CVE-2016-5220

CVE-2016-5220: PDFium in Chromium/Google Chrome allowed local file access via a crafted PDF, affecting Chrome/Chromium up to version 55.0.2883.75 (Mac/Win/Linux) and 55.0.2883.84 on Android. Affected component is PDFium; the underlying issue is a local file access path in PDF rendering. Remediati...

CVE-2017-5114

CVE-2017-5114 affects chromium-browser via an improper use of partition alloc in PDFium, enabling memory corruption through a crafted PDF. The Debian advisories note multiple Chromium CVEs (including 5114) and state fixes are available in the Chromium package by version 61.0.3163.100-1~deb9u1 for...

CVE-2017-5115

CVE-2017-5115 concerns Chromium/Chrome before 61.0.3163.79 on Windows, with a type confusion issue in the V8 JavaScript engine. The Arch Linux advisory confirms the class of defects across Chromium components (V8 type confusion) and notes the upstream fix in 61.0.3163.79, upgrading mitigates the ...

CVE-2018-6147

CVE-2018-6147 affects Google Chrome on macOS (pre-67.0.3396.62). Root cause: lack of secure text entry mode in the Browser UI password fields. Impact: a local attacker could obtain potentially sensitive data from process memory via a local process. Remediation: update to a fixed Chromium/Chrome r...

CVE-2021-4318

CVE-2021-4318 affects Blink in Google Chrome prior to 94.0.4606.54, where object corruption could be triggered by a crafted HTML page. The vulnerability is described as a remote issue with high severity (CVSS v3.1: 8.8, High) and impacts all three confidentiality, integrity, and availability. The...

CVE-2022-3309

CVE-2022-3309 affects Google Chrome/Chromium on ChromeOS, where a use-after-free in the Assistant component could allow a remote attacker, via specific UI gestures, to potentially escape the sandbox. The vulnerability is described for ChromeOS pre-106.0.5249.62. Remediation per the documents is u...

CVE-2026-13282

CVE-2026-13282 concerns a use-after-free in the Payments component of Google Chrome on Android prior to version 149.0.7827.201 . The root cause is a heap corruption condition exposed by a local attacker with physical device access, as described in multiple sources. Affected software is Chrome on ...

CVE-2026-17684

CVE-2026-17684 involves Chrome for iOS prior to 151.0.7922.72, where insufficient validation of untrusted input in the renderer could enable a sandbox escape via a crafted HTML page. The issue arises from input handling within Chrome on iOS (renderer process) and is described as a high-severity, ...

CVE-2026-17761

CVE-2026-17761 affects Chrome for iOS (Google Chrome on iOS) prior to 151.0.7922.72. Root cause: insufficient validation of untrusted input enabling UXSS via malicious network traffic. Impact: ability to inject arbitrary scripts/HTML. Status: fixed in Chrome 151.0.7922.72 (or later); remediation ...

CVE-2026-18017

CVE-2026-18017 is a use-after-free vulnerability in Dawn within Google Chrome prior to 151.0.7922.72. The issue could allow a remote attacker to execute arbitrary code inside a sandbox by presenting a crafted HTML page. Affected component is Dawn (Chromium project) used by Chrome; the root cause ...

CVE-2026-87594

CVE-2026-87594 is an incorrect authorization flaw in the DataTransfer component of Google Chrome prior to 153.0.8010.36 . A remote attacker who had already compromised the renderer process could obtain sensitive information by delivering a crafted HTML page. The vulnerability is rated Medium seve...

CVE-2009-1690

CVE-2009-1690 is a use-after-free in WebKit affecting Safari (pre-4.0) and related WebKit-based products (iPhone OS 1.0–2.2.1, iPod touch 1.1–2.2.1, Google Chrome 1.0.154.53). The issue arises when a crafted HTML tag property causes child elements to be freed and later accessed during an HTML err...

