Known vulnerabilities in Chrome OS - page 12

Vendor: Google
Software: Chrome OS
Software CPE: cpe:2.3:o:google:chromeos:*:*:*:*:*:*:*:*
Total vulnerabilities: 749
Public exploits: 35
Known exploited (KEV): 35
Highest CVSSv4 Score: 9.3

Breakdown by Severity Chart

Severity distribution of vulnerabilities affecting Chrome OS Chrome OS is affected by 749 known vulnerabilities: 30 critical, 441 high, 132 medium, 146 low Critical High Medium Low

Vulnerabilities (749)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU122771 - Improperly Implemented Security Check for Standard
CVE-2026-2323
CWE-358 Low
No
No
145.0.7632.154 12.02.2026 SB2026021244
SB2026021501
SB2026021806
and 10 more
#VU122770 - Improperly Implemented Security Check for Standard
CVE-2026-2322
CWE-358 Low
No
No
145.0.7632.154 12.02.2026 SB2026021244
SB2026021501
SB2026021855
and 10 more
#VU122765 - Improperly Implemented Security Check for Standard
CVE-2026-2317
CWE-358 High
No
No
145.0.7632.154 12.02.2026 SB2026021244
SB2026021501
SB2026021806
and 10 more
#VU122762 - Heap-based Buffer Overflow
CVE-2026-2314
CWE-122 High
No
No
144.0.7559.254, 145.0.7632.154 12.02.2026 SB2026021244
SB2026021501
SB2026021855
and 11 more
#VU122761 - Use After Free
CVE-2026-2313
CWE-416 High
No
No
145.0.7632.154 12.02.2026 SB2026021244
SB2026021501
SB2026021806
and 9 more
#VU121005 - Permissions, Privileges, and Access Controls
CVE-2026-0628
CWE-264 High
No
No
138.0.7204.301 06.01.2026 SB2026010658
SB2026010977
SB2026011001
and 2 more
#VU119046 - Improperly Implemented Security Check for Standard
CVE-2025-13632
CWE-358 Medium
No
No
138.0.7204.300 02.12.2025 SB2025120235
SB2025120504
SB2025120607
and 2 more
#VU119049 - Improper Validation of Generative AI Output
CVE-2025-13720
CWE-1426 Medium
No
No
138.0.7204.300 02.12.2025 SB2025120235
SB2025120504
SB2025120607
and 2 more
#VU114533 - Improper Locking
CVE-2025-38617
CWE-667 Low
No
No
138.0.7204.301, 138.0.7204.305, 138.0.7204.310 28.08.2025 SB2025082884
SB2025091305
SB20250918122
and 99 more
#VU114507 - Out-of-bounds read
CVE-2025-38616
CWE-125 Low
No
No
138.0.7204.301, 138.0.7204.305, 138.0.7204.310 28.08.2025 SB2025082856
SB20251015148
SB20251015149
and 42 more
#VU114500 - Use After Free
CVE-2025-38618
CWE-416 Low
No
No
138.0.7204.301, 138.0.7204.305, 138.0.7204.310 28.08.2025 SB2025082849
SB2025091305
SB20250918122
and 96 more
#VU113376 - Use After Free
CVE-2025-38477
CWE-416 Low
No
No
138.0.7204.301, 138.0.7204.305, 138.0.7204.310 29.07.2025 SB2025072925
SB2025081507
SB2025081508
and 120 more
#VU113101 - Use After Free
CVE-2025-38350
CWE-416 Low
No
No
138.0.7204.301, 138.0.7204.305, 138.0.7204.310 22.07.2025 SB2025072210
SB2025081507
SB20250818100
and 73 more
#VU112334 - Improper input validation
CVE-2025-38177
CWE-20 Low
No
No
138.0.7204.301, 138.0.7204.305, 138.0.7204.310 05.07.2025 SB2025070562
SB2025071791
SB2025071899
and 68 more
#VU111647 - Concurrent Execution using Shared Resource with Improper Synchronization ('Race Condition')
CVE-2025-38083
CWE-362 Low
No
No
138.0.7204.301, 138.0.7204.305, 138.0.7204.310 20.06.2025 SB20250620179
SB2025072897
SB2025072898
and 71 more
#VU110683 - Use After Free
CVE-2025-38000
CWE-416 Low
No
No
138.0.7204.301, 138.0.7204.305, 138.0.7204.310 10.06.2025 SB2025061009
SB2025070241
SB2025070243
and 108 more
#VU110681 - Use After Free
CVE-2025-38001
CWE-416 Low
Available
No
138.0.7204.301, 138.0.7204.305, 138.0.7204.310 10.06.2025 SB2025061007
SB2025070241
SB2025070243
and 100 more
#VU109282 - Use After Free
CVE-2025-37890
CWE-416 Low
No
No
138.0.7204.301, 138.0.7204.305, 138.0.7204.310 17.05.2025 SB2025051712
SB2025052403
SB2025061637
and 117 more
#VU108391 - Improper input validation
CVE-2025-37797
CWE-20 Low
No
No
138.0.7204.301, 138.0.7204.310 02.05.2025 SB20250502298
SB2025061222
SB2025061354
and 104 more
#VU104139 - Memory corruption
CVE-2025-21704
CWE-119 Low
No
No
145.0.7632.154 22.02.2025 SB2025022217
SB20250228103
SB20250228104
and 56 more


Showing elements 221 - 240 out of 749