CVE-2011-3019

CVE-2011-3019 : A heap-based buffer overflow in Google Chrome prior to 17.0.963.56 allows remote attackers to cause denial of service or potentially other impact via a crafted Matroska (MKV) file. Affected product: Google Chrome. Root cause: heap-based overflow in MKV parsing. Impact: crash or po...

CVE-2011-3927

CVE-2011-3927 affects Skia as used by Google Chrome prior to 16.0.912.77, where incomplete initialization of values could enable a remote attacker to cause a denial of service or potentially other impact via unknown vectors. The connected documents confirm Chromium-related fixes: the GLSA/openSUS...

CVE-2012-2894

CVE-2012-2894 affects Google Chrome (and Chromium) prior to version 22.0.1229.79, due to improper handling of graphics-context data structures that can cause a remote-denial-of-service (application crash) and possibly other impacts. Public documents indicate Chromium/GChromium upgrades addressed ...

CVE-2012-5115

CVE-2012-5115 affects Google Chrome on Mac OS X prior to 23.0.1271.64. The issue is an improper write behavior in graphics drivers that can, via unknown vectors triggering “wild writes,” cause a denial of service (and potentially other impact). Affected software is Chrome for Mac OS X; remediatio...

CVE-2012-5135

CVE-2012-5135 is a use-after-free vulnerability in Chromium related to printing. The OpenSUSE/OSSUS advisories (and Gentoo/OpenVAS entries) reference CVE-2012-5135 among multiple chromium/v8 issues and indicate impact as potential denial of service or other unspecified effects through printing-re...

CVE-2012-5152

CVE-2012-5152 is reported as an out-of-bounds read when seeking video data in Google Chrome/Chromium. Connected openSUSE advisories (openSUSE-SU-2013:0236-1) list CVE-2012-5152 among fixed issues and indicate an upgrade of Chromium to a newer series (e.g., 26.x) as the remediation. The fixed vers...

CVE-2012-5376

CVE-2012-5376 affects Google Chrome prior to 22.0.1229.94: the Inter-process Communication (IPC) implementation in Chrome’s renderer process can bypass sandbox restrictions, enabling remote attackers to write to arbitrary files given renderer access.

CVE-2013-0839

CVE-2013-0839 is a Google Chrome use-after-free vulnerability (fonts handling in CANVAS elements) that allowed remote denial of service and potentially other impact. Affected product: Google Chrome before 24.0.1312.56. The available connected data confirm the CVE id is linked to multiple Chrome v...

CVE-2013-0906

CVE-2013-0906 affects Google Chrome’s IndexedDB implementation. The vulnerability enables memory corruption (and potential other impact) via unknown vectors in Chrome versions prior to 25.0.1364.152. Public sources within the connected documents indicate this CVE is part of a set of Chrome/Chromi...

CVE-2013-0911

CVE-2013-0911 affects Google Chrome versions prior to 25.0.1364.152, with a path traversal issue in database handling. Affected: Chrome on multiple platforms. Impact is described as a path traversal vulnerability in database handling; explicit exploit details are not provided in the supplied docu...

CVE-2013-2836

Google Chrome is affected by CVE-2013-2836 and related vulnerabilities described in OpenVAS entries (MacOS, Linux, Windows). The impact includes arbitrary code execution, information disclosure, and other risks when users visit crafted content or quando running Chrome prior to version 27.0.1453.9...

CVE-2013-6637

CVE-2013-6637 is listed among multiple fixes in Chromium/Chromium-based builds (e.g., openSUSE openSUSE-SU-2013:1933-1, Debian/DSA-2811-1) for the Chromium 31.0.1650.63 stabilization that addresses several vulnerabilities. The connected docs directly reference “Various fixes from internal audits,...

CVE-2013-6661

Google Chrome/Chromium prior to version 33.0.1750.117 contains multiple issues, including seven sandbox-escape fixes from compromised renderers (CVE-2013-6661). These vulnerabilities could allow sandbox bypass and other impacts via unknown vectors. Remediation: upgrade to the patched releases (e....

CVE-2014-1727

CVE-2014-1727 affects Google Chrome preceding 34.0.1847.116, via a use-after-free in content/renderer/renderer_webcolorchooser_impl.h with vulnerability vectors related to forms. The documented impact is a denial of service or potentially other unspecified effects. Public remediation observed in ...

CVE-2014-3174

CVE-2014-3174 affects Blink/Web Audio’s BiquadDSPKernel.cpp in Chrome pre-37.0.2062.94. The issue arises from concurrent-thread handling when updating biquad coefficients, enabling a remote attacker to cause denial of service via reads of uninitialized memory. Public advisories confirm the vulner...

CVE-2014-7901

The CVE-2014-7901 entry is tied to OpenJPEG in PDFium, used by Google Chrome before 39.0.2171.65. The vulnerability is an integer overflow in opj_t2_read_packet_data within fxcodec/fx_libopenjpeg/libopenjpeg20/t2.c when processing a long JPEG segment, which can allow remote attackers to cause a d...

