CVE-2011-3052

CVE-2011-3052 involves memory corruption in the WebGL canvas handling of Chromium/Chrome. The issue arises from the WebGL implementation not properly handling CANVAS elements, enabling a remote attacker to cause a denial of service (memory corruption) and potentially other unspecified impacts via...

CVE-2011-3080

CVE-2011-3080 describes a race condition in Google Chrome’s Inter-process Communication (IPC) sandbox that could allow bypassing sandbox restrictions. The initial description specifies Chrome prior to 18.0.1025.168 and mentions unspecified vectors for the bypass. Connected documents corroborate t...

CVE-2011-3091

CVE-2011-3091 is a Use-after-free in the IndexedDB implementation of Chromium/Google Chrome. Public sources describe remote denial of service and possible other impact. OpenSUSE’s patch openSUSE-SU-2012:0656-1 fixes this set of Chrome/V8 CVEs (including CVE-2011-3091) by updating Chromium to abou...

CVE-2011-3953

CVE-2011-3953 affects Google Chrome (Chrome before 17.0.963.46). The root cause is that clipboard monitoring after a paste event is not prevented, with unspecified impact. Affected versions are Chrome before 17.0.963.46; mitigation is to upgrade to 17.0.963.46 or newer. Gentoo GLSA/OSV entries in...

CVE-2012-2886

CVE-2012-2886 corresponds to a UXSS (Universal XSS) vulnerability in Chromium/Google Chrome reported as affecting Chrome before 22.0.1229.79, where an attacker could inject arbitrary script via the Google V8 bindings. The connected advisories show that Chromium/OpenSUSE patches were released to a...

CVE-2012-2888

CVE-2012-2888 is a Chromium use-after-free in SVG text references vulnerability that could allow remote DoS (and possibly other impact) on affected Chromium/Chrome builds prior to the patched versions. Publicly documented fixes reference upgrading Chromium to at least 22.0.1229.94 (e.g., openSUSE...

CVE-2012-5121

CVE-2012-5121 : A use-after-free vulnerability in Google Chrome prior to 23.0.1271.64 allows remote attackers to cause a denial of service (or possibly other impact) via vectors related to video layout. The CVSS v2 base score is 7.5 (Network attacker, no authentication, low attack complexity, par...

CVE-2012-5132

CVE-2012-5132 affects Chromium/Chromium-based browsers (e.g., Chrome prior to 23.0.1271.91) via a denial of service causing an application crash when handling a response with chunked transfer coding. Connected advisories (openSUSE/SUSE GLSA 201309-16) confirm the issue as a browser crash with chu...

CVE-2012-5137

CVE-2012-5137 is a use-after-free vulnerability in Chromium’s media source handling. The public description notes a remote attacker could cause a denial of service or possibly gain other unspecified impact via Media Source API vectors in Chrome builds earlier than the fixed version. Connected adv...

CVE-2012-5140

CVE-2012-5140: Google Chrome prior to 23.0.1271.97 has a use-after-free in the URL loader, allowing remote attackers to cause a denial of service or possibly other impact. The vulnerability is documented in multiple vulnerability feeds (OpenVAS/OSV-OpenVAS entries reference CVE-2012-5140). No exp...

CVE-2013-0893

CVE-2013-0893: Google Chrome is affected by a race condition in media handling that could lead to denial of service or other unspecified impact. Vulnerable versions are Chrome before 25.0.1364.97 on Windows/Linux and before 25.0.1364.99 on Mac OS X. The issue is addressed in the Chrome update rel...

CVE-2013-0898

CVE-2013-0898 is a use-after-free vulnerability in Chrome’s URL handling. Affected: Google Chrome on Windows, Linux, and Mac OS X; vulnerable component is URL handling. Impact: remote denial of service and possibly other unspecified effects via URL-related vectors. Exploitation status is not prov...

