6025 matches found
CVE-2026-8016
A use-after-free (resource management) vulnerability exists in the WebRTC component of Google Chrome (and potentially Microsoft Edge ) prior to version 148.0.7778.96 . This flaw allows a remote attacker to execute arbitrary code inside a sandbox by navigating the user to a crafted HTML page . Deb...
CVE-2026-9122
Google Chrome for Mac versions prior to 148.0.7778.179 are vulnerable to an out of bounds read in the GPU component . A remote attacker can exploit this by using a crafted HTML page to obtain potentially sensitive information from process memory. The vulnerability is categorized as Medium severit...
CVE-2010-2646
CVE-2010-2646 affects Google Chrome up to version 5.0.375.99, where sandboxing of IFRAME elements was not properly isolated. This memory-corruption/remote-vector issue has high severity (CVSS 9.3) with unspecified impact described in the entry. The available connected documents indicate a vendor ...
CVE-2010-3252
Affected product: Google Chrome (pre-6.0.472.53). The issue is a use-after-free in the Notifications presenter, leading to denial of service or possibly other impacts via unknown vectors. Root cause is a use-after-free error in the Notifications presenter component. Impact is described as denial ...
CVE-2010-3413
Google Chrome before 6.0.472.59 contains an unspecified vulnerability in the pop-up blocking functionality that could allow remote attackers to cause a denial of service (application crash) via unknown vectors. The OpenVAS entries reference multiple vulnerabilities in Chrome 6.0.472.59 era, but d...
CVE-2011-1111
CVE-2011-1111 affects Google Chrome before 9.0.597.107. The issue arises from improper implementation of forms controls, enabling a remote attacker to cause a denial of service (application crash) or possibly other unspecified impact via unknown vectors. Connected documents confirm Chrome is vuln...
CVE-2011-1124
CVE-2011-1124 is a use-after-free vulnerability in Google Chrome prior to 9.0.597.107 that can allow remote attackers to cause a denial of service or potentially other impact via vectors related to blocked plug-ins. The associated sources describe the issue consistently; no specific exploit detai...
CVE-2011-1437
Google Chrome prior to 11.0.696.57 is affected by CVE-2011-1437 due to integer overflows in float rendering, exploitable remotely to cause a denial of service and possibly other impact. The vulnerability is part of a set of issues fixed in Chrome 11.0.696.57 (threat posts and CVE listings confirm...
CVE-2011-1448
Google Chrome (Windows/Linux/macOS) prior to 11.0.696.57 is affected by CVE-2011-1448 due to incorrect height calculations in a rendering-related component, enabling remote attackers to cause a denial of service and possibly other impact via a stale pointer. The issue is identified in the Chrome ...
CVE-2011-1810
CVE-2011-1810 affects Google Chrome's CSS implementation prior to version 12.0.742.91, enabling information disclosure of visit history via unspecified vectors. The issue is tracked in multiple security feeds; OpenVAS/OpenVAS 802102/802103 and ThreatPost reference Chrome 12.0.742.91 as the fix. T...
CVE-2011-2345
CVE-2011-2345 affects Google Chrome’s NPAPI implementation prior to 12.0.742.112, where strings are not handled correctly, allowing remote attackers to trigger an out-of-bounds read and cause a denial of service via unspecified vectors. Documented references in OpenVAS/NVD indicate this CVE is pa...
CVE-2011-2852
The CVE-2011-2852 entry concerns Google Chrome's V8 engine, where an Off-by-one error in V8 (as shipped in Chrome prior to 14.0.835.163) may allow a remote attacker to cause a denial of service or potentially other impact via unknown vectors. Affected product/component: Google Chrome using V8. Ro...
CVE-2011-2874
Technical details for CVE-2011-2874 are not publicly provided in the supplied documents. No explicit affected products, versions, impact, or remediation are stated here. Monitor for updates.
CVE-2011-2875
CVE-2011-2875 affects Google Chrome’s V8 engine prior to version 14.0.835.163, where improper object sealing leads to type confusion. This can allow remote attackers to cause a denial of service and potentially other unspecified impacts. Remediation is to update Chrome to 14.0.835.163 or later (a...
CVE-2011-3070
CVE-2011-3070 is a use-after-free in Google Chrome prior to 18.0.1025.151 involving the V8 bindings, with impact stated as remote denial of service or possibly other effects. The connected documents corroborate the CVE across Chrome/OpenVAS entries; however, no concrete exploit details or patched...
CVE-2011-3072
CVE-2011-3072 affects Google Chrome prior to 18.0.1025.151, where remote attackers could bypass the Same Origin Policy via popup-related vectors. The issue is part of a set of Chromium/Chrome vulnerabilities; impact includes partial confidentiality, integrity, and availability. Remediation: updat...
