CVE-2024-11112

CVE-2024-11112 is a use-after-free in Media in Google Chrome (Chromium) on Windows, allowing potential heap corruption via a crafted HTML page. Connected advisories confirm affected Chromium/Chrome packages across distros and provide patches: Debian fixed chromium at 131.0.6778.85-1~deb12u1; Fedo...

CVE-2024-6775

CVE-2024-6775 describes a use-after-free in Media Stream within Google Chrome, before version 126.0.6478.182, that could allow a remote attacker to trigger heap corruption via a crafted HTML page when a user engages in specific UI gestures. Affected product: Google Chrome (Chromium base). Root ca...

CVE-2024-6777

A Use after free vulnerability in the Navigation component of Google Chrome (prior to version 126.0.6478.182 ) allows an attacker who convinces a user to install a malicious extension to potentially exploit heap corruption via a crafted Chrome Extension . While the CVSS 3.1 score is 6.5 (Medium),...

CVE-2024-8193

The CVE-2024-8193 entry applies to Google Chrome/Chromium with Skia. Affected: Chrome prior to 128.0.6613.113; vulnerability: heap buffer overflow in Skia, exploitable by a remote attacker who has compromised the renderer process to trigger heap corruption via a crafted HTML page. Impact: high co...

CVE-2019-5787

CVE-2019-5787 is a use-after-free in the Canvas component of Chromium-based Chrome/Blink (pre-73.0.3683.75). The issue allows a remote attacker to potentially trigger heap corruption via a crafted HTML page. Connected sources also describe related CVEs (5788–5799) in FileAPI, WebMIDI, V8, PDFium,...

CVE-2019-5832

CVE-2019-5832 affects Chromium/Chrome: an error in the Cross-Origin Resource Sharing (CORS) handling exposes cross-origin data when a crafted HTML page is loaded. Root cause: CORS-related flaw in Chromium’s policy enforcement. Impact stated as information disclosure via cross-origin leaks. Remedi...

CVE-2020-6489

CVE-2020-6489 corresponds to an inappropriately implemented behavior in Google Chrome’s developer tools prior to 83.0.4103.61. The issue is described as an implementation error in the developer tools component, enabling a remote attacker who tricks a user into performing certain actions on a craf...

CVE-2022-0603

CVE-2022-0603 is a Use‑After‑Free in Chrome OS File Manager affecting Google Chrome/Chromium. Root cause: use-after-free in the File Manager component, enabling a remote attacker to potentially trigger heap corruption via a crafted HTML page. Affected software version: Chrome OS builds prior to 9...

CVE-2022-0799

Technical details for CVE-2022-0799 are not publicly provided in the connected documents. Please monitor for updates from official advisories.

CVE-2026-76042

Google Chrome versions prior to 151.0.7922.169 are vulnerable to a memory disclosure issue caused by the use of uninitialized resources in the GPU . A remote attacker who has already compromised the renderer process can exploit this by using a crafted HTML page to read memory outside the sandbox ...

CVE-2019-5842

CVE-2019-5842: Use-after-free in Blink within Google Chrome prior to 75.0.3770.90 (Chrome/Chromium). Affected component is Blink/WebKit; underlying issue reported as a memory handling bug leading to potential heap corruption. Public details across connected documents indicate fixed/updated Chromi...

CVE-2020-6493

CVE-2020-6493: A use-after-free in Chrome’s WebAuthentication component (older than 83.0.4103.97) could allow a remote attacker who compromises the renderer to escape the sandbox via a crafted HTML page. Affected product is Google Chrome. The issue is fixed in 83.0.4103.97 (upstream); Debian/Arch...

CVE-2024-7967

CVE-2024-7967 is a heap buffer overflow in Google Chrome’s Fonts implementation (Chromium) prior to 128.0.6613.84. The vulnerability could permit remote exploitation via a crafted HTML page, with impact described as high confidentiality/integrity/availability. Several connected documents corrobor...

