CVE-2026-79054

CVE-2026-79054 is a use-after-free vulnerability in the Chromecast component of Google Chrome, rated Critical by Chromium and 8.3 HIGH (CVSS v3.1). An attacker who has already compromised the renderer process can leverage a crafted HTML page to escape the sandbox and execute arbitrary code outsid...

CVE-2026-79082

CVE-2026-79082 is an incorrect authorization flaw in the Transactions Platform component of Google Chrome , affecting versions prior to 152.0.7977.65 . A remote attacker who has already compromised the renderer process can exploit this by serving a crafted HTML page to bypass the web origin polic...

CVE-2026-79150

CVE-2026-79150 is a use-after-free vulnerability in the Views component of Google Chrome on Mac , affecting versions prior to 152.0.7977.65 . A remote attacker can execute arbitrary code outside the sandbox by enticing a user to visit a crafted HTML page. The bug was reported by Google on 2026-05...

CVE-2026-87652

An incorrect authorization vulnerability in PushAPI in Google Chrome prior to 153.0.8010.36 allowed a remote attacker who had already compromised the renderer process to bypass the web origin policy using a crafted HTML page. The flaw required user interaction and a pre-compromised renderer, limi...

CVE-2026-9872

Google Chrome on Android prior to 148.0.7778.216 has an out-of-bounds write in the GPU component of Chromium, which could allow a remote attacker to escape the sandbox via a crafted HTML page. The issue is tracked as CVE-2026-9872 and is considered Critical. A fix is included in Chrome 148.0.7778...

CVE-2009-1414

CVE-2009-1414 pertains to Google Chrome 2.0.x, where modifications to the global object can persist across a page transition. The connected sources describe this as enabling universal XSS attacks via unspecified vectors, with the base CVSS v2 score listed as 4.3 (Medium) and an attacker that does...

CVE-2009-2121

Summary: CVE-2009-2121 is a buffer overflow in Google Chrome’s browser kernel triggered by handling certain HTTP responses, potentially allowing remote attackers to crash the browser or execute arbitrary code. The issue affects Chrome up to version 2.0.172.33; a vendor patch was released to addre...

CVE-2010-3259

CVE-2010-3259 affects WebKit and WebKitGTK+ components across Safari and Chrome. Root cause: read access to images derived from CANVAS elements was not properly restricted, allowing a remote site to bypass the Same Origin Policy and obtain potentially sensitive image data. Affected versions inclu...

CVE-2011-1121

CVE-2011-1121 concerns Google Chrome prior to 9.0.597.107. The issue is an integer overflow in a TEXTAREA-related path, allowing a remote attacker to trigger a denial of service and potentially other impact. Affected product: Google Chrome (pre-9.0.597.107); root cause: integer overflow in a comp...

CVE-2011-2857

Technical details for CVE-2011-2857 (Chrome use-after-free via focus controller) are not provided in the connected documents. Monitor for updates to confirm affected versions, impact, and remediation.

CVE-2011-3032

CVE-2011-3032 is a use-after-free vulnerability in Google Chrome's SVG value handling, affecting Chrome versions prior to 17.0.963.65. Remote attackers could cause a denial of service or possibly other impact via SVG value handling vectors. The issue is mitigated by updating Chrome to 17.0.963.65...

CVE-2011-3081

CVE-2011-3081 is a Use-after-free in Chromium/Google Chrome's floats handling. Affected: Chrome

CVE-2012-2898

CVE-2012-2898 affects Google Chrome for iOS prior to 21.0.1180.82 on iPad devices. The vulnerability enables remote attackers to spoof the Omnibox URL by exploiting SSL error message handling, a URL-bar spoofing issue related to CVE-2012-0674. The Chrome update 21.0.1180.82 (Chrome for iOS) addre...

CVE-2013-2875

The CVE-2013-2875 entry affects Google Chrome/Blink’s SVG rendering path. Specifically, core/rendering/svg/SVGInlineTextBox.cpp in the SVG implementation before Chrome 28.0.1500.71 is vulnerable. The issue allows remote attackers to trigger a denial of service via out-of-bounds reads, with vector...

