6510 matches found
CVE-2017-5012
CVE-2017-5012 describes a heap overflow in the V8 JavaScript engine used by Google Chrome. The vulnerability affects Chrome desktop platforms (Linux/Windows/Mac) prior to 56.0.2924.76 and Chrome for Android prior to 56.0.2924.87. The issue could allow a remote attacker to trigger heap corruption ...
CVE-2017-5132
CVE-2017-5132 —In Chrome/Chromium, an incorrect WebAssembly stack manipulation in the WebAssembly component before version 62.0.3202.62 can allow a remote attacker to trigger arbitrary code execution via a crafted HTML page. The issue is associated with a heap/stack manipulation flaw in the Chrom...
CVE-2018-20072
CVE-2018-20072 affects Google Chrome/Chromium (PDF handling) via insufficient data validation in the PDF parser, enabling out-of-bounds memory access when processing a crafted PDF file. The issue is tied to Chromium-based builds prior to 73.0.3683.75. Associated references in the connected docume...
CVE-2018-6128
CVE-2018-6128 concerns the WebKit component in Google Chrome on iOS. The issue arises from incorrect URL parsing, which could allow a remote attacker to perform domain spoofing via a crafted HTML page. Affected software is Chrome on iOS with WebKit parsing behavior before version 67.0.3396.62. Th...
CVE-2021-4320
CVE-2021-4320 affects Blink in Google Chrome and was due to ause-after-free in Blink. The vulnerability exists in Chrome versions prior to 92.0.4515.107, enabling a remote attacker who has compromised the renderer process to perform arbitrary read/write via a crafted HTML page. Multiple connected...
CVE-2022-3049
CVE-2022-3049 describes a use-after-free in SplitScreen on Google Chrome for Chrome OS/Lacros prior to 105.0.5195.52, where a remote attacker who lures a user into specific UI interactions could trigger heap corruption via a crafted HTML page. Affected software is Chrome/Chrome OS with SplitScree...
CVE-2026-10959
The connected documents confirm CVE-2026-10959 affects Google Chrome on Android (before version 149.0.7827.53). The underlying issue is a use-after-free in Input, enabling a remote attacker to execute arbitrary code inside Chrome’s sandbox via a crafted HTML page. Impact is a high-severity remote...
CVE-2026-14135
The CVE-2026-14135 entry describes an issue in Google Chrome/Chromium where insufficient validation of untrusted input in the Network component allowed a remote attacker—who had already compromised the renderer process—to perform UI spoofing via a crafted HTML page. Affected software is Chrome wi...
CVE-2026-14418
Technical details about CVE-2026-14418 are not publicly available in the provided documents. Monitor for updates from official advisories for affected products, impact, and fixes.
CVE-2026-17927
CVE-2026-17927: Google Chrome (DevTools) before 151.0.7922.72 has insufficient policy enforcement, enabling a user-assisted leak of cross-origin data via a crafted Chrome Extension. Impact is described as Low severity; exploit requires user interaction and a malicious extension installed by the u...
CVE-2026-5279
CVE-2026-5279 affects Google Chrome (V8) with object corruption in V8 that allowed remote code execution via a crafted HTML page in a sandbox. The Chromium security note lists this as High severity; the Chrome stable update fixes include 146.0.7680.178 (and prior 177/178 variants on different cha...
CVE-2026-78961
CVE-2026-78961 is an incorrect authorization flaw in the Core component of Google Chrome prior to 152.0.7977.65 . A remote attacker who has already compromised the browser's renderer process and leverages social engineering can bypass the web origin policy via a crafted HTML page, potentially acc...
CVE-2010-0650
CVE-2010-0650 affects WebKit used by Google Chrome (pre-4.0.249.78) and Apple Safari. The flaw allows remote attackers to bypass restrictions on popup windows via crafted mouse click events. Public updates exist: openSUSE/SUSE and Mandriva advisories reference libwebkit/webkit updates addressing ...
CVE-2011-0981
CVE-2011-0981 affects Google Chrome (WebKit/Chromium) prior to 9.0.597.94, where improper event handling for animations can lead to a stale pointer, enabling remote denial-of-service or other unspecified impact via unknown vectors. The entry attributes the issue to WebKit/Chromium components and ...
CVE-2011-3893
CVE-2011-3893 is described in connected advisories as affecting FFmpeg (libavcodec) with vulnerable MKV and Vorbis media handlers. The vulnerability allows a remote attacker to trigger an out-of-bounds read via crafted media input, resulting in denial of service (application crash or partial avai...
CVE-2013-2861
CVE-2013-2861 describes a Use-after-free in the SVG implementation of Chromium/Google Chrome prior to 27.0.1453.110. The vulnerability could allow a remote attacker to cause a denial of service or possibly achieve other unspecified impacts via unknown vectors. Public references in Debian security...
