CVE-2021-30577

CVE-2021-30577 affects Google Chrome’s Installer component; prior to 92.0.4515.107 there is insufficient policy enforcement, enabling a remote attacker to escalate to local privileges via a crafted file. Remediation: upgrade to 92.0.4515.107 or newer. Exploitation status is not provided in the do...

CVE-2022-0804

CVE-2022-0804 affects Google Chrome on Android (pre-99.0.4844.51). Root cause: Inappropriate Full screen implementation can let a crafted HTML page hide the Omnibox contents. Public sources confirm a fixed version 99.0.4844.51 in Debian (security tracker DSA-5089-1) and related updates in Fedora/...

CVE-2022-2610

CVE-2022-2610 : Concrete details across connected docs show a Chrome/Chromium vulnerability in Background Fetch due to insufficient policy enforcement, allowing a remote attacker to leak cross-origin data via a crafted HTML page. Affected software is Google Chrome (Chromium-based), with the root ...

CVE-2023-0927

CVE-2023-0927 : Affected component is the Web Payments API in Google Chrome on Android. The issue is a use-after-free in this API that could allow a remote attacker who has compromised the renderer to potentially exploit heap corruption via a crafted HTML page. The vulnerability is reported for C...

CVE-2023-2724

CVE-2023-2724 is a Chromium/Google Chrome type-confusion vulnerability in V8 prior to 113.0.5672.126. The issue allows a remote attacker to potentially trigger heap corruption via a crafted HTML page, with impact described as high (confidentiality, integrity, and availability). Remediation provid...

CVE-2023-2725

CVE-2023-2725 is a use-after-free in Chrome/Chromium's Guest View leading to potential heap corruption when a user is tricked into installing a malicious extension. Affected software: Google Chrome (Guest View) and Chromium components prior to version 113.0.5672.126. Root cause: use-after-free in...

CVE-2026-14116

The vulnerability CVE-2026-14116 affects Google Chrome DevTools. The root cause is insufficient validation of untrusted input in DevTools, allowing a remote attacker to leak cross-origin data through a crafted HTML page when a user is guided to perform specific UI gestures. Impact is cross-origin...

CVE-2020-16038

CVE-2020-16038 refers to a use-after-free in the media component of Chromium/Google Chrome (pre-87.0.4280.88). The vulnerability could allow a remote attacker to achieve arbitrary code execution via a crafted HTML page, potentially leading to heap corruption. Public advisories from Debian, Arch L...

CVE-2020-6442

CVE-2020-6442 affects Chromium/Google Chrome prior to 81.0.4044.92. The issue is an implementation error in the page cache that could allow a remote attacker to leak cross-origin data via a crafted HTML page. Impact: potential cross-origin data exposure without user interaction beyond visiting a ...

CVE-2020-6494

CVE-2020-6494 : Google Chrome on Android prior to 83.0.4103.97 is affected by an incorrect security UI in the payments component that allows a remote attacker to spoof the Omnibox (URL bar) via a crafted HTML page. Connected sources (Arch Linux ASA-202006-3, Debian DSA-4714, FreeBSD vuln note, CN...

CVE-2020-6542

CVE-2020-6542 affects ANGLE within Google Chrome prior to 84.0.4147.125. A use-after-free in ANGLE could allow remote attackers to trigger heap corruption via a crafted HTML page, potentially enabling arbitrary code execution. Debian/GLSA and other advisories confirm the same issue and indicate r...

CVE-2020-6546

CVE-2020-6546 affects Google Chrome on Windows/macOS/Linux via an Inappropriate implementation in the installer. The root cause is an flawed installer flow that can be abused by a local attacker to escalate privileges through a crafted filesystem, as detailed in multiple advisories. The impact is...

CVE-2020-6564

CVE-2020-6564: In Google Chrome, an inappropriate implementation in permissions allowed a remote attacker to spoof the contents of a permission dialog via a crafted HTML page, before version 85.0.4183.83. This entry is supported by Debian/Fedora advisories and CVE listings stating that Chromium/C...

CVE-2020-6571

CVE-2020-6571 affects Google Chrome Omnibox. Insufficient data validation enables a remote attacker to spoof a domain using IDN homographs in a crafted domain name. The issue is fixed in Chrome 85.0.4183.83 (and later); upgrading Chrome mitigates the vulnerability.

CVE-2021-21130

CVE-2021-21130 refers to a policy enforcement issue in Chromium’s File System API prior to 88.0.4324.96, allowing a crafted HTML page to bypass filesystem restrictions. Affected software: Chromium browser (before 88.0.4324.96). Root cause: insufficient policy enforcement in the File System API co...

CVE-2021-21146

CVE-2021-21146 affects Chromium’s Navigation component prior to 88.0.4324.146, with a use-after-free in Navigation that could allow a remote attacker who has compromised the renderer to escape the sandbox via a crafted HTML page. The issue is reported across multiple advisories and Debian/Arch se...

CVE-2021-21164

CVE-2021-21164 (Chrome on iOS) affects Google Chrome on iOS prior to version 89.0.4389.72, due to insufficient data validation that allows a remote attacker to leak cross-origin data via a crafted HTML page. The vulnerability is tied to Chrome’s handling on iOS, with the impact described as cross...

