CVE-2026-13978

CVE-2026-13978 affects Google Chrome; Insufficient policy enforcement in PageInfo allows UI spoofing via a crafted HTML page in versions prior to 150.0.7871.47. The issue has a CVSS 3.1 base score of 4.3 (Medium) with network attack vector, no confidentiality or availability impact, and user inte...

CVE-2026-14077

The CVE-2026-14077 entry describes an issue in Google Chrome on macOS (before version 150.0.7871.47) where an inappropriate implementation in the Select control allows a remote attacker to spoof the Omnibox (URL bar) contents via a crafted HTML page. Affected component: Select in the browser; roo...

CVE-2026-14383

The CVE-2026-14383 entry concerns Google Chrome’s V8 engine. Affected component: V8 in Chrome prior to version 150.0.7871.46. Description from multiple sources indicates an inappropriate implementation allowed remote attackers to execute arbitrary code inside the browser sandbox via a crafted HTM...

CVE-2026-14402

CVE-2026-14402 describes an uninitialized use in ANGLE within Google Chrome on Windows, prior to version 150.0.7871.46. The issue allows a remote attacker to potentially read sensitive data from a process's memory via a crafted HTML page. Affected component is ANGLE in Chrome’s Windows build; und...

CVE-2026-14416

CVE-2026-14416 affects Dawn in Google Chrome (Chromium-based) with an out-of-bounds read that could allow a remote attacker to potentially escape the sandbox via a crafted HTML page. The description specifies the vulnerable state as Chrome prior to version 150.0.7871.46. No exploitation status is...

CVE-2026-17668

CVE-2026-17668 is an Uninitialized Use in ANGLE affecting Google Chrome (Chromium) prior to 151.0.7922.72. The issue could allow a remote attacker to leak cross-origin data via a crafted HTML page. Chrome’s July 2026 stable-channel update (151.0.7922.71/72) includes a security fix for this and re...

CVE-2026-17688

CVE-2026-17688: In Google Chrome, a Use-After-Free in the Input component was triggered when a renderer process was compromised, potentially enabling a sandbox escape via a crafted HTML page. The description indicates this affects Chrome versions prior to 151.0.7922.72 and is rated High in impact...

CVE-2026-17703

This CVE affects Google Chrome on iOS (Chrome for iOS) prior to version 151.0.7922.72. The vulnerability is caused by insufficient policy enforcement, allowing a remote attacker to bypass navigation restrictions via a crafted HTML page. The impact is a navigation policy bypass with high severity ...

CVE-2026-17744

CVE-2026-17744 affects Google Chrome on Linux and concerns an inappropriate implementation in the File Input path of Chrome/Chromium. The vulnerability could enable a sandbox escape through a crafted HTML page, with the root cause described as improper handling in the File Input component. Affect...

CVE-2026-17752

CVE-2026-17752 affects Google Chrome on macOS prior to 151.0.7922.72. The issue is a use-after-free in the Views component that can lead to heap corruption via a crafted HTML page, enabling remote exploitation. The public descriptions consistently state heap-related impact with high severity; the...

CVE-2026-17770

The CVE-2026-17770 entry describes an out-of-bounds read in Media in Google Chrome on macOS, allowing a remote attacker who has already compromised the renderer process to potentially escape the sandbox via a crafted HTML page. The issue is tied to Chrome versions before 151.0.7922.72, with the f...

CVE-2026-17790

CVE-2026-17790 : An uninitialized-use flaw in ANGLE within the Chromium-based Google Chrome on Windows allows a crafted HTML page to recover potentially sensitive information from process memory. Affected: ANGLE component of Chrome before version 151.0.7922.72. Upstream reference notes Chromium i...

CVE-2026-17896

CVE-2026-17896 is a use-after-free in Chrome/Chromium DevTools prior to 151.0.7922.72, enabling a remote attacker to execute arbitrary code within the sandbox via a crafted HTML page. Upstream reference: chromium issue 525331547. Affected advisories reference DevTools as the vulnerable component....

CVE-2026-17929

CVE-2026-17929 involves the DevTools component of Chromium-based Google Chrome. The flaw stems from insufficient validation of untrusted input, allowing a remote attacker to bypass navigation restrictions via a malicious file. Affected software is Google Chrome before version 151.0.7922.72. Impac...

CVE-2026-17940

CVE-2026-17940 details (mode C): Insufficient validation of untrusted input in Chromium-based Google Chrome’s Picture-in-Picture on Android allows a remote attacker who compromises the renderer process to potentially escape the sandbox via a crafted HTML page. Affected software: Google Chrome on ...

CVE-2026-17946

CVE-2026-17946 affects Google Chrome components (Dawn) in Chromium before 151.0.7922.72. The issue is an uninitialized use in Dawn that could allow a remote attacker, who already compromised the renderer process, to read potentially sensitive data from process memory via a crafted HTML page. Seve...

CVE-2026-17991

CVE-2026-17991 affects Google Chrome prior to 151.0.7922.72. Insufficient validation of untrusted input in AI could allow a remote attacker who has already compromised the renderer process to potentially escape the sandbox via a crafted HTML page. Practical impact is a sandbox escape if the rende...

