CVE-2026-17704

CVE-2026-17704: Use-after-free in ANGLE component of Google Chrome leading to potential sandbox escape when a renderer process+ crafted HTML page is exploited. Affected versions are before 151.0.7922.72 (Chromium-based build). The vulnerability allows a remote attacker who has compromised the ren...

CVE-2026-17750

CVE-2026-17750 describes a use-after-free in ANGLE used by Google Chrome, enabling a remote attacker to potentially escape the browser sandbox via a crafted HTML page. The vulnerability is tied to the ANGLE component within Chrome and is triggered in Chrome versions prior to 151.0.7922.72. The de...

CVE-2026-6307

CVE-2026-6307 concerns a type confusion in V8’s Turbofan compiler affecting Google Chrome before 147.0.7727.101. The vulnerability enables a remote attacker to execute arbitrary code inside a sandbox via a crafted HTML page, with Chromium citing it as High severity. Connected documents provide th...

CVE-2026-9876

The CVE-2026-9876 entry affects Google Chrome on Android, specifically a WebGL Use-After-Free flaw in the Chromium WebGL pipeline. The vulnerability could enable a remote attacker to escape the Chromium sandbox via a crafted HTML page, as described in the linked Chrome security advisory. The issu...

CVE-2008-7294

CVE-2008-7294 affects Google Chrome prior to 4.0.211.0. The issue allows a man-in-the-middle to modify cookies established over HTTPS by injecting or removing cookies via a Set-Cookie header in an HTTP response, related to the absence of HSTS includeSubDomains. Impact is limited to cookie integri...

CVE-2010-1823

CVE-2010-1823 describes a use-after-free vulnerability in WebKit before r65958, exploited via parsing that triggers document API usage (e.g., document.close) and can cause a denial of service. Affected software includes WebKit and Google Chrome prior to 6.0.472.59; the issue is tied to a Cascadin...

CVE-2011-1114

CVE-2011-1114 affects Google Chrome prior to 9.0.597.107, where improper handling of tables may lead to a stale node, enabling remote denial of service or potentially other unspecified impact via unknown vectors. No explicit exploitation details or remediation are provided in the connected docume...

CVE-2011-1305

CVE-2011-1305 : A race condition in Google Chrome prior to 11.0.696.57 on Linux and macOS (linked-list race in database handling) could allow a remote attacker to cause a denial of service or other impact. Chrome 11.0.696.57 patches this issue (and related fixes). The CVSS 2.0 base score is 6.8 (...

CVE-2011-3078

CVE-2011-3078 is a use-after-free vulnerability in the handling of floated elements in Google Chrome/Chromium prior to version 18.0.1025.168. Exploitation could lead to a denial of service or potentially unspecified impact. Connected advisories confirm the issue as part of multiple Chrome/Chromiu...

CVE-2013-2853

CVE-2013-2853 is a vulnerability in the Chromium/Chrome HTTPS implementation where headers are not guaranteed to terminate with "\r\n\r\n", enabling a man‑in‑the‑middle attack with the potential for partial confidentiality/integrity impact. Public advisories (Debian DSA-2724/DSA-2724-1, Gentoo GL...

CVE-2014-7940

CVE-2014-7940 affects ICU 52 and derived Chrome builds; the collator in i18n/ucol.cpp does not initialize memory for a data structure, enabling denial of service or unspecified impact via crafted input. Public-module details: linked advisories show remediation by upgrading ICU to newer releases (...

CVE-2015-1241

Chromium/Google Chrome vulnerability CVE-2015-1241 (tap-jacking) arises from how page navigation interacts with touch and gesture handling, allowing a crafted site to trigger remote UI actions. Affected product: Chromium-based browsers (Chrome). Root cause: interaction between navigation and touc...

CVE-2015-1251

Google Chrome CVE-2015-1251 is a use-after-free in SpeechRecognitionClient (Speech subsystem) that enables remote code execution via a crafted document in Chrome versions before 43.0.2357.65. Affected product: Google Chrome; root cause: use-after-free in SpeechRecognitionClient. Impact: remote ar...

