CVE-2026-17962

CVE-2026-17962 concerns an inappropriate implementation flaw in the Blink component of the Chromium-based browser (Google Chrome). The vulnerability enables a remote attacker to inject arbitrary scripts or HTML (UXSS) through a crafted HTML page. Affected version: Google Chrome prior to 151.0.792...

CVE-2026-17986

This CVE (CVE-2026-17986) affects Google Chrome and is due to insufficient policy enforcement in Bluetooth, enabling a remote attacker who has compromised the renderer process to bypass the same-origin policy via a crafted HTML page. Affected versions are prior to 151.0.7922.72. The documented im...

CVE-2026-17996

CVE-2026-17996 affects Google Chrome on macOS prior to 151.0.7922.72 due to an inappropriate implementation in the Browser. This allowed a local attacker to bypass navigation restrictions via a malicious file (Chromium severity: Low). Affected software: Google Chrome on macOS; vulnerable componen...

CVE-2026-17997

CVE-2026-17997 concerns Google Chrome prior to version 151.0.7922.72, where an inappropriate implementation in Passwords allowed a remote attacker who had gained control of the renderer process to leak cross-origin data via a crafted HTML page. The NVD entry labels the chromium-based severity as ...

CVE-2026-17999

CVE-2026-17999: A race condition in Chrome’s PictureInPicture on Android (before 151.0.7922.72) enables a remote attacker to perform domain spoofing via a crafted HTML page. Affected software is Google Chrome on Android; root cause is a race in PictureInPicture logic. The Chromium advisory assign...

CVE-2026-18008

CVE-2026-18008 affects Google Chrome prior to 151.0.7922.72 due to an inappropriate implementation in Settings, enabling a remote attacker to perform UI spoofing via malicious network traffic. The CVSSv3.1 base score is 4.3 (Medium); attack vector NETWORK, required user interaction, no confidenti...

CVE-2026-2316

CVE-2026-2316 affects Google Chrome/Chromium: insufficient policy enforcement in Frames enables UI spoofing via a crafted HTML page when Chrome is before 145.0.7632.45. Remediation is to update to Chrome 145.0.7632.45 or newer (Chromium fix). Debian advisories also indicate later Chromium fixes f...

CVE-2026-4455

CVE-2026-4455 describes a heap buffer overflow in PDFium used by Google Chrome, affecting builds prior to 146.0.7680.153. An attacker could trigger heap corruption via a crafted PDF file, enabling remote code execution under the conditions stated (high severity). The public materials consistently...

CVE-2026-4674

CVE-2026-4674 describes an out-of-bounds read in CSS processing in Google Chrome, exploitable via a crafted HTML page to cause out-of-bounds memory access. Affected software: Google Chrome, with the vulnerability rooted in CSS handling prior to version 146.0.7680.165. The entry specifies a high s...

CVE-2026-5863

Summary: CVE-2026-5863 is an insecure implementation in the V8 engine of Google Chrome/Chromium prior to 147.0.7727.55 that could allow remote code execution via a crafted HTML page. The current public docs list the issue and indicate high impact, but do not provide exploitation details. Public u...

CVE-2026-7344

CVE-2026-7344 is a use-after-free in the Accessibility component of Google Chrome for Windows, prior to version 147.0.7727.138. The issue arises when a renderer process is compromised, potentially enabling a sandbox escape via a crafted HTML page. Affected software is Google Chrome on Windows; th...

CVE-2026-79152

CVE-2026-79152 is an incorrect authorization flaw in CustomTabs within Google Chrome for Android prior to 152.0.7977.65 . A local attacker can exploit a co-installed app to bypass the web origin policy . Chromium classifies this as Low severity, though the CNA-assigned CVSS 3.1 score is 9.8 (CRIT...

CVE-2026-79189

CVE-2026-79189 is an out-of-bounds write in ANGLE , a rendering component used by Google Chrome , affecting versions prior to 152.0.7977.65 . A remote attacker can exploit this by delivering a crafted HTML page, potentially leading to arbitrary code execution outside the browser sandbox . The CNA...

CVE-2026-84324

A use-after-free vulnerability in the Proxy component of Google Chrome (versions prior to 152.0.7977.75 ) allows a remote attacker to execute arbitrary code outside the sandbox via crafted network traffic. Chromium rates it High severity; NVD assigns a CVSS 3.1 score of 9.0 (CRITICAL) with a Chan...

CVE-2026-8529

CVE-2026-8529 describes a heap buffer overflow in Chrome/Chromium Codecs that can allow a remote attacker to execute arbitrary code inside the sandbox via a crafted video file. Affected software: Google Chrome (prior to 148.0.7778.168). Root cause: heap buffer overflow in Codecs. Impact: remote c...

CVE-2026-8540

CVE-2026-8540 concerns Type Confusion in V8 affecting Google Chrome before 148.0.7778.168, allowing a remote attacker to execute arbitrary code inside the browser sandbox via a crafted HTML page. Affected component is V8 in Chrome; root cause described as a type confusion vulnerability, enabling ...

