CVE-2020-6469

CVE-2020-6469 concerns Google Chrome/Chromium's developer tools. The connected sources explicitly describe an "insufficient policy enforcement" issue in the developer tools before Chrome 83.0.4103.61, which could allow an attacker to persuade a user to install a malicious extension and potentiall...

CVE-2020-6488

CVE-2020-6488 affects Google Chrome prior to 83.0.4103.61, with an insufficient policy enforcement in downloads that allows a remote attacker to bypass navigation restrictions via a crafted HTML page. Impact: navigation restriction bypass in downloads; attacker could potentially influence downloa...

CVE-2022-1310

CVE-2022-1310 affects Google Chrome: use-after-free in the regular expressions engine prior to 100.0.4896.88, potentially enabling heap corruption via a crafted HTML page. Remediation: upgrade Chrome to 100.0.4896.88 or newer (as reflected in multiple security advisories).

CVE-2022-1635

CVE-2022-1635 affects Google Chrome prior to 101.0.4951.64, where a use-after-free in Permission Prompts could allow a remote attacker to potentially exploit heap corruption via specific UI interactions. The issue is documented across multiple advisories, with Debian/Linux and Alpine/Linux tracke...

CVE-2023-4901

CVE-2023-4901 affects Google Chrome/Chromium: an improper Prompts implementation prior to Chrome 117.0.5938.62 allowed a remote attacker to potentially spoof security UI via a crafted HTML page. Impact is Medium (CVSS 3.1: AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N; base score 4.3). Affected products in...

CVE-2023-5484

The CVE-2023-5484 entry concerns Chrome/Chromium where an inappropriate implementation in the Navigation UI allows a remote attacker to spoof security UI via a crafted HTML page. Affected product: Google Chrome/Chromium browser. Root cause: navigation handling in Chromium before 118.0.5993.70 per...

CVE-2026-87463

A flaw in the Certificate component of Chromium (and Google Chrome on Android prior to version 153.0.8010.36) allows for incorrect authorization , enabling a remote attacker to potentially spoof the address bar via crafted network traffic. This could mislead users regarding a website's authentici...

CVE-2020-6378

CVE-2020-6378 affects Google Chrome/Chromium’s speech recognition components, where a use-after-free in the speech recognizer can enable remote code execution. The vulnerability exists in Chromium/Chrome builds prior to version 79.0.3945.130, as indicated by the CVE description and multiple vendo...

CVE-2021-21227

CVE-2021-21227 affects Google Chrome/Chromium, caused by insufficient data validation in the V8 JavaScript engine. A crafted HTML page can potentially trigger heap corruption, with impact described as remote code execution risk depending on context, and is tied to Chrome/Chromium versions before ...

CVE-2021-30555

CVE-2021-30555 is a use-after-free in the Chromium Sharing component up to version 91.0.4472.114. An attacker could exploit heap corruption by convincing a user to install a malicious extension and rendering a crafted HTML page with user gesture. Impact described as arbitrary code execution/remot...

CVE-2022-2477

The CVE-2022-2477 entry corresponds to a use-after-free in Chrome/Chromium’s Guest View prior to 103.0.5060.134, potentially permitting heap corruption when a user is coaxed to install a malicious extension and render a crafted HTML page. Affected component: Guest View in Chrome/Chromium. Root ca...

CVE-2023-1221

The CVE-2023-1221 entry describes a Chromium-based issue in Google Chrome’s Extensions API: insufficient policy enforcement allowed a user-assisted attacker to bypass navigation restrictions via a crafted extension in Chrome prior to 111.0.5563.64. Affected software is Google Chrome/Chromium with...

CVE-2019-13676

CVE-2019-13676 affects Chromium/Google Chrome and is described as an error in a certificate warning, contributing to domain spoofing scenarios. Public sources in the connected docs tie this to the Chromium/Chrome 78 updates that fixed this issue (e.g., CVEs tracked in Fedora/Debian advisories). T...

CVE-2020-6416

CVE-2020-6416 affects Chromium-based Chromium/Google Chrome prior to 80.0.3987.87 in the streams component. The root cause is insufficient data validation in streams, enabling a remote attacker to potentially trigger heap corruption via a crafted HTML page. Public advisories (Debian, Arch Linux A...

CVE-2020-6436

CVE-2020-6436 refers to a use-after-free in the window management component of the Chromium/Chrome browser prior to version 81.0.4044.92. Public sources in the connected documents consistently identify this as a use-after-free vulnerability in Chromium that could enable a remote attacker to trigg...

CVE-2026-14129

An incorrect security UI flaw was found in the PreviewTab component of the Chromium browser, affecting Google Chrome on Android prior to version 150.0.7871.47 . A remote attacker could exploit this by convincing a user to perform specific UI gestures while visiting a crafted HTML page, potentiall...

