CVE-2019-13665

CVE-2019-13665 affects Chromium/Google Chrome’s Blink component. Description: insufficient filtering in Blink allowed a crafted HTML page to bypass multiple file download protections. Impact: remote attacker could bypass download protections via a malicious page on affected Chrome/Chromium builds...

CVE-2019-13723

CVE-2019-13723 is a use-after-free vulnerability in Chromium/Google Chrome’s Web Bluetooth implementation. The issue affects Web Bluetooth handling in Chromium browser builds prior to version 78.0.3904.108, where a compromised renderer could trigger heap corruption via a crafted HTML page to pote...

CVE-2020-6397

CVE-2020-6397 is described as an insecure sharing implementation in Google Chrome/Chromium that allows a remote attacker to spoof the security UI via a crafted HTML page. Public records among connected sources confirm this as a content spoofing issue in the sharing component of Chromium/Chrome up...

CVE-2019-13710

CVE-2019-13710 affects Google Chrome/Chromium before 78.0.3904.70. Root cause: insufficient validation of untrusted input in downloads, enabling a remote attacker to bypass download restrictions via a crafted HTML page. Impact described as bypassing download protection; several advisories (Debian...

CVE-2020-6378

CVE-2020-6378 affects Google Chrome/Chromium’s speech recognition components, where a use-after-free in the speech recognizer can enable remote code execution. The vulnerability exists in Chromium/Chrome builds prior to version 79.0.3945.130, as indicated by the CVE description and multiple vendo...

CVE-2020-6416

CVE-2020-6416 affects Chromium-based Chromium/Google Chrome prior to 80.0.3987.87 in the streams component. The root cause is insufficient data validation in streams, enabling a remote attacker to potentially trigger heap corruption via a crafted HTML page. Public advisories (Debian, Arch Linux A...

CVE-2022-0790

The CVE-2022-0790 issue is a use-after-free in Chrome’s Cast UI affecting Google Chrome prior to 99.0.4844.51. The root cause is a memory management error that could be triggered when a user interacts with a crafted HTML page, potentially enabling a sandbox escape. Multiple connected sources (e.g...

CVE-2025-6554

CVE-2025-6554 is a Google Chromium V8 type-confusion vulnerability that could allow a remote attacker to perform arbitrary read/write via a crafted HTML page. Affected product scope is Google Chrome/Chromium-based engines; root cause is type confusion in V8. Chrome’s June 2025/Stable updates addr...

CVE-2019-13676

CVE-2019-13676 affects Chromium/Google Chrome and is described as an error in a certificate warning, contributing to domain spoofing scenarios. Public sources in the connected docs tie this to the Chromium/Chrome 78 updates that fixed this issue (e.g., CVEs tracked in Fedora/Debian advisories). T...

CVE-2020-6431

Chromium/Google Chrome (CVE-2020-6431) has an insufficient policy-enforcement check in full-screen mode that could allow a crafted HTML page to spoof security UI. Affected products include Chromium and Google Chrome prior to version 81.0.4044.92. Debian/Arch/Fedora advisories in the connected doc...

CVE-2020-6436

CVE-2020-6436 refers to a use-after-free in the window management component of the Chromium/Chrome browser prior to version 81.0.4044.92. Public sources in the connected documents consistently identify this as a use-after-free vulnerability in Chromium that could enable a remote attacker to trigg...

CVE-2020-6465

CVE-2020-6465 is a use-after-free vulnerability in Chrome/Chromium’s reader mode (on Chrome/Chromium before version 83.0.4103.61). The underlying issue is a use-after-free in the reader mode path that could allow a remote attacker who has compromised the renderer process to cause arbitrary code e...

CVE-2020-6495

CVE-2020-6495 refers to an insufficient policy enforcement vulnerability in Google Chrome’s Developer Tools prior to 83.0.4103.97. The issue, identified in multiple sources (CNVD-2020-32320; Arch Linux ASA-202006-3; Debian/ Gentoo advisories), enables a threat actor to exploit a crafted Chrome ex...

