Chromium
6 CVEs tracked since 2015. Since Jan 2015, none of them reached CISA KEV.
Chromium CVEs per month
| Month | CVEs | In CISA KEV |
|---|---|---|
| 2015-01 | 6 | 0 |
Products
The products that kept showing up in Chromium's monthly top three, with their CVEs summed over those months.
Latest CVEs
The 11 most recently published vulnerabilities affecting Chromium.
- CVE-2024-5197Integer overflow in libvpx9.1
- CVE-2023-6349Heap overflow in libvpx7.5
- CVE-2023-1999Use after free in libwebp5.3
- CVE-2023-1531Use after free in ANGLE in Google Chrome prior to 111.0.5563.110 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. (Chromium security severity: High)8.8
- CVE-2017-7000An issue was discovered in certain Apple products. iOS before 10.3.2 is affected. macOS before 10.12.5 is affected. The issue involves the "SQLite" component. It allows remote attackers to execute ...8.8
- CVE-2014-7943Skia, as used in Google Chrome before 40.0.2214.91, allows remote attackers to cause a denial of service (out-of-bounds read) via unspecified vectors.5.0
- CVE-2014-7942The Fonts implementation in Google Chrome before 40.0.2214.91 does not initialize memory for a data structure, which allows remote attackers to cause a denial of service or possibly have unspecifie...7.5
- CVE-2014-7941The SelectionOwner::ProcessTarget function in ui/base/x/selection_owner.cc in the UI implementation in Google Chrome before 40.0.2214.91 uses an incorrect data type for a certain length value, whic...5.0
- CVE-2014-7939Google Chrome before 40.0.2214.91, when the Harmony proxy in Google V8 is enabled, allows remote attackers to bypass the Same Origin Policy via crafted JavaScript code with Proxy.create and console...4.3
- CVE-2015-1346Multiple unspecified vulnerabilities in Google V8 before 3.30.33.15, as used in Google Chrome before 40.0.2214.91, allow attackers to cause a denial of service or possibly have other impact via unk...7.5
- CVE-2015-1205Multiple unspecified vulnerabilities in Google Chrome before 40.0.2214.91 allow attackers to cause a denial of service or possibly have other impact via unknown vectors.7.5
The record
- Peak rank
- #26 in Jan 2015
- Busiest month shown
- Jan 2015, 6 CVEs
- Months with a KEV entry
- 0 since Jan 2015
- Monthly snapshots
- 1 since 2015