CVE-2022-0111

CVE-2022-0111 relates to Google Chrome’s navigation logic. Several connected sources confirm an “Inappropriate implementation in Navigation” vulnerability in Chrome prior to 97.0.4692.71 that allowed a remote attacker to incorrectly set the origin via a crafted HTML page. The Debian bulletin note...

CVE-2022-1867

CVE-2022-1867 affects Google Chrome/Chromium upstream: insufficient validation of untrusted input in Data Transfer allows bypass of same-origin policy via crafted clipboard content. Affected: Chrome/Chromium before 102.0.5005.61. Remediation: update to Chrome/Chromium 102.0.5005.61 or later; Debi...

CVE-2022-2998

CVE-2022-2998 is a Chrome use-after-free in Browser Creation that could enable heap corruption when a user engages a specific UI interaction via a crafted HTML page. Affected product/version: Google Chrome prior to 104.0.5112.101; vulnerable component is the Browser Creation path (heap misuse). I...

CVE-2022-3304

CVE-2022-3304 is a use-after-free in CSS in Google Chrome/Chromium prior to 106.0.5249.62 that could allow remote heap corruption via a crafted HTML page. The issue affects Chrome/Chromium’s CSS handling and was fixed in Chrome 106.0.5249.61–106.0.5249.62 (stable channel). Exploitation status is ...

CVE-2023-2464

CVE-2023-2464 affects Google Chrome (Chromium-based) via an inappropriate implementation in PictureInPicture. A crafted HTML page and a malicious extension can lead to an origin spoof in the Chrome security UI. The vulnerability is tied to Chrome/Chromium builds prior to 113.0.5672.63 (the fixed ...

CVE-2023-3740

CVE-2023-3740 is a low-severity vulnerability in Google Chrome/Chromium themes due to insufficient validation of untrusted input in Themes, allowing a remote attacker to deliver malicious content via a crafted background URL. Affected product: Google Chrome (Chromium-based) before 115.0.5790.98. ...

CVE-2023-6347

CVE-2023-6347 is a use-after-free in Mojo within Google Chrome/Chromium, prior to version 119.0.6045.199, exposing potential heap corruption via a crafted HTML page. Connected sources confirm the affected component is Mojo in Chromium-based Chrome, with an impact described as high (network attack...

CVE-2024-0806

CVE-2024-0806 describes a use-after-free in Google Chrome Passwords, leading to potential heap corruption via specific UI interaction. Affected component: Chrome/Chromium Passwords module; vulnerable before version 121.0.6167.85. Evidence from multiple sources (including Debian security advisory ...

CVE-2022-3370

CVE-2022-3370 is a Chrome/Chromium vulnerability: a use-after-free in Custom Elements leading to potential heap corruption. Affects Chrome/Chromium prior to version 106.0.5249.91. Exploitation would require a crafted HTML page and could lead to high-severity impact across confidentiality, integri...

CVE-2022-3446

CVE-2022-3446 is a heap buffer overflow in WebSQL within Google Chrome (Chromium) prior to 106.0.5249.119. The vulnerability affects the WebSQL component and could enable heap corruption via a crafted HTML page. Google Chrome’s stable channel update 106.0.5249.119 (and related release notes) indi...

CVE-2022-3661

Google Chrome/Chromium vulnerability CVE-2022-3661 arises from insufficient data validation in Extensions, allowing a remote attacker who already compromised the renderer to leak cross-origin data via a crafted extension. Affected versions are Chrome/Chromium prior to 107.0.5304.62; the issue is ...

CVE-2022-4437

CVE-2022-4437 describes a heap corruption risk from a use-after-free in Mojo IPC in Google Chrome/Chromium before 108.0.5359.124. A remote attacker could exploit this via a crafted HTML page, leading to potentially arbitrary code execution or crash. The issue is listed as High severity. Public de...

