CVE-2019-13754

CVE-2019-13754 affects Google Chrome/Chromium where insufficient policy enforcement in extensions could let a remote attacker bypass navigation restrictions via a crafted HTML page. The vulnerability is scoped to Chrome versions before 79.0.3945.79. Public advisories and updates indicate remediat...

CVE-2019-5766

CVE-2019-5766 describes an incorrect origin taint handling in Canvas within Chromium/Google Chrome, which could allow a remote attacker to leak cross-origin data via a crafted HTML page. The vulnerability is tied to the Canvas origin taint check and is listed against Chrome versions prior to 72.0...

CVE-2019-5840

CVE-2019-5840 is a vulnerability tied to Google Chrome/Chromium where an incorrect security UI in the iOS popup blocker allowed bypassing navigation restrictions via a crafted HTML page. Public sources in Debian/Gentoo advisories specify that fixes were delivered by updating Chromium/Chrome to ne...

CVE-2020-6387

CVE-2020-6387 is an out-of-bounds write in WebRTC’s video timing extension within Chromium-based Chrome prior to 80.0.3987.87. The bug occurs during Forward Error Correction processing when clearing certain RTP extensions (video timing); the code clears six bytes at a fixed offset without verifyi...

CVE-2022-0789

CVE-2022-0789 is a heap buffer overflow in ANGLE used by Google Chrome (and Chromium components) prior to version 99.0.4844.51. The vulnerability allows a remote attacker to trigger heap corruption through a crafted HTML page, with potential for arbitrary code execution. Affected ecosystem includ...

CVE-2022-2008

CVE-2022-2008 involves a double free in WebGL in Google Chrome, enabling potential heap corruption via a crafted HTML page. Affected software is Google Chrome (Chromium/WebGL stack); root cause is a WebGL double-free condition leading to memory corruption. Impact states remote code execution/comp...

CVE-2019-13756

CVE-2019-13756 concerns Google Chrome’s and Chromium’s printing UI. The vulnerability is due to an incorrect security UI in printing that can allow a remote attacker to spoof the domain via a crafted HTML page, leading to domain spoofing. Affected version in the original entry is before 79.0.3945...

CVE-2019-5852

CVE-2019-5852 is an information-disclosure vulnerability in Chromium/Google Chrome prior to 76.0.3809.87. The initial description notes an inappropriate JavaScript implementation that could leak memory contents via a crafted HTML page. Connected sources confirm Chromium before 76.0.3809.87 is aff...

CVE-2019-5853

CVE-2019-5853 concerns Google Chrome prior to 76.0.3809.87, where a memory corruption issue occurs in the regexp length checks. The CVE entry originates from Chrome’s security release for version 76 and is listed among multiple Chrome vulnerabilities resolved in the 76.0.3809.87 update. The vulne...

CVE-2019-5857

Chromium/Google Chrome vulnerable to CVE-2019-5857 prior to version 76.0.3809.87. A denial-of-service crash can occur due to a faulty comparison between -0 and null in Chromium before this patch. Affected packages include Chromium on Arch Linux (pre-76.0.3809.87) and Debian/SEC advisories note fi...

CVE-2020-6394

Chromium vulnerability CVE-2020-6394 is a Blink policy enforcement bypass in Chrome/Chromium prior to 80.0.3987.87, allowing a remote attacker to bypass Content Security Policy via a crafted HTML page. Affected products: Chromium before 80.0.3987.87 (up to 80.0.3987.87-1 in some updates). Root ca...

CVE-2022-1485

CVE-2022-1485 corresponds to a use-after-free in Chrome/Chromium’s File System API (heap corruption) prior to 101.0.4951.41. The issue is described consistently across sources (Chromium/Chrome release notes and security bulletins), affecting Google Chrome and Chromium-derived builds. The Chrome 1...

CVE-2018-6126

CVE-2018-6126 is a Skia-related heap/buffer overflow in Google Chrome prior to 67.0.3396.62. A precision error in Skia could allow a remote attacker to perform an out-of-bounds memory write via a crafted HTML page, enabling potential arbitrary code execution. Publicly, this vulnerability is track...

CVE-2019-13730

CVE-2019-13730 is a type confusion in Google Chrome's V8 JavaScript engine (Chromium-derived) that could allow a remote attacker to trigger heap corruption via a crafted HTML page. The vulnerability is in the JavaScript engine (V8) and is one of multiple Chromium/Chrome issues disclosed for CVE-2...

CVE-2019-13745

CVE-2019-13745 affects Google Chrome (Chromium) prior to 79.0.3945.79. It is a policy enforcement error in the audio component that could allow a remote attacker to leak cross-origin data via a crafted HTML page. The entry lists the vulnerable condition and version range but does not provide expl...

CVE-2020-6385

CVE-2020-6385 is a policy enforcement bypass in the Chromium/Google Chrome storage component reported to affect versions before 80.0.3987.87. The issue allows bypassing site isolation via a crafted HTML page, with remote attack potential and impact including information disclosure and UI/content ...