CVE-2022-1635

CVE-2022-1635 affects Google Chrome prior to 101.0.4951.64, where a use-after-free in Permission Prompts could allow a remote attacker to potentially exploit heap corruption via specific UI interactions. The issue is documented across multiple advisories, with Debian/Linux and Alpine/Linux tracke...

CVE-2023-1223

CVE-2023-1223 concerns insufficient policy enforcement in Autofill on Chromium-derived Chrome/Android builds prior to 111.0.5563.64, enabling a remote attacker to leak cross-origin data via a crafted HTML page. Connected feeds confirm the remediation: Chromium/Chrome update to 111.0.5563.64 (and ...

CVE-2019-13713

CVE-2019-13713 affects Google Chrome/Chromium prior to 78.0.3904.70, caused by insufficient policy enforcement in JavaScript that allowed cross-origin data leakage via a crafted HTML page. Public advisories confirm the issue and that it was fixed in 78.0.3904.70 (updates for Chrome/Chromium and d...

CVE-2020-6398

CVE-2020-6398 affects Google Chrome/Chromium components where the PDFium library contains an uninitialized data usage, enabling potential heap corruption via a crafted PDF file. Public sources in the connected docs consistently reference a fix in version 80.0.3987.87 (and newer) for Chrome/Chromi...

CVE-2020-6450

CVE-2020-6450: A use-after-free in Chromium/Google Chrome’s WebAudio before version 80.0.3987.162 could allow a remote attacker to potentially cause heap corruption via a crafted HTML page. The issue affects Chromium/Chrome prior to the fixed build and has been addressed upstream with version 80....

CVE-2020-6513

CVE-2020-6513 is documented in multiple sources as a heap buffer overflow in PDFium affecting Chromium/Google Chrome. Connected documents confirm it was among a set of Chromium vulnerabilities addressed in updates, with Debian's DSA-4824-1 noting fixes in Chromium 87.0.4280.88 for the buster rele...

CVE-2023-1228

CVE-2023-1228 is a Chromium-based Chrome vulnerability: Insufficient policy enforcement in Intents. Affects Google Chrome on Android prior to 111.0.5563.64 and allows a remote attacker to bypass navigation restrictions via a crafted HTML page. Mitigation in public advisories points to updating Ch...

CVE-2019-5756

CVE-2019-5756 is a use-after-free in the pdfium library used by Chromium/Chrome, caused by inappropriate memory management when caching. It could allow a remote attacker to execute arbitrary code inside the sandbox via a crafted PDF file. Affected products include Google Chrome/Chromium and the p...

CVE-2019-5763

CVE-2019-5763 is a vulnerability in Google's V8 engine used by Chrome/Chromium, arising from a failure to check error conditions. This could allow a remote attacker to trigger heap corruption via a crafted HTML page, with impact described as partial confidentiality/integrity/availability in the C...

CVE-2019-5777

The CVE-2019-5777 entry concerns Google Chrome’s Omnibox where an incorrect handling of a confusable character allowed a remote attacker to spoof the URL bar with a crafted domain name, affecting Chrome prior to version 72.0.3626.81. The underlying issue is in the Omnibox domain-name processing (...

CVE-2020-6382

CVE-2020-6382 affects Chromium/Chrome before version 80.0.3987.87, caused by a type confusion in the v8 JavaScript engine. This vulnerability can enable a remote attacker to potentially execute arbitrary code through a crafted HTML page, with heap corruption as a possible consequence. Publicly re...

CVE-2022-1310

CVE-2022-1310 affects Google Chrome: use-after-free in the regular expressions engine prior to 100.0.4896.88, potentially enabling heap corruption via a crafted HTML page. Remediation: upgrade Chrome to 100.0.4896.88 or newer (as reflected in multiple security advisories).

