6540 matches found
CVE-2011-3020
CVE-2011-3020 affects Google Chrome’s Native Client validator, with the vulnerability described as unspecified and impact/attack vector unknown in Chrome prior to 17.0.963.56. The provided documents confirm the affected component (Native Client validator) and a pre-patch version, but do not discl...
CVE-2026-3930
CVE-2026-3930 matches a Google Chrome iOS navigation-bypass issue: unsafe navigation in Chrome on iOS before 146.0.7680.71 allows a remote attacker to bypass navigation restrictions with a crafted HTML page. Connected feeds confirm Chromium/Chromium-based updates (Chromium 146.0.7680.71+ in Debia...
CVE-2026-7337
CVE-2026-7337 describes a type confusion in V8 affecting Google Chrome prior to version 147.0.7727.138 . The issue enables a remote attacker to execute arbitrary code inside the browser sandbox via a crafted HTML page. Affected product: Google Chrome (all supported platforms); root cause: Type Co...
CVE-2026-78900
CVE-2026-78900 is an improper input validation flaw in the Media component of Google Chrome (prior to 152.0.7977.65 ). A remote attacker can craft a malicious HTML page that, when processed by the browser, may lead to arbitrary code execution outside the sandbox , potentially compromising the use...
CVE-2026-79012
A use-after-free vulnerability in the Safebrowsing component of Google Chrome for Mac (prior to 152.0.7977.65 ) allows a remote attacker to execute arbitrary code outside the browser's security sandbox by tricking a user into visiting a crafted HTML page. The vulnerability was rated Critical by t...
CVE-2026-79138
CVE-2026-79138 is an out-of-bounds write in ANGLE , a graphics rendering component of Google Chrome on Windows , affecting versions prior to 152.0.7977.65 . A remote attacker can exploit this by tricking a user into visiting a crafted HTML page , potentially leading to arbitrary code execution ou...
CVE-2026-8004
CVE-2026-8004 describes an issue in Google Chrome where insufficient policy enforcement in DevTools could allow a user-assisted cross-origin data leak via a crafted malicious extension. Affected product: Google Chrome (DevTools component). Root cause: policy enforcement gaps in DevTools prior to ...
CVE-2026-8559
Technical details (affected product/component, root cause, impact, or fixes) are not provided in the supplied documents. Monitor for updates from official advisories.
CVE-2026-8577
CVE-2026-8577 affects Google Chrome before 148.0.7778.168, where an integer overflow in the Fonts component could allow a remote attacker to execute arbitrary code in the sandbox via a crafted HTML page. This is a browser-level vulnerability in Chrome/Chromium’s font handling. According to the pr...
CVE-2026-87435
CVE-2026-87435 is an information leak in ControlledFrame in Google Chrome prior to 153.0.8010.36 . A remote attacker who had already compromised the renderer process could obtain sensitive information by serving a crafted HTML page. The Chromium security severity is Medium , with a CVSS 3.1 score...
CVE-2026-9902
CVE-2026-9902 is a use-after-free in the Accessibility component of Google Chrome (Chromium) reported as affecting pre-148.0.7778.216. The issue could allow a remote attacker who has compromised the renderer process to potentially escape the sandbox via a crafted HTML page. The associated connect...
CVE-2026-9903
CVE-2026-9903 : Insufficient validation of untrusted input in the Site Isolation component of Google Chrome (Chromium) prior to 148.0.7778.216 allows a remote attacker who has already compromised the renderer process to bypass site isolation via a crafted MHTML page. The impact is to weaken the b...
CVE-2026-9930
CVE-2026-9930 affects the Dawn component of Google Chrome on macOS. A crafted HTML page can trigger an out-of-bounds write in Dawn, allowing a remote attacker to perform an out-of-bounds memory write. The issue is tied to Chrome versions before 148.0.7778.216. No exploitation details are provided...
CVE-2026-9940
The CVE-2026-9940 entry describes a heap buffer overflow in ANGLE within Google Chrome (Chromium) prior to 148.0.7778.216. The underlying issue is a heap corruption vulnerability triggered by a crafted HTML page, allowing a remote attacker to potentially exploit it. Severity is rated High; attack...
CVE-2010-1230
CVE-2010-1230 affects Google Chrome prior to 4.1.249.1036. The issue concerns incorrect behavior when attempting to delete Web SQL Databases and clear STS state. The impact is described as unspecified; no exploit vectors are provided in the documents. Severity is CVSS v2 base score 10.0 (HIGH). N...
CVE-2010-1851
CVE-2010-1851 affects Google Chrome with the Invisible Hand extension enabled. The issue stems from cookies being used during background HTTP requests, which could enable remote servers to correlate requests and identify specific users and their product searches through HTTP request logging, desc...
