CVE-2026-8555

CVE-2026-8555 pertains to a use-after-free in GTK used by Google Chrome on Windows, affecting Chromium GTK integration. The vulnerability arises in GTK components when handling crafted HTML pages, enabling a remote attacker to execute arbitrary code. The issue is reported for Chrome builds prior ...

CVE-2026-9884

CVE-2026-9884 describes a Use-after-Free in the Google Chrome browser on macOS that allows remote code execution via a crafted HTML page. Affected product/component: Google Chrome (Mac), Chromium-based browser. Root cause: use-after-free in the Browser object. Impact: arbitrary code execution wit...

CVE-2026-9916

CVE-2026-9916 affects the ANGLE component in Google Chrome prior to 148.0.7778.216. The issue is an out-of-bounds write in ANGLE that could allow a remote attacker who has already compromised the renderer process to attempt a sandbox escape via a crafted HTML page. The vulnerability is documented...

CVE-2026-9920

Technical details such as affected products, components, and fixes are not publicly available in the provided documents for CVE-2026-9920; monitor for updates.

CVE-2026-9945

Google Chrome (Chromium) for Windows is affected by a use-after-free in the Media component, allowing remote code execution inside the Chrome sandbox via a crafted HTML page. Affected versions are prior to 148.0.7778.216. Upstream bug 503565293 is cited, and the Chrome stable update referenced in...

CVE-2026-9960

The CVE-2026-9960 entry concerns an integer overflow in PDFium within Google Chrome prior to 148.0.7778.216. A remote attacker who gains renderer process access could trigger arbitrary code execution inside the sandbox by processing a crafted font file. Affected software: Chromium-based Chrome wi...

CVE-2026-9964

Use-after-free in Bluetooth within Google Chrome for Mac before 148.0.7778.216. An attacker can coerce a user to install a malicious extension, enabling arbitrary code execution via a crafted Chrome Extension. Affected software: Google Chrome on macOS; root cause: use-after-free in the Bluetooth ...

CVE-2026-9972

Summary: CVE-2026-9972 affects Google Chrome on macOS, specifically the Gamepad component. The issue is described as an uninitialized use in the Gamepad code, which could allow a remote attacker who has already compromised the renderer process to escape the Chrome sandbox via a crafted HTML page....

CVE-2011-1452

CVE-2011-1452 affects Google Chrome prior to 11.0.696.57. The vulnerability allows a user-assisted attacker to spoof the URL bar via a redirect and a manual reload, enabling potential confusion or phishing-like tricks. The issue is explicitly tied to the URL bar spoofing vector in Chrome’s naviga...

CVE-2011-2793

Google Chrome is vulnerable to a use-after-free in media selectors affecting Chrome up to version 13.0.782.107. The CVE entry CVE-2011-2793 describes that remote attackers could cause a denial of service or potentially induce other unspecified effects. Connected documents corroborate a family of ...

CVE-2011-2796

The CVE-2011-2796 entry concerns a Use-after-free vulnerability in Skia used by Google Chrome prior to version 13.0.782.107. The underlying issue is in Skia, and the impact is described as a remote cause for a denial of service or possibly other unspecified effects via unknown vectors. The affect...

CVE-2014-3201

The CVE-2014-3201 issue affects Blink in Google Chrome for Android prior to 38.0.2125.102, where core/rendering/compositing/RenderLayerCompositor.cpp does not properly handle a specific IFRAME overflow condition. This can allow remote attackers to spoof content by presenting a crafted web site th...

CVE-2014-9689

CVE-2014-9689 : Chrome up to 41.0.2272.76 may expose high‑rate gyroscope data via content/renderer/device_sensors/device_orientation_event_pump.cc, enabling remote sites to infer ambient speech signals through ondeviceorientation events. The vulnerability stems from insufficient restriction of de...

CVE-2025-12433

The CVE-2025-12433 entry concerns Google Chrome/Chromium's V8 engine. Affected software: Google Chrome (Chromium base) prior to 142.0.7444.59. Root cause: inappropriate implementation in V8 enabling out-of-bounds memory access via a crafted HTML page. Impact: remote attacker could trigger memory ...

CVE-2025-12436

CVE-2025-12436 describes a policy bypass in Google Chrome extensions prior to 142.0.7444.59. The issue allows an attacker, by getting a user to install a malicious extension, to potentially access sensitive data from process memory via the extension mechanism. Documents consistently reference a C...

CVE-2025-12438

CVE-2025-12438: Use-after-free in Ozone within Google Chrome on Linux/ChromeOS prior to 142.0.7444.59 allows remote object corruption via a crafted HTML page. Connected sources confirm the Chrome/Chromium Ozone use-after-free issue with a fixed version at 142.0.7444.162 (and Chromium builds aroun...

CVE-2026-10896

CVE-2026-10896 affects Chrome for iOS (Google Chrome on iOS) prior to 149.0.7827.53. The vulnerability is a use-after-free in handling crafted HTML pages, enabling a remote attacker to execute arbitrary code. The Google Chrome 149 stable release (Chrome 149.0.7827.53 for Linux/Windows/macOS; iOS ...

