CVE-2018-10229

CVE-2018-10229 describes a hardware vulnerability in GPU memory modules that enables attackers to accelerate micro-architectural attacks via the JavaScript WebGL API. Public sources consistently tie the issue to GPU memory sharing with the CPU (e.g., integrated GPUs) and to WebGL timing-based sid...

CVE-2018-16079

CVE-2018-16079 describes a race condition in Chrome/Chromium where a prompt-permission prompt and a navigation race could allow a crafted HTML page to spoof the Omnibox (URL bar). Affected product family is Google Chrome/Chromium prior to version 69.0.3497.81. The vulnerability could enable URL s...

CVE-2018-16082

CVE-2018-16082 is an out-of-bounds read in SwiftShader used by Google Chrome prior to 69.0.3497.81, allowing a remote attacker to potentially trigger memory access via a crafted HTML page. Public fixes exist in Chromium/Chrome updates to version 69.0.3497.81+ (e.g., Chromium 69.0.3497.81 per open...

CVE-2018-18337

The CVE-2018-18337 issue affects Chromium/Blink. A use-after-free vulnerability in Blink (Chromium’s rendering engine) was identified prior to version 71.0.3578.80, with attackers able to trigger heap corruption through a crafted HTML page. Upstream fixes address Blink use-after-free paths; affec...

CVE-2018-6040

CVE-2018-6040 : In Google Chrome, there was a CSP bypass due to insufficient policy enforcement in the Blink component. Version information in the provided docs indicates this affected Chrome prior to 64.0.3282.119 and was addressed by the 64.0.3282.119 update. The vulnerability could allow a cra...

CVE-2018-6042

CVE-2018-6042 is a Chrome/Omnibox vulnerability: an incorrect security UI in the Omnibox allowed a remote attacker to spoof the URL bar via a crafted HTML page in Chrome versions prior to 64.0.3282.119. The issue enables spoofing of the OmniBox UI, potentially misleading users about the page they...

CVE-2022-0109

The CVE-2022-0109 entry concerns Google Chrome’s Autofill: an inappropriate implementation allowed a remote attacker to obtain potentially sensitive information via a crafted HTML page. Affected software is Google Chrome (prior to version 97.0.4692.71); the root cause is incorrect Autofill handli...

CVE-2022-1866

Chromium/Google Chrome on ChromeOS Tablet Mode is affected by CVE-2022-1866 (Use-after-free in Tablet Mode). The underlying issue is a use-after-free that can lead to heap corruption when a user is steered through specific interactions. Affected versions are Chrome/Chromium prior to 102.0.5005.61...

CVE-2022-3448

CVE-2022-3448 describes a memory misreference/heap corruption vulnerability in Google Chrome’s Permissions API prior to 106.0.5249.119. The issue can be triggered when a user is convinced to perform specific UI gestures on a crafted HTML page, enabling remote execution of code via heap corruption...

CVE-2023-6705

CVE-2023-6705 is a use-after-free vulnerability in WebRTC within Google Chrome/Chromium prior to version 120.0.6099.109. The issue could allow a remote attacker to trigger heap corruption via a crafted HTML page, as indicated by multiple sources. Exploitation status is not described beyond the vu...

CVE-2026-19175

CVE-2026-19175 concerns Google Chrome (Payments component) with a use-after-free in the Payments module, leading to a potential sandbox escape via a crafted HTML page. The issue affects Chrome versions prior to 151.0.7922.109 . The stable-channel update released to 151.0.7922.108/109 for Windows/...

CVE-2026-9110

The CVE-2026-9110 entry describes an issue in Google Chrome on Windows (pre-148.0.7778.179) where an attacker who has compromised the renderer could abuse an Inappropriate UI implementation to spoof UI via a crafted HTML page. The vulnerability affects the UI layer of Chrome’s renderer, enabling ...

CVE-2026-9999

The CVE-2026-9999 entry describes an inappropriately implemented ANGLE component in Google Chrome on macOS prior to 148.0.7778.216, enabling a remote attacker to execute arbitrary code inside the Chrome sandbox via a crafted HTML page. The risk is tied to the ANGLE implementation in Chrome/Chromi...

