CVE-2010-3415

CVE-2010-3415 affects Google Chrome versions before 6.0.472.59; the flaw is in Geolocation handling that could cause memory corruption and a denial of service (or other unspecified impact) via unknown vectors. The connected documents also reference overlapping use-after-free Geolocation issues in...

CVE-2026-13909

CVE-2026-13909 refers to insufficient policy enforcement in Google Chrome DevTools, allowing a remote attacker who has compromised the renderer process to potentially escape the sandbox via a crafted HTML page in Chrome versions before 150.0.7871.47. The vulnerability is described across multiple...

CVE-2026-13922

Summary of CVE-2026-13922 : A side-channel information leak in Chrome’s Paint component allows a remote attacker to exfiltrate cross-origin data via a crafted HTML page. Affected product/version: Google Chrome (Paint functionality) up to version 150.0.7871.47. Root cause: described as a side-chan...

CVE-2026-13931

CVE-2026-13931 affects Google Chrome on Windows prior to 150.0.7871.47. The root cause is an inappropriate implementation in Media that allows a renderer-capable attacker to perform UI spoofing via a crafted HTML page. Impact is UI spoofing with no data exfiltration stated; upgrade to 150.0.7871....

CVE-2026-14095

CVE-2026-14095 affects Google Chrome before 150.0.7871.47. The issue is insufficient policy enforcement in the Browser component, which could allow a remote attacker who has compromised the renderer process to escape the sandbox via a crafted HTML page. The connected sources indicate the impact a...

CVE-2026-14125

The CVE affects Google Chrome’s ANGLE component in Chromium. Affected: Chrome builds using ANGLE before version 150.0.7871.47. Description indicates an uninitialized use in ANGLE that could let a remote attacker obtain potentially sensitive information from process memory via a crafted HTML page....

CVE-2026-14149

CVE-2026-14149 is a use-after-free in Chrome’s Linux Audio path prior to 150.0.7871.47, enabling remote code execution via a crafted HTML page. Affected: Google Chrome on Linux; root cause: use-after-free in Audio handling. Impact: arbitrary code execution. Mitigation: update Chrome to 150.0.7871...

CVE-2026-14393

CVE-2026-14393: Use-after-free in V8 (Chrome) allows remote code execution inside the sandbox via a crafted HTML page. Affected: Google Chrome's V8 engine prior to version 150.0.7871.46. Impact: arbitrary code execution with high/total impact as per the CVSS vector. Remediation: update to Chrome ...

CVE-2026-14403

CVE-2026-14403: Use-after-free in V8 (Chrome) allows remote code execution inside a sandbox via a crafted HTML page on Chrome versions prior to 150.0.7871.46. Severity is listed as Low; the vulnerability stems from a V8 use-after-free condition. Documents do not specify exploitation status or con...

CVE-2026-14415

In Chrome, CVE-2026-14415 concerns an inappropriate implementation in V8 that affects Google Chrome before version 150.0.7871.46. A remote attacker could exploit the issue by persuading a user to perform specific UI gestures, potentially triggering heap corruption through a crafted HTML page. The...

CVE-2026-14428

The CVE-2026-14428 entry covers Google Chrome on Android (Dawn) with insufficient validation of untrusted input, allowing a remote attacker who has already compromised the renderer process to potentially perform a sandbox escape via a crafted HTML page. Affected software is Chrome on Android, spe...

CVE-2026-14429

CVE-2026-14429 affects Google Chrome and its Skia rendering library. Insufficient validation of untrusted input in Skia before Chrome 150.0.7871.46 can allow a remote attacker who has compromised the renderer process to potentially escape the sandbox via a crafted HTML page. Impact is described a...

CVE-2026-15111

CVE-2026-15111 is a Chrome vulnerability: a use-after-free in Views causing heap corruption when a user is tricked into specific UI gestures on a crafted HTML page. Affected software: Google Chrome prior to 150.0.7871.115. Root cause: use-after-free in Views leading to potential heap corruption. ...

CVE-2026-17664

CVE-2026-17664 affects Google Chrome loaders prior to 151.0.7922.72. Insufficient validation of untrusted input in the Loader can permit a remote attacker who has compromised the renderer process to leak cross-origin data via a crafted HTML page. The CVE is documented with Chromium-related severi...

CVE-2026-17707

CVE-2026-17707 is a Google Chrome vulnerability affecting Windows builds prior to 151.0.7922.72, caused by an uninitialized use in Media. A renderer process compromise could let an attacker read sensitive data from process memory via a crafted HTML page. The issue is listed as High severity and i...

CVE-2026-17778

CVE-2026-17778 is a use-after-free vulnerability in Google Chrome’s Extensions component. The issue permits a remote attacker to execute arbitrary code inside a sandbox by convincing a user to install a crafted Chrome Extension; impact is described as arbitrary code execution with sandbox constra...

CVE-2026-17780

The CVE-2026-17780 issue affects Google Chrome/Chromium’s Isolated Web Apps component. An inappropriate implementation allowed a remote attacker to bypass navigation restrictions using a crafted HTML page, in versions prior to 151.0.7922.72. Impact is described as a bypass of navigation controls ...