CVE-2021-21226

CVE-2021-21226: Use-after-free in navigation in Google Chrome prior to 90.0.4430.85 allows a remote attacker who has compromised the renderer process to potentially perform a sandbox escape via a crafted HTML page. Affected software: Google Chrome (renderer/navigation path). Root cause: use-after...

CVE-2021-30575

CVE-2021-30575 affects the Chromium-based Chrome Autofill component. The vulnerability is an out-of-bounds write in the Autofill module of the Chromium browser engine before version 92.0.4515.107 . The underlying issue enables a remote attacker who can render content to potentially trigger heap c...

CVE-2021-30584

The CVE-2021-30584 entry concerns a Chromium-based Chromium/Chrome Download UI issue on Android where an incorrect security UI allowed domain spoofing via a crafted HTML page. The vulnerability arises in the Downloads component of the browser engine prior to version 92.0.4515.107, enabling a remo...

CVE-2021-30591

CVE-2021-30591 is a use-after-free vulnerability in Chromium’s File System API, affecting Chromium-based browsers prior to 92.0.4515.131. Multiple connected advisories (Astra Linux, Arch Linux security advisories) confirm this issue and describe the root cause as a use-after-free in the File Syst...

CVE-2021-30625

CVE-2021-30625 is a use-after-free in the Selection API of the Chromium-based Google Chrome engine (pre-93.0.4577.82). A remote attacker could entice a user to visit a malicious page to trigger heap corruption. Google Chrome/stable updates fixed to 93.0.4577.82; upgrade to that version or later t...

CVE-2022-2611

CVE-2022-2611 : Concrete details across connected sources show an issue in the Fullscreen API in Google Chrome/Chromium where, on Android prior to 104.0.5112.79, a crafted HTML page can cause the Omnibox (URL bar) to be spoofed by a remote attacker. The affected software is Google Chrome (Android...

CVE-2022-2619

CVE-2022-2619 applies to Google Chrome/Chromium, where insufficient input validation in Settings allows injection of scripts/HTML into a privileged page when a user installs a malicious extension. Affected version baseline is before 104.0.5112.79. Public writeups in connected docs confirm the iss...

CVE-2023-1235

CVE-2023-1235 describes a Type Confusion in Chrome DevTools (Chromium DevTools) affecting Chrome versions before 111.0.5563.64. The vulnerability allows a remote attacker who has compromised the renderer process to potentially trigger heap corruption via crafted UI interactions. Affected product/...

CVE-2023-6702

CVE-2023-6702 describes a Type Confusion in V8 used by Google Chrome/Chromium before version 120.0.6099.109, which could allow a remote attacker to potentially cause heap corruption via a crafted HTML page. The vulnerability is rated High (CVSS 3.1: AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H). Public no...

CVE-2020-16022

Chromium/Chromium-derived Chrome vulnerability CVE-2020-16022 is an insufficient policy enforcement issue in the networking component that could let an attacker bypass firewall controls via a crafted HTML page. Affected software: Chromium browser (networking policy enforcement). Root cause: insuf...

CVE-2020-6428

CVE-2020-6428 involves a use-after-free in the audio component of Google Chrome prior to 80.0.3987.149, potentially enabling a remote attacker to trigger heap corruption via a crafted HTML page. Affected software includes Google Chrome and Chromium-based builds; Debian, Fedora, Gentoo, and Alpine...

CVE-2020-6570

Technical details for CVE-2020-6570 are not present in the provided connected documents. Information is limited to the initial description. Monitor for updates.

CVE-2020-6573

CVE-2020-6573 affects Chromium before 85.0.4183.102. A use-after-free in the video component could allow a remote attacker, with renderer access, to escape the sandbox via a crafted HTML page, potentially leading to arbitrary code execution. Remediation: upgrade to 85.0.4183.102 or newer as indic...

CVE-2021-21177

CVE-2021-21177 is a policy enforcement error in Chrome/Chromium Autofill (prior to 89.0.4389.72). Insufficient policy enforcement could allow a remote attacker to exfiltrate potentially sensitive memory contents via a crafted HTML page. Affected component: Autofill in the Chromium browser; root c...

CVE-2021-21203

CVE-2021-21203: In Blink/WebKit of Google Chrome, use-after-free in Blink could allow a remote attacker to exploit heap corruption via a crafted HTML page. Affected: Chrome prior to 90.0.4430.72. Remediation: update to Chrome 90.0.4430.72 or newer. Notes: connected sources corroborate the same de...

CVE-2022-0289

The CVE-2022-0289 entry affects Google Chrome’s Safe Browsing component, with a Use-After-Free vulnerability that could lead to heap corruption via a crafted HTML page. Affected version prior to 97.0.4692.99 is fixed in Chrome’s January 2022 update; the Chrome release notes list this as a critica...

CVE-2023-0473

CVE-2023-0473 is a Chrome vulnerability describing a Type Confusion in the ServiceWorker API that could enable heap corruption via a crafted HTML page. The incident affects Chromium-based Chrome browser prior to version 109.0.5414.119, with the Chrome team’s release notes and advisories indicatin...

