CVE-2014-3171

CVE-2014-3171 is a use-after-free in Chrome’s Blink V8 bindings (HashMap add vs set) that affects the rendering engine’s V8 integration. The issue resides in bindings/core/v8/DOMWrapperMap.h and bindings/core/v8/SerializedScriptValue.cpp and, if exploited, can lead to a denial of service; remedia...

CVE-2025-12726

CVE-2025-12726 affects Google Chrome/Chromium on Windows with an incorrect Views implementation that allows privilege escalation via a crafted HTML page when the renderer is compromised. Affected versions are Chrome on Windows prior to 142.0.7444.137 (Chromium base). Remediation is to update to C...

CVE-2025-9866

CVE-2025-9866 affects Google Chrome/Chromium: an incorrect implementation in Chrome extensions allows a remote attacker to bypass the content security policy via a crafted HTML page. Impact: CSP bypass; affected component is the Extensions subsystem. Vulnerable versions are Chrome before 140.0.73...

CVE-2026-10984

Summary: CVE-2026-10984 affects Google Chrome on Android due to an inappropriate Accessibility implementation, enabling UI spoofing via a crafted HTML page. The issue lies in older Android builds before 149.0.7827.53; upgrading to 149.0.7827.53 or later mitigates the vulnerability. The vulnerabil...

CVE-2026-11002

CVE-2026-11002 : Use-after-free in Chrome Autofill (Chromium) prior to 149.0.7827.53 when a renderer process is compromised, potentially enabling a sandbox escape via a crafted HTML page. Affected: Chromium-based Chrome. Impact: remote code execution with sandbox break. Remediation: upgrade to Ch...

CVE-2026-17751

CVE-2026-17751 : In Google Chrome, the AdFilter component in Chromium contains an inappropriate implementation that enables a remote attacker to run arbitrary code inside the sandbox via a crafted HTML page. Affected: Chrome versions prior to 151.0.7922.72. Impact: potential full sandbox escape. ...

CVE-2026-17801

CVE-2026-17801 is an out-of-bounds read/write flaw in ANGLE used by Google Chrome/Chromium prior to version 151.0.7922.72. It enables a remote attacker to potentially escape the sandbox via a crafted HTML page. Impact is described as high (I/H) and critical under CVSS 3.1 (9.6). The affected comp...

CVE-2026-17951

CVE-2026-17951 is a heap buffer overflow in Chrome’s WebRTC that allows a remote attacker to read out-of-bounds memory via a crafted HTML page. Affected product: Google Chrome prior to 151.0.7922.72 (WebRTC component). Underlying cause: heap buffer overflow in WebRTC. Impact: confidentiality, int...

CVE-2026-4462

CVE-2026-4462 is an out-of-bounds read in Blink of Google Chrome, affecting versions prior to 146.0.7680.153. The vulnerability allows a remote attacker to trigger an out-of-bounds memory read via a crafted HTML page. Current connected documents consistently describe this Chrome/Blink issue with ...

CVE-2026-7338

CVE-2026-7338: Use-after-free in Cast in Google Chrome prior to 147.0.7727.138 allows a local-network attacker to potentially trigger heap corruption via malicious network traffic. Affected product: Google Chrome (Cast component); root cause is a use-after-free in Cast. Remediation: update Chrome...

CVE-2026-79052

CVE-2026-79052 is a use-after-free vulnerability in Aura , a component within Google Chrome prior to version 152.0.7977.65 (Windows/Mac) and 152.0.7977.64 (Linux). A remote attacker can exploit this by convincing a user to visit a crafted HTML page , potentially leading to arbitrary code executio...

CVE-2026-79136

CVE-2026-79136 is an incorrect authorization flaw in the ServiceWorker component of Google Chrome prior to 152.0.7977.65 , rated Medium by Chromium (CVSS 3.1: 4.3, requiring user interaction). A remote attacker can bypass the web origin policy by luring a user into visiting a crafted HTML page. T...

