Google Chrome vulnerabilities
2,117 known CVE vulnerabilities in Google Chrome, translated and rated.
- CVE-2023-4353High
Heap buffer overflow in ANGLE in Google Chrome prior to version 116.0.5845.96 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page.
- CVE-2023-4351High
A use after free vulnerability in the Network component of Google Chrome prior to version 116.0.5845.96 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page after eliciting a browser shutdown.
- CVE-2023-4074High
Use after free in Blink Task Scheduling in Google Chrome prior to version 115.0.5790.170 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page.
- CVE-2023-4073High
In Google Chrome on Mac prior to version 115.0.5790.170, an out of bounds memory access in ANGLE allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page.
- CVE-2023-4072High
In Google Chrome prior to version 115.0.5790.170, there is a vulnerability in WebGL that allows a remote attacker to potentially exploit heap corruption via a crafted HTML page.
- CVE-2023-4071High
Heap buffer overflow in Visuals in Google Chrome prior to version 115.0.5790.170 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page.
- CVE-2023-3740Medium
Insufficient validation of untrusted input in Themes in Google Chrome prior to 115.0.5790.98 allowed a remote attacker to potentially serve malicious content to a user via a crafted background URL.
- CVE-2023-3738Medium
Inappropriate implementation in Autofill in Google Chrome prior to version 115.0.5790.98 allowed a remote attacker to obfuscate security UI via a crafted HTML page.
- CVE-2023-3737Medium
Inappropriate implementation in Notifications in Google Chrome prior to version 115.0.5790.98 allowed a remote attacker to spoof the contents of media notifications via a crafted HTML page.
- CVE-2023-3735Medium
Inappropriate implementation in Web API Permission Prompts in Google Chrome prior to version 115.0.5790.98 allowed a remote attacker to obfuscate security UI via a crafted HTML page.
- CVE-2023-3734Medium
Inappropriate implementation in Picture In Picture in Google Chrome prior to version 115.0.5790.98 allowed a remote attacker to potentially spoof the contents of the Omnibox (URL bar) via a crafted HTML page.
- CVE-2023-3733Medium
Inappropriate implementation in WebApp Installs in Google Chrome prior to version 115.0.5790.98 allowed a remote attacker to potentially spoof the contents of the Omnibox (URL bar) via a crafted HTML page.
- CVE-2023-3732High
In Google Chrome prior to version 115.0.5790.98, an out of bounds memory access in Mojo allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page.
- CVE-2023-3730High
Use after free in Tab Groups in Google Chrome prior to version 115.0.5790.98 allows a remote attacker who convinced a user to engage in specific UI interactions to potentially exploit heap corruption via a crafted HTML page.
- CVE-2023-3598High
In Google Chrome prior to version 114.0.5735.90, there was a vulnerability related to out of bounds read and write in ANGLE, allowing a remote attacker to potentially exploit heap corruption via a crafted HTML page.
- CVE-2023-3422High
A use after free vulnerability in Guest View in Google Chrome prior to version 114.0.5735.198 allows an attacker who convinces a user to install a malicious extension to potentially exploit heap corruption via a crafted HTML page.
- CVE-2023-3214High
Use after free in Autofill payments in Google Chrome prior to version 114.0.5735.133 allows a remote attacker to potentially exploit heap corruption via a crafted HTML page.

