CVE-2026-14079

CVE-2026-14079 affects Google Chrome (Chromium) due to insufficient policy enforcement in Network handling, allowing a crafted HTML page to bypass the same-origin policy before version 150.0.7871.47. Affected: Chrome/Chromium network policy enforcement; Root cause: insufficient policy enforcement...

CVE-2026-14392

CVE-2026-14392 describes an out-of-bounds write in the Tint component of Google Chrome, affecting Chrome prior to 150.0.7871.46. The issue could allow a remote attacker to escape the Chrome sandbox via a crafted HTML page, as indicated by the description and cross-referenced Chrome security advis...

CVE-2026-15121

CVE-2026-15121 is a use-after-free in WebRTC within Google Chrome, prior to version 150.0.7871.115. The issue allows a remote attacker to execute arbitrary code inside Chrome’s sandbox when a user visits a crafted HTML page. Public references describe the affected software as Google Chrome WebRTC...

CVE-2026-17693

CVE-2026-17693 : Google Chrome is affected by insufficient policy enforcement in FileSystem, prior to 151.0.7922.72, enabling a remote attacker to leak cross-origin data via a crafted HTML page. The vulnerability impact and details are documented across multiple sources in the Connected documents...

CVE-2026-5276

The CVE-2026-5276 vulnerability affects Google Chrome’s WebUSB policy enforcement, with the issue present in Chrome prior to 146.0.7680.178. A remote attacker could craft a page to bypass policy checks and read potentially sensitive information from process memory. The public descriptions consist...

CVE-2026-87562

CVE-2026-87562 is a medium-severity vulnerability in the Accessibility component of Google Chrome on Mac , affecting versions prior to 153.0.8010.36 . The root cause is incorrect reference resolution , which allows a remote attacker to potentially spoof UI elements by serving a crafted HTML page....

CVE-2026-9873

CVE-2026-9873 is a use-after-free vulnerability in Google Chrome's Network component. In Chromium-based Chrome, the flaw could allow a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML page. Affected builds are prior to 148.0.7778.216; a fixed version is 148.0.7778.2...

CVE-2026-9885

CVE-2026-9885 concerns an upstream Chrome UI integrity issue: insufficient validation of untrusted input in the Mac UI could allow a renderer-compromised remote attacker to escape the sandbox via a crafted HTML page. Affected product: Google Chrome on macOS (before 148.0.7778.216). Root cause: in...

CVE-2008-6998

Summary: CVE-2008-6998 is a stack-based buffer overflow in Google Chrome’s chrome/common/gfx/url_elider.cc affecting Chrome 0.2.149.27 and earlier than 0.2.149.29. Vulnerability: triggering overflow when a link href contains a large number of path elements, surfacing during status bar updates aft...

CVE-2010-0315

CVE-2010-0315 affects WebKit (as used by Google Chrome prior to 4.0.249.89). The vulnerability arises from placing a site URL in a LINK element’s HREF and reading document.styleSheets[0].href, enabling a remote attacker to discover a redirect target for a specific user session (via an IFRAME-rela...

CVE-2010-0647

CVE-2010-0647 affects WebKit (as used in Google Chrome prior to 4.0.249.89). The root cause is a malformed RUBY element that enables remote code execution in the Chrome sandbox, demonstrated by the > sequence. Affected software is WebKit before r53525; remediation is to apply the WebKit/Chrome...

CVE-2010-3119

CVE-2010-3119 affects Google Chrome before 5.0.375.127 and webkitgtk before 1.2.6. The root cause is described as improper Ruby language support, leading to a denial of service (memory corruption) and potentially unspecified other impact via unknown vectors. Connected advisories (e.g., MiracleLin...

CVE-2010-3255

CVE-2010-3255 affects WebKitGTK+ and Google Chrome. The vulnerability arises from improper handling of counter nodes in WebKit, allowing remote attackers to cause memory corruption or potentially other impact, with affected products including Google Chrome prior to 6.0.472.53 and webkitgtk prior ...

CVE-2010-4040

CVE-2010-4040 affects Google Chrome prior to 7.0.517.41. The vulnerability arises from improper handling of animated GIF images, enabling a remote attacker to trigger memory corruption which can lead to a denial of service and potentially other impacts. The available details describe memory corru...

CVE-2010-4489

CVE-2010-4489 concerns libvpx used in Google Chrome prior to 8.0.552.215 (and possibly other products). The vulnerability stems from a regression that allows a crafted WebM video to trigger an out-of-bounds read, enabling a remote denial of service. The OpenVAS and vendor advisories reference lib...

CVE-2011-0483

CVE-2011-0483 affects Google Chrome before 8.0.552.237 and Chrome OS before 8.0.552.344, where a cast of an unspecified variable during video handling could allow remote denial of service and possibly other impact via unknown vectors. The vulnerability is documented across multiple feeds (NVD and...