CVE-2026-79266

CVE-2026-79266 is a Use-After-Free (CWE-416) in the DevTools component of Google Chrome, affecting versions prior to 152.0.7977.65 . A remote attacker, leveraging social engineering , can use a crafted Chrome extension to execute arbitrary code inside the Chrome sandbox . The CNA assigns CVSS 8.8...

CVE-2026-84354

CVE-2026-84354 is an incorrect authorization flaw in the FileSystem component of Google Chrome prior to 152.0.7977.75. A remote attacker, leveraging social engineering , can execute arbitrary code outside the sandbox via a crafted HTML page, rated CVSS 9.6 (Critical) . The bug (Chromium issue 498...

CVE-2026-8518

CVE-2026-8518 is a use-after-free in Blink from Google Chrome prior to version 148.0.7778.168 that allows a remote attacker to execute arbitrary code inside the Chrome sandbox via a crafted HTML page. Affected software is Google Chrome (Blink). Root cause: use-after-free in Blink leads to remote ...

CVE-2026-9994

CVE-2026-9994 affects Google Chrome on Windows due to a use-after-free in Chrome’s Core, allowing a renderer-compromised attacker to potentially escape the sandbox via a crafted HTML page. The vulnerability is triggered by an issue in Core that existed prior to version 148.0.7778.216. Impact is h...

CVE-2009-2060

Google Chrome before 1.0.154.53 is affected by an SSL/tampering flaw: the browser uses the HTTP Host header to determine the context of a 4xx/5xx CONNECT response from a proxy, enabling a man-in-the-middle to run arbitrary script in the context of a legitimate server. This is described in CVE-200...

CVE-2009-3456

Technical details for CVE-2009-3456 are not present in the provided documents. The connected items reference related CVEs but do not disclose affected products, root cause, impact, or remediation for this CVE. Monitor for updates.

CVE-2010-1767

The CVE-2010-1767 entry describes a Cross‑Site Request Forgery (CSRF) vulnerability in WebKit’s WebCore, specifically in loader/DocumentThreadableLoader.cpp. It affects WebKit before revision r57041 and is noted to be used in Google Chrome before 4.1.249.1059. The vulnerability allows an attacker...

CVE-2010-4042

CVE-2010-4042 is a WebKit/Chrome related vulnerability where Google Chrome before 7.0.517.41 does not properly handle element maps, allowing remote attackers to cause a denial of service or other impact via stale elements. Public advisories reference a fix in WebKit-related components (e.g., libw...

CVE-2010-4204

CVE-2010-4204 is confirmed in connected data as a WebKit/WebKitGTK+ vulnerability—affecting WebKitGTK+ (webkitgtk before 1.2.6) and WebKit in Chrome before 7.0.517.44. The issue arises from accessing a frame object after it has been destroyed, enabling remote denial of service (and possibly other...

CVE-2011-1444

CVE-2011-1444 affects Google Chrome on Linux, where a race condition in the sandbox launcher can allow remote denial of service or other impact. The issue is tied to Chrome prior to version 11.0.696.57. Debian/Gentoo advisory entries indicate the vulnerability was addressed by upgrading Chromium/...

CVE-2011-2845

CVE-2011-2845 affects Google Chrome prior to 15.0.874.102. The issue arises from improper handling of history data, enabling a user‑assisted remote attacker to spoof the URL bar via unspecified vectors. Impact: URL bar spoofing could mislead users about the destination site. The vulnerability is ...

CVE-2011-3036

CVE-2011-3036 affects Google Chrome prior to 17.0.963.65, where a bad cast during line box handling could allow a remote attacker to cause a denial of service (and possibly other impact) via a crafted document. Root cause: bad cast in line box handling. Remediation: update Chrome to 17.0.963.65 o...

CVE-2011-3043

CVE-2011-3043 is a use-after-free vulnerability in Chrome’s handling of flexbox with floats. OpenSUSE OpenVAS/NASL data references this CVE as part of the Chromium v8 security fixes in openSUSE-SU-2012:0374-1, with the patch described as updating Chromium to 19.0.1066 (and related fixes). The vul...

