CVE-2026-14139

The CVE affects Google Chrome’s TabStrip with an inappropriate implementation in versions before 150.0.7871.47. A remote attacker could entice a user to perform specific UI gestures via a crafted HTML page to achieve UI spoofing. The issue is tied to a TabStrip implementation flaw in Chromium, wi...

CVE-2026-14144

CVE-2026-14144 relates to Google Chrome desktop, where an issue in the Chromium Views security UI allows UI spoofing via a crafted HTML page. A remote attacker could exploit this after convincing a user to perform specific UI gestures, with exploitation requiring user interaction. Affected versio...

CVE-2026-14397

CVE-2026-14397: Out-of-bounds write in ANGLE used by Google Chrome on macOS prior to 150.0.7871.46 could allow a remote attacker to perform a sandbox escape via a crafted HTML page. The vulnerability is tied to ANGLE in Chrome; the impact is a sandbox escape with high confidentiality, integrity, ...

CVE-2026-15900

CVE-2026-15900: Use-after-free in GPU of Google Chrome on Android (pre-150.0.7871.128). A remote attacker could escape the sandbox via a crafted HTML page. Affected product: Google Chrome on Android; root cause: GPU-related use-after-free; impact: potential sandbox escape and total compromise per...

CVE-2026-17757

CVE-2026-17757 describes an uninitialized-use vulnerability in Skia used by Google Chrome up to version 151.0.7922.72 . A remote attacker could leak cross-origin data via a crafted HTML page, with a Medium Chromium severity. Affected component: Skia in Chrome; root cause: uninitialized data being...

CVE-2026-17785

CVE-2026-17785 is an uninitialized use flaw in the ANGLE component of Chrome, allowing a remote attacker to leak cross-origin data via a crafted HTML page. Affected product: Google Chrome (ANGLE in Chromium). Root cause: uninitialized use in ANGLE; impact: potential cross-origin data leakage. Mit...

CVE-2026-17967

CVE-2026-17967 affects Chrome for iOS (Google Chrome on iOS). The issue is a use-after-free leading to potential heap corruption when processing crafted HTML pages, reported for Chrome on iOS versions before 151.0.7922.72. The vulnerability can be exploited remotely, with the impact described as ...

CVE-2026-18012

CVE-2026-18012 is a Use-After-Free in PDFium affecting Google Chrome prior to 151.0.7922.72, allowing a remote attacker to execute arbitrary code in the sandbox via a crafted PDF. Root cause: use-after-free in PDFium. Impact: high (CVE metrics show base score 8.8, network attack vector, user inte...

CVE-2026-5858

CVE-2026-5858 describes a heap buffer overflow in WebML used by Google Chrome/Chromium. The vulnerability enables remote code execution via a crafted HTML page and affects Chrome/Chromium prior to version 147.0.7727.55. The provided connected documents indicate fixes in Chrome/Chromium updates (1...

CVE-2026-79000

CVE-2026-79000 is an improper input validation vulnerability in DeviceBoundSessionCredentials in Google Chrome prior to 152.0.7977.65 . A remote attacker, leveraging social engineering, can bypass the web origin policy by sending crafted network traffic, potentially leading to unauthorized access...

CVE-2026-79110

CVE-2026-79110 is a missing authorization vulnerability in the Preload component of Google Chrome (prior to version 152.0.7977.65 ). A remote attacker can bypass the web origin policy by tricking a user into opening a specially crafted HTML page, potentially leading to unauthorized access to sens...

CVE-2026-79200

CVE-2026-79200 is a use-after-free vulnerability in the Aura component of Google Chrome , prior to version 152.0.7977.65 (Linux: 152.0.7977.64). A remote attacker can achieve arbitrary code execution outside the sandbox by enticing a user to visit a crafted HTML page. The vulnerability is rated C...

