CVE-2021-38009

CVE-2021-38009 affects Chromium/Chrome cache component prior to 96.0.4664.45. Root cause: inappropriate implementation in cache. Impact: remote attacker could leak cross-origin data via crafted HTML. Remediation: upgrade to Chromium/Chrome 96.0.4664.45 or newer (as reflected in Debian/Arch Linux ...

CVE-2022-1876

CVE-2022-1876 refers to a heap buffer overflow in Chrome DevTools prior to 102.0.5005.61. The issue could be triggered when a user is convinced to install a malicious extension and visits a crafted HTML page, potentially allowing heap corruption. Affected component: Chrome’s DevTools. Root cause:...

CVE-2022-2854

CVE-2022-2854: A use-after-free in SwiftShader within Google Chrome/Chromium (pre-104.0.5112.101) could allow a remote attacker to cause heap corruption via a crafted HTML page. The vulnerability is confirmed in Linux distributions (e.g., Debian Chromium package fixed to 104.0.5112.101) and is de...

CVE-2023-3737

CVE-2023-3737: A vulnerability in Google Chrome/Chromium—Inappropriate implementation in Notifications—could allow a remote attacker to spoof media notifications via a crafted HTML page. Affected: Chrome/Chromium (Notifications component). Root cause: improper implementation in notification handl...

CVE-2023-6707

CVE-2023-6707 is a Use-after-free in CSS in Google Chrome (Chromium) prior to 120.0.6099.109. The issue affects the CSS handling path in Chrome/Chromium and can lead to heap corruption via a crafted HTML page. The Chrome stable channel update 120.0.6099.109 (and related Chromium 120.0.6099.109 bu...

CVE-2025-2137

CVE-2025-2137 affects Google Chrome (Chromium’s V8) with an out-of-bounds read in V8 prior to 134.0.6998.88, allowing remote memory access via a crafted HTML page. Affected component: V8 (Chrome/Chromium web engine); root cause: out-of-bounds read. Impact per sources includes potential informatio...

CVE-2025-3066

CVE-2025-3066: In Google Chrome/Chromium, a use-after-free in Site Isolation could allow a remote attacker to trigger heap corruption via a crafted HTML page. The issue affects Chrome before 135.0.7049.84; a security fix was released in the ChromeOS/Chrome desktop Stable channel update to 135.0.7...

CVE-2018-6073

CVE-2018-6073 is a WebGL heap-buffer overflow in Google Chrome before 65.0.3325.146 that allowed a remote attacker to perform an out-of-bounds memory write via a crafted HTML page. The vulnerability is tied to the WebGL implementation in Chrome’s rendering stack. Debian security advisories list t...

CVE-2018-6120

CVE-2018-6120 affects Google Chrome’s PDFium component. An integer overflow could cause a heap out-of-bounds write in PDFium, enabling a remote attacker to execute arbitrary code inside Chrome’s sandbox via a crafted PDF file. Affected version: Chrome prior to 66.0.3359.170. Remediation: upgrade ...

CVE-2021-37959

CVE-2021-37959 affects Google Chrome Task Manager: use-after-free leading to heap corruption when a user is convinced to perform a sequence of gestures on a crafted HTML page. Documented in multiple advisories (e.g., Debian DSA-5046-1) as a Chromium/Chrome vulnerability with impact to code execut...

CVE-2021-37965

CVE-2021-37965 affects Google Chrome/Chromium’s Background Fetch API. The vulnerability stems from an inappropriate implementation, enabling a remote attacker to leak cross-origin data via a crafted HTML page. The NVD records a CVSS v3.1 base score of 4.3 (Medium) with network attack vector, no p...

CVE-2021-37966

Technical details for CVE-2021-37966 are not publicly available in the provided connected documents. Monitor for updates; no confirmed exploit vectors, impacted products, or remediation details are present in these sources.

