CVE-2026-17777

CVE-2026-17777: Google Chrome autofill in Chromium-based builds prior to 151.0.7922.72 allows a remote attacker to leak cross-origin data via a crafted HTML page. Impact is MEDIUM (CVSS 3.1: 4.3). Attack vector: NETWORK; privileges: NONE; user interaction required; scope: UNCHANGED; confidentiali...

CVE-2026-17813

CVE-2026-17813 describes an issue in Chrome for iOS (Google Chrome on iOS) where insufficient policy enforcement allows a remote attacker to bypass navigation restrictions via a crafted HTML page. Affected product: Chrome for iOS / Google Chrome on iOS. Vulnerable condition: prior to version 151....

CVE-2026-17824

CVE-2026-17824 affects Google Chrome/Chromium ServiceWorker: insufficient policy enforcement allows a remote attacker to bypass same-origin policy via a crafted HTML page. Affected component is the ServiceWorker in Chromium-based browsers; vulnerable versions are before 151.0.7922.72. Root cause:...

CVE-2026-17861

CVE-2026-17861 describes insufficient input validation in the Google Chrome Updater prior to 151.0.7922.72, which allowed a local attacker to escalate to OS-level privileges via a malicious file. The affected component is the Updater within Google Chrome (Chromium-based) and the root cause is unt...

CVE-2026-17911

CVE-2026-17911 affects Google Chrome prior to 151.0.7922.72, where insufficient policy enforcement in SVG could allow a remote attacker to leak cross-origin data via a crafted HTML page. The vulnerability is described with a Chromium-based impact of data leakage (CVSS: Medium, 4.3) and does not i...

CVE-2026-17971

CVE-2026-17971 affects Google Chrome (Chromium-based) Frame: an inappropriate implementation in Frame before version 151.0.7922.72 could allow a remote attacker to trigger out-of-bounds memory access via a crafted HTML page. The CVE entry notes Chromium security severity as Low, and the vulnerabi...

CVE-2026-18005

The CVE-2026-18005 issue is in the WebXR component of Google Chrome (Chromium) and upstream Chromium: inappropriate implementation in WebXR allows a remote attacker to obtain potentially sensitive information from process memory via a crafted HTML page. Affected product/version: Google Chrome/Chr...

CVE-2026-3926

CVE-2026-3926 refers to an out-of-bounds read in V8 used by Google Chrome, exploitable via a crafted HTML page. Affected: Chrome/Chromium prior to 146.0.7680.71. Impact described as remote memory access with potential for arbitrary behavior; CVSS indicates high impact to confidentiality, integrit...

CVE-2026-3928

CVE-2026-3928 is a vulnerability in Chromium-based extensions handling in Google Chrome. The issue is insufficient policy enforcement in the Extensions framework, allowing a user-assisted attacker who lures a target to install a malicious extension to perform UI spoofing via the extension. Affect...

CVE-2026-76046

Affected component: ANGLE (Android graphics layer) in Google Chrome on Android, prior to version 151.0.7922.169. Root cause: Buffer overflow triggered by a crafted HTML page. Impact: A remote attacker with a compromised renderer process can execute arbitrary code outside the Chrome sandbox. CVSS ...

CVE-2026-78909

A use after free vulnerability in the Views component of Google Chrome prior to version 152.0.7977.65 allows a remote attacker, leveraging social engineering, to execute arbitrary code outside the sandbox via a crafted HTML page. Chromium rates the severity as Medium , while the CVSS 3.1 base sco...

CVE-2026-79044

A missing authorization flaw in the WebAppInstalls component of Google Chrome on Android (prior to 152.0.7977.65 ) allowed a remote attacker who had already compromised the renderer process to obtain sensitive information via a crafted HTML page. The vulnerability is rated Medium (CVSS 3.1 score ...

CVE-2026-79056

A use-after-free flaw in the ServiceWorker component of Google Chrome prior to version 152.0.7977.65 allows a remote attacker to potentially execute arbitrary code outside the sandbox by delivering a crafted HTML page. The CVSS 3.1 score is 9.6 (Critical) with a changed scope, requiring user inte...

CVE-2026-85043

CVE-2026-85043 is an incomplete cleanup vulnerability in the Network component of Google Chrome prior to 152.0.7977.82 . A remote attacker can bypass system access restrictions by sending specially crafted network traffic, potentially leading to unauthorized access to system resources. The Chromi...

CVE-2026-8585

The CVE-2026-8585 entry describes an out-of-bounds memory read in Chrome on iOS caused by an inappropriate implementation in Media code, exploitable by a remote attacker who already compromises the renderer process. Affected software is Google Chrome for iOS, before version 148.0.7778.168. The de...

CVE-2026-9929

CVE-2026-9929 describes an inappropriate WebGL implementation in Google Chrome on Android prior to 148.0.7778.216, allowing a remote attacker to leak cross-origin data via a crafted HTML page. The vulnerability stems from WebGL component behavior in Chromium, with impact described as cross-origin...

