CVE-2022-3053

CVE-2022-3053 corresponds to an “Inappropriate implementation in Pointer Lock” in Google Chrome on macOS prior to 105.0.5195.52, enabling a remote attacker to restrict user navigation via a crafted HTML page. The connected documents confirm this vulnerability in Chromium/Chrome with affected vers...

CVE-2022-4025

CVE-2022-4025 relates to Google Chrome prior to 98.0.4758.80, where an inappropriate implementation in Paint could leak cross-origin data outside an iframe via a crafted HTML page. The vulnerability affects multiple platforms; exploitation would involve a user loading a crafted page to trigger da...

CVE-2026-14128

CVE-2026-14128 concerns Google Chrome on iOS (Chrome for iOS) prior to version 150.0.7871.47. The issue is an inappropriate implementation that allows a remote attacker to spoof the contents of the Omnibox (URL bar) via a crafted HTML page. The documented impact is that the URL bar could display ...

CVE-2026-19149

Concretely affected: Google Chrome on Linux (Aura component). The issue is a use-after-free in Aura that could allow a remote attacker to escape the Chrome sandbox via a crafted HTML page. Impact is described as Critical (confidentiality, integrity and availability impact HIGH). Remediation provi...

CVE-2018-16065

CVE-2018-16065 is a Javascript reentrancy/use-after-free bug in V8 within Google Chrome, before version 69.0.3497.81, allowing a remote attacker to execute arbitrary code inside the Chrome sandbox via a crafted HTML page. Multiple connected sources confirm the issue and reference a fix in Chromiu...

CVE-2018-18358

CVE-2018-18358 affects Chromium/Google Chrome prior to 71.0.3578.80, where WPAD handling fails to correctly treat localhost, enabling a local-network attacker to proxy localhost via a crafted WPAD file. Connected advisories (Arch, Debian) confirm this as an access restriction bypass in the Proxy ...

CVE-2018-6041

CVE-2018-6041 is a Chrome/Chromium URL spoofing vulnerability in the navigation/UI that allowed a crafted HTML page to spoof the Omnibox contents. The initial description confirms incorrect security UI in navigation, enabling spoofing of the URL bar. Connected documents identify the issue as occu...

CVE-2018-6118

CVE-2018-6118 is a use-after-free in Google Chrome’s Media Cache (incognito cache double-eviction) exploited via crafted HTML on renderer-compromised sites prior to 66.0.3359.139. Affected product: Google Chrome (Media Cache component). Impact: arbitrary code execution or memory corruption; Chrom...

CVE-2018-6145

Technical details about CVE-2018-6145 are not publicly available in the provided documents; monitor for updates.

CVE-2021-21216

CVE-2021-21216 affects Google Chrome Autofill: an inappropriate implementation allowed remote attackers to spoof the security UI via a crafted HTML page. The issue is categorized as content spoofing and arises from Autofill handling in Chrome prior to 90.0.4430.72. Connected advisories (Arch Linu...

CVE-2022-0464

CVE-2022-0464 – Google Chrome/Chromium: Use-after-free in Accessibility leading to possible heap corruption. Affected: Chrome/Chromium browsers prior to 98.0.4758.80. Root cause: use-after-free in Accessibility code path; exploit could require user interaction. Impact: high (potential for comprom...

CVE-2022-3308

CVE-2022-3308 is a Medium-severity issue in Google Chrome/Chromium Developer Tools (insufficient policy enforcement) that could enable sandbox escape via a crafted HTML page. Debian/ Mageia advisories indicate the fix was released in Chromium 106.x: Debian notes 106.0.5249.61 (chromium) as the fi...

CVE-2022-4178

Summary of CVE-2022-4178 : A use-after-free in Mojo within Google Chrome before 108.0.5359.71 allows a remote attacker who has compromised the renderer process to potentially cause heap corruption via a crafted HTML page. The vulnerability affects the Mojo IPC path used by Chrome’s rendering comp...

