CVE-2011-1119

CVE-2011-1119 affects Google Chrome up to version 9.0.597.107. The vulnerability arises in device orientation handling, allowing remote attackers to cause a denial of service or possibly cause other unspecified impact via unknown vectors that lead to a stale pointer. Affected product is Google Ch...

CVE-2011-1191

Google Chrome is affected by CVE-2011-1191 (use-after-free in the handling of DOM URLs) prior to version 10.0.648.127. The issue can allow remote denial of service or possibly other impact. The connected documents specify the vulnerable component as Chrome (DOM URL handling) and the affected rang...

CVE-2011-1200

CVE-2011-1200 affects Google Chrome prior to 10.0.648.127. The issue is described as an improper cast of an unspecified variable during text rendering, allowing remote attackers to cause a denial of service or potentially other impact via a crafted document. Connected sources (NVD, OpenVAS/NESSUS...

CVE-2011-1817

Google Chrome before version 12.0.742.91 is affected by a history deletion handling issue that can lead to memory corruption and potential denial of service. Root cause: incomplete/incorrect history deletion implementation. Impact: remote attackers could trigger memory corruption; other vectors a...

CVE-2011-1818

CVE-2011-1818 refers to a use-after-free vulnerability in Google Chrome’s image loader prior to version 12.0.742.91. The issue allows remote attackers to cause a denial of service or potentially other impact via unknown vectors. Affected product: Google Chrome (image loading code). Root cause: us...

CVE-2011-1819

Google Chrome (before 12.0.742.91) is vulnerable to extension-injected access into chrome:// pages. The connected OpenVAS entries enumerate CVE-2011-1819 as part of a multi‑vulnerability set titled “Google Chrome Multiple Vulnerabilities (Jun 2011),” with the underlying issue described as extensi...

CVE-2011-2862

CVE-2011-2862 concerns Google V8 in Chrome before 14.0.835.163, where access to built-in objects is not properly restricted. Affected software is the V8 engine as used by Chrome; root cause and precise impact are not detailed in the provided documents. No exploitation details are given here, and ...

CVE-2011-3025

CVE-2011-3025 affects Google Chrome prior to 17.0.963.56; the issue is a parsing vulnerability in H.264 data that can cause a remote denial of service via an out-of-bounds read. No exploitation details are provided in the sources beyond this description. A fix is available in Chrome 17.0.963.56 a...

CVE-2011-3873

The CVE-2011-3873 entry concerns Google Chrome (Oct 2011 era). Description: Chrome before 14.0.835.202 may fail to correctly translate shader code, enabling a remote attacker to execute arbitrary code or cause memory corruption via unspecified vectors. Connected documents confirm Chrome/Chromium-...

CVE-2011-3904

CVE-2011-3904 is a use-after-free in Chrome/Chromium bidi handling (Google Chrome before 16.0.912.63). The OpenVAS/Gentoo entries corroborate a high-severity flaw with potential DoS/impact, but explicit exploitation details are not provided in the documents. Remediation per sources: upgrade to Ch...

CVE-2023-3497

CVE-2023-3497 affects Google Chrome on ChromeOS with the Google Security Processor firmware (Titan C). The issue is an out-of-bounds read in the firmware that enables a local attacker with physical access to cause a denial of service. The vulnerability is documented in ChromeOS-related advisories...

CVE-2025-12440

An inappropriate implementation in the Autofill component of Google Chrome (prior to version 142.0.7444.59 ) and Microsoft Edge allows a remote attacker to obtain potentially sensitive information from process memory. The vulnerability is triggered when a user is convinced to perform specific UI ...

CVE-2025-12907

Google Chrome versions prior to 140.0.7339.80 are vulnerable to a security flaw caused by insufficient validation of untrusted input in the Devtools component. A remote attacker could leverage this issue to execute arbitrary code via user action within Devtools. This vulnerability was addressed i...

CVE-2025-13720

Google Chrome versions prior to 143.0.7499.41 are vulnerable to a bad cast in the Loader component. This incorrect data type conversion allows a remote attacker who has compromised the renderer process to trigger heap corruption via a crafted HTML page. The vulnerability could potentially lead to...

CVE-2026-3540

Google Chrome and Microsoft Edge are vulnerable to a High severity memory out-of-bounds access vulnerability in the WebAudio component. This issue stems from an inappropriate implementation that allows a remote attacker to read data beyond the permitted range or perform out-of-bounds memory acces...

CVE-2026-4464

Google Chrome and Microsoft Edge are vulnerable to an integer overflow in the ANGLE library. A remote attacker could exploit this vulnerability via a crafted HTML page to potentially cause heap corruption or a service failure . This issue affects versions of Google Chrome prior to 146.0.7680.153 ...