CVE-2015-1266

CVE-2015-1266 affects Google Chrome prior to 43.0.2357.130. The issue is a scheme validation error in content_browser/webui/content_web_ui_controller_factory.cc that causes Chrome to misclassify WebUI URLs, allowing a remote attacker to bypass access restrictions by using a URL with a different s...

CVE-2015-1293

CVE-2015-1293: In Blink’s DOM implementation used by Google Chrome prior to 45.0.2454.85, remote attackers could bypass the Same Origin Policy through unspecified vectors. The issue is a DOM-related cross-origin bypass in Chrome/Chromium, addressed by Chrome 45.0.2454.85, with related advisories ...

CVE-2015-6760

The CVE-2015-6760 entry concerns the Image11::map function in libANGLE (renderer/d3d/d3d11/Image11.cpp) used by Google Chrome before 46.0.2490.71. The issue is a logic error in libANGLE that mishandles mapping failures after device-lost events, allowing a remote attacker to trigger a denial-of-se...

CVE-2016-1618

CVE-2016-1618 : In Blink, used by Google Chrome prior to 48.0.2564.82, a weak cryptographicallyRandomValues RNG was not ensured, potentially allowing remote attackers to defeat cryptographic protections via unspecified vectors. Connected documents confirm this as a confirmed issue in Chrome/Chrom...

CVE-2016-1645

CVE-2016-1645 is an out-of-bounds write issue in the pdfium library derived from OpenJPEG’s opj_j2k_update_image_data, used by Google Chrome’s PDF rendering path. Multiple connected advisories confirm the vulnerability in Chrome before 49.0.2623.87 and link it to a vulnerability class described a...

CVE-2016-5190

CVE-2016-5190 affects Google Chrome/Chromium prior to 54.0.2840.59 (Windows/Mac/Linux) and 54.0.2840.85 (Android). Description from Debian advisories confirms the vulnerability in chromium-browser and lists the fix as upgrading to 55.0.2883.75-1~deb8u1. Root cause: object lifecycles during shutdo...

CVE-2016-5211

CVE-2016-5211 relates to a use-after-free in the PDFium component of the Chromium browser, observed as a vulnerability in Google Chrome prior to 55.0.2883.75 (desktop) and 55.0.2883.84 (Android). The issue is triggered via a crafted PDF file and can lead to heap corruption potentially enabling re...

CVE-2016-5215

CVE-2016-5215 describes a use-after-free in the WebAudio component of the Chromium-based Chrome browser. The vulnerability could allow a remote attacker to perform an out-of-bounds memory read by delivering a crafted HTML page, with exploitation requiring no user privileges but, per the record, i...

CVE-2017-5015

CVE-2017-5015 affects Google Chrome prior to 56.0.2924.76 on desktop and 56.0.2924.87 on Android, due to incorrect handling of Unicode glyphs in IDN homographs that enables domain spoofing. Related sources describe an Omnibox/URL spoofing vulnerability in Chrome and indicate the fix was released ...

CVE-2017-5042

CVE-2017-5042 affects Chromium/Google Chrome before version 57.0.2987.98 (desktop) and 57.0.2987.108 (Android) due to incorrect handling of cookies in Cast, enabling a local‑network attacker to cause connections to arbitrary URLs and observe plaintext cookies. Public advisories (Debian, openSUSE)...

CVE-2017-5100

CVE-2017-5100 is a use-after-free in Chrome Apps within Chromium/Google Chrome for Windows, allowing a remote attacker to cause an out-of-bounds memory read via a crafted HTML page. Connected advisories confirm the issue affects Chromium-based Chrome and Chromium before version 60.0.3112.78, with...

CVE-2017-5113

CVE-2017-5113 describes a buffer overflow in the Skia component of Chromium/Chrome that could allow a remote attacker to execute arbitrary code via a crafted HTML page. Affected products include Chromium/Chrome before version 61.0.3163.79 (Chrome desktop/mac/win/linux) and 61.0.3163.81 (Android),...

