CVE-2026-9984

CVE-2026-9984 affects Google Chrome on Windows with a use-after-free in the UI of the Chromium-based browser, allowing remote code execution via a crafted HTML page. Root cause: use-after-free in the UI component. Affected products/versions: Chrome prior to 148.0.7778.216. Impact: arbitrary code ...

CVE-2008-4724

CVE-2008-4724 affects Google Chrome 0.2.149.30 and involves multiple XSS vulnerabilities triggered by ftp:// URLs delivering HTML content (within a JPG, PDF, or TXT file). The OpenVAS/NVD entries confirm the XSS vector via FTP handling; Exploit-DB also documents a remote exploit for Windows. The ...

CVE-2009-3934

The CVE-2009-3934 issue affects Google Chrome’s WebFrameLoaderClient (WebFrameLoaderClient::dispatchDidChangeLocationWithinPage) in src/webkit/glue/webframeloaderclient_impl.cc, where the code fails to handle page-local redirects correctly. This allows user-assisted remote attackers to cause a de...

CVE-2010-0658

CVE-2010-0658 covers multiple integer overflows in Skia used by Google Chrome prior to version 4.0.249.78, enabling remote code execution in the Chrome sandbox or a denial of service via CANVAS-related vectors. Affected: Skia canvas handling within Chrome; root cause: integer overflows leading to...

CVE-2010-1229

CVE-2010-1229 affects Google Chrome prior to 4.1.249.1036. Connected sources show multiple vulnerabilities in Chrome’s sandbox and related components (e.g., race conditions and pointer handling issues; memory errors; other listed issues) that were present in the 4.1.249.1036 timeframe. The core d...

CVE-2010-2900

CVE-2010-2900 concerns Google Chrome prior to 5.0.375.125, which does not properly handle a large canvas. The connected records identify Chrome as the affected product and list CVE-2010-2900 among WebKit/Chrome vulnerabilities in 2010-2011 public advisories (e.g., USN-1195-1, OpenVAS entries). Th...

CVE-2010-3248

Google Chrome prior to version 6.0.472.53 is vulnerable because it does not properly restrict copying to the clipboard, with unspecified impact and attack vectors as per CVE-2010-3248. The issue is documented in multiple sources referencing Chrome webkit/vulnerability entries (including OpenVAS a...

CVE-2011-1059

CVE-2011-1059 concerns a use-after-free in WebKit/WebCore (HistoryController handling of provisional items) that affects Google Chrome builds before 11.0.672.2 and related products. The vulnerability allows user-assisted remote attackers to trigger a denial of service via a crash or potentially o...

CVE-2011-1107

CVE-2011-1107 is a WebKit/Web browser vulnerability where a malicious site could cause the address bar to display a spoofed URL. It is documented as affecting WebKit components used by Safari on iOS and Mac OS X, with the issue described as a URL spoofing flaw in the handling of URLs (DOM/history...

CVE-2011-1301

CVE-2011-1301 affects Google Chrome’s GPU process. The vulnerability is a use-after-free in the GPU process that allowed remote code execution via unknown vectors, on Chrome versions before 10.0.648.205. Affected platforms include Windows and Linux (as per OpenVAS entries), with multiple code-exe...

CVE-2011-1805

CVE-2011-1805 affects Google Chrome before version 11.0.0.0, where a bad cast in CSS could allow a remote attacker to trigger heap corruption via a crafted HTML page. This is a remote, network-exploitable vulnerability with high impact (confidentiality/integrity/availability). Remediation: upgrad...

CVE-2011-2349

CVE-2011-2349 is a use-after-free vulnerability in Google Chrome prior to version 12.0.742.112 . The issue occurs in text selection handling and could allow a remote attacker to cause a denial of service or potentially other unspecified impacts. The vulnerability is exploitable over the network w...