CVE-2010-4577

CVE-2010-4577 affects WebKit/WebKitGTK+ in the CSSParser::parseFontFaceSrc path, enabling an out-of-bounds read and denial of service via a crafted local font. Affected products include WebKit-based browsers (e.g., Google Chrome before 8.0.552.224; webkitgtk before 1.2.6). Remediation noted acros...

CVE-2014-3160

CVE-2014-3160 affects Chromium/Blink: the ResourceFetcher::canRequest logic allowed subresource SVG requests to bypass Same Origin Policy. This is a remote-origin bypass via crafted SVG files in Chrome prior to 36.0.1985.125. Public advisories (Debian, openSUSE, Gentoo, Ubuntu) document the issue...

CVE-2015-1273

CVE-2015-1273 is a heap-buffer-overflow in OpenJPEG (j2k.c) used by PDFium inside Google Chrome/Chromium. The vulnerability is triggered by invalid JPEG2000 data within PDFs, potentially causing a denial of service or other impact. Affected product: Chromium-based browsers (Chrome/Chromium) prior...

CVE-2015-6770

CVE-2015-6770 affects Google Chrome

CVE-2015-6786

CVE-2015-6786 : In Chrome/Chromium, the CSPSourceList::matches function in CSP allowed a wildcard '*' to match blob:, data:, or filesystem: URLs, bypassing CSP scheme restrictions. Affects Google Chrome before 47.0.2526.73 (Chromium upstream); impact is bypass of CSP restrictions in opportunistic...

CVE-2016-1659

CVE-2016-1659 is part of the Chromium/Google Chrome 50.0.2661.75 update (20 security fixes total). The Chrome release notes attribute CVE-2016-1659 to “various fixes from internal audits, fuzzing and other initiatives.” The connected documents indicate this CVE is addressed alongside other issues...

CVE-2016-5166

CVE-2016-5166 affects Google Chrome/Chromium where the download implementation does not properly restrict saving a file:// URL that is referenced by an http:// URL. This enables user‑assisted disclosure of NetNTLM hashes and SMB relay attacks via a crafted page loaded with the Save page as option...

CVE-2016-5208

CVE-2016-5208 is a UXSS cross-site scripting flaw in Blink for Google Chrome prior to 55.0.2883.75 on Linux/Windows and 55.0.2883.84 on Android, allowing remote script/HTML injection via crafted HTML during synchronous event handling. Desktop remediation: upgrade to Chrome 55.0.2883.75+ (and Chro...

CVE-2016-5217

In the connected Debian advisory (DSA-3731-1) for chromium-browser, CVE-2016-5217 is described as 'insufficient validation' in the pdfium library. No further impact details are provided; remediation is to upgrade to chromium-browser 55.0.2883.75-1~deb8u1 (Jessie).

CVE-2018-16080

CVE-2018-16080 : A missing check for popup window handling in Fullscreen mode in Google Chrome on macOS before 69.0.3497.81 allowed a crafted HTML page to spoof the Omnibox (URL bar). The vulnerability is documented with this description and is referenced in multiple OS-specific advisories (e.g.,...

CVE-2022-3050

CVE-2022-3050 describes a heap buffer overflow in Chrome/Chrome OS WebUI prior to 105.0.5195.52. The root cause is a boundary error when handling untrusted UI input, exploitable via crafted UI interactions that lead to heap corruption. Affected software is Google Chrome/WebUI on Chrome OS; impact...

CVE-2024-6989

CVE-2024-6989 is a use-after-free in the Loader path of Google Chrome/Chromium. The flaw could allow remote code execution via a crafted HTML page by triggering heap corruption. Affected software is Chromium/Chrome before version 127.6533.72; remediation is a patch released in Chromium updates (e...

CVE-2024-6994

CVE-2024-6994: A heap buffer overflow in the Layout component of Google Chrome/Chromium prior to 127.0.6533.72 enables remote heap corruption via a crafted HTML page. Public sources corroborate the issue across Chrome/Chromium derivatives (e.g., Astra Linux reports 127.0.6533.72; Debian security ...

