CVE-2022-2480

The CVE-2022-2480 entry concerns a Use after free in the Service Worker API in Google Chrome, affecting versions prior to 103.0.5060.134. The connected sources confirm heap corruption as the potential impact when a crafted HTML page triggers the vulnerability. Remediation documented in Debian/rel...

CVE-2023-2137

The provided connected docs confirm CVE-2023-2137 affects Google Chrome/Chromium and its underlying SQLite component, with a heap buffer overflow in SQLite prior to Chrome 112.0.5615.137. The root cause is a heap corruption condition that could be triggered by a crafted HTML page, allowing remote...

CVE-2023-6346

CVE-2023-6346 is a use-after-free in WebAudio within Chromium-based browsers, enabling potential heap corruption. The vulnerability affects Chromium and derivatives (e.g., Google Chrome) prior to version 119.0.6045.199. Multiple connected advisories confirm the fix in version 119.0.6045.199 or ne...

CVE-2025-4051

CVE-2025-4051 involves insufficient data validation in DevTools of Google Chrome/Chromium, allowing a remote attacker to bypass discretionary access control when a user is persuaded to perform specific UI gestures on a crafted HTML page. The vulnerability affects Chrome before version 136.0.7103....

CVE-2019-13664

CVE-2019-13664 : In Chromium/Blink, insufficient policy enforcement allowed bypassing the Content Security Policy via a crafted HTML page. Affected products are Chromium/Google Chrome (Blink engine); the issue is tied to CSP bypass in the rendering/Blink path. Debian security advisory DSA-4562-1 ...

CVE-2019-5847

CVE-2019-5847 is a vulnerability described as an inappropriate JavaScript implementation in Google Chrome before 75.0.3770.142, potentially enabling remote heap corruption via a crafted HTML page. Connected advisories link this CVE to problems in the V8 JavaScript engine and list affected product...

CVE-2021-30508

CVE-2021-30508 is a heap buffer overflow in Chrome/Chromium’s Media Feeds component, affecting Chromium before version 90.0.4430.212. The vulnerability could allow a remote attacker to trigger heap corruption via a crafted HTML page, potentially enabling arbitrary code execution. Public advisorie...

CVE-2023-5857

CVE-2023-5857 affects Google Chrome/Chromium: an inappropriate implementation in the Downloads component allowed a remote attacker to potentially execute arbitrary code via a malicious file. The issue is tied to Chromium’s handling in Downloads prior to 119.0.6045.105. Public disclosures in conne...

CVE-2026-76042

CVE-2026-76042 is a use of uninitialized resource in the GPU component of Google Chrome prior to 151.0.7922.169 . A remote attacker who had already compromised the renderer process could read memory outside the sandbox via a crafted HTML page. Chromium rates this High severity, though the CVSS 3....

CVE-2019-5757

CVE-2019-5757 concerns a type confusion in the SVG handling of Google Chrome/Chromium. The issue arises from an incorrect object type assumption in SVG, allowing a remote attacker to potentially corrupt objects via a crafted HTML page. Public advisories place the vulnerability in the Chrome/Chrom...

CVE-2020-6551

CVE-2020-6551 is a use-after-free in WebXR for Google Chrome, before version 84.0.4147.125, enabling a remote attacker to potentially corrupt the heap via a crafted HTML page. Affected product: Google Chrome (WebXR component). Root cause: use-after-free condition in WebXR handling. Impact: remote...

CVE-2021-21118

CVE-2021-21118 is a data validation issue in the V8 JavaScript engine of Chromium-based browsers. The connected advisories and Debian/Arch Fedora entries confirm the vulnerability stems from insufficient data validation in V8 prior to version 88.0.4324.96, potentially enabling out-of-bounds memor...

CVE-2021-21150

CVE-2021-21150 describes a use-after-free vulnerability in Chromium’s Downloads component on Windows (pre-88.0.4324.182). The issue stems from use-after-free in the Downloads pathway, allowing a remote attacker who has compromised the renderer process to potentially escape the browser sandbox via...

