CVE-2014-7935

CVE-2014-7935 is a use-after-free in Google Chrome’s Speech implementation (browser/speech/tts_message_filter.cc) that can cause a denial of service or other impact when utterances are triggered from a closed tab. Affected product: Google Chrome before 40.0.2214.91. Root cause: use-after-free in ...

CVE-2026-14427

CVE-2026-14427 : Heap buffer overflow in Skia used by Google Chrome prior to 150.0.7871.46. A remote attacker who already compromised the renderer could potentially escape the sandbox via a crafted HTML page. Affected: Chrome/Skia stack (Chrome 150 pre-release fix applies). Root cause: heap buffe...

CVE-2026-17709

CVE-2026-17709 describes a race in Downloads in Google Chrome on macOS prior to 151.0.7922.72 that could allow a remote attacker who has compromised the renderer process to perform a sandbox escape via a crafted HTML page. The description notes a Chromium security severity of High/CRITICAL and re...

CVE-2011-0984

CVE-2011-0984 affects Google Chrome prior to 9.0.597.94, where the browser mishandles plug-ins, enabling a remote attacker to cause a denial of service via an out-of-bounds read. Public sources (including Debian DSA-2166-1 and OpenVAS entries) corroborate the family of Chrome/Chromium vulnerabili...

CVE-2011-1117

Technical details for CVE-2011-1117 are not publicly provided in the connected documents. Monitor for updates.

CVE-2011-2860

CVE-2011-2860 affects Google Chrome prior to 14.0.835.163, where a use-after-free in handling table styles allows remote attackers to cause a denial of service or potentially other impact. The issue is exploitable via vectors related to table styles, with a high impact identified (CVSS-like metri...

CVE-2011-3105

CVE-2011-3105: Use-after-free in Google Chrome’s CSS :first-letter handling (pre‑19.0.1084.52) can allow remote attackers to cause a denial of service and possibly other impact. Documented in multiple scanners (e.g., Nessus/OpenVAS) with exact vulnerable version range and remediation guidance to ...

CVE-2011-3881

CVE-2011-3881 affects WebKit as used in Google Chrome <15.0.874.102 and Android

CVE-2012-2846

CVE-2012-2846 is a Chromium/Chrome vulnerability affecting Linux where renderer process isolation fails, enabling cross-process interference that could lead to a denial of service. Connected advisories (GLSA 201208-03) tie this family of issues to Chromium and recommend upgrading to Chrome/Chromi...

CVE-2012-2869

CVE-2012-2869 affects Chromium/Chrome up to around version 21.x, where the URL loading path could trigger a stale buffer, potentially enabling a denial of service or other impact. The vulnerability is tied to Chromium’s URL handling in the loader. OpenSUSE/OpenVAS advisories indicate updating Chr...

CVE-2012-2874

CVE-2012-2874 (and related CVE-2012-2883) affect Skia as used in Google Chrome prior to 22.0.1229.79. The issue is an out-of-bounds write in Skia that can lead to a denial of service or potentially other unspecified impact. Affected product/script: Google Chrome with Skia before the stated versio...

CVE-2012-2879

CVE-2012-2879 affects Chromium/Google Chrome prior to version 22.0.1229.79, where crafting a document could trigger DOM topology corruption leading to a crash/DoS. Connected sources reference Chromium/openSUSE advisories noting multiple vulnerabilities and confirm a patch/upstream fix in the Chro...

CVE-2012-2884

CVE-2012-2884 concerns Chromium (and Skia) in Google Chrome prior to 22.0.1229.79. The vulnerability allows a remote attacker to trigger a denial of service via an out-of-bounds read. Connected advisories confirm Chromium-related fixes: openSUSE/SUSE patches upgrade Chromium to 22.0.1229.94 or ne...

CVE-2013-0909

CVE-2013-0909 is a Google Chrome vulnerability where the XSS Auditor could disclose the HTTP Referer information. Affected software is Chrome prior to version 25.0.1364.152. Root cause is described as a flaw in Referer handling within the XSS Auditor, enabling partial confidentiality loss. Accord...

CVE-2013-0921

Affected software: Google Chrome. Vulnerability: Isolated Sites feature does not properly enforce separate processes, enabling a crafted site to bypass intended access restrictions. Root cause: insufficient isolation of isolated sites across processes. Impact: remote attacker could bypass access ...

CVE-2013-2837

CVE-2013-2837 is a use-after-free vulnerability in the SVG implementation of Chromium/Chrome before 27.0.1453.93, leading to denial of service and possibly other impact. The issue is triggered by use-after-free in SVG handling; multiple connected advisories confirm this is one of several related ...

CVE-2013-2859

CVE-2013-2859 affects Chromium/Google Chrome prior to 27.0.1453.110. The issue allows remote attackers to bypass the Same Origin Policy and trigger namespace pollution via unspecified vectors. Debian and Gentoo advisories document this CVE along with other related Chromium/V8 flaws and indicate r...