CVE-2026-5890

Google Chrome versions prior to 147.0.7727.55 are vulnerable to a race condition within the WebCodecs interface. This flaw occurs due to synchronization errors when using a shared resource, which could allow a remote attacker to obtain potentially sensitive information from process memory by navi...

CVE-2026-5899

The Google Chrome web browser, prior to version 147.0.7727.55 , is vulnerable to a User Cross-Site Scripting (UXSS) flaw due to insufficient policy enforcement in History Navigation . A remote attacker can exploit this by tricking a user into performing specific UI gestures on a crafted HTML page...

CVE-2026-7900

Google Chrome and Microsoft Edge are affected by a heap buffer overflow in the ANGLE library. This vulnerability allows a remote attacker who has already compromised the renderer process to perform a sandbox escape by providing a crafted HTML page. The issue was addressed in version 148.0.7778.96...

CVE-2026-7907

A use after free vulnerability in the DOM components of Google Chrome and Microsoft Edge allows a remote attacker to execute arbitrary code inside a sandbox. This flaw occurs when elements are reused after being released from the DOM, exploitable via a crafted HTML page . The issue affects versio...

CVE-2026-7920

Google Chrome versions prior to 148.0.7778.96 are vulnerable to a use after free flaw in the Skia component. A remote attacker who has already compromised the renderer process can exploit this memory management issue via a crafted HTML page to potentially perform a sandbox escape . The vulnerabil...

CVE-2026-7953

Google Chrome and Chromium are affected by a vulnerability (CVE-2026-7953) involving insufficient validation of untrusted input in the Omnibox component prior to version 148.0.7778.96 . A remote attacker can exploit this by using malicious network traffic to inject arbitrary scripts or HTML, lead...

CVE-2026-7961

Google Chrome and the Chromium browser (including versions used in Astra Linux , Fedora , and Debian ) are vulnerable to a security flaw due to insufficient validation of untrusted input in the Permissions feature. This flaw exists in versions prior to 148.0.7778.96 . An attacker on the local net...

CVE-2026-7978

A flaw in the Companion component of Google Chrome on macOS (prior to version 148.0.7778.96 ) allows a remote attacker to perform OS-level privilege escalation via malicious network traffic. This vulnerability is attributed to an inappropriate implementation and a flaw in the data protection mech...

CVE-2026-8515

Google Chrome versions prior to 148.0.7778.168 are vulnerable to a use after free vulnerability in the HID component. A remote attacker who can convince a user to engage in specific UI gestures may use a crafted HTML page to potentially perform a sandbox escape . This issue is classified with a C...

CVE-2026-8520

Google Chrome versions prior to 148.0.7778.168 are vulnerable to a race condition in the Payments component. This flaw stems from synchronization errors when accessing a common resource, which could allow a remote attacker to achieve a sandbox escape by navigating to a crafted HTML page . This is...

CVE-2010-2107

Summary (CVE-2010-2107) : Google Chrome before 5.0.375.55 is affected by an unspecified vulnerability related to Safe Browsing that can cause a memory error and potentially other impact, enabling denial of service. Several open vulnerability feeds corroborate multiple issues (including Safe Brows...

CVE-2011-0781

CVE-2011-0781 affects Google Chrome before 9.0.597.84, where autofill profile merging is not handled correctly. The description provided states an unspecified impact and remote attack vectors, but does not give concrete details on affected components beyond the autofill merging behavior. No expli...

CVE-2011-1118

CVE-2011-1118 affects Google Chrome prior to 9.0.597.107. The vulnerability arises from improper handling of TEXTAREA elements, which can allow remote attackers to crash the browser (DoS) or cause unspecified additional impact via a crafted HTML document. Publicly linked references indicate this ...

CVE-2011-1198

The CVE-2011-1198 entry concerns Google Chrome’s video functionality prior to version 10.0.648.127. The vulnerability arises from a malformed out-of-bounds structure which can be triggered by unspecified vectors, leading to a denial-of-service and possibly other unspecified impacts. The provided ...

CVE-2011-1434

CVE-2011-1434 (Google Chrome) : The Chrome browser is vulnerable due to a thread safety issue in handling MIME data, allowing remote attackers to cause a denial of service and potentially other impacts via unspecified vectors. This affects Chrome versions before 11.0.696.57. The vulnerability is ...

CVE-2011-1815

CVE-2011-1815 affects Google Chrome (pre-12.0.742.91). The vulnerability allows remote attackers to inject script into a tab page via vectors related to extensions, specifically extension script injection into new tab page. The issue is tied to Chrome’s extension framework and is mitigated by upd...

CVE-2011-2803

CVE-2011-2803 affects Google Chrome prior to 13.0.782.107. The issue arises in handling Skia paths, enabling a remote attacker to induce a denial of service via an out-of-bounds read. Vectors are not specified in the provided documents. Public references corroborate the CVE and list it under Chro...

