CVE-2026-17783

CVE-2026-17783 concerns Google Chrome: an inappropriate implementation in the Loader prior to 151.0.7922.72 can allow a remote attacker to leak cross-origin data via a crafted HTML page. The issue is described as a Chromium security vulnerability with a Medium impact. Affected component is the Ch...

CVE-2026-17788

CVE-2026-17788 : In Google Chrome, an inappropriate implementation in the Blink rendering engine allows a remote attacker to leak cross-origin data through a crafted HTML page. Affected versions are those before 151.0.7922.72. The Chromium advisory lists this as a Medium-severity issue with poten...

CVE-2026-17842

CVE-2026-17842 affects Google Chrome on iOS (Chrome for iOS) prior to version 151.0.7922.72. The issue is an inappropriate implementation that allows a remote attacker, who convinces a user to perform specific UI gestures, to bypass the same-origin policy via a crafted HTML page. Impact is limite...

CVE-2026-17882

CVE-2026-17882 is a policy-bypass flaw in Chrome Extensions. Affects the Extensions component of Google Chrome before 151.0.7922.72; a user tricked into installing a malicious extension could bypass site isolation via a crafted Chrome Extension. Upstream chromium issue 523637452 is cited. Accordi...

CVE-2026-17898

CVE-2026-17898 describes a Use-after-free in Chrome’s DevTools prior to 151.0.7922.72. An attacker could convince a user to install a malicious Chrome extension to execute arbitrary code inside a sandbox. The description across NVD, Debian OSV, CVE lists, and CIRCL/Nessus synopses mirrors this sa...

CVE-2026-18001

Summary: CVE-2026-18001 reports an inappropriate implementation in Chrome’s WebGL that could leak potentially sensitive information from process memory through a crafted HTML page. Affected software/area: Google Chrome (WebGL path) prior to version 151.0.7922.72. Root cause (as described): Inappr...

CVE-2026-18015

CVE-2026-18015 affects Google Chrome on macOS prior to 151.0.7922.72, due to an inappropriate Tint implementation. A remote attacker could potentially perform a sandbox escape via a crafted HTML page. Severity indicators in the sources vary (Chromium notes Low severity; CVSS suggests high impact)...

CVE-2026-3935

CVE-2026-3935 affects Google Chrome/Chromium on multiple platforms due to an incorrect security UI in WebAppInstalls, enabling UI spoofing via a crafted HTML page. Affected versions before 146.0.7680.71 (Chrome/Chromium upstream) are susceptible; fixes are delivered in Chromium 146.0.7680.71 and ...

CVE-2026-5872

CVE-2026-5872 is a Use-After-Free in Blink in Google Chrome leading to arbitrary code execution inside the sandbox via a crafted HTML page. The Chrome 147.0.7727.55 stable update includes fixes for this issue, and Debian security advisories list Chromium/Chromium-based fixes in versions 147.0.772...

CVE-2026-79122

CVE-2026-79122 is an information leak in the SignIn component of Google Chrome prior to 152.0.7977.65 . A remote attacker can obtain sensitive information via crafted network traffic , without requiring user interaction or prior authentication. The CVSS 3.1 score is 5.9 (Medium) with high impact ...

CVE-2026-7941

CVE-2026-7941 affects Google Chrome on Android (mobile) prior to 148.0.7778.96. The root cause is insufficient validation of untrusted input in the mobile Chrome, enabling UXSS: a local attacker could inject arbitrary scripts or HTML via a crafted Chrome Extension. Remediation is to update to ver...

CVE-2026-7979

CVE-2026-7979 concerns Google Chrome: an inappropriate implementation in Media allows a remote attacker to leak cross-origin data via a crafted HTML page, before Chrome 148.0.7778.96. Connected sources confirm the vulnerability in Chrome’s Media handling and list the fixed version 148.0.7778.96 (...

CVE-2026-8009

CVE-2026-8009: Google Chrome prior to 148.0.7778.96 has an Inappropriate implementation in Cast that lets a remote attacker who compromised the renderer bypass navigation restrictions via a crafted HTML page. Affected software is Chrome versions before 148.0.7778.96; the root cause is an incorrec...

CVE-2026-82072

CVE-2026-82072 is an out-of-bounds read in the V8 JavaScript engine of Google Chrome , affecting versions prior to 151.0.7922.72 . A remote attacker can exploit it via a crafted HTML page to execute arbitrary code inside the Chrome sandbox . Chromium rates the severity as Medium , while CVSS 3.1 ...

CVE-2026-8524

Technical details (affected products, vulnerable components, root cause, or exploitation specifics) are not provided in the supplied documents. Please monitor official advisories for updates.

CVE-2026-87651

CVE-2026-87651 is an incorrect authorization vulnerability in the Paint component of Google Chrome , affecting versions prior to 153.0.8010.36 . A remote attacker could obtain cross-origin data by persuading a user to open a crafted HTML page. The CVSS 3.1 score is 4.3 (Medium) with a vector of A...

