CVE-2011-3107

CVE-2011-3107 affects Google Chrome (and Chromium) prior to 19.0.1084.52, due to improper implementation of JavaScript bindings for plug-ins. This can allow a remote attacker to cause a denial of service (application crash) and possibly other impacts via unknown vectors. The Gentoo GLSA and OpenV...

CVE-2011-3883

CVE-2011-3883 affects Google Chrome before 15.0.874.102. The issue is a use-after-free in counters that can lead to remote denial of service and possibly other impacts. Remediation in public advisories recommends upgrading to Chrome/Chromium version 15.0.874.102 or newer (Chromium 15.x+ as cited ...

CVE-2011-3887

CVE-2011-3887 affects Google Chrome prior to 15.0.874.102; the issue stems from improper handling of javascript: URLs, allowing remote attackers to bypass access restrictions and read cookies via unspecified vectors. Multiple Nessus/OpenVAS entries referencing CVE-2011-3887 corroborate browser-re...

CVE-2011-3954

CWE-2011-3954 affects Google Chrome/Chromium where an attacker could trigger a denial of service by causing excessive database usage, leading to an application crash. The historical description specifies Chrome versions before 17.0.963.46 are vulnerable. Connected documents corroborate a Chromium...

CVE-2012-2844

The CVE-2012-2844 entry corresponds to a vulnerability in Google Chrome’s PDF functionality where JavaScript in a crafted PDF can trigger incorrect object access, enabling a remote attacker to cause a denial of service or possibly unspecified impact. The description specifies affected software as...

CVE-2012-2877

CVE-2012-2877 affects Chromium-based browsers (Chrome/Chromium) with an extension-dialog handling issue that could crash the application. Related advisories show affected versions around Chromium 22.0.1229.x and indicate remediation by upgrading to at least 22.0.1229.94 (or newer 24.x releases in...

CVE-2012-5130

CVE-2012-5130 is an out-of-bounds read in Skia used by Chromium/Chrome, leading to potential DoS. OpenSUSE advisories patch Chromium to 25.0.1343 and list CVE-2012-5130 among several fixes; other connected entries corroborate theSkia-based issue and its remediation via updated Chromium components...

CVE-2012-5151

Affected software: Google Chrome (pre-24.0.1312.52). Vulnerability: Integer overflow in Chrome’s handling of PDFs, exploitable via crafted JavaScript in a PDF document. Impact: Remote attacker could cause a denial of service or possibly other unspecified impact through the crafted PDF code path. ...

CVE-2012-5154

CVE-2012-5154 affects Google Chrome on Windows: an integer overflow in shared memory allocation could cause a denial of service or possibly other impact in versions before 24.0.1312.52. This is documented in the NVD entry and echoed in OpenVAS/NASL entries, but exploitation status is not provided...

CVE-2013-0837

CVE-2013-0837 affects Google Chrome prior to 24.0.1312.52 and is described in OpenSUSE/SU advisories as a crash in extension tab handling. The connected document confirms this specific CVE and notes a patched/openSUSE update (openSUSE-SU-2013:0236-1) addressing Chromium/Chrome components. No expl...

CVE-2013-0887

Chromium-based: CVE-2013-0887 affects Google Chrome prior to 25.0.1364.97 (Windows/Linux) and prior to 25.0.1364.99 (Mac). The developer-tools process does not properly restrict privileges when interacting with a connected server, but the provided documents do not specify impact, attack vectors, ...

CVE-2013-2847

CVE-2013-2847 is a race-condition defect in Chromium/Google Chrome before 27.0.1453.93 (workers implementation) that can cause a denial of service via use-after-free and application crash. Debian/DSA-2695 confirms fixes in Chromium is 27.0.1453.93-1~deb7u1; other entries (e.g., Gentoo GLSA 201309...