CVE-2013-2870

CVE-2013-2870 is a use-after-free vulnerability in Chromium/Google Chrome prior to 28.0.1500.71 that allows a remote attacker to execute arbitrary code via crafted response traffic after a URL request. Multiple connected documents confirm the issue as a network-socket related use-after-free, with...

CVE-2013-2880

CVE-2013-2880 is part of a set of multiple vulnerabilities disclosed for Chromium/Chromium-browser around the 28.x update. The connected advisory entries show that the Chrome/Chromium 28 development team identified “various issues” through internal fuzzing and audits (CVE-2013-2880 included) and ...

CVE-2013-2902

CVE-2013-2902: Use-after-free in Blink's XSLT ProcessingInstruction handling during applyXSLTransform (HTML document or xsl:processing-instruction) may allow remote denial of service or other impact. Affected product: Google Chrome/Blink prior to 29.0.1547.57. Root cause: use-after-free in XSLT p...

CVE-2013-2905

CVE-2013-2905 affects Google Chrome

CVE-2014-1717

The CVE-2014-1717 entry concerns Google Chrome’s V8 JavaScript engine (pre-34.0.1847.116). A flaw in numeric casts during typed-array handling can cause out-of-bounds array access, enabling a remote attacker to trigger a denial of service or potentially other impact via crafted JavaScript. Public...

CVE-2014-1718

CVE-2014-1718 affects Chromium/Google Chrome prior to version 34.0.1847.116. The vulnerability is an integer overflow in SoftwareFrameManager::SwapToNewFrame within the software compositor, allowing a remote attacker to trigger an out-of-bounds/large memory mapping that can cause a denial of serv...

CVE-2014-7944

CVE-2014-7944 is a PDFium-related vulnerability embedded in Google Chrome before 40.0.2214.91. The issue is in fxcodec/codec/fx_codec_jpx_opj.cpp (sycc422_to_rgb) where odd image width values are not handled correctly, leading to an out-of-bounds read and potential denial of service via a crafted...

CVE-2015-5605

CVE-2015-5605 affects Google Chrome/Chromium with the V8 JavaScript engine. The vulnerability lies in the regular-expression implementation, which mishandles interrupts during stack-overflow exception message allocation, enabling a remote attacker to cause a denial of service (application crash) ...

CVE-2016-1638

CVE-2016-1638 affects Google Chrome/Chromium before 49.0.2623.75. The vulnerability is in the extensions/renderer/resources/platform_app.js within the Extensions subsystem, where Web API usage was not properly restricted, allowing a crafted platform app to bypass intended access restrictions. The...

CVE-2016-1642

CVE-2016-1642 is listed in multiple advisories as part of the Chrome 49.0.2623.75 fix bundle; connected records indicate it was addressed in Chrome/Chromium updates (e.g., Debian DSA-3507-1, Mageia MGASA-2016-0127) with no public detail on the exact root cause. Upgrade to Chrome 49.0.2623.75 or l...

CVE-2025-12428

CVE-2025-12428 describes a Type Confusion in V8 within Google Chrome/Chromium before version 142.0.7444.59, enabling a remote attacker to perform arbitrary read/write through a crafted HTML page. The issue affects Chromium-based browsers (Chrome/Chromium) and is classified with high severity and ...

CVE-2026-11175

CVE-2026-11175 affects Google Chrome on Android, involving the Messages security UI. The root cause is an incorrect security UI which allows UI spoofing via a crafted HTML page. Impact is a remote attacker potentially spoofing the UI. Remediation: upgrade Chrome to version 149.0.7827.53 or later....

CVE-2026-13025

CVE-2026-13025 describes a race in DevTools of Google Chrome prior to 149.0.7827.197 that could allow a remote attacker, who already compromised the renderer process, to potentially escape the sandbox via a crafted HTML page. The issue is rated High (CVSS v3.1: AV:N/AC:H/PR:N/UI:R/S:C/C:H/I:H/A:H...

CVE-2026-13970

CVE-2026-13970 : In Google Chrome, an uninitialized-use vulnerability in the Media component allows a remote attacker who has compromised the renderer process to read potentially sensitive data from process memory via a crafted HTML page. Affected versions are before 150.0.7871.47. Impact is info...

CVE-2026-14132

CVE-2026-14132 affects Google Chrome WebXR: an inappropriate WebXR implementation allows a remote attacker to spoof UI via a crafted HTML page. Affects Chrome versions prior to 150.0.7871.47; the issue is rated Low severity with user interaction required and network attack vector. The publicly do...

CVE-2026-17741

CVE-2026-17741 refers to insufficient validation of untrusted input in WebView for Google Chrome on Android (and the underlying Chromium WebView component). The vulnerability could enable a remote attacker to perform a sandbox escape via a crafted HTML page, as described for Chrome versions older...

