CVE-2010-4198

CVE-2010-4198 affects WebKit as used in Google Chrome prior to 7.0.517.44 and webkitgtk prior to 1.2.6; it does not properly handle large text areas, enabling remote memory corruption (and potentially other impact) via a crafted HTML document. Affected products include WebKit/WebKitGTK+ and Chrom...

CVE-2010-4490

CVE-2010-4490 affects Google Chrome prior to 8.0.552.215. A remote attacker could cause a denial of service (application crash) or potentially other unspecified impact by providing malformed video content that triggers an indexing error. The vulnerability is network-exploitable (no authentication...

CVE-2011-0471

CVE-2011-0471 relates to Google Chrome and Chrome OS where the node-iteration implementation mishandles pointers, allowing remote denial of service and possibly other unspecified impacts. Affected versions are Chrome before 8.0.552.237 and Chrome OS before 8.0.552.344. The issue stems from improp...

CVE-2011-0484

CVE-2011-0484 affects Google Chrome (before 8.0.552.237) and Chrome OS (before 8.0.552.344). The issue arises from improper DOM node removal, enabling denial of service or unspecified impact via a stale rendering node. NVD assigns a base score of 7.5 ( HIGH ) with network/low complexity exploit c...

CVE-2011-1799

CVE-2011-1799 affects Google Chrome/Chromium browser components (WebKit) where improper casts of variables during interaction with WebKit can enable remote denial of service or unspecified impact. Public sources in the Debian security advisories (DSA-2245-1) and Debian/OpenVAS entries confirm the...

CVE-2011-1808

CVE-2011-1808 refers to a use-after-free flaw in Google Chrome prior to version 12.0.742.91, triggered by incorrect integer calculations during float handling. The vulnerability allows remote attackers to cause a denial of service and potentially other unspecified effects, as described in the NVD...

CVE-2011-2790

CVE-2011-2790 is a use-after-free vulnerability in handling of floating styles, affecting Google Chrome and Apple Safari. The flaw allows remote attackers to trigger a denial of service or possibly other impact by convincing a user to view a crafted page. Affected software, per the provided docs,...

CVE-2011-2854

Technical details about CVE-2011-2854 are not publicly available in the provided connected documents. The references mention the CVE but do not describe affected product/version, root cause, or impact. Monitor for updates.

CVE-2011-2856

CVE-2011-2856 involves Google Chrome/Chromium’s V8 engine. The vulnerability allows remote attackers to bypass the Same Origin Policy via unspecified vectors in Google V8 used by Chrome before 14.0.835.163. Impact is exposure of cross-origin data and potential manipulation of web content; exploit...

CVE-2011-3927

CVE-2011-3927 affects Skia as used by Google Chrome prior to 16.0.912.77, where incomplete initialization of values could enable a remote attacker to cause a denial of service or potentially other impact via unknown vectors. The connected documents confirm Chromium-related fixes: the GLSA/openSUS...

CVE-2012-2894

CVE-2012-2894 affects Google Chrome (and Chromium) prior to version 22.0.1229.79, due to improper handling of graphics-context data structures that can cause a remote-denial-of-service (application crash) and possibly other impacts. Public documents indicate Chromium/GChromium upgrades addressed ...

CVE-2012-5135

CVE-2012-5135 is a use-after-free vulnerability in Chromium related to printing. The OpenSUSE/OSSUS advisories (and Gentoo/OpenVAS entries) reference CVE-2012-5135 among multiple chromium/v8 issues and indicate impact as potential denial of service or other unspecified effects through printing-re...

CVE-2012-5152

CVE-2012-5152 is reported as an out-of-bounds read when seeking video data in Google Chrome/Chromium. Connected openSUSE advisories (openSUSE-SU-2013:0236-1) list CVE-2012-5152 among fixed issues and indicate an upgrade of Chromium to a newer series (e.g., 26.x) as the remediation. The fixed vers...

CVE-2012-5376

CVE-2012-5376 affects Google Chrome prior to 22.0.1229.94: the Inter-process Communication (IPC) implementation in Chrome’s renderer process can bypass sandbox restrictions, enabling remote attackers to write to arbitrary files given renderer access.

CVE-2013-0906

CVE-2013-0906 affects Google Chrome’s IndexedDB implementation. The vulnerability enables memory corruption (and potential other impact) via unknown vectors in Chrome versions prior to 25.0.1364.152. Public sources within the connected documents indicate this CVE is part of a set of Chrome/Chromi...

CVE-2013-0911

CVE-2013-0911 affects Google Chrome versions prior to 25.0.1364.152, with a path traversal issue in database handling. Affected: Chrome on multiple platforms. Impact is described as a path traversal vulnerability in database handling; explicit exploit details are not provided in the supplied docu...

CVE-2013-2836

Google Chrome is affected by CVE-2013-2836 and related vulnerabilities described in OpenVAS entries (MacOS, Linux, Windows). The impact includes arbitrary code execution, information disclosure, and other risks when users visit crafted content or quando running Chrome prior to version 27.0.1453.9...