CVE-2019-5869

CVE-2019-5869 : Use-after-free in Blink in Google Chrome/Chromium before 76.0.3809.132 allows a remote attacker to potentially exploit heap corruption via a crafted HTML page. Mitigation endorsed by multiple vendors: update to patched Chrome/Chromium builds (e.g., Chrome 76.0.3809.132 or later; D...

CVE-2020-6438

CVE-2020-6438 : A policy enforcement error in Chrome extensions prior to 81.0.4044.92 could allow a user-assisted attacker to obtain potentially sensitive information from process memory by convincing a user to install a crafted malicious extension. Affected software: Google Chrome (extensions su...

CVE-2020-6475

CVE-2020-6475 concerns Google Chrome/Chromium: an incorrect implementation in full screen mode allowed a remote attacker to spoof the security UI via a crafted HTML page. Affected versions prior to the fix were Chrome/Chromium releases up to 83.0.4103.61. The issue is categorized under content sp...

CVE-2021-30535

CVE-2021-30535: A double-free in the ICU component of the Chromium browser (Chromium/Google Chrome) before version 91.0.4472.77. The linked connected documents confirm the root cause as a double-free in ICU, enabling a remote attacker to potentially perform heap corruption and, per the consolidat...

CVE-2022-1477

CVE-2022-1477 is a use-after-free in Vulkan found in Google Chrome prior to 101.0.4951.41, potentially enabling heap corruption via a crafted HTML page. The incident is documented in the Chrome stable-channel release notes and related advisories, which indicate this was part of a broader set of C...

CVE-2019-5813

CVE-2019-5813 is an out-of-bounds read vulnerability in the V8 JavaScript engine of Chromium/Google Chrome, present in versions prior to 74.0.3729.108. The issue is rooted in the V8 component and could enable information disclosure or heap-related effects as described in vendor advisories. Remedi...

CVE-2020-6526

CVE-2020-6526 affects Google Chrome before 84.0.4147.89. An inappropriate implementation in the iframe sandbox could allow a remote attacker to bypass navigation restrictions via a crafted HTML page. Public references in Debian and FreeBSD advisories align with a fixed version around 84.0.4147.89...

CVE-2023-0472

CVE-2023-0472 is a Chrome/WebRTC use-after-free vulnerability affecting Google Chrome prior to 109.0.5414.119. The issue, described as a use-after-free in WebRTC that could enable a remote attacker to cause heap corruption via a crafted HTML page, is rated High severity (CVSS 3.1: 8.8). The Chrom...

CVE-2019-5795

CVE-2019-5795 is an integer overflow in the PDFium component of Google Chrome/Chromium prior to 73.0.3683.75. A crafted PDF file could trigger out-of-bounds memory access. Public sources confirm the PDFium overflow issue; Debian and Arch advisories indicate the fix is in 73.0.3683.75. Remediation...

CVE-2020-6476

The CVE-2020-6476 entry concerns Google Chrome prior to 83.0.4103.61, where an insufficient policy enforcement in the tab strip could allow an attacker—who convinces a user to install a malicious extension—to bypass navigation restrictions via that extension. Affected component: tab strip policy ...

CVE-2022-0972

CVE-2022-0972 affects Google Chrome extensions and is caused by a use-after-free in the Extensions component prior to version 99.0.4844.74, potentially enabling heap corruption via a crafted HTML page if a user installs a malicious extension. The Chrome update (99.0.4844.74) mitigates this by app...

CVE-2022-1478

CVE-2022-1478 is a use-after-free vulnerability in SwiftShader within Google Chrome (Chromium-based) prior to 101.0.4951.41. The issue could allow a remote attacker to potentially cause heap corruption via a crafted HTML page. The Chrome release notes confirm a fix in Chrome 101.0.4951.41 (and Ch...