CVE-2011-3892

CVE-2011-3892: FFmpeg/libavcodec Theora decoder contains a double‑free vulnerability exploitable via a crafted Theora stream, allowing remote denial of service and possibly other impact. Connected advisories (Debian, Mandriva, FreeBSD VuXML) indicate multiple FFmpeg/libav issues and list CVE-2011...

CVE-2011-3926

CVE-2011-3926 describes a heap-based buffer overflow in the tree builder of Google Chrome prior to version 16.0.912.77. The vulnerability can lead to a denial of service or potentially other impact via unknown vectors. The provided documents confirm the affected product (Google Chrome) and the vu...

CVE-2013-0902

CVE-2013-0902 is a use-after-free vulnerability in the frame-loader of Google Chrome, reported for versions before 25.0.1364.152. The affected component is FrameLoader.cpp (FrameLoader::checkCompleted); impact is denial of service with remote exploitation potential and possibly other unspecified ...

CVE-2013-0903

CVE-2013-0903 affects Google Chrome prior to 25.0.1364.152. It is a use-after-free in browser navigation handling (frame loader/navigation) that could lead to denial of service or other unspecified impact. Exploitation details are not provided in the documents, but OpenVAS/Gentoo entries indicate...

CVE-2013-0905

CVE-2013-0905 is a Google Chrome use-after-free vulnerability in SVG animations (frame loader) that could cause a denial of service or possibly other impact. Affected are Chrome versions prior to 25.0.1364.152. Remediation per the sources is to upgrade to the latest Chrome release (patches addres...

CVE-2013-2916

CVE-2013-2916 refers to an address bar spoofing vulnerability in Blink/Chrome prior to 30.0.1599.66, where a response with a 204 No Content status and a delay in notifying the user could enable spoofing of the address bar. Publicly documented in Chrome/chromium update notes and openSUSE/Chromium ...

CVE-2013-2928

CVE-2013-2928 affects Google Chrome/Chromium prior to 30.0.1599.101, arising from multiple unspecified vulnerabilities that could lead to denial of service or other impact via unknown vectors. Connected updates show the issue is part of a set of fixes in Chromium/Chrome 30.x and 31.x, addressing ...

CVE-2013-6656

CVE-2013-6656 affects Chrome/Blink: the XSSAuditor in core/html/parser/XSSAuditor.cpp processes POST requests by using the body of a redirecting page instead of the redirect target, enabling an information leak. The CVE is documented as a medium-severity issue (CVSS v2: AV:N/AC:L/Au:N/C:P/I:N/A:N...

CVE-2014-1702

CVE-2014-1702 describes a use-after-free in Blink's web database implementation (DatabaseThread.cpp, DatabaseThread::cleanupDatabaseThread), exploitable via improper handling of scheduled tasks during thread shutdown in Google Chrome prior to 33.0.1750.149. The vulnerability could allow a denial ...

CVE-2014-1733

CVE-2014-1733 is a compiler bug in Seccomp-BPF that could allow a sandbox bypass in Chromium/Google Chrome. Public sources flag the issue as part of a set of vulnerabilities in Chromium, with patches deemed necessary across multiple distributions. The initial CVE description notes the sandbox byp...

CVE-2014-1740

CVE-2014-1740 concerns multiple use-after-free vulnerabilities in Chrome’s WebSockets code path (net/websockets/websocket_job.cc) prior to version 34.0.1847.137. The flaw stems from WebSocketJob deletion, allowing remote attackers to cause a denial of service and possibly other impacts. Remediati...

CVE-2014-3155

CVE-2014-3155 affects the SPDY write queue in Google Chrome’s SPDY implementation (net/spdy/spdy_write_queue.cc) and is exploitable remotely to cause a denial of service via an out-of-bounds read in Chrome before version 35.0.1916.153. The vulnerability was addressed in Chromium updates (e.g., Ch...