CVE-2026-9893

Summary: CVE-2026-9893 is a use-after-free in the Skia component of Google Chrome. The issue allowed a remote attacker who had compromised the renderer process to potentially escape the Chrome sandbox via a crafted HTML page. This is described in multiple sources as a high-severity, cross-origin ...

CVE-2026-9937

CVE-2026-9937 concerns a use-after-free in the UI of Google Chrome on Windows, prior to build 148.0.7778.216. The issue arises when a compromised renderer process can trigger a sandbox escape via a crafted HTML page. Affected: Chromium-based Chrome UI components; root cause described as a UI use-...

CVE-2026-9944

CVE-2026-9944 : Uninitialized use in ANGLE within Google Chrome/Chromium allows a remote attacker who has compromised the renderer process to leak cross-origin data via a crafted HTML page. Affected: ANGLE in Chrome/Chromium prior to 148.0.7778.216. Impact: data leakage; no other impacts confirme...

CVE-2026-9969

CVE-2026-9969 affects the ANGLE component in Google Chrome (Chromium-based). Description: Insufficient validation of untrusted input in ANGLE allows remote code execution via a crafted HTML page, with Chromium severity high. The public records indicate the issue exists in Chrome builds prior to 1...

CVE-2026-9983

Moderate confidence CVE-2026-9983 affects Google Chrome’s Skia component. A type confusion flaw in Skia prior to Chrome 148.0.7778.216 could allow a remote attacker to run arbitrary code inside the browser sandbox via a crafted HTML page. From the connected sources, the issue is described as a ty...

CVE-2008-6997

CVE-2008-6997 applies to Google Chrome 0.2.149.27, where a user‑assisted remote denial of service is triggered by an IMG tag with a long src attribute; the crash occurs when the victim performs an “Inspect Element” action. The connected documents corroborate the vendor/product and the exact trigg...

CVE-2009-2578

CVE-2009-2578 affects Google Chrome 2.x up to 2.0.172, with a denial-of-service condition caused by passing a long Unicode string to the write method. Connected data confirms the CVE mapping to a Google Chrome DoS vulnerability; no further exploitation details or fixes are provided in the supplie...

CVE-2009-2974

CVE-2009-2974 (Google Chrome DoS) Affected software: Google Chrome versions 1.0.154.65, 1.0.154.48, and earlier. Vulnerability: Remote attackers can trigger denial of service by manipulating a chromehtml: URI value assigned to document.location, or by a sequence of function calls that set a chrom...

CVE-2009-3263

The CVE-2009-3263 entry concerns Google Chrome 2.x–3.x (before 3.0.195.21) with a cross-site scripting (XSS) vulnerability in the built-in RSS/Atom feed reader. The root cause is the rendering of application/rss+xml content as XML active content, enabling remote attackers to inject arbitrary Java...

CVE-2010-3115

MiracleLinux AXSA:2011-34 references CVE-2010-3115: Google Chrome

CVE-2011-1188

CVE-2011-1188 affects Google Chrome prior to 10.0.648.127. The vulnerability arises from improper handling of counter nodes, enabling a remote attacker to cause memory corruption and a denial-of-service (and potentially other impact) via unknown vectors. The issue is mitigated by updating Chrome ...

CVE-2011-1190

CVE-2011-1190 involves the Web Workers cross-origin issue in Chrome before 10.0.648.127. The vulnerability allowed remote attackers to bypass the Same Origin Policy via an error-message leak, potentially exposing partial data to other origins. Affected software: Google Chrome/Chromium WebKit impl...

CVE-2011-1292

CVE-2011-1292 is a use-after-free vulnerability in Chrome’s frame-loader that allows remote denial of service and possibly other impact via unknown vectors, affecting Google Chrome (and Chromium) prior to 10.0.648.204. Connected advisories confirm multiple related issues (CVE-2011-1293, -1440, -1...

CVE-2011-1413

Google Chrome on Linux is affected by CVE-2011-1413: an unspecified flaw in the X server allows remote attackers to cause a denial of service via long X messages. Affected software is Chrome prior to 10.0.648.127 on Linux; root cause and mitigation details are not provided in the connected docume...

CVE-2011-2876

Google Chrome before 14.0.835.202 is affected by CVE-2011-2876 (use-after-free in text line box) that can cause denial of service and possibly other impact. Affected versions include the 14.x release line prior to 14.0.835.202; OpenVAS/NVD entries describe multiple related CVEs in the Oct 2011 Ch...

CVE-2011-3024

CVE-2011-3024 affects Google Chrome (Chromium-based) with vulnerable versions before 17.0.963.56. The issue allows remote attackers to trigger a denial-of-service through an empty X.509 certificate, causing the application to crash. Underlying cause and exact exploit vector are not detailed in th...

CVE-2011-3035

CVE-2011-3035 concerns a use-after-free in SVG use handling in Google Chrome up to version before 17.0.963.65. The vulnerability could allow a remote attacker to cause a denial of service or potentially other impact via SVG use element vectors. Public references in the provided documents corrobor...

CVE-2011-3064

CVE-2011-3064 is a use-after-free in Google Chrome before 18.0.1025.142 related to SVG clipping. This could allow a remote attacker to cause a denial of service and possibly other unspecified impacts by abusing SVG clipping handling. Affected software: Google Chrome (pre-18.0.1025.142). Root caus...

