CVE-2008-7246

CVE-2008-7246 affects Google Chrome 0.2.149.29 and earlier. The vulnerability allows a remote attacker to induce a denial of service by repeatedly calling window.print in a loop, effectively crashing or making the browser unusable. This is described as a “printing DoS attack” and is noted as poss...

CVE-2009-3011

Google Chrome vulnerability CVE-2009-3011 affects Chrome 1.0.154.48 and earlier, 2.0.172.28, 2.0.172.37, and 3.0.193.2 Beta. Root cause: the browser does not properly block data: URIs in Refresh headers within HTTP responses, allowing remote XSS via (1) injecting a Refresh header containing JavaS...

CVE-2010-4206

CVE-2010-4206 is a WebKit/WebKitGTK+ vulnerability described across multiple advisories as an array index error in FEBlend::apply (WebCore/graphics/filters/FEBlend.cpp). This defect was present in WebKit builds used by Google Chrome prior to 7.0.517.44 and webkitgtk before 1.2.6, among other prod...

CVE-2010-4578

CVE-2010-4578 affects Google Chrome before 8.0.552.224 and Chrome OS before 8.0.552.343. The issue is due to improper cursor handling that can lead to stale pointers, enabling remote attackers to cause a denial of service and possibly other unspecified impact via unknown vectors. Exploitation det...

CVE-2011-1109

CVE-2011-1109 affects Google Chrome prior to 9.0.597.107. It describes a vulnerability in how CSS stylesheet nodes are processed, which can lead to a denial of service or unspecified impact via a stale pointer. The exact exploit vectors are not detailed in the provided documents. The CVSS base sc...

CVE-2011-1295

The CVE-2011-1295 entry concerns WebKit used by Google Chrome (pre-10.0.648.204) and Safari (pre-5.0.6). The root cause is improper handling of DOM node parentage in WebKit, which can lead to DOM tree corruption. Consequences stated in the sources include remote denial of service, cross-site scri...

CVE-2011-3016

CVE-2011-3016 involves a use-after-free in Google Chrome prior to 17.0.963.56, tied to a read-after-free issue with counter nodes. The vulnerability could allow remote attackers to cause a denial of service and potentially other unspecified impacts. Public exploitation details beyond the basic de...

CVE-2011-3034

CVE-2011-3034 is a use-after-free in SVG document handling in Google Chrome up to version 17.0.963.65, potentially causing a remote denial of service (and possibly other impact) via SVG vectors. The connected documents confirm the CVE is referenced in Chrome’s 2012 updates, and show related patch...

CVE-2011-3044

CVE-2011-3044 affects Google Chrome prior to 17.0.963.65. The vulnerability is a use-after-free in SVG animation elements, allowing remote attackers to trigger a denial of service (and potentially other impacts) via SVG animation vectors. Mitigation provided in the Chrome update to version 17.0.9...

CVE-2012-2865

CVE-2012-2865 affects Google Chrome/Chromium: an out-of-bounds read in line breaking could be exploited by a crafted document to trigger a denial of service. The initial description cites version 21.0.1180.89 as the fix, while connected openSUSE/Gentoo/OpenVAS entries reference updating Chromium ...

CVE-2013-2865

CVE-2013-2865 refers to Multiple unspecified vulnerabilities in Google Chrome/Chromium before version 27.0.1453.110, with impact including denial of service or possibly other effects via unknown vectors. The connected Debian security advisories specify fixed package versions (27.0.1453.110-1~deb7...

CVE-2013-2887

CVE-2013-2887 is a set of multiple vulnerabilities in the Chromium/Google Chrome ecosystem disclosed in 2013. The public record notes anonymous/unspecified issues in Chrome prior to version 29.0.1547.57, with potential impact including denial of service and other consequences via unknown vectors....