CVE-2013-6166

CVE-2013-6166 affects Google Chrome pre-29. The issue arises when Chrome sends HTTP Cookie headers without validating that cookies meet character-set restrictions, enabling a remote attacker to trigger a persistent Logout CSRF-like effect by crafting a parameter that causes a web app to set a mal...

CVE-2013-6637

CVE-2013-6637 is listed among multiple fixes in Chromium/Chromium-based builds (e.g., openSUSE openSUSE-SU-2013:1933-1, Debian/DSA-2811-1) for the Chromium 31.0.1650.63 stabilization that addresses several vulnerabilities. The connected docs directly reference “Various fixes from internal audits,...

CVE-2013-6661

Google Chrome/Chromium prior to version 33.0.1750.117 contains multiple issues, including seven sandbox-escape fixes from compromised renderers (CVE-2013-6661). These vulnerabilities could allow sandbox bypass and other impacts via unknown vectors. Remediation: upgrade to the patched releases (e....

CVE-2014-1727

CVE-2014-1727 affects Google Chrome preceding 34.0.1847.116, via a use-after-free in content/renderer/renderer_webcolorchooser_impl.h with vulnerability vectors related to forms. The documented impact is a denial of service or potentially other unspecified effects. Public remediation observed in ...

CVE-2014-3174

CVE-2014-3174 affects Blink/Web Audio’s BiquadDSPKernel.cpp in Chrome pre-37.0.2062.94. The issue arises from concurrent-thread handling when updating biquad coefficients, enabling a remote attacker to cause denial of service via reads of uninitialized memory. Public advisories confirm the vulner...

CVE-2014-7901

The CVE-2014-7901 entry is tied to OpenJPEG in PDFium, used by Google Chrome before 39.0.2171.65. The vulnerability is an integer overflow in opj_t2_read_packet_data within fxcodec/fx_libopenjpeg/libopenjpeg20/t2.c when processing a long JPEG segment, which can allow remote attackers to cause a d...

CVE-2015-8480

The CVE-2015-8480 entry relates to Google Chrome before 47.0.2526.73. The vulnerability arises because VideoFramePool::PoolImpl::CreateFrame does not initialize memory for a video-frame data structure, enabling remote attackers to trigger a denial of service via out-of-bounds memory access, poten...

CVE-2016-10403

CVE-2016-10403 affects Google Chrome's PDFium component in the browser before version 51.0.2704.63, where insufficient data validation on image data can allow a remote attacker to cause an out-of-bounds memory read by a specially crafted PDF file. Documents corroborate a memory-read impact (confi...

CVE-2025-1292

CVE-2025-1292 describes an out-of-bounds write in the TPM2 Reference Library used by Google ChromeOS 122.0.6261.132 on Cr50 boards. The root cause is an NV_Read path leveraged during the Challenge-Response process, allowing an attacker with root access to gain persistence and bypass operating-sys...

CVE-2026-10017

Summary (CVE-2026-10017) Out-of-bounds read in Chrome/Chromium Headless before 148.0.7778.216. An attacker who already compromised the renderer process could potentially escape the sandbox via a crafted HTML page. The issue affects the Headless component of Chromium and is described with Chromium...

CVE-2026-10890

CVE-2026-10890 is a Use after Free in Cast in Google Chrome prior to 149.0.7827.53, enabling heap corruption via malicious network traffic on a local network segment. Affected feature: Cast in Chrome; root cause: use-after-free. Impact: potential heap corruption with high severity (CRITICAL). Goo...

CVE-2026-10899

CVE-2026-10899 is a real issue described as a use-after-free in the Ozone component of Google Chrome on Linux, before Chrome 149.0.7827.53. The vulnerability stems from heap corruption potentially exploitable via a crafted HTML page after a user interacts with specific UI gestures. Connected sour...

CVE-2026-10961

The CVE-2026-10961 issue affects Chrome for iOS (Google Chrome on iOS), where a use-after-free in the renderer allows a remote attacker who has compromised the renderer process to potentially escape the sandbox via a crafted HTML page. Impact is a sandbox escape with high severity; exploitation s...

CVE-2026-11015

CVE-2026-11015 is an out-of-bounds read in WebGPU in Google Chrome/Chromium prior to 149.0.7827.53. Debian and openSUSE advisories show that Chromium/Chrome 149.0.7827.53 fixes this and related issues (CVE-2026-10881…11015 family) with patches to chromium, Chrome stable, and backports. The issue ...

CVE-2026-11039

CVE-2026-11039 describes an uninitialized use in Skia affecting Google Chrome prior to 149.0.7827.53, enabling a remote attacker to leak cross-origin data via a crafted HTML page. The vulnerability is tied to the Skia component within Chromium-based Chrome and is documented with a Medium severity...

CVE-2026-11063

The CVE-2026-11063 entry concerns Google Chrome on Windows, where insufficient validation of untrusted input in WebNN could allow a renderer-compromised attacker to escape the sandbox via a crafted HTML page. Affected component: WebNN in Chrome; root cause: input validation flaw in WebNN handling...