CVE-2026-3544

CVE-2026-3544 is a heap buffer overflow in WebCodecs of Google Chrome/Chromium, allowing a remote, unauthenticated attacker to induce an out-of-bounds write via a crafted HTML page. Affected product: Chrome/Chromium’s WebCodecs component; root cause: heap memory overflow. Impact stated as high se...

CVE-2026-3938

CVE-2026-3938 affects Google Chrome/Chromium clipboard policy enforcement. Prior to version 146.0.7680.71, a renderer-compromised attacker could leak cross-origin data via a crafted HTML page due to insufficient clipboard policy enforcement. Impact is data leakage with low severity according to C...

CVE-2026-5286

The provided documents describe CVE-2026-5286 as a memory-use-after-free in Chrome’s Dawn component, exploitable via crafted HTML pages to achieve remote code execution. Affected software: Google Chrome (Dawn component) with vulnerable Dawn paths in Chromium prior to version 146.0.7680.178. Root ...

CVE-2026-7352

CVE-2026-7352 is a use-after-free in the Media component of Google Chrome on Android, prior to version 147.0.7727.138. The vulnerability could be triggered by a crafted HTML page by a remote attacker who had compromised the renderer process, potentially enabling a sandbox escape. Affected product...

CVE-2026-7354

CVE-2026-7354 : Out-of-bounds read/write in ANGLE (Chromium/Google Chrome) prior to 147.0.7727.138 can allow a remote attacker to sandbox-escape via a crafted HTML page. This affects Google Chrome and is listed with high severity; the Chrome release notes indicate the fix is included in the 147.0...

CVE-2026-76037

CVE-2026-76037 is a link following vulnerability in the CredentialProvider component of Google Chrome on Windows , affecting versions prior to 151.0.7922.169 . A local attacker can potentially execute arbitrary code outside the sandbox via a local program. The Chromium security severity is High ,...

CVE-2026-78894

A race condition in the Payments component of Google Chrome prior to version 152.0.7977.65 allows a remote attacker who has already compromised the renderer process to leak cross-origin data by rendering a crafted HTML page. The Chromium security team rated this as Medium severity; the assigned C...

CVE-2026-79026

CVE-2026-79026 is a use-after-free vulnerability in the Extensions component of Google Chrome prior to 152.0.7977.65 . A remote attacker leveraging social engineering can craft a malicious Chrome extension to potentially execute arbitrary code outside the sandbox . The CVSS 3.1 score is 9.6 (Crit...

CVE-2026-87531

Google Chrome prior to 153.0.8010.36 is affected by an information leak in CORS (Cross-Origin Resource Sharing) handling. A remote attacker who had already compromised the renderer process could obtain cross-origin data via a crafted HTML page. The vulnerability was rated Medium by Chromium and c...

CVE-2026-87590

CVE-2026-87590 is an improper input validation vulnerability in the Passwords component of Google Chrome (also affecting chromium-browser packages on Linux distributions). Versions prior to 153.0.8010.36 allow a remote attacker to potentially leak sensitive information by sending crafted network ...

CVE-2026-87596

CVE-2026-87596 is an out-of-bounds read in ANGLE (the ANGLE rendering library) within Google Chrome , affecting versions prior to 153.0.8010.36 . A remote attacker can exploit this vulnerability by serving a crafted HTML page to a user, enabling memory reads outside the Chrome sandbox boundary. T...

CVE-2026-87630

CVE-2026-87630 is an integer overflow in WebRTC within Google Chrome prior to version 153.0.8010.36 , allowing a remote attacker to read memory inside the sandbox via a crafted HTML page. The Chromium team classified the severity as Medium , with a CVSS 3.1 score of 4.3 (AV:N/AC:L/PR:N/UI:R/S:U/C...

CVE-2026-9938

CVE-2026-9938 concerns an inappropriate implementation in the V8 component of Google Chrome, affecting Chrome versions prior to 148.0.7778.216. The vulnerability allows a remote attacker to execute arbitrary code inside the browser sandbox via a crafted HTML page. The cited sources consistently d...

CVE-2008-4340

CVE-2008-4340 affects Google Chrome versions 0.2.149.29 and 0.2.149.30. The issue is a denial-of-service condition where a crafted HTML document containing a CRLF sequence ("\r\n\r\n") passed to window.open can cause memory consumption. Connected sources confirm the affected versions and the vuln...

CVE-2010-0662

CVE-2010-0662 affects Google Chrome prior to 4.0.249.78, where ParamTraits::Read in common/common_param_traits.cc uses incorrect variables in overflow-prevention calculations. This can allow a renderer-accessible attacker to trigger a denial of service or other unspecified impact via bitmap data ...

CVE-2010-1992

CVE-2010-1992 concerns Google Chrome 1.0.154.48, where an HTML document containing many IFRAMEs with src set to a mailto: URL can trigger the browser to launch the mail application repeatedly, causing a denial of service. Root cause: IFRAME elements with mailto: in SRC attribute. Impact: local/re...

