CVE-2020-6482

CVE-2020-6482 describes an insufficient policy enforcement vulnerability in Chrome’s developer tools. The root cause is improper access control in the developer tools component, allowing a user who installs a crafted malicious extension to bypass navigation restrictions. This could enable a remot...

CVE-2020-6487

CVE-2020-6487 corresponds to an access-restriction bypass in the downloads component of the Chromium/Google Chrome browser prior to version 83.0.4103.61. The issue is described as insufficient policy enforcement in downloads that allowed a remote attacker to bypass navigation restrictions via a c...

CVE-2020-6530

CVE-2020-6530 affects Google Chrome (Chromium-based) with an out-of-bounds memory access in Developer Tools prior to 84.0.4147.89. A user-assisted exploit via a crafted malicious extension could potentially cause heap corruption. The connected advisories indicate fixes in Chrome/Chromium branches...

CVE-2022-0799

Technical details for CVE-2022-0799 are not publicly provided in the connected documents. Please monitor for updates from official advisories.

CVE-2019-5817

CVE-2019-5817 is a heap buffer overflow in ANGLE used by Google Chrome on Windows, prior to Chrome 74.0.3729.108. The issue could allow a remote attacker to cause heap corruption via a crafted HTML page. Affected component: ANGLE in Chrome (Windows). Root cause per the linked records is a heap bu...

CVE-2020-6378

CVE-2020-6378 affects Google Chrome/Chromium’s speech recognition components, where a use-after-free in the speech recognizer can enable remote code execution. The vulnerability exists in Chromium/Chrome builds prior to version 79.0.3945.130, as indicated by the CVE description and multiple vendo...

CVE-2020-6422

CVE-2020-6422 is a use-after-free vulnerability in WebGL of Google Chrome before 80.0.3987.149, enabling a remote attacker to potentially cause heap corruption via a crafted HTML page. Mitigation: upgrade Chromium/Chrome to 80.0.3987.149 or newer (reported in Debian/Fedora advisories and Gentoo/G...

CVE-2020-6488

CVE-2020-6488 affects Google Chrome prior to 83.0.4103.61, with an insufficient policy enforcement in downloads that allows a remote attacker to bypass navigation restrictions via a crafted HTML page. Impact: navigation restriction bypass in downloads; attacker could potentially influence downloa...

CVE-2022-0603

CVE-2022-0603 is a Use‑After‑Free in Chrome OS File Manager affecting Google Chrome/Chromium. Root cause: use-after-free in the File Manager component, enabling a remote attacker to potentially trigger heap corruption via a crafted HTML page. Affected software version: Chrome OS builds prior to 9...

CVE-2020-6469

CVE-2020-6469 concerns Google Chrome/Chromium's developer tools. The connected sources explicitly describe an "insufficient policy enforcement" issue in the developer tools before Chrome 83.0.4103.61, which could allow an attacker to persuade a user to install a malicious extension and potentiall...

CVE-2023-1233

Summary: CVE-2023-1233 refers to an insufficient policy enforcement issue in Resource Timing in Google Chrome (Chromium-based) before version 111.0.5563.64. The vulnerability could allow a user-wanted attacker who persuades a user to install a malicious extension to potentially access sensitive i...

CVE-2023-1236

CVE-2023-1236 affects Google Chrome (Chromium-based) prior to 111.0.5563.64 via an inappropriate implementation in Internals that allowed remote spoofing of an iframe origin through a crafted HTML page. The issue is logged as a Low severity in Chromium terms (CVSS 3.1 base 4.3, MEDIUM overall). R...

CVE-2019-13697

CVE-2019-13697 is a cross-origin size leak in Google Chrome/Chromium prior to 77.0.3865.120. Connected sources confirm a fix in the 77.0.3865.120 release (and security advisories from Debian, Mageia, Arch Linux) for Chromium/Chrome, addressing the cross-origin information disclosure. Affected com...