CVE-2013-2886

CVE-2013-2886 affects Google Chrome up to version 28.0.1500.95. The issue is described as multiple unspecified vulnerabilities that could allow a denial of service or other impact via unknown vectors; Debian security advisory notes these fixes were included in the 28.0.1500.95 update. Public refe...

CVE-2013-2906

CVE-2013-2906 involves race conditions in the Web Audio implementation (Blink) used by Google Chrome and Chromium up to version 30.0.1599.66. Exploitation could lead to denial of service or other impact; multiple vendor advisories list this fix as part of the Chrome/Chromium security updates. Aff...

CVE-2013-2925

CVE-2013-2925 is a use-after-free in Blink’s XMLHttpRequest implementation (XMLHttpRequest.cpp) used by Google Chrome before 30.0.1599.101. Connected openSUSE/Nessus entries indicate this issue was addressed via Chromium updates (e.g., 30.0.1599.101 and later 30.0.1599.114) with multiple patches ...

CVE-2013-6634

The CVE-2013-6634 issue affects Chromium/ chromium-browser prior to version 31.0.1650.63, where OneClickSigninHelper::ShowInfoBarIfPossible used an incorrect URL during realm validation. This allowed session fixation and potential web-session hijacking via a 302 redirect. The documented fixes upg...

CVE-2013-6663

CVE-2013-6663 is a use-after-free in Chromium/Blink’s SVG handling (SVGImage::setContainerSize) that affects Chrome prior to 33.0.1750.146. The issue can cause a crash/denial of service and possibly other impacts via SVG view resizing; connected sources confirm a use-after-free in SVG handling in...

CVE-2014-1723

CVE-2014-1723 corresponds to a vulnerability in Google Chrome prior to version 34.0.1847.116 where the UnescapeURLWithOffsetsImpl function in net/base/escape.cc failed to correctly handle bidirectional IRIs, enabling remote attackers to spoof URLs via crafted RTL Unicode text. Public fixes are re...

CVE-2014-3199

CVE-2014-3199 affects the V8 bindings in Blink’s Chrome integration (bindings/core/v8/custom/V8EventCustom.cpp). The described issue is an erroneous fallback for wrapper-selection failures in the wrap function, enabling a remote attacker to cause a Denial of Service by stopping a worker process h...

CVE-2014-7904

CVE-2014-7904 affects Chromium-derived components (Skia) used in Google Chrome prior to 39.0.2171.65. The issue is a buffer overflow in Skia that can allow a remote attacker to cause a denial of service or potentially other impact via unknown vectors; the description does not specify exploit deta...

CVE-2014-7945

CVE-2014-7945 affects OpenJPEG before r2908 as used in PDFium within Google Chrome up to version 40.0.2214.91. Root cause: out-of-bounds read in PDF rendering via j2k.c/jp2.c/t2.c. Impact: remote attackers can cause a denial of service by processing a crafted PDF. Remediation: upgrade to Chrome 4...

CVE-2015-1246

CVE-2015-1246: In Google Chrome (Blink/webkit) prior to 42.0.2311.90, an out-of-bounds read in Blink could be exploited by a remote attacker to cause a denial of service. Remediation: upgrade to Chrome 42.0.2311.90 or newer (as reflected by Debian/Chromium security updates). The vulnerability is ...

CVE-2015-1267

CVE-2015-1267 affects Blink in Google Chrome prior to 43.0.2357.130, where the creation context for a DOM wrapper was not properly restricted, enabling remote attackers to bypass the Same Origin Policy via crafted JavaScript using Blink public APIs (e.g., WebArrayBufferConverter.cpp, WebBlob.cpp,...

CVE-2015-6581

CVE-2015-6581 is a double-free vulnerability in the OpenJPEG library. The issue occurs in the function opj_j2k_copy_default_tcp_and_create_tcd (j2k.c) and affects OpenJPEG before a fixed release (as used in PDFium in Chrome prior to 45.0.2454.85), allowing remote code execution or heap memory cor...

