6540 matches found
CVE-2026-17985
CVE-2026-17985 (Google Chrome) : The Chrome vulnerability is described as insufficient policy enforcement in the Speech component that could allow a remote attacker to bypass site isolation using a crafted HTML page, with affected versions prior to 151.0.7922.72. The issue impacts Chrome’s handli...
CVE-2026-4680
CVE-2026-4680 is a use-after-free in Chrome’s FedCM that allows remote code execution inside the sandbox via a crafted HTML page, before version 146.0.7680.165. The vulnerability affects Chrome, with a CVSS 3.1 base score of 8.8 (High) and requires user interaction (UI: Required) with network att...
CVE-2026-5292
CVE-2026-5292 affects Google Chrome WebCodecs: an out-of-bounds memory read is possible via a crafted HTML page in Chrome versions before 146.0.7680.178. Multiple connected sources (Chromium/Chrome security notes and vendor advisories) corroborate that the WebCodecs component is the vulnerable su...
CVE-2026-7345
CVE-2026-7345 affects Google Chrome (earlier than 147.0.7727.138). The root cause is insufficient validation of untrusted input in the Feedback component. This could allow a remote attacker with access to a compromised renderer process to escape the sandbox via a crafted HTML page, leading to pot...
CVE-2026-7350
CVE-2026-7350 is corroborated across multiple sources (NVD, Debian, CVE lists) as a use-after-free in WebMIDI in Google Chrome prior to 147.0.7727.138. A remote attacker who has compromised the renderer could trigger a sandbox escape via a crafted HTML page. The advisory notes the high severity a...
CVE-2026-78903
CVE-2026-78903 is an incomplete cleanup flaw in the SiteIsolation feature of Google Chrome prior to 152.0.7977.65 . A remote attacker who has already compromised the renderer process can use a crafted HTML page to bypass site isolation, potentially gaining unauthorized access to sensitive informa...
CVE-2026-78985
Google Chrome prior to 152.0.7977.65 is affected by an incorrect reference resolution flaw in its FileSystem component. A remote attacker can leverage social engineering to trick a user into visiting a crafted HTML page , potentially executing arbitrary code outside the browser's security sandbox...
CVE-2026-79232
CVE-2026-79232 is a use-after-free vulnerability in the Aura component of Google Chrome , affecting versions prior to 152.0.7977.65 . A remote attacker can exploit memory corruption by delivering a crafted HTML page, potentially achieving arbitrary code execution outside the browser's security sa...
CVE-2026-7969
CVE-2026-7969 is an integer overflow in the Chrome Network component prior to 148.0.7778.96. A remote attacker who has compromised the renderer could bypass the same-origin policy via a crafted HTML page. Affected software: Google Chrome (Desktop) prior to 148.0.7778.96. Impact details are limite...
CVE-2026-84333
CVE-2026-84333 is a use-after-free vulnerability in Dawn , a graphics abstraction component of Google Chrome , affecting versions prior to 152.0.7977.75 on Android (and 152.0.7977.76 on Windows/Mac). A remote attacker can execute arbitrary code outside the sandbox by serving a crafted HTML page, ...
CVE-2026-8534
CVE-2026-8534 describes an integer overflow in the GPU path of Google Chrome on Linux and ChromeOS, before version 148.0.7778.168. A remote attacker who already compromised the renderer process could potentially escape the Chrome sandbox via a crafted HTML page. Affected component is the GPU/Chro...
CVE-2026-8564
CVE-2026-8564 describes an issue in Google Chrome’s Downloads UI on Android and macOS, where an incorrect security UI could allow a remote attacker to perform UI spoofing via a crafted HTML page. Affected versions are prior to 148.0.7778.168; remediation is to update to 148.0.7778.168 or later. T...
CVE-2026-8569
CVE-2026-8569 describes an out-of-bounds write in Codecs of Google Chrome on macOS, prior to 148.0.7778.168, that could enable a remote attacker to potentially perform a sandbox escape via a crafted video file. The vulnerability affects Chrome on macOS; the underlying issue is in the Codecs compo...
CVE-2026-87556
CVE-2026-87556 is a missing authorization vulnerability in the Browser component of Google Chrome prior to version 153.0.8010.36 . A remote attacker can bypass system access restrictions by delivering a crafted HTML page to the victim. The NVD-assigned CVSS v3.1 score is 4.3 (Medium) , with a net...
CVE-2026-9957
CVE-2026-9957 describes a use-after-free in Google's Chrome PDF handling (Chromium) prior to version 148.0.7778.216. A crafted PDF could allow a remote attacker to execute arbitrary code inside Chrome’s sandbox. The public references confirm the vulnerability in the PDF component of Chromium with...
CVE-2010-0664
Google Chrome prior to version 4.0.249.78 is affected by a stack consumption vulnerability in ChildProcessSecurityPolicy::CanRequestURL. The issue allows remote attackers to trigger memory consumption and a crash by supplying a URL that uses multiple protocols (e.g., repeated view-source: sequenc...