CVE-2019-5792

CVE-2019-5792 : An integer overflow in the PDFium component of Chromium/Google Chrome before 73.0.3683.75 allows remote attackers to potentially cause out-of-bounds memory access via a crafted PDF file. Affected product: Chromium/Chrome (PDFium). Root cause: integer overflow in PDFium. Impact: re...

CVE-2019-5799

CVE-2019-5799 is a CSP bypass in Chromium/Google Chrome via blob URLs, affecting versions before 73.0.3683.75. Root cause: content security policy bypass in CSP handling for blob URLs. Impact: remote attacker could bypass CSP and access restricted content. Remediation: upgrade to Chromium/Chrome ...

CVE-2019-5838

CVE-2019-5838 : Insufficient policy enforcement in Chrome extensions API allowed a user-went-through-a-malicious-extension attack to bypass file URI restrictions. Affected: Google Chrome/Chromium prior to 75.0.3770.80. Impact is that a crafted extension could enable access to file URIs that shoul...

CVE-2022-1641

CVE-2022-1641 is a use-after-free in Web UI Diagnostics affecting Google Chrome/Chromium on Chrome OS and related Chromium builds. The underlying issue permits heap corruption via specific user interactions, with a High severity (CVSS v3.1 base score 8.8; Privileges None; User interaction require...

CVE-2023-5218

CVE-2023-5218: Use-after-free in Chrome/Chromium Site Isolation before 118.0.5993.70 can allow a remote attacker to cause heap corruption via a crafted HTML page. Affected: Google Chrome/Chromium (Chromium-derived). Impact as stated: high/critical. Root cause: use-after-free in Site Isolation log...

CVE-2024-7974

CVE-2024-7974 affects Google Chrome/Chromium via Insufficient data validation in the V8 API, enabling potential heap corruption from a crafted Chrome Extension. Affected versions are Chrome before 128.0.6613.84 (Chromium/Chromium-derived builds). Debian security advisory confirms fixed in Chromiu...

CVE-2025-6554

A type confusion vulnerability exists in the V8 JavaScript engine used by Google Chrome (prior to version 138.0.7204.96 ). The root cause is a flaw in the Temporal Dead Zone (TDZ) check mechanism when handling the optional chaining operator (?.). Specifically, when using delete x?.[y]?.a, V8 fail...

CVE-2019-5809

CVE-2019-5809 is a use-after-free in Blink/WebKit affecting Chromium-based browsers, specifically in the file chooser path. The vulnerability allows a remote attacker who has already compromised the renderer process to escalate privileges via a crafted HTML page. Technical details across connecte...

CVE-2022-2295

A type confusion vulnerability exists in the V8 engine of Google Chrome (and the chromium package) prior to version 103.0.5060.114 . A remote attacker can exploit this flaw to cause heap corruption by serving a crafted HTML page to the victim. The vulnerability is listed in the CISA Known Exploit...

CVE-2023-5475

The CVE-2023-5475 issue is an Inappropriate implementation in DevTools of Google Chrome up to version 118.0.5993.70, allowing a user-assisted attacker who installs a crafted malicious extension to bypass discretionary access control. Impact: potential high integrity via extension-based bypass; ex...

CVE-2020-6441

CVE-2020-6441 affects Chromium/Google Chrome prior to version 81.0.4044.92 and is described as an insufficient policy enforcement issue in the omnibox component, allowing a remote, crafted HTML page to bypass the security UI. Public advisories confirm the vulnerability as a policy‑enforcement err...

CVE-2020-6451

CVE-2020-6451 is a use-after-free vulnerability in Chrome/Chromium’s WebAudio implementation, prior to version 80.0.3987.162. The issue can allow a remote attacker to potentially cause heap corruption and execute arbitrary code through a crafted HTML page. Public reports across multiple feeds (Ar...

CVE-2022-2156

CVE-2022-2156 is a Google Chrome vulnerability: Use-after-free in Core leading to potential heap corruption via a crafted HTML page, affecting Chrome before 103.0.5060.53. Debian reports the fix in chromium 103.0.5060.53-1~deb11u1, and Fedora updates Chromium to 103.0.5060.114-1.fcXX, indicating ...