CVE-2023-1816

CVE-2023-1816 affects Google Chrome/Chromium’s Picture-in-Picture feature, with root cause described as an incorrect security UI. It allows a remote attacker to potentially perform navigation spoofing through a crafted HTML page. Affected versions are Chrome/Chromium prior to 112.0.5615.49; remed...

CVE-2023-4353

CVE-2023-4353 affects ANGLE in Google Chrome up to version 116.0.5845.96. The vulnerability is a heap buffer overflow in ANGLE that can lead to heap corruption via a crafted HTML page, enabling a remote attacker to potentially exploit the browser. Affected software is Google Chrome/Chromium with ...

CVE-2023-4364

CVE-2023-4364 describes an insecure implementation in Chrome’s Permission Prompts prior to 116.0.5845.96, allowing a crafted HTML page to obfuscate security UI. The issue affects Google Chrome (Chromium) and stems from an inappropriate implementation in Permission Prompts, with a Medium severity ...

CVE-2024-0223

CVE-2024-0223 describes a heap buffer overflow in ANGLE used by Google Chrome/Chromium, allowing potential remote code execution via a crafted HTML page. Affected component: ANGLE within Chromium-based browser code paths prior to version 120.0.6099.199. Impact per sources is high (C/H/I/A) with n...

CVE-2025-9132

CVE-2025-9132 concerns Google Chrome’s V8 engine: an out-of-bounds write can lead to heap corruption when processing crafted HTML pages. The vulnerability affects Chrome/Chromium prior to version 139.0.7258.138. Impact is described as potential arbitrary code execution/heap damage, with a High se...

CVE-2026-13030

CVE-2026-13030 affects Google Chrome on Android. It describes an uninitialized use in GPU that could allow a remote attacker to read potentially sensitive data from process memory via a crafted HTML page. Impact is stated as high severity by Chromium, with the version note indicating exposure pri...

CVE-2021-37970

CVE-2021-37970: Use-after-free in the File System API of Google Chrome (Chromium) prior to 94.0.4606.54 can allow a remote attacker to potentially cause heap corruption via a crafted HTML page. Multiple vendor advisories note this as a Chrome/Chromium vulnerability with remediation via updates. P...

CVE-2021-37996

CVE-2021-37996: Insufficient validation of untrusted input in the Downloads component of the Chromium-based Google Chrome engine before version 95.0.4638.54. This vulnerability allows a remote attacker to bypass navigation restrictions via a malicious file. The connected advisories (e.g., ASA-202...

CVE-2022-2618

CVE-2022-2618 affects Google Chrome/Chromium up to version 104.0.5112.79, with the root cause described as insufficient validation of untrusted input in Internals. The vulnerability could allow a remote attacker to bypass download restrictions via a malicious file, with a measured CVSSv3.1 base s...

CVE-2022-3888

CVE-2022-3888 is a use-after-free in Chrome’s WebCodecs implementation that could allow a remote attacker to cause heap corruption via a crafted HTML page. Affected product: Google Chrome (WebCodecs component). Root cause: use-after-free in WebCodecs leading to memory corruption. Impact: high (re...

CVE-2023-0128

CVE-2023-0128 is a use-after-free in Chrome OS Overview Mode for Google Chrome prior to 109.0.5414.74, enabling heap corruption via a crafted HTML page when a user is prompted by specific UI interactions. The vulnerability affects Chrome OS/Chrome Desktop builds and was publicly addressed in the ...

CVE-2024-9369

CVE-2024-9369: Insufficient data validation in Mojo within Google Chrome (Chromium) allowed a remote attacker, who had compromised the renderer process, to perform an out-of-bounds memory write via a crafted HTML page. The issue is confirmed in Chrome/Chromium and has high impact. Public fix/upda...

CVE-2021-30583

CVE-2021-30583 affects Google Chrome on iOS. The vulnerability arises from insufficient policy enforcement in image handling, allowing a remote attacker to leak cross-origin data via a crafted HTML page. Affected version: Chrome on iOS prior to 92.0.4515.107. Impact is cross-origin data leakage; ...