CVE-2015-6758

The CVE-2015-6758 entry concerns PDFium in Google Chrome/Chromium. The issue is a bad-cast in CPDF_Document::GetPage within fpdfapi/fpdf_parser/fpdf_parser_document.cpp, exploited via a crafted PDF, enabling a denial of service and possibly other impact. Public details consistently tie this to PD...

CVE-2015-6776

CVE-2015-6776 affects OpenJPEG (opj_dwt_decode_1* in dwt.c) as used by PDFium in Google Chrome prior to 47.0.2526.73, allowing remote attackers to trigger a denial of service via crafted JPEG 2000 data. The Debian and Gentoo entries confirm Chrome/Chromium exposure and Python fix guidance: upgrad...

CVE-2016-1634

CVE-2016-1634 is a use-after-free in Blink’s StyleResolver::appendCSSStyleSheet (WebKit/Blink) used by Google Chrome prior to 49.0.2623.75. The vulnerability allows a remote attacker to cause a denial of service (DoS) or potentially other impact via a crafted page triggering CSS style invalidatio...

CVE-2016-1654

CVE-2016-1654 relates to the Chromium/Chrome media subsystem where an uninitialized memory read occurs in the media component, leading to a potential denial of service via invalid read operations. The issue was fixed in Chrome/Chromium builds around version 50.0.2661.75. Debian security advisorie...

CVE-2016-5140

CVE-2016-5140 corresponds to a heap-based buffer overflow in the opj_j2k_read_SQcd_SQcc function of j2k.c in OpenJPEG, used by PDFium in Google Chrome. The issue can be triggered by crafted JPEG 2000 data and may cause a denial of service or other unspecified impact. Affected product context is G...

CVE-2017-15426

The CVE-2017-15426 entry covers a vulnerability in Google Chrome's Omnibox where policy enforcement for IDN homographs could allow domain spoofing. Affected product/component: Google Chrome/Omnibox prior to version 63.0.3239.84. Root cause: insufficient policy enforcement enabling spoofed URLs vi...

CVE-2022-4913

CVE-2022-4913 affects Google Chrome before 105.0.5195.52 (Chromium-based). An incorrect extension storage implementation allowed a remote attacker who compromises the renderer process to spoof extension storage via a crafted HTML page, enabling potential abuse. Affected product: Google Chrome (ea...

CVE-2024-7533

CVE-2024-7533 affects Google Chrome/Chromium’s Sharing module. A Use-After-Free in the Sharing component on iOS up to version 127.6533.99 could allow a remote attacker to trigger heap corruption via a crafted HTML page, per multiple sources. Public advisories confirm the fix is included in Chromi...

CVE-2025-13226

CVE-2025-13226 is a Type Confusion in V8 affecting Google Chrome before 142.0.7444.59, enabling potential heap corruption via a crafted HTML page and, per the CVE entry, remote impact. The connected documents indicate the issue is addressed in the Chrome 142 release (Chrome 142.0.7444.59/60), wit...

CVE-2026-0908

CVE-2026-0908: Use-after-free in ANGLE of Google Chrome prior to 144.0.7559.59 can enable heap‑corruption via a crafted HTML page. Affected: ANGLE in Chromium/Chrome up to version 144.0.7559.59. Mitigation: upgrade to Chrome/Chromium 144.0.7559.59 or newer (fixed in updated Chromium/Chrome builds...

CVE-2026-11207

Summary: CVE-2026-11207 affects Google Chrome Autofill in Chromium-based builds prior to 149.0.7827.53. The root cause is insufficient validation of untrusted input in Autofill, which could allow a remote attacker to potentially perform a sandbox escape via malicious network traffic. What is affe...

