CVE-2010-2898

CVE-2010-2898 is tied to a GNU C Library (glibc) vulnerability referenced by multiple advisories and OpenVAS/MIRACLE/OSV entries. The linked documents indicate a glibc-related issue in the early 2010s and note its relation to other CVEs (e.g., 2011-1071) but do not provide concrete exploit detail...

CVE-2010-4492

CVE-2010-4492 is a use-after-free vulnerability in Google Chrome prior to version 8.0.552.215 . The flaw occurs in handling of SVG animations and can allow a remote attacker to cause a denial of service or potentially other unspecified impact. The vulnerability affects Chrome’s rendering/JavaScri...

CVE-2011-0778

Google Chrome before 9.0.597.84 is vulnerable due to improper restriction of drag-and-drop operations, which could allow remote attackers to bypass the Same Origin Policy via unspecified vectors. Root cause: insufficiently restricted drag-and-drop handling. Impact: potential cross-origin data exp...

CVE-2013-0879

CVE-2013-0879 affects Google Chrome on Windows, Linux, and macOS where Web Audio nodes are not properly implemented, leading to memory corruption and potential impact as described in the CVE record. The vulnerability is documented in multiple security advisories and is listed among Chrome securit...

CVE-2013-2878

CVE-2013-2878 affects Google Chrome prior to 28.0.1500.71, with the described vulnerability being an out-of-bounds read in text handling that can be exploited remotely to cause denial of service. The issue is documented across multiple sources (including the CVE entry and Debian security advisory...

CVE-2013-2911

CVE-2013-2911 is a use-after-free in Blink's XSLT handling (XSLStyleSheetLibxslt.cpp) affecting Chrome/Chromium around the 30.x line. Public advisories (Debian/openSUSE/NASL entries) list this alongside other 2013-06 vulnerabilities and show mitigations via updating Chromium/Chrome to newer build...

CVE-2014-3169

CVE-2014-3169 is a use-after-free in Blink/WebKit DOM (ContainerNode.cpp) affecting Google Chrome up to 37.0.2062.94. It can allow a remote attacker to cause denial of service or possibly other impact via script execution before node removal notification. Advisories from Debian, Ubuntu, openSUSE,...

CVE-2015-1216

CVE-2015-1216 is a use-after-free vulnerability in the V8 bindings (V8Window::namedPropertyGetterCustom) of Blink’s V8 bindings, exposed in Google Chrome before 41.0.2272.76. The issue, as described in MGASA-2015-0123 and related advisories, could allow remote attackers to cause a denial of servi...

CVE-2015-1226

The CVE-2015-1226 entry refers to a vulnerability in Google Chrome prior to 41.0.2272.76 where DebuggerFunction::InitAgentHost did not properly restrict which URLs could be used as debugger targets. This allowed remote attackers to bypass intended access restrictions via a crafted extension. Affe...

CVE-2015-1229

CVE-2015-1229 : Google Chrome before 41.0.2272.76 fails to properly handle a 407 (Proxy Authentication Required) response that includes a Set-Cookie header, enabling remote proxy servers to perform cookie-injection attacks. The vulnerability affects the net/http/proxy_client_socket.cc path and ca...

CVE-2015-8548

CVE-2015-8548 corresponds to multiple unspecified vulnerabilities in Google V8 before 4.7.80.23, used in Google Chrome before 47.0.2526.80, which can cause a denial of service or potentially other impact via unknown vectors. Connected sources indicate this is addressed by Chromium/Chrome security...

CVE-2016-1644

CVE-2016-1644 is a use-after-free in Blink/WebKit (LayoutObject.cpp) used by Google Chrome prior to 49.0.2623.87. Exploitation could cause a denial of service via a crafted HTML document. Chrome/Chromium fixes were released (e.g., Chrome 49.0.2623.87); Debian/Mageia/Arch advisories also reference...

CVE-2016-1693

The CVE-2016-1693 vulnerability affects Google Chrome/Chromium where the Software Removal Tool was downloaded over HTTP instead of HTTPS, enabling a MITM to spoof chrome_cleanup_tool.exe. The issue is documented in multiple sources (e.g., Debian security advisories, Gentoo GLSA, Arch lists) and i...

CVE-2016-5127

CVE-2016-5127 is a use-after-free vulnerability in Blink’s editing path (WebKit/Blink) affecting Google Chrome prior to 52.0.2743.82. The issue arises in WebKit/Source/core/editing/VisibleUnits.cpp and can be triggered by crafted JavaScript using an @import at-rule in a CSS token sequence with re...

CVE-2016-5183

CVE-2016-5183 is a use-after-free flaw in the PDFium component of the Chromium browser. The connected documents confirm the vulnerability in PDFium and refer to Chromium updates, but do not provide exact vulnerable versions or explicit exploitation details. Remediation is implied by vendor/archiv...

CVE-2018-6122

CVE-2018-6122 : A type confusion vulnerability in the V8 JavaScript engine of Google Chrome (pre-66.0.3359.139) could allow a remote attacker to exploit heap corruption via a crafted HTML page. Affected product: Google Chrome (V8 component). Root cause: type confusion in V8. Impact: remote code e...