CVE-2025-10201

The CVE-2025-10201 entry concerns an Inappropriate implementation in Mojo within Google Chrome on Android, Linux, and ChromeOS prior to version 140.0.7339.127. The root cause is a Mojo implementation flaw that allowed a remote attacker to bypass site isolation via a crafted HTML page, per connect...

CVE-2026-11294

CVE-2026-11294 affects Google Chrome (Chromium-based) Passwords UI handling. The issue is described as an inappropriate implementation in Passwords that enables a remote attacker to perform UI spoofing via a crafted HTML page. The vulnerability is associated with versions prior to 149.0.7827.53, ...

CVE-2026-11668

CVE-2026-11668 concerns Google Chrome on Linux and ChromeOS versions before 149.0.7827.103, with an uninitialized use in codecs leading to potential cross-origin data leakage via a crafted video file. The issue is described as high severity; affected: Chrome on Linux/ChromeOS prior to the listed ...

CVE-2026-17817

CVE-2026-17817 concerns an inappropriate implementation in Chrome/Chromium’s ReportingAndNEL component that allowed a remote attacker to leak cross-origin data via a crafted HTML page. Affected are Google Chrome versions prior to 151.0.7922.72; the upstream fix is in 151.0.7922.72. Citations from...

CVE-2026-17887

CVE-2026-17887 is a Use-After-Free in Chrome's TabStrip prior to 151.0.7922.72 that could allow a remote attacker to trigger heap corruption by convincing a user to perform specific UI gestures on a crafted HTML page. Affected product: Google Chrome (Chromium-based); root cause is use-after-free ...

CVE-2026-17893

CVE-2026-17893: Google Chrome on macOS with Updater before 151.0.7922.72 is affected by insufficient input validation that could allow a remote attacker who has compromised the renderer process to escape the sandbox via a crafted HTML page. Affected component is the Updater; root cause is input v...

CVE-2026-7333

CVE-2026-7333 describes a use-after-free in the GPU component of Google Chrome, leading to a potential sandbox escape via a crafted HTML page on Chromium-based browsers. Affected product: Google Chrome versions earlier than 147.0.7727.138. Root cause: use-after-free in GPU handling. Impact: remot...

CVE-2026-76035

CVE-2026-76035 is an inappropriate implementation in the Media component of Google Chrome on Mac, prior to version 151.0.7922.169 . A remote attacker can execute arbitrary code outside the sandbox by convincing a user to open a crafted HTML page. The vulnerability was reported by Google on 2026-0...

CVE-2026-76047

A type confusion vulnerability in the V8 JavaScript engine of Google Chrome prior to 151.0.7922.169 allows a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML page. The Chromium security severity is rated High , with a CVSS 3.1 base score of 8.8 (AV:N/AC:L/PR:N/UI:R)...

CVE-2026-79015

CVE-2026-79015 is an improper input validation flaw in the ServiceWorker component of Google Chrome prior to 152.0.7977.65 , allowing a remote attacker to bypass system access restrictions via a crafted HTML page. Chromium rates it Low severity; CVSS v3.1 scores it 4.3 (Medium) with required user...

CVE-2026-84330

CVE-2026-84330 is a UI misrepresentation vulnerability in Google Chrome on Android prior to version 152.0.7977.75 , affecting the FullScreen component. A remote attacker can spoof the address bar via a crafted HTML page, requiring user interaction. The CVSS 3.1 score is 5.4 (Medium) with a vector...

CVE-2012-5150

CVE-2012-5150 is described in connected advisories as a use-after-free in FFmpeg related to seek operations on video data, exploitable via crafted media inputs to cause a denial of service. Mandriva’s advisory MDVSA-2014:129 explicitly ties CVE-2012-5150 to a vulnerability in FFmpeg prior to 1.1....

CVE-2013-2881

CVE-2013-2881 affects Chromium/Google Chrome prior to 28.0.1500.95, where improper handling of frames allowed remote attackers to bypass the Same Origin Policy via a crafted website. Debian’s advisory and multiple security bulletins confirm the vulnerability and list CVE-2013-2881 among others, w...