CVE-2015-8480

The CVE-2015-8480 entry relates to Google Chrome before 47.0.2526.73. The vulnerability arises because VideoFramePool::PoolImpl::CreateFrame does not initialize memory for a video-frame data structure, enabling remote attackers to trigger a denial of service via out-of-bounds memory access, poten...

CVE-2016-10403

CVE-2016-10403 affects Google Chrome's PDFium component in the browser before version 51.0.2704.63, where insufficient data validation on image data can allow a remote attacker to cause an out-of-bounds memory read by a specially crafted PDF file. Documents corroborate a memory-read impact (confi...

CVE-2016-7549

CVE-2016-7549 affects Google Chrome prior to 53.0.2785.113. The vulnerability is an IPC validation flaw where the recipient of a certain IPC message may not be a valid RenderFrame or RenderWidget, enabling a remote attacker with renderer access to cause a denial of service (invalid pointer derefe...

CVE-2019-13672

CVE-2019-13672 affects Google Chrome on iOS, where an incorrect security UI in the Omnibox could allow a crafted HTML page to spoof the URL bar. The issue is triggered by using Chrome versions prior to 77.0.3865.75. The documented remediation is to update to 77.0.3865.75 or later. No exploitation...

CVE-2025-8880

CVE-2025-8880 describes a race in V8 within Google Chrome before 139.0.7258.127, allowing a remote attacker to execute arbitrary code inside a sandbox via a crafted HTML page. Connected documents corroborate: Chromium/Chrome security notes identify this race in V8 as a high-severity issue and Chr...

CVE-2026-10006

CVE-2026-10006 affects Google Chrome’s WebAudio component in Chromium before 148.0.7778.216. A race condition in WebAudio could allow a remote attacker to execute arbitrary code inside the browser sandbox via a crafted HTML page. The issue is labeled high severity with network attack vector, requ...

CVE-2026-10923

CVE-2026-10923 describes a use-after-free vulnerability in the WebAppInstalls component of Google Chrome on Android, affecting versions prior to 149.0.7827.53. The flaw allows a local attacker to execute arbitrary code by interacting with a malicious file, representing a memory corruption issue w...

CVE-2026-11043

CVE-2026-11043: Out-of-bounds write in ANGLE affecting Google Chrome on macOS prior to 149.0.7827.53. Likely allows a remote attacker who compromises the renderer to escape the sandbox via a crafted HTML page. Root cause: ANGLE out-of-bounds write. Remediation: update to Chrome 149.0.7827.53 or n...

CVE-2026-11047

Google Chrome on Windows is affected by CVE-2026-11047 due to an inappropriate implementation in the Base component that could allow a sandbox escape if a renderer process is compromised. The issue affects Chrome versions prior to 149.0.7827.53. Impact is that a remote attacker could escape the s...

CVE-2026-11234

CVE-2026-11234 affects Google Chrome prior to 149.0.7827.53. The issue is an incorrect implementation in FoldableAPIs that lets a remote attacker who has compromised the renderer process bypass site isolation via a crafted HTML page. The known impact is limited to bypassing site isolation, as des...

CVE-2026-11268

CVE-2026-11268 affects ANGLE in Google Chrome on Windows, with an uninitialized use that allows a remote attacker to leak cross-origin data via a crafted HTML page. The description indicates the issue exists in Chrome builds prior to version 149.0.7827.53, implying the fix is included in 149.0.78...

CVE-2026-11638

Concrete details found: CVE-2026-11638 affects Google Chrome (Printing) before 149.0.7827.103. The vulnerability is a use-after-free in the Printing component that could allow a remote attacker to potentially escape the Chrome sandbox via a crafted HTML page (severity: Critical). Impact is sandbo...

CVE-2026-11660

CVE-2026-11660: Google Chrome’s New Tab Page suffered insufficient validation of untrusted input, enabling a renderer-compromised remote attacker to potentially escape the sandbox via a crafted HTML page. Affected: Chrome before 149.0.7827.103. Impact: sandbox escape risk; attacker could leverage...

CVE-2026-12438

The CVE-2026-12438 entry corresponds to an issue in WebView for Google Chrome on Android, where an attacker who compromised the renderer process could escape the browser sandbox via a crafted HTML page. Affected product/vector: Android WebView in Chrome; root cause: inappropriate implementation i...

CVE-2026-12459

CVE-2026-12459: In Google Chrome (Chromium-based), the Serial component has an inappropriate implementation prior to 149.0.7827.155 that enables a remote attacker to inject arbitrary scripts or HTML (UXSS) via a crafted HTML page. Affected versions are Chrome before 149.0.7827.155; remediation is...

CVE-2026-13033

CVE-2026-13033 affects Google Chrome’s Blink component, specifically Blink>InterestGroups. The vulnerability is described as an out-of-bounds read and write that could allow a remote attacker to execute arbitrary code via a crafted HTML page. Affected versions are Chrome prior to 149.0.7827.19...

CVE-2026-13811

CVE-2026-13811 describes a use-after-free in the IME component of Google Chrome prior to 150.0.7871.47, allowing a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML page. The vulnerability affects Chrome’s input-method editor (IME) and is labeled with High severity. ...