CVE-2026-17818

The CVE-2026-17818 vulnerability affects Google Chrome’s Network component in Chromium: an inappropriate implementation flaw allows a remote attacker to inject arbitrary scripts or HTML (UXSS) via a crafted HTML page. Affected version range is Chrome prior to 151.0.7922.72; the issue stems from a...

CVE-2026-17819

CVE-2026-17819 describes an inappropriate implementation in the WebAppInstalls component of Google Chrome (Chromium) up to version 151.0.7922.72, enabling a remote attacker to perform UI spoofing via a crafted HTML page. Affected product/component is the Chrome/Chromium WebAppInstalls path; root ...

CVE-2026-17820

CVE-2026-17820 affects Google Chrome's Autofill component. The issue is caused by insufficient policy enforcement, enabling a remote attacker to leak cross-origin data via a crafted HTML page. Affected versions are Chrome prior to 151.0.7922.72; the advisory and linked updates suggest upgrading t...

CVE-2026-17830

CVE-2026-17830 concerns Chrome for iOS (Google Chrome on iOS) prior to 151.0.7922.72, where an inappropriate implementation allowed a remote attacker to bypass navigation restrictions via a crafted HTML page. Root cause: implementation flaw in the iOS Chromium-based webview. Impact: navigation re...

CVE-2026-17917

CVE-2026-17917 affects Google Chrome on iOS. The issue is an insufficent policy enforcement in Chrome for iOS prior to version 151.0.7922.72, which could allow a remote attacker to bypass discretionary access control via a crafted HTML page. The advisory notes a Chromium-based vulnerability with ...

CVE-2026-17953

CVE-2026-17953 : An insufficient policy enforcement flaw in the WebView component of Chromium-based Google Chrome on Android allows a remote attacker to bypass navigation restrictions via a crafted HTML page. Upstream and Red Hat notes attribute the issue to inadequate WebView policy enforcement;...

CVE-2026-18006

CVE-2026-18006 : AUI spoofing vulnerability in Google Lens within Google Chrome, caused by an inappropriate implementation, allows a remote attacker who has compromised the renderer process to spoof UI via a crafted HTML page. Affected: Chrome prior to 151.0.7922.72 (Chromium-based). Impact is UI...

CVE-2026-18010

CVE-2026-18010 : In Google Chrome (and Chromium-based) Passwords component, an inappropriate implementation allows a remote attacker to trigger UI spoofing via malicious network traffic. This affects Chrome versions prior to 151.0.7922.72 (Chromium security severity: Low). The NVD entry notes a l...

CVE-2026-2317

CVE-2026-2317 affects Google Chrome/Chromium: an inappropriate implementation in Animation prior to 145.0.7632.45 allows a remote attacker to leak cross-origin data via a crafted HTML page. The Chrome 145 stable update (and Chromium fixes) address this vulnerability. Exploitation details are not ...

CVE-2026-6364

CVE-2026-6364 is a reported out-of-bounds read in the Google Chrome Skia component, affecting Chrome before version 147.0.7727.101. The CVE description states that an attacker could obtain potentially sensitive information from process memory via a crafted file. Public advisories confirm the issu...

CVE-2026-79126

CVE-2026-79126 is an incorrect provision of specified functionality in the Proxy component of Google Chrome on Windows , affecting versions prior to 152.0.7977.65 . An adjacent attacker can exploit this by sending crafted network traffic , potentially obtaining sensitive information . Chromium ra...

CVE-2026-8511

CVE-2026-8511: Use-after-free in Google Chrome UI (pre-148.0.7778.168) allowing a remote attacker to potentially perform a sandbox escape via a crafted HTML page. Affected software is Google Chrome (Chromium-based); root cause is a UI use-after-free condition. The public records describe a Critic...

CVE-2026-8516

CVE-2026-8516 affects Google Chrome (pre-148.0.7778.168) where insufficient validation of untrusted input in DataTransfer could allow a remote attacker to obtain potentially sensitive information from process memory. The attack requires convincing a user to perform specific UI gestures via a craf...

CVE-2026-8587

CVE-2026-8587 describes a use-after-free in Chrome’s Extensions on macOS that allows arbitrary code execution when a user is convinced to install a crafted (malicious) extension. Affected product: Google Chrome running on Mac. Vulnerable component: Extensions subsystem (use-after-free in extensio...

CVE-2026-87550

CVE-2026-87550 is an improper encoding or escaping flaw in CSS output in Google Chrome prior to 153.0.8010.36 , allowing a remote attacker to bypass the web origin policy via a crafted HTML page. The Chromium security team rated the severity as Medium (CVSS 4.3), requiring user interaction with n...

CVE-2026-87658

CVE-2026-87658 is an information leak in the Extensions component of Google Chrome prior to version 153.0.8010.36 . A remote attacker could leverage social engineering to deliver a crafted Chrome extension, thereby obtaining cross-origin data that should have been isolated. The vulnerability is r...