CVE-2019-13674

CVE-2019-13674 (Google Chrome) is a type-confusion in Chrome’s V8 engine related to induction-variable type handling (Infinity/NaN) inside a loop. The vulnerability could be triggered by constructing a loop that exploits NaN behavior, allowing crafted inputs to potentially trigger misinterpretati...

CVE-2019-13696

Chromium/Google Chrome prior to version 77.0.3865.120 is affected by CVE-2019-13696 due to a use-after-free in the V8 component. This vulnerability could allow a remote attacker to execute arbitrary code via a crafted HTML page, with the issue fixed in 77.0.3865.120 according to multiple advisori...

CVE-2019-13710

CVE-2019-13710 affects Google Chrome/Chromium before 78.0.3904.70. Root cause: insufficient validation of untrusted input in downloads, enabling a remote attacker to bypass download restrictions via a crafted HTML page. Impact described as bypassing download protection; several advisories (Debian...

CVE-2019-5763

CVE-2019-5763 is a vulnerability in Google's V8 engine used by Chrome/Chromium, arising from a failure to check error conditions. This could allow a remote attacker to trigger heap corruption via a crafted HTML page, with impact described as partial confidentiality/integrity/availability in the C...

CVE-2019-5777

The CVE-2019-5777 entry concerns Google Chrome’s Omnibox where an incorrect handling of a confusable character allowed a remote attacker to spoof the URL bar with a crafted domain name, affecting Chrome prior to version 72.0.3626.81. The underlying issue is in the Omnibox domain-name processing (...

CVE-2019-5805

CVE-2019-5805 involves a use-after-free in the PDFium component of the Chromium/Google Chrome stack, prior to version 74.0.3729.108. The vulnerability could permit a remote attacker to potentially execute heap corruption via a crafted PDF file. Affected products include Google Chrome/Chromium (de...

CVE-2020-6454

CVE-2020-6454 affects Chromium/Google Chrome extensions: a use-after-free in the extensions component could allow heap corruption and arbitrary code execution. Public docs indicate this affects Chrome before 81.0.4044.92 (and Chromium up to 81.0.4044.92). Debian and Arch advisories list the issue...

CVE-2020-6464

CVE-2020-6464 describes a type confusion in Blink/WebKit used by Google Chrome before 81.0.4044.138, which could allow a remote attacker to potentially exploit heap corruption via a crafted HTML page. Public disclosures in multiple advisories confirm this Chromium vulnerability, with affected rel...

CVE-2020-6465

CVE-2020-6465 is a use-after-free vulnerability in Chrome/Chromium’s reader mode (on Chrome/Chromium before version 83.0.4103.61). The underlying issue is a use-after-free in the reader mode path that could allow a remote attacker who has compromised the renderer process to cause arbitrary code e...

CVE-2022-1125

CVE-2022-1125 affects Portals in Google Chrome prior to 100.0.4896.60, with the vulnerability described as a Use-after-Free that could allow a remote attacker to trigger heap corruption via specific user interaction. The Chrome security update (Chrome 100) fixes this and other issues; Debian secu...

CVE-2026-3927

Google Chrome versions prior to 146.0.7680.71 are vulnerable to a Medium severity security bypass (CVE-2026-3927). The issue stems from an incorrect security UI in PictureInPicture , which creates an improper limitation on the visual layers of the user interface. A remote attacker can exploit thi...

CVE-2020-6431

Chromium/Google Chrome (CVE-2020-6431) has an insufficient policy-enforcement check in full-screen mode that could allow a crafted HTML page to spoof security UI. Affected products include Chromium and Google Chrome prior to version 81.0.4044.92. Debian/Arch/Fedora advisories in the connected doc...

CVE-2022-0790

The CVE-2022-0790 issue is a use-after-free in Chrome’s Cast UI affecting Google Chrome prior to 99.0.4844.51. The root cause is a memory management error that could be triggered when a user interacts with a crafted HTML page, potentially enabling a sandbox escape. Multiple connected sources (e.g...

CVE-2026-14116

The vulnerability CVE-2026-14116 affects Google Chrome DevTools. The root cause is insufficient validation of untrusted input in DevTools, allowing a remote attacker to leak cross-origin data through a crafted HTML page when a user is guided to perform specific UI gestures. Impact is cross-origin...

CVE-2026-19174

An integer overflow vulnerability exists in the V8 engine within Google Chrome versions prior to 151.0.7922.109 . This flaw allows a remote attacker to execute arbitrary code inside a sandbox by hosting a crafted HTML page . The vulnerability affects Chromium -based browsers, including Microsoft ...

CVE-2026-95310

A use after free vulnerability exists in the AdFilter component of Google Chrome and Chromium prior to version 154.0.8037.57 . A remote attacker can exploit this flaw by using a crafted HTML page to achieve arbitrary code execution outside the sandbox . Remediation is available in version 154.0.8...