CVE-2011-2864

CVE-2011-2864 affects Google Chrome prior to 14.0.835.163; improper handling of Tibetan characters enables a remote denial-of-service via an out-of-bounds read (vectors not specified). A fix is provided in the Chrome stable update 14.0.835.163.

CVE-2011-3039

CVE-2011-3039 affects Google Chrome prior to 17.0.963.65, with a use-after-free in quote handling that can lead to denial of service and potentially other impact. The vulnerability is triggered via quote handling vectors in the browser’s rendering/JavaScript context. Public references in connecte...

CVE-2011-3058

Google Chrome pre-18.0.1025.142 has a vulnerability where improper handling of EUC-JP encoding can permit remote cross-site scripting (XSS) via unspecified vectors. The description specifies the affected version range and the exploit could be triggered remotely through EUC-JP-encoded inputs, lead...

CVE-2011-3108

CVE-2011-3108 is a use-after-free vulnerability in Chromium/Chrome linked to browser cache, enabling remote code execution. Affected: Chrome before 19.0.1084.52. Exploitation context: network vectors with no user interaction required (per CVSS). Remediation: Gentoo GLSA 201205-04 recommends upgra...

CVE-2011-3878

CVE-2011-3878 : A race condition in Google Chrome prior to 15.0.874.102 allows remote attackers to cause a denial of service or possibly other impact via vectors related to worker process initialization. The NVD entry lists CVSS v2 base score 6.8 (medium) with network attack vector and partial im...

CVE-2012-2818

CVE-2012-2818 is a use-after-free in Google Chrome prior to 20.0.1132.43, triggered by document layout involving CSS counters. Exploitation could cause a denial of service or other unspecified impact. The connected documents confirm this CVE is listed among Chrome/OpenSUSE patch advisories, but d...

CVE-2012-2823

Chromium/Google Chrome vulnerability CVE-2012-2823 is a use-after-free in SVG resource handling in pre-20.0.1132.43 builds. It could cause a remote DoS or other impact via SVG-related vectors. Connected docs confirm Chromium-related CVEs and advise upgrading to patched releases; no exact fixed ve...

CVE-2012-2843

CVE-2012-2843 is a use-after-free vulnerability in Google Chrome prior to 20.0.1132.57. It allows remote attackers to cause a denial of service or potentially other impact via vectors related to layout height tracking. Affected software: Google Chrome earlier than 20.0.1132.57. Root cause: use-af...

CVE-2012-2868

CVE-2012-2868 concerns Chromium/Google Chrome : a race condition between worker processes and an XMLHttpRequest (XHR) can lead to a denial of service and possibly other impact. Affected versions are before the fixed release, with remediation described as updating to a fixed Chromium version (21.0...

CVE-2012-5116

CVE-2012-5116 affects Google Chrome prior to 23.0.1271.64 via a use-after-free in SVG filters handling, enabling remote Denial of Service or other impact. Evidence appears in OpenVAS/GLSA entries referencing Chrome/Chromium vulnerabilities and the same CVE family. Remediation: upgrade Chrome to 2...

CVE-2012-5127

CVE-2012-5127 describes an integer overflow in the WebP handling used by Google Chrome (and Chromium components) that can be triggered by a crafted WebP image. The vulnerability can lead to a remote denial of service via an out-of-bounds read, with the initial description also noting the potentia...

CVE-2012-5156

Google Chrome, before 24.0.1312.52, contains a use-after-free vulnerability in PDF field handling that could allow a remote attacker to cause a denial of service (and possibly other impact). Exploitation is via vectors involving PDF fields. Remediation is to upgrade Chrome to 24.0.1312.52 or newe...

CVE-2013-0896

CVE-2013-0896 affects Google Chrome prior to 25.0.1364.97 (Windows/Linux) and 25.0.1364.99 (macOS). The issue is a memory management problem during plug-in message handling, enabling a remote attacker to cause a denial of service or other impact via unknown vectors. The connected documents corrob...

