CVE-2026-13971

CVE-2026-13971 refers to an uninitialized use in Skia used by Google Chrome prior to 150.0.7871.47. This could allow a remote attacker who already compromised the renderer process to read potentially sensitive data from process memory via a crafted HTML page. Affected software: Google Chrome (Ski...

CVE-2026-13989

Google Chrome is affected by CVE-2026-13989 due to an inappropriate implementation in PageInfo. Before version 150.0.7871.47, a remote attacker who had compromised a renderer process could trigger UI spoofing via a crafted HTML page. The core issue is in PageInfo; impact is limited to UI spoofing...

CVE-2026-14040

Summary (concrete details from provided sources): CVE-2026-14040 is a use-after-free in Chrome’s BrowserTag (prior to version 150.0.7871.47). A device exploited by convincing a user to install a malicious extension could trigger heap corruption via the crafted Chrome Extension. This affects Googl...

CVE-2026-14084

CVE-2026-14084 affects Chromoting in Google Chrome, with the vulnerability present in Chromium components prior to 150.0.7871.47. The issue is described as insufficient validation of untrusted input, allowing a remote attacker to potentially trigger heap corruption via malicious network traffic. ...

CVE-2026-14091

The CVE-2026-14091 entry documents a use-after-free in Chrome’s DevTools before version 150.0.7871.47. The underlying issue is in DevTools handling, allowing a remote attacker to execute arbitrary code inside a sandbox via a crafted HTML page. Affected software is Google Chrome (DevTools componen...

CVE-2026-14101

CVE-2026-14101 affects Google Chrome on macOS before 150.0.7871.47, due to insufficient policy enforcement in the Sandbox component, enabling a renderer-compromised attacker to potentially escape the sandbox via a crafted HTML page. The issue is described across multiple sources (NVD/DEBIAN/RH/EU...

CVE-2026-14389

The provided sources describe a vulnerability in Google Chrome’s Skia: an integer overflow in Skia, prior to Chrome 150.0.7871.46, could allow a remote attacker who has compromised the renderer process to potentially escape the sandbox via a crafted HTML page. Affected component: Skia inside Chro...

CVE-2026-14421

CVE-2026-14421 concerns an uninitialized-use issue in Dawn for Google Chrome on ChromeOS, prior to version 150.0.7871.46. The issue could allow a remote attacker to read potentially sensitive data from process memory via a crafted HTML page. Documents consistently describe the vulnerability as Un...

CVE-2026-16419

CVE-2026-16419 : Out-of-bounds read/write in ANGLE affects Google Chrome on Android (pre-150.0.7871.182). The issue could enable a remote attacker to escape the Chrome sandbox via a crafted HTML page. Connected sources confirm Chromium/Chrome involvement and specify ANGLE as the vulnerable compon...

CVE-2026-17698

CVE-2026-17698: Google Chrome on Android suffers from insufficient validation of untrusted input in the UI, allowing a local attacker to leak cross-origin data via a crafted HTML page. Affected software: Chrome on Android before version 151.0.7922.72. Root cause: insufficient input validation in ...

CVE-2026-17706

CVE-2026-17706 affects Google Chrome on Windows prior to version 151.0.7922.72. The issue is caused by insufficient validation of untrusted input in the Chrome Media component, which allowed a renderer-compromised attacker to leak cross-origin data via a crafted HTML page. The vulnerability was r...

CVE-2026-17715

CVE-2026-17715 concerns Google Chrome Passwords with an inappropriate implementation in Chrome prior to 151.0.7922.72. The flaw allows a remote attacker, via a crafted HTML page and specific UI gestures, to leak cross-origin data. Chromuim security severity is reported as High. The issue affects ...

CVE-2026-17726

CVE-2026-17726 refers to an integer overflow in WebGL inside Google Chrome on Android, before version 151.0.7922.72. The issue could allow a remote attacker to potentially perform a sandbox escape via a crafted HTML page. The CVE’s metrics indicate a network vector with low attack complexity and ...

CVE-2026-17771

The CVE-2026-17771 issue is an uninitialized-use flaw in the Skia component of Google Chrome/Chromium, affecting Chrome versions prior to 151.0.7922.72. The flaw can allow a remote attacker to leak cross-origin data via a crafted HTML page. Upstream reference: Chromium issue 513160525. Remediatio...

CVE-2026-17779

CVE-2026-17779 involves an inappropriate implementation in Chrome/Chromium Site Isolation that allows a remote attacker to bypass site isolation using a crafted HTML page. Affected: Google Chrome/Chromium builds prior to 151.0.7922.72. Upstream fix: update to 151.0.7922.72 or later. Impact: parti...

CVE-2026-17839

In CVE-2026-17839, an inappropriate implementation in Chrome for iOS (Google Chrome on iOS) prior to version 151.0.7922.72 allowed a remote attacker to perform UI spoofing via a crafted HTML page. This vulnerability affects Chrome for iOS on iPhone/iPad and is classified with a Medium severity (C...