CVE-2019-13723

CVE-2019-13723 is a use-after-free vulnerability in Chromium/Google Chrome’s Web Bluetooth implementation. The issue affects Web Bluetooth handling in Chromium browser builds prior to version 78.0.3904.108, where a compromised renderer could trigger heap corruption via a crafted HTML page to pote...

CVE-2019-5776

CVE-2019-5776 affects Google Chrome’s Omnibox (URL bar): a correctness flaw in handling confusable characters in domain names allows a remote attacker to spoof the displayed URL. Affected software: Chrome before 72.0.3626.81. Impact: spoofed Omnibox content (phishing risk). Remediation: upgrade t...

CVE-2020-6397

CVE-2020-6397 is described as an insecure sharing implementation in Google Chrome/Chromium that allows a remote attacker to spoof the security UI via a crafted HTML page. Public records among connected sources confirm this as a content spoofing issue in the sharing component of Chromium/Chrome up...

CVE-2020-6454

CVE-2020-6454 affects Chromium/Google Chrome extensions: a use-after-free in the extensions component could allow heap corruption and arbitrary code execution. Public docs indicate this affects Chrome before 81.0.4044.92 (and Chromium up to 81.0.4044.92). Debian and Arch advisories list the issue...

CVE-2022-2160

The CVE-2022-2160 entry concerns Insufficient policy enforcement in DevTools for Google Chrome on Windows before 103.0.5060.53. A malicious extension installed by a user could allow access to potentially sensitive data from local files via a crafted HTML page. Connected documents corroborate the ...

CVE-2022-2481

CVE-2022-2481 affects Google Chrome/Chromium, describing a use-after-free in Views that could allow heap corruption via UI interactions. The issue is tied to Chrome/Chromium builds prior to 103.0.5060.134. Exploitation requires user interaction, with remote threat actors potentially triggering th...

CVE-2019-5869

CVE-2019-5869 : Use-after-free in Blink in Google Chrome/Chromium before 76.0.3809.132 allows a remote attacker to potentially exploit heap corruption via a crafted HTML page. Mitigation endorsed by multiple vendors: update to patched Chrome/Chromium builds (e.g., Chrome 76.0.3809.132 or later; D...

CVE-2020-6495

CVE-2020-6495 refers to an insufficient policy enforcement vulnerability in Google Chrome’s Developer Tools prior to 83.0.4103.97. The issue, identified in multiple sources (CNVD-2020-32320; Arch Linux ASA-202006-3; Debian/ Gentoo advisories), enables a threat actor to exploit a crafted Chrome ex...

CVE-2022-1634

CVE-2022-1634 affects Google Chrome (Browser UI component). The underlying issue is a Use-after-free in the Browser UI, exploitable via specific UI interactions after convincing a user to engage in those interactions. The vulnerability was addressed in Chrome stable channel update to version 101....

CVE-2023-1232

CVE-2023-1232 affects Google Chrome (Chromium-based) Resource Timing: insufficient policy enforcement can allow a remote attacker to obtain potentially sensitive information from the API via a crafted HTML page. The issue is documented as Low severity and is mitigated by upgrading to Chrome 111.0...

CVE-2023-5480

CVE-2023-5480 affects Chromium-based browsers (Google Chrome/Chromium) with versions prior to 119.0.6045.105. It describes an inappropriate implementation in Payments that could allow a remote attacker to bypass XSS protections via a malicious file. Public advisories in this set confirm remediati...

CVE-2019-5784

CVE-2019-5784 affects Chromium/Chrome’s V8 engine. Root cause: incorrect handling of deferred code in V8 leads to potential heap corruption via a crafted HTML page. Impact: remote attacker could exploit heap corruption. Affected versions: Chrome/Chromium before 72.0.3626.96. Remediation: upgrade ...