CVE-2026-11069

CVE-2026-11069 concerns Google Chrome prior to 149.0.7827.53, where cast-related input validation on untrusted data is insufficient. The underlying issue permits a remote attacker to bypass the same-origin policy via a crafted HTML page, with the impact described as Medium. The vulnerability affe...

CVE-2026-11077

CVE-2026-11077 affects Google Chrome (Dawn) and is caused by a bad cast in Dawn that allows a remote attacker to execute arbitrary code inside Chrome’s sandbox via a crafted HTML page. Affected version range is before 149.0.7827.53; the vulnerability is fixed in that release. The CVSS/metrics ind...

CVE-2026-11096

CVE-2026-11096 details an out-of-bounds read in WebRTC for Google Chrome, prior to 149.0.7827.53. The issue could allow a remote attacker to obtain potentially sensitive information from a process’s memory via a crafted HTML page. Affected product/component: WebRTC in Chrome (Chromium-based). Roo...

CVE-2026-11153

The CVE C-2026-11153 affects Google Chrome (Chromium-based) and describes a side-channel information leak in Forms that allowed a remote attacker to exfiltrate cross-origin data via a crafted HTML page. Affected versions are prior to 149.0.7827.53; the issue is remedied by updating Chrome to the ...

CVE-2026-11188

The connected sources confirm CVE-2026-11188 is a use-after-free in the USB handling of Google Chrome on Android, prior to version 149.0.7827.53, enabling a remote attacker to potentially escape the sandbox via a crafted HTML page. Affected software: Google Chrome on Android; vulnerable component...

CVE-2026-11295

The CVE-2026-11295 entry concerns Google Chrome on Android WebView, where an inappropriate implementation allows privilege escalation via a crafted HTML page. Affected component: WebView in Chrome for Android; root cause described as an “inappropriate implementation” without deeper details in the...

CVE-2026-13877

CVE-2026-13877 involves insufficient validation of untrusted input in ANGLE used by Google Chrome before version 150.0.7871.47. The issue allows a remote attacker who has already compromised the renderer process to potentially read sensitive data from process memory through a crafted HTML page. T...

CVE-2026-14003

Affected software/scope: Google Chrome extensions mechanism. Vulnerability: Insufficient policy enforcement in Chrome Extensions prior to 150.0.7871.47 allows a user-assisted attacker to leak cross-origin data when a malicious extension is installed. Underlying issue: policy enforcement weakness ...

CVE-2026-14009

The vulnerability CVE-2026-14009 affects Google Chrome (Passwords component) due to an inappropriate implementation, enabling remote exploitation to potentially cause heap corruption via a crafted HTML page. Affected builds are prior to 150.0.7871.47; the issue is described with a Chromium severi...

CVE-2026-14081

CVE-2026-14081 affects Google Chrome DevTools prior to version 150.0.7871.47. The issue is insufficient policy enforcement, enabling an attacker who persuades a user to install a malicious Chrome extension to access potentially sensitive information from process memory via the crafted extension. ...

CVE-2026-14107

CVE-2026-14107 describes a use-after-free in Chrome’s Scheduling component, exploitable via a crafted HTML page to achieve remote code execution inside the sandbox. Affected software: Google Chrome, versions before 150.0.7871.47. Root cause: use-after-free in scheduling logic (Chromium). Impact: ...

CVE-2026-14390

CVE-2026-14390 describes a use-after-free in ANGLE used by Google Chrome before version 150.0.7871.46. The vulnerability could allow a remote attacker to attempt a sandbox escape via a crafted HTML page. The description and connected sources consistently identify ANGLE as the affected Graphics/AN...

CVE-2026-14409

CVE-2026-14409 affects the Chrome V8 engine prior to 150.0.7871.46. Affected component: V8 in Google Chrome. Root cause: inappropriate implementation allowing a remote attacker to execute arbitrary code inside a sandbox when a user is tricked into performing specific UI gestures on a crafted HTML...

CVE-2026-17667

CVE-2026-17667 is a vulnerability in Google Chrome related to the ANGLE component. The issue is described as an uninitialized use in ANGLE that could allow a remote attacker to leak cross-origin data via a crafted HTML page. The connected Chrome/Chromium advisory confirms the flaw and ties it to ...

CVE-2026-17691

This CVE (CVE-2026-17691) concerns an out-of-bounds write in ANGLE used by Google Chrome on Windows, affecting Chrome builds prior to 151.0.7922.72. The root cause is an ANGLE vulnerability that could allow a remote attacker to escape the Chrome sandbox via a crafted HTML page. The impact is desc...

CVE-2026-17766

CVE-2026-17766 involves insufficient validation of untrusted input in Clipboard on Android Chrome, allowing a local attacker to leak cross-origin data via a crafted HTML page. Affected software: Google Chrome on Android prior to version 151.0.7922.72. Root cause (as stated): inadequate input vali...

CVE-2026-17769

CVE-2026-17769 concerns Google Chrome (Cast component). Root cause: insufficient validation of untrusted input in Cast, allowing a remote attacker to leak cross-origin data via a crafted HTML page. Affected: Chrome prior to 151.0.7922.72. Impact is cross-origin data leakage; no exploitation statu...