6540 matches found
CVE-2015-1222
CVE-2015-1222 refers to multiple use-after-free vulnerabilities in the ServiceWorkerScriptCacheMap in Google Chrome prior to 41.0.2272.76, enabling remote denial of service or other impacts via vectors involving ServiceWorkerContextWrapper::DeleteAndStartOver and related NotifyStartedCaching/Noti...
CVE-2015-1223
CVE-2015-1223 affects Google Chrome (Blink DOM) where use-after-free in core/html/HTMLInputElement.cpp can be triggered by extraneous change events (invalid input or read-only fields) due to issues in initializeTypeInParsing and updateType. The vulnerability is in the Blink DOM implementation use...
CVE-2015-6580
CVE-2015-6580 relates to multiple unspecified vulnerabilities in Google V8 before 4.5.103.29, as used in Google Chrome before 45.0.2454.85. The description indicates a denial of service or possibly other impact via unknown vectors. The connected documents consistently reference Google Chrome/V8 a...
CVE-2015-6583
CVE-2015-6583 affects Google Chrome prior to 45.0.2454.85. The vulnerability arises because a hosted app’s window does not display the location bar after navigation away from the installation site, which could allow remote attackers to spoof content via a crafted app. The issue is tied to interna...
CVE-2016-1641
CVE-2016-1641 is a use-after-free vulnerability in Chromium/Google Chrome affecting the favicon handling path (content/browser/web_contents/web_contents_impl.cc). The issue exists in Chrome before 49.0.2623.75 and could allow a remote attacker to cause a denial of service or potentially other imp...
CVE-2016-5197
The CVE-2016-5197 issue affects Google Chrome for Android (before 54.0.2840.85). The Content View client insufficiently validated intent URLs, allowing a renderer-compromised page to trigger an arbitrary activity via a crafted HTML page. Impact stated: remote attacker could start arbitrary activi...
CVE-2023-7010
CVE-2023-7010 is a use-after-free vulnerability in WebRTC in Google Chrome, with impact described as potential heap corruption. The affected software is Google Chrome (WebRTC component); the concrete detail provided indicates exploitation could be remote via a crafted HTML page, and the vulnerabi...
CVE-2025-10500
Concretely affected: Google Chrome Dawn component, with vulnerability CVE-2025-10500 in Chrome prior to 140.0.7339.185. Root cause is a Use After Free in Dawn that can lead to heap corruption when processing crafted HTML pages. Impact is high (remote code execution potential) per the CVE entry. R...
CVE-2026-0903
CVE-2026-0903 refers to an Inappropriate implementation in Downloads in Google Chrome (Windows) before 144.0.7559.59, allowing a remote attacker to bypass dangerous file-type protections with a malicious file. Publicly documented fixes show Chromium-based updates delivering version 144.0.7559.59 ...
CVE-2026-10002
CVE-2026-10002 is a use-after-free in PDFium within Google Chrome, fixed in Chrome 148.0.7778.216 and later. The vulnerability affects PDFium’s handling of crafted PDF files, enabling potential heap corruption when a remote attacker supplies a malicious document. Affected product: Google Chrome (...
CVE-2026-10897
CVE-2026-10897 affects Google Chrome (GPU component) with the root cause described as an inappropriate implementation in the GPU. This could allow a remote attacker to escape the Chrome sandbox via a crafted HTML page. The vulnerability is addressed in the Chrome 149.0.7827.53 stable release (Lin...
CVE-2026-10910
CVE-2026-10910 refers to a Type Confusion in V8 that affected Google Chrome’s sandboxed JavaScript engine prior to Chrome 149.0.7827.53. The issue could allow a remote attacker to execute arbitrary code through a crafted HTML page, with exploitation possible without user privileges but requiring ...
CVE-2026-10972
Use-after-free in Ozone within Google Chrome on Linux, fixed by patch to 149.0.7827.53 or newer. The flaw could allow a remote attacker to escape the sandbox via a crafted HTML page. Affected component: Ozone in Chrome; root cause: use-after-free. Impact: high (sandbox escape, remote code executi...
CVE-2026-10983
CVE-2026-10983 affects Dawn in Google Chrome. The issue is insufficient validation of untrusted input, enabling a remote attacker to potentially perform a sandbox escape via a crafted HTML page. Affected versions are prior to 149.0.7827.53. The provided documents do not specify exploitation statu...
CVE-2026-11244
The CVE-2026-11244 entry concerns Google Chrome’s WebAuthentication input validation. Affected component: WebAuthentication in Chrome (prior to 149.0.7827.53). Root cause: insufficient validation of untrusted input, enabling a remote attacker who compromised a renderer process to bypass the same-...