CVE-2013-6645

CVE-2013-6645 is a use-after-free in Chromium’s OnWindowRemovingFromRootWindow (web_contents_view_aura.cc) that can allow user-assisted remote denial of service via speech-input related vectors. Public references show Chromium/Chromium-based browsers were fixed in updates: openSUSE notes Chromium...

CVE-2014-1700

The CVE-2014-1700 issue is a Use-After-Free in Blink’s SpeechSynthesis.cpp used by Google Chrome prior to 33.0.1750.149, allowing a remote attacker to cause a Denial of Service or possibly other impact through improper handling of an utterance data structure. Affected product classes include Chro...

CVE-2014-3165

The CVE-2014-3165 issue affects the Blink WebSockets implementation (WorkerThreadableWebSocketChannel.cpp) in Google Chrome/Chromium prior to 36.0.1985.143 and is a use-after-free vulnerability. It could allow a remote attacker to cause a denial of service or other impact via long object lifetime...

CVE-2015-1237

The CVE-2015-1237 issue is a use-after-free in Chrome’s RenderFrameImpl::OnMessageReceived (content/renderer/render_frame_impl.cc) affecting Google Chrome prior to 42.0.2311.90. It can cause denial of service and potentially other impact via renderer IPC messages during a detach operation. Remedi...

CVE-2016-5175

CVE-2016-5175 refers to multiple vulnerabilities in Google Chrome/Chromium prior to version 53.0.2785.113 that could cause a denial of service or have other impact via unknown vectors. Public advisories in the connected documents indicate this was addressed by updating Chromium/Chrome to 53.0.278...

CVE-2017-15425

The CVE-2017-15425 vulnerability affects Google Chrome’s Omnibox prior to 63.0.3239.84, due to insufficient policy enforcement that enables domain spoofing via IDN homographs in crafted domain names. Impact is domain spoofing risk; exploitation arises from adversaries leveraging visually similar ...

CVE-2017-5064

CVE-2017-5064 relates to Blink in Google Chrome prior to 58.0.3029.81 on Windows, where incorrect handling of DOM changes could lead to heap corruption via a crafted HTML page. The vulnerability affects Chrome/Chromium’s rendering engine (Blink) and could be exploited remotely without user intera...

CVE-2024-7024

CVE-2024-7024 affects Google Chrome (V8) due to an inappropriate V8 implementation that could allow a sandbox escape via a crafted HTML page. Affected versions are prior to 126.0.6478.54. Impact: remote attacker could escape the sandbox. Remediation: update to a Chromium/Chrome version containing...

CVE-2025-13639

Summary: CVE-2025-13639 is an issue in the WebRTC implementation of Google Chrome/Chromium. Affected component: WebRTC in Chrome/Chromium prior to version 143.0.7499.41. Impact: Remote attacker could cause arbitrary read/write via a crafted HTML page (confidentiality and integrity impact; availab...

CVE-2026-14104

CVE-2026-14104 affects WebAppInstalls in Google Chrome prior to 150.0.7871.47. The vulnerability arises from insufficient validation of untrusted input, allowing a remote attacker to execute arbitrary code inside the browser sandbox via a crafted HTML page. The issue is documented across multiple...

CVE-2026-14424

CVE-2026-14424 affects Dawn in Google Chrome on macOS prior to 150.0.7871.46. A use-after-free vulnerability in Dawn could allow a remote attacker to potentially escape the sandbox via a crafted HTML page, with Chromium severity listed as High. The available documents consistently describe the tr...

CVE-2026-15119

CVE-2026-15119 concerns a race condition in Google Chrome’s GetUserMedia that can enable a sandbox escape when an attacker already compromised the renderer process. The vulnerability is associated with Chrome versions prior to 150.0.7871.115, with the 150.0.7871.115 release addressing the issue. ...

CVE-2026-17675

This CVE (CVE-2026-17675) affects Google Chrome before build 151.0.7922.72, where an Out of bounds write in ANGLE could be triggered by a crafted HTML page to escape the sandbox via a compromised renderer. The issue is listed in the Chrome 2026-07-30 stability update as a Critical vulnerability (...

