CVE-2010-2897

CVE-2010-2897 affects Google Chrome prior to 5.0.375.125. The connected records consistently state vulnerability to an unspecified flaw in the Windows kernel with unknown impact and attack vectors, without detailing root cause beyond “unspecified flaw.” The NVD entry lists a base score of 10.0 (H...

CVE-2010-2902

CVE-2010-2902 affects Google Chrome prior to 5.0.375.125, with the SVG implementation vulnerable to memory corruption that can lead to a denial of service (and possibly other impact). Multiple independent advisories and databases (SUSE, Ubuntu, OpenVAS/OpenVAS-derived feeds, Debian tracker) corro...

CVE-2010-3120

WebKit/Chrome CVE-2010-3120 affects Google Chrome prior to version 5.0.375.127, where the Geolocation implementation is insecure due to an improper handling, allowing remote attackers to cause a denial of service (memory corruption) or possibly other unspecified impact via unknown vectors. The vu...

CVE-2010-3252

Affected product: Google Chrome (pre-6.0.472.53). The issue is a use-after-free in the Notifications presenter, leading to denial of service or possibly other impacts via unknown vectors. Root cause is a use-after-free error in the Notifications presenter component. Impact is described as denial ...

CVE-2010-4205

CVE-2010-4205 affects Google Chrome prior to 7.0.517.44, where improper handling of the data types of event objects can allow remote attackers to cause a denial of service or potentially other impact via unknown vectors. The provided documents do not include a vendor fix/patch information or conc...

CVE-2010-4488

CVE-2010-4488 affects Google Chrome before 8.0.552.215, which does not properly handle HTTP proxy authentication, allowing remote attackers to cause a denial of service (application crash) via unspecified vectors. The connected OpenVAS entries reference Google Chrome multiple vulnerabilities from...

CVE-2011-0780

CVE-2011-0780 affects Google Chrome prior to 9.0.597.84, where the PDF print workflow interacts improperly with print operations, allowing user‑assisted remote attackers to cause a denial of service (application crash) or potentially other impact via unknown vectors. Affected component: PDF event...

CVE-2011-1300

The CVE-2011-1300 entry affects ANGLE’s WebGLES library (libGLESv2.dll) used by Mozilla Firefox 4.x on Windows and by Chrome’s GPU process, due to an off-by-three error in Program::getActiveUniformMaxLength. This allows remote code execution via unspecified vectors. Public sources indicate Chrome...

CVE-2011-1450

CVE-2011-1450 concerns Google Chrome prior to 11.0.696.57, where the browser mishandles file dialogs, allowing remote attackers to trigger a denial of service or potentially other impact via dangling pointers. The vulnerability is tied to the Chrome 11.0.696.57 release which fixes multiple issues...

CVE-2011-3055

CVE-2011-3055 affects Chromium/Chrome prior to versions adopting the OpenSUSE patch, where the browser’s native UI could prompt for an unpacked extension installation without user confirmation, enabling user-assisted remote execution via a crafted extension. Connected advisories confirm the issue...

CVE-2011-3094

CVE-2011-3094 refers to an out-of-bounds read in Tibetan text handling in Chromium/Google Chrome. Connected advisories confirm the issue affects Chromium components and was addressed by later Chromium updates (e.g., openSUSE openSUSE-SU-2012:0656-1) with a security fix in version around 21.0.1145...

CVE-2011-3096

CVE-2011-3096 is a use-after-free in Chromium’s GTK omnibox handling. The issue affects Chromium components (GTK omnibox) and can allow remote attackers to cause a denial of service and possibly other impact. Connected advisories confirm CVE-2011-3096 among multiple Chromium/V8 vulnerabilities, a...

CVE-2011-3115

CVE-2011-3115 concerns Google Chrome/Chromium’s V8 engine with a type corruption flaw. Affected: Chromium/V8 components (Chromium browser and V8 JavaScript engine). Root cause: type corruption in V8 leading to potential remote denial of service and other impact. Exploitation details are not provi...

CVE-2012-2880

CVE-2012-2880 corresponds to a Chrome/Chromium race condition in the plug-in paint buffer that could lead to DoS or other impact. Connected sources confirm Chromium/Chrome were updated to a fixed version; Gentoo GLSA-201210-07 specifies upgrading to Chromium 22.0.1229.94 or newer, and openSUSE/Op...

CVE-2012-5117

CVE-2012-5117 affects Google Chrome prior to 23.0.1271.64. The vulnerability stems from insufficient restrictions when loading an SVG subresource within an IMG element, with unspecified impact described in the CVE entry. OpenVAS and related advisories group CVE-2012-5117 among multiple Chromium/C...

CVE-2012-5125

CVE-2012-5125 affects Google Chrome/Chromium prior to 23.0.1271.64, via a use-after-free in handling of extension tabs. The OpenVAS/GLSA entries enumerate this CVE among a suite of Chromium/V8 issues with base CVSS 7.5 (HIGH) and a network attack vector with no user interaction required. The core...