CVE-2024-7536

CVE-2024-7536 affects Chromium-based browsers (Google Chrome/Chromium) via a use-after-free in the WebAudio module, enabling potential heap corruption from a crafted HTML page. Affected versions are Chrome/Chromium before 127.0.6533.99; impact is high (C/H, I/H, A/H) with network access and user ...

CVE-2026-19137

A use-after-free vulnerability exists in WebGL within Google Chrome on Android (prior to version 151.0.7922.109 ) and Chromium . A remote attacker who has already compromised the renderer process can exploit this flaw via a crafted HTML page to potentially achieve a sandbox escape . The Chromium ...

CVE-2019-5803

CVE-2019-5803 affects Google Chrome/Chromium prior to 73.0.3683.75. The issue is an insufficent Content Security Policy enforcement in Chrome’s CSP implementation, enabling a CSP bypass via crafted HTML content (including CSP bypass with Javascript URLs and related vectors cited in connected sour...

CVE-2022-0809

CVE-2022-0809: Out-of-bounds memory access in WebXR on Chromium-based browsers (Chrome/Chromium) before version 99.0.4844.51 can enable heap corruption via a crafted HTML page. The vulnerability affects WebXR-related code paths in Chromium/WebKit/Blink. Impact is remote code execution/compromise ...

CVE-2022-1483

CVE-2022-1483 concerns a heap buffer overflow in WebGPU within Google Chrome/Chromium prior to 101.0.4951.41. The issue could allow a remote attacker who gains renderer process access to trigger heap corruption via a crafted HTML page. Affected software includes Chrome/Chromium and related builds...

CVE-2025-5280

A high-severity out of bounds write vulnerability exists in the V8 engine of Google Chrome prior to version 137.0.7151.55 . A remote attacker can exploit this flaw via a crafted HTML page to cause heap corruption , which may lead to arbitrary code execution or service interruptions. This issue af...

CVE-2014-0497

CVE-2014-0497 is an Adobe Flash Player integer underflow vulnerability affecting multiple platforms (Windows/macOS/Linux) that enables remote code execution via unspecified vectors. The initial description confirms the affected version ranges (pre-11.7.700.261/11.8.x–12.x pre-12.0.0.44 on Windows...

CVE-2020-6407

CVE-2020-6407 : Affected chromium-based browsers (Chromium/Google Chrome) before 80.0.3987.122 suffer an out-of-bounds memory access in streams , enabling a remote attacker to potentially cause heap corruption via a crafted HTML page. The related CVE-2020-6418 is a separate issue in V8 (type conf...

CVE-2022-0807

CVE-2022-0807 refers to an inappropriate Autofill implementation in Google Chrome before 99.0.4844.51. A remote attacker could bypass navigation restrictions via a crafted HTML page. Public sources corroborate a Chrome/Chromium family impact and cite the fix in 99.0.4844.51 (Chromium-based browse...

CVE-2022-2852

CVE-2022-2852: Use-after-free in FedCM in Google Chrome before 104.0.5112.101 allows remote attackers to potentially exploit heap corruption via a crafted HTML page. Connected sources confirm the issue in Chrome’s FedCM code path and cite affected versions, with Debian noting fixes in 104.0.5112....

CVE-2024-7973

CVE-2024-7973 is a reported heap buffer overflow in PDFium used by Google Chrome/Chromium, enabling a remote attacker to trigger an out-of-bounds memory read via a crafted PDF file. Affected software includes Chrome/Chromium prior to the 128.0.6613.84 fix (Linux, Windows, macOS). The underlying i...

CVE-2026-14142

Summary : CVE-2026-14142 describes an inappropriate implementation in Google Chrome’s Extensions prior to 150.0.7871.47, enabling a remote attacker (with renderer access) to spoof the UI via a crafted HTML page. The vulnerability affects Chrome extensions rendering logic and is rated Low severity...