CVE-2018-17465

CVE-2018-17465 affects Google Chrome/Chromium (before 70.0.3538.67) where a use-after-free/memory misreference in V8 could allow a remote attacker to manipulate objects via a crafted HTML page. Public advisories (e.g., Debian/Arch/Gentoo/Debian DSA updates) confirm V8-related impact and the need ...

CVE-2018-6062

CVE-2018-6062 is a heap overflow write in Skia used by Google Chrome (pre-65.0.3325.146). The vulnerability arises in the v8/skia stack as a result of improper boundary handling on crafted HTML, enabling a remote attacker to cause memory corruption. Public disclosures in CVE records and multiple ...

CVE-2021-4055

CVE-2021-4055 is a heap buffer overflow in the extensions component of the Chromium/Google Chrome browser before version 96.0.4664.93. The vulnerability could allow a remote attacker, via a crafted Chrome extension, to potentially exploit heap corruption and execute arbitrary code. Public advisor...

CVE-2022-0110

CVE-2022-0110 affects Google Chrome/Chromium Autofill in the Omnibox where an incorrect security UI could be spoofed by a crafted HTML page. The issue is observed in Chrome prior to 97.0.4692.71; Debian notes a fix in 97.0.4692.71-0.1~deb11u1 for bullseye, while Gentoo references Chromium/Chrome ...

CVE-2022-3054

Vulnerability CVE-2022-3054 affects Google Chrome/Chromium where DevTools policy enforcement is insufficient, allowing potential heap corruption via a crafted HTML page on versions prior to 105.0.5195.52. Connected sources confirm Chrome/Chromium updates addressing this: Debian lists fixed 105.0....

CVE-2022-3311

CVE-2022-3311 is a Chrome/Chromium vulnerability in the Import memory handling that leads to a use-after-free. The issue can be triggered by a crafted HTML page, potentially enabling a sandbox escape after compromising a WebUI process. Affected software: Google Chrome prior to 106.0.5249.62 (Chro...

CVE-2022-3373

CVE-2022-3373 affects Google Chrome’s V8 in the Chromium base. The issue is an out-of-bounds write via a crafted HTML page, allowing a remote attacker to perform an out-of-bounds memory write with a High severity impact. The vulnerability is associated with Chrome/Chromium builds prior to 106.0.5...

CVE-2022-3450

Affects Google Chrome/Chromium with a use-after-free in Peer Connection that can lead to heap corruption. Vulnerable versions: prior to 106.0.5249.119. Impact: remote attacker via a crafted HTML page. Remediation: upgrade to 106.0.5249.119 or newer (per Debian DSA-5253-1 and Gentoo/GN sources). C...

CVE-2025-3074

CVE-2025-3074 affects Google Chrome/Chromium on desktop, due to an inappropriate implementation in Downloads . The flaw enables a remote attacker to perform UI spoofing via a crafted HTML page . Affected component is the Downloads UI logic; root cause described as improper implementation in Downl...

CVE-2026-17672

CVE-2026-17672: In Chromecast within Google Chrome prior to 151.0.7922.72, there was insufficient validation of untrusted input. The described impact is a potential sandbox escape via a crafted HTML page, where a remote attacker who had compromised the renderer could exploit this. The CVE is refe...

CVE-2011-3062

CVE-2011-3062 : An off-by-one error in the OpenType Sanitizer used by Google Chrome prior to 18.0.1025.142 allows remote attackers to cause a denial of service or possibly other impact via a crafted OpenType file. The MiracleLinux/OpenSUSE/Oracle Solaris advisories reference this CVE as part of C...

CVE-2014-7923

The CVE-2014-7923 entry concerns the Regular Expressions package in ICU (International Components for Unicode) bundled as ICU 52 before SVN revision 292944. It affected Google Chrome builds that used this ICU version (specifically Chrome before 40.0.2214.91). The vulnerability allows remote attac...