CVE-2011-3033

CVE-2011-3033 : A buffer overflow in Skia, used by Chromium/Chrome, can lead to a crash or potentially other impact. Affected: Chromium-based browsers. Root cause: overflow in Skia drawing library. Impact: remote crash/possible further effects as described in disclosures. Remediation: upgrade to ...

CVE-2011-3051

CVE-2011-3051 describes a use-after-free in the CSS cross-fade handling in Google Chrome’s rendering path prior to version 17.0.963.83. The vulnerability could allow a remote attacker to cause a denial of service or potentially other impact via cross-fade related vectors. Affected software is Goo...

CVE-2011-3098

Technical details about CVE-2011-3098 (affected product, components, root cause, impact, or fix) are not publicly available in the provided connected documents. Monitor for updates.

CVE-2011-3888

CVE-2011-3888 corresponds to a use-after-free vulnerability in Google Chrome prior to 15.0.874.102. The flaw affects editing operations in conjunction with an unknown plug-in and can allow a user‑assisted remote attacker to cause a denial of service and potentially other impacts. The provided con...

CVE-2011-3926

CVE-2011-3926 describes a heap-based buffer overflow in the tree builder of Google Chrome prior to version 16.0.912.77. The vulnerability can lead to a denial of service or potentially other impact via unknown vectors. The provided documents confirm the affected product (Google Chrome) and the vu...

CVE-2012-2882

CVE-2012-2882 concerns FFmpeg used by Google Chrome prior to 22.0.1229.79 failing to handle OGG containers, enabling remote denial of service (via a wild pointer) and possibly other unspecified impacts. Public references indicate Chromium/Chromium-based browser updates fixed multiple security fla...

CVE-2012-2883

CVE-2012-2883 affects the Skia component used by Google Chrome (before 22.0.1229.79). The vulnerability is described as an out-of-bounds write in Skia that could be triggered remotely, potentially causing a denial of service and possibly other impacts. The linked open-source and vendor advisories...

CVE-2012-5133

The CVE-2012-5133 entry concerns a use-after-free in SVG filters affecting Google Chrome/Chromium prior to 23.0.1271.91. Connected sources confirm this CVE in Chromium updates and list the issue among fixes in Chromium 25.x ranges (e.g., openSUSE openSUSE-SU-2012:1637-1). Affected component is th...

CVE-2013-2916

CVE-2013-2916 refers to an address bar spoofing vulnerability in Blink/Chrome prior to 30.0.1599.66, where a response with a 204 No Content status and a delay in notifying the user could enable spoofing of the address bar. Publicly documented in Chrome/chromium update notes and openSUSE/Chromium ...

CVE-2013-6664

CVE-2013-6664 is a use-after-free in Blink’s FormAssociatedElement::formRemovedFromTree (core/html/FormAssociatedElement.cpp) used by Google Chrome before 33.0.1750.146. The vulnerability could allow remote denial of service or other unspecified impact via vectors involving FORM elements, demonst...

CVE-2014-1721

CVE-2014-1721 affects Google V8 as used in Google Chrome prior to 34.0.1847.116. The vulnerability stems from improper lazy deoptimization in V8, which can be triggered by crafted JavaScript to cause memory corruption and a remote denial of service. The exploitation vector is via a heap allocatio...

CVE-2015-1215

CVE-2015-1215 concerns Google Chrome’s Skia filters implementation. The Skia filter path allows an out-of-bounds write, enabling remote denial of service (and possibly other unspecified impact) in Chrome before 41.0.2272.76. Affected product: Google Chrome (Skia filters). Root cause: out-of-bound...

CVE-2016-1637

CVE-2016-1637 affects the Skia graphics library used by Google Chrome. The vulnerability is an information leak in the SkATan2_255 function (effects/gradients/SkSweepGradient.cpp), caused by mishandling arctangent calculations. Impact is partial confidentiality exposure via a crafted web site. Th...

CVE-2016-1708

CVE-2016-1708 affects Google Chrome/Chromium’s Extensions subsystem, specifically the Chrome Web Store inline-installation path. The issue stems from not properly accounting for object lifetimes during progress observation, enabling a use-after-free scenario that can lead to a denial of service o...

CVE-2016-5174

CVE-2016-5174 affects Google Chrome on macOS: vulnerable component is browser_window_controller_private.mm; during a fullscreen transition, fullscreen toggle requests are not processed, enabling a remote attacker to trigger a denial of service via a crafted web site (unsuppressed popup). Affected...

CVE-2016-5187

CVE-2016-5187 is a URL spoofing/content spoofing flaw in the Chromium/Google Chrome stack (affected components include Chrome/Chromium’s rendering/UI layers). Exploitation would let remote attackers trick users by spoofing the Omnibox content via crafted pages or UI states. Remediation is to upgr...

CVE-2025-11205

The CVE-2025-11205 entry concerns a heap buffer overflow in WebGPU plumbed through Google Chrome/Chromium before version 141.0.7390.54. The root cause is a WebGPU heap overflow that allows a renderer process compromise to potentially trigger heap corruption via a crafted HTML page. Documented imp...