CVE-2019-13706

CVE-2019-13706 affects Chromium/Google Chrome PDFium: an out-of-bounds read in PDFium before 78.0.3904.70. This is reported as information disclosure in multiple sources. Impact is bounded to unauthorized data exposure via crafted PDFs. Remediation: upgrade to Chromium/Chrome 78.0.3904.70 or newe...

CVE-2019-5880

CVE-2019-5880 affects Blink in Google Chrome where insufficient policy enforcement allowed a remote attacker to leak cross-origin data via a crafted HTML page. Affected software is Chrome/Chromium built on Blink prior to the cited fix version; the publicly documented remediation is to upgrade to ...

CVE-2020-6388

CVE-2020-6388 is an out-of-bounds read in the WebAudio component of Chromium/Google Chrome, prior to version 80.0.3987.87. The issue could allow a remote attacker to trigger heap-related memory corruption via a crafted HTML page, potentially affecting memory safety and information exposure. Publi...

CVE-2020-6396

CVE-2020-6396 corresponds to an Inappropriate implementation in Skia used by Google Chrome before 80.0.3987.87, enabling a remote attacker to spoof the Omnibox (URL bar) via a crafted HTML page. Connected sources (Debian DSA-4638-1 and related advisories) confirm the issue resides in Skia and was...

CVE-2020-6406

CVE-2020-6406 is a use-after-free in the audio component of Google Chrome prior to 80.0.3987.87, enabling a remote attacker to potentially trigger heap corruption via a crafted HTML page. Affected product: Chrome/Chromium audio handling. Root cause: use-after-free in the audio path. Impact: remot...

CVE-2020-6448

CVE-2020-6448 is a use-after-free in the V8 JavaScript engine used by Google Chrome (Chromium). The issue could allow a remote attacker to trigger heap corruption via a crafted HTML page. Public details identify the vulnerability as part of the Chrome/Chromium 81.x timeframe, with fixes shipped i...

CVE-2019-13674

CVE-2019-13674 (Google Chrome) is a type-confusion in Chrome’s V8 engine related to induction-variable type handling (Infinity/NaN) inside a loop. The vulnerability could be triggered by constructing a loop that exploits NaN behavior, allowing crafted inputs to potentially trigger misinterpretati...

CVE-2019-5805

CVE-2019-5805 involves a use-after-free in the PDFium component of the Chromium/Google Chrome stack, prior to version 74.0.3729.108. The vulnerability could permit a remote attacker to potentially execute heap corruption via a crafted PDF file. Affected products include Google Chrome/Chromium (de...

CVE-2020-6461

CVE-2020-6461: A use-after-free in Chrome storage prior to 81.0.4044.129 could allow a renderer-compromised remote attacker to escape the sandbox via a crafted HTML page. Affected: Google Chrome (storage subsystem); root cause: use-after-free. Impact: sandbox escape; exploit status not detailed i...

CVE-2020-6485

CVE-2020-6485 affects Chromium/ Google Chrome and its media router component. The issue is described as insufficient validation of data in the media router, allowing a remote attacker (via a crafted HTML page) to bypass navigation restrictions after compromising the renderer. Public advisories no...

CVE-2020-6511

CVE-2020-6511 is a side-channel information leakage in Chrome/Chromium’s content security policy that could disclose cross-origin data via a crafted HTML page. Affected products: Google Chrome/Chromium before 84.0.4147.89. Impact: cross-origin data disclosure. Root cause: CSP implementation leaka...

CVE-2022-1481

CVE-2022-1481 is a Google Chrome vulnerability affecting the Mac Chrome browser prior to 101.0.4951.41, described as a use-after-free in the Sharing component that could lead to heap corruption when a user is enticed into specific interaction with a crafted HTML page. The connected Chrome release...

