CVE-2024-11112

CVE-2024-11112 is a use-after-free in Media in Google Chrome (Chromium) on Windows, allowing potential heap corruption via a crafted HTML page. Connected advisories confirm affected Chromium/Chrome packages across distros and provide patches: Debian fixed chromium at 131.0.6778.85-1~deb12u1; Fedo...

CVE-2024-6777

A Use after free vulnerability in the Navigation component of Google Chrome (prior to version 126.0.6478.182 ) allows an attacker who convinces a user to install a malicious extension to potentially exploit heap corruption via a crafted Chrome Extension . While the CVSS 3.1 score is 6.5 (Medium),...

CVE-2024-8193

The CVE-2024-8193 entry applies to Google Chrome/Chromium with Skia. Affected: Chrome prior to 128.0.6613.113; vulnerability: heap buffer overflow in Skia, exploitable by a remote attacker who has compromised the renderer process to trigger heap corruption via a crafted HTML page. Impact: high co...

CVE-2019-5787

CVE-2019-5787 is a use-after-free in the Canvas component of Chromium-based Chrome/Blink (pre-73.0.3683.75). The issue allows a remote attacker to potentially trigger heap corruption via a crafted HTML page. Connected sources also describe related CVEs (5788–5799) in FileAPI, WebMIDI, V8, PDFium,...

CVE-2019-5832

CVE-2019-5832 affects Chromium/Chrome: an error in the Cross-Origin Resource Sharing (CORS) handling exposes cross-origin data when a crafted HTML page is loaded. Root cause: CORS-related flaw in Chromium’s policy enforcement. Impact stated as information disclosure via cross-origin leaks. Remedi...

CVE-2020-6489

CVE-2020-6489 corresponds to an inappropriately implemented behavior in Google Chrome’s developer tools prior to 83.0.4103.61. The issue is described as an implementation error in the developer tools component, enabling a remote attacker who tricks a user into performing certain actions on a craf...

CVE-2022-0603

CVE-2022-0603 is a Use‑After‑Free in Chrome OS File Manager affecting Google Chrome/Chromium. Root cause: use-after-free in the File Manager component, enabling a remote attacker to potentially trigger heap corruption via a crafted HTML page. Affected software version: Chrome OS builds prior to 9...

CVE-2022-0799

Technical details for CVE-2022-0799 are not publicly provided in the connected documents. Please monitor for updates from official advisories.

CVE-2024-6775

CVE-2024-6775 describes a use-after-free in Media Stream within Google Chrome, before version 126.0.6478.182, that could allow a remote attacker to trigger heap corruption via a crafted HTML page when a user engages in specific UI gestures. Affected product: Google Chrome (Chromium base). Root ca...

CVE-2026-76042

Google Chrome versions prior to 151.0.7922.169 are vulnerable to a memory disclosure issue caused by the use of uninitialized resources in the GPU . A remote attacker who has already compromised the renderer process can exploit this by using a crafted HTML page to read memory outside the sandbox ...

CVE-2019-5842

CVE-2019-5842: Use-after-free in Blink within Google Chrome prior to 75.0.3770.90 (Chrome/Chromium). Affected component is Blink/WebKit; underlying issue reported as a memory handling bug leading to potential heap corruption. Public details across connected documents indicate fixed/updated Chromi...

CVE-2020-6493

CVE-2020-6493: A use-after-free in Chrome’s WebAuthentication component (older than 83.0.4103.97) could allow a remote attacker who compromises the renderer to escape the sandbox via a crafted HTML page. Affected product is Google Chrome. The issue is fixed in 83.0.4103.97 (upstream); Debian/Arch...

CVE-2024-7967

CVE-2024-7967 is a heap buffer overflow in Google Chrome’s Fonts implementation (Chromium) prior to 128.0.6613.84. The vulnerability could permit remote exploitation via a crafted HTML page, with impact described as high confidentiality/integrity/availability. Several connected documents corrobor...