CVE-2021-21229

CVE-2021-21229: An incorrect security UI issue in the downloads component of Chromium/Chrome prior to 90.0.4430.93 allowed a remote attacker to spoof the domain via a crafted HTML page. Public bulletins confirm impact and patch availability; Debian notes fix in 90.0.4430.93-1, with other advisori...

CVE-2022-0790

The CVE-2022-0790 issue is a use-after-free in Chrome’s Cast UI affecting Google Chrome prior to 99.0.4844.51. The root cause is a memory management error that could be triggered when a user interacts with a crafted HTML page, potentially enabling a sandbox escape. Multiple connected sources (e.g...

CVE-2010-1234

CVE-2010-1234 relates to Google Chrome prior to 4.1.249.1036. The core issue, as described in the CVE entry, is an unspecified vulnerability that allows remote attackers to truncate the URL shown in the HTTP Basic Authentication dialog via unknown vectors. Connected sources corroborate that Chrome

CVE-2019-13703

CVE-2019-13703 is a URL bar spoofing vulnerability in Chromium-based Chrome/Chromium prior to version 78.0.3904.70. Root cause: insufficient policy enforcement in the Omnibox (address bar) allowing a crafted HTML page to spoof its contents. Affects Google Chrome on Android and Chromium-derived br...

CVE-2019-13706

CVE-2019-13706 affects Chromium/Google Chrome PDFium: an out-of-bounds read in PDFium before 78.0.3904.70. This is reported as information disclosure in multiple sources. Impact is bounded to unauthorized data exposure via crafted PDFs. Remediation: upgrade to Chromium/Chrome 78.0.3904.70 or newe...

CVE-2019-13767

CVE-2019-13767 describes a use-after-free in Chrome’s media picker. A remote attacker who has compromised the renderer could trigger heap corruption via a crafted HTML page in Google Chrome prior to version 79.0.3945.88. The available documents confirm the affected component (media picker/rendere...

CVE-2019-5778

CVE-2019-5778 affects Google Chrome/Chromium extensions. The available description states a missing case in handling special schemes during permission request checks in Extensions, allowing bypass of extension permission checks for privileged pages via a crafted Chrome Extension (pre 72.0.3626.81...

CVE-2019-5804

CVE-2019-5804 affects Google Chrome (Chromium) prior to 73.0.3683.75. It arises from incorrect command line processing, enabling a local attacker to spoof domains via a crafted domain name. OpenSUSE/Nessus references confirm the remediation in Chrome releases up to 73.0.3683.75 and later. The vul...

CVE-2019-5837

CVE-2019-5837 affects Blink in Google Chrome (Chromium-based) prior to 75.0.3770.80, allowing an remote attacker to leak cross-origin data via a crafted HTML page (information disclosure). Debian security advisories indicate fixes in Chromium packages to 76.0.3809.100+; upgrade to the latest Chro...

CVE-2019-5860

CVE-2019-5860 is a use-after-free in the PDFium component of Chromium/Google Chrome prior to 76.0.3809.87. The vulnerability can potentially lead to heap corruption and remote code execution via a crafted PDF file. Multiple connected advisories confirm the affected component (PDFium) and the vers...

CVE-2019-13683

CVE-2019-13683 affects Google Chrome prior to 77.0.3865.75, where insufficient policy enforcement in developer tools could allow a crafted HTML page to leak cross-origin data. The vulnerability is a cross-origin data disclosure via the browser’s developer tools surface, with network-vector exposu...

CVE-2019-13759

Google Chrome vulnerable: CVE-2019-13759 stems from incorrect security UI in interstitials that enables domain spoofing via a crafted HTML page. Affected: Chrome versions prior to 79.0.3945.79. Impact: potential spoofing of the address bar/domain in interstitial UI. Mitigation: upgrade to Chrome ...

CVE-2019-5862

Chromium/Google Chrome: CVE-2019-5862 is an AppCache validation flaw in Chromium before 76.0.3809.87 (renderer-compromised bypass). The issue allows a remote attacker to bypass site isolation via a crafted HTML page. Affected component: AppCache in Chromium; root cause: insufficient data validati...

CVE-2021-21199

CVE-2021-21199 : Use-after-free in Aura window and event manager of Chrome on Linux, enabling heap corruption when a renderer process is compromised. Affected: Chromium-based Chrome on Linux; vulnerable component is Aura/window management. Impact: potential remote code execution via crafted HTML ...

CVE-2022-1493

Summary: CVE-2022-1493 is a Use-after-Free in DevTools of Google Chrome/Chromium up to version 101.0.4951.41, enabling a remote attacker to potentially cause heap corruption via specific, direct user interaction. The vulnerability affects Chrome/Chromium’s DevTools components and is reflected in ...

CVE-2022-1863

CVE-2022-1863 affects Google Chrome before 102.0.5005.61, with a use-after-free in Tab Groups that could lead to heap corruption. The issue could be exploited by convincing a user to install a malicious extension through crafted Chrome Extensions and specific user interaction. The Debian security...

CVE-2022-2624

CVE-2022-2624 describes a heap buffer overflow in PDF handling in Google Chrome prior to 104.0.5112.79, enabling a remote attacker to potentially trigger heap corruption via a crafted PDF file when a user interacts with it. Connected sources (Astra Linux security bulletin and Debian security advi...