CVE-2013-2914

CVE-2013-2914 refers to a use-after-free in the Windows color chooser dialog of Google Chrome prior to 30.0.1599.66. The linked OpenSUSE/OpenVAS advisories confirm this as part of a batch of Chrome security fixes included in Chromium updates to 30.0.1599.66 and 31.x lines. Affected components are...

CVE-2014-1729

CVE-2014-1729 is described in connected records as multiple vulnerabilities in the V8 JavaScript engine (Google Chrome/Chromium) up to version 3.24.35.22, impacting Chrome before 34.0.1847.116. The openSUSE advisory enumerates CVE-2014-1729 among security fixes in Chromium 34.0.1847.116 and notes...

CVE-2014-7934

CVE-2014-7934 describes a use-after-free vulnerability in the Blink DOM implementation used by Google Chrome before 40.0.2214.91. The issue arises from an unexpected absence of document data structures in the DOM, which can lead to a denial of service and possibly other unspecified impacts. The v...

CVE-2015-3335

CVE-2015-3335 affects Google Chrome up to version 42.0.2311.90, where the NaClSandbox::InitializeLayerTwoSandbox function in NaCl sandbox Linux did not apply RLIMIT_AS and RLIMIT_DATA limits to NaCl processes. This could allow a remote attacker to run a crafted program in the NaCl sandbox to enab...

CVE-2016-2844

CVE-2016-2844 affects Blink/WebKit as used in Google Chrome prior to 49.0.2623.75. The issue is an improper determination of when anonymous block wrappers may exist in LayoutBlock.cpp, which can allow remote attackers to trigger a denial of service via an incorrect cast and assertion failure, wit...

CVE-2017-15401

The CVE-2017-15401 entry describes a memory corruption bug in WebAssembly via V8 in Google Chrome prior to 62.0.3202.62, enabling out-of-bounds read/write and remote code execution in the sandbox through a crafted HTML page. Connected sources corroborate the Chrome version boundary and provide pu...

CVE-2025-8583

CVE-2025-8583 : In Google Chrome/Chromium, an inappropriate permissions implementation allowed a remote UI spoofing via a crafted HTML page. Affected product is Chromium-based Chrome; impact is UI spoofing with low severity (CVSS 3.1 base 4.3). Remediation observed in connected docs: updates to C...

CVE-2025-8881

CVE-2025-8881 relates to an inappropriate implementation in Google Chrome’s File Picker prior to 139.0.7258.127. A remote attacker could coax a user to perform specific UI gestures to cause leakage of cross-origin data via a crafted HTML page. The vulnerability is tied to the Chromium/Chrome File...

CVE-2026-10922

CVE-2026-10922 affects Google Chrome’s DevTools prior to 149.0.7827.53. The issue is caused by insufficient validation of untrusted input, allowing a remote attacker to bypass the same-origin policy when a user is induced to perform specific UI gestures in the context of malicious network traffic...

CVE-2026-10975

CVE-2026-10975 describes a use-after-free in Chrome's WebRTC prior to build 149.0.7827.53, enabling a remote attacker to execute arbitrary code inside Chrome’s sandbox via a crafted HTML page. The vulnerability is labeled High severity with a network attack vector, requiring user interaction. Aff...

CVE-2026-11009

CVE-2026-11009 is a use-after-free vulnerability in Chrome’s USB handling on Windows prior to 149.0.7827.53 that could allow a remote attacker to escape the sandbox via a crafted HTML page. The issue is reported for Chromium-based Chrome (severity: Medium) and is treated as a high-severity, high-...

CVE-2026-11021

CVE-2026-11021 : Concrete details across connected docs show that in Google Chrome on Windows prior to 149.0.7827.53, the GPU component suffers from insufficient validation of untrusted input, potentially enabling a remote attacker who has compromised the renderer process to escape the sandbox vi...