CVE-2026-8549

CVE-2026-8549 : Use-after-free in Google Chrome’s Media code path prior to 148.0.7778.168 allows a remote attacker to execute arbitrary code inside the browser sandbox via a crafted HTML page. Affected product: Google Chrome (Media component). Root cause: use-after-free. Impact: high (arbitrary c...

CVE-2026-9899

Summary of CVE-2026-9899 : A use-after-free in ANGLE within Google Chrome prior to 148.0.7778.216 allowed a remote attacker who had compromised the renderer process to potentially escape the Chrome sandbox via a crafted HTML page. The issue is in the ANGLE component of Chromium/Chrome, with an ex...

CVE-2026-9924

CVE-2026-9924 is a heap buffer overflow in the ANGLE component of Google Chrome on Windows, fixed by updating to version 148.0.7778.216 or newer. The vulnerability affects the ANGLE path and could allow a remote attacker who has compromised a renderer process to escape the sandbox via a crafted H...

CVE-2026-9952

Summary: CVE-2026-9952 is a use-after-free in WebAudio within Google Chrome. The issue affects Chromium-based WebAudio code and enables a remote attacker to execute arbitrary code inside a sandbox when a crafted HTML page is processed. The public description specifies “prior to 148.0.7778.216,” i...

CVE-2026-9956

CVE-2026-9956: A use-after-free in Google Chrome on iOS (pre-148.0.7778.216) allows a remote attacker to trigger arbitrary code execution by convincing a user to perform specific UI gestures via a crafted HTML page. Affected product: Google Chrome on iOS. Root cause: use-after-free in the iOS bro...

CVE-2026-9971

CVE-2026-9971 affects Google Chrome on iOS prior to version 148.0.7778.216 due to an inappropriate implementation in iOS. This allows a remote attacker to exploit UXSS by convincing a user to perform specific UI gestures on a crafted HTML page. The vulnerability impacts UX and script/HTML injecti...

CVE-2026-9977

Summary: CVE-2026-9977 affects Google Chrome on Android through the WebShare component where insufficient validation of untrusted input could let a renderer-process–compromised page escape the sandbox. The issue is in Chromium/WebShare, with impact described as high severity (C/H/I/A). Affected c...

CVE-2026-9980

In Google Chrome (Chromium) Printing component, the vulnerability CVE-2026-9980 is caused by insufficient validation of untrusted input, allowing a remote attacker who has compromised the renderer process to bypass site isolation via a crafted HTML page. Impact is described as high severity; reme...

CVE-2009-2955

CVE-2009-2955: Affected: Google Chrome (1.0.154.48 and earlier). Issue: remote exploitation via JavaScript containing an excessively long value in location.hash (hash property), causing denial of service through CPU consumption and possible application hang. Context: related to CVE-2008-5715; mul...

CVE-2009-3932

CVE-2009-3932 affects Google Chrome’s Gears plugin prior to version 3.0.195.32. The vulnerability allows user‑assisted remote attackers to cause memory corruption and a plugin crash, with the potential for arbitrary code execution via the Gears SQL API, linked to putting SQL metadata into a bad s...

CVE-2010-2645

CVE-2010-2645 applies to Google Chrome prior to 5.0.375.99, where WebGL usage could trigger an out-of-bounds read leading to a denial of service. The issue is described as an unspecified vulnerability with unknown vectors, affecting Chrome’s WebGL handling. Public references in OpenVAS and third-...

CVE-2010-2652

Google Chrome before 5.0.375.99 does not correctly implement modal dialogs, enabling denial of service (application crash) via unspecified vectors. Connected sources confirm a set of related Chrome vulnerabilities (including modal-dialog handling) in the 5.0.375.99 timeframe and reference a patch...

CVE-2010-2903

Google Chrome CVE-2010-2903 affects Chrome versions prior to 5.0.375.125, where the browser may truncate and improperly elide hostnames. Root cause described as an issue in hostname handling; impact is unspecified in the provided documents. Exploitation details are not disclosed in the connected ...

CVE-2010-4576

CVE-2010-4576 affects Google Chrome before 8.0.552.224 and Chrome OS before 8.0.552.343. The issue lies in browser/worker_host/message_port_dispatcher.cc where certain postMessage calls with web workers are mishandled, enabling remote attackers to trigger a NULL pointer dereference and crash the ...

CVE-2011-0478

Google Chrome/CromeOS vulnerability CVE-2011-0478 affects Chrome before 8.0.552.237 and Chrome OS before 8.0.552.344, due to improper handling of SVG use elements. This can cause denial of service and possibly unspecified other impact via unknown vectors that lead to a stale pointer. The issue is...

CVE-2011-0777

CVE-2011-0777 affects Chromium/Google Chrome before 9.0.597.84. A use-after-free in image loading can allow remote attackers to cause a denial of service and possibly other impact. Several connected sources (e.g., Debian DSA 2166-1 and OpenVAS entries) corroborate the vuln in Chromium/Chrome arou...