CVE-2010-1228
CVE-2010-1228 affects Google Chrome prior to 4.1.249.1036, with multiple race conditions in the sandbox infrastructure. The connected OpenVAS/NVD/CVE records confirm the affected product and version range and identify the underlying issue as race conditions in the sandbox. No explicit exploit vec...
CVE-2010-2108
Google Chrome before 5.0.375.55 is affected by CVE-2010-2108: an unspecified vulnerability that allows remote bypass of the whitelist‑mode plugin blocker via unknown vectors. The issue is documented in CVE‑2010‑2108 and is associated with multiple related Chrome vulnerabilities (including issues ...
CVE-2010-2296
Google Chrome before 5.0.375.70 is affected by CVE-2010-2296 due to the implementation of unspecified DOM methods that can bypass the Same Origin Policy via unknown vectors. The vulnerability enables remote attackers to circumvent SOP, with impact described as complete confidentiality/integrity/a...
CVE-2011-0474
Google Chrome before 8.0.552.237 and Chrome OS before 8.0.552.344 are affected by a flaw in handling CSS token sequences with cursors that can lead to a denial of service and possibly other impact via unknown vectors that produce a stale pointer. The provided documents identify the vulnerable sof...
CVE-2011-1194
Summary (CVE-2011-1194): Google Chrome before 10.0.648.127 contains multiple vulnerabilities that allow remote attackers to bypass the pop-up blocker via unknown vectors. The impact is bypass of the browser’s pop-up protections, with no detailed exploit information provided in the sources. Affect...
CVE-2011-1200
CVE-2011-1200 affects Google Chrome prior to 10.0.648.127. The issue is described as an improper cast of an unspecified variable during text rendering, allowing remote attackers to cause a denial of service or potentially other impact via a crafted document. Connected sources (NVD, OpenVAS/NESSUS...
CVE-2011-1286
Google V8 in Google Chrome before 10.0.648.127 is affected by CVE-2011-1286. The issue allows remote attackers to cause a denial of service or potentially other impact by triggering incorrect memory access; vectors are undocumented in the provided sources. Affected component: V8 engine used by Ch...
CVE-2011-1294
The CVE-2011-1294 entry corresponds to Google Chrome before version 10.0.648.204, where improper handling of CSS token sequences could cause a denial of service and possibly other impact via a stale pointer. Public records (NVD/OpenVAS entries) corroborate Chrome-related vulnerabilities in Mar 20...
CVE-2011-1303
Google Chrome prior to version 11.0.696.57 is affected by CVE-2011-1303 due to a stale pointer in the handling of floating objects, which can allow remote attackers to cause a denial of service or unspecified impact. The issue is addressed in Chrome 11.0.696.57, per vendor updates and vulnerabili...
CVE-2011-1439
CVE-2011-1439 affects Google Chrome on Linux prior to 11.0.696.57. The vulnerability arises from improper isolation of renderer processes, with unspecified impact and remote attack vectors described in the entry. The issue was fixed in Chrome 11.0.696.57 (stable update), per Google's Chrome relea...
CVE-2011-1819
Google Chrome (before 12.0.742.91) is vulnerable to extension-injected access into chrome:// pages. The connected OpenVAS entries enumerate CVE-2011-1819 as part of a multi‑vulnerability set titled “Google Chrome Multiple Vulnerabilities (Jun 2011),” with the underlying issue described as extensi...
CVE-2011-2348
CVE-2011-2348 affects Google Chrome with the V8 engine prior to 12.0.742.112. Root cause: an incorrect bounds check in V8. Impact: remote denial of service and possibly unspecified other effects via unknown vectors. Remediation: upgrade to a Chrome/Chromium version released after 12.0.742.112 (up...
CVE-2011-2761
CVE-2011-2761 affects Google Chrome 14.0.794.0, where reloading a page generated by a POST is mishandled, enabling user‑assisted remote attackers to trigger a DoS (application crash) via a crafted site. The issue is related to the GetWidget methods. Public sources describe the vulnerability acros...
CVE-2011-2799
Technical details about CVE-2011-2799 are not publicly available in the provided documents. The connected items reference Apple Safari/iTunes entries and OpenVAS checks but do not specify Chrome-related root cause, affected versions, or a fix; monitor for updates.
CVE-2011-2804
CVE-2011-2804 affects Google Chrome up to version 13.0.782.107, where the PDF viewer mishandles nested functions in PDF documents, enabling remote crashes or potentially other impact via crafted files. For Chrome, this was associated with a Medium (CVSS v2 4.3) severity and was observable as an a...
CVE-2011-2829
CVE-2011-2829 affects Google Chrome prior to 13.0.782.215 on 32-bit platforms, via an integer overflow in a uniform arrays path. Impact: remote denial of service and possibly other unspecified effects. Exploitation details are not provided in the documents. Remediation: update to Chrome 13.0.782....
