Skip to content

Vendor

chromedriver project vulnerabilities

2 published CVES affecting chromedriver project, from public sources (CVE.org, NVD, CISA KEV, FIRST EPSS, OSV).

Total
2
Critical
0
High
2
Medium
0
Low
0
Unscored
0
CISA KEV
0
Atom feed of chromedriver project alerts

Products

Latest chromedriver project CVEs

Newest publication first

  1. CVE-2023-26156 chromedriver Command Injection vulnerability

    Published
    HighCVSS 7.5 EPSS 2.7%

    Versions of the package chromedriver before 119.0.1 are vulnerable to Command Injection when setting the chromedriver.path to an arbitrary system binary. This could lead to unauthorized access and potentially malicious actions on the host system. Note: An attacker must have acces...

  2. CVE-2016-10579 chromedriver Downloads Resources over HTTP

    Published
    HighCVSS 8.1 EPSS 1.1%

    Chromedriver is an NPM wrapper for selenium ChromeDriver. Chromedriver before 2.26.1 downloads binary resources over HTTP, which leaves it vulnerable to MITM attacks. It may be possible to cause remote code execution (RCE) by swapping out the requested binary with an attacker con...

Sources: CVE.org, NVD, CISA KEV, FIRST EPSS, OSV and public exploit-reference metadata. Product matching comes from the published CVE records. A proof-of-concept means public code exists; it is not evidence of exploitation.