CVE-2021-38016

CVE-2021-38016 stems from insufficient policy enforcement in Chromium’s background fetch component, allowing a remote attacker to bypass the same-origin policy via a crafted HTML page. The CVE affects Chromium-based browsers before version 96.0.4664.45 (notably Chrome/Chromium builds referenced i...

CVE-2021-4059

CVE-2021-4059 is a Chromium/Google Chrome loader vulnerability with insufficient data validation in the loader prior to version 96.0.4664.93, enabling a remote attacker to leak cross-origin data via a crafted HTML page. Affected software entry points include the Chromium browser engine used in Ch...

CVE-2021-4316

CVE-2021-4316 affects Google Chrome (Cast UI) held in Chromium-based builds. The vulnerability arises from an inappropriate implementation in Cast UI that allowed a remote attacker to spoof the browser UI via a crafted HTML page. The impact is described as spoofing the UI with Low severity (NVD C...

CVE-2023-0932

CVE-2023-0932: Use-after-free in WebRTC for Google Chrome on Windows prior to 110.0.5481.177. Root cause is heap corruption via crafted HTML page, with high impact (C/H/I/A). Affected product is Chrome/Chromium WebRTC component; remediation is to upgrade to Chrome 110.0.5481.177 or newer (or corr...

CVE-2024-0813

The CVE-2024-0813 entry documents a Use‑After‑Free in Google Chrome’s Reading Mode prior to 121.0.6167.85. The underlying issue could allow heap corruption when a user is persuaded to install a malicious extension through specific UI interaction, as described in multiple sources. Affected softwar...

CVE-2024-3176

CVE-2024-3176 affects Google Chrome with an out-of-bounds write in SwiftShader triggered by a crafted HTML page, enabling remote memory corruption. Chrome versions prior to 117.0.5938.62 are vulnerable; upgrade to 117.0.5938.62 or later to mitigate. Other connected sources corroborate the same Ch...

CVE-2024-9123

CVE-2024-9123 is a chromium/Chrome Skia vulnerability: an integer overflow in Skia prior to 129.0.6668.70 enables a remote attack via a crafted HTML page to trigger an out-of-bounds memory write. Affected software includes Google Chrome (Chromium-based) with versions before 129.0.6668.70; related...

CVE-2018-17462

CVE-2018-17462 concerns Google Chrome before 70.0.3538.67, where incorrect refcounting in AppCache could allow a remote attacker to escape the browser sandbox via a crafted HTML page. The practical impact is sandbox escape, enabling potential access to privileged context from a web page. Connecte...

CVE-2018-17476

CVE-2018-17476 concerns Google Chrome/Chromium before 70.0.3538.67, where an incorrect Cast UI dialog placement could allow a remote attacker to obscure the full-screen warning via a crafted HTML page. The issue is categorized as content spoofing/UI-related, with potential to mislead users about ...

CVE-2018-6089

Google Chrome/Chromium prior to 66.0.3359.117 was affected by CVE-2018-6089, a Same Origin Policy bypass in Service Workers triggered by a cross-origin PDF redirect after a Safari-like CORS gap. The workaround is upgrading to 66.0.3359.117 or newer; Chrome’s 66 stable release notes confirm the fi...

CVE-2018-6141

Summary: Google Chrome's Skia image filter had insufficient validation that could allow a remote attacker with renderer access to perform an out-of-bounds memory read via a crafted HTML page. Affected versions are before 67.0.3396.62; the issue is resolved in 67.0.3396.62+.

CVE-2021-38008

CVE-2021-38008 is a use-after-free vulnerability in Chromium’s media component, affecting Chromium/Chrome prior to 96.0.4664.45. Impact: remote attackers could exploit this to execute arbitrary code or corrupt heap via crafted HTML content. Affected: Chromium browser engine (media component); roo...