CVE-2026-11647
CVE-2026-11647 is for Google Chrome on Android, where a use-after-free in the Printing subsystem precedes a sandbox escape via a crafted HTML page when the renderer is compromised. Affected: Chrome on Android prior to version 149.0.7827.103. Impact: remote attacker with renderer access could pote...
CVE-2026-11683
CVE-2026-11683 affects Google Chrome’s WebCodecs. The root cause is a use-after-free in WebCodecs that allows a remote attacker to execute arbitrary code inside a sandbox via a crafted HTML page. The vulnerability is in Chrome versions prior to 149.0.7827.103 (Chromium-based). Impact is described...
CVE-2026-14138
CVE-2026-14138 affects Google Chrome on Windows (WebAppInstalls) prior to build 150.0.7871.47. The issue is an inappropriate implementation that can enable UI spoofing via a crafted HTML page when a user is prompted to perform specific UI gestures. Impact is UI spoofing with low severity and part...
CVE-2026-14156
CVE-2026-14156 : Concrete details across multiple sources show an issue in Google Chrome’s StorageAccessAPI where insufficient policy enforcement enables a remote attacker who compromised a renderer process to bypass same-origin policy via a crafted HTML page. Affected component: StorageAccessAPI...
CVE-2026-16421
CVE-2026-16421 relates to an Inappropriate implementation in WebAudio in Google Chrome (Chromium) before 150.0.7871.182 that could allow a remote attacker to execute arbitrary code inside a sandbox via a crafted HTML page. The vulnerability is part of a set of Chromium/WebAudio issues associated ...
CVE-2026-17812
CVE-2026-17812 affects Google Chrome/Chromium’s DigitalCredentials component. An inappropriate implementation allowed a remote attacker to perform UI spoofing via a crafted HTML page before version 151.0.7922.72. Public sources from Red Hat and Debian summarize the issue; upstream Chromium notes ...
CVE-2026-17877
CVE-2026-17877 describes an insecure implementation in Chromoting within Google Chrome on Linux prior to 151.0.7922.72, enabling a local attacker to achieve OS-level privilege escalation through malicious network traffic. Affected software: Google Chrome (Linux) with Chromoting. Root cause: inapp...
CVE-2026-17979
CVE-2026-17979 describes a race in the V8 engine affecting Google Chrome before version 151.0.7922.72 that could allow a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML page. The description across sources specifies the vulnerability in V8 / Chromium components and...
CVE-2026-3921
CVE-2026-3921 is a use-after-free in TextEncoding in Google Chrome prior to 146.0.7680.71 that could enable a remote attacker to trigger heap corruption via a crafted HTML page. Affected software is Chrome/Chromium (text encoding handling). The Chromium-based advisories and Chrome release notes c...
CVE-2026-5907
Chromium/Google Chrome vulnerability CVE-2026-5907 involves insufficient data validation in the Media component, allowing out-of-bounds memory read via a crafted video file. Affected: Chromium/Chrome up to version 147.0.7727.55 (Chrome stable release). Public-branch disclosures in multiple adviso...
CVE-2026-8580
CVE-2026-8580 describes a use-after-free in Mojo of Google Chrome before 148.0.7778.168. The underlying flaw is a use-after-free in Mojo that could allow a remote attacker to potentially perform a sandbox escape via a crafted HTML page. The issue is classified with a Chromium-based severity of Me...
CVE-2026-87559
A UI misrepresentation vulnerability in Google Chrome prior to 153.0.8010.36 allowed a remote attacker, leveraging social engineering , to spoof UI elements via a crafted HTML page. The flaw resides in Chrome's UI subsystem, where a crafted page could cause the browser to render misleading interf...
CVE-2010-0663
CVE-2010-0663 refers to Google Chrome prior to 4.0.249.78, where the ParamTraits::Read function in common/common_param_traits.cc does not initialize memory for bitmap data. This could allow remote attackers to obtain potentially sensitive information from process memory, related to use of a thumb...
CVE-2010-1236
CVE-2010-1236 affects WebKit’s WebCore component (protocolIs in platform/KURLGoogle.cpp). The issue is improper handling of leading whitespace in a URL, enabling cross-site scripting via crafted javascript: URLs. Affects Google Chrome before 4.1.249.1036 and Flock Browser 3.x before 3.0.0.4112. T...
CVE-2010-2300
CVE-2010-2300 is a use-after-free vulnerability in WebKit’s WebCore (Element::normalizeAttributes in dom/Element.cpp) affecting Google Chrome builds prior to 5.0.375.70. The issue can lead to remote code execution or memory corruption via DOM mutation-event handling vectors, per the description. ...
CVE-2010-3113
CVE-2010-3113 affects Google Chrome (< 5.0.375.127) and webkitgtk (
CVE-2010-4199
Summary: CVE-2010-4199 affects WebKit (GTK+/WebKit) as used in Debian, Ubuntu, and related packages. The vulnerability arises from improper casting of an unspecified variable during processing of an SVG element, enabling remote attackers to cause a denial of service or possibly other impact via ...