CVE-2024-6998

CVE-2024-6998 affects Chromium-based browsers (Chrome/Chromium) with use-after-free in User Education, allowing a remote attacker who lures a user to perform specific UI gestures via a crafted HTML page to potentially cause heap corruption. The vulnerability is fixed in Chromium 127.0.6533.88+ (D...

CVE-2025-13227

CVE-2025-13227 describes a Type Confusion in V8 used by Google Chrome, prior to version 142.0.7444.59, which could allow a remote attacker to trigger heap corruption via a crafted HTML page. Multiple connected sources corroborate the issue as a Chrome/V8 vulnerability affecting Chrome versions be...

CVE-2026-12464

CVE-2026-12464 : A use-after-free in the Google Chrome renderer before 149.0.7827.155 may allow a remote attacker who compromises the renderer to escape the sandbox via a crafted HTML page, per multiple sources. Affected software is Chrome browsers with the vulnerable Chromium component; the issu...

CVE-2026-13914

The CVE-2026-13914 entry concerns Google Chrome on macOS with an insecure implementation in Password handling that could allow a local attacker to read potentially sensitive data from process memory via a malicious file. Affected software is Chrome for macOS; the issue is tied to versions prior t...

CVE-2026-79269

An uninitialized resource flaw in ANGLE , a component of Google Chrome, allows a remote attacker to potentially bypass the web origin policy by enticing a user to visit a crafted HTML page. The vulnerability affects Chrome prior to 152.0.7977.65 and is rated Medium severity (CVSS 3.1: 4.3). Explo...

CVE-2011-2358

CVE-2011-2358 concerns Google Chrome prior to 13.0.782.107, where extension installations were not required to show a browser confirmation dialog. This weakness could allow a Trojan horse extension to modify the browser’s functionality without user consent. Affected software: Google Chrome (pre-1...

CVE-2012-5851

The CVE-2012-5851 issue concerns WebKit’s XSSAuditor.cpp in WebCore, used by Google Chrome (through version 22) and Safari (5.1.7). The root cause is that reflected data output contexts aren’t fully accounted for, enabling bypass of the built-in XSS protection. The listed references (WebKit Bug 9...

CVE-2013-6622

CVE-2013-6622 is a use-after-free vulnerability in the Blink/HTMLMediaElement handling in Chrome open-source code (HTMLMediaElement.cpp, Blink) that could allow a remote attacker to cause a denial of service or other impact by moving a media element between documents. Public reports tie this CVE ...

CVE-2014-3166

CVE-2014-3166 affects the SPDY information-leak in Google Chrome before 36.0.1985.143 (Windows/macOS/Linux) and before 36.0.1985.135 on Android. The published details in connected sources identify an information disclosure vulnerability in the SPDY protocol implementation that could allow a remot...

CVE-2014-3176

CVE-2014-3176 affects Google Chrome/Chromium up to version 37.0.2062.94, caused by a combination of flaws in V8, IPC, sync, and extensions. This failure can enable remote code execution outside the sandbox. Public details in Debian OpenSUSE and Gentoo advisories confirm the issue and indicate pat...

CVE-2015-1211

CVE-2015-1211 affects Google Chrome prior to 40.0.2214.111 on Windows/macOS/Linux (and prior to 40.0.2214.109 on Android). The OriginCanAccessServiceWorkers function in content/browser/service_worker/service_worker_dispatcher_host.cc did not properly restrict the URI scheme during ServiceWorker r...

CVE-2015-1231

Google Chrome before 41.0.2272.76 is affected by multiple vulnerabilities described in MGASA-2015-0123 (CVE-2015-1231 family), including use-after-free and out-of-bounds issues in Skia/Blink components (e.g., SkBitmap, Skia filters, V8/DOM paths) that allow denial of service or other unspecified ...