CVE-2022-1490

Google Chrome/Chromium suffered a use-after-free in the Browser Switcher before 101.0.4951.41, allowing a remote attacker to potentially exploit heap corruption via a crafted HTML page after user interaction. The issue affects Chrome/Chromium components related to the Browser Switcher; CVE-2022-1...

CVE-2022-1492

Summary: CVE-2022-1492 corresponds to a Chrome/Blink vulnerability described as insufficient data validation in Blink Editing that could allow a remote attacker to inject arbitrary scripts or HTML via a crafted HTML page. The issue affects Google Chrome’s Blink Editing path and is associated with...

CVE-2022-2613

CVE-2022-2613 is a use-after-free vulnerability in Chrome/Chromium’s input handling on ChromeOS, specifically tied to the Gesture Process in Chromium. The issue is reported to occur on ChromeOS builds prior to 104.0.5112.79, potentially enabling heap corruption via certain user interactions. Conn...

CVE-2023-5482

CVE-2023-5482 affects Google Chrome/Chromium before 119.0.6045.105 due to insufficient data validation in USB handling, enabling a remote attacker to trigger out-of-bounds memory access via a crafted HTML page. Impact is described as high, with potential memory corruption or crash; exploitation s...

CVE-2023-5858

The CVE-2023-5858 entry concerns Google Chrome’s WebApp Provider: an inappropriate implementation in Chrome prior to 119.0.6045.105 allowed a remote attacker to obfuscate the security UI via a crafted HTML page. The issue is categorized as Low severity by Chromium, with CVSSv3.1 metrics: AV:N/AC:...

CVE-2019-5774

CVE-2019-5774 affects Google Chrome on Linux; the issue arises from omission of the .desktop filetype in Safe Browsing checks, allowing an attacker who persuades a user to download a .desktop file to execute arbitrary code via that file. The vulnerability is tied to SafeBrowsing in Chrome before ...

CVE-2019-5781

CVE-2019-5781 affects Google Chrome: Incorrect handling of a confusable character in the Omnibox (URL bar). Prior to 72.0.3626.81, a remote attacker could spoof the Omnibox via a crafted domain name. The connected documents do not provide additional technical details, exploitation methods, or rem...

CVE-2019-5876

CVE-2019-5876 describes a use-after-free in media handling in Google Chrome/Chromium. Public description states that on Android, prior to 77.0.3865.75, a remote attacker could potentially trigger heap corruption via a crafted HTML page. The Debian advisory lists CVE-2019-5876 among multiple Chrom...

CVE-2021-21147

CVE-2021-21147 affects Chromium/Chrome where Skia had an inappropriate implementation that could allow a local attacker to spoof the Omnibox (URL bar) via a crafted HTML page. The public records consistently cite version 88.0.4324.146 as the fix, with Debian notes stating the patch is in 88.0.432...

CVE-2021-21222

CVE-2021-21222 is a heap buffer overflow in V8 (Chrome) prior to 90.0.4430.85, enabling a remote attacker with renderer access to bypass site isolation via a crafted HTML page. The issue is demonstrated across Chromium-derived stacks; affected components include V8 and related rendering/subsystem...

CVE-2021-30522

CVE-2021-30522 affects Chromium prior to 91.0.4472.77, with a use-after-free in the WebAudio component that could allow remote code execution through a crafted page. The Arch Linux advisories explicitly describe the issue and state the fix is to upgrade to Chromium 91.0.4472.77-1 (or newer). Othe...

CVE-2021-30538

CVE-2021-30538 : The Chromium browser’s Content Security Policy enforcement is insufficient before 91.0.4472.77, allowing a remote attacker to bypass CSP via a crafted HTML page. Public references in security advisories (e.g., Fedora/Arch Linux chromium updates, Debian/Alpine entries) confirm the...