CVE-2026-17708

CVE-2026-17708 : Use-after-free in Audio in Google Chrome prior to 151.0.7922.72 allows a remote attacker who has compromised the renderer process to potentially escape the sandbox via a crafted HTML page. This affects Chrome’s Audio component and is tied to the Chromium security issue described ...

CVE-2026-17765

CVE-2026-17765: In Google Chrome, an inappropriate WebProtect implementation before 151.0.7922.72 allowed a remote attacker who had compromised the renderer process to leak cross-origin data via a crafted HTML page. This is a Medium-severity issue. Affected software: Google Chrome (WebProtect com...

CVE-2026-18013

CVE-2026-18013 : In Chrome for iOS (Google Chrome on iOS), prior to version 151.0.7922.72, an inappropriate implementation allowed a remote attacker to spoof UI via a crafted HTML page. This vulnerability is documented with a Chromium severity of Low and a CVSS v3.1 base score of 4.3 (MEDIUM), in...

CVE-2026-3541

CVE-2026-3541 describes an out-of-bounds memory read in Chrome’s CSS handling due to an inappropriate implementation in CSS code. A remote attacker could exploit this via a crafted HTML page to trigger a memory read, with a High impact as indicated by multiple sources. Public postings and advisor...

CVE-2026-7359

CVE-2026-7359 affects ANGLE in Google Chrome prior to 147.0.7727.138. The vulnerability is a use-after-free in ANGLE that could allow a renderer-compromised remote attacker to potentially escape the Chrome sandbox via a crafted HTML page. Affected product: Google Chrome (ANGLE component); root ca...

CVE-2026-79192

CVE-2026-79192 is an improper input validation flaw in the Variations component of Google Chrome prior to 152.0.7977.65 . A remote attacker can send specially crafted network traffic to potentially bypass the web origin policy , which may enable unauthorized access or actions across different web...

CVE-2026-79250

CVE-2026-79250 is a UI misrepresentation vulnerability in the Navigation component of Google Chrome prior to 152.0.7977.65 . A remote attacker can serve a crafted HTML page that spoofs the browser's address bar, potentially enabling phishing or other deceptive activities. The vulnerability requir...

CVE-2026-79255

An improper input validation flaw in WebRTC within Google Chrome prior to 152.0.7977.65 allows a remote attacker who has already compromised the renderer process to bypass the web origin policy via a crafted HTML page. Red Hat elaborates that this bypass could lead to unauthorized access to sensi...

CVE-2026-87642

CVE-2026-87642 is an uninitialized resource vulnerability in the WebGL component of Google Chrome , affecting versions prior to 153.0.8010.36 . A remote attacker can exploit a crafted HTML page to leak cross-origin data . The Chromium security team rated this as Medium severity, with a CVSS 3.1 s...

CVE-2026-9883

The vulnerability CVE-2026-9883 is a Use-After-Free in the Base component of Google Chrome (Chromium-based) prior to version 148.0.7778.216. The issue allows a remote attacker to execute arbitrary code via a crafted HTML page. The root cause is a use-after-free flaw in Base, fixed in the Chrome s...

CVE-2009-1414

CVE-2009-1414 pertains to Google Chrome 2.0.x, where modifications to the global object can persist across a page transition. The connected sources describe this as enabling universal XSS attacks via unspecified vectors, with the base CVSS v2 score listed as 4.3 (Medium) and an attacker that does...

CVE-2009-2121

Summary: CVE-2009-2121 is a buffer overflow in Google Chrome’s browser kernel triggered by handling certain HTTP responses, potentially allowing remote attackers to crash the browser or execute arbitrary code. The issue affects Chrome up to version 2.0.172.33; a vendor patch was released to addre...

