CVE-2013-0897

CVE-2013-0897 affects Google Chrome’s PDF functionality. An off-by-one error in the PDF handling code on Windows, Linux, and macOS allows a remote attacker to cause a denial-of-service via a crafted PDF document. The issue is triggered by reading beyond bounds in PDF processing; impact is limited...

CVE-2025-12437

A use after free vulnerability exists in the PageInfo component of Google Chrome (prior to version 142.0.7444.59) and Microsoft Edge . A remote attacker could exploit this via a crafted HTML page by convincing a user to perform specific UI gestures , potentially leading to heap corruption . This ...

CVE-2025-8579

In Google Chrome prior to version 139.0.7258.66 , an inappropriate implementation in the Picture In Picture functionality allowed a remote attacker to perform UI spoofing via a crafted HTML page. Exploitation requires the attacker to convince a user to perform specific UI gestures . This vulnerab...

CVE-2026-10930

CVE-2026-10930 describes an out-of-bounds read in ANGLE used by Google Chrome on macOS, exploitable via a crafted HTML page. The issue affects Chrome on Mac prior to version 149.0.7827.53, with the underlying cause being an out-of-bounds memory read in ANGLE. The vulnerability is rated high sever...

CVE-2026-10998

Google Chrome and Microsoft Edge (Chromium-based) are affected by an out-of-bounds read vulnerability in the Media component . This flaw allows an attacker on the local network segment to perform an out-of-bound memory read by sending malicious network traffic . Exploitation can lead to the acces...

CVE-2026-110164

A use after free vulnerability exists in the DOM component of the Chromium browser , affecting Google Chrome versions prior to 155.0.8059.79 . A remote attacker could potentially execute arbitrary code inside the sandbox by leveraging a crafted HTML page . The vulnerability has been addressed in ...

CVE-2026-11105

Google Chrome and Microsoft Edge browsers are vulnerable to a stack buffer overflow (CVE-2026-11105) due to insufficient validation of untrusted input within the WebUI components . A remote attacker who has already compromised the renderer process can use a crafted HTML page to leak cross-origin ...

CVE-2026-11138

Google Chrome and Microsoft Edge are vulnerable to an uninitialized use in the ANGLE component in versions prior to 149.0.7827.53 . A remote attacker can exploit this vulnerability via a crafted HTML page to leak cross-origin data (confidential data). Remediation involves upgrading to the latest ...

CVE-2026-11176

A vulnerability in the Media component of Google Chrome (and Microsoft Edge ) prior to version 149.0.7827.53 allows a remote attacker to leak cross-origin data . The root cause is an inappropriate implementation and a lack of mechanisms for verifying the source of the data . An attacker can explo...

CVE-2026-11209

Google Chrome and Microsoft Edge contain a vulnerability in the Password component due to an inappropriate implementation. A remote attacker who has compromised the renderer process can use a crafted HTML page to obtain potentially sensitive information from process memory . This issue affects Go...

CVE-2026-11223

Google Chrome versions prior to 149.0.7827.53 are affected by a vulnerability involving insufficient validation of untrusted input within the Network component. A remote attacker who has already compromised the renderer process can leverage this flaw to bypass the same-origin policy using a craft...

CVE-2026-11298

CVE-2026-11298 involves an inappropriate implementation in Chrome for iOS (prior to version 149.0.7827.53). This vulnerability allows a remote attacker to bypass the same origin policy through a crafted HTML page. The issue is classified with a Low security severity by Chromium, and the CVSS v3.1...

CVE-2026-3919

Google Chrome and Chromium-based browsers are affected by a use after free vulnerability in the Extensions component prior to version 146.0.7680.71 . An attacker who can convince a user to install a malicious extension can potentially exploit heap corruption via a crafted HTML page. This vulnerab...

CVE-2026-3924

A use after free vulnerability exists in the WindowDialog component of Google Chrome and Microsoft Edge (prior to version 146.0.7680.71). An attacker who has already compromised the renderer process can exploit this flaw using a crafted HTML page to potentially achieve a sandbox escape . This vul...

CVE-2026-3937

CVE-2026-3937 affects Google Chrome on Android (via Chromium) with the vulnerability in the Downloads security UI, allowing UI spoofing through a crafted HTML page. The root cause is an incorrect security UI flow in Downloads, enabling a remote attacker to spoof UI. Affected component is Chromium...

CVE-2026-4449

A use after free vulnerability exists in the Blink rendering engine of Google Chrome and Microsoft Edge browsers. This memory corruption issue occurs when the software reuses objects after they have been released, potentially allowing a remote attacker to trigger a heap corruption or service fail...

CVE-2026-5278

Google Chrome on Android versions prior to 146.0.7680.178 is vulnerable to a use after free flaw within the Web MIDI component . The root cause involves a confusion in the instructions responsible for freeing memory, which a remote attacker could exploit to execute arbitrary code via a crafted HT...

