Google ChromeOS

Name: Google ChromeOS
Brand: Google

productEU

A product tracked in the threat graph; the vulnerabilities below are known to affect it.

KEV-listed

EPSS ≥ 10%

critical

by severity

0critical0high0medium0low

updated 2026-10-27

vulnerabilities (12)

Related CVEs.

sort

ID	severity	EPSS	exploitable	patched	published	affected
CVE-2025-1122US	—	0.23% (14th)	Exploit	122.0.6261.132	2025-04-15	3 versions
CVE-2025-1568US	—	0.41% (35th)	—	16063.87.0	2025-04-16	2 versions
CVE-2025-1290US	—	0.28% (20th)	—	115.0.5790.182	2025-04-17	2 versions
CVE-2025-6179US	—OT elevated	0.22% (12th)	—	no fix	2025-06-16	≤ 16181.27.0
CVE-2025-2073US	—	0.22% (12th)	—	Kernal version 6.1	2025-04-16	2 versions
CVE-2025-1704US	—	0.20% (10th)	—	15823.23.0	2025-04-16	2 versions
CVE-2025-1566US	—	0.20% (9th)	—	16002.23.0	2025-04-16	2 versions
CVE-2025-1292US	—	0.19% (9th)	—	no fix	2025-04-15	≤ 122.0.6261.132
CVE-2025-1121US	—	0.14% (3rd)	—	15786.48.2	2025-03-07	2 versions
CVE-2025-6044US	—	0.12% (2nd)	—	16238.64.0	2025-07-07	2 versions
CVE-2025-2509US	—	0.11% (1st)	—	16093.57.0	2025-05-06	16093.57.0 → 16093.57.0
CVE-2025-6177US	—	0.08% (0th)	—	no fix	2025-06-16	≤ 16063.45.2

The flaw types (CWEs) most of these CVEs share.

CWE-269Improper Privilege Management3 CVEs
CWE-125Out-of-bounds Read2 CVEs
CWE-284Improper Access Control2 CVEs
CWE-416Use After Free2 CVEs
CWE-787Out-of-bounds Write2 CVEs
CWE-1319Improper Protection against Electromagnetic Fault Injection (EM-FI)1 CVEs
CWE-276Incorrect Default Permissions1 CVEs
CWE-287Improper Authentication1 CVEs

Which sources assert this record, and when.

scry

Products carry known vulnerabilities once they are exposed to the internet. See what is exposed on your perimeter with a free passive scan.