CVE-2010-2299

The CVE-2010-2299 entry describes a Type Confusion in Google Chrome’s Clipboard::DispatchObject (app/clipboard/clipboard.cc) where improper handling of CBF_SMBITMAP in ViewHostMsg_ClipboardWriteObjectsAsync could enable remote code execution via crafted data from the renderer. Affected are Chrome...

CVE-2010-2301

This CVE-2010-2301 entry describes an XSS in WebKit’s WebCore (Editing/markup.cpp) affecting Google Chrome prior to 5.0.375.70. The vulnerability allows remote attackers to inject arbitrary web script or HTML via node.innerHTML on TEXTAREA, with potential for script execution in the victim’s brow...

CVE-2010-2651

CVE-2010-2651 affects Google Chrome’s CSS rendering in versions before 5.0.375.99, where improper style rendering could allow remote attackers to trigger memory corruption (DoS or other impact) via unknown vectors. Documented in OpenVAS/Ubuntu USN entries and the Chrome 5.0.375.99 update (July 20...

CVE-2010-3114

CVE-2010-3114 affects Google Chrome prior to 5.0.375.127 and webkitgtk prior to 1.2.6. The root cause is a failure to properly handle SVG documents due to incorrect processing within WebKit’s text/SVG handling paths, enabling remote attackers to induce a denial of service through memory corruptio...

CVE-2010-3118

The CVE-2010-3118 affects Google Chrome’s Omnibox autosuggest feature (Chrome before 5.0.375.127). The vulnerability could allow remote attackers to obtain sensitive information by reading the network traffic generated by the autosuggest process. Exploitation details, affected versions beyond the...

CVE-2010-4490

CVE-2010-4490 affects Google Chrome prior to 8.0.552.215. A remote attacker could cause a denial of service (application crash) or potentially other unspecified impact by providing malformed video content that triggers an indexing error. The vulnerability is network-exploitable (no authentication...

CVE-2011-0471

CVE-2011-0471 relates to Google Chrome and Chrome OS where the node-iteration implementation mishandles pointers, allowing remote denial of service and possibly other unspecified impacts. Affected versions are Chrome before 8.0.552.237 and Chrome OS before 8.0.552.344. The issue stems from improp...

CVE-2011-0484

CVE-2011-0484 affects Google Chrome (before 8.0.552.237) and Chrome OS (before 8.0.552.344). The issue arises from improper DOM node removal, enabling denial of service or unspecified impact via a stale rendering node. NVD assigns a base score of 7.5 ( HIGH ) with network/low complexity exploit c...

CVE-2011-1808

CVE-2011-1808 refers to a use-after-free flaw in Google Chrome prior to version 12.0.742.91, triggered by incorrect integer calculations during float handling. The vulnerability allows remote attackers to cause a denial of service and potentially other unspecified effects, as described in the NVD...

CVE-2011-2854

Technical details about CVE-2011-2854 are not publicly available in the provided connected documents. The references mention the CVE but do not describe affected product/version, root cause, or impact. Monitor for updates.

CVE-2011-2856

CVE-2011-2856 involves Google Chrome/Chromium’s V8 engine. The vulnerability allows remote attackers to bypass the Same Origin Policy via unspecified vectors in Google V8 used by Chrome before 14.0.835.163. Impact is exposure of cross-origin data and potential manipulation of web content; exploit...

CVE-2011-2861

Technical details for CVE-2011-2861 are not publicly provided in the connected documents. Monitor for updates from upstream sources.

CVE-2011-3019

CVE-2011-3019 : A heap-based buffer overflow in Google Chrome prior to 17.0.963.56 allows remote attackers to cause denial of service or potentially other impact via a crafted Matroska (MKV) file. Affected product: Google Chrome. Root cause: heap-based overflow in MKV parsing. Impact: crash or po...

CVE-2011-3108

CVE-2011-3108 is a use-after-free vulnerability in Chromium/Chrome linked to browser cache, enabling remote code execution. Affected: Chrome before 19.0.1084.52. Exploitation context: network vectors with no user interaction required (per CVSS). Remediation: Gentoo GLSA 201205-04 recommends upgra...

CVE-2011-3927

CVE-2011-3927 affects Skia as used by Google Chrome prior to 16.0.912.77, where incomplete initialization of values could enable a remote attacker to cause a denial of service or potentially other impact via unknown vectors. The connected documents confirm Chromium-related fixes: the GLSA/openSUS...

CVE-2012-2894

CVE-2012-2894 affects Google Chrome (and Chromium) prior to version 22.0.1229.79, due to improper handling of graphics-context data structures that can cause a remote-denial-of-service (application crash) and possibly other impacts. Public documents indicate Chromium/GChromium upgrades addressed ...

CVE-2012-5115

CVE-2012-5115 affects Google Chrome on Mac OS X prior to 23.0.1271.64. The issue is an improper write behavior in graphics drivers that can, via unknown vectors triggering “wild writes,” cause a denial of service (and potentially other impact). Affected software is Chrome for Mac OS X; remediatio...