CVE-2014-3189

CVE-2014-3189 affects Google Chrome (Chromium) before 38.0.2125.101. The vulnerability is in the PDFium component, specifically in the function chrome_pdf::CopyImage in pdf/draw_utils.cc, which does not properly validate image-data dimensions. This can enable a remote attacker to trigger an out-o...

CVE-2014-7910

CVE-2014-7910 affects Google Chrome before 39.0.2171.65, described as multiple unspecified vulnerabilities that could cause a denial of service or have other impact via unknown vectors. Public advisories and Nessus/OpenSUSE/Red Hat notes confirm the fix is included in Chrome 39.0.2171.65. Affecte...

CVE-2014-7925

CVE-2014-7925 affects Blink’s WebAudio: a use-after-free in the audio-rendering thread can allow a remote attacker to cause a denial of service, with possible other impact. Evidence across multiple advisories shows Chrome/Blink remediation via upgrade to a fixed Chrome version (40.0.2214.91/111 d...

CVE-2014-7942

CVE-2014-7942 : Affected software is Google Chrome prior to 40.0.2214.91. The Fonts implementation does not initialize memory for a data structure, which can enable a remote attacker to cause a denial of service or other unspecified impact via unknown vectors. This vulnerability is listed among m...

CVE-2016-1639

CVE-2016-1639 is a use-after-free in Google Chrome’s WebRTC Audio Private API (browser/extensions/api/webrtc_audio_private/webrtc_audio_private_api.cc) that can be triggered by mismanaging a resource context pointer, potentially enabling remote denial of service and other impact as described in t...

CVE-2016-1708

CVE-2016-1708 affects Google Chrome/Chromium’s Extensions subsystem, specifically the Chrome Web Store inline-installation path. The issue stems from not properly accounting for object lifetimes during progress observation, enabling a use-after-free scenario that can lead to a denial of service o...

CVE-2016-5173

CVE-2016-5173 affects the Chromium/Google Chrome extensions subsystem, where access to Object.prototype was not properly restricted. This allowed a remote attacker to load unintended resources and trigger unintended JavaScript calls, bypassing the Same Origin Policy via an indirect interception a...

CVE-2016-5209

The CVE-2016-5209 issue affects Blink in Google Chrome on desktop (Mac/Windows/Linux) and Android where a bad casting in bitmap manipulation could trigger a heap-write/heap-corruption through a crafted HTML page. Root cause: an out-of-bounds write in Blink/WebKit as described for this CVE. Impact...

CVE-2020-15998

CVE-2020-15998 affects Google Chrome: a use-after-free in the USB handling path could allow a compromised renderer to escape the sandbox via a crafted HTML page. Impact was mitigated by Chrome 86.0.4240.99 (and later); update to that version or newer. Affected component: USB-related code in Chrom...

CVE-2024-9859

CVE-2024-9859 describes a type-confusion vulnerability in WebAssembly in Google Chrome prior to version 126.0.6478.126, allowing a remote attacker to execute arbitrary code via a crafted HTML page. Affected software: Google Chrome before 126.0.6478.126 (Chromium-based). Root cause: type confusion...

CVE-2025-12430

CVE-2025-12430 affects Google Chrome/Chromium where an object lifecycle issue in Media could enable UI spoofing via a crafted HTML page in versions prior to 142.0.7444.59. Connected advisories show updated Chromium/CEF packages: Fedora updates reference chromium/cef builds reaching 142.0.7444.162...

CVE-2025-8582

CVE-2025-8582 affects Google Chrome/Chromium Core prior to 139.0.7258.66. The vulnerability arises from insufficient validation of untrusted input in Core, allowing a remote attacker to spoof the Omnibox (URL bar) via a crafted HTML page. Impact: page URL bar spoofing; exploitation details are no...

CVE-2026-11281

CVE-2026-11281 is a local vulnerability affecting Google Chrome on Windows, where an integer overflow in Chromoting could allow a local attacker to read potentially sensitive data from process memory via a crafted ETW event. The issue is described as having low Chromium security severity, with a ...