CVE-2011-1456
CVE-2011-1456 affects Google Chrome earlier than 11.0.696.57. The vulnerability arises from Chrome’s handling of PDF forms, allowing remote attackers to cause a denial of service or potentially other unspecified impact via vectors that lead to “stale pointers.” Exploitation details are not provid...
CVE-2011-3037
Google Chrome before 17.0.963.65 is affected by CVE-2011-3037: Bad casts in anonymous block splitting, caused by improper casting of variables during analysis of documents. The vulnerability allows a remote attacker to cause a denial of service or potentially other impact via a crafted document. ...
CVE-2011-3057
CVE-2011-3057 affects Google Chrome's V8 engine (Chromium) and is described as an invalid read in V8, with the initial entry noting a remote denial of service vector. Connected documents corroborate that this CVE is among a set of Chromium/V8 issues (e.g., CVEs 2011-3057 through 2011-3065) tracke...
CVE-2011-3076
Technical details about CVE-2011-3076 are not provided in the connected documents. The materials here cite the Chrome use-after-free issue but do not include affected versions, root cause, impact, or fixes. Monitor for updates.
CVE-2011-3087
Chromium/Chrome impacted by CVE-2011-3087 (Incorrect window navigation). The connected OpenSUSE advisory shows the fix being applied via chromium updates to 21.0.1145, addressing the issue among other CVEs listed (e.g., 2011-3083 to 2011-3102). The root cause is reported as an incorrect window na...
CVE-2011-3908
CVE-2011-3908 (Google Chrome) affects Chrome versions before 16.0.912.63. The vulnerability arises from improper parsing of SVG documents, enabling a remote attacker to trigger an out-of-bounds read and cause a denial of service via unspecified vectors. According to the description, the issue is ...
CVE-2011-3909
Technical details for CVE-2011-3909 are not publicly provided in the connected documents. Monitor for updates.
CVE-2011-3958
Technical details for CVE-2011-3958 are not provided in the supplied connected documents. No affected product/version or remediation is stated here. Monitor for updates.
CVE-2011-3969
Technical details for CVE-2011-3969 are not provided in the connected documents. The initial description notes a use-after-free in Chrome before 17.0.963.46, but no product/version specifics or remediation are present in the supplied sources. Monitor for updates.
CVE-2012-2858
CVE-2012-2858 is a Chrome/WebP decoder buffer overflow vulnerability. A crafted WebP image could trigger remote denial of service (and possible other impact). Affected: Google Chrome prior to 21.0.1180.57 on Mac/Linux and prior to 21.0.1180.60 on Windows/Chrome Frame. Remediation (per GLSA): upgr...
CVE-2012-2881
Technical details (affected product/component/version, root cause, exploit info, or remediation) are not publicly available in the provided connected documents beyond the initial CVE description. Monitor for updates from official advisories.
CVE-2012-5148
CVE-2012-5148 affects Google Chrome’s hyphenation feature, where file-name validation is inadequate on builds before 24.0.1312.52. Public details in the provided documents are limited to the generic impact; explicit exploitation vectors are not described. Related advisories note CVE-2012-5148 amo...
CVE-2012-5153
CVE-2012-5153 affects Google V8 before 3.14.5.3 used in Chrome before 24.0.1312.52, with exploitation via crafted JavaScript causing out-of-bounds stack access leading to possible DoS or unspecified impact. Remediation per connected docs is to upgrade to the patched V8/Chromium versions (e.g., V8...
CVE-2013-0882
Google Chrome vulnerable to denial of service and potentially other impact via a large number of SVG parameters. Affected: Windows/Linux builds < 25.0.1364.97 and Mac
CVE-2013-0922
CVE-2013-0922 affects Google Chrome (pre-26.0.1410.43) and describes insufficient restriction of brute-force attempts against sites using HTTP Basic Authentication. The connected OpenVAS/Gentoo entries confirm this CVE and point to remediation via upgrading Chromium/Chrome to newer versions (Gent...
CVE-2013-2839
CVE-2013-2839 affects Google Chrome/Chromium prior to 27.0.1453.93. The issue is a bad cast in clipboard handling of an unspecified variable, which can lead to denial of service or other impact via unknown vectors. Concrete public advisories in connected documents confirm the vulnerability in Chr...
CVE-2013-2917
CVE-2013-2917 concerns the Chromium/Blink Web Audio implementation. The ReverbConvolverStage used in core/platform/audio/ReverbConvolverStage.cpp contains an out-of-bounds read in the impulseResponse array, enabling a remote attacker to trigger a denial of service. Affected product/version lineag...