CVE-2026-79204

CVE-2026-79204 is a UI misrepresentation vulnerability in the Input component of Google Chrome on Mac , affecting versions prior to 152.0.7977.65 . A remote attacker can exploit this by enticing a user to visit a specially crafted HTML page, allowing them to spoof UI elements and potentially caus...

CVE-2026-84352

CVE-2026-84352 is a critical use-after-free vulnerability in WebGL in Google Chrome (prior to 152.0.7977.75 on Android), allowing a remote attacker to execute arbitrary code outside the browser sandbox via a crafted HTML page. The CVSS 3.1 score is 9.6 (AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:H). The b...

CVE-2026-87543

Google Chrome prior to 153.0.8010.36 contained a missing authorization flaw in the Core component. A remote attacker who had already compromised the renderer process could exploit it via a crafted HTML page to bypass site isolation , a key sandboxing boundary in Chrome's multi-process architectur...

CVE-2009-3264

Google Chrome before 3.0.195.21 is affected by CVE-2009-3264: getSVGDocument omits an access check, allowing remote servers to bypass Same Origin Policy and trigger cross-site scripting via unspecified vectors related to visiting an SVG-hosting page. The vulnerability is documented in multiple fe...

CVE-2013-2909

CVE-2013-2909 is a use-after-free vulnerability in Blink used by Google Chrome prior to 30.0.1599.66. It arises in inline-block rendering for bidirectional Unicode text in an element isolated from its siblings, potentially enabling a remote denial-of-service or other impact. Public references in ...

CVE-2014-1744

CVE-2014-1744: Integer overflow in Chrome's AudioInputRendererHost::OnCreateStream (content/browser/renderer_host/media/audio_input_renderer_host.cc) allows remote denial of service via vectors that trigger a large shared-memory allocation. Affected software: Google Chrome prior to 35.0.1916.114....

CVE-2014-7927

CVE-2014-7927 : In Google V8, the SimplifiedLowering::DoLoadBuffer path in compiler/simplified-lowering.cc does not properly select an integer data type, allowing a remote attacker crafting JavaScript to trigger memory corruption and thus a denial of service. Affected product: Google Chrome (and ...

CVE-2015-1240

The CVE-2015-1240 entry applies to Google Chrome’s WebGL implementation (gpu/blink/webgraphicscontext3d_impl.cc) and describes an out-of-bounds read in WebGL that can be triggered by a crafted WebGL program, potentially causing denial of service due to a state inconsistency. Affected version is C...

CVE-2015-1261

CVE-2015-1261 is tied to Google Chrome before 43.0.2357.65 across desktop and Android platforms, where the browser failed to properly restrict a URL fragment during the construction of a page-info popup. This allowed remote attackers to spoof the URL bar or deliver misleading popup content via cr...

CVE-2015-1287

CVE-2015-1287 affects Blink (Chrome’s rendering engine) prior to Chrome 44.0.2403.89, where a quirks-mode exception allows CSS text/css to bypass content-type checks, enabling a remote attacker to bypass the Same-Origin Policy via a crafted site. The root cause is linked to CSSStyleSheetResource....

CVE-2015-1295

CVE-2015-1295 is a use-after-free in Google Chrome’s printing component, specifically in the PrintWebViewHelper class (components/printing/renderer/print_web_view_helper.cc). The issue can allow a user‑assisted remote attacker to cause a denial of service or potentially other impact by triggering...

CVE-2015-1298

CVE-2015-1298 affects Google Chrome/Chromium prior to 45.0.2454.85. The vulnerability stems from RuntimeEventRouter::OnExtensionUninstalled not validating that setUninstallURL matches a site URL, allowing a user-assisted attacker to trigger access to an arbitrary URL via a crafted extension that ...

CVE-2015-2238

CVE-2015-2238 corresponds to multiple unspecified vulnerabilities in Google V8 before 4.1.0.21, used by Google Chrome before 41.0.2272.76. The documented impact is denial of service or possibly other effects via unknown vectors. The vulnerability is in the V8 engine component (not in a specific f...