CVE-2019-5869

CVE-2019-5869 : Use-after-free in Blink in Google Chrome/Chromium before 76.0.3809.132 allows a remote attacker to potentially exploit heap corruption via a crafted HTML page. Mitigation endorsed by multiple vendors: update to patched Chrome/Chromium builds (e.g., Chrome 76.0.3809.132 or later; D...

CVE-2020-6438

CVE-2020-6438 : A policy enforcement error in Chrome extensions prior to 81.0.4044.92 could allow a user-assisted attacker to obtain potentially sensitive information from process memory by convincing a user to install a crafted malicious extension. Affected software: Google Chrome (extensions su...

CVE-2020-6475

CVE-2020-6475 concerns Google Chrome/Chromium: an incorrect implementation in full screen mode allowed a remote attacker to spoof the security UI via a crafted HTML page. Affected versions prior to the fix were Chrome/Chromium releases up to 83.0.4103.61. The issue is categorized under content sp...

CVE-2021-30535

CVE-2021-30535: A double-free in the ICU component of the Chromium browser (Chromium/Google Chrome) before version 91.0.4472.77. The linked connected documents confirm the root cause as a double-free in ICU, enabling a remote attacker to potentially perform heap corruption and, per the consolidat...

CVE-2022-1477

CVE-2022-1477 is a use-after-free in Vulkan found in Google Chrome prior to 101.0.4951.41, potentially enabling heap corruption via a crafted HTML page. The incident is documented in the Chrome stable-channel release notes and related advisories, which indicate this was part of a broader set of C...

CVE-2019-5813

CVE-2019-5813 is an out-of-bounds read vulnerability in the V8 JavaScript engine of Chromium/Google Chrome, present in versions prior to 74.0.3729.108. The issue is rooted in the V8 component and could enable information disclosure or heap-related effects as described in vendor advisories. Remedi...

CVE-2020-6526

CVE-2020-6526 affects Google Chrome before 84.0.4147.89. An inappropriate implementation in the iframe sandbox could allow a remote attacker to bypass navigation restrictions via a crafted HTML page. Public references in Debian and FreeBSD advisories align with a fixed version around 84.0.4147.89...

CVE-2023-0472

CVE-2023-0472 is a Chrome/WebRTC use-after-free vulnerability affecting Google Chrome prior to 109.0.5414.119. The issue, described as a use-after-free in WebRTC that could enable a remote attacker to cause heap corruption via a crafted HTML page, is rated High severity (CVSS 3.1: 8.8). The Chrom...

CVE-2019-5795

CVE-2019-5795 is an integer overflow in the PDFium component of Google Chrome/Chromium prior to 73.0.3683.75. A crafted PDF file could trigger out-of-bounds memory access. Public sources confirm the PDFium overflow issue; Debian and Arch advisories indicate the fix is in 73.0.3683.75. Remediation...

CVE-2020-6476

The CVE-2020-6476 entry concerns Google Chrome prior to 83.0.4103.61, where an insufficient policy enforcement in the tab strip could allow an attacker—who convinces a user to install a malicious extension—to bypass navigation restrictions via that extension. Affected component: tab strip policy ...

CVE-2022-0972

CVE-2022-0972 affects Google Chrome extensions and is caused by a use-after-free in the Extensions component prior to version 99.0.4844.74, potentially enabling heap corruption via a crafted HTML page if a user installs a malicious extension. The Chrome update (99.0.4844.74) mitigates this by app...

CVE-2022-1478

CVE-2022-1478 is a use-after-free vulnerability in SwiftShader within Google Chrome (Chromium-based) prior to 101.0.4951.41. The issue could allow a remote attacker to potentially cause heap corruption via a crafted HTML page. The Chrome release notes confirm a fix in Chrome 101.0.4951.41 (and Ch...