CVE-2020-15982

CVE-2020-15982 affects Chromium/Google Chrome prior to 86.0.4240.75, describing a side-channel information leakage in the cache component that can disclose potentially sensitive data from process memory via a crafted page. Multiple advisories and changelogs confirm the issue and tag it as informa...

CVE-2020-6533

CVE-2020-6533 affects Google Chrome’s V8 engine. The Debian security advisory and Debian tracker describe a Type Confusion in V8 prior to Chrome 84.0.4147.89, which could allow a remote attacker to trigger heap corruption via a crafted HTML page. The issue was addressed in Chrome 84.0.4147.89 (or...

CVE-2021-21163

The CVE-2021-21163 issue affects Chromium/Google Chrome Reader Mode and is caused by insufficient data validation, allowing a remote attacker to leak cross-origin data via a crafted HTML page and a malicious server. Affected: Chromium/Chrome prior to version 89.0.4389.72. Impact (as stated): cros...

CVE-2021-21184

CVE-2021-21184 relates to Google Chrome/Chromium where an inappropriate implementation in the Performance API allowed a remote attacker to leak cross-origin data via a crafted HTML page. Affected product: Chromium/Chrome browser (Performance API component). Root cause: improper implementation in ...

CVE-2021-21205

CVE-2021-21205 affects Google Chrome on iOS prior to 90.0.4430.72. The issue is an insufficient policy enforcement in navigation, allowing a remote attacker to bypass navigation restrictions via a crafted HTML page. According to the provided description, the vulnerability is severe (CVSSv3.1 scor...

CVE-2021-30541

CVE-2021-30541 is a use-after-free in V8 (Chromium engine) before version 91.0.4472.164, disclosed for Google Chrome. The vulnerability allows a remote attacker to potentially trigger heap corruption through a crafted HTML page, enabling a remote code execution scenario as described in the CVE en...

CVE-2021-30564

CVE-2021-30564 is a heap buffer overflow in Chromium’s WebXR component prior to 91.0.4472.164. A remote attacker could potentially execute arbitrary code via a crafted page. Remediation: upgrade to Chromium 91.0.4472.164+; advisories note a related exploit may exist in the wild.

CVE-2022-1129

CVE-2022-1129 : Google Chrome on Android before 100.0.4896.60 suffers from an inappropriate Full Screen Mode implementation that can allow a remote attacker to spoof the Omnibox (URL bar) via a crafted HTML page. The issue is listed with a CVSS v3.1 base score of 6.5 (Medium); impact is spoofing ...

CVE-2022-1637

CVE-2022-1637 targets Google Chrome’s Web Contents component. The issue arises from an inappropriate implementation that allows a remote attacker to leak cross-origin data via a crafted HTML page. Affected product is Chrome (Chromium-based); the specific impact is data disclosure between origins....

CVE-2022-4175

CVE-2022-4175 affects Google Chrome/Chromium, describing a Use-After-Free vulnerability in Camera Capture that could allow a remote attacker to trigger heap corruption via a crafted HTML page. The issue is confirmed in Chrome/Chromium family and was addressed in the 108.0.5359.71 release. Public ...

CVE-2022-4184

CVE-2022-4184 affects Google Chrome Autofill. The issue is insufficient policy enforcement that allowed bypassing Autofill restrictions via a crafted HTML page. Affected products include Chrome/Chromium, prior to version 108.0.5359.71. The Chrome release notes confirm this CVE (CVE-2022-4184) as ...

CVE-2023-1811

CVE-2023-1811 is a Chrome/Chromium use-after-free in the Frames component causing potential heap corruption when a user engages in specific UI interactions with a crafted HTML page. The issue affects Google Chrome before version 112.0.5615.49 (reported as a high-severity, network-exploitable vuln...

CVE-2026-12032

CVE-2026-12032 affects Google Chrome on Android (pre‑149.0.7827.115) where an inappropriate implementation in Passwords allowed a remote attacker, who had renderer access, to bypass site isolation via a crafted HTML page. The connected sources confirm the issue exists in Passwords and is tied to ...

CVE-2026-15901

CVE-2026-15901 is a Use-After-Free in the Network component of Google Chrome/Chromium prior to 150.0.7871.128, enabling a remote attacker to potentially exploit heap corruption via a crafted HTML page. The issue affects Chrome/Chromium’s network handling and is rated with CRITICAL impact; remedia...

CVE-2026-4453

CVE-2026-4453 affects Google Chrome on macOS, due to an integer overflow in Dawn that could allow a remote attacker to leak cross-origin data via a crafted HTML page. Affected Chrome builds are prior to 146.0.7680.153 (per Chromium Chrome advisories and Debian/chromium security updates). Remediat...

CVE-2020-15965

CVE-2020-15965: Type confusion in V8 within Google Chrome prior to 85.0.4183.121 allows remote attackers to trigger out-of-bounds memory access via crafted HTML, potentially leading to arbitrary code execution or memory corruption. Affected component is Chrome’s V8 engine; impact described as rem...