CVE-2013-0923

CVE-2013-0923 is a memory safety issue in Google Chrome’s USB Apps API. The vulnerability is described as a memory corruption (remote) condition exploitable via unspecified vectors in Chrome builds prior to 26.0.1410.43. Connected sources corroborate that this CVE is part of a broader set of Chro...

CVE-2013-2840

CVE-2013-2840 is a use-after-free vulnerability in the media loader of Chromium/Google Chrome before version 27.0.1453.93, allowing remote attackers to cause a denial of service or potentially other impact via unknown vectors. The issue is part of a broader set of Chrome/Chromium memory-safety vu...

CVE-2013-2879

Chromium/Chrome vulnerability CVE-2013-2879: Chrome before 28.0.1500.71 fails to correctly determine when a renderer process is trusted for sign-in and subsequent sync, enabling phishing via a crafted site. This affects Chrome/Chromium up to the 28.x branch and is described in multiple advisories...

CVE-2013-2923

Concrete details found: Chromium/Google Chrome vulnerable in the 30.x line (notably around 30.0.1599.66) with a set of CVEs including CVE-2013-2906 through CVE-2013-2928 (multiple memory corruption, use-after-free, out-of-bounds reads, and address-bar spoofing issues). Documented fixes appear in ...

CVE-2014-1714

Chromium/Google Chrome CVE-2014-1714 affects Windows, macOS, and Linux. The flaw is in ScopedClipboardWriter::WritePickledData where a clipboard format value is not verified, enabling a remote attacker to cause denial of service or other impact via clipboard-related vectors. Affected versions are...

CVE-2015-1361

CVE-2015-1361 affects Blink/ImageFrame.h in Google Chrome’s rendering stack, where an uninitialized variable is used by Skia’s SkBitmap::setAlphaType. This can allow a remote attacker to trigger a denial of service via a crafted HTML document. The vulnerability is tied to Chrome versions before 4...

CVE-2021-4322

Google Chrome/Chromium DevTools contains a Use-After-Free in DevTools vulnerability (CVE-2021-4322) affecting Chrome versions prior to 91.0.4472.77. Exploitation would allow arbitrary code execution when a user installs a crafted malicious extension. Remediation: update Chrome to 91.0.4472.77 or ...

CVE-2026-0905

CVE-2026-0905: Insufficient policy enforcement in the Network component of Google Chrome/Chromium before 144.0.7559.59 could let an attacker with access to a network log file potentially obtain sensitive information. Affected software includes Chrome/Chromium builds; CVSS 3.1 metrics indicate Net...

CVE-2026-10004

Google Chrome/Chromium Passwords component vulnerability: insufficient validation of untrusted input before version 148.0.7778.216 allows UI spoofing via a crafted HTML page. Impact is UI spoofing; no exploit details are provided in the documents. Remediation: update to Chrome 148.0.7778.216 or l...

CVE-2026-10019

The CVE-2026-10019 entry documents an integer overflow in ANGLE used by Google Chrome. Affected software: Google Chrome (ANGLE integration). Vulnerable component/file: ANGLE; root cause is an integer overflow leading to potential cross-origin data leakage when parsing/handling a crafted HTML page...

CVE-2026-10895

CVE-2026-10895 is a Use-After-Free in Ozone (Chrome) prior to 149.0.7827.53, allowing a remote attacker to execute arbitrary code via a crafted HTML page. Affected product: Google Chrome (Ozone component). Root cause: use-after-free in Ozone path. Impact: remote code execution with high/critical ...

CVE-2026-10918

CVE-2026-10918 describes a use-after-free in Viz for Google Chrome that could let a renderer-compromised attacker perform a sandbox escape via a crafted HTML page before Chrome 149.0.7827.53. Affected product/version: Google Chrome (Viz), prior to 149.0.7827.53. Root cause: use-after-free in Viz ...