CVE-2026-17848

CVE-2026-17848 concerns the Google Chrome/Chromium codecs component where an integer overflow in Codecs could allow a remote attacker to perform a sandbox escape via a crafted video file. Affected: Chrome/Chromium environments using Codecs prior to 151.0.7922.72. The vulnerability arises from ins...

CVE-2026-17909

CVE-2026-17909 affects Google Chrome’s Isolated Web Apps, where insufficient validation of untrusted input could allow a remote attacker to leak cross-origin data through malicious network traffic. The public descriptions consistently reference the issue as a low-severity Chromium-related vulnera...

CVE-2026-17924

CVE-2026-17924: Google Chrome contains a Use-after-free in DNS path affecting Chrome versions prior to 151.0.7922.72. A remote attacker who has compromised the renderer process could potentially perform a sandbox escape via a crafted HTML page. The cited description notes a high-impact outcome (s...

CVE-2026-17948

CVE-2026-17948 affects Google Chrome’s V8 engine prior to version 151.0.7922.72. The issue is a Type Confusion in V8 that could allow an attacker, by convincing a user to install a crafted malicious extension, to execute arbitrary code inside the browser sandbox. Remediation is to upgrade to Chro...

CVE-2026-17982

CVE-2026-17982 affects Google Chrome (Cast) with insufficient validation of untrusted input in Cast, allowing a remote attacker to bypass the same-origin policy via a crafted HTML page. Impact: potential cross-origin issues; severity deemed Low by Chromium. Affected versions are Chrome prior to 1...

CVE-2026-4676

CVE-2026-4676 affects Dawn in Google Chrome up to version 146.0.7680.165. The issue is a use-after-free in Dawn that could allow a remote attacker to potentially perform a sandbox escape via a crafted HTML page. The description specifies a high Chromium security severity. There are no explicit ex...

CVE-2026-79287

CVE-2026-79287 affects Google Chrome (chromium-browser), specifically the Forms component. An observable discrepancy in Forms prior to version 152.0.7977.65 allowed a remote attacker to obtain sensitive information via a crafted HTML page. The CVSS 3.1 score is 5.3 (Medium) , with high attack com...

CVE-2026-7965

Summary : CVE-2026-7965 concerns Google ChromeDevTools. Insufficient validation of untrusted input in DevTools prior to 148.0.7778.96 allows a remote attacker who has compromised the renderer process to leak cross-origin data via a crafted HTML page. Affected software : Google Chrome (DevTools co...

CVE-2026-7999

CVE-2026-7999 affects Google Chrome's V8 engine: an inappropriate implementation allows a remote attacker to read potentially sensitive data from a process's memory via a crafted HTML page. A fix is available in Chrome 148.0.7778.96 and later; update to the patched version. The vulnerability deta...

CVE-2026-8519

CVE-2026-8519: Integer overflow in ANGLE used by Google Chrome on Windows allows a remote attacker to trigger an out-of-bounds write via a crafted HTML page. Affected component: ANGLE integration in Chrome (Windows). Root cause: integer overflow leading to invalid memory access. Impact: potential...

CVE-2026-9112

CVE-2026-9112 involves a use-after-free in the GPU component of Google Chrome on Windows, allowing a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML page. Affected product: Google Chrome (Windows); vulnerable component: GPU code paths; root cause: use-after-free in...

CVE-2026-9898

CVE-2026-9898 affects Google Chrome’s GPU component on Android, with insufficient validation of untrusted input allowing potential sandbox escape if the renderer is compromised via a crafted HTML page. The issue targets Android users running Chrome before build 148.0.7778.216. Google released the...

CVE-2026-9909

The CVE-2026-9909 issue is an integer overflow in Skia used by Google Chrome, leading to remote code execution if a renderer process is compromised via a crafted HTML page. Affected software is Chrome (Skia) prior to 148.0.7778.216. Impact described as arbitrary code execution inside the sandbox ...

CVE-2026-9954

CVE-2026-9954 affects Google Chrome (Chromium TabStrip). A use-after-free in the TabStrip component prior to version 148.0.7778.216 allows a remote attacker to trigger heap corruption by convincing a user to perform specific UI gestures on a crafted HTML page. The vulnerability is documented acro...

CVE-2026-9968

CVE-2026-9968 describes an integer overflow in V8 of Google Chrome, affecting versions prior to 148.0.7778.216. This could allow a remote attacker to execute arbitrary code inside the browser sandbox via a crafted HTML page. Connected documents confirm the issue and cite upstream Chromium trackin...

CVE-2008-7061

Google Chrome tooltip_manager.cc is vulnerable to a denial-of-service via a long title attribute in a tooltip, affecting Chrome 0.2.149.29 Build 1798 and possibly earlier versions before 0.2.149.30. The issue arises because the long TITLE is not properly handled when displaying a tooltip, leading...

CVE-2010-1231

Affected software: Google Chrome prior to 4.1.249.1036 (Windows). Root cause: Chrome processes HTTP headers before invoking SafeBrowsing, enabling remote attackers to induce an unspecified impact via crafted headers. Exploitation status: not provided in the documents; in-the-wild details are not ...