CVE-2015-1245

The connected documents confirm CVE-2015-1245 in Google Chrome is a use-after-free in pdfium from OpenPDFInReaderView::Update, caused by a pdfium button with an invalid tab association. This can lead to a denial of service via heap memory corruption, with the potential for unspecified impact. The...

CVE-2015-1257

CVE-2015-1257 affects Blink’s SVG FEColorMatrix.cpp. The vulnerability arises from insufficient values handling in an feColorMatrix filter, enabling remote attackers to cause a Denial of Service (container overflow) via a crafted document. The issue is documented across multiple sources (Chromium...

CVE-2015-1288

CVE-2015-1288 affects Google Chrome’s Spellcheck API: the Hunspell dictionary was downloaded without HTTPS, enabling potential MITM manipulation of spelling suggestions. Affected code path: downloading Hunspell dictionaries over plain HTTP. Impact, as stated, includes possible incorrect spelling ...

CVE-2015-1304

CVE-2015-1304 concerns the Google Chrome/Chromium V8 JavaScript engine. The vulnerability allows bypassing the Same Origin Policy via (1) observe or (2) getNotifier calls on access-checked objects, enabling remote attackers to circumvent SOP. Affected component: V8 in Chrome prior to version 45.0...

CVE-2015-6775

PDFium in Google Chrome prior to 47.0.2526.73 is affected by CVE-2015-6775 due to a type confusion in fpdfsdk/src/jsapi/fxjs_v8.cpp. This vulnerability could allow a remote attacker to cause a denial of service or potentially other unspecified impacts via crafted vectors. The issue is tied to how...

CVE-2016-1627

CVE-2016-1627 affects Google Chrome DevTools before 48.0.2564.109. The vulnerability arises because DevTools does not validate URL schemes and does not ensure that the remoteBase parameter is tied to chrome-devtools-frontend.appspot.com, enabling a remote attacker to bypass access restrictions. A...

CVE-2016-1670

CVE-2016-1670 is a race-condition flaw in Google Chrome (Chromium core) prior to 50.0.2661.102. The issue affects ResourceDispatcherHostImpl::BeginRequest in content/browser/loader/resource_dispatcher_host_impl.cc, where a renderer process could cause the loader to reuse request IDs, enabling a r...

CVE-2016-1689

CVE-2016-1689 refers to a heap-based buffer overflow in Google Chrome before 51.0.2704.63, specifically in content/renderer/media/canvas_capture_handler.cc. The vulnerability could allow a remote attacker to cause a denial of service or other impact via a crafted web site. The public records in t...

CVE-2016-1695

Summary: CVE-2016-1695 is associated with multiple issues in the Chromium/Google Chrome stack that were addressed in Chromium/Chrome upgrades to version 51.0.2704.63. Debian security advisories (DSA-3590-1 and related entries) specify that chromium-browser was updated to fix this and related CVEs...

CVE-2016-1700

CVE-2016-1700 concerns Google Chrome/Chromium up to version 51.0.2704.79, where extensions/renderer/runtime_custom_bindings.cc does not account for side effects when creating an array of extension views. This can lead to a use-after-free in extensions, with the primary consequence described as a ...

CVE-2016-5145

Blink vulnerability in CVE-2016-5145 allows a Same Origin Policy bypass: after a structure-clone of an ImageBitmap created from a cross-origin image, a taint property is not preserved, enabling remote JavaScript to exfiltrate or access cross-origin data. Affected software: Google Chrome prior to ...

CVE-2016-5158

CVE-2016-5158 involves multiple integer overflows in the opj_tcd_init_tile function of OpenJPEG (tcd.c) used by PDFium in Google Chrome. The issue allows remote attackers to trigger a heap-based buffer overflow via specially crafted JPEG 2000 data, potentially causing a denial of service or other...

CVE-2016-5193

CVE-2016-5193 concerns Google Chrome/Chromium (Chromium-based browsers) with insufficient validation of URLs opened via DOM, allowing navigation to certain URL schemes through crafted HTML pages. The CVE is mapped to Chrome/Chromium variants around 54.x; Debian advisories note fixes in chromium-b...