CVE-2023-1822

CVE-2023-1822 : A vulnerability in Chromium/Google Chrome’s navigation UI allowed domain spoofing via a crafted HTML page. Affected: Chromium/Chrome before version 112.0.5615.49. Root cause: incorrect security UI in Navigation. Impact: remote attacker could spoof domain; user interaction required...

CVE-2023-3732

CVE-2023-3732: Out of bounds memory access in Mojo within Google Chrome before 115.0.5790.98 allows a remote attacker who has compromised the renderer process to potentially cause heap corruption via a crafted HTML page. Connected sources confirm this is a Chromium/Chrome vulnerability affecting ...

CVE-2026-14062

The CVE-2026-14062 entry concerns Google Chrome on ChromeOS with an incorrect implementation in the Views component, affecting versions prior to 150.0.7871.47. A user convincing a target to install a malicious extension could allow access to potentially sensitive data from process memory via that...

CVE-2019-13718

CVE-2019-13718 corresponds to a Chrome/Chromium IDN spoofing flaw in Omnibox caused by insufficient validation of internationalized domain names (IDN homographs) in versions prior to 78.0.3904.70. Public advisories (Debian, Arch, Mageia, CNVD/CVE trackers) confirm the issue and cite a fix in 78.0...

CVE-2019-13746

CVE-2019-13746 affects Google Chrome Omnibox: Insufficient policy enforcement in Omnibox prior to 79.0.3945.79 allows a remote attacker to spoof the URL bar via a crafted HTML page. Affected: Chrome/Chromium Omnibox (policy enforcement in URL bar). Impact: spoofing of Omnibox contents; no other i...

CVE-2021-37963

Technical details about CVE-2021-37963 are not publicly provided in the connected documents. The sources reiterate the same description without specifics on affected products/versions beyond Chrome prior to 94.0.4606.54. Monitor for updates.

CVE-2021-37981

CVE-2021-37981 is a Chrome/Chromium vulnerability: a heap buffer overflow in the Skia component prior to 95.0.4638.54 allows a renderer-compromised remote attacker to potentially escape the sandbox via a crafted HTML page. The connected documents confirm the flaw lies in Skia, affects Chromium-ba...

CVE-2021-4057

CVE-2021-4057 is a use-after-free in Chromium’s file API prior to 96.0.4664.93. Multiple connected advisories describe it as allowing a remote attacker who gains renderer access to potentially trigger heap corruption. The vulnerability is among a set of Chromium issues fixed in version 96.0.4664....

CVE-2023-1819

CVE-2023-1819 is an information-disclosure flaw in Google Chrome/Chromium Accessibility: an out-of-bounds memory read via a crafted HTML page. Affected: Google Chrome/Chromium (Accessibility component). Root cause: out-of-bounds read. Impact: potential confidential data exposure (C: High, I/N). E...

CVE-2023-2461

CVE-2023-2461 affects Google Chrome/Chromium OS Inputs on ChromeOS before 113.0.5672.63. Root cause: use-after-free in OS Inputs leading to heap corruption via crafted UI interaction after user engagement. Impact per sources: remote attacker could exploit via user interaction; CVSS v3.1 indicates...

CVE-2024-0222

CVE-2024-0222 involves a use-after-free in ANGLE used by Google Chrome/Chromium, allowing a remote attacker who gains renderer process access to potentially corrupt the heap via a crafted HTML page. Affected software version appears to be Chrome/Chromium up to and including 120.0.6099.199 (and Ch...

CVE-2024-2630

CVE-2024-2630 affects Google Chrome on iOS, describing an inappropriate implementation that allowed a remote attacker to leak cross-origin data via a crafted HTML page. The issue is tied to Chromium/Chrome prior to version 123.0.6312.58. Public advisories in connected feeds confirm remediation by...