CVE-2010-2646
CVE-2010-2646 affects Google Chrome up to version 5.0.375.99, where sandboxing of IFRAME elements was not properly isolated. This memory-corruption/remote-vector issue has high severity (CVSS 9.3) with unspecified impact described in the entry. The available connected documents indicate a vendor ...
CVE-2010-3250
CVE-2010-3250 concerns Google Chrome prior to version 6.0.472.53 and is described as an unspecified vulnerability that allows remote attackers to enumerate the set of installed extensions via unknown vectors. The NVD entry confirms this vulnerable condition, and OpenVAS entries list Google Chrome
CVE-2010-3413
Google Chrome before 6.0.472.59 contains an unspecified vulnerability in the pop-up blocking functionality that could allow remote attackers to cause a denial of service (application crash) via unknown vectors. The OpenVAS entries reference multiple vulnerabilities in Chrome 6.0.472.59 era, but d...
CVE-2010-3729
The CVE-2010-3729 entry concerns Google Chrome’s SPDY protocol implementation, with the root cause reported as improper buffer management in the SPDY handling before Chrome 6.0.472.62. This vulnerability could allow remote attackers to execute arbitrary code via unspecified vectors, with network ...
CVE-2010-4491
CVE-2010-4491 affects Google Chrome prior to 8.0.552.215. The issue is that privileged extensions are not properly restricted, enabling a crafted extension to trigger a denial of service via memory corruption. This is documented in the NVD entry for CVE-2010-4491 and reflected in multiple OpenVAS...
CVE-2011-0479
Google Chrome (Windows/Linux/macOS) before 8.0.552.237 and Chrome OS before 8.0.552.344 are affected by CVE-2011-0479, a vulnerability in extensions handling that allows remote attackers to cause a denial of service via a crafted extension that triggers an uninitialized pointer. The issue stems f...
CVE-2011-0481
CVE-2011-0481 : Buffer overflow in Google Chrome before 8.0.552.237 and Chrome OS before 8.0.552.344 allows remote attackers to cause a denial of service or possibly other impact via vectors related to PDF shading. Affected software is Google Chrome and Chrome OS (versions cited in the entry). Th...
CVE-2011-0783
CVE-2011-0783 is a Google Chrome/Chromium vulnerability (before 9.0.597.84) described as an unspecified flaw that allows user-assisted remote attackers to cause a denial of service (application crash) via vectors involving a “bad volume setting.” Multiple OpenVAS/Debian entries corroborate Chrome...
CVE-2011-1111
CVE-2011-1111 affects Google Chrome before 9.0.597.107. The issue arises from improper implementation of forms controls, enabling a remote attacker to cause a denial of service (application crash) or possibly other unspecified impact via unknown vectors. Connected documents confirm Chrome is vuln...
CVE-2011-1124
CVE-2011-1124 is a use-after-free vulnerability in Google Chrome prior to 9.0.597.107 that can allow remote attackers to cause a denial of service or potentially other impact via vectors related to blocked plug-ins. The associated sources describe the issue consistently; no specific exploit detai...
CVE-2011-1195
CVE-2011-1195 concerns a use-after-free in Google Chrome prior to 10.0.648.127 related to document script lifetime handling. The vulnerability can allow remote attackers to cause a denial of service or possibly have unspecified other impact. The available connected documents confirm the affected ...
CVE-2011-1291
CVE-2011-1291 affects Google Chrome versions older than 10.0.648.204. The vulnerability stems from improper handling of base strings, described as a “buffer error,” which could allow remote attackers to trigger a denial of service and potentially other impact via unknown vectors. Public reference...
CVE-2011-1435
Google Chrome vulnerability CVE-2011-1435 affects Chrome before 11.0.696.57, where the extensions tabs permission can be abused to read local files via a crafted extension. Root cause: improper handling of the tabs permission by extensions. Impact is a read of local files (confidentiality). Remed...
CVE-2011-1437
Google Chrome prior to 11.0.696.57 is affected by CVE-2011-1437 due to integer overflows in float rendering, exploitable remotely to cause a denial of service and possibly other impact. The vulnerability is part of a set of issues fixed in Chrome 11.0.696.57 (threat posts and CVE listings confirm...
CVE-2011-1446
CVE-2011-1446 affects Google Chrome prior to version 11.0.696.57. The vulnerability allows remote attackers to spoof the URL bar via two vectors: (1) a navigation error and (2) an interrupted load. The issue is documented in multiple sources (NVD entry for CVE-2011-1446 and Chrome patch notes). I...
CVE-2011-1809
CVE-2011-1809 is a Google Chrome use-after-free vulnerability in the accessibility feature reported as affecting Chrome prior to version 12.0.742.91. The flaw could allow remote attackers to cause a denial of service and potentially other impact via unknown vectors. Connected sources identify the...