CVE-2021-37987

CVE-2021-37987 affects Chromium’s Network APIs component, prior to 95.0.4638.54. The vulnerability is a use-after-free/heap issue that could allow a remote attacker to trigger heap corruption via crafted HTML. Affected product/version: Chromium browser engine before 95.0.4638.54. Source entries (...

CVE-2021-4079

CVE-2021-4079 refers to an out-of-bounds write in WebRTC within Google Chrome before version 96.0.4664.93, leading to potential heap corruption by crafted WebRTC packets. The connected security notices confirm the affected component as Chromium-based Chrome/WebRTC, with the vulnerability enabling...

CVE-2023-0930

CVE-2023-0930 corresponds to a heap buffer overflow in Chrome/Chromium’s Video component, present in Google Chrome prior to 110.0.5481.177. The issue could allow a remote attacker to potentially exploit heap corruption via a crafted HTML page. The vulnerability is rated High severity with network...

CVE-2023-1812

Summary: CVE-2023-1812 affects Google Chrome/Chromium. Vulnerability: Out-of-bounds memory access in DOM Bindings, exploitable via a crafted HTML page, enabling remote attacker impact as described in Chrome/Chromium advisories. Affected versions: prior to 112.0.5615.49. Remediation: upgrade to 11...

CVE-2023-2465

CVE-2023-2465 affects Google Chrome / Chromium. The issue is an inappropriate CORS implementation that could allow a remote attacker to leak cross-origin data via a crafted HTML page. Affected component: Chromium-based browsers (Chrome/Chromium); root cause is flawed CORS handling leading to data...

CVE-2019-5856

CVE-2019-5856 affects Chromium before 76.0.3809.87; described as an access restriction bypass due to insufficient filesystem URI permission checks. Arch Linux advisory confirms remediation by upgrading to 76.0.3809.87-1, with upstream fixes in that release. Other sources note broader Chromium fix...

CVE-2021-30629

CVE-2021-30629 is a concrete vulnerability in Chromium/Chrome: a use-after-free in the Permissions component of the Chromium browser engine before 93.0.4577.82. The issue could allow a remote attacker who compromises the renderer process to potentially trigger heap corruption via a crafted HTML p...

CVE-2022-3071

CVE-2022-3071 is a use-after-free in the Tab Strip of Google Chrome on ChromeOS/Lacros prior to 105.0.5195.52, potentially allowing heap corruption via crafted UI interactions. Affected: ChromeOS Lacros environment; vulnerable component/process: Tab Strip UI handling. Impact: remote attacker coul...

CVE-2022-3198

CVE-2022-3198 involves a use-after-free in PDF handling in Google Chrome (Chromium) prior to version 105.0.5195.125 , allowing a remote attacker to potentially exploit heap corruption via a crafted PDF file. The vulnerability affects Chromium-based Chrome and related builds (as reflected in multi...

CVE-2025-0996

Summary (CVE-2025-0996) : An insecure/incorrect implementation in the Chrome Android browser UI allowed a remote attacker to spoof the Omnibox (URL bar) via a crafted HTML page. The issue affects Chrome on Android prior to version 133.0.6943.98. The root cause is an inappropriate UI implementatio...

CVE-2010-4494

CVE-2010-4494 is a double-free vulnerability in libxml2 (notably 2.7.8 and related versions) used by Chrome and other products. The issue affects libxml2’s handling of XPath/XML entities and could allow a remote attacker to crash or potentially execute code via crafted XML input. Public advisorie...

CVE-2021-21117

CVE-2021-21117 is a Chromium/ Cryptohome policy enforcement issue reported as a local privilege-escalation vulnerability. The connected documents confirm the flaw exists in Cryptohome before Chromium 88.0.4324.96, allowing a local attacker to escalate OS privileges via a crafted file. The impact ...

CVE-2022-0100

CVE-2022-0100 describes a heap/buffer overflow in Chrome’s Media streams API. A remote attacker could trigger heap corruption via a crafted HTML page. Affected software is Google Chrome (Chromium-based); vulnerability is associated with versions before 97.0.4692.71. The CVSS data indicates high i...