CVE-2017-5056

CVE-2017-5056 is a use-after-free in Blink in Google Chrome that allowed a remote attacker to trigger an out-of-bounds memory read via a crafted HTML page. Affected: Chrome on Linux/Windows/macOS before 57.0.2987.133 and Android before 57.0.2987.132. Mitigation: apply the Chrome updates (stable c...

CVE-2018-16066

CVE-2018-16066 describes a use-after-free in Blink that affects Google Chrome prior to 69.0.3497.81, enabling potential heap corruption via a crafted HTML page. The connected documents confirm Chrome/Chromium updates (e.g., Chromium 69.0.3497.81) as the remediation, with multiple advisories notin...

CVE-2018-6091

CVE-2018-6091 corresponds to a Chrome/Chromium vulnerability where Service Workers incorrectly handle plugins. The connected documentation links this CVE to the Chrome/Chromium 66.0.3359.117 line, with advisories noting affected releases and urging upgrades. Affected product: Google Chrome (Chrom...

CVE-2018-6105

CVE-2018-6105 describes an issue in Google Chrome/Chromium where the Omnibox mishandled confusable characters in IDN homographs, enabling domain spoofing via a crafted domain name. Affected product: Google Chrome (Chromium core) prior to version 66.0.3359.117. Root cause: incorrect handling of co...

CVE-2022-0096

Summary: CVE-2022-0096 is a use-after-free in Storage in Google Chrome/Chromium leading to potential heap corruption via a crafted HTML page. Affected versions: Google Chrome/Chromium prior to 97.0.4692.71. Root cause: use-after-free in Storage. Impact: remote attacker could potentially exploit h...

CVE-2022-3305

CVE-2022-3305 is a use-after-free/memory misreference vulnerability in the Survey component of Google Chrome/Chromium (pre-106.0.5249.62 on ChromeOS and desktop). Exploitation could crash the browser or cause heap corruption; the advisorys indicate fixes in Chrome/Chromium 106.x (e.g., 106.0.5249...

CVE-2022-4917

CVE-2022-4917 affects Google Chrome on Android (pre-103.0.5060.53) where an incorrect security UI in Notifications could allow a remote attacker to obscure the full-screen notification via a crafted HTML page. This is rooted in Chromium’s UI handling for notifications. The published entry (NVD) l...

CVE-2023-0700

CVE-2023-0700 affects Google Chrome/Chromium prior to 110.0.5481.77, due to an inappropriate implementation in the Download path that could allow a remote attacker to spoof the Omnibox (URL bar) via a crafted HTML page. The vulnerability is categorized as Medium severity with an impact on confide...

CVE-2025-7657

Chrome/WebRTC use-after-free vulnerability CVE-2025-7657 in WebRTC (Chromium) allows remote heap corruption via a crafted HTML page. Affected product/version: Google Chrome/Chromium prior to 138.0.7204.157. Impact and details are as stated in the sources: heap corruption risk with potential remot...

CVE-2026-14057

CVE-2026-14057 affects Google Chrome where an inappropriate FedCM implementation allows a remote attacker to bypass the same-origin policy via a crafted HTML page. Affected versions are Chrome before 150.0.7871.47; the vulnerability stems from the FedCM component’s incorrect handling, enabling cr...

CVE-2026-17763

CVE-2026-17763 affects Google Chrome’s GPU implementation. The vulnerability arises from an inappropriate GPU handling in Chrome prior to 151.0.7922.72, enabling a remote attacker who compromises the renderer process to leak cross-origin data via a crafted HTML page. This is a renderer-based data...

CVE-2026-8579

CVE-2026-8579 concerns insufficient validation of untrusted input in Skia within Google Chrome before 148.0.7778.168. The underlying issue allows a remote attacker who has already compromised the renderer process to trigger an out-of-bounds memory write via a crafted print file. Affected componen...