CVE-2019-5792

CVE-2019-5792 : An integer overflow in the PDFium component of Chromium/Google Chrome before 73.0.3683.75 allows remote attackers to potentially cause out-of-bounds memory access via a crafted PDF file. Affected product: Chromium/Chrome (PDFium). Root cause: integer overflow in PDFium. Impact: re...

CVE-2019-5799

CVE-2019-5799 is a CSP bypass in Chromium/Google Chrome via blob URLs, affecting versions before 73.0.3683.75. Root cause: content security policy bypass in CSP handling for blob URLs. Impact: remote attacker could bypass CSP and access restricted content. Remediation: upgrade to Chromium/Chrome ...

CVE-2019-5838

CVE-2019-5838 : Insufficient policy enforcement in Chrome extensions API allowed a user-went-through-a-malicious-extension attack to bypass file URI restrictions. Affected: Google Chrome/Chromium prior to 75.0.3770.80. Impact is that a crafted extension could enable access to file URIs that shoul...

CVE-2022-1641

CVE-2022-1641 is a use-after-free in Web UI Diagnostics affecting Google Chrome/Chromium on Chrome OS and related Chromium builds. The underlying issue permits heap corruption via specific user interactions, with a High severity (CVSS v3.1 base score 8.8; Privileges None; User interaction require...

CVE-2023-5218

CVE-2023-5218: Use-after-free in Chrome/Chromium Site Isolation before 118.0.5993.70 can allow a remote attacker to cause heap corruption via a crafted HTML page. Affected: Google Chrome/Chromium (Chromium-derived). Impact as stated: high/critical. Root cause: use-after-free in Site Isolation log...

CVE-2024-7974

CVE-2024-7974 affects Google Chrome/Chromium via Insufficient data validation in the V8 API, enabling potential heap corruption from a crafted Chrome Extension. Affected versions are Chrome before 128.0.6613.84 (Chromium/Chromium-derived builds). Debian security advisory confirms fixed in Chromiu...

CVE-2025-6554

A type confusion vulnerability exists in the V8 JavaScript engine used by Google Chrome (prior to version 138.0.7204.96 ). The root cause is a flaw in the Temporal Dead Zone (TDZ) check mechanism when handling the optional chaining operator (?.). Specifically, when using delete x?.[y]?.a, V8 fail...

CVE-2019-5809

CVE-2019-5809 is a use-after-free in Blink/WebKit affecting Chromium-based browsers, specifically in the file chooser path. The vulnerability allows a remote attacker who has already compromised the renderer process to escalate privileges via a crafted HTML page. Technical details across connecte...

CVE-2022-2295

A type confusion vulnerability exists in the V8 engine of Google Chrome (and the chromium package) prior to version 103.0.5060.114 . A remote attacker can exploit this flaw to cause heap corruption by serving a crafted HTML page to the victim. The vulnerability is listed in the CISA Known Exploit...

CVE-2023-5475

The CVE-2023-5475 issue is an Inappropriate implementation in DevTools of Google Chrome up to version 118.0.5993.70, allowing a user-assisted attacker who installs a crafted malicious extension to bypass discretionary access control. Impact: potential high integrity via extension-based bypass; ex...

CVE-2020-6441

CVE-2020-6441 affects Chromium/Google Chrome prior to version 81.0.4044.92 and is described as an insufficient policy enforcement issue in the omnibox component, allowing a remote, crafted HTML page to bypass the security UI. Public advisories confirm the vulnerability as a policy‑enforcement err...

CVE-2020-6451

CVE-2020-6451 is a use-after-free vulnerability in Chrome/Chromium’s WebAudio implementation, prior to version 80.0.3987.162. The issue can allow a remote attacker to potentially cause heap corruption and execute arbitrary code through a crafted HTML page. Public reports across multiple feeds (Ar...

CVE-2022-2156

CVE-2022-2156 is a Google Chrome vulnerability: Use-after-free in Core leading to potential heap corruption via a crafted HTML page, affecting Chrome before 103.0.5060.53. Debian reports the fix in chromium 103.0.5060.53-1~deb11u1, and Fedora updates Chromium to 103.0.5060.114-1.fcXX, indicating ...