CVE-2013-2927

The CVE-2013-2927 issue is a use-after-free in Blink’s HTMLFormElement::prepareForSubmission (core/html/HTMLFormElement.cpp) as used by Google Chrome prior to 30.0.1599.101. The vulnerability can allow a remote attacker to cause a denial of service or potentially other impact via submission vecto...

CVE-2013-6621

CVE-2013-6621 is a use-after-free vulnerability in Chromium/Chrome related to speech input handling (x-webkit-speech) in a text INPUT element. A remote attacker could exploit this to cause a denial of service and potentially other impacts. Affected software: Google Chrome prior to 31.0.1650.48 (a...

CVE-2016-1617

The CVE-2016-1617 entry concerns Blink's CSPSource::schemeMatches in WebKit/Blink CSP, where the CSP policy does not apply http policies to https URLs or ws policies to wss URLs. This enables remote attackers to infer whether an HSTS site has been visited by reading CSP reports. Affected componen...

CVE-2016-1624

CVE-2016-1624 refers to an Integer underflow in the Brotli decoder (ProcessCommandsInternal in dec/decode.c) used by Google Chrome prior to 48.0.2564.109, which can cause a denial of service (buffer overflow) or related impact via crafted brotli data. Public advisories confirm the same-vulnerabil...

CVE-2016-5181

CVE-2016-5181 is a cross-site scripting (UXSS) vulnerability in the Blink component of the Chromium/Chrome browser. The initial description notes exploitation via crafted HTML to run arbitrary scripts when the DOM is inconsistent, affecting Chrome before 54.0.2840.59 on Windows/macOS/Linux and 54...

CVE-2016-5210

CVE-2016-5210 refers to a heap-based out-of-bounds/write flaw in the PDFium component of the Chromium/Blink stack used by Google Chrome. The issue arises during TIFF image handling in PDFium, enabling potential remote code execution via a crafted PDF. Affected products/versions align with Chrome/...

CVE-2016-7395

The CVE-2016-7395 issue affects SkPath.cpp in Skia as used by Google Chrome prior to 53.0.2785.89 (Windows and macOS) and prior to 53.0.2785.92 (Linux). The vulnerability arises because return values of ChopMonoAtY are not properly validated, enabling a remote attacker to trigger a denial of serv...

CVE-2017-15387

CVE-2017-15387 affects Chromium/Blink; before 62.0.3202.62 there was insufficient enforcement of Content Security Policy, allowing a remote attacker to open javascript: URLs via a crafted HTML page. Affected software is the Chromium browser (Blink engine) prior to 62.0.3202.62. Remediation is to ...

CVE-2017-15391

CVE-2017-15391 targets the Chromium/Chrome extensions component. The vulnerability arises from insufficient policy enforcement in extensions, allowing a remote attacker to bypass extension limitations and access Extension pages without authorization via a crafted HTML page. Multiple vendor adviso...

CVE-2017-5039

CVE-2017-5039 describes a use-after-free in the pdfium component of Google Chrome/Chromium prior to version 57.0.2987.98 (Android 57.0.2987.108 for some builds). The underlying issue is a use-after-free in PDF rendering code which could potentially lead to heap corruption and remote exploitation ...

CVE-2017-5067

CVE-2017-5067 affects Google Chrome before 58.0.3029.81 on Linux/Windows/Mac. The root cause is an insufficient watchdog timer in navigation, enabling a crafted HTML page to spoof the Omnibox (URL bar). The practical impact is UI spoofing through the address bar, potentially deceiving users. The ...

CVE-2017-5073

CVE-2017-5073 is a vulnerability in the Chromium-based Google Chrome browser’s print preview feature (Blink). The issue is a use-after-free in print preview, affecting Chrome up to 59.0.3071.86 on Linux, Windows, and macOS, and 59.0.3071.92 on Android. The underlying fault is a memory-management ...