CVE-2018-6086

CVE-2018-6086 is a use-after-free in Google Chrome’s Networking Disk Cache caused by a double-eviction in Incognito mode. The issue affects Chrome/Chromium prior to version 66.0.3359.117 (fixed in the 66.0.3359.117 release, per Debian security advisories and the Chrome stable-channel blog). A rem...

CVE-2020-6467

CVE-2020-6467 is a use-after-free vulnerability in the WebRTC component of Chromium/Google Chrome prior to 83.0.4103.61. The advisory description from the initial document states a remote attacker could potentially exploit a heap corruption via a crafted HTML page. Connected sources corroborate a...

CVE-2022-1875

CVE-2022-1875 relates to Google Chrome’s PDF implementation. The vulnerability arises from an inappropriate PDF handling implementation, allowing a remote attacker to leak cross-origin data via a crafted HTML page. Affected versions are Chrome before 102.0.5005.61. Impact is cross-origin data lea...

CVE-2022-4177

CVE-2022-4177 : Use-after-free in Chrome extensions; vulnerable as of Chrome/Chromium before 108.0.5359.71. An attacker who persuades a user to install a crafted extension via UI interaction could exploit heap corruption. The Chrome stable release 108.0.5359.71 and related Chromium fixes address ...

CVE-2023-4362

CVE-2023-4362 affects Google Chrome/Chromium prior to 116.0.5845.96. It is a heap buffer overflow in Mojom IDL that could allow a remote attacker who has already compromised the renderer process and gained control of a WebUI process to trigger heap corruption via a crafted HTML page, with impact ...

CVE-2024-2631

CVE-2024-2631 affects Google Chrome/Chromium on iOS with insecure UI handling in versions before 123.0.6312.58, enabling a remote attacker to spoof UI via a crafted HTML page. The vulnerability is categorized as Medium severity in the provided metrics, with network attack vector, user interaction...

CVE-2022-3196

Concrete details confirm CVE-2022-3196 affects Chromium/Google Chrome PDF handling with a use-after-free leading to possible heap corruption via crafted PDFs, fixed in upstream Chrome/Chromium at version 105.0.5195.125 and newer. Public sources describe the vulnerability as a PDF memory reuse-aft...

CVE-2023-2467

Google Chrome on Android prior to 113.0.5672.63 is affected by CVE-2023-2467 due to an inappropriate implementation in Prompts, which could allow a remote attacker to bypass permissions restrictions via a crafted HTML page. The impact is a permissions bypass without other code execution details p...

CVE-2026-14039

CVE-2026-14039 concerns Google Chrome’s GetUserMedia, where insufficient policy enforcement before version 150.0.7871.47 allowed a remote attacker to bypass the same-origin policy via a crafted HTML page. The vulnerability affects Chrome components related to media permissions and page-origin che...

CVE-2019-13673

CVE-2019-13673 affects Google Chrome/Chromium: insufficient data validation in developer tools allowed a remote attacker to leak cross-origin data via a crafted HTML page. Fixes are shipped in Chromium/Chrome updates (e.g., Debian security advisory lists Chromium versions 78.0.3904.97+ and relate...

CVE-2020-16029

CVE-2020-16029 is an access restriction bypass in PDFium used by Chromium/Chrome prior to version 87.0.4280.66. The issue is described as an inappropriate/improper implementation in PDFium that allows bypassing navigation restrictions via a crafted PDF file. Connected advisories identify the affe...

CVE-2021-38007

CVE-2021-38007 describes a type confusion vulnerability in the V8 component of the Chromium-based Chromium browser engine prior to version 96.0.4664.45. Multiple connected advisories confirm the same issue affecting Chromium-derived products (e.g., Chromium, Vivaldi, Opera) and list it among a br...

CVE-2022-0454

CVE-2022-0454 corresponds to a heap buffer overflow in ANGLE within Google Chrome prior to 98.0.4758.80, enabling a remote attacker to potentially corrupt heap memory via a crafted HTML page. The vulnerability affects Chrome/ANGLE components, with exploitation possible through network-driven HTML...