CVE-2017-15396

CVE-2017-15396 is described in the connected IBM ICU bulletin as a stack buffer overflow in ICU’s NumberingSystem (C/C++) that could allow a remote attacker to trigger heap corruption via a crafted HTML page. The description in the initial document notes ICU for C/C++ before 60.2 (used in V8/Chro...

CVE-2018-16078

CVE-2018-16078 affects Google Chrome’s Autofill: unsafe handling of credit card details in Autofill prior to version 69.0.3497.81 may allow a remote attacker to obtain sensitive information from memory via a crafted HTML page. Publicly documented references from multiple vendors (e.g., OpenSUSE/F...

CVE-2018-16083

CVE-2018-16083: Out-of-bounds read in WebRTC FEC within Google Chrome’s WebRTC stack. A crafted HTML page could trigger an out-of-bounds memory read via RTP/FEC processing, allowing remote data exposure. The vulnerability affects Chrome versions prior to 69.0.3497.81; remediation is to update Chr...

CVE-2018-17474

CVE-2018-17474 concerns a use-after-free in the Blink component, specifically in the HTMLImportsController, affecting Google Chrome and Blink before version 70.0.3538.67. The issue could allow a remote attacker to cause heap corruption via a crafted HTML page, as described in multiple sources. Th...

CVE-2018-18345

CVE-2018-18345 affects Google Chrome/Chromium WebKit-based browsers prior to 71.0.3578.80, with an error in Site Isolation that allowed a renderer-compromised page to bypass site isolation protections. Public sources in the connected docs identify the issue as an access-restriction bypass in Site...

CVE-2018-18357

CVE-2018-18357 involves Google Chrome’s URL Formatter. The issue is an insufficient policy enforcement in the URL Formatter component, allowing a remote attacker to spoof the Omnibox content with a crafted domain name. Affected versions are prior to 71.0.3578.80 (Chrome/Chromium), with mitigation...

CVE-2018-6031

CVE-2018-6031 is a use-after-free in PDFium used by Google Chrome before 64.0.3282.119, allowing a remote attacker to potentially trigger heap corruption via a crafted PDF file. Public advisories confirm Chrome/Chromium updates addressing this CVE (64.0.3282.119 and later). Affected product is Go...

CVE-2018-6077

CVE-2018-6077 is a Chrome/Blink vulnerability described as a timing attack in SVG filters. Displacement map filters applied to cross-origin images could leak cross-origin data via a crafted HTML page. Affected product: Google Chrome (Blink SVG rendering). Root cause: timing issue in SVG filter pr...

CVE-2018-6130

CVE-2018-6130 is an out-of-bounds read in WebRTC VP9 processing in Google Chrome prior to 67.0.3396.62. The bug arises when processing RTP/VP9 data: a value (t10_pic_idx) is read from an RTP packet and used to index a std::map (gof_info_). If the value is absent, dereferencing map.find(...)->s...

CVE-2021-37988

CVE-2021-37988 is a use-after-free in the Profiles component of the Chromium browser engine (Chromium/Chrome), prior to version 95.0.4638.54. A remote attacker could lure a user to perform specific gestures on a crafted HTML page to potentially trigger heap corruption. Supported details from secu...

CVE-2022-1311

CVE-2022-1311 affects Google Chrome/ChromeOS shell. Connected docs describe a Use-after-free in the ChromeOS shell (resource management error) that could enable a remote attacker to cause heap corruption via a crafted HTML page. Prior to 100.0.4896.88, this vulnerability was exploitable; update t...

CVE-2022-3047

Chrome CVE-2022-3047 affects Google Chrome (Chromium-based) prior to 105.0.5195.52. The issue is Insufficient policy enforcement in the Extensions API, allowing a user who is convinced to install a malicious extension to bypass downloads policy via a crafted HTML page. Affected component: Extensi...

CVE-2023-0137

CVE-2023-0137 describes a heap buffer overflow in Platform Apps of Google Chrome on Chrome OS prior to 109.0.5414.74. The vulnerability could be triggered if a user is convinced to install a malicious extension, potentially enabling heap corruption via a crafted HTML page. Connected sources confi...