote attacker who convinced a user to engage in specif… Chrome 132.0.6834.83+ Fix from $1,9502025-01-15 HIGH 8.8 CVE-2025-0447 Inappropriate implementation in Navigation in Google Chrome prior to 132.0.6834.83 allowed a remote attacker to perform privilege escalation via a cr… Chrome 132.0.6834.83+ Fix from $1,9502025-01-15 MEDIUM 6.1 CVE-2024-11023 Firebase JavaScript SDK utilizes a "FIREBASE_DEFAULTS" cookie to store configuration data, including an "_authTokenSyncURL" field used for session sy… Firebase Javascript Sdk 10.9.0+ Fix from $1,6002024-11-18 HIGH 8.8 CVE-2024-11115 Insufficient policy enforcement in Navigation in Google Chrome on iOS prior to 131.0.6778.69 allowed a remote attacker to perform privilege escalatio… Chrome 131.0.6778.69+ Fix from $1,9502024-11-12 MEDIUM 6.5 CVE-2024-11110 Inappropriate implementation in Extensions in Google Chrome prior to 131.0.6778.69 allowed a remote attacker to bypass site isolation via a crafted C… Chrome 131.0.6778.69+ Fix from $1,6002024-11-12 MEDIUM 6.1 CVE-2024-8907 Insufficient data validation in Omnibox in Google Chrome on Android prior to 129.0.6668.58 allowed a remote attacker who convinced a user to engage i… Chrome 129.0.6668.58+ Fix from $1,6002024-09-17 HIGH 8.8 CVE-2024-3174 Inappropriate implementation in V8 in Google Chrome prior to 119.0.6045.105 allowed a remote attacker to potentially exploit object corruption via a … Chrome 119.0.6045.105+ Fix from $1,9502024-07-16 MEDIUM 6.1 CVE-2024-3841 Insufficient data validation in Browser Switcher in Google Chrome prior to 124.0.6367.60 allowed a remote attacker to inject scripts or HTML into a p… Chrome 124.0.6367.60+ Fix from $1,6002024-04-17 MEDIUM 6.1 CVE-2024-3847 Insufficient policy enforcement in WebUI in Google Chrome prior to 124.0.6367.60 allowed a remote attacker to bypass content security policy via a cr… Chrome 124.0.6367.60+ Fix from $1,6002024-04-17 MEDIUM 6.5 CVE-2024-2630 Inappropriate implementation in iOS in Google Chrome prior to 123.0.6312.58 allowed a remote attacker to leak cross-origin data via a crafted HTML pa… Chrome 123.0.6312.58+ Fix from $1,6002024-03-20 MEDIUM 5.4 CVE-2024-1676EPSS 19% Inappropriate implementation in Navigation in Google Chrome prior to 122.0.6261.57 allowed a remote attacker to spoof security UI via a crafted HTML … Chrome 122.0.6261.57+ Fix from $1,6002024-02-21 MEDIUM 6.1 CVE-2023-5480 Inappropriate implementation in Payments in Google Chrome prior to 119.0.6045.105 allowed a remote attacker to bypass XSS preventions via a malicious… Chrome 119.0.6045.105+ Fix from $1,6002023-11-01 MEDIUM 6.1 CVE-2023-3481 Critters versions 0.0.17-0.0.19 have an issue when parsing the HTML, which leads to a potential cross-site scripting (XSS) bug. We recommend upgradin… Critters after 0.0.19 Fix from $1,6002023-08-21 MEDIUM 6.1 CVE-2022-0801 Inappropriate implementation in HTML parser in Google Chrome prior to 99.0.4844.51 allowed a remote attacker to bypass XSS preventions via a crafted … Chrome 99.0.4844.51+ Fix from $1,6002023-01-02 MEDIUM 6.5 CVE-2022-2861 Inappropriate implementation in Extensions API in Google Chrome prior to 104.0.5112.101 allowed an attacker who convinced a user to install a malicio… Chrome 104.0.5112.101+ Fix from $1,6002022-09-26 MEDIUM 6.1 CVE-2022-1494 Insufficient data