CVE-2021-38005

CVE-2021-38005 affects Google Chrome/Chromium's loader component, with a use-after-free vulnerability prior to 96.0.4664.45 that could enable remote code execution via a crafted HTML page. Affected engines: Chromium-based Chrome/Chromium up to version 96.0.4664.45; root cause: use-after-free in t...

CVE-2022-0102

CVE-2022-0102 affects Google Chrome/Chromium’s V8 engine through type confusion, allowing remote attackers to potentially trigger heap corruption. The vulnerability is tied to Chrome/Chromium before version 97.0.4692.71. Impact per sources includes arbitrary code execution, denial of service, or ...

CVE-2022-1860

CVE-2022-1860 affects Google Chrome UI Foundations on Chrome OS prior to 102.0.5005.61. It is described as a use-after-free vulnerability in the UI Foundations component that can lead to heap corruption when a user is drawn into specific interactions. The issue is confirmed in Chrome release note...

CVE-2023-1820

CVE-2023-1820 describes a heap buffer overflow in Google Chrome's Browser History (Chromium) before 112.0.5615.49. The issue allows a remote attacker to potentially corrupt the heap via a crafted HTML page when the user performs specific UI interactions. Affected product: Google Chrome/Chromium (...

CVE-2023-4358

The CVE-2023-4358 entry concerns a Use-After-Free in DNS in Google Chrome/Chromium before version 116.0.5845.96, enabling remote heap corruption via a crafted HTML page. Affected products include Google Chrome/Chromium (and derivatives); root cause is a DNS-use-after-free. Impact is high (potenti...

CVE-2023-4363

CVE-2023-4363–Inappropriate implementation in WebShare in Google Chrome (Android) prior to 116.0.5845.96 allowed a remote attacker to spoof the contents of a dialog URL via a crafted HTML page. Connected advisories confirm this CVE is tracked with Chromium updates; fixes are part of Chrome/Chromi...

CVE-2024-1060

CVE-2024-1060 is a Chrome/Chromium issue described as a use-after-free in the Canvas module that could enable remote heap corruption via a crafted HTML page prior to version 121.0.6167.139. The affected product is Google Chrome/Chromium; the root cause is a memory management bug in Canvas. The pu...

CVE-2025-0997

CVE-2025-0997 affects Google Chrome (Chromium-based) prior to 133.0.6943.98. The issue is a use-after-free in Navigation triggered by a crafted Chrome Extension, potentially enabling heap corruption. Impact per sources: high severity (CVSS 3.1 base 8.1) with network attack vector, but user intera...

CVE-2025-2136

CVE-2025-2136 : A use-after-free in the Inspector of Google Chrome/Chromium allows remote heap corruption on crafted HTML pages, prior to version 134.0.6998.88. The issue affects Chrome/Chromium and was addressed in the 134.0.6998.88+ updates (e.g., Debian’s 134.0.6998.88-1~deb12u1). If vulnerabl...

CVE-2026-13021

Google Chrome prior to 149.0.7827.197 contains an inappropriate implementation in DeviceBoundSessionCredentials that can allow a remote attacker to bypass the same-origin policy via a crafted HTML page. The CVE description notes a Chromium-based issue with High severity; updates to Chrome are ref...

CVE-2026-13782

CVE-2026-13782 affects Google Chrome browser prior to 150.0.7871.47, where a use-after-free in the browser renderer could allow a remote attacker to escape the sandbox via a crafted HTML page. Upgrade to Chrome 150.0.7871.47 or later (per Chrome security updates) to remediate.

CVE-2026-7351

CVE-2026-7351 describes a race in MHTML handling in Google Chrome prior to 147.0.7727.138. The vulnerability allows a user who is induced to install a crafted Chrome Extension to leak cross-origin data via MHTML processing. The root cause, per sources, is a race condition in MHTML handling; no ex...

CVE-2013-2912

CVE-2013-2912 is a Use-after-free in the Pepper Plug-in API (PPAPI) of Chrome/Chromium, specifically in PepperInProcessRouter::SendToHost. The vulnerability allows a remote attacker to cause a denial of service and potentially other unspecified impact via a resource-destruction message. Affected ...

