Skip to content

Known vulnerabilities in Google ChromeOS

Is your version affected?

CVE Summary Score Published
CVE-2025-6044 An Improper Access Control vulnerability in the Stylus Tools component of Google ChromeOS version 16238.64.0 on the… 6.1 Medium Jul 7, 2025
CVE-2025-6179 Permissions Bypass in Extension Management in Google ChromeOS 16181.27.0 on managed Chrome devices allows a… 9.8 Critical Jun 16, 2025
CVE-2025-6177 Privilege Escalation in MiniOS in Google ChromeOS (16063.45.2 and potentially others) on enrolled devices allows a local… 7.4 High Jun 16, 2025
CVE-2025-2509 Out-of-Bounds Read in Virglrenderer in ChromeOS 16093.57.0 allows a malicious guest VM to achieve arbitrary address… 7.8 High May 6, 2025
CVE-2025-1290 A race condition Use-After-Free vulnerability exists in the virtio_transport_space_update function within the Kernel 5.4… 8.1 High Apr 17, 2025
CVE-2025-2073 Out-of-Bounds Read in netfilter/ipset in Linux Kernel ChromeOS [6.1, 5.15, 5.10, 5.4, 4.19] allows a local attacker with… 8.8 High Apr 16, 2025
CVE-2025-1704 ComponentInstaller Modification in ComponentInstaller in Google ChromeOS 15823.23.0 on Chromebooks allows enrolled users… 6.5 Medium Apr 16, 2025
CVE-2025-1568 Access Control Vulnerability in Gerrit chromiumos project configuration in Google ChromeOS 16063.87.0 allows an attacker… 8.8 High Apr 16, 2025
CVE-2025-1566 DNS Leak in Native System VPN in Google ChromeOS Dev Channel on ChromeOS 16002.23.0 allows network observers to expose… 7.5 High Apr 16, 2025
CVE-2025-1122 Out-Of-Bounds Write in TPM2 Reference Library in Google ChromeOS 15753.50.0 stable on Cr50 Boards allows an attacker… 6.7 Medium Apr 15, 2025
CVE-2025-1292 Out-Of-Bounds Write in TPM2 Reference Library in Google ChromeOS 122.0.6261.132 stable on Cr50 Boards allows an… 6.7 Medium Apr 15, 2025
CVE-2025-1121 Privilege escalation in Installer and Recovery image handling in Google ChromeOS version 15786.48.2 on device allows… 6.8 Medium Mar 6, 2025

Other Google products