CVE-2011-2848
CVE-2011-2848 affects Google Chrome before 14.0.835.163, enabling user-assisted remote attackers to spoof the URL bar through forward-button related vectors. The description explicitly states the vulnerability type and impact as URL-bar spoofing; no additional exploit vectors or mitigations are d...
CVE-2011-2849
CVE-2011-2849 affects Google Chrome before 14.0.835.163. The WebSockets implementation can trigger a NULL pointer dereference, causing a denial of service (application crash) via unspecified vectors. Connected sources confirm Chrome/Chromium vulnerability tracking and a remediation pathway via up...
CVE-2011-2852
The CVE-2011-2852 entry concerns Google Chrome's V8 engine, where an Off-by-one error in V8 (as shipped in Chrome prior to 14.0.835.163) may allow a remote attacker to cause a denial of service or potentially other impact via unknown vectors. Affected product/component: Google Chrome using V8. Ro...
CVE-2011-2874
Technical details for CVE-2011-2874 are not publicly provided in the supplied documents. No explicit affected products, versions, impact, or remediation are stated here. Monitor for updates.
CVE-2011-2877
Technical details about CVE-2011-2877 are not publicly provided in the supplied documents. The connected sources reference this CVE among broader Apple/Chromium vulnerability collections but do not specify affected component, impact, exploit vectors, or remediation.
CVE-2011-3023
Google Chrome contains a use-after-free vulnerability in drag-and-drop handling (CVE-2011-3023). It affects Chrome versions before 17.0.963.56 and can lead to denial of service or possibly other impact, potentially user-involvement required. Remediation: upgrade to Chrome 17.0.963.56 or newer. No...
CVE-2011-3025
CVE-2011-3025 affects Google Chrome prior to 17.0.963.56; the issue is a parsing vulnerability in H.264 data that can cause a remote denial of service via an out-of-bounds read. No exploitation details are provided in the sources beyond this description. A fix is available in Chrome 17.0.963.56 a...
CVE-2011-3040
Google Chrome before 17.0.963.65 is affected by CVE-2011-3040 due to improper handling of text, enabling a remote attacker to cause a denial of service via a crafted document (out-of-bounds read). The vulnerability is addressed by updating to Chrome 17.0.963.65 or later (per the public Chrome upd...
CVE-2011-3072
CVE-2011-3072 affects Google Chrome prior to 18.0.1025.151, where remote attackers could bypass the Same Origin Policy via popup-related vectors. The issue is part of a set of Chromium/Chrome vulnerabilities; impact includes partial confidentiality, integrity, and availability. Remediation: updat...
CVE-2011-3077
CVE-2011-3077 is a Google Chrome vulnerability described in multiple sources as a use-after-free in the script bindings, leading to possible denial of service or other impact. The cited description specifies Chrome versions older than 18.0.1025.151 are affected, with vectors related to a read-aft...
CVE-2011-3109
Affected software: Chromium on Linux (GTK UI). Vulnerability: CVE-2011-3109 is a bad cast in the GTK UI implementation, enabling denial of service; details point to an unspecified variable cast issue in Chrome prior to 19.0.1084.52. Impact: Denial of service (partial confidentiality/integrity not...
CVE-2011-3896
CVE-2011-3896 refers to a buffer overflow in Google Chrome prior to 15.0.874.120, related to shader variable mapping, potentially allowing remote impact such as DoS or other effects. Connected sources (Gentoo GLSA 201111-05) specify multiple vulnerabilities in Chromium and V8 with a practical rem...
CVE-2011-3904
CVE-2011-3904 is a use-after-free in Chrome/Chromium bidi handling (Google Chrome before 16.0.912.63). The OpenVAS/Gentoo entries corroborate a high-severity flaw with potential DoS/impact, but explicit exploitation details are not provided in the documents. Remediation per sources: upgrade to Ch...
CVE-2011-3907
Chromium and V8 are affected by multiple vulnerabilities including CVE-2011-3907 (URL bar spoofing) as part of the Chromium/Chromium-based web engine family. Public entries in Gentoo GLSA-201201-03 describe that a number of issues could allow a context‑dependent attacker to lure a user to a craft...
CVE-2011-3921
CVE-2011-3921: A use-after-free in Google Chrome prior to 16.0.912.75 affects the browser’s handling of animation frames, allowing remote-triggered denial of service and potentially other impact. Affected software: Google Chrome (pre-16.0.912.75). Root cause: use-after-free in animation-frame pro...
CVE-2011-3960
Affected software: Google Chrome. Issue: pre-17.0.963.46 builds fail to correctly decode audio data, enabling remote attackers to cause a denial of service via an out-of-bounds read (vectors unspecified). Root cause: improper audio data handling in decoding path. Impact: Denial of Service; no exp...
CVE-2011-3961
CVE-2011-3961 describes a race condition in Google Chrome prior to 17.0.963.46 that could allow a remote attacker to execute arbitrary code by triggering a crash in a utility process. The impact is high, with potential full control of the affected host if exploited. The vulnerability affects Goog...