CVE-2022-1139

CVE-2022-1139 refers to an inappropriate implementation in Chrome’s Background Fetch API that could allow a remote attacker to leak cross-origin data via a crafted HTML page. The issue is associated with Chrome/Chromium before version 100.0.4896.60 and was acknowledged in Google’s March 29, 2022 ...

CVE-2023-5472

CVE-2023-5472 describes a use-after-free in Chrome/Chromium Profiles prior to 118.0.5993.117, enabling heap corruption via a crafted HTML page for a remote attacker. Impact is high (CVE has base score 8.8). Affected software includes Google Chrome/Chromium; Debian advisories confirm fixed version...

CVE-2025-5958

CVE-2025-5958 affects Google Chrome (Chromium base). The vulnerability is a use-after-free in the Media component, which could allow a remote attacker to cause heap corruption via a crafted HTML page. Affected versions are prior to 137.0.7151.103. Google released a fix in the 137.0.7151.103 stabl...

CVE-2019-13704

CVE-2019-13704 affects Google Chrome/Chromium before 78.0.3904.70 and is described as an access restriction bypass via CSP, specifically a Content Security Policy bypass. Connected advisories confirm the issue as a CSP bypass vulnerability in Chromium/Chrome, with remediation guidance to upgrade ...

CVE-2019-13707

CVE-2019-13707 is an information-disclosure vulnerability in Chromium/Google Chrome (Android) caused by insufficient validation of untrusted input in intents, allowing a local attacker to leak files via a crafted application. It affects Chrome/Chromium versions prior to 78.0.3904.70; the issue ha...

CVE-2019-13728

CVE-2019-13728 is an out-of-bounds write in the v8 JavaScript library used by Chromium/Google Chrome, causing heap corruption. A remote attacker could potentially exploit this via a crafted HTML page. Remediation per connected advisories: upgrade to Chromium/Chrome versions where this CVE is fixe...

CVE-2019-5764

CVE-2019-5764 is a use-after-free/incorrect pointer management in the WebRTC code path of Chromium/Google Chrome, prior to version 72.0.3626.81, allowing a remote attacker to potentially exploit heap corruption via a crafted HTML page. Public references in Debian advisories and Fedora/Nessus entr...

CVE-2019-5806

The CVE-2019-5806 entry concerns Google Chrome/Chromium on Windows prior to 74.0.3729.108. A concrete flaw is an integer overflow in the ANGLE library, which can lead to heap corruption via a crafted HTML page. The issue is actionable in the browser context where remote attackers could exploit it...

CVE-2020-6409

The connected advisories confirm CVE-2020-6409 affects Chromium/Google Chrome "Omnibox" in versions before 80.0.3987.87. The issue is described as an inappropriate Omnibox implementation that lets a remote attacker bypass navigation restrictions by enticing a user to visit a crafted domain name. ...

CVE-2020-6516

CVE-2020-6516 is a Chrome/CORB policy-bypass vulnerability where cross-origin data could be leaked via a crafted HTML page. Affected product: Google Chrome prior to 84.0.4147.89 (Chromium-based browser). Root cause: CORS policy bypass in Chrome’s handling of cross-origin requests. Impact: potenti...

CVE-2022-0975

CVE-2022-0975 is a use-after-free in ANGLE affecting Google Chrome prior to 99.0.4844.74, leading to potential remote heap corruption. The vulnerability is documented across multiple sources (Chrome stable channel update and Debian security advisory) with fixes implemented in version 99.0.4844.74...

CVE-2022-1639

The CVE-2022-1639 issue is confirmed in ANGLE within Google Chrome before 101.0.4951.64, caused by a use-after-free that can lead to heap corruption via a crafted HTML page. Affected software is Chrome (ANGLE/Chromium stack) with remote, user-page interaction required for exploitation, and the im...

