CVE-2026-7988

A Type Confusion vulnerability exists in the WebRTC component of Google Chrome and Chromium browsers prior to version 148.0.7778.96 . A remote attacker can exploit this by hosting a crafted HTML page , which may lead to arbitrary code execution within a sandbox. The vulnerability also affects Mic...

CVE-2025-11216

An inappropriate implementation in the Storage component of Google Chrome on Mac (prior to version 141.0.7390.54 ) allows a remote attacker to perform domain spoofing by using a crafted video file . This issue is categorized as Low security severity by Chromium. To mitigate this, users should upg...

CVE-2025-12729

An inappropriate implementation in the Omnibox component of Google Chrome on Android prior to version 142.0.7444.137 allows a remote attacker to perform UI spoofing . By convincing a user to perform specific UI gestures, the attacker can execute this attack via a crafted HTML page. The vulnerabil...

CVE-2026-110153

A use after free flaw exists in the Media component of the Google Chrome browser (prior to version 155.0.8059.79 ). This vulnerability allows a remote attacker to execute arbitrary code inside the sandbox by navigating to a crafted HTML page. Google has addressed this in the 155.0.8059.79 update ...

CVE-2026-110162

A use after free vulnerability in the Desktop component of Google Chrome (prior to version 155.0.8059.79 ) allows a remote attacker to execute arbitrary code inside the sandbox. This can be triggered by visiting a crafted HTML page . The issue was reported by Findingz and is addressed in the stab...

CVE-2026-110172

A use after free vulnerability exists in the Media component of Google Chrome prior to version 155.0.8059.79 . This flaw allows a remote attacker to execute arbitrary code inside the sandbox by interacting with a crafted HTML page . The vulnerability was reported by researcher Xinyang Ge and has ...

CVE-2026-110915

A use after free flaw exists in the Compositing component of Google Chrome prior to version 155.0.8059.84 . This vulnerability allows a remote attacker to execute arbitrary code inside the sandbox by navigating to a crafted HTML page. The issue was reported by Google on 2026-09-02. Remediation is...

CVE-2026-110919

A Use after free flaw exists in the V8 component of the Google Chrome browser (prior to version 155.0.8059.84). This vulnerability allows a remote attacker to execute arbitrary code inside the sandbox by leveraging a crafted HTML page. The issue has been addressed in the Stable channel update to ...

CVE-2026-5864

A heap buffer overflow exists in the WebAudio component of Google Chrome prior to version 147.0.7727.55 . A remote attacker can exploit this vulnerability by using a crafted HTML page to obtain potentially sensitive information from process memory. This issue is categorized with High security sev...

CVE-2026-5867

Google Chrome versions prior to 147.0.7727.55 are vulnerable to a heap buffer overflow in the WebML component. A remote attacker can exploit this vulnerability by using a crafted HTML page to obtain potentially sensitive information from process memory. This issue has been addressed in the stable...

CVE-2026-5886

The Google Chrome browser on Mac operating systems is vulnerable to an out-of-bounds read in the WebAudio component. This flaw allows a remote attacker to disclose sensitive information from process memory by navigating to a crafted HTML page . This issue affects versions prior to 147.0.7727.55 ....

CVE-2026-5914

Google Chrome versions prior to 147.0.7727.55 are vulnerable to a type confusion issue within the CSS component . This flaw stems from errors in data type mixing , which could allow an attacker to trigger a service failure or exploit heap corruption by convincing a user to install a malicious Chr...

CVE-2026-6312

Google Chrome versions prior to 147.0.7727.101 are vulnerable to a security flaw caused by insufficient policy enforcement in the Passwords component . A remote attacker who successfully compromises the renderer process can leverage this vulnerability to leak cross-origin data via a specially cra...

CVE-2026-7349

A use after free vulnerability in the Cast component of Google Chrome (prior to version 147.0.7727.138 ) allows an attacker on the local network segment to execute arbitrary code inside a sandbox via malicious network traffic. The root cause is the reuse of Cast components after they have been re...

CVE-2026-7918

A use after free vulnerability exists in the GPU component of Google Chrome (and Chromium ) versions prior to 148.0.7778.96 . The root cause is the reuse of GPU resources after they have been released. A remote attacker who has already compromised the renderer process could leverage this flaw via...

CVE-2026-7985

A use after free vulnerability exists in the GPU component of Google Chrome (and Microsoft Edge ) prior to version 148.0.7778.96 . The root cause is the reuse of resources after they were released by the GPU, which allows a remote attacker who has already compromised the renderer process to poten...

CVE-2010-2650

CVE-2010-2650 affects Google Chrome prior to 5.0.375.99. Public details across connected docs indicate multiple vulnerabilities addressed in the 5.0.375.99 update, with the OpenVAS/Seebug entries confirming that Google Chrome 5.0.375.99 fixed several issues. Concrete items from Seebug include mul...