CVE-2010-3259

CVE-2010-3259 affects WebKit and WebKitGTK+ components across Safari and Chrome. Root cause: read access to images derived from CANVAS elements was not properly restricted, allowing a remote site to bypass the Same Origin Policy and obtain potentially sensitive image data. Affected versions inclu...

CVE-2011-1121

CVE-2011-1121 concerns Google Chrome prior to 9.0.597.107. The issue is an integer overflow in a TEXTAREA-related path, allowing a remote attacker to trigger a denial of service and potentially other impact. Affected product: Google Chrome (pre-9.0.597.107); root cause: integer overflow in a comp...

CVE-2011-3032

CVE-2011-3032 is a use-after-free vulnerability in Google Chrome's SVG value handling, affecting Chrome versions prior to 17.0.963.65. Remote attackers could cause a denial of service or possibly other impact via SVG value handling vectors. The issue is mitigated by updating Chrome to 17.0.963.65...

CVE-2011-3081

CVE-2011-3081 is a Use-after-free in Chromium/Google Chrome's floats handling. Affected: Chrome

CVE-2012-2898

CVE-2012-2898 affects Google Chrome for iOS prior to 21.0.1180.82 on iPad devices. The vulnerability enables remote attackers to spoof the Omnibox URL by exploiting SSL error message handling, a URL-bar spoofing issue related to CVE-2012-0674. The Chrome update 21.0.1180.82 (Chrome for iOS) addre...

CVE-2012-5142

CVE-2012-5142 affects Google Chrome/Chromium: a crash in history navigation could be triggered via unspecified vectors, potentially enabling remote code execution or causing a crash. The OpenSUSE/NASL and Gentoo advisories describe the issue as part of a broader set of Chromium/Chrome vulnerabili...

CVE-2013-2875

The CVE-2013-2875 entry affects Google Chrome/Blink’s SVG rendering path. Specifically, core/rendering/svg/SVGInlineTextBox.cpp in the SVG implementation before Chrome 28.0.1500.71 is vulnerable. The issue allows remote attackers to trigger a denial of service via out-of-bounds reads, with vector...

CVE-2013-2886

CVE-2013-2886 affects Google Chrome up to version 28.0.1500.95. The issue is described as multiple unspecified vulnerabilities that could allow a denial of service or other impact via unknown vectors; Debian security advisory notes these fixes were included in the 28.0.1500.95 update. Public refe...

CVE-2013-2906

CVE-2013-2906 involves race conditions in the Web Audio implementation (Blink) used by Google Chrome and Chromium up to version 30.0.1599.66. Exploitation could lead to denial of service or other impact; multiple vendor advisories list this fix as part of the Chrome/Chromium security updates. Aff...

CVE-2013-2925

CVE-2013-2925 is a use-after-free in Blink’s XMLHttpRequest implementation (XMLHttpRequest.cpp) used by Google Chrome before 30.0.1599.101. Connected openSUSE/Nessus entries indicate this issue was addressed via Chromium updates (e.g., 30.0.1599.101 and later 30.0.1599.114) with multiple patches ...

CVE-2013-6634

The CVE-2013-6634 issue affects Chromium/ chromium-browser prior to version 31.0.1650.63, where OneClickSigninHelper::ShowInfoBarIfPossible used an incorrect URL during realm validation. This allowed session fixation and potential web-session hijacking via a 302 redirect. The documented fixes upg...

CVE-2013-6663

CVE-2013-6663 is a use-after-free in Chromium/Blink’s SVG handling (SVGImage::setContainerSize) that affects Chrome prior to 33.0.1750.146. The issue can cause a crash/denial of service and possibly other impacts via SVG view resizing; connected sources confirm a use-after-free in SVG handling in...

CVE-2014-1723

CVE-2014-1723 corresponds to a vulnerability in Google Chrome prior to version 34.0.1847.116 where the UnescapeURLWithOffsetsImpl function in net/base/escape.cc failed to correctly handle bidirectional IRIs, enabling remote attackers to spoof URLs via crafted RTL Unicode text. Public fixes are re...