CVE-2018-18336

CVE-2018-18336 is a use-after-free in the PDFium component of Chromium/Google Chrome prior to version 71.0.3578.80, enabling potential heap corruption via a crafted PDF file. The Arch Linux security advisory ASA-201812-2 (and Debian/DSA-4352-1 apart from other sources) confirm the issue and state...

CVE-2021-38018

CVE-2021-38018 affects the Chromium/Chrome navigation component. An inappropriate navigation implementation can allow a remote attacker to spoof a domain via a crafted HTML page. Public advisories and CVE records consistently describe this as a domain spoofing vulnerability in Chromium-based engi...

CVE-2022-1134

CVE-2022-1134 is a Type Confusion in V8 affecting Google Chrome up to version 100.0.4896.60 prior to the March 2022 stability update. The vulnerability allows a remote attacker to potentially trigger heap corruption through a crafted HTML page. The Chrome release notes for Chrome 100 enumerate th...

CVE-2022-1633

CVE-2022-1633 : Use-after-free in Sharesheet of Google Chrome on Chrome OS prior to 101.0.4951.64. Exploitation required user interaction with specific UI actions, potentially enabling heap corruption and remote code execution as stated in the vulnerability description. Affected product: Google C...

CVE-2023-3739

CVE-2023-3739 affects Google Chrome on ChromeOS, via Chromad. The vulnerability stems from insufficient validation of untrusted input in Chromad, enabling a remote attacker to execute arbitrary code with a crafted shell script on ChromeOS builds prior to 115.0.5790.131. Impact is remote code exec...

CVE-2024-3170

CVE-2024-3170 affects Google Chrome prior to 121.0.6167.85, where a Use-after-Free in WebRTC could allow a remote attacker to cause heap corruption via a crafted HTML page. The issue is in Chromium’s WebRTC handling and is addressed by updating Chrome to 121.0.6167.85 or later. Public exploits ex...

CVE-2018-17464

CVE-2018-17464 refers to a URL spoofing vulnerability in the Omnibox component of Chromium/Google Chrome for iOS, caused by incorrect handling of browsing history prior to version 70.0.3538.67. A remote attacker could craft HTML to spoof the Omnibox content. Connected advisories confirm the issue...

CVE-2018-6179

CVE-2018-6179 is a Google Chrome/Chromium extension vulnerability: insufficient enforcement of file access permission in the activeTab case allowed a malicious extension to read local files. Affected version range is Chrome/Chromium prior to 68.0.3440.75. Impact described in sources as a local fi...

CVE-2022-1489

Summary of CVE-2022-1489 details from connected documents: Google Chrome/Chromium’s UI Shelf on Chrome OS with Lacros, prior to version 101.0.4951.41, is affected by an out-of-bounds memory access bug that can lead to heap corruption through specific user interactions. The vulnerability is descri...

CVE-2022-1873

CVE-2022-1873 applies to Google Chrome where insufficient policy enforcement in COOP allowed cross-origin data leakage via a crafted HTML page. The issue is tied to Chrome versions before 102.0.5005.61. Affected components: Chrome’s COOP handling in cross-origin contexts. Impact per sources: pote...

CVE-2022-3449

CVE-2022-3449 affects Google Chrome/Chromium prior to 106.0.5249.119, due to a use-after-free in Safe Browsing that could allow heap corruption via a crafted Chrome Extension after user installation of a malicious extension. The connected documents corroborate the issue and specify the impact as ...

CVE-2023-2462

The connected documents confirm CVE-2023-2462 affects Google Chrome/Chromium, tied to an inappropriate implementation in Prompts that allowed a remote attacker to obfuscate main origin data via a crafted HTML page. Impact is described as Medium; affected components relate to Chrome/Chromium promp...

