CVE-2026-110164

A use after free vulnerability exists in the DOM component of the Chromium browser , affecting Google Chrome versions prior to 155.0.8059.79 . A remote attacker could potentially execute arbitrary code inside the sandbox by leveraging a crafted HTML page . The vulnerability has been addressed in ...

CVE-2026-11220

The Google Chrome browser and Microsoft Edge are affected by CVE-2026-11220 due to insufficient validation of untrusted input within the Navigation component. A remote attacker who has already compromised the renderer process can exploit this flaw using a crafted HTML page to bypass site isolatio...

CVE-2026-2315

A high-severity vulnerability in the WebGPU component of Google Chrome (prior to version 145.0.7632.45 ) allows a remote attacker to perform out-of-bounds memory access via a crafted HTML page. This flaw is caused by an inappropriate implementation in the WebGPU mechanism, which could lead to ser...

CVE-2026-3931

A heap buffer overflow in the Skia graphics library within Google Chrome (prior to version 146.0.7680.71 ) allows a remote attacker to perform out-of-bounds memory access via a crafted HTML page. This vulnerability could lead to a compromise of the confidentiality, integrity, and accessibility of...

CVE-2026-5283

Google Chrome versions prior to 146.0.7680.178 are vulnerable to a security flaw in the ANGLE component due to an inappropriate implementation. A remote attacker can exploit this deficiency to leak cross-origin data through a specially crafted HTML page. Mitigation is available in the 146.0.7680....

CVE-2026-5909

An integer overflow in the Media component of Google Chrome (versions prior to 147.0.7727.55 ) allows a remote attacker to potentially exploit heap corruption by providing a crafted video file. This vulnerability could lead to arbitrary code execution, denial of service, or information disclosure...

CVE-2026-6303

Google Chrome versions prior to 147.0.7727.101 are vulnerable to a Use after free flaw in the Codecs component. This vulnerability allows a remote attacker to execute arbitrary code inside a sandbox by navigating to a crafted HTML page . The issue has been addressed in version 147.0.7727.101 for ...

CVE-2026-7335

Google Chrome versions prior to 147.0.7727.138 are vulnerable to a use-after-free (resource management) flaw in the media component . A remote attacker can exploit this vulnerability by navigating to a crafted HTML page to achieve arbitrary code execution within a sandbox. Remediation is availabl...

CVE-2026-7906

A use after free vulnerability in the SVG processing mechanism of Google Chrome (and potentially Microsoft Edge ) prior to version 148.0.7778.96 allows a remote attacker to execute arbitrary code within a sandbox. The flaw is triggered by a crafted HTML page and relates to the reuse of resources ...

CVE-2026-7957

Google Chrome experienced an out of bounds write vulnerability in the Media component on Mac and iOS systems running versions prior to 148.0.7778.96 . A remote attacker who has already compromised the renderer process can leverage this flaw to execute arbitrary code inside a sandbox using a speci...

CVE-2026-7959

Google Chrome and Microsoft Edge versions prior to 148.0.7778.96 are vulnerable to a site isolation bypass . The root cause is an inappropriate implementation in the Navigation mechanism, which allows a remote attacker who has already compromised the renderer process to bypass security boundaries...

CVE-2026-8006

Google Chrome and Microsoft Edge versions prior to 148.0.7778.96 are vulnerable to UI spoofing due to insufficient policy enforcement in the DevTools component. An attacker who successfully convinces a user to install a malicious extension can use a crafted Chrome Extension to replace or deceive ...

CVE-2026-8019

A vulnerability exists in the WebApp component of Google Chrome (and Microsoft Edge ) prior to version 148.0.7778.96 due to insufficient policy enforcement . A remote attacker can exploit this by using a crafted HTML page to perform UI spoofing or replace the user interface with a specially creat...

CVE-2026-8542

Google Chrome on Windows versions prior to 148.0.7778.168 is vulnerable to a Use after free issue in the Core component. A remote attacker who has already compromised the renderer process can exploit this vulnerability via a crafted HTML page to potentially perform a sandbox escape . For Debian s...

CVE-2026-8574

A use after free vulnerability in the Core component of Google Chrome on Windows (versions prior to 148.0.7778.168 ) allows a remote attacker to perform a sandbox escape . The issue arises from the reuse of Core objects after their release, which can be triggered via a crafted HTML page by an att...

CVE-2026-8575

Google Chrome and the Chromium package are affected by a use after free vulnerability in the UI component. This issue occurs because UI elements are reused after being released, allowing a remote attacker who has already compromised the renderer process to perform a sandbox escape via a crafted H...

CVE-2026-9121

An out of bounds read vulnerability exists in the GPU rendering engine of Google Chrome (and potentially Microsoft Edge ) prior to version 148.0.7778.179 . A remote attacker could exploit this issue by triggering heap corruption through a specially crafted HTML page , potentially leading to a ser...