CVE-2026-11102

CVE-2026-11102 affects Google Chrome’s Isolated Web Apps in Chromium-based builds, where an inappropriate implementation allowed a remote attacker to run arbitrary code inside a sandbox via a malicious file. The vulnerability is tied to Chrome/Chromium prior to version 149.0.7827.53. The impact i...

CVE-2026-11116

This CVE (CVE-2026-11116) affects Chromoting in Google Chrome before version 149.0.7827.53. The underlying issue is a use-after-free defect in Chromoting, allowing a remote attacker to execute arbitrary code via malicious network traffic. The Microsoft/MSRC and EU/national advisories align on the...

CVE-2026-11118

CVE-2026-11118 : This vulnerability describes a use-after-free in WebRTC in Google Chrome prior to 149.0.7827.53. Exploitation via a crafted HTML page could allow a remote attacker to execute arbitrary code inside the Chrome sandbox. The issue, reported with Chromium as the underlying engine, is ...

CVE-2026-11151

The CVE-2026-11151 entry concerns Google Chrome where the Password Manager component improperly validates untrusted input. A renderer process that has been compromised could be exploited via a crafted HTML page to escape the sandbox. Affected version range is Chrome prior to 149.0.7827.53. The is...

CVE-2026-11169

The CVE-2026-11169 issue affects Google Chrome (Chromium-based) and is described as an inappropriate XML implementation that enables UXSS via a crafted XML file. Affected software is Chrome prior to version 149.0.7827.53. The underlying cause is an improper XML handling path within Chrome/Chromiu...

CVE-2026-11173

CVE-2026-11173 describes an out-of-bounds write in V8 affecting Google Chrome builds prior to 149.0.7827.53. The issue allows a remote attacker who has compromised the renderer process to execute arbitrary code inside a sandbox via a crafted HTML page. Affected component: V8 in Chrome; vulnerabil...

CVE-2026-11182

CVE-2026-11182 involves an inappropriate SVG implementation in Google Chrome before 149.0.7827.53 that could allow a remote attacker to leak cross-origin data via a crafted HTML page. The underlying issue is in the SVG handling within Chromium-based Chromium builds, leading to cross-origin data e...

CVE-2026-11212

The CVE-2026-11212 affects Google Chrome (DevTools) prior to version 149.0.7827.53, where insufficient policy enforcement in DevTools could allow a user- tricked to install a malicious extension to leak cross-origin data. The root cause is policy enforcement gaps in DevTools that enable data exfi...

CVE-2026-11235

The CVE-2026-11235 entry affects Google Chrome (Chromium base) in the Compositing path. Affected component: rendering/ compositor policy enforcement flaw that allowed a remote attacker, who had already compromised the renderer process, to execute arbitrary code inside the sandbox via a crafted HT...

CVE-2026-11250

CVE-2026-11250 concerns Google Chrome DevTools prior to version 149.0.7827.53. The issue is an inappropriate implementation in DevTools that allowed a remote attacker who had already compromised the renderer process to read potentially sensitive data from process memory via a crafted HTML page. P...

CVE-2026-11636

CVE-2026-11636 is a use-after-free in Chrome’s Autofill on Windows prior to 149.0.7827.103, enabling a remote attacker who entices a user to perform specific UI gestures to potentially trigger heap corruption via a crafted HTML page. The issue affects the Chromium-based browser and is addressed i...

CVE-2026-11641

The CVE-2026-11641 entry documents a use-after-free in Bluetooth handling within Google Chrome on Windows to 149.0.7827.103 and earlier. The underlying issue is a use-after-free in Bluetooth code that allows a remote attacker to execute arbitrary code if the user is tricked into performing specif...

CVE-2026-11656

CVE-2026-11656 affects Google Chrome via a Use-after-Free in the ServiceWorker component, enabling a sandbox escape when a user installs a crafted malicious extension. Public descriptions consistently state the vulnerability occurs in Chrome versions prior to 149.0.7827.103. The available sources...

