CVE-2026-9960

The CVE-2026-9960 entry concerns an integer overflow in PDFium within Google Chrome prior to 148.0.7778.216. A remote attacker who gains renderer process access could trigger arbitrary code execution inside the sandbox by processing a crafted font file. Affected software: Chromium-based Chrome wi...

CVE-2010-2109

CVE-2010-2109 refers to an unspecified vulnerability in Google Chrome before 5.0.375.55 that allows user-assisted remote attackers to cause a denial of service (memory error) or possibly other impact via vectors related to the drag + drop functionality. Affected software is Google Chrome pre-5.0....

CVE-2010-2899

CVE-2010-2899 affects Google Chrome up to version 5.0.375.125 in the layout implementation. The vulnerability is described as an unspecified issue that allows remote attackers to obtain sensitive data from process memory via unknown vectors. The connected documents confirm the affected product an...

CVE-2011-1192

Google Chrome on Linux before 10.0.648.127 is affected by CVE-2011-1192 due to improper handling of Unicode ranges, enabling remote attackers to cause a denial of service via an out-of-bounds read. Affected component is Chrome’s Unicode range handling; impact is partial availability downtime. The...

CVE-2011-1201

CVE-2011-1201 affects the WebKit context implementation used by Google Chrome prior to version 10.0.648.127. The vulnerability allows remote attackers to cause a denial of service or potentially other unspecified impact via vectors leading to a stale pointer. The connected documents confirm the a...

CVE-2011-1796

CVE-2011-1796 is a use-after-free in WebKit’s FrameView.cpp (WebCore) affecting Google Chrome up to version 11.0.696.65. The flaw allows a remote attacker to crash the browser (DoS) or potentially cause other impact via crafted JavaScript that calls removeChild while interacting with a FRAME elem...

CVE-2011-2332

CVE-2011-2332 affects Google Chrome (V8 engine) versions prior to 12.0.742.91. The vulnerability is a Same Origin Policy bypass in the V8 engine, allowing remote attackers to bypass SOP via unspecified vectors. The NVD/OpenVAS references confirm a cross-origin bypass in V8; Chrome 12.0.742.91 con...

CVE-2011-2782

Google Chrome on Linux (pre-13.0.782.107) is affected by CVE-2011-2782 due to a drag-and-drop file permission handling flaw that could allow a user‑assisted remote attacker to bypass access restrictions via unspecified vectors. The issue is addressed in Chrome 13.0.782.107 (Stable Channel update)...

CVE-2011-2793

Google Chrome is vulnerable to a use-after-free in media selectors affecting Chrome up to version 13.0.782.107. The CVE entry CVE-2011-2793 describes that remote attackers could cause a denial of service or potentially induce other unspecified effects. Connected documents corroborate a family of ...

CVE-2011-3875

CVE-2011-3875 affects Google Chrome prior to 15.0.874.102. The vulnerability stems from improper handling of drag-and-drop operations on URL strings, enabling a user-assisted attacker to spoof the URL bar via unspecified vectors. The OpenVAS entries corroborate multiple Chrome-related CVEs around...

CVE-2011-3956

The connected documents confirm that CVE-2011-3956 is part of a Chromium/Chromium-derived browser vulnerability set (Chromium/Chrome family). The Gentoo GLSA entry ties CVE-2011-3956 to “Chromium: Multiple vulnerabilities” with impact including potential remote code execution, denial of service, ...

CVE-2011-3962

CVE-2011-3962 affects Google Chrome prior to version 17.0.963.46. The issue arises from improper path clipping, enabling a remote attacker to trigger an out-of-bounds read via unspecified vectors, resulting in a denial of service. The available documents reference the Chrome 17.0.963.46 milestone...

CVE-2011-3964

CVE-2011-3964 affects Google Chrome before 17.0.963.46, where the drag‑and‑drop UI implementation could allow an attacker to spoof the URL bar via unspecified vectors. The vulnerability is part of a set of Chromium issues, with high severity in multiple advisories. Mitigation present in public ad...

CVE-2011-3967

CVE-2011-3967 is associated with Google Chrome/Chromium vulnerabilities described in the GLSA/Gentoo advisories as part of a set titled Chromium: Multiple vulnerabilities. The public records indicate affected Chrome/Chromium versions prior to 17.0.963.46 and recommend upgrading to Chromium 17.0.9...

CVE-2012-2827

CVE-2012-2827 describes a use-after-free in the Mac OS X UI of Google Chrome prior to 20.0.1132.43. The vulnerability can allow a denial of service and possibly other unspecified impacts via unknown vectors. The NVD assessment lists a high base score of 7.5 (AV:N/AC:L/Au:N/C:P/I:P/A:P). Public re...

CVE-2012-2833

CVE-2012-2833 : Google Chrome contains a buffer overflow in the JS API for the PDF functionality that, in Chrome versions prior to 20.0.1132.43, can be triggered remotely to cause a denial of service and potentially other impact. The vulnerability stems from the PDF handling code in the JavaScrip...