CVE-2023-0928

Affected software: Google Chrome (SwiftShader component). Issue: Use-after-free in SwiftShader could enable heap corruption via a crafted HTML page. Version scope: prior to 110.0.5481.177. Impact: remote attacker could potentially exploit, with high severity (CVE-2023-0928). Root cause: use-after...

CVE-2023-6348

CVE-2023-6348 describes a Type Confusion in Chrome/Chromium’s Spellcheck that could allow heap corruption when a renderer is compromised via a crafted HTML page. Connected sources confirm affected components as Chromium-based browsers (Chrome/Chromium) and outline remediation by upgrading to Chro...

CVE-2024-6988

CVE-2024-6988 is a Use-After-Free in Downloads in Google Chrome on iOS prior to 127.6533.72, potentially enabling heap corruption via a crafted HTML page. Connected documents confirm Chromium/Chromium-based updates with fixes (e.g., chromium packages updated to 127.0.6533.88 in Debian; Fedora upd...

CVE-2024-9956

CVE-2024-9956 affects Google Chrome on Android prior to 130.0.6723.58, with an Inappropriate implementation in WebAuthentication allowing a local attacker to escalate privileges via a crafted HTML page. The CVE’s standard metrics show LOCAL attack vector, LOW attack complexity, NONE privileges re...

CVE-2025-1918

CVE-2025-1918 is an out-of-bounds read vulnerability in PDFium used by Google Chrome prior to 134.0.6998.35. A crafted PDF file could trigger out-of-bounds memory access. The CVE is listed with a Chromium/Chrome security severity of Medium and a high impact on confidentiality, integrity, and avai...

CVE-2026-9950

Technical details about CVE-2026-9950 are not publicly provided in the supplied documents. Monitor for updates from official advisories; no concrete affected products, versions, impact or remediation are disclosed here.

CVE-2018-17477

CVE-2018-17477 affects Chromium/Google Chrome extensions UI: a UI spoofing vulnerability in the extensions pane allows a remote attacker to spoof extension popups via a crafted page. Root cause is a UI spoofing vulnerability in the Extensions component present before version 70.0.3538.67. Exploit...

CVE-2018-18344

CVE-2018-18344 affects Google Chrome/Chromium before 71.0.3578.80 where the setDownloadBehavior devtools protocol feature in Extensions could be abused by a remote attacker who controls an installed extension to access local files. The issue is described as an inappropriate implementation in the ...

CVE-2018-6056

CVE-2018-6056 : A type confusion in Google Chrome’s V8 JavaScript engine could cause a heap out-of-bounds write, enabling remote arbitrary code execution inside the sandbox via a crafted HTML page. Affected: Chrome with V8 up to version prior to 64.0.3282.168. Remediation : upgrade to Chrome 64.0...

CVE-2019-5826

CVE-2019-5826 is documented as a use-after-free in Chromium/Google Chrome components. The initial description cites a use-after-free in IndexedDB for Chrome before 73.0.3683.86, potentially enabling heap corruption via a crafted HTML page when a renderer is compromised. Connected Debian/Fedora ad...

CVE-2022-0461

CVE-2022-0461 describes a policy bypass in COOP that allows a remote attacker to bypass the iframe sandbox in Google Chrome. The vulnerability affects Chrome versions prior to 98.0.4758.80, where a crafted HTML page can exploit COOP sandbox policies. The issue is confirmed in multiple connected s...

CVE-2023-3736

CVE-2023-3736 concerns an Inappropriate implementation in Custom Tabs in Google Chrome on Android, prior to version 115.0.5790.98, enabling a remote attacker to leak cross-origin data via a crafted HTML page. Affected software: Google Chrome/Chromium family with Custom Tabs integration; root caus...

CVE-2018-18346

CVE-2018-18346 affects Chromium/Google Chrome before 71.0.3578.80. Reported as an incorrect security UI issue in Blink, enabling a crafted HTML page to cause a confusing browser UI. The Arch Linux advisory confirms the issue set includes CVE-2018-18346 and recommends upgrading to 71.0.3578.80 or ...