CVE-2026-13826

Summary of CVE-2026-13826 : The issue is an insecure Autofill implementation in Google Chrome on Android prior to version 150.0.7871.47. According to connected sources, a remote attacker who has already compromised the renderer process can leak cross-origin data through a crafted HTML page. The c...

CVE-2026-13870

CVE-2026-13870 describes a use-after-free in WebView for Google Chrome on Android, before version 150.0.7871.47. The underlying issue is a use-after-free in WebView that could allow a remote attacker to execute arbitrary code inside the browser sandbox via a crafted HTML page. The impact is a hig...

CVE-2026-13887

The CVE-2026-13887 entry relates to Google Chrome for Android, where an inappropriate NFC implementation before version 150.0.7871.47 allowed a remote attacker who had already compromised the renderer process to leak cross-origin data via a crafted HTML page. This is triggered by a renderer compr...

CVE-2026-13965

CVE-2026-13965: Use-after-free in Oilpan within Google Chrome (Chromium) before 150.0.7871.47 allows a remote attacker to execute arbitrary code inside a sandbox via a crafted HTML page. Impact: high (arbitrary code in sandbox); attack vector: network, user interaction required. Affected product:...

CVE-2026-13974

Google Chrome on macOS Safe Browsing contains an integer overflow that lets a remote attacker bypass navigation restrictions via a malicious file. This affects Chrome on Mac prior to 150.0.7871.47. Impact aligns with the description (Chromium security severity: Medium); exploitation details are n...

CVE-2026-14047

CVE-2026-14047 affects Google Chrome before version 150.0.7871.47 due to insufficient policy enforcement in Extensions, enabling an attacker who persuades a user to install a malicious extension to bypass content security policy via a crafted Chrome Extension. The vulnerability’s impact is descri...

CVE-2026-14122

The CVE-2026-14122 entry describes an issue in Google Chrome on Windows affecting the WebAppInstalls component of Chromium. The root cause is insufficient validation of untrusted input, allowing a remote attacker to perform arbitrary read/write via a crafted HTML page. The vulnerability impacts C...

CVE-2026-14386

CVE-2026-14386 describes an Out-of-bounds read in ANGLE used by Google Chrome before version 150.0.7871.46. The issue could allow a remote attacker to obtain potentially sensitive information from a process’s memory via a crafted HTML page. The connected documents confirm Chrome/ANGLE involvement...

CVE-2026-14391

The CVE-2026-14391 entry concerns an integer overflow in ANGLE used by Google Chrome on Windows, prior to version 150.0.7871.46. The vulnerability allows a remote attacker who has already compromised the renderer process to potentially read sensitive data from process memory via a crafted HTML pa...

CVE-2026-15113

CVE-2026-15113 describes a use-after-free vulnerability in the Autofill component of Google Chrome on Android, before version 150.0.7871.115. The root cause is memory mismanagement that allows a crafted HTML page to trigger a sandbox escape, potentially enabling code execution outside the restric...

CVE-2026-16420

CVE-2026-16420 is a Type Confusion in WebAudio affecting Google Chrome prior to 150.0.7871.182 (Chromium). The flaw, exploitable via a crafted HTML page, allows remote code execution inside the sandbox. Affected product: Google Chrome (older than 150.0.7871.182). Remediation: upgrade to Chrome 15...

CVE-2026-17699

CVE-2026-17699 is a use-after-free vulnerability in Chrome’s Views component (Chromium) that could allow a local attacker to escape the sandbox via a crafted file. Affected: Google Chrome on supported platforms prior to version 151.0.7922.72. Upstream and vendor advisories (Red Hat, Debian OSV, C...

CVE-2026-17716

CVE-2026-17716 describes a use-after-free flaw in Chrome’s Updater on macOS, allowing a local attacker to escalate privileges via malicious network traffic. Affected: Google Chrome/Chromium Updater on Mac. Root cause: use-after-free in Updater. Impact: privilege escalation with high severity (per...

CVE-2026-17787

CVE-2026-17787 refers to an issue in Chromium-based DevTools where an inappropriate DevTools implementation allowed a remote attacker to bypass the same-origin policy via a crafted HTML page. Public documents identify affected product family as Google Chrome/Chromium (and related Edge Chromium li...

CVE-2026-17806

CVE-2026-17806 : Insufficient validation of untrusted input in the Extensions component of Google Chrome/Chromium allowed a remote attacker who had compromised the renderer process to potentially perform a sandbox escape via a crafted HTML page. Affected product: Google Chrome (Extensions). Upstr...

CVE-2026-17815

CVE-2026-17815: In Google Chrome, GuestView has insufficient policy enforcement prior to version 151.0.7922.72, enabling a remote attacker to leak cross-origin data via a crafted HTML page. The issue affects Chrome/Chromium components as described in multiple public records. Impact is data leakag...

CVE-2026-17935

CVE-2026-17935 : Heap buffer overflow in Google Chrome 151.0.7922.72 prior versions’ Codecs exposes remote code execution within the sandbox via a crafted HTML page. The vulnerability affects Chrome’s Codecs component; underlying root cause is a heap buffer overflow. Current references indicate a...