CVE-2011-1810
CVE-2011-1810 affects Google Chrome's CSS implementation prior to version 12.0.742.91, enabling information disclosure of visit history via unspecified vectors. The issue is tracked in multiple security feeds; OpenVAS/OpenVAS 802102/802103 and ThreatPost reference Chrome 12.0.742.91 as the fix. T...
CVE-2011-1814
CVE-2011-1814 affects Google Chrome prior to version 12.0.742.91. OpenVAS entries map CVE-2011-1814 to multiple Jun 2011 Chrome vulnerabilities, including a read-from-uninitialized-pointer issue that can cause a denial of service. The associated OpenVAS data list Chrome variants on Windows/Linux ...
CVE-2011-2342
Google Chrome (before 12.0.742.91) is affected by CVE-2011-2342 due to a DOM implementation flaw that allows a remote attacker to bypass the Same Origin Policy. The vulnerability is described as a Same Origin bypass in the DOM, with a medium–high risk in public listings and a CVSS base score of 7...
CVE-2011-2361
Google Chrome before 13.0.782.107 has a vulnerability in the Basic Authentication dialog where improper handling of strings could allow remote attackers to capture credentials via a crafted web site (CVE-2011-2361). The issue is tied to Chrome’s authentication UI/Basic Auth dialog, with corrobora...
CVE-2011-2789
CVE-2011-2789 : Use-after-free in Google Chrome prior to 13.0.782.107 allows remote attackers to cause a denial of service or other unspecified impact via vectors related to Pepper plug-in instantiation. A remediation exists: upgrade to Chrome 13.0.782.107 or later.
CVE-2011-2826
CVE-2011-2826 affects Google Chrome prior to 13.0.782.215. The vulnerability enables remote attackers to bypass the Same Origin Policy via vectors related to empty origins, potentially compromising cross-origin protections. The provided documents do not include specific exploit details, affected ...
CVE-2011-2837
CVE-2011-2837 affects Google Chrome on Linux prior to 14.0.835.163. The root cause described in the initial entry is that Chrome did not use PIC and PIE options for position-independent code, with unspecified impact and attack vectors. The connected documents provide corroboration across OpenVAS/...
CVE-2011-2838
CVE-2011-2838 affects Google Chrome prior to 14.0.835.163. The vulnerability stems from improper MIME-type handling when loading plug-ins, with unspecified impact and remote attack vectors as described in the Initial Description. Connected documents corroborate that this CVE is part of Chrome/Chr...
CVE-2011-2839
CVE-2011-2839 affects Google Chrome’s Linux PDF handling: the PDF implementation does not properly use memset, enabling remote DoS and possibly other impact via unknown vectors. A fix is available in Chrome 13.0.782.215 and later.
CVE-2011-2843
CVE-2011-2843 affects Google Chrome before 14.0.835.163. The vulnerability lies in how Chrome handles media buffers, enabling a remote attacker to trigger an out-of-bounds read via unspecified vectors, resulting in a denial of service. The CVE is listed across multiple security feeds (e.g., OpenV...
CVE-2011-2875
CVE-2011-2875 affects Google Chrome’s V8 engine prior to version 14.0.835.163, where improper object sealing leads to type confusion. This can allow remote attackers to cause a denial of service and potentially other unspecified impacts. Remediation is to update Chrome to 14.0.835.163 or later (a...
CVE-2011-3017
CVE-2011-3017 is a use-after-free vulnerability in Google Chrome prior to 17.0.963.56 related to database handling that can cause denial of service or possibly other impact. The connected documents indicate Chrome versions before 17.0.963.56 are affected; remediation involves updating Chrome to 1...
CVE-2011-3114
Summary: CVE-2011-3114 is a Google Chrome vulnerability affecting the PDF functionality, where multiple buffer overflows in PDF handling can be triggered remotely. The baseline description identifies that these buffer overflows could cause a denial of service or potentially have other unspecified...
CVE-2011-3884
CVE-2011-3884 affects Google Chrome up to version before 15.0.874.102. The vulnerability stems from timing issues during DOM traversal, allowing a remote attacker to cause a denial of service or potentially invoke unspecified other impact via a crafted document. The connected documents do not pro...
CVE-2011-3910
CVE-2011-3910 concerns Google Chrome/Chromium prior to 16.0.912.63, where improper handling of YUV video frames could enable a remote attacker to trigger an out-of-bounds read and cause a denial of service. The connected advisories indicate this vulnerability is addressed by updating Chromium to ...
CVE-2011-3912
CVE-2011-3912 describes a use-after-free in Google Chrome SVG filters that could cause a denial of service or other impact. Affected: Chrome prior to 16.0.912.63. Remediation: upgrade to Chromium/Chrome 16.0.912.75 or newer (as reflected in Gentoo GLSA 201201-03 and related advisories). If exploi...