CVE-2026-9948

A use after free vulnerability in the Views component of Google Chrome and Microsoft Edge browsers allows a remote attacker who has already compromised the renderer process to perform a sandbox escape via a crafted HTML page. This issue affects Google Chrome on Mac versions prior to 148.0.7778.21...

CVE-2010-2902

CVE-2010-2902 affects Google Chrome prior to 5.0.375.125, with the SVG implementation vulnerable to memory corruption that can lead to a denial of service (and possibly other impact). Multiple independent advisories and databases (SUSE, Ubuntu, OpenVAS/OpenVAS-derived feeds, Debian tracker) corro...

CVE-2010-3252

Affected product: Google Chrome (pre-6.0.472.53). The issue is a use-after-free in the Notifications presenter, leading to denial of service or possibly other impacts via unknown vectors. Root cause is a use-after-free error in the Notifications presenter component. Impact is described as denial ...

CVE-2011-0475

Google Chrome before 8.0.552.237 and Chrome OS before 8.0.552.344 are affected by a use-after-free vulnerability in PDF handling, enabling remote denial of service or possibly other impact. Root cause: use-after-free in the PDF document path. Affected products/components: Google Chrome (pre-8.0.5...

CVE-2011-0985

CVE-2011-0985 affects Google Chrome before 9.0.597.94, where memory exhaustion can prevent proper process termination (unspecified impact/remote vectors). Debian advisory DSA-2166-1 notes this as part of several vulnerabilities in chromium-browser and states the issue is fixed in the squeeze pack...

CVE-2011-1108

CVE-2011-1108 affects Google Chrome/Chromium before 9.0.597.107. A flaw in JavaScript dialogs can be triggered by a crafted HTML document to cause a denial of service (application crash) or other unspecified impact. The Debian/DSA advisories and OpenVAS entries mirror this issue and recommend upg...

CVE-2011-1122

The CVE-2011-1122 issue concerns Google Chrome/Chromium before 9.0.597.107, where the WebGL implementation allows remote attackers to cause a denial of service via an out-of-bounds read. Connected sources confirm the affected product as Google Chrome/Chromium and identify the vulnerability as Web...

CVE-2011-1441

CVE-2011-1441 affects Google Chrome

CVE-2011-1448

Google Chrome (Windows/Linux/macOS) prior to 11.0.696.57 is affected by CVE-2011-1448 due to incorrect height calculations in a rendering-related component, enabling remote attackers to cause a denial of service and possibly other impact via a stale pointer. The issue is identified in the Chrome ...

CVE-2011-1691

The CVE-2011-1691 issue affects WebKit’s CSS Core (CSSComputedStyleDeclaration.cpp) in WebCore, where counterToCSSValue mishandles access to counterIncrement and counterReset from getComputedStyle data. It permits remote attackers to trigger a denial-of-service (NULL pointer dereference and crash...

CVE-2011-2785

Google Chrome up to 13.0.782.107 is affected by CVE-2011-2785 due to improper validation of the home-page URL in the extensions framework. This allows a crafted extension to influence extension behavior with unspecified impact. Root cause: URL validation flaw in extensions home page. Mitigation: ...

CVE-2011-2791

The CVE-2011-2791 vulnerability affects Google Chrome’s ICU functionality prior to 13.0.782.107, where an out-of-bounds write in ICU can be triggered by unknown vectors, potentially allowing a denial of service or other unspecified impacts. Affected component: ICU integration in Chrome. Remediati...

CVE-2011-2792

Technical details for CVE-2011-2792 are not publicly provided in the connected documents; the entries reference the CVE but do not specify affected products, versions, impact, or fixes. Monitor for updates.

CVE-2011-2805

CVE-2011-2805 is a WebKit-related cross-origin scripting issue documented in OpenVAS entries for Safari/WebKit. The vulnerability arises from a cross-origin handling flaw in URLs with embedded usernames, enabling cross-site scripting when rendering or processing such URLs within affected WebKit-b...

CVE-2011-2838

CVE-2011-2838 affects Google Chrome prior to 14.0.835.163. The vulnerability stems from improper MIME-type handling when loading plug-ins, with unspecified impact and remote attack vectors as described in the Initial Description. Connected documents corroborate that this CVE is part of Chrome/Chr...

CVE-2011-2844

Technical details (affected component, root cause, and remediation) for CVE-2011-2844 are not provided in the connected documents; public details appear limited to the initial description. Monitor for updates from referenced advisories and OpenVAS entries.

CVE-2011-2848

CVE-2011-2848 affects Google Chrome before 14.0.835.163, enabling user-assisted remote attackers to spoof the URL bar through forward-button related vectors. The description explicitly states the vulnerability type and impact as URL-bar spoofing; no additional exploit vectors or mitigations are d...