CVE-2023-6510

CVE-2023-6510 is a Chrome/Chromium use-after-free in Media Capture (prior to 120.0.6099.62) that could allow a remote attacker to potentially exploit heap corruption via specific UI interaction. Affected product: Chromium/Chrome browser components handling Media Capture. Root cause: use-after-fre...

CVE-2024-0807

CVE-2024-0807 : Use-after-free in Web Audio code of Google Chrome/Chromium prior to 121.0.6167.85 can allow a remote attacker to potentially trigger heap corruption via a crafted HTML page. Impact is high (C/H/I/A: high). Fixes are included in Chrome/Chromium updates (e.g., Chrome 121.0.6167.85 a...

CVE-2026-11309

CVE-2026-11309 affects Google Chrome (Chromium-based) where insufficient policy enforcement in History permits a remote attacker to spoof UI via a crafted HTML page. Affected versions before 149.0.7827.53 are vulnerable; Chrome 149.0.7827.53 and later mitigate. Root cause is policy enforcement ga...

CVE-2026-19151

Summary: CVE-2026-19151 is a use-after-free vulnerability in V8 within Google Chrome, prior to version 151.0.7922.109, that could allow a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML page (Chromium security severity: High). Affected software: Google Chrome (V8 e...

CVE-2026-76017

CVE-2026-76017 is a use after free vulnerability in the Chromoting component of Google Chrome , affecting versions prior to 151.0.7922.173 . A remote attacker can exploit this via crafted network traffic to execute arbitrary code outside the sandbox , resulting in full compromise of confidentiali...

CVE-2026-9955

CVE-2026-9955 affects Google Chrome on iOS prior to 148.0.7778.216 due to an inappropriate implementation in iOS, enabling a remote attacker to leak cross-origin data via a crafted HTML page. Affected product: Chrome for iOS. Root cause: inappropriate implementation summarized in the reports; no ...

CVE-2021-37956

CVE-2021-37956 describes a use-after-free in Offline use in Google Chrome on Android prior to 94.0.4606.54, where a renderer compromise could potentially enable heap corruption via a crafted HTML page. The connected Debian advisory confirms this CVE is among multiple Chromium issues and provides ...

CVE-2021-4068

The CVE-2021-4068 entry applies to Chromium’s new tab page. The connected documents confirm an insufficient validation vulnerability in the new tab page component of the Chromium browser engine prior to version 96.0.4664.93, enabling a remote attacker to leak cross-origin data via crafted HTML pa...

CVE-2022-0452

CVE-2022-0452 is a Chrome vulnerability described in multiple sources as a use-after-free in Safe Browsing that could allow a remote attacker to potentially perform a sandbox escape via a crafted HTML page. The issue affects Chrome prior to version 98.0.4758.80 and was addressed in the Chrome 98 ...

CVE-2022-0465

CVE-2022-0465 concerns a use-after-free in Chrome’s Extensions component, leading to potential heap corruption. The vulnerability affects Google Chrome/Chromium builds before version 98.0.4758.80, with the underlying issue described as a use-after-free in Extensions, which could be triggered by u...

CVE-2022-3053

CVE-2022-3053 corresponds to an “Inappropriate implementation in Pointer Lock” in Google Chrome on macOS prior to 105.0.5195.52, enabling a remote attacker to restrict user navigation via a crafted HTML page. The connected documents confirm this vulnerability in Chromium/Chrome with affected vers...

CVE-2022-4025

CVE-2022-4025 relates to Google Chrome prior to 98.0.4758.80, where an inappropriate implementation in Paint could leak cross-origin data outside an iframe via a crafted HTML page. The vulnerability affects multiple platforms; exploitation would involve a user loading a crafted page to trigger da...

CVE-2023-6706

CVE-2023-6706 is a use-after-free in FedCM for Google Chrome/Chromium prior to 120.0.6099.109, enabling a remote attacker who tricked a user into UI interaction to potentially trigger heap corruption via a crafted HTML page. Public references in the connected documents confirm this vulnerability ...