CVE-2026-7336

A use after free vulnerability exists in the WebRTC component of Google Chrome prior to version 147.0.7727.138 . This resource management flaw allows a remote attacker to execute arbitrary code inside a sandbox by navigating to a crafted HTML page . The issue was reported by Mozilla and has been ...

CVE-2026-7356

A Use after free vulnerability in the Navigation component of Google Chrome (prior to version 147.0.7727.138 ) allows a remote attacker to execute arbitrary code via a crafted HTML page. The root cause involves the component reusing resources after they have been released. This issue affects Chro...

CVE-2026-7902

Google Chrome versions prior to 148.0.7778.96 are vulnerable to an out-of-bounds memory access within the V8 engine . A remote attacker could exploit this vulnerability by providing a crafted HTML page to execute arbitrary code inside a sandbox. This issue is present in the chromium package. Reme...

CVE-2026-7971

An inappropriate implementation of the Opaque Response Blocking (ORB) mechanism in Google Chrome prior to version 148.0.7778.96 allows a remote attacker to bypass site isolation via a crafted HTML page. The vulnerability is related to the insecure management of privileges. Impacted software also ...

CVE-2026-8522

Google Chrome on Mac versions prior to 148.0.7778.168 is vulnerable to a Use after free flaw in the Downloads component. This memory management issue can be exploited by a remote attacker to execute arbitrary code via a specially crafted HTML page. The vulnerability is classified with Critical se...

CVE-2026-9966

Google Chrome on Windows versions prior to 148.0.7778.216 is susceptible to an integer overflow in its XML processing. This vulnerability allows a remote attacker who has already compromised the renderer process to potentially perform a sandbox escape by serving a crafted HTML page. This issue is...

CVE-2010-2651

CVE-2010-2651 affects Google Chrome’s CSS rendering in versions before 5.0.375.99, where improper style rendering could allow remote attackers to trigger memory corruption (DoS or other impact) via unknown vectors. Documented in OpenVAS/Ubuntu USN entries and the Chrome 5.0.375.99 update (July 20...

CVE-2010-2897

CVE-2010-2897 affects Google Chrome prior to 5.0.375.125. The connected records consistently state vulnerability to an unspecified flaw in the Windows kernel with unknown impact and attack vectors, without detailing root cause beyond “unspecified flaw.” The NVD entry lists a base score of 10.0 (H...

CVE-2010-3248

Google Chrome prior to version 6.0.472.53 is vulnerable because it does not properly restrict copying to the clipboard, with unspecified impact and attack vectors as per CVE-2010-3248. The issue is documented in multiple sources referencing Chrome webkit/vulnerability entries (including OpenVAS a...

CVE-2010-4198

CVE-2010-4198 affects WebKit as used in Google Chrome prior to 7.0.517.44 and webkitgtk prior to 1.2.6; it does not properly handle large text areas, enabling remote memory corruption (and potentially other impact) via a crafted HTML document. Affected products include WebKit/WebKitGTK+ and Chrom...

CVE-2010-4205

CVE-2010-4205 affects Google Chrome prior to 7.0.517.44, where improper handling of the data types of event objects can allow remote attackers to cause a denial of service or potentially other impact via unknown vectors. The provided documents do not include a vendor fix/patch information or conc...

CVE-2011-1300

The CVE-2011-1300 entry affects ANGLE’s WebGLES library (libGLESv2.dll) used by Mozilla Firefox 4.x on Windows and by Chrome’s GPU process, due to an off-by-three error in Program::getActiveUniformMaxLength. This allows remote code execution via unspecified vectors. Public sources indicate Chrome...

CVE-2011-1443

CVE-2011-1443 affects Google Chrome prior to version 11.0.696.57, where the layered rendering code can expose a denial-of-service or possibly other impact via stale pointers. Public sources in the connected docs confirm the issue as a Chrome layering pointer problem and reference the 11.0.696.57 ...

CVE-2011-1807

CVE-2011-1807 is associated with Google Chrome versions prior to 11.0.696.71. The vulnerability stems from how the browser handles blobs, enabling a remote attacker to trigger an out-of-bounds write and execute arbitrary code via unspecified vectors. The issue is documented as a high-severity, ne...

CVE-2011-2342

Google Chrome (before 12.0.742.91) is affected by CVE-2011-2342 due to a DOM implementation flaw that allows a remote attacker to bypass the Same Origin Policy. The vulnerability is described as a Same Origin bypass in the DOM, with a medium–high risk in public listings and a CVSS base score of 7...

CVE-2011-2806

CVE-2011-2806 affects Google Chrome

CVE-2011-2830

Technical details about CVE-2011-2830 are not present in the provided connected documents. The description only reiterates that Google V8 in Chrome before 14.0.835.163 is affected. Monitor for updates from vendor/security advisories.