CVE-2013-0920

CVE-2013-0920 is a confirmed Google Chrome vulnerability described as a use-after-free in the extension bookmarks API. Affected: Chrome browser prior to 26.0.1410.43. Impact: remote denial of service or other unspecified effects via unknown vectors. Mitigation: update to Chrome 26.0.1410.43 or ne...

CVE-2013-0925

CVE-2013-0925 affects Google Chrome (pre-26.0.1410.43). The issue: a Chrome extension can receive a URL without the extension having Tabs (APIPermission::kTab), implying a potential information leakage risk. The linked OpenVAS/NASL entries reiterate multiple Chrome vulnerabilities from Apr 2013 e...

CVE-2013-2844

CVE-2013-2844 describes a use-after-free in the CSS implementation of Chromium/Chrome prior to version 27.0.1453.93, which could allow a remote attacker to cause a denial of service or possibly other impact via style-resolution vectors. Public sources in the connected documents confirm Chromium/C...

CVE-2013-2864

CVE-2013-2864 affects Google Chrome prior to version 27.0.1453.110, with the PDF functionality being the vector. The issue can cause a denial of service via an invalid free operation and may have unspecified other impact. The NVD assigns a CVSSv2 base score of 7.5 (HIGH) with network attack vecto...

CVE-2013-2868

CVE-2013-2868 affects Chromium/Google Chrome up to version 28.0.1500.71. The flaw occurs in common/extensions/sync_helper.cc where NPAPI extension synchronization proceeds without verifying a plugin permission setting, enabling a remote attacker to trigger unwanted changes to extensions through u...

CVE-2013-2907

CVE-2013-2907 is an out-of-bounds read in the Window.prototype object reported for Chromium around the 30.x updates. Connected advisories show openSUSE and Debian patches that fix this issue as part of Chromium security updates (e.g., openSUSE-SU-2013:1556-1 and openSUSE openSUSE-2014-37/NASL ent...

CVE-2013-2920

CVE-2013-2920 : Out-of-bounds read in URL parsing in Chromium/Google Chrome prior to versions around 30.0.1599.x. The issue is evidenced in the Chrome 30 development/Stable lineage, with advisories noting the fix in updates such as 30.0.1599.66 and subsequent Chromium builds. Connected documents ...

CVE-2013-6802

Technical details for CVE-2013-6802 are not publicly available in the provided documents. Monitor for updates.

CVE-2014-1715

CVE-2014-1715 is a directory traversal vulnerability in Chromium/Google Chrome prior to 33.0.1750.152 (for Linux/macOS) and prior to 33.0.1750.154 (Windows). The issue was addressed in Chromium/Chrome updates cited by multiple advisories, with Debian noting fixes in 33.0.1750.152-1~deb7u1 and ope...

CVE-2014-1725

The CVE-2014-1725 issue affects Blink’s base64DecodeInternal in wtf/text/Base64.cpp used by Google Chrome prior to 34.0.1847.116. The vulnerability arises from improper handling of whitespace-only input, enabling a remote attacker to trigger an out-of-bounds read via window.atob and cause a denia...

CVE-2014-7900

CVE-2014-7900 affects PDFium’s CPDF_Parser::IsLinearizedFile used by Google Chrome before 39.0.2171.65. Root cause is a use-after-free in PDF parsing of linearized PDFs, enabling remote DoS or possible unspecified impact via a crafted document. Connected documents confirm Chrome/OpenChromium CVE-...

CVE-2014-7938

CVE-2014-7938 refers to a memory corruption vulnerability in the Fonts implementation of Google Chrome, exploitable through unknown vectors and affecting Chrome prior to 40.0.2214.91. Connected sources identify this CVE among multiple Chrome/Chromium issues and note that a patch was released in C...

CVE-2017-5048

The CVE-2017-5048 entry concerns an integer overflow in FFmpeg within Google Chrome before 57.0.2987.98 (Mac/Windows/Linux) and 57.0.2987.108 on Android, enabling a remote attacker to cause an out-of-bounds memory write via a crafted video file related to ChunkDemuxer. Affected component: FFmpeg ...