CVE-2026-9959

CVE-2026-9959 describes a race in WebRTC in Google Chrome on Windows prior to 148.0.7778.216 that allowed a remote attacker to leak cross-origin data via a crafted HTML page. The provided connected documents identify the affected software (Google Chrome on Windows) and the vulnerable component (W...

CVE-2010-0645

CVE-2010-0645 affects Google Chrome (V8 engine in Chrome) prior to 4.0.249.89. The root cause is multiple integer overflows in factory.cc, enabling remote attackers to execute arbitrary code in the Chrome sandbox via crafted JavaScript arrays. Affected product/component: Google Chrome with V8 bef...

CVE-2010-0657

Google Chrome before 4.0.249.78 on Windows is vulnerable to an issue where the URL in the --app argument of a desktop shortcut is not properly encoded/escaped/quoted. This allows a user-assisted remote attacker to trick a user into creating a crafted shortcut and potentially execute arbitrary pro...

CVE-2010-0660

CVE-2010-0660 affects Google Chrome prior to 4.0.249.78. The issue arises when Chrome sends an https URL in the Referer header of an http request during https→http redirection, enabling remote servers to log and potentially obtain sensitive information via standard HTTP logs. Affected component i...

CVE-2010-1504

CVE-2010-1504 is an XSS vulnerability in Google Chrome up to version 4.1.249.1059, allowing remote attackers to inject arbitrary scripts via vectors related to chrome://downloads. The flaw is described as affecting Chrome before 4.1.249.1059, with CVSS base metrics: AV:N/AC:L/Au:N/C:C/I:C/A:C (ba...

CVE-2011-0784

CVE-2011-0784 describes a race condition in Google Chrome prior to 9.0.597.84 that can allow remote code execution via audio-related vectors. Affected: Google Chrome (Desktop builds) before 9.0.597.84. Root cause: race condition in audio handling. Impact: remote arbitrary code execution with part...

CVE-2011-1108

CVE-2011-1108 affects Google Chrome/Chromium before 9.0.597.107. A flaw in JavaScript dialogs can be triggered by a crafted HTML document to cause a denial of service (application crash) or other unspecified impact. The Debian/DSA advisories and OpenVAS entries mirror this issue and recommend upg...

CVE-2011-1122

The CVE-2011-1122 issue concerns Google Chrome/Chromium before 9.0.597.107, where the WebGL implementation allows remote attackers to cause a denial of service via an out-of-bounds read. Connected sources confirm the affected product as Google Chrome/Chromium and identify the vulnerability as Web...

CVE-2011-1125

Google Chrome

CVE-2011-1197

CVE-2011-1197 affects Google Chrome before version 10.0.648.127. The vulnerability stems from improper table painting in the rendering path, allowing remote attackers to cause a denial of service and potentially other unspecified impact via unknown vectors that lead to a stale pointer. Affected v...

CVE-2011-1285

The CVE-2011-1285 issue affects Google Chrome prior to version 10.0.648.127. The vulnerability is in the regular-expression functionality, where reentrancy is not properly implemented, enabling remote attackers to cause a denial of service via memory corruption or possibly other impact through un...

CVE-2011-1302

CVE-2011-1302 affects Google Chrome’s GPU process; a heap-based buffer overflow in the GPU process (Chrome before 10.0.648.205) allows remote code execution via unknown vectors. The Ubuntu OSV entry corroborates the heap-based overflow. Remediation: upgrade to Chrome 10.0.648.205 or later (the fi...

CVE-2011-1445

CVE-2011-1445 affects Google Chrome up to version 11.0.696.57, where SVG document handling is vulnerable to an out-of-bounds read, enabling a remote DoS. The OpenVAS entries corroborate a vulnerability in Chrome with SVG-related memory errors. Patch: upgrade to Chrome 11.0.696.57 or later (as rel...

CVE-2011-1455

Google Chrome before 11.0.696.57 is affected by CVE-2011-1455 due to improper handling of multipart-encoded PDFs, enabling remote attackers to trigger an out-of-bounds read and cause a denial-of-service. Affected product: Google Chrome (desktop) prior to version 11.0.696.57; root cause relates to...

CVE-2011-1691

The CVE-2011-1691 issue affects WebKit’s CSS Core (CSSComputedStyleDeclaration.cpp) in WebCore, where counterToCSSValue mishandles access to counterIncrement and counterReset from getComputedStyle data. It permits remote attackers to trigger a denial-of-service (NULL pointer dereference and crash...

CVE-2011-1807

CVE-2011-1807 is associated with Google Chrome versions prior to 11.0.696.71. The vulnerability stems from how the browser handles blobs, enabling a remote attacker to trigger an out-of-bounds write and execute arbitrary code via unspecified vectors. The issue is documented as a high-severity, ne...

CVE-2011-2785

Google Chrome up to 13.0.782.107 is affected by CVE-2011-2785 due to improper validation of the home-page URL in the extensions framework. This allows a crafted extension to influence extension behavior with unspecified impact. Root cause: URL validation flaw in extensions home page. Mitigation: ...