CVE-2026-11291

Technical details are not publicly available in the provided documents. Monitoring for updates is advised; current descriptions reference Android Autofill in Chrome prior to 149.0.7827.53 with a Chromium security severity rating of Low, but no concrete exploit/impact details are provided.

CVE-2026-13028

CVE-2026-13028 is a use-after-free in WebGL of Google Chrome on Android, prior to version 149.0.7827.197, that could allow a remote attacker to sandbox-escape via a crafted HTML page. Severity is Critical (CVSS 3.1: AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:H). The available connected documents reiterate...

CVE-2026-13031

CVE-2026-13031 is a use-after-free in Blink (Chrome) prior to 149.0.7827.197, allowing a remote attacker to execute arbitrary code inside a sandbox via a crafted HTML page. Affected component: Blink in Google Chrome. Root cause: use-after-free in the browser’s rendering engine. Impact: high (arbi...

CVE-2026-14406

CVE-2026-14406 affects Google Chrome's V8 engine prior to 150.0.7871.46. Root cause: an out-of-bounds read in V8. Impact: attacker-assisted access to potentially sensitive information from process memory via a crafted Chrome Extension. Remediation: update Chrome to 150.0.7871.46 or later. Exploit...

CVE-2026-14419

CVE-2026-14419 affects Google Chrome where a use-after-free in Skia could allow a remote attacker to escape the sandbox via a crafted HTML page. It targets Skia in Chrome before version 150.0.7871.46. The issue is listed as Critical (CVSS: 9.6, Network) with potential for total impact to confiden...

CVE-2026-17655

The CVE-2026-17655 advisory affects Google Chrome’s ANGLE component, with insufficient validation of untrusted input leading to a potential sandbox escape via a crafted HTML page. The linked Chrome Stable Channel update notes that version 151.0.7922.71/72 for Windows and macOS (and 151.0.7922.71 ...

CVE-2026-17749

CVE-2026-17749: Insufficient validation of untrusted input in Chrome extensions. Affects Google Chrome prior to 151.0.7922.72; exploitation could enable sandbox escape via a maliciously crafted extension. The connected advisories (Debian/OpenSUSE) enumerate this CVE among Chromium fixes and confi...

CVE-2026-17993

CVE-2026-17993 is a race condition in Chrome’s Updater on Windows prior to 151.0.7922.72 that could allow a local attacker to escalate privileges by processing a malicious file. The issue is documented for Google Chrome (Chromium) with a Low severity, and the practical impact is local privilege e...

CVE-2026-17998

This CVE (CVE-2026-17998) affects Google Chrome extensions UI handling. Description: Incorrect security UI in Extensions allowed UI spoofing if a user was convinced to install a malicious extension. Affected product/version: Google Chrome prior to 151.0.7922.72. Underlying cause: insecure Chrome ...

CVE-2026-9879

CVE-2026-9879 – Google Chrome ANGLE vulnerability : An out-of-bounds write in ANGLE within Chromium-based Chrome prior to 148.0.7778.216 allows a remote attacker to execute arbitrary code via a crafted HTML page. The issue affects Chrome’s ANGLE component and is referenced by upstream Chromium bu...

CVE-2026-9997

CVE-2026-9997 corresponds to a use-after-free in the Chrome Input component (Chromium-based) that affects Chrome versions prior to 148.0.7778.216. A renderer process compromise could enable a remote attacker to attempt a sandbox escape via a crafted HTML page. The issue is described across multip...

CVE-2009-1413

CVE-2009-1413 concerns Google Chrome 1.x, where timeouts are not canceled during a page transition, enabling Universal XSS by scheduling code with setTimeout and then redirecting with document.location. The issue can be leveraged through a chromehtml: argument-injection path for remote execution ...

CVE-2010-1773

CVE-2010-1773 is an off-by-one vulnerability in WebKit’s WebCore: the toAlphabetic() routine in rendering/RenderListMarker.cpp contains an error in WebKit prior to r59950. This affects WebKit-based stacks (e.g., Chrome older than 5.0.375.70) and allows remote attackers to read sensitive informati...