CVE-2026-11692

CVE-2026-11692 is a use-after-free in Chrome’s Read Anything feature prior to 149.0.7827.103. If a renderer process is already compromised, this could enable a sandbox escape via a crafted HTML page. The connected sources consistently describe the issue as a high-severity Chrome/Chromium vulnerab...

CVE-2026-12010

Heap buffer overflow in the GPU component of Google Chrome on Android (vulnerable before 149.0.7827.115) could allow a remote attacker who has compromised the renderer process to potentially escape the sandbox via a crafted HTML page. The issue affects Chrome on Android and is classified as Criti...

CVE-2026-12462

CVE-2026-12462 is a use-after-free in the Media component of Google Chrome before 149.0.7827.155. An attacker who has compromised the renderer process could trigger a crafted HTML page to execute arbitrary code inside Chrome’s sandbox. The vulnerability is tied to the Chromium-based Media stack a...

CVE-2026-13785

CVE-2026-13785 is a use-after-free in Bluetooth handling in Google Chrome on macOS, affected before version 150.0.7871.47. A remote attacker could harness crafted HTML and force a user to perform specific UI gestures to potentially escape the Chrome sandbox. The issue is documented across multipl...

CVE-2026-13836

The CVE-2026-13836 entry relates to an UXSS vulnerability in Google Chrome caused by an inappropriate implementation in CSS. A crafted HTML page could allow a remote attacker to inject arbitrary scripts or HTML, impacting Chrome versions prior to 150.0.7871.47. Public sources in the connected doc...

CVE-2026-17669

CVE-2026-17669 is a confirmed vulnerability affecting Chrome for iOS. The issue is described as an inappropriate implementation in Google Chrome on iOS that could allow a remote attacker to potentially perform a sandbox escape via a crafted HTML page. The available public details specify the affe...

CVE-2026-17803

CVE-2026-17803 describes an insufficient validation of untrusted input in Chrome's Save to Drive component, enabling a sandbox escape when processing a crafted PDF. Affected software is Google Chrome/Chromium, with the vulnerability present in builds prior to 151.0.7922.72. Red Hat, Debian, OSV, ...

CVE-2026-17904

CVE-2026-17904 describes an insufficent policy enforcement in NFC within Google Chrome on Android, leading to leakage of cross-origin data via a crafted HTML page. Root cause: policy enforcement gaps in NFC handling. Impact: data leakage classified with Chromium security severity: Low. Affected p...

CVE-2026-78904

CVE-2026-78904 is a type confusion vulnerability in ANGLE , the graphics abstraction layer used in Google Chrome prior to 152.0.7977.65 . A remote attacker can trigger the flaw via a crafted HTML page, potentially leading to arbitrary code execution outside the browser's security sandbox . The Ch...

CVE-2026-79030

CVE-2026-79030 is an information disclosure vulnerability in the Autofill component of Google Chrome prior to version 152.0.7977.65 . An observable discrepancy in Autofill allows a remote attacker to obtain sensitive user information by serving a crafted HTML page , requiring user interaction but...

CVE-2026-79055

CVE-2026-79055 is an information leak in the Sharing feature of Google Chrome on Android prior to 152.0.7977.65 . A local attacker, leveraging social engineering, can exploit this flaw through a co-installed application to obtain sensitive information. Chromium rates the severity as Low ; the CVS...

CVE-2026-8523

CVE-2026-8523 : A use-after-free in Mojo within Google Chrome’s renderer can allow a remote attacker who has compromised the renderer to escape the sandbox via a crafted HTML page. Affected: Chrome (Mojo/renderer). Impact per sources: high. Root cause: use-after-free in Mojo. Exploitation context...

CVE-2010-0556

CVE-2010-0556 describes a cross-origin weakness in Google Chrome’s Password Manager where credentials stored for one site could be populated into an authentication dialog triggered by a third-party page (demonstrated via IMG src). Affected versions include Chrome 3.0.195.38 and 4.0.249.78; Chrome...

CVE-2010-2648

CVE-2010-2648 : In Google Chrome, the Unicode Bidirectional Algorithm (UBA) implementation prior to 5.0.375.99 is vulnerable to memory corruption that can lead to a denial of service or potentially other impact via unknown vectors. The description confirms the affected product/version and the und...

CVE-2011-2797

Technical details for CVE-2011-2797 are not publicly available in the provided documents. Monitor for updates.

CVE-2011-2863

The CVE describes an information-disclosure vulnerability in Google Chrome’s V8 JavaScript engine, occurring in versions before 14.0.0.0 due to insufficient policy enforcement. A remote attacker could obtain potentially sensitive information from process memory via a crafted HTML page. Affected p...

CVE-2011-3895

CVE-2011-3895 is a heap-based buffer overflow in FFmpeg’s Vorbis decoder (libavcodec) that can be triggered by a crafted input stream, potentially causing a denial of service or other unspecified impact. The connected documents indicate FFmpeg vulnerabilities across multiple CVEs, including this ...