CVE-2026-3925

CVE-2026-3925 affects Google Chrome on Android (prior to 146.0.7680.71) due to an incorrect security UI in LookalikeChecks that enables UI spoofing via a crafted HTML page. The issue is tied to Chromium’s Lookalike UI handling; multiple advisories and Debian/Fedora updates reference Chromium/Chro...

CVE-2019-13683

CVE-2019-13683 affects Google Chrome prior to 77.0.3865.75, where insufficient policy enforcement in developer tools could allow a crafted HTML page to leak cross-origin data. The vulnerability is a cross-origin data disclosure via the browser’s developer tools surface, with network-vector exposu...

CVE-2019-13715

CVE-2019-13715 affects Google Chrome/Chromium: insufficient validation in Omnibox enables domain spoofing via IDN homographs. Public advisories show fixes in Chromium 78.0.3904.70+ (Chrome/Chromium updates; Debian notes 78.0.3904.70-1, Mageia references 78.0.3904.87). Remediation: update to a ver...

CVE-2019-13743

CVE-2019-13743 affects Google Chrome/Chromium prior to version 79.0.3945.79, where an incorrect security UI in external protocol handling could allow a remote attacker to spoof the security UI via a crafted HTML page. Impact is spoofing of security prompts; practical exploitation details are not ...

CVE-2019-5755

CVE-2019-5755 describes an issue in the V8 JavaScript engine used by Google Chrome. The vulnerability is caused by incorrect handling of negative zero in V8, and, when exploited via a crafted HTML page, could allow a remote attacker to perform arbitrary read/write. The description specifies the a...

CVE-2022-1638

CVE-2022-1638 is a Chromium/Google Chrome vulnerability: a heap buffer overflow in V8 Internationalization that can enable heap corruption via a crafted HTML page. The issue affects Chrome/Chromium builds prior to 101.0.4951.64 and is described as a remote-execution risk with high impact (C/H/I/A...

CVE-2019-13671

CVE-2019-13671 affects Google Chrome (Blink) prior to 77.0.3865.75. Description from connected sources confirms a UI spoofing issue where a crafted HTML page could spoof security UI. Remediation consistent with Chrome updates: upgrade to a version containing 77.0.3865.75 or newer (per referenced ...

CVE-2020-6484

CVE-2020-6484 refers to insufficient data validation in the ChromeDriver component of Google Chrome prior to 83.0.4103.61. Multiple connected sources confirm the flaw affects Chrome/Chromium and that exploitation could bypass navigation restrictions via a crafted request. The Debian security noti...

CVE-2021-21227

CVE-2021-21227 affects Google Chrome/Chromium, caused by insufficient data validation in the V8 JavaScript engine. A crafted HTML page can potentially trigger heap corruption, with impact described as remote code execution risk depending on context, and is tied to Chrome/Chromium versions before ...

CVE-2023-5486

The CVE-2023-5486 entry concerns Google Chrome/Chromium prior to 118.0.5993.70 where an inappropriate input handling implementation could let a remote attacker spoof the security UI via a crafted HTML page. The issue is classified with Low severity; the initial record notes a Chromium-based vulne...

CVE-2019-13663

CVE-2019-13663 : IDN spoofing in Chrome/Chromium Omnibox via IDN homographs. Root cause is spoofed domain rendering in Omnibox, enabling domain spoofing. Affected: Google Chrome/Chromium (Omnibox domain matching). Impact: potential user trust deception through a crafted domain name. Public detail...

CVE-2019-13702

CVE-2019-13702 affects Google Chrome on Windows with an insecure installer implementation that allowed privilege escalation via a crafted executable. The vulnerability originates from an inappropriate installer implementation, enabling local attackers to elevate privileges. Public advisories conf...

CVE-2019-13719

CVE-2019-13719 is a Chromium-based UI security issue in full-screen mode for Google Chrome (prior to 78.0.3904.70). It allowed a crafted HTML page to obscure the security UI, enabling potential spoofing or misleading UI, with root cause tied to the UI handling in full-screen mode. The vulnerabili...