CVE-2011-2804

CVE-2011-2804 affects Google Chrome up to version 13.0.782.107, where the PDF viewer mishandles nested functions in PDF documents, enabling remote crashes or potentially other impact via crafted files. For Chrome, this was associated with a Medium (CVSS v2 4.3) severity and was observable as an a...

CVE-2011-2829

CVE-2011-2829 affects Google Chrome prior to 13.0.782.215 on 32-bit platforms, via an integer overflow in a uniform arrays path. Impact: remote denial of service and possibly other unspecified effects. Exploitation details are not provided in the documents. Remediation: update to Chrome 13.0.782....

CVE-2011-2842

Summary (CVE-2011-2842) Google Chrome for Mac OS X (pre-14.0.835.163) is affected by an issue in the installer that handles lock files insecurely. This is documented as “Insecure lock file handling in the Mac installer,” with the NVD entry noting the vulnerability affects the Mac installer and ha...

CVE-2011-2877

Technical details about CVE-2011-2877 are not publicly provided in the supplied documents. The connected sources reference this CVE among broader Apple/Chromium vulnerability collections but do not specify affected component, impact, exploit vectors, or remediation.

CVE-2011-3894

CVE-2011-3894 affects Google Chrome (and Chromium-based builds) prior to version 15.0.874.120, where VP8 decoding could be manipulated by a crafted stream, leading to memory corruption and potentially other impact. The connected advisories corroborate multiple Chromium/V8 vulnerabilities around t...

CVE-2011-3961

CVE-2011-3961 describes a race condition in Google Chrome prior to 17.0.963.46 that could allow a remote attacker to execute arbitrary code by triggering a crash in a utility process. The impact is high, with potential full control of the affected host if exploited. The vulnerability affects Goog...

CVE-2019-15684

The CVE concerns the Kaspersky Protection Chrome extension (Google Chrome) prior to version 30.112.62.0. The vulnerability allows remote unauthorized access to the extension’s uninstall functionality, potentially removing other installed extensions. The attacker can trigger uninstall prompts via ...

CVE-2020-15997

CVE-2020-15997: In Google Chrome, a use-after-free in Mojo (prior to 86.0.4240.99) could allow a remote attacker who had already compromised the renderer process to potentially escape the sandbox via a crafted HTML page. The vulnerability is rooted in Mojo handling within Chrome’s renderer path; ...

CVE-2025-11208

An inappropriate implementation in Media within Google Chrome prior to version 141.0.7390.54 allows a remote attacker to perform UI spoofing via a crafted HTML page. The attack requires a user to engage in specific UI gestures . This vulnerability affects Chromium and its derivatives, including M...

CVE-2025-12439

Google Chrome on Windows versions prior to 142.0.7444.59 is affected by CVE-2025-12439 , where an inappropriate implementation in App-Bound Encryption allows a local attacker to obtain potentially sensitive information from process memory via a malicious file. This vulnerability is also present i...

CVE-2025-13638

Google Chrome and Chromium are affected by a use after free vulnerability in the Media Stream component. This flaw allows a remote attacker to potentially trigger heap corruption or a service failure by navigating to a crafted HTML page. The vulnerability impacts versions prior to 143.0.7499.41 ....

CVE-2026-4441

A use after free vulnerability in the Base component of Google Chrome (prior to version 146.0.7680.153) allows a remote attacker to potentially trigger heap corruption or a service failure via a crafted HTML page. This issue also affects Microsoft Edge and the Chromium engine. Remediation is avai...

CVE-2026-4454

Google Chrome and Chromium-based browsers are vulnerable to a use after free flaw in the Network component. This vulnerability allows a remote attacker to trigger heap corruption by navigating to a specially crafted HTML page. The issue affects versions prior to 146.0.7680.153 . Remediation is av...

CVE-2026-5868

A heap buffer overflow in the ANGLE library of Google Chrome on Mac versions prior to 147.0.7727.55 allows a remote attacker to execute arbitrary code inside a sandbox via a crafted HTML page . This vulnerability, which carries a high security severity, was addressed in the stable channel update ...

CVE-2026-6299

Google Chrome contains a use after free vulnerability in the Prerender component prior to version 147.0.7727.101 . This flaw allows a remote attacker to execute arbitrary code via a crafted HTML page. To remediate this issue, users should upgrade to version 147.0.7727.101 or later. Proof-of-conce...

CVE-2026-7361

A Use after free vulnerability exists in Google Chrome on iOS (prior to version 147.0.7727.138 ) due to the reuse of components after they were released. A remote attacker could exploit this to cause heap corruption via a crafted HTML page. This issue is classified as Critical by Chromium securit...

CVE-2026-7915

A high-severity vulnerability exists in the DevTools component of Google Chrome on Android (prior to version 148.0.7778.96) due to insufficient data validation . This flaw allows a remote attacker to bypass navigation restrictions by navigating to a specially crafted HTML page. The issue has been...