CVE-2025-11215

CVE-2025-11215 refers to an off-by-one error in the V8 engine of Google Chrome/Chromium that allows a remote attacker to cause an out-of-bounds memory read via a crafted HTML page. The documented impact is a medium severity (CVSS 3.1: 4.3) with network attack vector, no privileges, and user inter...

CVE-2025-12439

CVE-2025-12439 affects Google Chrome (Windows) prior to 142.0.7444.59 due to an inappropriate implementation in App-Bound Encryption. A local attacker could obtain potentially sensitive information from a process’s memory via a malicious file. This is a Chromium-based issue affecting Chrome/Chrom...

CVE-2026-10919

The CVE-2026-10919 entry is for a Use-after-Free vulnerability in ANGLE that affects Google Chrome prior to version 149.0.7827.53. The issue could allow a remote attacker who has already compromised the renderer process to potentially escape the Chrome sandbox via a crafted HTML page, as reported...

CVE-2026-10952

Chrome for iOS is affected by a use-after-free causing heap corruption via a crafted HTML page. Affected product/version: Google Chrome on iOS prior to 149.0.7827.53. Impact: remote attacker could potentially exploit the heap corruption. Severity: High (CVSS 3.1 base 8.8). Mitigation: update to v...

CVE-2026-10981

CVE-2026-10981 affects Google Chrome (Codecs component). The root cause is insufficient validation of untrusted input in Codecs, prior to version 149.0.7827.53. An attacker who compromised the renderer process could leak cross-origin data via a crafted video file, per the provided descriptions. T...

CVE-2026-10991

CVE-2026-10991 is a use-after-free in V8 affecting Google Chrome prior to 149.0.7827.53. The vulnerability could allow a remote attacker to execute arbitrary code inside the browser sandbox if a user is tricked into performing specific UI gestures on a crafted HTML page. This is tied to the V8 en...

CVE-2026-11006

This CVE (CVE-2026-11006) affects Google Chrome prior to 149.0.7827.53, specifically the Dawn component. The root cause is an out-of-bounds read in Dawn, exploitable via a crafted HTML page by a remote attacker. The vulnerability impacts Chrome on desktop environments and is addressed by the Chro...

CVE-2026-11045

CVE-2026-11045 describes an vulnerability in Google Chrome's GPU pathway where there is insufficient validation of untrusted input in the GPU stack. A remote attacker who already compromised the renderer process could read potentially sensitive data from process memory by presenting a crafted HTM...

CVE-2026-11051

CVE-2026-11051 describes an out-of-bounds read in ANGLE used by Google Chrome on Linux, enabling a remote attacker to potentially read sensitive process memory via a crafted HTML page. Affected component: ANGLE within Chrome. Underlying cause: out-of-bounds access in ANGLE handling of HTML conten...

CVE-2026-11081

CVE-2026-11081 describes an insecure implementation in Canvas within Google Chrome prior to 149.0.7827.53 that allowed a remote attacker to bypass the same-origin policy via a crafted HTML page. The issue affects Chrome’s Canvas handling and is rated with CVSS v3.1: High impact on integrity, no c...

CVE-2026-11105

This CVE describesInsufficient validation of untrusted input in WebUI in Google Chrome prior to 149.0.7827.53. A remote attacker that already compromised the renderer process could leak cross-origin data through a crafted HTML page. Affected software is Google Chrome (WebUI component); impact is ...

CVE-2026-11130

CVE-2026-11130 affects Google Chrome on all platforms, with a use-after-free in Media that allows remote code execution inside the sandbox via a crafted HTML page. Affects Chrome versions prior to 149.0.7827.53; the vulnerability’s impact is described as high (CVE metrics show CVSSv3.1: AV:N/AC:L...

CVE-2026-11172

Technical details about CVE-2026-11172 are not publicly available in the provided documents; monitor sources for updates.

CVE-2026-11651

Technical details are not publicly available in the provided documents. Monitor for updates from vendors and security advisories.

CVE-2026-13798

CVE-2026-13798 describes a heap buffer overflow in the Chromecast component of Google Chrome, affecting versions prior to 150.0.7871.47. A remote attacker who already compromised the renderer process could potentially escape the sandbox via a crafted HTML page. Public reports consistently referen...

CVE-2026-13919

CVE-2026-13919 describes an insufficent policy enforcement in Chrome’s Extensions on Chromium-based builds, where a crafted HTML page could enable a remote attacker with renderer access to bypass site isolation. Affected software/component: Google Chrome (Extensions/Chromium core). Root cause: po...

CVE-2026-13921

The set of connected records confirms CVE-2026-13921 affects Google Chrome (Chromium-based) via the DeviceBoundSessionCredentials component where insufficient validation of untrusted input enables a remote bypass of the same-origin policy through a crafted HTML page. The vulnerability is describe...

CVE-2026-13959

The CVE-2026-13959 entry describes an issue in Blink (Chrome) where insufficient validation of untrusted input allows a remote attacker to bypass the Same Origin policy via a crafted HTML page. Affected software is Google Chrome (Blink engine) with versions prior to 150.0.7871.47. The impact is a...