CVE-2026-10904

CVE-2026-10904 : In Google Chrome, an inappropriate implementation in the V8 engine prior to version 149.0.7827.53 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML page. The issue is listed with a Chromium severity of High and is mitigated by upgrading to ...

CVE-2026-10919

The CVE-2026-10919 entry is for a Use-after-Free vulnerability in ANGLE that affects Google Chrome prior to version 149.0.7827.53. The issue could allow a remote attacker who has already compromised the renderer process to potentially escape the Chrome sandbox via a crafted HTML page, as reported...

CVE-2026-10933

CVE-2026-10933 is a use-after-free in Audio in Google Chrome on Windows. The vulnerability could allow a compromised renderer process to escape the sandbox via a crafted HTML page. Affected software is Google Chrome on Windows; the issue is tied to the Audio component and is described as high sev...

CVE-2026-10939

Chrome WebRTC use-after-free vulnerability (CVE-2026-10939) allows remote code execution in sandbox via a crafted HTML page on Chrome versions prior to 149.0.7827.53. The issue is caused by a use-after-free in WebRTC. A fix is available in Chrome 149.0.7827.53 and later; users should update to th...

CVE-2026-10949

Summary of CVE-2026-10949 : A heap buffer overflow in Chrome’s Video component allows a remote attacker who has already compromised the renderer process to potentially escape the sandbox via a crafted HTML page. Affected product is Google Chrome (before build 149.0.7827.53). The vulnerability is ...

CVE-2026-10963

CVE-2026-10963 : Integer overflow in V8 (Chromium) affects Google Chrome before 149.0.7827.53. A crafted HTML page could allow a remote attacker to execute arbitrary code inside the browser sandbox. Affected component: V8 in Chrome; root cause: integer overflow. Impact: high, including potential ...

CVE-2026-11025

CVE-2026-11025 is a Chromium/Google Chrome (Android) vulnerability: insufficient policy enforcement in Navigation allows bypassing the Content Security Policy via a crafted HTML page. The issue affects Chrome versions prior to 149.0.7827.53; multiple connected advisories note fixes in 149.0.7827....

CVE-2026-11060

CVE-2026-11060 corresponds to a use-after-free in the Media component of Google Chrome on Windows, prior to version 149.0.7827.53. The underlying issue can allow a remote attacker to execute arbitrary code within the Chrome sandbox via a crafted HTML page. The vulnerability is tied to Chromium co...

CVE-2026-11073

CVE-2026-11073 describes a use-after-free in WebGL in Google Chrome prior to 149.0.7827.53 , enabling a remote attacker to obtain potentially sensitive information from process memory via a crafted HTML page. Affected software: Google Chrome (WebGL). Root cause: use-after-free in WebGL. Impact: c...

CVE-2026-11081

CVE-2026-11081 describes an insecure implementation in Canvas within Google Chrome prior to 149.0.7827.53 that allowed a remote attacker to bypass the same-origin policy via a crafted HTML page. The issue affects Chrome’s Canvas handling and is rated with CVSS v3.1: High impact on integrity, no c...

CVE-2026-11122

CVE-2026-11122 affects Google Chrome (Chromium) before 149.0.7827.53. The issue is an Inappropriate implementation in Keyboard, enabling a remote attacker to inject arbitrary scripts/HTML (UXSS) via a crafted HTML page. Affected product/versions include Chrome/Chromium across platforms; Debian ad...

CVE-2026-11123

CVE-2026-11123 concerns an Uninitialized Use in ANGLE within Google Chrome/Chromium prior to version 149.0.7827.53. The issue could allow a remote attacker to obtain potentially sensitive information from process memory via a crafted HTML page (impact: information disclosure). Connected documents...

CVE-2026-11130

CVE-2026-11130 affects Google Chrome on all platforms, with a use-after-free in Media that allows remote code execution inside the sandbox via a crafted HTML page. Affects Chrome versions prior to 149.0.7827.53; the vulnerability’s impact is described as high (CVE metrics show CVSSv3.1: AV:N/AC:L...

CVE-2026-11157

Summary: CVE-2026-11157 is a UXSS vulnerability in Google Chrome’s Accessibility feature exploitable via a crafted Chrome Extension. The issue occurs in Chrome builds prior to 149.0.7827.53 and could allow an attacker, by convincing a user to install a malicious extension, to inject arbitrary scr...

CVE-2026-11162

CVE-2026-11162 affects Google Chrome via an inappropriate CSS implementation in Chromium, enabling a remote attacker to leak cross-origin data through a crafted HTML page. Impact is described as Medium (CVSS 3.1: 4.3). Affected versions are Chrome prior to 149.0.7827.53; mitigation is to upgrade ...

CVE-2026-11179

CVE-2026-11179 concerns Google Chrome/Chromium: an inappropriate ORB implementation allowed a remote attacker to bypass site isolation via a crafted HTML page. Affected software: Chrome prior to version 149.0.7827.53. The impact is described as bypassing site isolation, enabling potential cross-o...