CVE-2026-10011

CVE-2026-10011 concerns an inappropriate implementation in the Skia component of Google Chrome before 148.0.7778.216, where a remote attacker who already had renderer access could leak cross-origin data via a crafted HTML page. The issue is tied to the Skia/Chromium stack and is described in mult...

CVE-2026-17692

CVE-2026-17692 involves a Use-After-Free in DataTransfer in Google Chrome for Windows, prior to version 151.0.7922.72. The flaw could let a renderer‑process‑hijacked page potentially escape the Chrome sandbox, enabling a remote attacker to impact the host after compromising the renderer. The vuln...

CVE-2026-17837

CVE-2026-17837 concerns insufficient validation of untrusted input in Chrome/Chromium DevTools, enabling potential sandbox escape via a crafted HTML page when the renderer is compromised. The vulnerability affects Google Chrome prior to 151.0.7922.72 and is described across multiple feeds (NVD/Re...

CVE-2026-17881

The CVE-2026-17881 entry describes an Integer overflow in WebXR affecting Google Chrome before 151.0.7922.72. A remote attacker could execute arbitrary code inside the sandbox via a crafted HTML page. Affected component: WebXR in Chrome (Chromium base). Impacted versions are prior to 151.0.7922.7...

CVE-2026-17938

CVE-2026-17938 affects Google Chrome on Android; the issue is an inappropriate FullScreen implementation that enables a remote attacker to perform UI spoofing via a crafted HTML page. Root cause: flawed FullScreen handling in Chromium-based Chrome for Android prior to version 151.0.7922.72. Impac...

CVE-2026-17990

CVE-2026-17990 affects Google Chrome prior to 151.0.7922.72, where insufficient validation of untrusted input in WebAuthn allows a remote attacker who has compromised the renderer process to potentially escape the sandbox via a crafted PDF file. The vulnerability is tied to WebAuthn handling in C...

CVE-2026-9875

CVE-2026-9875: Out-of-bounds read in WebGL in Google Chrome on Android (pre-148.0.7778.216) could allow a remote attacker to perform a sandbox escape via a crafted HTML page. Affects WebGL in Chromium-based Chrome for Android; fixed in the Chrome stable channel update to 148.0.7778.216/217. The i...

CVE-2010-1663

The CVE-2010-1663 issue concerns Google Chrome’s Google URL Parsing Library (GURL). Affected: Google Chrome versions prior to 4.1.249.1064. Root cause: the GURL component allows bypassing the Same Origin Policy via certain escape characters inside javascript: URLs (e.g., TAB or similar escapes). ...

CVE-2010-1822

CVE-2010-1822 (WebKit): WebKit used in Apple Safari (pre-4.1.3 and 5.0.x before 5.0.3) and Google Chrome (before 6.0.472.62) fails to correctly cast an unspecified variable when processing an SVG element embedded in a non-SVG document, allowing remote attackers to trigger arbitrary code execution...

CVE-2010-2901

CVE-2010-2901 affects Google Chrome rendering before 5.0.375.125, with memory corruption enabling remote denial of service via unknown vectors. Public records in multiple feeds (Ubuntu USN-1195-1, openSUSE, Gentoo GLSA/GNU patches) confirm this CVE and reference a Chrome/Chromium exposure prior t...

CVE-2010-4197

CVE-2010-4197 is a use-after-free in WebKit as used by WebKitGTK+ and other WebKit-based products, leading to remote denial of service or potentially other impact via text-editing vectors. The vulnerability affects WebKit in Google Chrome before 7.0.517.44 and webkitgtk before 1.2.6, with multipl...

CVE-2011-0983

Technical details for CVE-2011-0983 are not publicly available in the provided connected documents. Monitor for updates from official advisories; no product, impact, or remediation specifics are provided here.

CVE-2011-2359

Technical details about CVE-2011-2359 (affected product/versions, root cause, impact, fix) are not publicly available in the provided connected documents. Monitor for updates.

CVE-2011-2827

CVE-2011-2827 affects Google Chrome via a use-after-free in the text-search workflow. Affected component: Chrome’s text-search handling (likely in the browser engine). Vulnerable condition: Chrome versions prior to 13.0.782.215. Impact: remote attackers could trigger a denial of service or potent...

CVE-2011-2846

Technical details for CVE-2011-2846 are not present in the provided connected documents. Monitor for updates; information currently limited to the CVE entry and associated references.

CVE-2011-3066

Vulnerability context (CVE-2011-3066) : In Google Chrome, Skia-based rendering used for clip operations contains a clipping bug that may trigger an out-of-bounds read, leading to a denial of service. Affected product is Chrome before version 18.0.1025.151 (and related Chromium builds). The issue ...

CVE-2011-3067

Technical details for CVE-2011-3067 are not publicly provided in the connected documents. Please monitor for updates; available sources mention Chrome/SOP issue in general terms but do not specify affected components, versions, or fixes in these materials.

CVE-2011-3103

CVE-2011-3103 affects Chromium/V8: Google Chrome before 19.0.1084.52. The issue is in garbage collection in V8, allowing a remote attacker to crash the browser (potentially other impact). Gentoo GLSA 201205-04 and OpenVAS entries corroborate multiple vulnerabilities in Chromium/V8 with high risk;...