CVE-2026-10927

The vulnerability CVE-2026-10927 affects Google Chrome’s Dawn component in the renderer process, with an out-of-bounds read that could enable a sandbox escape via a crafted HTML page. The issue is tied to Chrome versions prior to 149.0.7827.53. An attacker who already has renderer access could po...

CVE-2026-10971

CVE-2026-10971 : In Google Chrome on Windows, printing input is insufficiently validated, enabling a remote attacker who compromised the renderer process to escape the sandbox via a crafted HTML page. Affected: Windows builds before 149.0.7827.53. Remediation: update to 149.0.7827.53 or later. Re...

CVE-2026-10986

This CVE affects Google Chrome’s Media component, with an integer overflow in the Media path prior to version 149.0.7827.53. The underlying root cause is an integer overflow that could allow a remote attacker to execute arbitrary code inside Chromium’s sandbox when processing a malicious file. Th...

CVE-2026-11038

CVE-2026-11038 affects Google Chrome’s Subresource Integrity policy enforcement. The vulnerability allows a remote attacker to bypass content security policy via malicious network traffic in Chrome versions prior to 149.0.7827.53. Affected component is Subresource Integrity enforcement within Chr...

CVE-2026-11065

The CVE-2026-11065 issue is a use-after-free in ANGLE used by Google Chrome prior to 149.0.7827.53. If a renderer process is already compromised, an attacker could potentially escape the sandbox via a crafted HTML page. The impact is described as high/critical in overall runtime risk due to sandb...

CVE-2026-11277

CVE-2026-11277 affects Chrome for iOS (Google Chrome on iOS) prior to 149.0.7827.53. The issue is insufficient policy enforcement that could allow a remote attacker to bypass discretionary access control via a crafted HTML page. The Chromium security severity is rated Low, with the base CVSS v3.1...

CVE-2026-11652

CVE-2026-11652 is a use-after-free in Chrome/Chromium Extensions before 149.0.7827.103. If a renderer process is compromised, a remote attacker could potentially escape the sandbox via a crafted HTML page, as described in multiple sources. Affected product: Google Chrome/Chromium Extensions; vuln...

CVE-2026-11671

Summary: CVE-2026-11671 is a use-after-free in Chrome’s Navigation path that could allow a remote attacker to escape the browser sandbox via a crafted HTML page, affecting Chrome builds prior to 149.0.7827.103. Impact: High (sandbox escape possibility; remote code execution potential) per Chromiu...

CVE-2026-11673

CVE-2026-11673 (Google Chrome/Chromium) Use-after-free in the InterestGroups component allows a remote attacker to execute arbitrary code inside the browser sandbox via a crafted HTML page. Affected product/version: Google Chrome (Chromium) prior to 149.0.7827.103. Root cause: use-after-free in I...

CVE-2026-11696

Google Chrome on Windows is affected by CVE-2026-11696 due to an uninitialized use in the Video component prior to 149.0.7827.103. A remote attacker who has already gained renderer process access could read potentially sensitive data from process memory via a crafted HTML page. Impact: disclosure...

CVE-2026-12024

CVE-2026-12024 affects Google Chrome DevTools with insufficient policy enforcement, allowing a remote attacker to bypass the same-origin policy via a crafted HTML page. The vulnerability is associated with Chrome prior to 149.0.7827.115. According to the connected sources, this is mitigated by up...

CVE-2026-12030

CVE-2026-12030: Out-of-bounds write in Chrome’s GPU code on Android (pre-149.0.7827.115) potentially enables a sandbox escape when a renderer process is compromised via a crafted HTML page. Affected: Google Chrome for Android; impact: high. Exploitation requires renderer access; remediation: Goog...

CVE-2026-13829

CVE-2026-13829 describes insufficient validation of untrusted input in the Settings module of Google Chrome on Windows, allowing a remote attacker who has compromised a renderer process to potentially escape the sandbox via a crafted HTML page. Affected software/version: Google Chrome on Windows ...