CVE-2020-6465

CVE-2020-6465 is a use-after-free vulnerability in Chrome/Chromium’s reader mode (on Chrome/Chromium before version 83.0.4103.61). The underlying issue is a use-after-free in the reader mode path that could allow a remote attacker who has compromised the renderer process to cause arbitrary code e...

CVE-2022-1491

The CVE-2022-1491 entry concerns Google Chrome/Chromium’s Bookmarks: a Use-after-Free in the Bookmarks component could allow a remote attacker to trigger heap corruption. The flaw requires specific user interaction and affects Chrome/Chromium builds prior to 101.0.4951.41. The issue was fixed in ...

CVE-2025-5280

CVE-2025-5280 is a Google Chrome/Chromium vulnerability: an out-of-bounds write in V8 could enable heap corruption via a crafted HTML page, impacting Chrome versions prior to 137.0.7151.55. The Chrome security note confirms the fix in 137.0.7151.55 (Linux/Windows/Mac) and Debian security advisori...

CVE-2019-13676

CVE-2019-13676 affects Chromium/Google Chrome and is described as an error in a certificate warning, contributing to domain spoofing scenarios. Public sources in the connected docs tie this to the Chromium/Chrome 78 updates that fixed this issue (e.g., CVEs tracked in Fedora/Debian advisories). T...

CVE-2019-13713

CVE-2019-13713 affects Google Chrome/Chromium prior to 78.0.3904.70, caused by insufficient policy enforcement in JavaScript that allowed cross-origin data leakage via a crafted HTML page. Public advisories confirm the issue and that it was fixed in 78.0.3904.70 (updates for Chrome/Chromium and d...

CVE-2020-6398

CVE-2020-6398 affects Google Chrome/Chromium components where the PDFium library contains an uninitialized data usage, enabling potential heap corruption via a crafted PDF file. Public sources in the connected docs consistently reference a fix in version 80.0.3987.87 (and newer) for Chrome/Chromi...

CVE-2020-6431

Chromium/Google Chrome (CVE-2020-6431) has an insufficient policy-enforcement check in full-screen mode that could allow a crafted HTML page to spoof security UI. Affected products include Chromium and Google Chrome prior to version 81.0.4044.92. Debian/Arch/Fedora advisories in the connected doc...

CVE-2020-6436

CVE-2020-6436 refers to a use-after-free in the window management component of the Chromium/Chrome browser prior to version 81.0.4044.92. Public sources in the connected documents consistently identify this as a use-after-free vulnerability in Chromium that could enable a remote attacker to trigg...

CVE-2024-7025

CVE-2024-7025 describes an integer overflow in the Layout component of Google Chrome, exploitable via a crafted HTML page to cause heap corruption. Multiple connected advisories confirm the issue affects Chrome builds prior to version 129.0.6668.89 and have been addressed in later releases. Publi...

CVE-2019-13674

CVE-2019-13674 (Google Chrome) is a type-confusion in Chrome’s V8 engine related to induction-variable type handling (Infinity/NaN) inside a loop. The vulnerability could be triggered by constructing a loop that exploits NaN behavior, allowing crafted inputs to potentially trigger misinterpretati...

CVE-2019-13680

This CVE affects Chromium/Google Chrome where an improper TLS implementation in Chrome prior to 77.0.3865.75 allowed an attacker to spoof the client’s IP address to websites via crafted TLS connections. The issue’s public fixes are reflected in Chromium/Chrome updates; Debian lists a security upd...

CVE-2020-6406

CVE-2020-6406 is a use-after-free in the audio component of Google Chrome prior to 80.0.3987.87, enabling a remote attacker to potentially trigger heap corruption via a crafted HTML page. Affected product: Chrome/Chromium audio handling. Root cause: use-after-free in the audio path. Impact: remot...

CVE-2023-1223

CVE-2023-1223 concerns insufficient policy enforcement in Autofill on Chromium-derived Chrome/Android builds prior to 111.0.5563.64, enabling a remote attacker to leak cross-origin data via a crafted HTML page. Connected feeds confirm the remediation: Chromium/Chrome update to 111.0.5563.64 (and ...