CVE-2011-3913

Technical details about CVE-2011-3913 are not publicly provided in the supplied connected documents. The entries reference it among others but do not describe affected product, version, exploit, or remediation.

CVE-2013-2860

CVE-2013-2860 is a use-after-free vulnerability in Chromium (Google Chrome) prior to 27.0.1453.110, arising from code paths involving access to a database API by a worker process. The flaw can allow a remote attacker to trigger a denial of service or potentially other impact. Public references fr...

CVE-2013-2884

CVE-2013-2884 is a use-after-free in the DOM implementation of Google Chrome prior to 28.0.1500.95, related to improper tracking of which document owns an Attr object. This could allow remote denial of service or other impact. Public details in connected sources confirm affected product as Chrome...

CVE-2013-6644

CVE-2013-6644 affects Google Chrome/Chromium prior to 32.0.1700.76 (Windows) and 32.0.1700.77 (Mac/Linux). The entry describes multiple unspecified vulnerabilities that could cause a denial of service or have other impact via unknown vectors. Public advisories in the connected documents show thes...

CVE-2013-6649

CVE-2013-6649 is a use-after-free in Blink’s SVG rendering (RenderSVGImage::paint) affecting Google Chrome before 32.0.1700.102. Publicly referenced advisories confirm the issue resides in the Blink/WebKit SVG implementation and can lead to denial of service or potentially other impact via vector...

CVE-2014-1734

CVE-2014-1734 is a Chromium/Chrome vulnerability described as “Various fixes from internal audits, fuzzing and other initiatives.” Public details show affected software as Chromium/Chrome; prior versions include Chrome before 34.0.1847.131 (Windows/OS X) and before 34.0.1847.132 (Linux). Connecte...

CVE-2014-3157

CVE-2014-3157 affects Google Chrome prior to 35.0.1916.153. It is a heap-based buffer overflow in FFmpegVideoDecoder::GetVideoBuffer within media/filters/ffmpeg_video_decoder.cc, exploitable remotely by sending VideoFrame data structures too small for interaction with the underlying FFmpeg librar...

CVE-2014-3195

CVE-2014-3195 affects Google Chrome’s V8 engine used in Chrome prior to 38.0.2125.101. The vulnerability arises from incorrect handling of heap-memory allocations (allocations considered uninitialized) and improper concatenation of arrays of doubles, related to PagedSpace::AllocateRaw, NewSpace::...

CVE-2014-3198

CVE-2014-3198 affects Google Chrome (PDFium in the Chromium PDF viewer). The issue arises in Instance::HandleInputEvent in pdf/instance.cc where a value of -1 is misinterpreted as an index instead of a no-visible-page error, enabling a remote attacker to perform an out-of-bounds read and cause a ...

CVE-2014-7924

CVE-2014-7924 is a use-after-free vulnerability in Google Chrome’s IndexedDB implementation. The issue can lead to denial of service or potentially other impact by triggering duplicate BLOB references, as described in Chromium/indexed_db_callbacks.cc and indexed_db_dispatcher_host.cc. Affected so...

CVE-2015-3334

CVE-2015-3334 affects Google Chrome prior to 42.0.2311.90, where the Permissions UI could fail to consistently display the camera permission status (“Media: Allowed by you”). This mismatch could allow remote websites to capture video data from an attached camera without the user realizing permiss...

CVE-2015-6791

CVE-2015-6791 concerns Google Chrome prior to 47.0.2526.80, with multiple issues fixed during internal auditing and in the accompanying V8 updates (4.7.80.23). Public advisories (e.g., Debian DSA-3418-1) confirm the fix in Chrome 47.0.2526.80 for the stable distribution, with similar remediation ...

CVE-2016-5191

Google Chrome UXSS in CVE-2016-5191 due to insufficient validation of crafted HTML data in bookmark handling. Desktop Chrome before 54.0.2840.59 (Windows/Mac/Linux) and Android before 54.0.2840.85 could be tricked via a crafted http://javascript:[email protected] URL to inject scripts/HTML. Imp...

CVE-2020-15994

CVE-2020-15994 affects Google Chrome’s V8 engine, with heap corruption possible through a remote attacker via a crafted HTML page in versions prior to 86.0.4240.99. The vulnerability is described as a use-after-free in V8. The Chrome 86.0.4240.99 Android update notes this release includes multipl...

CVE-2021-30558

Google Chrome prior to 91.0.4472.77 had an insufficient Content Security Policy enforcement vulnerability allowing a remote attacker to bypass CSP via a crafted HTML page. The issue affects Chrome desktop (client-side CSP handling) with a high impact per CVSS metrics, and was addressed in the Chr...

CVE-2025-10890

CVE-2025-10890 is a Chromium/Chrome vulnerability where a side-channel in the V8 engine allowed a remote attacker to disclose cross-origin data via a crafted HTML page. Affected software includes Google Chrome/Chromium with V8 before version 140.0.7339.207. The root cause is a side-channel inform...