CVE-2015-6785

CVE-2015-6785 is a Google Chrome/Chromium CSP issue affecting CSPSource::hostMatches; it allows a wildcard "*.x.y" to match "x.y" hostnames, bypassing subdomain-specific CSP rules. The vulnerability stems from wildcard matching in WebKit’s CSP implementation and could enable unintended access res...

CVE-2016-1633

CVE-2016-1633 is a use-after-free in Blink/WebKit used by Google Chrome prior to 49.0.2623.75. The issue, tracked across multiple advisories (Debian, Gentoo GLSA, CNVD, CNVD-like, Arch Linux, FreeBSD/vuxml), is described as a use-after-free in Blink that could lead to denial of service and possib...

CVE-2016-1655

CVE-2016-1655 refers to a use-after-free vulnerability in Chromium/Google Chrome related to extensions, caused by frame removal during callback execution. Affected product line is Google Chrome/Chromium around version 50.0.2661.75. Impact per the sources: potential denial of service and other uns...

CVE-2016-1694

CVE-2016-1694 affects Google Chrome before 51.0.2704.63, where browser/browsing_data/browsing_data_remover.cc deletes HPKP pins during cache cleanup. This undermines certificate pinning, enabling remote attackers to spoof websites by presenting a valid certificate from any trusted CA. The public ...

CVE-2016-5153

CVE-2016-5153 affects the Web Animations implementation in Blink (used by Google Chrome). The vulnerability arises from the Web Animations code path that improperly relies on list iteration, enabling a remote attacker to cause a denial of service (use-after-destruction) and potentially other impa...

CVE-2017-15406

CVE-2017-15406 describes a stack buffer overflow in V8 used by Google Chrome prior to 62.0.3202.75, enabling a remote attacker to trigger an out-of-bounds memory read via a crafted HTML page. Affected product: Google Chrome (V8 component); the vulnerability stems from a memory-safety flaw in V8, ...

CVE-2017-5074

CVE-2017-5074 is a real vulnerability affecting Google Chrome on Windows prior to 59.0.3071.86, described as a use-after-free in the Chrome Apps Bluetooth component that could lead to memory corruption. Several connected sources corroborate the issue and its association with Chromium/Chrome relea...

CVE-2017-5085

CVE-2017-5085 concerns Google Chrome prior to version 59.0.3071.86 on iOS, where an inappropriate implementation in Bookmarks could allow JavaScript to run on chrome:// pages after a user action triggered by a crafted bookmark. The issue is categorized under a cross-site scripting risk affecting ...

CVE-2020-15993

CVE-2020-15993 affects Google Chrome (printing path) with a use-after-free in the printing flow leading to potential heap corruption when processing crafted HTML pages. Affected software is Google Chrome prior to version 86.0.4240.99; exploitation could be remote via a crafted page with printing ...

CVE-2022-3443

CVE-2022-3443 concerns Google Chrome up to version 106.0.5249.62 (inclusive). The vulnerability arises from insufficient data validation in the File System API, enabling a remote attacker to bypass file-system restrictions via a crafted HTML page. The NVD entry notes a Chromium-based severity of ...

CVE-2024-9959

CVE-2024-9959 affects Google Chrome/Chromium with a Use-After-Free in DevTools prior to 130.0.6723.58. A remote attacker who has compromised the renderer could potentially exploit heap corruption via a crafted Chrome Extension. The issue is associated with the Chromium DevTools component and has ...

CVE-2026-13789

CVE-2026-13789 is a vulnerability in Google Chrome’s GPU process (GPU) caused by a use-after-free condition, allowing a remote attacker who has compromised the renderer process to potentially escape the browser sandbox via a crafted HTML page. Affected product: Google Chrome (Chromium-based) prio...

CVE-2026-17955

CVE-2026-17955 affects Google Chrome (Payments in Chromium) and is caused by insufficient validation of untrusted input, enabling a remote attacker to perform UI spoofing via a crafted HTML page. The vulnerability is documented with a Chromium severity of Low and is addressed by updating to Chrom...