validation in Trusted Types in Google Chrome prior to 101.0.4951.41 allowed a remote attacker to bypass trusted types policy via a … Chrome 101.0.4951.41+ Fix from $1,6002022-07-26 MEDIUM 6.1 CVE-2022-1492 Insufficient data validation in Blink Editing in Google Chrome prior to 101.0.4951.41 allowed a remote attacker to inject arbitrary scripts or HTML v… Chrome 101.0.4951.41+ Fix from $1,6002022-07-26 MEDIUM 6.1 CVE-2021-37999 Insufficient data validation in New Tab Page in Google Chrome prior to 95.0.4638.69 allowed a remote attacker to inject arbitrary scripts or HTML in … Chrome 95.0.4638.69+ Fix from $1,6002021-11-23 MEDIUM 6.1 CVE-2020-16046 Script injection in iOSWeb in Google Chrome on iOS prior to 84.0.4147.105 allowed a remote attacker to execute arbitrary code via a crafted HTML page. Chrome 84.0.4147.105+ Fix from $1,6002021-01-14 MEDIUM 6.1 CVE-2020-16030 Insufficient data validation in Blink in Google Chrome prior to 87.0.4280.66 allowed a remote attacker to inject arbitrary scripts or HTML (UXSS) via… Chrome 87.0.4280.66+ Fix from $1,6002021-01-08 MEDIUM 6.5 CVE-2020-6558 Insufficient policy enforcement in iOSWeb in Google Chrome on iOS prior to 85.0.4183.83 allowed a remote attacker to bypass navigation restrictions v… Chrome 85.0.4183.83+ Fix from $1,6002020-09-21 MEDIUM 6.5 CVE-2020-6562 Insufficient policy enforcement in Blink in Google Chrome prior to 85.0.4183.83 allowed a remote attacker to leak cross-origin data via a crafted HTM… Chrome 85.0.4183.83+ Fix from $1,6002020-09-21 MEDIUM 6.1 CVE-2020-6535 Insufficient data validation in WebUI in Google Chrome prior to 84.0.4147.89 allowed a remote attacker who had compromised the renderer process to in… Chrome 84.0.4147.89+ Fix from $1,6002020-07-22 MEDIUM 6.1 CVE-2020-6470 Insufficient validation of untrusted input in clipboard in Google Chrome prior to 83.0.4103.61 allowed a local attacker to inject arbitrary scripts o… Chrome 83.0.4103.61+ Fix from $1,6002020-05-21 HIGH 8.8 CVE-2019-13741 Insufficient validation of untrusted input in Blink in Google Chrome prior to 79.0.3945.79 allowed a local attacker to bypass same origin policy via … Chrome 79.0.3945.79+ Fix from $1,9502019-12-10 MEDIUM 6.1 CVE-2018-6128 Incorrect URL parsing in WebKit in Google Chrome on iOS prior to 67.0.3396.62 allowed a remote attacker to perform domain spoofing via a crafted HTML… Chrome 67.0.3396.62+ Fix from $1,6002019-06-27 MEDIUM 6.1 CVE-2018-6145 Insufficient data validation in HTML parser in Google Chrome prior to 67.0.3396.62 allowed a remote attacker to bypass same origin policy via a craft… Chrome 67.0.3396.62+ Fix from $1,6002019-06-27 MEDIUM 6.5 CVE-2019-5778 A missing case for handling special schemes in permission request checks in Extensions in Google Chrome prior to 72.0.3626.81 allowed an attacker who… Chrome 72.0.3626.81+ Fix from $1,6002019-02-19 MEDIUM 6.1 CVE-2018-20071 Insufficiently strict origin checks during JIT payment app installation in Payments in Google Chrome prior to 70.0.3538.67 allowed a remote attacker … Chrome 70.0.3538.67+ Fix from $1,6002019-01-09 MEDIUM 6.1 CVE-2018-16084 The default selected dialog button in CustomHandlers in Google Chrome prior to 69.0.3497.81 allowed a remote attacker who convinced the user to perfo… Chrome 69.0.3497.81+ Fix from $1,6002019-01-09