CVE-2026-17989

CVE-2026-17989 affects Google Chrome’s V8 engine. The vulnerability is a Type Confusion in V8 that could allow a remote attacker to execute arbitrary code inside Chrome’s sandbox via a crafted HTML page on versions prior to 151.0.7922.72. The impact is remote code execution with high confidential...

CVE-2026-5902

CVE-2026-5902 affects Chromium/Chrome on Android prior to 147.0.7727.55, where a race in media handling could be exploited by a compromised renderer to corrupt media stream metadata via a crafted HTML page. The documented impact in the connected sources centers on this race condition in the media...

CVE-2026-6363

CVE-2026-6363 : Type Confusion in V8 within Google Chrome before 147.0.7727.101. A remote attacker could trigger out-of-bounds memory access via a crafted HTML page. Affected software: Google Chrome (V8 engine). Root cause: type confusion in V8. Impact: potential memory access issues; exploitatio...

CVE-2026-79001

CVE-2026-79001 is an information leak in the Bluetooth component of Google Chrome on Mac , fixed in version 152.0.7977.65 . A remote attacker who has already compromised the renderer process and leverages social engineering can obtain sensitive information via a crafted HTML page. Chromium rates ...

CVE-2026-8554

CVE-2026-8554 is a type confusion flaw in the ANGLE component of the Chromium-based Google Chrome browser on Windows. The issue allows a remote attacker who has compromised a renderer process to trigger an out-of-bounds memory write via a crafted HTML page, due to a flaw in ANGLE’s handling of da...

CVE-2026-9891

CVE-2026-9891 is a use-after-free vulnerability in Chrome’s Extensions component (Chromium) that affects pre-148.0.7778.216 builds. The issue arises when a renderer process is compromised, potentially enabling a sandbox escape via a crafted Chrome Extension. The vulnerability is discussed across ...

CVE-2008-6994

CVE-2008-6994 concerns Google Chrome (around 0.2.149.x). A stack-based buffer overflow in the SaveAs pathway (SaveFileAsWithFilter in win_util.cc) can be triggered by a web page containing a long TITLE element, causing a long filename during save and allowing user-assisted remote code execution. ...

CVE-2009-2556

Google Chrome before 2.0.172.37 is affected by multiple vulnerabilities (CVE-2009-2555 and CVE-2009-2556). The issues include: 1) a heap overflow in JavaScript regular expressions that can cause memory corruption and potentially allow arbitrary code execution or renderer/tab crash; 2) memory corr...

CVE-2011-1193

CVE-2011-1193 affects Google Chrome’s V8 engine; Google Chrome before 10.0.648.127 can bypass the Same Origin Policy via unspecified vectors. Affected product: Google Chrome (V8). Root cause: SOP bypass in the V8/SOP handling. Impact per sources: partial confidentiality, integrity, and availabili...

CVE-2011-2855

Technical details are not publicly available in the provided documents. Monitor for updates.

CVE-2011-3031

CVE-2011-3031 is a use-after-free in Google V8's element wrapper, affecting Chrome prior to 17.0.963.65. The vulnerability could cause a denial of service or possibly other impact via unknown vectors. Publicly documented mitigations include updates in Chromium/OpenSUSE (openSUSE-SU-2012:0374-1) a...

CVE-2011-3890

CVE-2011-3890: A use-after-free in Google Chrome prior to 15.0.874.102 related to video source handling can allow remote attackers to cause a denial of service or possibly other impact. Affects Chrome versions before the fixed build; exploitation details and in-wild activity are not described in ...

CVE-2011-3924

CVE-2011-3924 involves a use-after-free vulnerability in Google Chrome prior to 16.0.912.77, affecting DOM selections. The impact per the description is a possible denial of service or other unspecified effects. The provided connected documents do not add concrete technical details (affected comp...

CVE-2011-3968

Technical details for CVE-2011-3968 are not publicly available in the provided connected documents; monitor for updates.

CVE-2012-5139

CVE-2012-5139 is a use-after-free vulnerability in Google Chrome/Chromium related to visibility events, affecting Chrome before 23.0.1271.97 and potentially causing denial of service or other impacts. Connected advisories confirm multiple Chromium/Chrome CVEs with fixes in updated Chromium/Chrome...

CVE-2012-5145

Technical details about CVE-2012-5145 are not publicly available in the provided documents; monitor for updates.

CVE-2012-5146

CVE-2012-5146 affects Google Chrome/ Chromium. Description: remote attackers could bypass the Same Origin Policy via a malformed URL. Impact: SOP bypass (highly sensitive security policy). Affected versions: Chrome prior to 24.0.1312.52. Mitigation: upgrade to Chrome 24.0.1312.52 or newer (as ind...