CVE-2011-2864

CVE-2011-2864 affects Google Chrome prior to 14.0.835.163; improper handling of Tibetan characters enables a remote denial-of-service via an out-of-bounds read (vectors not specified). A fix is provided in the Chrome stable update 14.0.835.163.

CVE-2011-3021

CVE-2011-3021 affects Google Chrome up to version 17.0.963.56, where a use-after-free in the subframe loading path allows remote attackers to cause a denial of service and potentially other impacts. The issue is triggered via subframe loading vectors and is described as a use-after-free vulnerabi...

CVE-2011-3041

CVE-2011-3041 is a use-after-free vulnerability in class attribute handling within Chromium/Chrome components. The openSUSE security update (openSUSE-SU-2012:0374-1) explicitly lists High CVE-2011-3041 and attributes the issue to use-after-free in class attribute handling, with remediation in the...

CVE-2011-3885

The CVE-2011-3885 entry concerns a use-after-free in Google Chrome prior to 15.0.874.102, exploitable to cause a denial of service and potentially other unspecified impact via vectors related to stale CSS token-sequence data. Affected product: Google Chrome (pre-15.0.874.102). Root cause: use-aft...

CVE-2011-3898

CVE-2011-3898 affects Google Chrome (Chromium) prior to 15.0.874.120 when using JRE 7, where applet execution proceeds without user confirmation. Public sources (Gentoo GLSA 201111-05) call for upgrading Chromium to >=15.0.874.121 and V8 to >=3.5.10.24; OpenVAS/Gentoo entries corroborate mu...

CVE-2011-3915

Technical details for CVE-2011-3915 are not publicly available in the provided documents. Monitor for updates from vendors and security feeds.

CVE-2011-3927

CVE-2011-3927 affects Skia as used by Google Chrome prior to 16.0.912.77, where incomplete initialization of values could enable a remote attacker to cause a denial of service or potentially other impact via unknown vectors. The connected documents confirm Chromium-related fixes: the GLSA/openSUS...

CVE-2011-3957

CVE-2011-3957 describes a use-after-free in Chrome’s garbage-collection for PDF handling, allowing a remote attacker to cause a denial of service and potentially other impact. The vulnerability affects Google Chrome prior to 17.0.963.46. Multiple connected advisories and OpenVAS entries corrobora...

CVE-2019-13672

CVE-2019-13672 affects Google Chrome on iOS, where an incorrect security UI in the Omnibox could allow a crafted HTML page to spoof the URL bar. The issue is triggered by using Chrome versions prior to 77.0.3865.75. The documented remediation is to update to 77.0.3865.75 or later. No exploitation...

CVE-2020-15996

CVE-2020-15996 is a use-after-free in passwords within Google Chrome prior to 86.0.4240.99, allowing a remote attacker who has compromised the renderer process to potentially perform a sandbox escape via a crafted HTML page. The issue affects Chrome’s password handling in the renderer; the root c...

CVE-2025-10892

CVE-2025-10892 is a Chromium/Google Chrome vulnerability involving an integer overflow in V8 prior to 140.0.7339.207 that can lead to heap corruption when processing crafted HTML pages. The issue affects Chrome’s V8 engine and is classified as High severity with network attack vector, user intera...

CVE-2025-12725

An out of bounds read in WebGPU within Google Chrome on Android (prior to version 142.0.7444.137 ) allows a remote attacker to perform an out of bounds memory write by navigating to a crafted HTML page . This vulnerability is classified with High security severity. While specific exploit details ...

CVE-2025-13634

An inappropriate implementation in the Downloads component of Google Chrome on Windows (prior to version 143.0.7499.41 ) allows a local attacker to bypass the mark of the web using a crafted HTML page. This vulnerability is categorized as an authentication bypass via spoofing (CWE-290). Exploitat...

CVE-2025-13635

Google Chrome and its underlying Chromium engine are affected by CVE-2025-13635 due to an inappropriate implementation in the Downloads component. This vulnerability allows a local attacker to perform UI spoofing by navigating the user to a specially crafted HTML page. The issue was addressed in ...

CVE-2026-10952

A Use after free vulnerability exists in Chrome for iOS within the Google Chrome browser on versions prior to 149.0.7827.53 . A remote attacker could potentially exploit this issue to cause heap corruption by navigating to a crafted HTML page . Exploitation details or specific links are not provi...

CVE-2026-10979

Google Chrome and Microsoft Edge are vulnerable to an out-of-bounds read in the ANGLE component. This vulnerability allows a remote attacker to obtain potentially sensitive information from process memory by viewing a specially crafted HTML page. The issue affects versions of Google Chrome prior ...