CVE-2024-7536

CVE-2024-7536 affects Chromium-based browsers (Google Chrome/Chromium) via a use-after-free in the WebAudio module, enabling potential heap corruption from a crafted HTML page. Affected versions are Chrome/Chromium before 127.0.6533.99; impact is high (C/H, I/H, A/H) with network access and user ...

CVE-2026-19137

A use-after-free vulnerability exists in WebGL within Google Chrome on Android (prior to version 151.0.7922.109 ) and Chromium . A remote attacker who has already compromised the renderer process can exploit this flaw via a crafted HTML page to potentially achieve a sandbox escape . The Chromium ...

CVE-2019-5803

CVE-2019-5803 affects Google Chrome/Chromium prior to 73.0.3683.75. The issue is an insufficent Content Security Policy enforcement in Chrome’s CSP implementation, enabling a CSP bypass via crafted HTML content (including CSP bypass with Javascript URLs and related vectors cited in connected sour...

CVE-2022-0809

CVE-2022-0809: Out-of-bounds memory access in WebXR on Chromium-based browsers (Chrome/Chromium) before version 99.0.4844.51 can enable heap corruption via a crafted HTML page. The vulnerability affects WebXR-related code paths in Chromium/WebKit/Blink. Impact is remote code execution/compromise ...

CVE-2022-1483

CVE-2022-1483 concerns a heap buffer overflow in WebGPU within Google Chrome/Chromium prior to 101.0.4951.41. The issue could allow a remote attacker who gains renderer process access to trigger heap corruption via a crafted HTML page. Affected software includes Chrome/Chromium and related builds...

CVE-2025-5280

A high-severity out of bounds write vulnerability exists in the V8 engine of Google Chrome prior to version 137.0.7151.55 . A remote attacker can exploit this flaw via a crafted HTML page to cause heap corruption , which may lead to arbitrary code execution or service interruptions. This issue af...

CVE-2014-0497

CVE-2014-0497 is an Adobe Flash Player integer underflow vulnerability affecting multiple platforms (Windows/macOS/Linux) that enables remote code execution via unspecified vectors. The initial description confirms the affected version ranges (pre-11.7.700.261/11.8.x–12.x pre-12.0.0.44 on Windows...

CVE-2022-0807

CVE-2022-0807 refers to an inappropriate Autofill implementation in Google Chrome before 99.0.4844.51. A remote attacker could bypass navigation restrictions via a crafted HTML page. Public sources corroborate a Chrome/Chromium family impact and cite the fix in 99.0.4844.51 (Chromium-based browse...

CVE-2022-2852

CVE-2022-2852: Use-after-free in FedCM in Google Chrome before 104.0.5112.101 allows remote attackers to potentially exploit heap corruption via a crafted HTML page. Connected sources confirm the issue in Chrome’s FedCM code path and cite affected versions, with Debian noting fixes in 104.0.5112....

CVE-2024-7973

CVE-2024-7973 is a reported heap buffer overflow in PDFium used by Google Chrome/Chromium, enabling a remote attacker to trigger an out-of-bounds memory read via a crafted PDF file. Affected software includes Chrome/Chromium prior to the 128.0.6613.84 fix (Linux, Windows, macOS). The underlying i...

CVE-2026-14142

Summary : CVE-2026-14142 describes an inappropriate implementation in Google Chrome’s Extensions prior to 150.0.7871.47, enabling a remote attacker (with renderer access) to spoof the UI via a crafted HTML page. The vulnerability affects Chrome extensions rendering logic and is rated Low severity...

CVE-2019-13680

This CVE affects Chromium/Google Chrome where an improper TLS implementation in Chrome prior to 77.0.3865.75 allowed an attacker to spoof the client’s IP address to websites via crafted TLS connections. The issue’s public fixes are reflected in Chromium/Chrome updates; Debian lists a security upd...