CVE-2010-3120

WebKit/Chrome CVE-2010-3120 affects Google Chrome prior to version 5.0.375.127, where the Geolocation implementation is insecure due to an improper handling, allowing remote attackers to cause a denial of service (memory corruption) or possibly other unspecified impact via unknown vectors. The vu...

CVE-2010-3252

Affected product: Google Chrome (pre-6.0.472.53). The issue is a use-after-free in the Notifications presenter, leading to denial of service or possibly other impacts via unknown vectors. Root cause is a use-after-free error in the Notifications presenter component. Impact is described as denial ...

CVE-2010-4205

CVE-2010-4205 affects Google Chrome prior to 7.0.517.44, where improper handling of the data types of event objects can allow remote attackers to cause a denial of service or potentially other impact via unknown vectors. The provided documents do not include a vendor fix/patch information or conc...

CVE-2010-4488

CVE-2010-4488 affects Google Chrome before 8.0.552.215, which does not properly handle HTTP proxy authentication, allowing remote attackers to cause a denial of service (application crash) via unspecified vectors. The connected OpenVAS entries reference Google Chrome multiple vulnerabilities from...

CVE-2011-0780

CVE-2011-0780 affects Google Chrome prior to 9.0.597.84, where the PDF print workflow interacts improperly with print operations, allowing user‑assisted remote attackers to cause a denial of service (application crash) or potentially other impact via unknown vectors. Affected component: PDF event...

CVE-2011-1112

Google Chrome (before 9.0.597.107) is affected by an SVG rendering issue that allows remote attackers to cause a denial of service (application crash) or potentially other impact via unknown vectors. Public sources in the connected documents reference the vulnerability as a set of multiple CVEs i...

CVE-2011-1300

The CVE-2011-1300 entry affects ANGLE’s WebGLES library (libGLESv2.dll) used by Mozilla Firefox 4.x on Windows and by Chrome’s GPU process, due to an off-by-three error in Program::getActiveUniformMaxLength. This allows remote code execution via unspecified vectors. Public sources indicate Chrome...

CVE-2011-1450

CVE-2011-1450 concerns Google Chrome prior to 11.0.696.57, where the browser mishandles file dialogs, allowing remote attackers to trigger a denial of service or potentially other impact via dangling pointers. The vulnerability is tied to the Chrome 11.0.696.57 release which fixes multiple issues...

CVE-2011-3055

CVE-2011-3055 affects Chromium/Chrome prior to versions adopting the OpenSUSE patch, where the browser’s native UI could prompt for an unpacked extension installation without user confirmation, enabling user-assisted remote execution via a crafted extension. Connected advisories confirm the issue...

CVE-2011-3094

CVE-2011-3094 refers to an out-of-bounds read in Tibetan text handling in Chromium/Google Chrome. Connected advisories confirm the issue affects Chromium components and was addressed by later Chromium updates (e.g., openSUSE openSUSE-SU-2012:0656-1) with a security fix in version around 21.0.1145...

CVE-2011-3096

CVE-2011-3096 is a use-after-free in Chromium’s GTK omnibox handling. The issue affects Chromium components (GTK omnibox) and can allow remote attackers to cause a denial of service and possibly other impact. Connected advisories confirm CVE-2011-3096 among multiple Chromium/V8 vulnerabilities, a...

CVE-2012-2880

CVE-2012-2880 corresponds to a Chrome/Chromium race condition in the plug-in paint buffer that could lead to DoS or other impact. Connected sources confirm Chromium/Chrome were updated to a fixed version; Gentoo GLSA-201210-07 specifies upgrading to Chromium 22.0.1229.94 or newer, and openSUSE/Op...

CVE-2012-5117

CVE-2012-5117 affects Google Chrome prior to 23.0.1271.64. The vulnerability stems from insufficient restrictions when loading an SVG subresource within an IMG element, with unspecified impact described in the CVE entry. OpenVAS and related advisories group CVE-2012-5117 among multiple Chromium/C...

CVE-2012-5125

CVE-2012-5125 affects Google Chrome/Chromium prior to 23.0.1271.64, via a use-after-free in handling of extension tabs. The OpenVAS/GLSA entries enumerate this CVE among a suite of Chromium/V8 issues with base CVSS 7.5 (HIGH) and a network attack vector with no user interaction required. The core...

CVE-2012-5147

CVE-2012-5147 is a use-after-free in Google Chrome’s DOM handling prior to 24.0.1312.52. Affected: Chrome (versions before 24.0.1312.52). Root cause: use-after-free in DOM processing can be triggered remotely. Impact: remote denial of service and possibly other unspecified effects. Public referen...

CVE-2013-0833

CVE-2013-0833 is an open Chrome/Chromium vulnerability described as an out-of-bounds read in the printing path that could lead to a denial of service. The CVE is listed in openSUSE security updates (openSUSE-SU-2013:0236-1) as part of a Chromium patch set, and appears among Gentoo/Gentoo GLSA and...