CVE-2022-2612

CVE-2022-2612 affects Google Chrome/Chromium prior to version 104.0.5112.79. The issue is a side-channel information leakage in keyboard input that lets a remote attacker who has already compromised the renderer process exfiltrate potentially sensitive data from process memory via a crafted HTML ...

CVE-2023-3733

CVE-2023-3733 affects Google Chrome/Chromium: Inappropriate implementation in WebApp Installs can allow a crafted HTML page to spoof the Omnibox contents. The issue is fixed in Chrome/Chromium around 115.0.5790.98 (and later, e.g., 115.0.5790.99 per update notes); Debian and other advisories conf...

CVE-2026-13941

CVE-2026-13941 affects Google Chrome on Android. The vulnerability arises from an inappropriate SiteSettings implementation that enables UI spoofing via a crafted HTML page. Affected version is Chrome for Android before 150.0.7871.47. Impact is UI spoofing (no confidentiality, no data loss per th...

CVE-2020-16032

CVE-2020-16032 affects Chromium/Google Chrome prior to 87.0.4280.66 in the sharing UI. The vulnerability is described as content spoofing in the sharing component, i.e., an incorrect security UI could misrepresent content shown to users. Affected products include Chromium/Chrome, with multiple up...

CVE-2021-30587

CVE-2021-30587 affects Google Chrome/Chromium before 92.0.4515.107 due to an inappropriate implementation in Compositing that could allow a remote attacker to spoof the Omnibox (URL bar) via a crafted HTML page. Impact is spoofing of URL bar contents with no broader data disclosure stated in the ...

CVE-2021-37989

CVE-2021-37989 is an issue in the Blink component of Google Chrome prior to 95.0.4638.54 . The problem is an inappropriate implementation that allows a remote attacker to abuse the Content Security Policy via a crafted HTML page. Impact is described as potential policy abuse with craftable conten...

CVE-2021-37993

CVE-2021-37993 describes a use-after-free in the PDF Accessibility component of the Chromium-based Google Chrome prior to 95.0.4638.54, enabling a remote attacker to potentially trigger heap corruption via a crafted HTML page. The vulnerability affects Google Chrome’s PDF Accessibility path (Chro...

CVE-2022-4436

CVE-2022-4436 describes a Use-After-Free in Blink Media used by Google Chrome before version 108.0.5359.124, enabling a remote attacker to potentially trigger heap corruption via a crafted HTML page. Affected product is Google Chrome (Blink/Chromium stack). The root cause is a use-after-free in B...

CVE-2023-4359

CVE-2023-4359 affects Google Chrome on iOS before 116.0.5845.96 due to an inappropriate implementation in the App Launcher. The issue could allow a remote attacker to spoof elements of the security UI through a crafted HTML page. Public advisories/updates indicate that Chromium-based browsers (Ch...

CVE-2024-0812

CVE-2024-0812 is an issue in Google Chrome/Chromium prior to 121.0.6167.85, described as an inappropriate implementation in Accessibility that could allow remote object corruption via a crafted HTML page (severity High). The Connected documents corroborate that Chromium/Chrome updates addressing ...

CVE-2026-19162

CVE-2026-19162 affects Google Chrome’s V8 engine prior to version 151.0.7922.109. The vulnerability is an out-of-bounds write in V8 that, via a crafted HTML page, could let a remote attacker execute arbitrary code inside the browser sandbox. The connected Chrome advisory indicates a stable-channe...

CVE-2026-19559

CVE-2026-19559 is a Google Chrome use-after-free in HTML that enables remote code execution via a crafted HTML page. Affected software: Google Chrome versions prior to 151.0.7922.137 (and cited sources also reference 151.0.7922.138 as the fixed target). Root cause: use-after-free in HTML handling...