CVE-2022-0470

CVE-2022-0470 corresponds to an issue in Google Chrome’s V8 engine prior to 98.0.4758.80, described as an out-of-bounds memory access that could allow a remote attacker to potentially trigger heap corruption via a crafted HTML page. The vulnerability applies to Chrome/Chromium deployments using a...

CVE-2022-3039

CVE-2022-3039 : Use-after-free in WebSQL of Google Chrome prior to 105.0.5195.52 allows remote heap corruption via a crafted HTML page. Affected: Chrome/WebSQL; root cause: use-after-free. Impact: high (potential full/partial heap corruption). Mitigation: upgrade to Chrome 105.0.5195.52 or later ...

CVE-2023-1815

CVE-2023-1815: Use-after-free in Chrome/Chromium Networking APIs (heap corruption) due to a memory reuse issue. Affects Google Chrome/Chromium prior to 112.0.5615.49; exploitation requires user interaction (UI click) after convincing the user. Remediation: update to Chromium 112.0.5615.49 or newe...

CVE-2023-3735

CVE-2023-3735 concerns Google Chrome/Chromium: an inappropriate implementation in the Web API Permission Prompts allowed a crafted HTML page to obfuscate security UI. The issue affects Chrome/Chromium’s permission UI handling and is classified as Medium severity (CVSS v3.1: AV:N/AC:L/PR:N/UI:R/S:...

CVE-2023-6511

CVE-2023-6511 : Concrete details across connected sources show an inappropriate implementation in Autofill for Google Chrome prior to version 120.0.6099.62, allowing a remote attacker to bypass Autofill restrictions via a crafted HTML page. The Chromium-based issue is described as a low-severity ...

CVE-2024-0224

The CVE-2024-0224 entry describes a use-after-free in WebAudio in Google Chrome/Chromium, leading to potential heap corruption via a crafted HTML page. Affected component: Web Audio in Chromium-based browsers prior to version 120.0.6099.199. Root cause: use-after-free in WebAudio code path that m...

CVE-2024-0810

CVE-2024-0810 affects Google Chrome/Chromium DevTools. The issue is an insufficient policy enforcement vulnerability in DevTools that, when a user installs a crafted malicious extension, can leak cross-origin data. Impact is described as medium severity. Affected versions are Chrome/Chromium prio...

CVE-2024-2629

CVE-2024-2629 affects Google Chrome for iOS (Chromium-based UI) with an incorrect security UI that allows UI spoofing via a crafted HTML page. Root cause: insecure UI handling in Chrome prior to 123.0.6312.58. Impact: UI spoofing; no explicit exploit details provided in the sources. Remediation: ...

CVE-2026-13023

CVE-2026-13023: Uninitialized Use in Chrome’s GPU (before 149.0.7827.197). A remote attacker who already compromised the renderer could read potentially sensitive data from process memory via a crafted HTML page. Impact = memory disclosure; remediation = update to Chrome 149.0.7827.197 or newer (...

CVE-2026-15764

CVE-2026-15764 is a use-after-free in Chrome’s Ozone path on Linux, enabling potential heap corruption when a user is coerced into specific UI gestures via a crafted HTML page. Affected software is Google Chrome on Linux prior to the fixed build, with the issue classified as Critical (CVSS v3.1: ...

CVE-2026-15903

CVE-2026-15903 affects Google Chrome’s V8 engine, with an out-of-bounds read/write vulnerability in V8 prior to version 150.0.7871.128. The issue allows a crafted HTML page to run arbitrary code inside the sandbox. The description notes the vulnerability as High severity and implies remote code e...

CVE-2026-16424

CVE-2026-16424 is a use-after-free vulnerability in the GPU component of Google Chrome on Android prior to version 150.0.7871.182. The description states a remote attacker who has compromised the renderer process could potentially cause a sandbox escape via a crafted HTML page. Connected sources ...