CVE-2026-11229

CVE-2026-11229 affects Google Chrome (Enterprise) with versions older than 149.0.7827.53. The issue is caused by an inappropriate implementation in Chrome’s Enterprise handling that enables a local attacker with physical access to escalate privileges. The vulnerability is classified as low severi...

CVE-2026-11231

The vulnerability CVE-2026-11231 affects Google Chrome on macOS, caused by an inappropriate implementation in Safe Browsing. A remote attacker could execute arbitrary code by convincing a user to open a malicious file, with the issue present in versions prior to 149.0.7827.53. Impact is described...

CVE-2026-11242

The CVE refers to Google Chrome before version 149.0.7827.53, where insufficient validation of untrusted input in Plugins could allow a remote attacker who had compromised the renderer process to leak cross-origin data via a crafted HTML page. The vulnerability is tied to the Plugins component; i...

CVE-2026-11246

CVE-2026-11246 affects Google Chrome’s IndexedDB usage in the renderer, due to insufficient input validation. The issue allows a remote attacker who has compromised the renderer process to bypass the same-origin policy via a crafted HTML page. Affected behavior is limited to Chrome versions prior...

CVE-2026-11635

Summary: CVE-2026-11635 is a use-after-free in Chrome’s Bluetooth stack on macOS prior to 149.0.7827.103. If a renderer process is already compromised, this flaw could enable a sandbox escape via a crafted HTML page. Affected product/version: Google Chrome on macOS, before version 149.0.7827.103....

CVE-2026-12447

CVE-2026-12447 affects Google Chrome/WebRTC (Chromium). The issue is a heap buffer overflow in WebRTC that allows remote code execution via a crafted HTML page, affecting builds prior to 149.0.7827.155. Impact is a sandbox escape/total compromise of the browser process, per the cited descriptions...

CVE-2026-13793

Summary: CVE-2026-13793 describes insufficient policy enforcement in SVG handling within Google Chrome prior to 150.0.7871.47. The root cause is faulty SVG policy enforcement, which allowed a remote attacker to leak cross-origin data through a specially crafted HTML page. Impact (as stated): Cros...

CVE-2026-13794

CVE-2026-13794 affects Google Chrome on Windows before 150.0.7871.47. The issue stems from insufficient validation of untrusted input in WebAppInstalls, enabling a remote attacker to trigger arbitrary code execution when a user is persuaded to perform specific UI gestures on a crafted HTML page. ...

CVE-2026-13800

CVE-2026-13800 : In Google Chrome, an inappropriate implementation in the Windows Updater allows a local attacker to escalate privileges via a malicious file. Affected product is Google Chrome Updater on Windows prior to version 150.0.7871.47. Root cause as described is an Updater implementation ...

CVE-2026-13827

This CVE affects Google Chrome on macOS, specifically the Updater component. A use-after-free flaw in the Updater allows a local attacker to escalate privileges via a malicious file, with impact rated High. The vulnerability is associated with Chrome versions before 150.0.7871.47. Mitigation is t...

CVE-2026-13838

CVE-2026-13838 affects Google Chrome (Chromium-based) due to an inappropriate CSS implementation that permits bypassing the same-origin policy via a crafted HTML page. Affects versions prior to 150.0.7871.47; impact is a policy bypass (high severity). No exploit details or in-the-wild data provid...

CVE-2026-13841

CVE-2026-13841 affects Google Chrome components using Skia . The issue is an integer overflow in Skia that, on Chrome builds prior to 150.0.7871.47 , could allow a remote attacker who already compromised the renderer process to perform a sandbox escape via a crafted HTML page . The explicit impac...

CVE-2026-13908

CVE-2026-13908 : Insufficient validation of untrusted input in the Omnibox of Google Chrome on iOS (before 150.0.7871.47) could allow a remote attacker to bypass navigation restrictions when a user performs specific UI gestures, via malicious network traffic. The vulnerability is documented with ...

CVE-2026-13925

CVE-2026-13925 concerns an inappropriate implementation in Chrome’s Downloads on Windows, prior to version 150.0.7871.47. The vulnerability enables remote code execution when a user is convinced to perform specific UI gestures on a crafted HTML page. Affected software is Google Chrome (Windows); ...

CVE-2026-13986

The vulnerability CVE-2026-13986 affects Google Chrome on ChromeOS (Media UI) and is triggered by a crafted HTML page that enables UI spoofing. The issue is described as an inappropriate implementation in Media UI prior to version 150.0.7871.47. An attacker must convince a user to perform specifi...

CVE-2026-14002

CVE-2026-14002 affects Google Chrome Geolocation in Chromium, prior to 150.0.7871.47. Root cause is an inappropriate Geolocation implementation that lets a remote attacker who has compromised the renderer process perform UI spoofing via a crafted HTML page. Impact is UI spoofing with possible hig...

CVE-2026-14007

CVE-2026-14007 affects Google Chrome prior to 150.0.7871.47. The root cause is insufficient policy enforcement in PermissionsPolicy, allowing a remote attacker to bypass navigation restrictions via a crafted HTML page. Exploitation status is not described in the provided documents. The vulnerabil...