CVE-2026-13984

The CVE-2026-13984 entry covers Google Chrome’s TabStrip UI security flaw. Affects Chrome versions before 150.0.7871.47, allowing a remote attacker to perform UI spoofing via a crafted HTML page. The vulnerability is due to incorrect security UI behavior in the TabStrip, as described across multi...

CVE-2026-13986

The vulnerability CVE-2026-13986 affects Google Chrome on ChromeOS (Media UI) and is triggered by a crafted HTML page that enables UI spoofing. The issue is described as an inappropriate implementation in Media UI prior to version 150.0.7871.47. An attacker must convince a user to perform specifi...

CVE-2026-14032

This CVE affects Google Chrome on macOS, describing a Use-After-Free in Bluetooth that allows code execution when a user is tricked into installing a crafted Chrome Extension. The vulnerable condition is Chrome versions prior to 150.0.7871.47. Impact is arbitrary code execution with high severity...

CVE-2026-14061

The CVE-2026-14061 issue affects Dawn in Google Chrome, prior to version 150.0.7871.47. It is described as an insecure implementation that could allow a remote attacker to obtain potentially sensitive data from process memory via a crafted HTML page. Affected component: Dawn within Chrome. Root c...

CVE-2026-14068

Vulnerability: CVE-2026-14068 affects Google Chrome on iOS, caused by an inappropriate implementation in the Omnibox. The issue enables UXSS via a crafted HTML page when a user is induced to perform specific UI gestures, using Chrome versions prior to 150.0.7871.47. Impact is described as low sev...

CVE-2026-14082

This CVE (CVE-2026-14082) concerns a Race in Storage in Google Chrome, affecting Chrome versions prior to 150.0.7871.47. The vulnerability allows a remote attacker to leak cross-origin data via a crafted HTML page. According to the connected documents, this issue is described with a Chromium-base...

CVE-2026-14118

Chrome DevTools in Google Chrome suffers from insufficient data validation , allowing a remote attacker to leak cross-origin data if a user is coerced into specific UI gestures on a crafted HTML page. Affected versions are prior to 150.0.7871.47 . Mitigation: upgrade to 150.0.7871.47 or later. CV...

CVE-2026-14124

CVE-2026-14124 affects Google Chrome on Windows (before version 150.0.7871.47). The vulnerability is due to an inappropriate CredentialProvider implementation, enabling a local attacker to escalate privileges via a malicious file. The described impact is OS-level, with high confidentiality, integ...

CVE-2026-14151

The connected entries describe CVE-2026-14151 as an issue in Google Chrome’s AI component where an attacker compromising the renderer could potentially escape the sandbox via a crafted HTML page in Chrome prior to version 150.0.7871.47. The affected software is Chrome/Chromium-based, with the roo...

CVE-2026-15114

CVE-2026-15114 affects Google Chrome’s Codecs component, with out-of-bounds read/write that can lead to heap corruption via a specially crafted video file. Affected software: Google Chrome prior to version 150.0.7871.115. The Chromium/vulnerability notes describe a remote attacker could potential...

CVE-2026-15123

CVE-2026-15123 describes an inappropriate DOM implementation in Google Chrome, prior to 150.0.7871.115, that may allow remote heap corruption via a crafted HTML page. All connected documents confirm the issue in the Chrome DOM, with the impact labeled High and CVE-2026-15123 consistently cited ac...

CVE-2026-5287

The CVE-2026-5287 issue affects Google Chrome prior to 146.0.7680.178, caused by a use-after-free in the PDF handling path, allowing a remote attacker to execute arbitrary code within the browser sandbox via a crafted PDF. The connected sources corroborate this memory safety fault in Chrome/Chrom...

CVE-2026-5898

The CVE-2026-5898 entry concerns a security UI issue in the Omnibox of Google Chrome on iOS (Chromium). The underlying problem is an incorrect security UI that could enable UI spoofing via a crafted HTML page, classified with a Chromium security severity of Low and a CVSS 3.1 base score of 4.3 (M...

CVE-2026-5908

CVE-2026-5908 affects Chromium/Google Chrome where a vulnerability in the Media component allows an attacker to trigger an integer overflow, potentially leading to heap corruption via a crafted video file. The issue is associated with Chrome/Chromium security updates fixing this and related CVEs ...

CVE-2026-5919

CVE-2026-5919 affects Google Chrome/Chromium: insufficient validation of untrusted input in WebSockets in the renderer, allowing a remote attacker who has compromised the renderer process to bypass the same-origin policy via a crafted HTML page. Public advisories cite affected Chrome/Chromium bui...

CVE-2026-78956

Type confusion in V8 in Google Chrome prior to 152.0.7977.65 allows a remote attacker, leveraging social engineering via a crafted HTML page, to execute arbitrary code inside the sandbox. Chromium rates the severity as Low , while the CVSS 3.1 base score is 8.8 (HIGH) with required user interacti...