CVE-2017-15422

ICU vulnerability CVE-2017-15422: An integer overflow in ICU’s international date handling (ICU for C/C++) enables out-of-bounds memory reads via crafted HTML. Affected: ICU before 60.1; used in Google Chrome’s V8 (pre-63.0.3239.84) and other products. Impact per sources: potential memory disclos...

CVE-2019-13719

CVE-2019-13719 is a Chromium-based UI security issue in full-screen mode for Google Chrome (prior to 78.0.3904.70). It allowed a crafted HTML page to obscure the security UI, enabling potential spoofing or misleading UI, with root cause tied to the UI handling in full-screen mode. The vulnerabili...

CVE-2019-13757

CVE-2019-13757 describes an incorrect security UI issue in the Omnibox of Google Chrome/Chromium that could enable domain spoofing using IDN homographs. The root cause is a security UI flaw in Omnibox handling of domain name input, allowing spoofed domains to appear legitimate. Public reports and...

CVE-2022-1854

This CVE concerns Google Chrome’s ANGLE component and is caused by a Use-after-Free leading to potential heap corruption via a crafted HTML page. Affected software is Chrome (ANGLE) prior to version 102.0.5005.61. The issue is reported across multiple sources (e.g., Debian advisory for chromium, ...

CVE-2023-1532

CVE-2023-1532 affects Google Chrome (Chromium-based) due to an out-of-bounds read in the GPU Video component, potentially enabling heap corruption via a crafted HTML page. The issue is exploitable remotely with user interaction required; patching to Chrome 111.0.5563.110 or newer is the documente...

CVE-2026-3910

CVE-2026-3910 is an inappropriately implemented Google Chrome V8 vulnerability (pre-146.0.7680.75) that allows remote code execution via a crafted HTML page in a sandbox. Public fixes landed in Chrome 146.0.7680.75 (and related channels); exploitation has been observed in reports, including notes...

CVE-2019-13659

Technical details for CVE-2019-13659 are not publicly available in the provided documents. Monitor for updates from product advisories and security trackers.

CVE-2019-13702

CVE-2019-13702 affects Google Chrome on Windows with an insecure installer implementation that allowed privilege escalation via a crafted executable. The vulnerability originates from an inappropriate installer implementation, enabling local attackers to elevate privileges. Public advisories conf...

CVE-2019-13722

CVE-2019-13722 concerns an inappropriate implementation in WebRTC in Google Chrome prior to 79.0.3945.79, which could allow a remote attacker to trigger heap corruption via a crafted HTML page. The vulnerability affects Chrome WebRTC code and arises from improper handling that may lead to memory ...

CVE-2019-13737

CVE-2019-13737 in Google Chrome describes insufficient policy enforcement in the autocomplete component. The vulnerability could allow a remote attacker to obtain potentially sensitive information from process memory via a crafted HTML page. Affected are Chrome versions prior to 79.0.3945.79. Mit...

CVE-2019-13763

CVE-2019-13763 affects Google Chrome: Insufficient policy enforcement in payments in Chrome prior to 79.0.3945.79 allowed a renderer-compromised remote attacker to leak cross-origin data via a crafted HTML page. Affected software is Chrome (renderer process context) with the vulnerability tied to...

CVE-2019-5775

CVE-2019-5775 corresponds to a vulnerability in Google Chrome’s Omnibox: an incorrect handling of a confusable character enables a remote attacker to spoof the URL bar via a crafted domain name. The issue affects Chrome versions prior to 72.0.3626.81. Exploitation could mislead users by displayin...

CVE-2021-30549

CVE-2021-30549 is a use-after-free in Chromium’s Spell check component affecting Chromium-based browsers up to version 91.0.4472.101. The vulnerability can be triggered when a user installs a malicious extension, potentially enabling heap corruption and remote code execution via a crafted HTML pa...

CVE-2023-1231

CVE-2023-1231 describes an issue in Google Chrome on Android where the Autofill implementation allowed a crafted HTML page to spoof the omnibox contents. The vulnerability is tied to Chromium’s Autofill logic and is described as an inappropriate implementation, with a CVSS v3.1 base score of 4.3 ...

CVE-2023-5849

CVE-2023-5849 affects Chromium/Google Chrome USB handling: an integer overflow can lead to heap corruption via a crafted HTML page. Impact is high (CVE described as High); exploitation details in the wild are not provided in the documents. Remediation observed in multiple distros includes upgradi...

CVE-2019-13742

CVE-2019-13742 corresponds to an UI spoof vulnerability in Google Chrome’s Omnibox on iOS, where an incorrect security UI allowed a remote attacker to spoof the URL bar via a crafted domain name prior to version 79.0.3945.79. Connected security advisories reference Chrome/Chromium remediation pat...

CVE-2020-6403

CVE-2020-6403 affects Google Chrome/Chromium Omnibox behavior. The issue is an incorrect Omnibox implementation on iOS prior to 80.0.3987.87, which could allow a remote attacker to spoof the Omnibox (URL bar) via a crafted HTML page. Impact described in connected advisories includes UI spoofing r...