6540 matches found
CVE-2026-14413
Uninitialized use in ANGLE within Google Chrome up to version 150.0.7871.46 allows a renderer-compromised attacker to potentially escape the sandbox via a crafted HTML page. CVE-2026-14413 (Severity High) indicates a sandbox-escape risk; remediations require updating to 150.0.7871.46 or later. No...
CVE-2016-1641
CVE-2016-1641 is a use-after-free vulnerability in Chromium/Google Chrome affecting the favicon handling path (content/browser/web_contents/web_contents_impl.cc). The issue exists in Chrome before 49.0.2623.75 and could allow a remote attacker to cause a denial of service or potentially other imp...
CVE-2016-5197
The CVE-2016-5197 issue affects Google Chrome for Android (before 54.0.2840.85). The Content View client insufficiently validated intent URLs, allowing a renderer-compromised page to trigger an arbitrary activity via a crafted HTML page. Impact stated: remote attacker could start arbitrary activi...
CVE-2023-7010
CVE-2023-7010 is a use-after-free vulnerability in WebRTC in Google Chrome, with impact described as potential heap corruption. The affected software is Google Chrome (WebRTC component); the concrete detail provided indicates exploitation could be remote via a crafted HTML page, and the vulnerabi...
CVE-2025-10500
Concretely affected: Google Chrome Dawn component, with vulnerability CVE-2025-10500 in Chrome prior to 140.0.7339.185. Root cause is a Use After Free in Dawn that can lead to heap corruption when processing crafted HTML pages. Impact is high (remote code execution potential) per the CVE entry. R...
CVE-2026-0903
CVE-2026-0903 refers to an Inappropriate implementation in Downloads in Google Chrome (Windows) before 144.0.7559.59, allowing a remote attacker to bypass dangerous file-type protections with a malicious file. Publicly documented fixes show Chromium-based updates delivering version 144.0.7559.59 ...
CVE-2026-10002
CVE-2026-10002 is a use-after-free in PDFium within Google Chrome, fixed in Chrome 148.0.7778.216 and later. The vulnerability affects PDFium’s handling of crafted PDF files, enabling potential heap corruption when a remote attacker supplies a malicious document. Affected product: Google Chrome (...
CVE-2026-10910
CVE-2026-10910 refers to a Type Confusion in V8 that affected Google Chrome’s sandboxed JavaScript engine prior to Chrome 149.0.7827.53. The issue could allow a remote attacker to execute arbitrary code through a crafted HTML page, with exploitation possible without user privileges but requiring ...
CVE-2026-10972
Use-after-free in Ozone within Google Chrome on Linux, fixed by patch to 149.0.7827.53 or newer. The flaw could allow a remote attacker to escape the sandbox via a crafted HTML page. Affected component: Ozone in Chrome; root cause: use-after-free. Impact: high (sandbox escape, remote code executi...
CVE-2026-10983
CVE-2026-10983 affects Dawn in Google Chrome. The issue is insufficient validation of untrusted input, enabling a remote attacker to potentially perform a sandbox escape via a crafted HTML page. Affected versions are prior to 149.0.7827.53. The provided documents do not specify exploitation statu...
CVE-2026-11244
The CVE-2026-11244 entry concerns Google Chrome’s WebAuthentication input validation. Affected component: WebAuthentication in Chrome (prior to 149.0.7827.53). Root cause: insufficient validation of untrusted input, enabling a remote attacker who compromised a renderer process to bypass the same-...
CVE-2026-11647
CVE-2026-11647 is for Google Chrome on Android, where a use-after-free in the Printing subsystem precedes a sandbox escape via a crafted HTML page when the renderer is compromised. Affected: Chrome on Android prior to version 149.0.7827.103. Impact: remote attacker with renderer access could pote...
CVE-2026-11683
CVE-2026-11683 affects Google Chrome’s WebCodecs. The root cause is a use-after-free in WebCodecs that allows a remote attacker to execute arbitrary code inside a sandbox via a crafted HTML page. The vulnerability is in Chrome versions prior to 149.0.7827.103 (Chromium-based). Impact is described...
CVE-2026-14138
CVE-2026-14138 affects Google Chrome on Windows (WebAppInstalls) prior to build 150.0.7871.47. The issue is an inappropriate implementation that can enable UI spoofing via a crafted HTML page when a user is prompted to perform specific UI gestures. Impact is UI spoofing with low severity and part...
CVE-2026-14156
CVE-2026-14156 : Concrete details across multiple sources show an issue in Google Chrome’s StorageAccessAPI where insufficient policy enforcement enables a remote attacker who compromised a renderer process to bypass same-origin policy via a crafted HTML page. Affected component: StorageAccessAPI...