CVE-2013-2885
CVE-2013-2885 affects Google Chrome (Chromium-based) prior to 28.0.1500.95. It is a use-after-free in input handling related to focus during processing of JavaScript events with a multiple-fields input type, enabling remote denial of service and possibly other impact. Public advisories (Debian/Ma...
CVE-2014-3154
Chromium/Google Chrome before 35.0.1916.153 is affected by CVE-2014-3154, a use-after-free in the filesystem API (ChildThread::Shutdown) that can cause a denial of service or other impact. OpenSUSE and Debian advisories confirm the fix in version 35.0.1916.153 (or newer) and recommend upgrading c...
CVE-2014-3188
CVE-2014-3188 affects Google Chrome (and Chrome OS) prior to 38.0.2125.101. The flaw arises from the interaction of IPC and V8, specifically an improper parsing of an escaped index in json-parser.h (ParseJsonObject), enabling remote code execution via crafted JSON data. Affected: Chrome <38.0....
CVE-2015-1249
CVE-2015-1249 corresponds to multiple issues in Google Chrome prior to 42.0.2311.90. Connected advisories indicate these were among several vulnerabilities discovered through internal audits, fuzzing, and other initiatives and fixed in Chrome 42.0.2311.90 (e.g., Debian/Mageia/BSD advisories list ...
CVE-2015-6779
CVE-2015-6779 : In PDFium used by Google Chrome prior to 47.0.2526.73, the library fails to properly restrict chrome: URLs, allowing a crafted PDF to bypass scheme restrictions via a link to chrome://settings. This could enable remote exploitation within affected Chrome/Chromium environments. The...
CVE-2015-6789
CVE-2015-6789 is a vulnerability in Blink (used by Google Chrome) described as a race condition in MutationObserver that can lead to a use-after-free and remote denial of service. Affected product: Google Chrome (Blink). Root cause: race condition with unanticipated object deletion in MutationObs...
CVE-2016-1673
CVE-2016-1673 refers to a cross-origin bypass in Blink/WebKit used by Blink in Google Chrome prior to 51.0.2704.63. The connected sources confirm it is part of a set of Chromium/KChrome issues fixed in the 51.0.2704.63 release, with Debian indicating the fix is in chromium-browser 51.0.2704.63-1~...
CVE-2016-1678
CVE-2016-1678 describes a heap overflow in the V8 JavaScript engine (used by Google Chrome) due to insufficient restriction of lazy deoptimization in objects.cc. Affected software includes V8 up to 5.0.71.32 and Google Chrome up to 51.0.2704.63. Exploitation could allow a remote attacker to cause...
CVE-2016-5148
CVE-2016-5148 is a cross-site scripting vulnerability in the Blink rendering engine used by Google Chrome. It could allow an attacker to execute arbitrary web script via widget-update related vectors (UXSS). Affected: Chrome on Windows and macOS prior to 53.0.2785.89; Linux prior to 53.0.2785.92....
CVE-2016-5162
The CVE-2016-5162 entry describes a Chrome vulnerability in the AllowCrossRendererResourceLoad function (extensions/browser/url_request_util.cc) where the web_accessible_resources manifest field was not correctly restricting IFRAME usage. Affects Google Chrome prior to 53.0.2785.89 (Windows/OS X)...
CVE-2016-5171
CVE-2016-5171 affects Blink in Chromium/Chrome. WebKit/Source/bindings/templates/interface.cpp does not prevent certain constructor calls, enabling a remote attacker to trigger a use-after-free via crafted JavaScript, potentially causing denial of service and unspecified other impact. Affected: B...
CVE-2016-5184
CVE-2016-5184 affects Google Chrome’s PDFium component. The flaw arises from improper object lifecycles in CFFL_FormFillter::KillFocusForAnnot, enabling remote attackers to trigger heap corruption via crafted PDF files. Affected products/versions per the CVE entry: Chrome on Windows, macOS, Linux...
CVE-2017-15395
The CVE-2017-15395 entry concerns a null-pointer dereference in the ImageCapture component of Chromium/Blink, leading to a potential denial of service or instability. Affected products include Chromium-based browsers (Chromium/Chromium-browser and Google Chrome) with versions prior to 62.0.3202.6...
CVE-2017-5082
CVE-2017-5082 is a Chromium/Google Chrome vulnerability affecting the credit card editor component. Connected sources describe an insufficient validation/memory misreference in the credit card editor, enabling a local attacker to execute code or cause information disclosure when processing crafte...
CVE-2017-5086
CVE-2017-5086 affects Google Chrome/Chromium Omnibox. Affected: Chromium-based browsers prior to 59.0.3071.86 on Windows/Mac; root cause: domain/address spoofing via IDN homographs in Omnibox. Impact: remote attacker could spoof the address bar content. Mitigation: upgrade to 59.0.3071.86 or newe...