CVE-2021-38023

CVE-2021-38023 affects Google Chrome (Chromium-based) Extensions. The vulnerability is a use-after-free in Extensions that could allow a remote attacker to exploit heap corruption via a crafted HTML page. This is described as a High-severity issue with network attack vector, requiring user intera...

CVE-2023-3742

CVE-2023-3742: Google Chrome on ChromeOS prior to 114.0.5735.90 suffers from insufficient policy enforcement in the ADB component, enabling a local attacker with physical access to bypass device policy restrictions. Affected product: Google Chrome on ChromeOS; vulnerable element: ADB policy enfor...

CVE-2025-8576

CVE-2025-8576: Use-after-free in Chrome Extensions (Chromium) prior to 139.0.7258.66 can lead to heap corruption via a crafted extension. Affected software is Google Chrome/Chromium extensions; exploitation would require remote access with user interaction. Remediation across advisories shows pat...

CVE-2025-8577

CVE-2025-8577 : In Chrome/Chromium-based browsers, an inappropriate implementation in Picture-in-Picture prior to 139.0.7258.66 allowed a remote attacker to spoof UI via a crafted HTML page after convincing a user to perform specific UI gestures. Concrete details across connected sources show Chr...

CVE-2026-10022

Summary: A type confusion in the V8 JavaScript engine within Google Chrome before version 148.0.7778.216 may allow an attacker who convinces a user to install a malicious extension to execute arbitrary code inside a browser sandbox. Affected components: V8 in Google Chrome (Chromium-based). Root ...

CVE-2026-10889

CVE-2026-10889 : Out-of-bounds read in ANGLE used by Google Chrome before 149.0.7827.53 allowed a remote attacker who had compromised the renderer to potentially sandbox-escape via a crafted HTML page. Affected component: ANGLE in Chrome. Impact: sandbox escape with high/critical severity as stat...

CVE-2026-10893

CVE-2026-10893 : Use-after-free in Chromoting within Google Chrome before 149.0.7827.53 allows remote code execution via malicious network traffic. The issue is in the Chromoting component; impact is described as remote code execution with Chromium security severity: Critical. The public records ...

CVE-2026-10954

CVE-2026-10954 describes a use-after-free in Chrome’s Actor component, leading to remote code execution inside the sandbox when processing a crafted HTML page. Affected product: Google Chrome. Vulnerable version range: prior to 149.0.7827.53; remediation guidance in the description suggests updat...

CVE-2026-10955

Summary (CVE-2026-10955): Type Confusion in ANGLE affecting Google Chrome on Windows, prior to version 149.0.7827.53. The vulnerability could allow a remote attacker to perform out-of-bounds memory access via a crafted HTML page. The issue is documented across multiple sources (NVD, EUVD, CIRCL, ...

CVE-2026-11111

CVE-2026-11111 is an out-of-bounds read in ANGLE affecting Google Chrome (Chromium-based) prior to 149.0.7827.53. The vulnerability enables a remote attacker to perform an out-of-bounds memory read via a crafted HTML page. Several connected sources confirm this as a Chromium/ANGLE issue and indic...

CVE-2026-11120

Chromium-based Google Chrome Enterprise Reporting is affected by CVE-2026-11120: insufficient validation of untrusted input in Enterprise Reporting could allow a remote attacker who has compromised the renderer process to perform a sandbox escape via a crafted HTML page. Affected versions are Chr...

CVE-2026-12439

CVE-2026-12439 describes a use-after-free in Google Chrome’s Digital Credentials handling, leading to potential heap corruption when processing a crafted HTML page. Affected product: Chrome (Chromium-based) before version 149.0.7827.155. Root cause: use-after-free in Digital Credentials component...

CVE-2026-13791

Summary of findings (CVE-2026-13791): Google Chrome prior to version 150.0.7871.47 suffers from insufficient validation of untrusted input in Downloads, which can enable arbitrary code execution via a crafted Chrome Extension when a user installs a malicious extension. The vulnerability affects t...