CVE-2013-0887
Chromium-based: CVE-2013-0887 affects Google Chrome prior to 25.0.1364.97 (Windows/Linux) and prior to 25.0.1364.99 (Mac). The developer-tools process does not properly restrict privileges when interacting with a connected server, but the provided documents do not specify impact, attack vectors, ...
CVE-2019-5843
CVE-2019-5843 affects Google Chrome’s JavaScript engine prior to 74.0.3729.108, where an out-of-bounds memory access could allow a remote attacker to trigger heap corruption via a crafted HTML page. The vulnerability is rooted in improper memory handling in JavaScript execution, leading to potent...
CVE-2021-4319
CVE-2021-4319 is a use-after-free in Blink (Chrome) prior to 93.0.4577.82, enabling a remote attacker to trigger arbitrary read/write through a crafted HTML page. The connected Astra Linux bulletin and Chrome release notes confirm the same description; the issue is fixed in Chrome 93.0.4577.82 or...
CVE-2025-11211
A vulnerability exists in Google Chrome and Chromium (including derivatives like Microsoft Edge and Opera ) involving an out-of-bounds read in the Media component. A remote attacker can exploit this by navigating to a crafted HTML page to perform unauthorized memory access. The vulnerability affe...
CVE-2025-11756
A use after free vulnerability exists in the Safe Browsing component of Google Chrome (prior to version 141.0.7390.107 ). This memory management error allows a remote attacker who has already compromised the renderer process to perform out-of-bounds memory access via a crafted HTML page. The vuln...
CVE-2025-12909
Google Chrome versions prior to 140.0.7339.80 are vulnerable to a flaw in the Devtools component due to insufficient policy enforcement . This vulnerability allows a remote attacker to bypass data protection mechanisms and cause a cross-origin data leak , leading to unauthorized access to protect...
CVE-2026-10950
Google Chrome on iOS prior to version 149.0.7827.53 is vulnerable to insufficient policy enforcement within the Autofill component. This flaw allows a remote attacker to leak cross-origin data by tricking a user into visiting a crafted HTML page. The vulnerability is associated with CWE-693 (Prot...
CVE-2026-11023
The WebAppInstalls component in Google Chrome and Microsoft Edge is vulnerable to a security flaw caused by insufficient validation of input data (improper implementation). A remote attacker who has already compromised the renderer process can exploit this by using a specially crafted HTML page t...
CVE-2026-11044
Google Chrome on macOS (prior to version 149.0.7827.53 ) is vulnerable to an integer overflow in the ANGLE library. A remote attacker could exploit this flaw by navigating the user to a crafted HTML page to obtain potentially sensitive information from process memory. The vulnerability has been a...
CVE-2026-11129
An inappropriate implementation in the Extensions component of Google Chrome (prior to version 149.0.7827.53) allows a remote attacker to leak cross-origin data via a crafted HTML page. This vulnerability also affects Microsoft Edge as it ingests the Chromium codebase. Related security issues in ...
CVE-2026-11669
Google Chrome on ChromeOS experienced an out-of-bounds read (also described as an integer overflow ) within the Media component before version 149.0.7827.103 . A remote attacker who has already compromised the renderer process could exploit this vulnerability by using a crafted HTML page to obtai...
CVE-2026-5277
Google Chrome on Windows prior to version 146.0.7680.178 is vulnerable to an integer overflow within the ANGLE component. The root cause is a failure to properly validate the length size of input data, which allows a remote attacker who has compromised the renderer process to perform an out-of-bo...
CVE-2026-5283
Google Chrome versions prior to 146.0.7680.178 are vulnerable to a security flaw in the ANGLE component due to an inappropriate implementation. A remote attacker can exploit this deficiency to leak cross-origin data through a specially crafted HTML page. Mitigation is available in the 146.0.7680....
CVE-2026-5876
Google Chrome versions prior to 147.0.7727.55 are vulnerable to a side-channel information leakage in the Navigation component. This flaw stems from the improper protection of physical external channels, which allows a remote attacker to leak cross-origin data by hosting a specially crafted HTML ...
CVE-2026-5900
A policy bypass vulnerability exists in the Downloads component of Google Chrome (and the Chromium package) prior to version 147.0.7727.55 . A remote attacker can exploit this by using a crafted HTML page to bypass multi-download protections . This issue is categorized as Low severity by Chromium...
CVE-2026-6304
A Use after free vulnerability in the Graphite component of Google Chrome (prior to version 147.0.7727.101 ) allows a remote attacker who has already compromised the renderer process to perform a sandbox escape . The attack can be initiated via a crafted HTML page. Remediation is available in ver...
CVE-2026-6316
Google Chrome contains a Use after free vulnerability in its Forms component, affecting versions prior to 147.0.7727.101 . This memory misreference flaw allows a remote attacker to execute arbitrary code inside a sandbox by visiting a crafted HTML page. The vulnerability has been addressed in the...
