https://vulnogram.org/ Most recent CVEs assigned by ChromeOS Project (chromeos). https://vulnogram.org/seaview/icons/chromeos.png https://vulnogram.org/ Wed, 21 Oct 2026 07:00:07 GMT https://vulnogram.org/CVE-2025-6044 https://vulnogram.org/CVE-2025-6044 An Improper Access Control vulnerability in the Stylus Tools component of Google ChromeOS version 16238.64.0 on the garaged stylus devices allows a physical attacker to bypass the lock screen and access user files by removing the stylus while the dev… Medium Mon, 07 Jul 2025 18:58:45 GMT https://vulnogram.org/CVE-2025-6179 https://vulnogram.org/CVE-2025-6179 Permissions Bypass in Extension Management in Google ChromeOS 16181.27.0 on managed Chrome devices allows a local attacker to disable extensions and access Developer Mode, including loading additional extensions via exploiting vulnerabilities using t… Critical Network Exploitable Mon, 16 Jun 2025 16:56:37 GMT https://vulnogram.org/CVE-2025-6177 https://vulnogram.org/CVE-2025-6177 Privilege Escalation in MiniOS in Google ChromeOS (16063.45.2 and potentially others) on enrolled devices allows a local attacker to gain root code execution via exploiting a debug shell (VT3 console) accessible through specific key combinations duri… High Mon, 16 Jun 2025 16:43:44 GMT https://vulnogram.org/CVE-2025-2509 https://vulnogram.org/CVE-2025-2509 Out-of-Bounds Read in Virglrenderer in ChromeOS 16093.57.0 allows a malicious guest VM to achieve arbitrary address access within the crosvm sandboxed process, potentially leading to VM escape via crafted vertex elements data triggering an out-of-bou… High Tue, 06 May 2025 00:59:32 GMT https://vulnogram.org/CVE-2025-1290 https://vulnogram.org/CVE-2025-1290 A race condition Use-After-Free vulnerability exists in the virtio_transport_space_update function within the Kernel 5.4 on ChromeOS. Concurrent allocation and freeing of the virtio_vsock_sock structure during an AF_VSOCK connect syscall can occur be… High Network Exploitable Thu, 17 Apr 2025 00:13:35 GMT https://vulnogram.org/CVE-2025-1568 https://vulnogram.org/CVE-2025-1568 Access Control Vulnerability in Gerrit chromiumos project configuration in Google ChromeOS 16063.87.0 allows an attacker with a registered Gerrit account to inject malicious code into ChromeOS projects and potentially achieve Remote Code Execution an… High Wed, 16 Apr 2025 23:06:28 GMT https://vulnogram.org/CVE-2025-2073 https://vulnogram.org/CVE-2025-2073 Out-of-Bounds Read in netfilter/ipset in Linux Kernel ChromeOS [6.1, 5.15, 5.10, 5.4, 4.19] allows a local attacker with low privileges to trigger an out-of-bounds read, potentially leading to information disclosure High Wed, 16 Apr 2025 23:06:28 GMT https://vulnogram.org/CVE-2025-1704 https://vulnogram.org/CVE-2025-1704 ComponentInstaller Modification in ComponentInstaller in Google ChromeOS 15823.23.0 on Chromebooks allows enrolled users with local access to unenroll devices and intercept device management requests via loading components from the unencrypted statef… Medium Wed, 16 Apr 2025 23:06:28 GMT https://vulnogram.org/CVE-2025-1566 https://vulnogram.org/CVE-2025-1566 DNS Leak in Native System VPN in Google ChromeOS Dev Channel on ChromeOS 16002.23.0 allows network observers to expose plaintext DNS queries via failure to properly tunnel DNS traffic during VPN state transitions. High Network Exploitable Wed, 16 Apr 2025 23:06:27 GMT https://vulnogram.org/CVE-2025-1122 https://vulnogram.org/CVE-2025-1122 Out-Of-Bounds Write in TPM2 Reference Library in Google ChromeOS 15753.50.0 stable on Cr50 Boards allows an attacker with root access to gain persistence and Bypass operating system verification via exploiting the NV_Read functionality during the Cha… Medium Tue, 15 Apr 2025 19:51:23 GMT https://vulnogram.org/CVE-2025-1292 https://vulnogram.org/CVE-2025-1292 Out-Of-Bounds Write in TPM2 Reference Library in Google ChromeOS 122.0.6261.132 stable on Cr50 Boards allows an attacker with root access to gain persistence and bypass operating system verification via exploiting the NV_Read functionality during the… Medium Tue, 15 Apr 2025 19:46:26 GMT https://vulnogram.org/CVE-2025-1121 https://vulnogram.org/CVE-2025-1121 Privilege escalation in Installer and Recovery image handling in Google ChromeOS version 15786.48.2 on device allows an attacker with physical access to gain root code execution and potentially unenroll enterprise-managed devices via a specially craf… Medium Thu, 06 Mar 2025 23:49:03 GMT