CVE-2026-17812
CVE-2026-17812 affects Google Chrome/Chromium’s DigitalCredentials component. An inappropriate implementation allowed a remote attacker to perform UI spoofing via a crafted HTML page before version 151.0.7922.72. Public sources from Red Hat and Debian summarize the issue; upstream Chromium notes ...
CVE-2026-17877
CVE-2026-17877 describes an insecure implementation in Chromoting within Google Chrome on Linux prior to 151.0.7922.72, enabling a local attacker to achieve OS-level privilege escalation through malicious network traffic. Affected software: Google Chrome (Linux) with Chromoting. Root cause: inapp...
CVE-2026-17979
CVE-2026-17979 describes a race in the V8 engine affecting Google Chrome before version 151.0.7922.72 that could allow a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML page. The description across sources specifies the vulnerability in V8 / Chromium components and...
CVE-2026-3921
CVE-2026-3921 is a use-after-free in TextEncoding in Google Chrome prior to 146.0.7680.71 that could enable a remote attacker to trigger heap corruption via a crafted HTML page. Affected software is Chrome/Chromium (text encoding handling). The Chromium-based advisories and Chrome release notes c...
CVE-2026-5907
Chromium/Google Chrome vulnerability CVE-2026-5907 involves insufficient data validation in the Media component, allowing out-of-bounds memory read via a crafted video file. Affected: Chromium/Chrome up to version 147.0.7727.55 (Chrome stable release). Public-branch disclosures in multiple adviso...
CVE-2026-87560
CVE-2026-87560 is a missing authorization vulnerability in the Browser component of Google Chrome prior to version 153.0.8010.36 . A remote attacker can exploit it by serving a crafted HTML page , enabling them to bypass system access restrictions . The NVD-assigned CVSS 3.1 score is 4.3 (Medium)...
CVE-2010-0663
CVE-2010-0663 refers to Google Chrome prior to 4.0.249.78, where the ParamTraits::Read function in common/common_param_traits.cc does not initialize memory for bitmap data. This could allow remote attackers to obtain potentially sensitive information from process memory, related to use of a thumb...
CVE-2010-1236
CVE-2010-1236 affects WebKit’s WebCore component (protocolIs in platform/KURLGoogle.cpp). The issue is improper handling of leading whitespace in a URL, enabling cross-site scripting via crafted javascript: URLs. Affects Google Chrome before 4.1.249.1036 and Flock Browser 3.x before 3.0.0.4112. T...
CVE-2010-2300
CVE-2010-2300 is a use-after-free vulnerability in WebKit’s WebCore (Element::normalizeAttributes in dom/Element.cpp) affecting Google Chrome builds prior to 5.0.375.70. The issue can lead to remote code execution or memory corruption via DOM mutation-event handling vectors, per the description. ...
CVE-2010-3113
CVE-2010-3113 affects Google Chrome (< 5.0.375.127) and webkitgtk (
CVE-2010-4199
Summary: CVE-2010-4199 affects WebKit (GTK+/WebKit) as used in Debian, Ubuntu, and related packages. The vulnerability arises from improper casting of an unspecified variable during processing of an SVG element, enabling remote attackers to cause a denial of service or possibly other impact via ...
CVE-2011-1456
CVE-2011-1456 affects Google Chrome earlier than 11.0.696.57. The vulnerability arises from Chrome’s handling of PDF forms, allowing remote attackers to cause a denial of service or potentially other unspecified impact via vectors that lead to “stale pointers.” Exploitation details are not provid...
CVE-2011-3037
Google Chrome before 17.0.963.65 is affected by CVE-2011-3037: Bad casts in anonymous block splitting, caused by improper casting of variables during analysis of documents. The vulnerability allows a remote attacker to cause a denial of service or potentially other impact via a crafted document. ...
CVE-2011-3057
CVE-2011-3057 affects Google Chrome's V8 engine (Chromium) and is described as an invalid read in V8, with the initial entry noting a remote denial of service vector. Connected documents corroborate that this CVE is among a set of Chromium/V8 issues (e.g., CVEs 2011-3057 through 2011-3065) tracke...
CVE-2011-3076
Technical details about CVE-2011-3076 are not provided in the connected documents. The materials here cite the Chrome use-after-free issue but do not include affected versions, root cause, impact, or fixes. Monitor for updates.
CVE-2011-3087
Chromium/Chrome impacted by CVE-2011-3087 (Incorrect window navigation). The connected OpenSUSE advisory shows the fix being applied via chromium updates to 21.0.1145, addressing the issue among other CVEs listed (e.g., 2011-3083 to 2011-3102). The root cause is reported as an incorrect window na...