CVE-2010-2106

Google Chrome before 5.0.375.55 is reported to be vulnerable to spoofing the URL bar via vectors involving unload event handlers. The CVE-2010-2106 entry is supported by multiple sources (NVD, OpenVAS/Nessus aggregations) indicating a URL-spoofing flaw tied to unload handlers; the OpenVAS/Nessus ...

CVE-2010-3254

Technical details for CVE-2010-3254 are not publicly detailed in the provided connected documents. The set includes references and mappings to the CVE across OpenVAS, Ubuntu advisories, and NVD, but no concrete exploit vectors, affected versions beyond Chrome before 6.0.472.53, or remediation spe...

CVE-2010-3412

CVE-2010-3412 refers to Google Chrome’s console implementation race condition in versions prior to 6.0.472.59. The description from the CVE entry states an unspecified impact/attack vector. Connected documents corroborate multiple vulnerability listings for Google Chrome around Sep 2010 (includin...

CVE-2010-4574

CVE-2010-4574 affects Google Chrome (before 8.0.552.224) and Chrome OS (before 8.0.552.343) on 64-bit Linux. The vulnerability lies in Pickle::Pickle (base/pickle.cc), where incorrect pointer arithmetic can bypass message deserialization validation, enabling remote input to cause denial of servic...

CVE-2011-0475

Google Chrome before 8.0.552.237 and Chrome OS before 8.0.552.344 are affected by a use-after-free vulnerability in PDF handling, enabling remote denial of service or possibly other impact. Root cause: use-after-free in the PDF document path. Affected products/components: Google Chrome (pre-8.0.5...

CVE-2011-0476

CVE-2011-0476 : Google Chrome before 8.0.552.237 and Chrome OS before 8.0.552.344 are affected. A PDF document can trigger an out-of-memory error, causing stack memory corruption and a possible denial of service. The description is supported by multiple sources (NVD/OpenVAS entries) with a high C...

CVE-2011-1191

Google Chrome is affected by CVE-2011-1191 (use-after-free in the handling of DOM URLs) prior to version 10.0.648.127. The issue can allow remote denial of service or possibly other impact. The connected documents specify the vulnerable component as Chrome (DOM URL handling) and the affected rang...

CVE-2011-1198

The CVE-2011-1198 entry concerns Google Chrome’s video functionality prior to version 10.0.648.127. The vulnerability arises from a malformed out-of-bounds structure which can be triggered by unspecified vectors, leading to a denial-of-service and possibly other unspecified impacts. The provided ...

CVE-2011-2847

This CVE (CVE-2011-2847) is a use-after-free in Google Chrome's document loader, exploitable via a crafted document to cause a denial of service (and possibly other impact). Affected software: Chrome before 14.0.835.163. Impact is described as DoS/other unspecified effects; remediation is to upgr...

CVE-2011-3070

CVE-2011-3070 is a use-after-free in Google Chrome prior to 18.0.1025.151 involving the V8 bindings, with impact stated as remote denial of service or possibly other effects. The connected documents corroborate the CVE across Chrome/OpenVAS entries; however, no concrete exploit details or patched...

CVE-2011-3086

CVE-2011-3086 affects Google Chrome before 19.0.1084.46, where a use-after-free flaw in the STYLE element can be exploited remotely to cause a denial of service and possibly other impacts. The provided documents confirm this CVE is associated with Chrome’s handling of the STYLE element, with expl...

CVE-2011-3090

CVE-2011-3090 is referenced in openSUSE openSUSE-SU-2012:0656-1 as part of a Chromium v8 update. It indicates a race condition with worker processes in Chromium/Chrome prior to the patch, potentially enabling denial-of-service or other unspecified impact. The remediation in the linked patch is to...

CVE-2011-3906

CVE-2011-3906 affects Google Chrome/Chromium prior to 16.0.912.63, arising from the PDF parser causing an out-of-bounds read that can lead to remote denial of service. The Gentoo GLSA and related OpenVAS entries reference Chromium vulnerabilities and list a fix by upgrading to Chromium 16.0.912.7...

CVE-2011-3925

CVE-2011-3925 is a use-after-free vulnerability in the Safe Browsing feature of Chromium-based browsers, with exploitation possible via a navigation entry and an interstitial page, potentially causing denial of service through heap memory corruption (impact listed as partial confidentiality, inte...

CVE-2012-2832

The CVE entry CVE-2012-2832 concerns the image-codec in Google Chrome’s PDF functionality. The vulnerability stems from the PDF image-decoding path not initializing an unspecified pointer, enabling a crafted document to cause a denial of service and potentially other impact. Affected product: Goo...

CVE-2012-2849

CVE-2012-2849 affects Google Chrome’s GIF decoder. An off-by-one read in the GIF decoder can be triggered by a crafted image, leading to a denial of service. Affected versions are Chrome before 21.0.1180.57 on macOS and Linux, and before 21.0.1180.60 on Windows and Chrome Frame. Public references...

CVE-2012-2854

Google Chrome before 21.0.1180.57 on macOS/Linux and before 21.0.1180.60 on Windows/Chrome Frame is affected by CVE-2012-2854, which allows a remote attacker with access to a WebUI renderer process to obtain potentially sensitive pointer values. The issue is documented in multiple advisories and ...