CVE-2022-1869

CVE-2022-1869 refers to a type confusion in the V8 JavaScript engine used by Google Chrome before version 102.0.5005.61. The vulnerability arises from a type-confusion error in V8 that could allow a remote attacker to trigger heap corruption via a crafted HTML page. Several connected advisories c...

CVE-2022-1871

Chromium/Google Chrome 102.x are affected by CVE-2022-1871: Insufficient policy enforcement in the File System API allows a user-trathan to bypass file system policy via a crafted HTML page after installing a malicious extension. Root cause: insufficient policy enforcement in the File System API....

CVE-2022-2157

CVE-2022-2157 describes a use-after-free in Chrome’s Interest groups, allowing a remote attacker who already compromised a renderer to trigger heap corruption via a crafted HTML page. The vulnerability affects Google Chrome (Chromium) before version 103.0.5060.53; impact is described as high for ...

CVE-2019-13724

CVE-2019-13724 is a WebBluetooth-related vulnerability in Chromium/Google Chrome prior to 78.0.3904.108. The issue is described as an out-of-bounds memory access in the Web Bluetooth component, which could allow a remote attacker who has compromised the renderer process to potentially trigger hea...

CVE-2019-13735

CVE-2019-13735 is a Chrome/Chromium vulnerability: an out-of-bounds write in the V8 JavaScript engine that could allow remote code execution inside the sandbox via a crafted HTML page. Public details in connected sources identify the affected component (V8 in Chromium/Chrome) and confirm remediat...

CVE-2019-13758

CVE-2019-13758: Google Chrome/Chromium navigation policy enforcement flaw on Android allowed remote bypass of navigation restrictions via a crafted HTML page. Affected product: Chrome on Android prior to 79.0.3945.79. Impact: bypass of navigation restrictions (no exploitation details provided). R...

CVE-2019-5772

The CVE-2019-5772 entry affects Google Chrome's PDFium component. Description: Sharing of objects over calls into the JavaScript runtime in PDFium can lead to heap corruption when processing a crafted PDF, enabling a remote attacker to potentially exploit the issue. Affected product/area: Chrome ...

CVE-2021-21223

CVE-2021-21223 describes an integer overflow in Mojo inside Google Chrome prior to 90.0.4430.85. A remote attacker who has compromised the renderer process could potentially perform a sandbox escape via a crafted HTML page. Affected: Google Chrome (Mojo component) before 90.0.4430.85. Impact per ...

CVE-2022-1865

Consolidated details confirm CVE-2022-1865 affects Google Chrome prior to 102.0.5005.61, due to a use-after-free in the Bookmarks component that can be triggered by convincing a user to install a malicious extension and perform specific interactions, potentially enabling heap corruption. Public b...

CVE-2019-5762

CVE-2019-5762 is a PDFium-related memory-management issue in Google Chrome prior to 72.0.3626.81, enabling a remote attacker to execute arbitrary code inside the sandbox via a crafted PDF. The vulnerability stems from inappropriate memory handling when caching in PDFium. The documented impact is ...

CVE-2020-15980

CVE-2020-15980: In Chromium/Chrome, insufficient policy enforcement in the Intents component allows a local attacker to bypass navigation restrictions via crafted Intents. Impact is described as local code execution/privilege by affected components; Debian/Arch/FreeBSD advisories indicate fixes i...

CVE-2021-21123

CVE-2021-21123 is a data validation vulnerability in Google Chrome’s File System API (Chromium) prior to 88.0.4324.96. The issue allows a remote attacker to bypass filesystem restrictions via a crafted HTML page due to insufficient data validation in the File System API/File System component. The...

CVE-2021-30523

Chromium/WebRTC use-after-free vulnerability CVE-2021-30523 existed in Chromium before 91.0.4472.77, reported via Arch Linux advisory ASA-202106-33 and mirrored in Fedora/Debian Alpine entries. The issue is a use-after-free in the WebRTC component that could allow arbitrary code execution on remo...