CVE-2012-5147

CVE-2012-5147 is a use-after-free in Google Chrome’s DOM handling prior to 24.0.1312.52. Affected: Chrome (versions before 24.0.1312.52). Root cause: use-after-free in DOM processing can be triggered remotely. Impact: remote denial of service and possibly other unspecified effects. Public referen...

CVE-2013-0833

CVE-2013-0833 is an open Chrome/Chromium vulnerability described as an out-of-bounds read in the printing path that could lead to a denial of service. The CVE is listed in openSUSE security updates (openSUSE-SU-2013:0236-1) as part of a Chromium patch set, and appears among Gentoo/Gentoo GLSA and...

CVE-2013-0881

CVE-2013-0881 affects Google Chrome prior to 25.0.1364.97 on Windows/Linux and prior to 25.0.1364.99 on macOS. The vulnerability arises from an incorrect read operation in the Matroska container handling, which can allow a remote attacker to trigger a denial of service. Affected component: Chrome...

CVE-2013-0910

CVE-2013-0910 affects Google Chrome and Chromium where versions prior to 25.0.1364.152 are vulnerable. The issue arises from improper coordination between the browser process and renderer processes during plugin loading, enabling a remote attacker to bypass intended access restrictions via a bloc...

CVE-2013-0926

CVE-2013-0926 affects Google Chrome prior to 26.0.1410.43. The issue arises when copying and pasting active content in an EMBED element, enabling a user‑assisted remote attacker to trigger an unspecified impact on a crafted site. The provided documents do not specify a confirmed impact or a patch...

CVE-2013-2841

Chromium before version 27.0.1453.93 is affected by CVE-2013-2841 due to a use-after-free vulnerability in the Pepper resources handling. The issue could allow a remote attacker to cause a denial of service or potentially other unspecified impacts via vectors related to Pepper resources. Public a...

CVE-2013-6635

CVE-2013-6635 is a use-after-free in the editing code path of Chromium/Blink (as shipped in Google Chrome prior to 31.0.1650.63). The connected openSUSE advisories confirm this issue within the Chromium browser and show the fix as part of a Chromium 31.0.1650.63 stable update. Remediation per ope...

CVE-2013-6653

The CVE-2013-6653 entry refers to a use-after-free in Chromium/Chrome’s web contents color chooser, leading to potential remote DoS or unspecified impact. Affected product: Google Chrome/Chromium browser (WebContents/color chooser component). Root cause: use-after-free in the color chooser handli...

CVE-2014-1746

CVE-2014-1746 affects Google Chrome/Chromium prior to version 35.0.1916.114. The flaw is in InMemoryUrlProtocol::Read (media/filters/in_memory_url_protocol.cc), where an insufficiently large integer data type enables a remote attacker to trigger an out-of-bounds read, potentially causing a denial...

CVE-2014-3803

CVE-2014-3803 affects Blink’s SpeechInput feature in Chrome/Chromium, enabling activation of microphone and eavesdropping on speech-input text without user consent via an INPUT element with -x-webkit-speech. Ubuntu USN-2298-1 confirms the issue in Blink and notes a security advisory; the risk is ...

CVE-2014-7905

CVE-2014-7905 affects Google Chrome prior to 39.0.2171.65 on Android, where navigation to a URL could be allowed from intents lacking CATEGORY_BROWSABLE, bypassing access restrictions. The vulnerability was fixed in Chrome 39.0.2171.65 (and associated security updates in openSUSE/OpenChromium adv...

CVE-2014-7941

CVE-2014-7941 affects Google Chrome up to version 40.0.2214.91. The UI component SelectionOwner::ProcessTarget in ui/base/x/selection_owner.cc uses an incorrect data type for a length value, enabling remote attackers to trigger an out-of-bounds read via crafted X11 data and cause a denial of serv...

CVE-2014-9646

Technical details for CVE-2014-9646 are not publicly provided in the connected documents. Monitor for updates.

CVE-2015-1359

CVE-2015-1359 concerns Google Chrome/Chromium PDFium, where multiple off-by-one errors in fpdfapi/fpdf_font/font_int.h (PDF rendering) during processing of crafted PDFs can cause a denial of service (buffer overflow) or related impact. The vulnerability is tied to Chrome builds before 40.0.2214.9...

CVE-2020-15996

CVE-2020-15996 is a use-after-free in passwords within Google Chrome prior to 86.0.4240.99, allowing a remote attacker who has compromised the renderer process to potentially perform a sandbox escape via a crafted HTML page. The issue affects Chrome’s password handling in the renderer; the root c...

CVE-2024-7020

CVE-2024-7020 affects Google Chrome (Autofill) via an incorrect UI handling in Chromium before 124.0.6367.60. A remote attacker could induce UI spoofing by a crafted HTML page; CVSS indicates network attack vector, low impact to confidentiality/integrity, with user interaction required and UI acc...

CVE-2025-12432

This CVE-2025-12432 describes a race in Google's V8 engine within Chrome prior to version 142.0.7444.59 that could lead to heap corruption via a crafted HTML page. Multiple connected sources corroborate the issue and identify the affected component as Chrome/Chromium’s V8 handling of HTML content...