CVE-2026-19158

CVE-2026-19158 is a use-after-free vulnerability in Google Chrome for Windows, affecting the Views component and potentially enabling heap corruption when a user is induced to perform specific UI gestures on a crafted HTML page. The issue is tied to Chrome’s Windows build prior to 151.0.7922.109 ...

CVE-2026-76040

CVE-2026-76040 is a use-after-free vulnerability in the Browser component of Google Chrome (Chromium-based), affecting versions prior to 151.0.7922.169 on Mac. A remote attacker leveraging social engineering can execute arbitrary code outside the sandbox via a crafted HTML page. The CVSS 3.1 scor...

CVE-2026-79144

Skia , the rendering library used by Google Chrome , is affected by an information leak that allows a remote attacker to obtain cross-origin data via a crafted HTML page. The vulnerability affects Chrome versions prior to 152.0.7977.65 and is rated Medium severity (CVSS 4.3, network vector, low c...

CVE-2026-9880

CVE-2026-9880 affects Google Chrome WebGL in the Chromium WebGL stack. The root cause is insufficient validation of untrusted input in WebGL, enabling a remote attacker who has compromised the renderer process to potentially escape the Chrome sandbox via a crafted HTML page. Affected software is ...

CVE-2008-7246

CVE-2008-7246 affects Google Chrome 0.2.149.29 and earlier. The vulnerability allows a remote attacker to induce a denial of service by repeatedly calling window.print in a loop, effectively crashing or making the browser unusable. This is described as a “printing DoS attack” and is noted as poss...

CVE-2009-3011

Google Chrome vulnerability CVE-2009-3011 affects Chrome 1.0.154.48 and earlier, 2.0.172.28, 2.0.172.37, and 3.0.193.2 Beta. Root cause: the browser does not properly block data: URIs in Refresh headers within HTTP responses, allowing remote XSS via (1) injecting a Refresh header containing JavaS...

CVE-2010-4206

CVE-2010-4206 is a WebKit/WebKitGTK+ vulnerability described across multiple advisories as an array index error in FEBlend::apply (WebCore/graphics/filters/FEBlend.cpp). This defect was present in WebKit builds used by Google Chrome prior to 7.0.517.44 and webkitgtk before 1.2.6, among other prod...

CVE-2011-1109

CVE-2011-1109 affects Google Chrome prior to 9.0.597.107. It describes a vulnerability in how CSS stylesheet nodes are processed, which can lead to a denial of service or unspecified impact via a stale pointer. The exact exploit vectors are not detailed in the provided documents. The CVSS base sc...

CVE-2011-1295

The CVE-2011-1295 entry concerns WebKit used by Google Chrome (pre-10.0.648.204) and Safari (pre-5.0.6). The root cause is improper handling of DOM node parentage in WebKit, which can lead to DOM tree corruption. Consequences stated in the sources include remote denial of service, cross-site scri...

CVE-2011-3016

CVE-2011-3016 involves a use-after-free in Google Chrome prior to 17.0.963.56, tied to a read-after-free issue with counter nodes. The vulnerability could allow remote attackers to cause a denial of service and potentially other unspecified impacts. Public exploitation details beyond the basic de...

CVE-2011-3034

CVE-2011-3034 is a use-after-free in SVG document handling in Google Chrome up to version 17.0.963.65, potentially causing a remote denial of service (and possibly other impact) via SVG vectors. The connected documents confirm the CVE is referenced in Chrome’s 2012 updates, and show related patch...

CVE-2011-3044

CVE-2011-3044 affects Google Chrome prior to 17.0.963.65. The vulnerability is a use-after-free in SVG animation elements, allowing remote attackers to trigger a denial of service (and potentially other impacts) via SVG animation vectors. Mitigation provided in the Chrome update to version 17.0.9...