CVE-2011-3908
CVE-2011-3908 (Google Chrome) affects Chrome versions before 16.0.912.63. The vulnerability arises from improper parsing of SVG documents, enabling a remote attacker to trigger an out-of-bounds read and cause a denial of service via unspecified vectors. According to the description, the issue is ...
CVE-2011-3909
Technical details for CVE-2011-3909 are not publicly provided in the connected documents. Monitor for updates.
CVE-2011-3958
Technical details for CVE-2011-3958 are not provided in the supplied connected documents. No affected product/version or remediation is stated here. Monitor for updates.
CVE-2011-3969
Technical details for CVE-2011-3969 are not provided in the connected documents. The initial description notes a use-after-free in Chrome before 17.0.963.46, but no product/version specifics or remediation are present in the supplied sources. Monitor for updates.
CVE-2012-2858
CVE-2012-2858 is a Chrome/WebP decoder buffer overflow vulnerability. A crafted WebP image could trigger remote denial of service (and possible other impact). Affected: Google Chrome prior to 21.0.1180.57 on Mac/Linux and prior to 21.0.1180.60 on Windows/Chrome Frame. Remediation (per GLSA): upgr...
CVE-2012-2881
Technical details (affected product/component/version, root cause, exploit info, or remediation) are not publicly available in the provided connected documents beyond the initial CVE description. Monitor for updates from official advisories.
CVE-2012-5148
CVE-2012-5148 affects Google Chrome’s hyphenation feature, where file-name validation is inadequate on builds before 24.0.1312.52. Public details in the provided documents are limited to the generic impact; explicit exploitation vectors are not described. Related advisories note CVE-2012-5148 amo...
CVE-2012-5153
CVE-2012-5153 affects Google V8 before 3.14.5.3 used in Chrome before 24.0.1312.52, with exploitation via crafted JavaScript causing out-of-bounds stack access leading to possible DoS or unspecified impact. Remediation per connected docs is to upgrade to the patched V8/Chromium versions (e.g., V8...
CVE-2013-0882
Google Chrome vulnerable to denial of service and potentially other impact via a large number of SVG parameters. Affected: Windows/Linux builds < 25.0.1364.97 and Mac
CVE-2013-0922
CVE-2013-0922 affects Google Chrome (pre-26.0.1410.43) and describes insufficient restriction of brute-force attempts against sites using HTTP Basic Authentication. The connected OpenVAS/Gentoo entries confirm this CVE and point to remediation via upgrading Chromium/Chrome to newer versions (Gent...
CVE-2013-2839
CVE-2013-2839 affects Google Chrome/Chromium prior to 27.0.1453.93. The issue is a bad cast in clipboard handling of an unspecified variable, which can lead to denial of service or other impact via unknown vectors. Concrete public advisories in connected documents confirm the vulnerability in Chr...
CVE-2013-2917
CVE-2013-2917 concerns the Chromium/Blink Web Audio implementation. The ReverbConvolverStage used in core/platform/audio/ReverbConvolverStage.cpp contains an out-of-bounds read in the impulseResponse array, enabling a remote attacker to trigger a denial of service. Affected product/version lineag...
CVE-2013-6624
CVE-2013-6624 is a use-after-free in Chromium/Google Chrome tied to the string values of id attributes. The initial description notes vulnerability in Chrome before 31.0.1650.48 that could allow remote denial of service and possibly other impact. Connected updates document multiple Chromium patch...
CVE-2013-6659
The CVE-2013-6659 issue affects Google Chrome
CVE-2014-3175
CVE-2014-3175 refers to multiple issues in Chromium/Google Chrome prior to version 37.0.2062.94. The connected documents confirm it affects Chromium/Chrome and that fixes were shipped in 37.0.2062.94 (and related Debian/OpenSUSE/Ubuntu advisories). The vulnerability description notes potential de...
CVE-2014-3196
CVE-2014-3196 affects Google Chrome on Windows prior to 38.0.2125.101, where base/memory/shared_memory_win.cc did not enforce read-only restrictions on shared memory. This allowed a sandbox bypass by exploiting how memory sections are shared between processes, potentially enabling a compromised r...
CVE-2014-7929
Chrome Blink use-after-free in DOM HTMLScriptElement::didMoveToNewDocument (CVE-2014-7929). Affects Google Chrome before 40.0.2214.91; vulnerability occurs when moving a SCRIPT element across documents, enabling remote DoS or unspecified impact. Mitigation: update to Chrome 40.0.2214.91 or newer ...
CVE-2014-7943
CVE-2014-7943 refers to an out-of-bounds read in Skia used by Google Chrome prior to 40.0.2214.91, allowing remote attackers to cause a denial of service. Connected sources confirm affected software (Google Chrome/Chromium) and link the issue to Skia; multiple advisories note the same base vulner...