CVE-2025-8580

CVE-2025-8580 involves an inappropriate implementation in Chrome/Chromium’s Filesystems prior to version 139.0.7258.66 , allowing a remote attacker to perform UI spoofing via a crafted HTML page. The reported impact is low (as per Chromium’s security metrics) with network attack vector, requiring...

CVE-2026-0901

CVE-2026-0901 affects Blink in Google Chrome on Android prior to 144.0.7559.59, enabling UI spoofing via a crafted HTML page. Connected sources indicate Chromium/Chromium-derived builds (e.g., 144.0.7559.59) have fixes, and Debian/Fedora advisories corroborate that versions around 144.0.7559.59 a...

CVE-2026-10009

CVE-2026-10009: Integer overflow in Skia within Google Chrome (pre-148.0.7778.216). An attacker who compromised the renderer could run arbitrary code in the sandbox via a crafted HTML page. Affected component: Skia in Chromium-based Chrome; impact: remote code execution with sandbox escape; statu...

CVE-2026-10890

CVE-2026-10890 is a Use after Free in Cast in Google Chrome prior to 149.0.7827.53, enabling heap corruption via malicious network traffic on a local network segment. Affected feature: Cast in Chrome; root cause: use-after-free. Impact: potential heap corruption with high severity (CRITICAL). Goo...

CVE-2026-10948

CVE-2026-10948 describes a use-after-free in WebRTC affecting Google Chrome up to 149.0.7827.53 . The vulnerability allows a remote attacker to execute arbitrary code inside Chrome’s sandbox via a crafted HTML page. The impact is described as high severity with possible full compromise of the san...

CVE-2026-11020

CVE-2026-11020 concerns Google Chrome (Chromium-based) extensions. The initial description and connected advisories confirm an inappropriate implementation in Extensions that could allow a remote attacker to leak cross-origin data via a crafted XML file. The vulnerability is tied to Chrome versio...

CVE-2026-11216

CVE-2026-11216 concerns Google Chrome (Chromium-based) with an incorrect security UI in the File Input. The description states a remote attacker could convince a user to perform specific UI gestures on a crafted HTML page to achieve UI spoofing. The impact is UI spoofing via the file input UI, wi...

CVE-2026-11248

The CVE covers an issue described as an inappropriate implementation in Google Lens within Google Chrome, before version 149.0.7827.53, allowing a remote attacker to bypass navigation restrictions via a crafted HTML page. The vulnerability affects Chrome/Lens behavior and is tagged with low Chrom...

CVE-2026-11252

Technical details (affected product, versions, root cause, impact and exploit specifics) are not publicly available in the provided documents. Monitor updates from Chromium/Chrome advisories and associated ENISA/CVE sources for new information.

CVE-2026-11267

CVE-2026-11267 affects Google Chrome extensions. The root cause is insufficient policy enforcement in Chrome Extensions , allowing a user-witchedupler to bypass the site/content security policy when a malicious extension is installed. Affected component is the Chrome extension framework, with imp...

CVE-2026-11644

CVE-2026-11644 describes a use-after-free in the Views component of Google Chrome on Linux, allowing code execution via a crafted Chrome Extension when a user is convinced to install a malicious extension. Affected software: Google Chrome (Linux) with the vulnerable Views code path. Root cause: u...

CVE-2026-12467

CVE-2026-12467 corresponds to a use-after-free in Google Chrome Extensions, allowing a remote attacker who has compromised the renderer process to potentially escape the sandbox via a crafted HTML page. Affected software: Google Chrome prior to version 149.0.7827.155 (Extensions component, render...

CVE-2026-13787

The CVE-2026-13787 entry concerns a use-after-free condition in Chromoting within Google Chrome on Windows, prior to version 150.0.7871.47 . This memory corruption issue enables a remote attacker to execute arbitrary code via malicious network traffic, as indicated by the NVD/Chromium advisories ...

CVE-2026-13813

Summary: CVE-2026-13813 concerns Chrome for iOS where insufficient policy enforcement in the renderer allowed a sandbox escape via a crafted HTML page after renderer compromise. The issue affects Google Chrome on iOS before version 150.0.7871.47 (Chromium security severity: High). Root cause / vu...

CVE-2026-13877

CVE-2026-13877 involves insufficient validation of untrusted input in ANGLE used by Google Chrome before version 150.0.7871.47. The issue allows a remote attacker who has already compromised the renderer process to potentially read sensitive data from process memory through a crafted HTML page. T...

CVE-2026-14004

The CVE-2026-14004 entry corresponds to Google Chrome’s CSS handling, where an inappropriate implementation in CSS allowed a remote attacker to leak cross-origin data via a crafted HTML page. Affected product: Chrome/Chromium before 150.0.7871.47. Root cause: faulty CSS implementation enabling cr...

CVE-2026-14009

The vulnerability CVE-2026-14009 affects Google Chrome (Passwords component) due to an inappropriate implementation, enabling remote exploitation to potentially cause heap corruption via a crafted HTML page. Affected builds are prior to 150.0.7871.47; the issue is described with a Chromium severi...