CVE-2026-13976

CVE-2026-13976 : In Google Chrome, insufficient data validation in Storage prior to 150.0.7871.47 could allow a remote attacker who has compromised a renderer process to potentially perform a sandbox escape via a crafted HTML page. This vulnerability has a Medium severity (CVSS 3.1: AV:N/AC:H/PR:...

CVE-2026-13977

CVE-2026-13977 describes an insecure implementation in HTMLParser in Google Chrome/Chromium, enabling UXSS by injecting scripts/HTML through a crafted HTML page. The vulnerability affects Chrome/Chromium builds prior to 150.0.7871.47, with a CVSS v3.1 base score of 5.4 (Medium). The provided docu...

CVE-2026-14011

The affected component is Google Chrome (SurfaceCapture) with an out-of-bounds read vulnerability in versions prior to 150.0.7871.47. The issue could allow a remote attacker to read memory via a crafted HTML page. Severity is described as Medium by Chromium, with CVSS-driven impact: Confidentiali...

CVE-2026-14055

CVE-2026-14055 affects Google Chrome on Windows before 150.0.7871.47, where insufficient validation of untrusted input in Device Trust could allow a remote attacker who compromised the renderer process to potentially escape the sandbox via a crafted HTML page. The vulnerability is addressed by th...

CVE-2026-14089

CVE-2026-14089 affects Google Chrome’s PopupBlocker: insufficient validation of untrusted input before version 150.0.7871.47 enables a remote attacker who already compromised the renderer process to perform UI spoofing via a crafted HTML page. The CVE’s metrics indicate a CVSS v3.1 base score of ...

CVE-2026-14400

Summary of CVE-2026-14400 : Google Chrome’s ANGLE component contains an out-of-bounds write in versions prior to 150.0.7871.46. If a renderer process is compromised, an attacker could potentially perform a sandbox escape through a crafted HTML page. This is a remote, high-severity vulnerability (...

CVE-2026-14430

CVE-2026-14430 describes an integer overflow in V8 (Chromium/Google Chrome) prior to version 150.0.7871.46 , allowing a remote attacker to execute arbitrary code inside a sandbox via a crafted HTML page. Affected component: V8 engine within Chrome. Impact per documents: remote code execution with...

CVE-2026-17661

CVE-2026-17661 is a use-after-free vulnerability in Chrome’s Loader component that could allow a remote attacker to execute arbitrary code inside a sandbox via a crafted HTML page. The issue affects Chrome prior to version 151.0.7922.72, with a high security impact (CVSS v3.1: 8.8, Network, User ...

CVE-2026-17740

CVE-2026-17740 affects Google Chrome via an uninitialized use in ANGLE, before version 151.0.7922.72. A crafted HTML page could allow a remote attacker to leak cross-origin data. The Chromium-based severity is listed as Medium. Affected software is Chrome (ANGLE component); root cause is uninitia...

CVE-2026-17783

CVE-2026-17783 concerns Google Chrome: an inappropriate implementation in the Loader prior to 151.0.7922.72 can allow a remote attacker to leak cross-origin data via a crafted HTML page. The issue is described as a Chromium security vulnerability with a Medium impact. Affected component is the Ch...

CVE-2026-17788

CVE-2026-17788 : In Google Chrome, an inappropriate implementation in the Blink rendering engine allows a remote attacker to leak cross-origin data through a crafted HTML page. Affected versions are those before 151.0.7922.72. The Chromium advisory lists this as a Medium-severity issue with poten...

CVE-2026-17842

CVE-2026-17842 affects Google Chrome on iOS (Chrome for iOS) prior to version 151.0.7922.72. The issue is an inappropriate implementation that allows a remote attacker, who convinces a user to perform specific UI gestures, to bypass the same-origin policy via a crafted HTML page. Impact is limite...