CVE-2010-3249

CVE-2010-3249 affects Google Chrome prior to 6.0.472.53, where SVG filter handling could be abused to cause a denial of service (and potentially other impact) via remote vectors. The NVD entry lists impact on confidentiality, integrity, and availability (C=C, I=C, A=C) with network attack vector ...

CVE-2010-3917

Google Chrome information disclosure vulnerability (CVE-2010-3917) affects Google Chrome prior to 3.0. The root cause is improper handling of XML documents, allowing a remote attacker to obtain sensitive information via a crafted webpage. Documented impacts indicate confidentiality exposure when ...

CVE-2011-1199

CVE-2011-1199 affects Google Chrome prior to version 10.0.648.127. The vulnerability arises from improper handling of DataView objects, enabling remote attackers to cause an application crash (DoS) or potentially other unspecified impact via unknown vectors. The available connected sources confir...

CVE-2011-2881

CVE-2011-2881 corresponds to multiple vulnerability entries affecting Google Chrome before 14.0.835.202 . The issue stems from improper handling of Google V8 hidden objects , allowing a remote attacker to cause a denial of service via memory corruption (and possibly other impact). Public referenc...

CVE-2011-3065

CVE-2011-3065 : Skia in Google Chrome (before 18.0.1025.142) allows remote attackers to cause memory corruption and possibly other impact via unknown vectors. Outcome described as memory corruption/DoS with unspecified additional effects. Mitigation: upgrade Chrome to version 18.0.1025.142 or new...

CVE-2011-3879

CVE-2011-3879 affects Google Chrome prior to 15.0.874.102, where redirects to chrome: URLs are not prevented, yielding unspecified impact and remote attack vectors. Remediation per connected advisories is to upgrade to Chrome 15.0.874.102 or newer (e.g., as noted in GLSA 201111-01 for Chromium/Ch...

CVE-2025-12905

A vulnerability exists in the Downloads component of Google Chrome on Windows (prior to version 140.0.7339.80 ). An inappropriate implementation in the source validation mechanism allows a remote attacker to bypass the Mark of the Web security restriction by navigating to a specially crafted HTML...

CVE-2026-110139

A use after free flaw exists in the Media component of the Chromium browser (Google Chrome) prior to version 155.0.8059.79 . This vulnerability allows a remote attacker to execute arbitrary code inside the sandbox by viewing a crafted HTML page . This issue has been addressed in the update to ver...

CVE-2026-110140

A type confusion flaw exists in the V8 component of the Google Chrome browser, affecting versions prior to 155.0.8059.79 . This vulnerability allows a remote attacker to execute arbitrary code inside the sandbox by interacting with a crafted HTML page. The issue has been addressed in the stable c...

CVE-2026-110154

Google Chrome versions prior to 155.0.8059.79 are vulnerable to a Use after free flaw in the Canvas component. A remote attacker could exploit this vulnerability by navigating to a crafted HTML page to potentially execute arbitrary code inside the sandbox. This vulnerability has been addressed in...

CVE-2026-110167

A use after free vulnerability exists in the Media component of Google Chrome prior to version 155.0.8059.79 . A remote attacker could exploit this flaw by interacting with a crafted HTML page to achieve arbitrary code execution within the sandbox. This issue was reported by security researcher X...

CVE-2026-4444

A stack buffer overflow vulnerability exists in the WebRTC component of Google Chrome versions prior to 146.0.7680.153 . A remote attacker can exploit this flaw by using a crafted HTML page to induce stack corruption. The vulnerability also affects Microsoft Edge , where it can lead to service in...

CVE-2026-5859

An integer overflow vulnerability exists in the WebML component of Google Chrome prior to version 147.0.7727.55 . A remote attacker could potentially exploit this flaw via a crafted HTML page to trigger heap corruption . This issue has been addressed in the 147.0.7727.55 stable release for Window...

CVE-2026-5866

Google Chrome versions prior to 147.0.7727.55 are vulnerable to a use after free flaw within the Media component. This resource management error occurs when objects are reused after being released, potentially allowing a remote attacker to execute arbitrary code inside a sandbox via a crafted HTM...

CVE-2026-5883

CVE-2026-5883: Use-after-free in Media within Google Chrome prior to 147.0.7727.55 allows remote code execution inside the sandbox via a crafted HTML page. Affected product is Google Chrome (Chromium-based); root cause is use-after-free in Media handling. The Chrome 147 release notes list this fi...

CVE-2026-7904

A high-severity out-of-bounds read vulnerability exists in the Fonts component of Google Chrome (and Microsoft Edge ) in versions prior to 148.0.7778.96 . A remote attacker can exploit this flaw by navigating to a crafted HTML page to perform an out-of-bounds memory read. Impact may include servi...