CVE-2019-13686

CVE-2019-13686 affects Chromium/Google Chrome in offline page handling. The issue is a Use-after-Free in offline mode that can lead to heap corruption, exploitable via a crafted HTML page. Affected product family: Chromium/Chrome browsers; root cause: use-after-free in offline pages flow. Impact:...

CVE-2019-13710

CVE-2019-13710 affects Google Chrome/Chromium before 78.0.3904.70. Root cause: insufficient validation of untrusted input in downloads, enabling a remote attacker to bypass download restrictions via a crafted HTML page. Impact described as bypassing download protection; several advisories (Debian...

CVE-2020-6416

CVE-2020-6416 affects Chromium-based Chromium/Google Chrome prior to 80.0.3987.87 in the streams component. The root cause is insufficient data validation in streams, enabling a remote attacker to potentially trigger heap corruption via a crafted HTML page. Public advisories (Debian, Arch Linux A...

CVE-2020-6448

CVE-2020-6448 is a use-after-free in the V8 JavaScript engine used by Google Chrome (Chromium). The issue could allow a remote attacker to trigger heap corruption via a crafted HTML page. Public details identify the vulnerability as part of the Chrome/Chromium 81.x timeframe, with fixes shipped i...

CVE-2020-6450

CVE-2020-6450: A use-after-free in Chromium/Google Chrome’s WebAudio before version 80.0.3987.162 could allow a remote attacker to potentially cause heap corruption via a crafted HTML page. The issue affects Chromium/Chrome prior to the fixed build and has been addressed upstream with version 80....

CVE-2020-6505

CVE-2020-6505 affects Google Chrome/Chromium prior to 83.0.4103.106, with a use-after-free vulnerability in the speech component that could permit a remote sandbox escape via a crafted HTML page. Public fixes are reflected in Chrome/Chromium updates (e.g., 83.0.4103.116+), with Debian/Fedora advi...

CVE-2020-6513

CVE-2020-6513 is documented in multiple sources as a heap buffer overflow in PDFium affecting Chromium/Google Chrome. Connected documents confirm it was among a set of Chromium vulnerabilities addressed in updates, with Debian's DSA-4824-1 noting fixes in Chromium 87.0.4280.88 for the buster rele...

CVE-2022-0809

CVE-2022-0809: Out-of-bounds memory access in WebXR on Chromium-based browsers (Chrome/Chromium) before version 99.0.4844.51 can enable heap corruption via a crafted HTML page. The vulnerability affects WebXR-related code paths in Chromium/WebKit/Blink. Impact is remote code execution/compromise ...

CVE-2023-1228

CVE-2023-1228 is a Chromium-based Chrome vulnerability: Insufficient policy enforcement in Intents. Affects Google Chrome on Android prior to 111.0.5563.64 and allows a remote attacker to bypass navigation restrictions via a crafted HTML page. Mitigation in public advisories points to updating Ch...

CVE-2025-4096

CVE-2025-4096 describes a heap buffer overflow in HTML in Google Chrome prior to version 136.0.7103.59, enabling a remote attacker to potentially trigger heap corruption via a crafted HTML page. The issue affects Chrome/Chromium components handling HTML and is classified with a high severity. The...

CVE-2019-13661

CVE-2019-13661 describes a UI spoofing vulnerability in Chromium-based Google Chrome prior to 77.0.3865.75, enabling a remote attacker to spoof notifications via a crafted HTML page. The initial description confirms the affected software (Chromium/Chrome) and the impact (notification spoofing in ...

CVE-2019-13671

CVE-2019-13671 affects Google Chrome (Blink) prior to 77.0.3865.75. Description from connected sources confirms a UI spoofing issue where a crafted HTML page could spoof security UI. Remediation consistent with Chrome updates: upgrade to a version containing 77.0.3865.75 or newer (per referenced ...