Google ChromeOS vulnerabilities

Newest CVEs

• CVE-2025-6044

  An Improper Access Control vulnerability in the Stylus Tools component of Google ChromeOS version 16238.64.0 on the garaged stylus devices allows a physical…

  Google · ChromeOS

  Medium6.1
• CVE-2025-6179

  ChromeOS Extension Disablement and Developer Mode Bypass via ExtHang3r and ExtPrint3r Exploits

  Google · ChromeOS

  Critical9.8
• CVE-2025-6177

  ChromeOS MiniOS Root Code Execution Bypass While Dev Mode Blocked

  Google · ChromeOS

  High7.4
• CVE-2025-2509

  Out-of-Bounds Read in Virglrenderer in ChromeOS 16093.57.0 allows a malicious guest VM to achieve arbitrary address access within the crosvm sandboxed process,…

  Google · ChromeOS

  High7.8
• CVE-2025-1290

  A race condition Use-After-Free vulnerability exists in the virtio_transport_space_update function within the Kernel 5.4 on ChromeOS. Concurrent allocation and…

  Google · ChromeOS

  High8.1
• CVE-2025-1568

  Access Control Vulnerability in Gerrit chromiumos project configuration in Google ChromeOS 16063.87.0 allows an attacker with a registered Gerrit account to…

  Google · ChromeOS

  High8.8
• CVE-2025-2073

  Out-of-Bounds Read in netfilter/ipset in Linux Kernel ChromeOS [6.1, 5.15, 5.10, 5.4, 4.19] allows a local attacker with low privileges to trigger an…

  Google · ChromeOS

  High8.8
• CVE-2025-1704

  ComponentInstaller Modification in ComponentInstaller in Google ChromeOS 15823.23.0 on Chromebooks allows enrolled users with local access to unenroll devices…

  Google · ChromeOS

  Medium6.5
• CVE-2025-1566

  DNS Leak in Native System VPN in Google ChromeOS Dev Channel on ChromeOS 16002.23.0 allows network observers to expose plaintext DNS queries via failure to…

  Google · ChromeOS

  High7.5
• CVE-2025-1122

  Out-Of-Bounds Write in TPM2 Reference Library in Google ChromeOS 15753.50.0 stable on Cr50 Boards allows an attacker with root access to gain persistence and…

  Google · ChromeOS

  Medium6.7