CVE-2026-7975
A use-after-free vulnerability exists in the DevTools suite of Google Chrome and Microsoft Edge browsers prior to version 148.0.7778.96 . The flaw occurs when the software reuses memory resources after they have been released, potentially allowing a remote attacker who has already compromised the...
CVE-2026-7981
Google Chrome and Microsoft Edge versions prior to 148.0.7778.96 are vulnerable to an out-of-bounds read in the Codecs component. This flaw occurs when reading data beyond the permitted memory range, potentially allowing a remote attacker to obtain sensitive information from process memory via a ...
CVE-2026-9925
A use-after-free vulnerability in the ANGLE component affects Google Chrome and Microsoft Edge versions prior to 148.0.7778.216 . The root cause involves the reuse of components after they have been released, which could allow a remote attacker who has already compromised the renderer process to ...
CVE-2010-1230
CVE-2010-1230 affects Google Chrome prior to 4.1.249.1036. The issue concerns incorrect behavior when attempting to delete Web SQL Databases and clear STS state. The impact is described as unspecified; no exploit vectors are provided in the documents. Severity is CVSS v2 base score 10.0 (HIGH). N...
CVE-2010-1233
Google Chrome before 4.1.249.1036 is affected by multiple integer overflows in WebKit JavaScript objects, allowing remote attackers to trigger unspecified impact via network vectors. The vulnerability is confirmed in the CVE-2010-1233 record and is treated as a concrete Chrome/WebKit issue in rel...
CVE-2010-2105
CVE-2010-2105 affects Google Chrome up to version 5.0.375.55. The issue stems from Chrome not properly following Safe Browsing URL canonicalization requirements, with unspecified impact and remote attack vectors. Affected product is Chrome; root cause tied to Safe Browsing canonicalization. Remed...
CVE-2010-2108
Google Chrome before 5.0.375.55 is affected by CVE-2010-2108: an unspecified vulnerability that allows remote bypass of the whitelist‑mode plugin blocker via unknown vectors. The issue is documented in CVE‑2010‑2108 and is associated with multiple related Chrome vulnerabilities (including issues ...
CVE-2010-2645
CVE-2010-2645 applies to Google Chrome prior to 5.0.375.99, where WebGL usage could trigger an out-of-bounds read leading to a denial of service. The issue is described as an unspecified vulnerability with unknown vectors, affecting Chrome’s WebGL handling. Public references in OpenVAS and third-...
CVE-2010-2652
Google Chrome before 5.0.375.99 does not correctly implement modal dialogs, enabling denial of service (application crash) via unspecified vectors. Connected sources confirm a set of related Chrome vulnerabilities (including modal-dialog handling) in the 5.0.375.99 timeframe and reference a patch...
CVE-2010-3250
CVE-2010-3250 concerns Google Chrome prior to version 6.0.472.53 and is described as an unspecified vulnerability that allows remote attackers to enumerate the set of installed extensions via unknown vectors. The NVD entry confirms this vulnerable condition, and OpenVAS entries list Google Chrome
CVE-2011-0475
Google Chrome before 8.0.552.237 and Chrome OS before 8.0.552.344 are affected by a use-after-free vulnerability in PDF handling, enabling remote denial of service or possibly other impact. Root cause: use-after-free in the PDF document path. Affected products/components: Google Chrome (pre-8.0.5...
CVE-2011-0477
CVE-2011-0477 affects Google Chrome (before 8.0.552.237) and Chrome OS (before 8.0.552.344). The vulnerability arises from a mismatch in video frame sizes that can cause incorrect memory access, enabling remote attackers to trigger a denial of service and potentially other impacts via unknown vec...
CVE-2011-0782
Google Chrome before 9.0.597.84 on macOS X is affected by an unspecified flaw in the Mac OS X 10.5 SSL libraries that can be triggered remotely to crash the application (denial of service). The NVD record indicates a network-based, low complexity attack with no authentication, resulting in partia...
CVE-2011-0783
CVE-2011-0783 is a Google Chrome/Chromium vulnerability (before 9.0.597.84) described as an unspecified flaw that allows user-assisted remote attackers to cause a denial of service (application crash) via vectors involving a “bad volume setting.” Multiple OpenVAS/Debian entries corroborate Chrome...
CVE-2011-0784
CVE-2011-0784 describes a race condition in Google Chrome prior to 9.0.597.84 that can allow remote code execution via audio-related vectors. Affected: Google Chrome (Desktop builds) before 9.0.597.84. Root cause: race condition in audio handling. Impact: remote arbitrary code execution with part...
CVE-2011-1286
Google V8 in Google Chrome before 10.0.648.127 is affected by CVE-2011-1286. The issue allows remote attackers to cause a denial of service or potentially other impact by triggering incorrect memory access; vectors are undocumented in the provided sources. Affected component: V8 engine used by Ch...