Skip to content

Known vulnerabilities in Google Chrome

Is your version affected?

CVE Summary Score Published
CVE-2025-10501 Use after free in WebRTC in Google Chrome prior to 140.0.7339.185 allowed a remote attacker to potentially exploit… 8.8 High Sep 24, 2025
CVE-2025-10500 Use after free in Dawn in Google Chrome prior to 140.0.7339.185 allowed a remote attacker to potentially exploit heap… 8.8 High Sep 24, 2025
CVE-2025-10585 Exploited Google Chromium V8 Type Confusion Vulnerability 8.8 High Sep 24, 2025
CVE-2025-10201 Inappropriate implementation in Mojo in Google Chrome on Android, Linux, ChromeOS prior to 140.0.7339.127 allowed a… 8.8 High Sep 10, 2025
CVE-2025-10200 Use after free in Serviceworker in Google Chrome on Desktop prior to 140.0.7339.127 allowed a remote attacker to… 8.8 High Sep 10, 2025
CVE-2025-9867 Inappropriate implementation in Downloads in Google Chrome on Android prior to 140.0.7339.80 allowed a remote attacker… 5.4 Medium Sep 3, 2025
CVE-2025-9866 Inappropriate implementation in Extensions in Google Chrome prior to 140.0.7339.80 allowed a remote attacker to bypass… 8.8 High Sep 3, 2025
CVE-2025-9865 Inappropriate implementation in Toolbar in Google Chrome on Android prior to 140.0.7339.80 allowed a remote attacker who… 5.4 Medium Sep 3, 2025
CVE-2025-9478 Use after free in ANGLE in Google Chrome prior to 139.0.7258.154 allowed a remote attacker to potentially exploit heap… 8.8 High Aug 26, 2025
CVE-2025-4609 Incorrect handle provided in unspecified circumstances in Mojo in Google Chrome on Windows prior to 136.0.7103.113… 9.6 Critical Aug 22, 2025
CVE-2025-9132 Out of bounds write in V8 in Google Chrome prior to 139.0.7258.138 allowed a remote attacker to potentially exploit heap… 8.8 High Aug 20, 2025
CVE-2025-8882 Use after free in Aura in Google Chrome prior to 139.0.7258.127 allowed a remote attacker who convinced a user to engage… 8.8 High Aug 13, 2025
CVE-2025-8901 Out of bounds write in ANGLE in Google Chrome prior to 139.0.7258.127 allowed a remote attacker to perform out of bounds… 8.8 High Aug 13, 2025
CVE-2025-8881 Inappropriate implementation in File Picker in Google Chrome prior to 139.0.7258.127 allowed a remote attacker who… 6.5 Medium Aug 13, 2025
CVE-2025-8879 Heap buffer overflow in libaom in Google Chrome prior to 139.0.7258.127 allowed a remote attacker to potentially exploit… 8.8 High Aug 13, 2025
CVE-2025-8880 Race in V8 in Google Chrome prior to 139.0.7258.127 allowed a remote attacker to execute arbitrary code inside a sandbox… 8.8 High Aug 13, 2025
CVE-2025-8583 Inappropriate implementation in Permissions in Google Chrome prior to 139.0.7258.66 allowed a remote attacker to perform… 4.3 Medium Aug 7, 2025
CVE-2025-8582 Insufficient validation of untrusted input in Core in Google Chrome prior to 139.0.7258.66 allowed a remote attacker… 4.3 Medium Aug 7, 2025
CVE-2025-8581 Inappropriate implementation in Extensions in Google Chrome prior to 139.0.7258.66 allowed a remote attacker who… 4.3 Medium Aug 7, 2025
CVE-2025-8580 Inappropriate implementation in Filesystems in Google Chrome prior to 139.0.7258.66 allowed a remote attacker to perform… 4.3 Medium Aug 7, 2025
CVE-2025-8579 Inappropriate implementation in Picture In Picture in Google Chrome prior to 139.0.7258.66 allowed a remote attacker who… 4.3 Medium Aug 7, 2025
CVE-2025-8577 Inappropriate implementation in Picture In Picture in Google Chrome prior to 139.0.7258.66 allowed a remote attacker who… 4.3 Medium Aug 7, 2025
CVE-2025-8576 Use after free in Extensions in Google Chrome prior to 139.0.7258.66 allowed a remote attacker to potentially exploit… 8.8 High Aug 7, 2025
CVE-2025-8578 Use after free in Cast in Google Chrome prior to 139.0.7258.66 allowed a remote attacker to potentially exploit heap… 8.8 High Aug 7, 2025
CVE-2025-8292 Use after free in Media Stream in Google Chrome prior to 138.0.7204.183 allowed a remote attacker to potentially exploit… 8.8 High Jul 30, 2025

Other Google products