CVE-2013-0881

CVE-2013-0881 affects Google Chrome prior to 25.0.1364.97 on Windows/Linux and prior to 25.0.1364.99 on macOS. The vulnerability arises from an incorrect read operation in the Matroska container handling, which can allow a remote attacker to trigger a denial of service. Affected component: Chrome...

CVE-2013-0910

CVE-2013-0910 affects Google Chrome and Chromium where versions prior to 25.0.1364.152 are vulnerable. The issue arises from improper coordination between the browser process and renderer processes during plugin loading, enabling a remote attacker to bypass intended access restrictions via a bloc...

CVE-2013-0926

CVE-2013-0926 affects Google Chrome prior to 26.0.1410.43. The issue arises when copying and pasting active content in an EMBED element, enabling a user‑assisted remote attacker to trigger an unspecified impact on a crafted site. The provided documents do not specify a confirmed impact or a patch...

CVE-2013-2841

Chromium before version 27.0.1453.93 is affected by CVE-2013-2841 due to a use-after-free vulnerability in the Pepper resources handling. The issue could allow a remote attacker to cause a denial of service or potentially other unspecified impacts via vectors related to Pepper resources. Public a...

CVE-2013-6635

CVE-2013-6635 is a use-after-free in the editing code path of Chromium/Blink (as shipped in Google Chrome prior to 31.0.1650.63). The connected openSUSE advisories confirm this issue within the Chromium browser and show the fix as part of a Chromium 31.0.1650.63 stable update. Remediation per ope...

CVE-2013-6653

The CVE-2013-6653 entry refers to a use-after-free in Chromium/Chrome’s web contents color chooser, leading to potential remote DoS or unspecified impact. Affected product: Google Chrome/Chromium browser (WebContents/color chooser component). Root cause: use-after-free in the color chooser handli...

CVE-2014-1746

CVE-2014-1746 affects Google Chrome/Chromium prior to version 35.0.1916.114. The flaw is in InMemoryUrlProtocol::Read (media/filters/in_memory_url_protocol.cc), where an insufficiently large integer data type enables a remote attacker to trigger an out-of-bounds read, potentially causing a denial...

CVE-2014-3803

CVE-2014-3803 affects Blink’s SpeechInput feature in Chrome/Chromium, enabling activation of microphone and eavesdropping on speech-input text without user consent via an INPUT element with -x-webkit-speech. Ubuntu USN-2298-1 confirms the issue in Blink and notes a security advisory; the risk is ...

CVE-2014-7905

CVE-2014-7905 affects Google Chrome prior to 39.0.2171.65 on Android, where navigation to a URL could be allowed from intents lacking CATEGORY_BROWSABLE, bypassing access restrictions. The vulnerability was fixed in Chrome 39.0.2171.65 (and associated security updates in openSUSE/OpenChromium adv...

CVE-2014-7941

CVE-2014-7941 affects Google Chrome up to version 40.0.2214.91. The UI component SelectionOwner::ProcessTarget in ui/base/x/selection_owner.cc uses an incorrect data type for a length value, enabling remote attackers to trigger an out-of-bounds read via crafted X11 data and cause a denial of serv...

CVE-2014-9646

Technical details for CVE-2014-9646 are not publicly provided in the connected documents. Monitor for updates.

CVE-2015-1359

CVE-2015-1359 concerns Google Chrome/Chromium PDFium, where multiple off-by-one errors in fpdfapi/fpdf_font/font_int.h (PDF rendering) during processing of crafted PDFs can cause a denial of service (buffer overflow) or related impact. The vulnerability is tied to Chrome builds before 40.0.2214.9...

CVE-2020-15996

CVE-2020-15996 is a use-after-free in passwords within Google Chrome prior to 86.0.4240.99, allowing a remote attacker who has compromised the renderer process to potentially perform a sandbox escape via a crafted HTML page. The issue affects Chrome’s password handling in the renderer; the root c...

CVE-2024-7020

CVE-2024-7020 affects Google Chrome (Autofill) via an incorrect UI handling in Chromium before 124.0.6367.60. A remote attacker could induce UI spoofing by a crafted HTML page; CVSS indicates network attack vector, low impact to confidentiality/integrity, with user interaction required and UI acc...

CVE-2025-8580

CVE-2025-8580 involves an inappropriate implementation in Chrome/Chromium’s Filesystems prior to version 139.0.7258.66 , allowing a remote attacker to perform UI spoofing via a crafted HTML page. The reported impact is low (as per Chromium’s security metrics) with network attack vector, requiring...

CVE-2026-0902

CVE-2026-0902 is an issue in V8 used by Google Chrome prior to version 144.0.7559.59, described as an inappropriate implementation that allows a remote attacker to perform an out-of-bounds memory read via a crafted HTML page. Connected feeds show Chromium/Chrome updates delivering a fix (Chromium...

CVE-2026-10012

CVE-2026-10012: Use-after-free in Skia within Google Chrome before 148.0.7778.216 allows a compromised renderer to potentially escape the Chromium sandbox via a crafted HTML page. Affected: Skia component in Chrome (Chromium-based). Root cause: use-after-free bug in Skia identified upstream. Impa...