CVE-2026-7923

Google Chrome versions prior to 148.0.7778.96 are vulnerable to an out of bounds write in the Skia component. A remote attacker who has compromised the renderer process can exploit this vulnerability using a crafted HTML page to potentially perform a sandbox escape . Remediation is available in v...

CVE-2026-7984

A use after free vulnerability exists in the ReadingMode component of Google Chrome prior to version 148.0.7778.96 . The root cause is the reuse of resources after they have been released, which could allow a remote attacker who has already compromised the renderer process to execute arbitrary co...

CVE-2010-2899

CVE-2010-2899 affects Google Chrome up to version 5.0.375.125 in the layout implementation. The vulnerability is described as an unspecified issue that allows remote attackers to obtain sensitive data from process memory via unknown vectors. The connected documents confirm the affected product an...

CVE-2011-1436

CVE-2011-1436 affects Google Chrome on Linux prior to 11.0.696.57, caused by improper interaction with the X Window System that can trigger a remote-denial of service (application crash) via unspecified vectors. The 11.0.696.57 Chrome patch (Stable Channel) addresses multiple vulnerabilities, inc...

CVE-2011-2793

Google Chrome is vulnerable to a use-after-free in media selectors affecting Chrome up to version 13.0.782.107. The CVE entry CVE-2011-2793 describes that remote attackers could cause a denial of service or potentially induce other unspecified effects. Connected documents corroborate a family of ...

CVE-2017-15402

CVE-2017-15402 affects Google Chrome on Chrome OS prior to 62.0.3202.74. A compromised renderer could control an ID used across frames, allowing any frame to overwrite another frame’s page_state within the same process, potentially enabling a sandbox escape via a crafted HTML page. The issue is c...

CVE-2025-12431

A vulnerability in the Extensions component of Google Chrome and Microsoft Edge (prior to version 142.0.7444.59 ) is caused by an inappropriate implementation of security checks for standard elements. An attacker who convinces a user to install a malicious extension can exploit this flaw to bypas...

CVE-2025-12908

Google Chrome on Android versions prior to 140.0.7339.80 is vulnerable to domain spoofing due to insufficient validation of untrusted input within the Downloads component. A remote attacker can exploit this by hosting a crafted HTML page . While specific exploit links are not provided, the vulner...

CVE-2026-3916

Google Chrome and Microsoft Edge are affected by an out-of-bounds read vulnerability in the Web Speech component. This flaw occurs when the software reads beyond the buffer limit, which a remote attacker could exploit via a crafted HTML page to potentially perform a sandbox escape and compromise ...

CVE-2026-5887

Google Chrome on Windows versions prior to 147.0.7727.55 is vulnerable to a security flaw where insufficient validation of untrusted input in the Downloads component allows a remote attacker to bypass download restrictions via a specially crafted HTML page. This vulnerability is classified with a...

CVE-2026-6311

Google Chrome on Windows is vulnerable to an Uninitialized Use in the Accessibility component (prior to version 147.0.7727.101 ). A remote attacker who has already compromised the renderer process could leverage this flaw to perform a sandbox escape by navigating to a specially crafted HTML page....

CVE-2026-7980

Google Chrome and Microsoft Edge are affected by a use after free vulnerability in the WebAudio component. This resource management error allows a remote attacker to execute arbitrary code inside a sandbox by leveraging a crafted HTML page. The issue impacts versions prior to 148.0.7778.96 . Reme...

CVE-2010-2298

Google Chrome before 5.0.375.70 on Linux is vulnerable due to improper handling of ViewHostMsg_DatabaseOpenFile in chroot-based sandboxing, allowing sandbox bypass via fchdir/chdir. Root cause: database_dispatcher_host.cc in renderer_host. Affected: Chrome versions prior to 5.0.375.70. Mitigation...

CVE-2010-3253

CVE-2010-3253 concerns Google Chrome prior to version 6.0.472.53, where the notification permissions implementation is exposed to memory corruption, enabling denial of service and possibly other unspecified impact via unknown vectors. The CVE appears in multiple feeds (NVD and OpenVAS entries ref...

CVE-2010-4039

CVE-2010-4039 affects Google Chrome on Linux prior to 7.0.517.41 where the process fails to properly set the PATH environment variable. The description does not specify the exact impact or attack vectors; vulnerability details are limited to this PATH handling issue. Open-source/ANSI references i...

CVE-2011-2782

Google Chrome on Linux (pre-13.0.782.107) is affected by CVE-2011-2782 due to a drag-and-drop file permission handling flaw that could allow a user‑assisted remote attacker to bypass access restrictions via unspecified vectors. The issue is addressed in Chrome 13.0.782.107 (Stable Channel update)...

CVE-2011-2878

CVE-2011-2878 affects Google Chrome (before 14.0.835.202). The flaw permits remote attackers to bypass the Same Origin Policy by exploiting access to the window prototype via unspecified vectors; impact described as SOP bypass. Versions, affected platforms, and exact exploit vectors are not furth...