CVE-2011-3022

CVE-2011-3022 affects Google Chrome (translation feature): the vulnerable code path is in translate/translate_manager.cc, where an HTTP session used for translation could leak information to an eavesdropper. The vulnerability is described as an information disclosure via the HTTP session. Affecte...

CVE-2011-3095

The CVE-2011-3095 issue affects Chromium/Chrome’s OGG container handling. The initial description states an out-of-bounds write in the OGG container could allow remote attackers to cause a denial of service or other impact. Connected advisories indicate this was fixed by Chromium updates (e.g., o...

CVE-2011-3965

CVE-2011-3965 affects Google Chrome prior to 17.0.963.46. The root cause is improper signature checking, enabling a remote attacker to trigger a denial of service (application crash) via unspecified vectors. Connected advisories corroborate this family of Chromium/Chrome vulnerabilities and indic...

CVE-2011-4692

The CVE-2011-4692 issue affects WebKit as used by Apple Safari 5.1.1 and earlier and Google Chrome 15 and earlier. The root cause is that the browser does not prevent timing-based data leakage when loading images, allowing remote attackers to infer whether an image is cached via crafted JavaScrip...

CVE-2012-2815

CVE-2012-2815 affects Chromium/Chrome where an attacker could access information from a fragment identifier by abusing an IFRAME tied to a different origin. The connected advisories/document set corroborate chromium-related vulnerabilities and list CVE-2012-2815 among affected entries. Gentoo/Ope...

CVE-2012-2853

CVE-2012-2853 affects Google Chrome before 21.0.1180.57 on macOS/Linux and before 21.0.1180.60 on Windows/Chrome Frame. The issue arises from the webRequest API not interacting properly with the Chrome Web Store, allowing a remote attacker to cause a denial of service or possibly other unspecifie...

CVE-2012-2867

CVE-2012-2867 affects Chromium/Chrome’s SPDY implementation. The vulnerability allows a remote attacker to cause an application crash (Denial of Service) via unspecified vectors in Chrome before version 21.0.1180.89. OpenSUSE and Gentoo advisories indicate Chromium updates were released to addres...

CVE-2012-2887

CVE-2012-2887 (Google Chrome) is a use-after-free in onclick handling affecting Chrome before 22.0.1229.79. The vulnerability can cause denial of service and may have unspecified other impact via onclick event vectors. Affected product is Google Chrome/Chromium web browser; underlying cause is us...

CVE-2012-2900

CVE-2012-2900 affects Google Chrome/Chromium through a Skia text rendering issue that could cause remote crashes (DoS) or other impact via unspecified vectors. Public details in the provided documents describe the vulnerability in Chrome versions prior to 22.0.1229.92, with downstream advisories ...

CVE-2012-4903

Summary: CVE-2012-4903/4906 affect Google Chrome for Android prior to 18.0.1025308. The vulnerability arises from improper restriction of access to file: URLs, enabling remote attackers to obtain sensitive information (e.g., credential data) via unspecified vectors. It is a separate issue from CV...

CVE-2012-5129

CVE-2012-5129 describes a heap-based buffer overflow in the WebGL subsystem of Google Chrome OS prior to 23.0.1271.94. The vulnerability can allow a remote attacker to cause a denial-of-service via a GPU process crash and may have unspecified other impact via unknown vectors. The provided connect...

CVE-2013-0838

CVE-2013-0838 affects Google Chrome on Linux, where shared memory segments have weak permissions. The NVD entry notes uncertain impact and attack vectors, with a fix in Chrome version 24.0.1312.52 (and later). The CVSS/metrics indicate a high-severity credential/privilege impact potential, but ex...

CVE-2013-0842

Technical details about CVE-2013-0842 are not publicly provided in the connected documents. Monitor for updates from OpenVAS and GLSA entries; sources reference Chrome vulnerabilities in general but do not provide specifics for this CVE.

CVE-2013-0891

CVE-2013-0891: Google Chrome (Windows/Linux before 25.0.1364.97, macOS before 25.0.1364.99) is affected by an integer overflow in blob handling, leading to possible denial of service or other impact. The issue is disclosed in the Chrome vulnerability set and is reflected in OpenVAS/Nessus entries...

CVE-2013-0895

Google Chrome/Crome-derived browser on Linux and macOS has CVE-2013-0895 (and related 2013-08x family) due to Incorrect path handling in file copying. OpenSUSE openSUSE-SU-2013:0454-1 documents this CVE as a High-severity issue and notes a fix in the Chromium update path, with the 27.x line addre...

CVE-2013-0917

CVE-2013-0917 concerns Google Chrome’s URL loader. The vulnerability allows a remote attacker to trigger an out-of-bounds read and cause a denial of service, reported for Chrome builds prior to 26.0.1410.43. The initial description specifies the vector as unspecified, but the impact remains a DoS...

CVE-2014-7906

CVE-2014-7906 describes a use-after-free in the Pepper plugins of Google Chrome prior to 39.0.2171.65. A crafted Flash content exploit can trigger a PepperMediaDeviceManager access outside of the object’s lifetime, potentially causing a denial of service and other impacts. The remediation is to u...