CVE-2026-10911

CVE-2026-10911 affects Google Chrome's Media handling. The connected EUVD entry and NVD/NVD-derived records describe insufficient validation of untrusted input in Media, enabling a remote attacker who has compromised the renderer process to potentially escape the Chrome sandbox via a crafted HTML...

CVE-2026-10975

CVE-2026-10975 describes a use-after-free in Chrome's WebRTC prior to build 149.0.7827.53, enabling a remote attacker to execute arbitrary code inside Chrome’s sandbox via a crafted HTML page. The vulnerability is labeled High severity with a network attack vector, requiring user interaction. Aff...

CVE-2026-11031

CVE-2026-11031 affects Google Chrome’s Password Manager. The issue is insufficient validation of untrusted input, enabling a remote attacker to trigger UI spoofing via malicious network traffic. Affects Chrome versions prior to 149.0.7827.53 (Chromium security severity: Medium). CVSS v3.1: Base s...

CVE-2026-11076

CVE-2026-11076 is a Type Confusion in CSS in Google Chrome before 149.0.7827.53, allowing a remote attacker to execute arbitrary code in a sandbox via a crafted HTML page. Affected software: Google Chrome (Chromium-based). The underlying issue is a CSS-related type confusion in the browser’s rend...

CVE-2026-11083

CVE-2026-11083 affects Google Chrome’s Password Manager. The vulnerability is described as an Inappropriate implementation in Password Manager that could allow a remote attacker to leak cross-origin data via a crafted HTML page. Affected software is Chrome before 149.0.7827.53. Impact: cross-orig...

CVE-2026-11102

CVE-2026-11102 affects Google Chrome’s Isolated Web Apps in Chromium-based builds, where an inappropriate implementation allowed a remote attacker to run arbitrary code inside a sandbox via a malicious file. The vulnerability is tied to Chrome/Chromium prior to version 149.0.7827.53. The impact i...

CVE-2026-11113

CVE-2026-11113 affects Google Chrome (Chromium-based) ANGLE: insufficient validation of untrusted input may allow a remote attacker, who already compromised the renderer process, to escape the sandbox via a crafted HTML page. The issue is categorized as CRITICAL by multiple sources; attack vector...

CVE-2026-11116

This CVE (CVE-2026-11116) affects Chromoting in Google Chrome before version 149.0.7827.53. The underlying issue is a use-after-free defect in Chromoting, allowing a remote attacker to execute arbitrary code via malicious network traffic. The Microsoft/MSRC and EU/national advisories align on the...

CVE-2026-11224

CVE-2026-11224 describes a use-after-free in Chromoting for Google Chrome on Linux, before version 149.0.7827.53, that enables a remote attacker to execute arbitrary code via malicious network traffic. Chromium marks the severity as Low, but the base metrics show high impact on confidentiality, i...

CVE-2026-11232

CVE-2026-11232 impacts Google Chrome TabGroups. The issue is an inappropriate implementation in TabGroups prior to version 149.0.7827.53, enabling a remote attacker to perform UI spoofing via malicious network traffic. Severity is indicated as Low. No remediation details are provided in the conne...

CVE-2026-11251

CVE-2026-11251 affects Google Chrome’s Password Manager. The root cause is insufficient policy enforcement, allowing a renderer-compromised remote attacker to bypass discretionary access control via a crafted HTML page. Affected software is Chrome prior to version 149.0.7827.53. The available sou...

CVE-2026-11631

CVE-2026-11631 is a Use-after-Free in Aura within Google Chrome on Windows, before build 149.0.7827.103. The root cause is a memory management error in Aura that could allow a compromised renderer process to escape the sandbox via a crafted HTML page, enabling a remote attacker to potentially tak...

CVE-2026-11646

CVE-2026-11646 affects Google Chrome’s ViewTransitions; a use-after-free in that component allows remote code execution in a sandbox via a crafted HTML page. Impact is high (remote, no user interaction required). A fix is available in Chrome 149.0.7827.103 and newer. If exploiting status is unkno...

CVE-2026-11685

CVE-2026-11685 involves an inappropriate implementation in MediaCapture in Google Chrome on macOS, where versions prior to 149.0.7827.103 allow a remote attacker to leak cross-origin data via a crafted HTML page. The issue is scoped to Chrome on Mac and is triggered by processing a crafted HTML p...

CVE-2026-12009

Affected software: Google Chrome on macOS. Vulnerability: Insufficient validation of untrusted input in Accessibility could allow a renderer-compromised attacker to escape the sandbox via a crafted HTML page. Root cause: input validation weakness in Accessibility feature. Impact: potential sandbo...

CVE-2026-12035

CVE-2026-12035 affects Google Chrome on Windows (Views component). Affected: Chrome versions prior to 149.0.7827.115. Root cause: Use-after-free in Views leading to potential heap corruption via a crafted HTML page. Impact: potential remote code execution via heap corruption (per the vulnerabilit...

CVE-2026-12442

The CVE-2026-12442 entry describes a use-after-free in Passwords in Google Chrome on Android before version 149.0.7827.155, allowing a remote attacker to execute arbitrary code via a crafted HTML page (Chromium security severity: Critical). Connected sources confirm this vulnerability affects Chr...