CVE-2011-3071

CVE-2011-3071 : In Google Chrome, a use-after-free in the HTMLMediaElement implementation (pre-18.0.1025.151) may allow a remote attacker to cause a denial of service or possibly other impact via unknown vectors. Affected product: Google Chrome. Root cause: use-after-free in HTMLMediaElement. Imp...

CVE-2011-3110

CVE-2011-3110 affects Google Chrome prior to 19.0.1084.52, where the PDF functionality is vulnerable to out-of-bounds write operations. This can lead to denial of service or other unspecified impact. Affected component: Chrome PDF handling. Root cause: out-of-bounds write in PDF functions. Mitiga...

CVE-2011-3234

CVE-2011-3234 affects Google Chrome prior to 14.0.835.163. The issue arises from how Chrome handles boxes, allowing remote attackers to trigger an out-of-bounds read and potentially cause a denial of service. The description notes remote exploitation via unspecified vectors. No vendor/version-spe...

CVE-2011-3897

Technical details for CVE-2011-3897 are not present in the provided documents. No specific affected product/version or impact is given here. Monitor for updates.

CVE-2011-3898

CVE-2011-3898 affects Google Chrome (Chromium) prior to 15.0.874.120 when using JRE 7, where applet execution proceeds without user confirmation. Public sources (Gentoo GLSA 201111-05) call for upgrading Chromium to >=15.0.874.121 and V8 to >=3.5.10.24; OpenVAS/Gentoo entries corroborate mu...

CVE-2011-3971

CVE-2011-3971 describes a use-after-free in Google Chrome prior to version 17.0.963.46. The vulnerability, triggered by mousemove-related vectors, allows user-assisted remote attackers to cause a denial of service and possibly other impacts. Affected software is Google Chrome before 17.0.963.46; ...

CVE-2012-2876

CVE-2012-2876: A buffer overflow in Chrome/SSE2 optimization allowed remote DoS via unknown vectors. Affected product: Chromium/Chrome (Chrome before 22.0.1229.79). Mitigation: upgrade to a fixed Chromium version; OpenSUSE Gentoo advisories reference upgrading to Chromium 22.0.1229.94 or newer (a...

CVE-2012-2895

CVE-2012-2895 affects Google Chrome’s PDF functionality. The vulnerability arises from out-of-bounds write operations triggered via crafted vectors, enabling remote denial of service and possibly other impact. Affected software: Google Chrome prior to version 22.0.1229.79. Exploitation vectors ar...

CVE-2013-0916

CVE-2013-0916 is a use-after-free vulnerability in Chrome’s Web Audio implementation up to version 26.0.1410.43. The description states a remote attacker could cause a denial of service or possibly other unspecified impact via unknown vectors. The available documents do not provide concrete explo...

CVE-2013-2268

CVE-2013-2268 describes an unspecified vulnerability in the MathML implementation of WebKit used by Google Chrome. The affected product is Chrome on Windows and Linux up to version 25.0.1364.97, and on macOS up to 25.0.1364.99, with an unknown impact and remote attack vectors. The NVD entry lists...

CVE-2013-2848

CVE-2013-2848 refers to a vulnerability in the XSS Auditor component of Chromium/Google Chrome before 27.0.1453.93, which could allow remote attackers to obtain sensitive information via unspecified vectors. Affected product/versions: Chromium/Chrome up to 27.0.1453.93 (Chromium before 27.0.1453....

CVE-2013-2873

CVE-2013-2873 is a use-after-free vulnerability in Chrome/Chromium related to resource loading. Affected product: Google Chrome before 28.0.1500.71 (and Chromium components referenced in advisories). Impact per sources: potential denial of service and possibly other unspecified effects via exploi...

CVE-2013-6655

CVE-2013-6655 is a use-after-free in Blink used by Google Chrome prior to 33.0.1750.117, related to overflowchanged DOM events during JavaScript–layout interactions. The vulnerability allows remote denial of service or possibly other unspecified impact. Public advisories/updates confirm fixes in ...

CVE-2014-1703

Chromium/WebKit component: a use-after-free in WebSocketDispatcherHost::SendOrDrop within the Web Sockets implementation could allow sandbox bypass. Affects Chrome builds prior to 33.0.1750.149; multiple advisories cite CVE-2014-1703. Public fixes available in later Chrome/Chromium updates (e.g.,...

CVE-2014-1720

CVE-2014-1720 describes a use-after-free in the Blink WebKit implementation (HTMLBodyElement::insertedInto) used by Google Chrome up to 34.0.1847.116. Exploitation could cause a denial of service or other impact via attribute-related vectors. Affected software is Chrome/Blink (pre-34.0.1847.116)....

CVE-2014-3179

CVE-2014-3179 refers to multiple vulnerabilities in the Chromium/Chrome stack. The connected records enumerate a broad set of issues across Chromium/Chrome components (Blink, WebKit DOM, V8, IPC handling, and related render/graphics paths) with several CVEs listed alongside CVE-2014-3179, indicat...