Skip to content
OpenAdvisories

Product · Google

ChromeOS

12 known vulnerabilities.

ChromeOS at a glance

Last 12 months
0
Critical · all time
1
Exploited · all time
0
Public exploit · all time
1
New vulnerabilities per month · last 12 months
0 1 1 December 2025: 0 vulnerabilities Dec 2025 January 2026: 0 vulnerabilities February 2026: 0 vulnerabilities March 2026: 0 vulnerabilities Mar April 2026: 0 vulnerabilities May 2026: 0 vulnerabilities June 2026: 0 vulnerabilities Jun July 2026: 0 vulnerabilities August 2026: 0 vulnerabilities September 2026: 0 vulnerabilities Sep October 2026: 0 vulnerabilities November 2026: 0 vulnerabilities
Show as table
MonthVulnerabilitiesCritical
Nov 202600
Oct 202600
Sep 202600
Aug 202600
Jul 202600
Jun 202600
May 202600
Apr 202600
Mar 202600
Feb 202600
Jan 202600
Dec 202500
Nov 202500
Oct 202500
Sep 202500
Aug 202500
Jul 202510
Jun 202521
May 202510
Apr 202570
Mar 202510
Feb 202500
Jan 202500
Dec 202400
All Critical High Medium Low Exploited only Public exploit

12 results · Feed

  • Medium 6.1
    CVE-2025-6044

    An Improper Access Control vulnerability in the Stylus Tools component of Google ChromeOS version 16238.64.0 on the gar…

    Google ChromeOS
  • Critical 9.8
    CVE-2025-6179

    ChromeOS Extension Disablement and Developer Mode Bypass via ExtHang3r and ExtPrint3r Exploits

    Permissions Bypass in Extension Management in Google ChromeOS 16181.27.0 on managed Chrome devices allows a local attacker to disable extensions and access Developer Mode, including loading additional extensions via exploiting vulnerabilities using the ExtHan…

    Google ChromeOS
  • High 7.4
    CVE-2025-6177

    ChromeOS MiniOS Root Code Execution Bypass While Dev Mode Blocked

    Privilege Escalation in MiniOS in Google ChromeOS (16063.45.2 and potentially others) on enrolled devices allows a local attacker to gain root code execution via exploiting a debug shell (VT3 console) accessible through specific key combinations during develo…

    Google ChromeOS
  • High 7.8
    CVE-2025-2509

    Out-of-Bounds Read in Virglrenderer in ChromeOS 16093.57.0 allows a malicious guest VM to achieve arbitrary address acc…

    Google ChromeOS
  • High 8.1
    CVE-2025-1290

    A race condition Use-After-Free vulnerability exists in the virtio_transport_space_update function within the Kernel 5.…

    Google ChromeOS
  • High 8.8
    CVE-2025-1568

    Access Control Vulnerability in Gerrit chromiumos project configuration in Google ChromeOS 16063.87.0 allows an attacke…

    Google ChromeOS
  • Medium 6.5
    CVE-2025-1704

    ComponentInstaller Modification in ComponentInstaller in Google ChromeOS 15823.23.0 on Chromebooks allows enrolled user…

    Google ChromeOS
  • High 8.8
    CVE-2025-2073

    Out-of-Bounds Read in netfilter/ipset in Linux Kernel ChromeOS [6.1, 5.15, 5.10, 5.4, 4.19] allows a local attacker wit…

    Google ChromeOS
  • High 7.5
    CVE-2025-1566

    DNS Leak in Native System VPN in Google ChromeOS Dev Channel on ChromeOS 16002.23.0 allows network observers to expose …

    Google ChromeOS
  • Medium 6.7
    CVE-2025-1122 Public exploit

    Out-Of-Bounds Write in TPM2 Reference Library in Google ChromeOS 15753.50.0 stable on Cr50 Boards allows an attacker wi…

    Google ChromeOS
  • Medium 6.7
    CVE-2025-1292

    TPM2 Out-Of-Bounds Write Leading to Potential Operating System Verification Bypass in ChromeOS

    Out-Of-Bounds Write in TPM2 Reference Library in Google ChromeOS 122.0.6261.132 stable on Cr50 Boards allows an attacker with root access to gain persistence and bypass operating system verification via exploiting the NV_Read functionality during the Challeng…

    Google ChromeOS
  • Medium 6.8
    CVE-2025-1121

    Privilege escalation in Installer and Recovery image handling in Google ChromeOS version 15786.48.2 on device allows an…

    Google ChromeOS