CVE-2010-1233

Google Chrome before 4.1.249.1036 is affected by multiple integer overflows in WebKit JavaScript objects, allowing remote attackers to trigger unspecified impact via network vectors. The vulnerability is confirmed in the CVE-2010-1233 record and is treated as a concrete Chrome/WebKit issue in rel...

CVE-2010-1235

CVE-2010-1235 affects Google Chrome prior to 4.1.249.1036. The vulnerability is described as an unspecified issue enabling remote attackers to trigger the omission of the download warning dialog; vectors are unknown. Connected sources also reference multiple Chrome vulnerabilities in the same era...

CVE-2010-5069

Summary of CVE-2010-5069 (Chrome): The CSS implementation in Google Chrome (noted for version 4) fails to properly handle the :visited pseudo-class, enabling remote attackers to infer visited web pages through a crafted HTML document. The vulnerability is described as an information disclosure, w...

CVE-2011-0470

Google Chrome before 8.0.552.237 and Chrome OS before 8.0.552.344 are affected by a vulnerability in handling extensions notifications that can be exploited to crash the application (denial of service). The provided documents state the issue but do not give explicit exploitation details or a conf...

CVE-2011-1112

Google Chrome (before 9.0.597.107) is affected by an SVG rendering issue that allows remote attackers to cause a denial of service (application crash) or potentially other impact via unknown vectors. Public sources in the connected documents reference the vulnerability as a set of multiple CVEs i...

CVE-2011-1793

CVE-2011-1793 affects Google Chrome (WebKit/WebCore) via the SVG handling path in RenderSVGResourceFilter.cpp. A crafted SVG document can trigger a crash or unspecified impact due to a stale pointer, in Chrome versions prior to 11.0.696.65. Affected component: WebCore/RenderSVGResourceFilter.cpp....

CVE-2011-2802

CVE-2011-2802 : Google Chrome’s V8 engine (pre-13.0.782.107) fails to perform const lookups correctly, enabling a crafted website to crash the browser (DoS) and potentially other unspecified impacts. Affected product: Google Chrome (V8 engine). Root cause: incorrect handling of const lookups in V...

CVE-2011-2805

CVE-2011-2805 is a WebKit-related cross-origin scripting issue documented in OpenVAS entries for Safari/WebKit. The vulnerability arises from a cross-origin handling flaw in URLs with embedded usernames, enabling cross-site scripting when rendering or processing such URLs within affected WebKit-b...

CVE-2011-2836

CVE-2011-2836 (Google Chrome): Affects Google Chrome prior to 14.0.835.163. The issue arises because Chrome does not require Infobar interaction before using the Windows Media Player plug‑in, enabling remote attackers to cause an unspecified impact via crafted Flash content. The CVSSv2 base score...

CVE-2011-2844

Technical details (affected component, root cause, and remediation) for CVE-2011-2844 are not provided in the connected documents; public details appear limited to the initial description. Monitor for updates from referenced advisories and OpenVAS entries.

CVE-2011-3041

CVE-2011-3041 is a use-after-free vulnerability in class attribute handling within Chromium/Chrome components. The openSUSE security update (openSUSE-SU-2012:0374-1) explicitly lists High CVE-2011-3041 and attributes the issue to use-after-free in class attribute handling, with remediation in the...

CVE-2011-3074

Technical details about CVE-2011-3074 are not publicly available in the provided connected documents. The supplied sources do not specify affected products, versions, impact, or fixes for this CVE.

CVE-2011-3092

CVE-2011-3092 : The Google V8 regex implementation (as used by Google Chrome prior to 19.0.1084.46) contains an invalid write in the regex engine, enabling a remote attacker to cause a denial of service. The description notes possible unspecified additional impact; no exploit vectors are detailed...

CVE-2011-3093

CVE-2011-3093 is an out-of-bounds read in glyph handling within Chromium/V8. The OpenSUSE advisory openSUSE-SU-2012:0656-1 patches Chromium to a newer version (e.g., 21.0.1145 and later), addressing this and related CVEs. Other entries (Gentoo/GISSA etc.) group CVE-2011-3093 with multiple Chromiu...

CVE-2011-3097

The CVE-2011-3097 issue affects Google Chrome’s PDF functionality prior to version 19.0.1084.46. It is due to an out-of-bounds write in the implementation of sampled functions, enabling remote attackers to cause a denial of service and potentially other impacts. Public documents in the connected ...

CVE-2011-3100

Chromium/OpenSUSE advisory coverage confirms CVE-2011-3100: an out-of-bounds read in drawing dash paths in Chromium’s rendering code, potentially enabling remote denial of service. The OpenSUSE/OpenVAS entries map CVE-2011-3100 to a Chromium/v8 family set and indicate an update to Chromium around...

CVE-2011-3107

CVE-2011-3107 affects Google Chrome (and Chromium) prior to 19.0.1084.52, due to improper implementation of JavaScript bindings for plug-ins. This can allow a remote attacker to cause a denial of service (application crash) and possibly other impacts via unknown vectors. The Gentoo GLSA and OpenV...