CVE-2026-12445

CVE-2026-12445 : A use-after-free in Google Chrome extensions handling leads to potential heap corruption when a user is persuaded to install a malicious extension. Affected product: Google Chrome (Extensions component). Root cause: use-after-free in the Extensions code path, enabling memory corr...

CVE-2026-13873

CVE-2026-13873 describes an out-of-bounds read in the Layout component of Google Chrome, exploitable via a crafted HTML page to potentially disclose memory contents. Affected software is Google Chrome (Chromium-based). The root cause is an out-of-bounds read in Layout, leading to potential inform...

CVE-2026-13890

CVE-2026-13890 describes an out-of-bounds read in Chromecast within Google Chrome before version 150.0.7871.47. An attacker who already compromised the renderer process could exploit a crafted HTML page to read potentially sensitive information from process memory. The impact is data leakage of m...

CVE-2026-14146

CVE-2026-14146 describes an insecure CSS implementation in Google Chrome prior to 150.0.7871.47. The issue allows a remote attacker to leak cross-origin data through a crafted HTML page, due to an inappropriate CSS implementation. The practical impact is information disclosure of cross-origin dat...

CVE-2026-14385

CVE-2026-14385 : Heap buffer overflow in ANGLE within Google Chrome on macOS prior to 150.0.7871.46 allows a remote attacker to trigger out-of-bounds memory access via a crafted HTML page. The issue affects ANGLE in Chrome and is tied to the macOS build; CVSS v3.1 base score: 8.8 (High). Remediat...

CVE-2026-14417

CVE-2026-14417 affects Dawn in Google Chrome prior to 150.0.7871.46. The issue is a use-after-free in Dawn, enabling a remote attacker to potentially escape the Chrome sandbox via a crafted HTML page. The known remediation is upgrading to Chrome 150.0.7871.46 or later, as reflected in the referen...

CVE-2026-16414

CVE-2026-16414 affects Chromium-based Chrome/Chromium with insufficient validation of untrusted input in Chromecast, enabling potential sandbox escapes via crafted network traffic. Affected versions are prior to 150.0.7871.182 (Chromium security note: High). Public advisories and distro trackers ...

CVE-2026-17711

CVE-2026-17711: Race in Downloads in Google Chrome on macOS (pre-151.0.7922.72). Exploitation requires a compromised renderer and could enable a sandbox escape via a crafted HTML page; rated High/CRITICAL in the provided data. Affected product/version: Google Chrome on Mac before 151.0.7922.72. R...

CVE-2026-17735

Technical details for CVE-2026-17735 are not provided in the supplied documents. Monitor for updates on affected products, versions, impact, and fixes.

CVE-2026-17774

Google Chrome (variations) CVE-2026-17774 involves insufficient validation of untrusted input in Variations, allowing heap corruption via malicious network traffic. Affected are Chrome builds before 151.0.7922.72. The vulnerability requires no user interaction and an adjacent attacker in a privil...

CVE-2026-17777

CVE-2026-17777: Google Chrome autofill in Chromium-based builds prior to 151.0.7922.72 allows a remote attacker to leak cross-origin data via a crafted HTML page. Impact is MEDIUM (CVSS 3.1: 4.3). Attack vector: NETWORK; privileges: NONE; user interaction required; scope: UNCHANGED; confidentiali...

CVE-2026-17813

CVE-2026-17813 describes an issue in Chrome for iOS (Google Chrome on iOS) where insufficient policy enforcement allows a remote attacker to bypass navigation restrictions via a crafted HTML page. Affected product: Chrome for iOS / Google Chrome on iOS. Vulnerable condition: prior to version 151....

CVE-2026-17824

CVE-2026-17824 affects Google Chrome/Chromium ServiceWorker: insufficient policy enforcement allows a remote attacker to bypass same-origin policy via a crafted HTML page. Affected component is the ServiceWorker in Chromium-based browsers; vulnerable versions are before 151.0.7922.72. Root cause:...