CVE-2011-1202

The CVE-2011-1202 issue affects libxslt 1.1.26 and earlier, where xsltGenerateIdFunction could leak heap addresses via an XSLT generate-id call (affects Chrome before 10.0.648.127 and other products). Impact: potential disclosure of memory addresses; no explicit exploitation details provided. Roo...

CVE-2018-6149

CVE-2018-6149: Out-of-bounds write in the V8 JavaScript engine of Chromium/Google Chrome prior to 67.0.3396.87. A remote attacker could exploit this via a crafted webpage to execute arbitrary code. Remediation: upgrade to 67.0.3396.87 or newer (upstream fix). Connected sources note the issue and ...

CVE-2019-5874

The connected Debian/Fedora entries confirm CVE-2019-5874 is a Chromium/Chrome vulnerability related to insufficient filtering in external URI handling. Root cause: inadequate filtering of URI schemes in chrome's navigation logic, allowing a crafted HTML page to bypass navigation restrictions. Im...

CVE-2020-16020

CVE-2020-16020 concerns the Chromium/Google Chrome cryptohome component. In ChromeOS builds prior to 87.0.4280.66, an attacker who already had code execution within the browser process could bypass discretionary access control via a malicious file, enabling elevated privilege effects within the b...

CVE-2020-16035

CVE-2020-16035 affects the cros-disks component in Chromium/ChromeOS before 87.0.4280.66, due to insufficient data validation. This could allow a compromised browser process to bypass noexec restrictions via a malicious file, enabling potential local or remote implications as described in multipl...

CVE-2021-21214

CVE-2021-21214 refers to a use‑after‑free in the Network API of Google Chrome. The issue, exploitable via a crafted Chrome Extension, can lead to heap corruption and potentially remote code execution. Affected software is Google Chrome prior to 90.0.4430.72; multiple connected advisories corrobor...

CVE-2021-30630

CVE-2021-30630 concerns Blink in Google Chrome. The issue is an unsafe implementation in Blink before 93.0.4577.82 that allows a remote attacker, after compromising the renderer process, to leak cross-origin data via a crafted HTML page. Affected component: Blink/Chromium rendering engine; affect...

CVE-2022-0467

CVE-2022-0467 affects Google Chrome on Windows before 98.0.4758.80, where an inappropriate implementation in Pointer Lock allows a remote attacker to bypass navigation restrictions via a crafted HTML page. The issue impacts Chrome/Chromium components related to Pointer Lock handling. According to...

CVE-2022-2296

CVE-2022-2296 is a use-after-free in Chrome OS Shell on Chrome OS prior to 103.0.5060.114, potentially allowing a remote attacker who entices user interactions to cause heap corruption. Affected software includes Chromium/Chrome family on Chrome OS; the issue is classified with high impact (avail...

CVE-2022-3652

CVE-2022-3652 is a type confusion issue in V8 affecting Google Chrome/Chromium prior to 107.0.5304.62, enabling potential remote exploitation via crafted HTML pages and leading to heap corruption. The Chrome stable-channel fix is 107.0.5304.62 (Windows/Linux/macOS) with subsequent 107.0.5304.68 D...

CVE-2023-2134

CVE-2023-2134 affects Google Chrome/Chromium prior to 112.0.5615.137, due to an out-of-bounds memory access in the Service Worker API that could allow a remote attacker to trigger heap corruption via a crafted HTML page. The vulnerability is rated High severity with network attack vector and user...

CVE-2024-3515

CVE-2024-3515 describes a use-after-free in the Dawn component of Google Chrome/Chromium prior to version 123.0.6312.122. The underlying issue can allow a remote attacker to potentially trigger heap corruption via a crafted HTML page, with the described impact of arbitrary code execution or simil...

CVE-2026-17651

CVE-2026-17651 refers to a vulnerability in Dawn within Google Chrome on Android, caused by insufficient validation of untrusted input. The issue could potentially allow a sandbox escape via a crafted HTML page. The vulnerability is labeled as Critical (CVSS 3.1: 9.6) with network attack vector a...