CVE-2011-0782

Google Chrome before 9.0.597.84 on macOS X is affected by an unspecified flaw in the Mac OS X 10.5 SSL libraries that can be triggered remotely to crash the application (denial of service). The NVD record indicates a network-based, low complexity attack with no authentication, resulting in partia...

CVE-2011-0982

CVE-2011-0982 describes a use-after-free vulnerability in Google Chrome prior to 9.0.597.94, exploitable via SVG font face handling that could cause a denial of service and potentially other impacts. Affected product: Google Chrome (before 9.0.597.94). Root cause: use-after-free in the SVG font f...

CVE-2011-0985

CVE-2011-0985 affects Google Chrome before 9.0.597.94, where memory exhaustion can prevent proper process termination (unspecified impact/remote vectors). Debian advisory DSA-2166-1 notes this as part of several vulnerabilities in chromium-browser and states the issue is fixed in the squeeze pack...

CVE-2011-1304

Google Chrome 11.0.696.57 patch (April 2011) fixed multiple vulnerabilities, including CVE-2011-1304: a pop-up blocker bypass via plug-ins. The issue affected Chrome before 11.0.696.57 and could be exploited remotely through plug-in interactions, potentially bypassing the pop-up blocker. The patc...

CVE-2011-1441

CVE-2011-1441 affects Google Chrome

CVE-2011-2345

CVE-2011-2345 affects Google Chrome’s NPAPI implementation prior to 12.0.742.112, where strings are not handled correctly, allowing remote attackers to trigger an out-of-bounds read and cause a denial of service via unspecified vectors. Documented references in OpenVAS/NVD indicate this CVE is pa...

CVE-2011-2791

The CVE-2011-2791 vulnerability affects Google Chrome’s ICU functionality prior to 13.0.782.107, where an out-of-bounds write in ICU can be triggered by unknown vectors, potentially allowing a denial of service or other unspecified impacts. Affected component: ICU integration in Chrome. Remediati...

CVE-2011-2792

Technical details for CVE-2011-2792 are not publicly provided in the connected documents; the entries reference the CVE but do not specify affected products, versions, impact, or fixes. Monitor for updates.

CVE-2011-2824

The CVE-2011-2824 entry relates to a use-after-free vulnerability in Google Chrome before 13.0.782.215. The issue enables remote attackers to cause a denial of service or potentially other unspecified impacts via vectors involving counter nodes. Affected product is Google Chrome; the root cause i...

CVE-2011-2835

Technical details for CVE-2011-2835 are not publicly provided in the connected documents. OpenVAS/Gentoo entries reference the CVE but do not reveal affected products, root cause, or remediation. Monitor for updates.

CVE-2011-3084

CVE-2011-3084 affects Google Chrome prior to 19.0.1084.46, where loading links from internal pages could bypass sandbox restrictions. Connected sources confirm Chromium/chrome updates (openSUSE patches in 2012) address this and related CVEs. The exact exploit status is not stated in the provided ...

CVE-2011-3088

Chromium (Chromium/v8) is affected by CVE-2011-3088: an out-of-bounds read in hairline drawing could be exploited remotely to cause a denial of service. The vulnerability is listed in openSUSE and Gentoo advisories as part of the 2012 Chromium update (around 21.0.1145). The issue is tied to hairl...

CVE-2011-3104

CVE-2011-3104 : In Chrome/Chromium, Skia contains an out-of-bounds read leading to a potential denial of service. Affected: Skia as used in Google Chrome before version 19.0.1084.52. Vector is not explicitly specified in the provided documents. Impact: denial of service via out-of-bounds read. Mi...

CVE-2011-3891

CVE-2011-3891 affects Google Chrome prior to 15.0.874.102, where improper restriction of internal Google V8 functions may enable remote attackers to cause a denial of service or potentially other impact via unknown vectors. The cited connected advisories indicate this requires upgrading to Chrome...

CVE-2011-4691

The CVE-2011-4691 entry concerns Google Chrome 15.0.874.121 and earlier. According to connected sources, the flaw enables an attacker to infer whether a document exists in the browser cache by observing the timing of Same Origin Policy violations during IFRAME loading, via crafted JavaScript. Aff...

CVE-2012-2847

CVE-2012-2847 affects Google Chrome/Chromium across platforms (Mac/Linux/Windows) where the browser does not prompt for user confirmation before continuing a large series of downloads, enabling user-assisted resource exhaustion leading to a Denial of Service. Public details in connected advisorie...

CVE-2012-2885

Google Chrome/Chromium is affected by CVE-2012-2885: a double-free vulnerability that could allow a remote attacker to cause a denial of service or other impact via application-exit vectors in Chrome versions before 22.0.1229.79. Remediation is to upgrade Chromium/Chrome to a fixed version; Gento...

CVE-2013-0830

CVE-2013-0830 affects Google Chrome on Windows, specifically the IPC layer, where the IPC layer omits a NUL terminator required for termination of an unspecified data structure in versions before 24.0.1312.52. The impact and attack vectors are not disclosed in the provided documents; no explicit ...