CVE-2017-5097
CVE-2017-5097 affects Google Chrome on Linux, via Skia. Vulnerable component: Skia in Chrome; root cause: insufficient validation of untrusted input leading to an out-of-bounds memory read when processing crafted HTML pages. Impact: potential memory read with partial confidentiality and integrity...
CVE-2018-6084
CVE-2018-6084 affects Google Chrome on macOS prior to 66.0.3359.117. The underlying issue is unsafe/insufficiently sanitized use of Distributed Objects by the Google Updater, allowing a local attacker to execute arbitrary code via an executable file. Connected sources corroborate the macOS Update...
CVE-2024-6991
CVE-2024-6991 corresponds to a use-after-free in Chromium’s Dawn component, allowing a remote attacker to potentially trigger heap corruption via a crafted HTML page. The vulnerability affects Google Chrome/Chromium prior to version 127.0.6533.72, with multiple downstream advisories noting fixes ...
CVE-2024-7019
CVE-2024-7019 describes an insecure UI implementation in Google Chrome (Chromium-based) before 124.0.6367.60, where a remote attacker could induce UI spoofing via a crafted HTML page if the user performs specific UI gestures. The evidence across connected sources consistently references the same ...
CVE-2026-10888
CVE-2026-10888 affects Cast Streaming in Google Chrome, prior to version 149.0.7827.53. Description: use-after-free in Cast Streaming could be triggered by malicious network traffic on the local network segment, enabling arbitrary code execution. Severity: Critical; attack vector: adjacent (local...
CVE-2026-10892
CVE-2026-10892 is an out-of-bounds write in the GPU component of Google Chrome on Android, before version 149.0.7827.53, allowing a remote attacker to potentially escape the sandbox via a crafted HTML page. The issue affects Chrome for Android and is categorized as Critical. Public references sho...
CVE-2026-11107
Affected software: Google Chrome (Chromium-based) prior to version 149.0.7827.53. Issue: In the Downloads component, an inappropriate implementation allows a remote attacker to spoof UI via a crafted HTML page. Impact: UI spoofing; no other data confidentially affected per provided documents. Roo...
CVE-2026-14076
CVE-2026-14076 affects Google Chrome prior to 150.0.7871.47. The issue is insufficient policy enforcement of the Content Security Policy in Chrome’s network stack, allowing a remote attacker to bypass CSP with a crafted HTML page. Impact is a CSP bypass, with no other confidentiality/integrity/av...
CVE-2026-14133
Technical details are not publicly available in the provided documents. Monitor for updates.
CVE-2026-17865
CVE-2026-17865 describes an insecure implementation in the Crypto component of Google Chrome on macOS prior to 151.0.7922.72, where a renderer process compromise could enable a sandbox escape via a crafted HTML page. The issue originates in the Chromium Crypto path (upstream bug 520516655). Impac...
CVE-2026-17930
Google Chrome vulnerability CVE-2026-17930 affects Extensions with insufficient validation of untrusted input, enabling privilege escalation for a renderer-compromised process via a crafted HTML page. Affected software: Chrome extensions framework (Chromium-based). Root cause: insufficient input ...
CVE-2026-19153
CVE-2026-19153 corresponds to a Chrome vulnerability where insufficient validation of untrusted input in Workers could be leveraged by a renderer process that has been compromised to bypass site isolation via a crafted HTML page. The issue affects Google Chrome prior to version 151.0.7922.109, wi...
CVE-2026-2649
CVE-2026-2649 affects Chromium-based browsers (Google Chrome/Chromium) via an integer overflow in the V8 engine before 145.0.7632.109, allowing remote heap corruption through a crafted HTML page. Affected products/versions include Chromium releases up to 145.0.7632.109 (various OS package updates...
CVE-2026-78935
CVE-2026-78935 is a critical use-of-uninitialized-variable vulnerability in the Mobile component of Google Chrome on iOS , affecting versions prior to 152.0.7977.65 . A remote attacker could potentially execute arbitrary code outside the browser sandbox by convincing a user to load a crafted HTML...
CVE-2026-79022
CVE-2026-79022 is a UI misrepresentation vulnerability in the Transactions Platform component of Google Chrome prior to 152.0.7977.65 . A remote attacker leveraging social engineering can craft an HTML page that spoofs UI elements , potentially misleading users into taking unintended actions. The...
CVE-2011-1203
CVE-2011-1203 affects Google Chrome prior to 10.0.648.127. It arises from improper handling of SVG cursors, which can allow a remote attacker to cause a denial of service or possibly other unspecified impact via a stale pointer. The vulnerability is tied to Chrome/Chromium’s SVG rendering behavio...
CVE-2011-2825
CVE-2011-2825 concerns a use-after-free in Google Chrome prior to 13.0.782.215 tied to font handling, allowing remote attackers to cause a denial of service or potentially other impact via custom-font vectors. The Connected documents confirm affected software (Chrome before 13.0.782.215) and the ...