CVE-2011-3022

CVE-2011-3022 affects Google Chrome (translation feature): the vulnerable code path is in translate/translate_manager.cc, where an HTTP session used for translation could leak information to an eavesdropper. The vulnerability is described as an information disclosure via the HTTP session. Affecte...

CVE-2011-3040

Google Chrome before 17.0.963.65 is affected by CVE-2011-3040 due to improper handling of text, enabling a remote attacker to cause a denial of service via a crafted document (out-of-bounds read). The vulnerability is addressed by updating to Chrome 17.0.963.65 or later (per the public Chrome upd...

CVE-2011-3891

CVE-2011-3891 affects Google Chrome prior to 15.0.874.102, where improper restriction of internal Google V8 functions may enable remote attackers to cause a denial of service or potentially other impact via unknown vectors. The cited connected advisories indicate this requires upgrading to Chrome...

CVE-2011-3907

Chromium and V8 are affected by multiple vulnerabilities including CVE-2011-3907 (URL bar spoofing) as part of the Chromium/Chromium-based web engine family. Public entries in Gentoo GLSA-201201-03 describe that a number of issues could allow a context‑dependent attacker to lure a user to a craft...

CVE-2013-0891

CVE-2013-0891: Google Chrome (Windows/Linux before 25.0.1364.97, macOS before 25.0.1364.99) is affected by an integer overflow in blob handling, leading to possible denial of service or other impact. The issue is disclosed in the Chrome vulnerability set and is reflected in OpenVAS/Nessus entries...

CVE-2025-11219

A use after free vulnerability exists in the V8 engine of Google Chrome and other Chromium -based browsers (such as Microsoft Edge and Opera ) prior to version 141.0.7390.54 . A remote attacker can exploit this flaw by hosting a crafted HTML page , which could potentially lead to out-of-bounds me...

CVE-2025-12909

Google Chrome versions prior to 140.0.7339.80 are vulnerable to a flaw in the Devtools component due to insufficient policy enforcement . This vulnerability allows a remote attacker to bypass data protection mechanisms and cause a cross-origin data leak , leading to unauthorized access to protect...

CVE-2025-13721

A race condition in the V8 engine of Google Chrome (prior to version 143.0.7499.41 ) allows a remote attacker to trigger heap corruption by navigating to a crafted HTML page. This vulnerability can lead to arbitrary code execution , denial of service , or information disclosure . Remediation is a...

CVE-2026-10944

A vulnerability in Google Chrome on iOS prior to version 149.0.7827.53 allows a remote attacker to leak cross-origin data via a crafted HTML page. The root cause is insufficient policy enforcement in the Autofill component. This issue is classified with High security severity by Chromium. No spec...

CVE-2026-11005

Google Chrome on Windows versions prior to 149.0.7827.53 is vulnerable to an out-of-bounds read in the ANGLE component. A remote attacker who has already compromised the renderer process can exploit this vulnerability via a crafted HTML page to obtain potentially sensitive information from the pr...

CVE-2026-11129

An inappropriate implementation in the Extensions component of Google Chrome (prior to version 149.0.7827.53) allows a remote attacker to leak cross-origin data via a crafted HTML page. This vulnerability also affects Microsoft Edge as it ingests the Chromium codebase. Related security issues in ...

CVE-2026-11165

A use after free vulnerability exists in the WebMIDI component of Google Chrome on iOS (affected versions prior to 149.0.7827.53 ). A remote attacker could exploit this by using a crafted HTML page to potentially perform a sandbox escape . The vulnerability has a Medium security severity in Chrom...

CVE-2026-3915

A heap buffer overflow vulnerability exists in the WebML component of Google Chrome (and Chromium ) versions prior to 146.0.7680.71 . A remote attacker can trigger an out-of-bounds memory read by navigating to a crafted HTML page . Exploitation may also lead to a service failure . Remediation is ...

CVE-2026-3917

A use after free vulnerability exists in the Agents component of Google Chrome and Microsoft Edge browsers prior to version 146.0.7680.71 . This flaw arises from re-referencing or using memory after it has been freed, which a remote attacker could exploit via a crafted HTML page to trigger heap c...

CVE-2026-4675

A heap buffer overflow vulnerability exists in the WebGL component of Google Chrome versions prior to 146.0.7680.165 . The root cause is incorrect boundary checking , which allows a remote attacker to perform an out-of-bounds memory read or cause a service failure (application crash) by navigatin...

CVE-2026-5277

Google Chrome on Windows prior to version 146.0.7680.178 is vulnerable to an integer overflow within the ANGLE component. The root cause is a failure to properly validate the length size of input data, which allows a remote attacker who has compromised the renderer process to perform an out-of-bo...