Chrome Vulnerability Scanner
A lightweight, dependency-free defensive tool that checks the installed Google Chrome version against known vulnerabilities and produces an easy-to-understand visual HTML report.
Alat pertahanan ringan untuk memeriksa versi Google Chrome terhadap kerentanan yang diketahui, lalu menghasilkan laporan HTML visual yang mudah dipahami.
Features / Fitur
- Auto-detect Chrome version on macOS (or pass it with
--version)
- Checks against known CVEs (extensible vulnerability database)
- Visual HTML report with a clear VULNERABLE / SAFE status dashboard
- Educational Use-After-Free (CWE-416) visualization — conceptual memory diagram
- JSON output for CI / further analysis
- Bilingual — Indonesian (
chrome-vuln-checker.py) and English (chrome-vuln-checker-en.py) versions
Usage / Pemakaian
# Auto-detect Chrome version and produce HTML report (English)
python3 chrome-vuln-checker-en.py --html report_en.html
# Indonesian version
python3 chrome-vuln-checker.py --html report.html
# Pass version manually + save JSON
python3 chrome-vuln-checker-en.py --version 150.0.7871.125 --json result.json
# Output only to terminal
python3 chrome-vuln-checker-en.py
Example report (screenshot)

The HTML report includes
- Status banner — VULNERABLE (red) or SAFE (green)
- Summary cards — installed version, vulnerabilities checked, affected count
- Vulnerability detail blocks — CVSS, CWE class, safe version, impact, remediation
- Use-After-Free educational diagram — the 4-stage pattern (Allocate → Free → Use → Exploit)
Important notes / Catatan penting
- Honest disclaimer about memory addresses: the specific register/memory addresses for a real exploit are not published and depend on the runtime heap layout. The tool shows a conceptual memory diagram, not fabricated addresses.
- This tool checks the version against known vulnerabilities only. It does not guarantee full security.
- Alat ini hanya memeriksa versi terhadap kerentanan yang diketahui. Tidak menjamin keamanan penuh.
- Fixed version: 152.0.7977.65
- CVSS: 8.8 (High)
- Class: CWE-416
- Impact: arbitrary code execution inside the sandbox via a malicious extension
Chrome versions below 152.0.7977.65 are vulnerable — update immediately.