CVE-2021-21219

CVE-2021-21219 concerns uninitialized data in PDFium used by Google Chrome prior to 90.0.4430.72, enabling a remote attacker to glean potentially sensitive information from process memory via a crafted PDF. The connected documents corroborate this information-disclosure impact via PDFium across C...

CVE-2021-37997

CVE-2021-37997 affects Chromium’s Sign-In path: a use-after-free in the Sign-In component allows remote code execution via a crafted HTML page, with heap corruption as the underlying issue. Affected versions are Chromium before 95.0.4638.69. Mitigation: upgrade to 95.0.4638.69 or newer (as reflec...

CVE-2021-38015

CVE-2021-38015 affects the Chromium-based browser engine. The provided security advisories describe an inappropriate implementation in the input handling of Chromium (prior to 96.0.4664.45) that could allow a user-assisted attacker who persuades a user to install a malicious extension to bypass n...

CVE-2021-4321

CVE-2021-4321 affects Google Chrome (Blink/Chromium) with CSP bypass in Blink prior to Chrome 91.0.4472.77 via a crafted HTML page. Root cause: CSP enforcement bypass in Blink. Impact: potential to bypass content security policy; no exploitation details provided in the documents beyond the CSP by...

CVE-2022-0104

The CVE-2022-0104 entry corresponds to a heap buffer overflow in ANGLE used by Google Chrome, fixed before Chrome 97.0.4692.71. The vulnerability allows remote exploitation via a crafted HTML page to cause heap corruption in ANGLE, with the impact described as high for confidentiality, integrity ...

CVE-2022-0456

CVE-2022-0456 affects Google Chrome/Chromium: use-after-free in the Web Search feature leading to potential heap corruption via profile destruction. Public details in Chrome/Chromium advisories and Chrome stable-channel release notes confirm this vulnerability and list Chrome 98.0.4758.80+ as the...

CVE-2022-0457

The CVE-2022-0457 entry concerns a type confusion in V8 used by Google Chrome/Chromium, allowing remote heap corruption via a crafted HTML page. Affected software is Chrome/Chromium prior to version 98.0.4758.80, with the root cause described as V8 type confusion leading to heap corruption. The p...

CVE-2022-0463

CVE-2022-0463 is a use-after-free vulnerability in the Accessibility component of Google Chrome/Chromium prior to 98.0.4758.80, potentially allowing heap corruption via specific user interaction. The issue affects Chrome/Chromium’s accessibility pathways and is addressed in Chrome 98 (98.0.4758.8...

CVE-2022-0606

CVE-2022-0606 is a Use-after-Free in ANGLE affecting Google Chrome prior to 98.0.4758.102. The vulnerability could allow a remote attacker to cause heap corruption via a crafted HTML page. Affected component is ANGLE within Chrome/Chromium. The fix was released in Chrome 98.0.4758.102 (stable cha...

CVE-2023-0699

CVE-2023-0699 is a use-after-free vulnerability in the GPU component of Google Chrome/Chromium prior to 110.0.5481.77. A remote attacker could exploit heap corruption via a crafted HTML page and browser shutdown. Several connected sources confirm the issue and its remediation path, including Chro...

CVE-2023-3730

CVE-2023-3730: Use-after-free in Tab Groups of Google Chrome/Chromium prior to 115.0.5790.98. Root cause is a Tab Groups use-after-free in Chrome/Chromium, enabling potential heap corruption when a user interacts with specific UI. Affected products include Google Chrome and Chromium-based browser...

CVE-2026-19172

CVE-2026-19172 : Use-after-free in Chrome’s Views component allows a remote attacker, with renderer process access, to potentially escape the sandbox via a crafted HTML page on pre-151.0.7922.109 builds. Affects Google Chrome; root cause is a use-after-free in Views. The issue is being addressed ...