CVE-2019-13713

CVE-2019-13713 affects Google Chrome/Chromium prior to 78.0.3904.70, caused by insufficient policy enforcement in JavaScript that allowed cross-origin data leakage via a crafted HTML page. Public advisories confirm the issue and that it was fixed in 78.0.3904.70 (updates for Chrome/Chromium and d...

CVE-2019-5769

CVE-2019-5769 is an input validation error in Blink/WebKit that affected Chromium-based browsers (per Debian/Fedora advisories). The issue could allow a remote attacker to trigger heap corruption via a crafted HTML page. The connected documents confirm the flaw and attribute it to Blink/WebKit in...

CVE-2019-5851

Chromium before 76.0.3809.87 is vulnerable to CVE-2019-5851 due to a use-after-poison in the offline audio context (WebAudio). Remote attackers could potentially execute arbitrary code on affected hosts. Arch Linux advisory ASA-201908-1 documents this as a high-severity, remote issue and fixes by...

CVE-2019-5880

CVE-2019-5880 affects Blink in Google Chrome where insufficient policy enforcement allowed a remote attacker to leak cross-origin data via a crafted HTML page. Affected software is Chrome/Chromium built on Blink prior to the cited fix version; the publicly documented remediation is to upgrade to ...

CVE-2020-6406

CVE-2020-6406 is a use-after-free in the audio component of Google Chrome prior to 80.0.3987.87, enabling a remote attacker to potentially trigger heap corruption via a crafted HTML page. Affected product: Chrome/Chromium audio handling. Root cause: use-after-free in the audio path. Impact: remot...

CVE-2020-6461

CVE-2020-6461: A use-after-free in Chrome storage prior to 81.0.4044.129 could allow a renderer-compromised remote attacker to escape the sandbox via a crafted HTML page. Affected: Google Chrome (storage subsystem); root cause: use-after-free. Impact: sandbox escape; exploit status not detailed i...

CVE-2025-6191

Google Chrome contains an integer overflow vulnerability in the V8 engine affecting versions prior to 137.0.7151.119 . The root cause involves improper handling of integer values, which allows a remote attacker to perform out-of-bounds memory access or execute arbitrary code by tricking a user in...

CVE-2026-87566

Google Chrome (prior to version 153.0.8010.36 ) is vulnerable to an observable discrepancy in Layout (CWE-203). A remote attacker can exploit this flaw by using a crafted HTML page to leak sensitive information. This vulnerability affects Chromium-based browsers, including Microsoft Edge and vers...

CVE-2019-13719

CVE-2019-13719 is a Chromium-based UI security issue in full-screen mode for Google Chrome (prior to 78.0.3904.70). It allowed a crafted HTML page to obscure the security UI, enabling potential spoofing or misleading UI, with root cause tied to the UI handling in full-screen mode. The vulnerabili...

CVE-2019-13743

CVE-2019-13743 affects Google Chrome/Chromium prior to version 79.0.3945.79, where an incorrect security UI in external protocol handling could allow a remote attacker to spoof the security UI via a crafted HTML page. Impact is spoofing of security prompts; practical exploitation details are not ...

CVE-2019-5755

CVE-2019-5755 describes an issue in the V8 JavaScript engine used by Google Chrome. The vulnerability is caused by incorrect handling of negative zero in V8, and, when exploited via a crafted HTML page, could allow a remote attacker to perform arbitrary read/write. The description specifies the a...

CVE-2020-6382

CVE-2020-6382 affects Chromium/Chrome before version 80.0.3987.87, caused by a type confusion in the v8 JavaScript engine. This vulnerability can enable a remote attacker to potentially execute arbitrary code through a crafted HTML page, with heap corruption as a possible consequence. Publicly re...

CVE-2020-6485

CVE-2020-6485 affects Chromium/ Google Chrome and its media router component. The issue is described as insufficient validation of data in the media router, allowing a remote attacker (via a crafted HTML page) to bypass navigation restrictions after compromising the renderer. Public advisories no...

CVE-2022-1481

CVE-2022-1481 is a Google Chrome vulnerability affecting the Mac Chrome browser prior to 101.0.4951.41, described as a use-after-free in the Sharing component that could lead to heap corruption when a user is enticed into specific interaction with a crafted HTML page. The connected Chrome release...

CVE-2022-1638

CVE-2022-1638 is a Chromium/Google Chrome vulnerability: a heap buffer overflow in V8 Internationalization that can enable heap corruption via a crafted HTML page. The issue affects Chrome/Chromium builds prior to 101.0.4951.64 and is described as a remote-execution risk with high impact (C/H/I/A...

CVE-2022-2008

CVE-2022-2008 involves a double free in WebGL in Google Chrome, enabling potential heap corruption via a crafted HTML page. Affected software is Google Chrome (Chromium/WebGL stack); root cause is a WebGL double-free condition leading to memory corruption. Impact states remote code execution/comp...

CVE-2023-1229

The CVE-2023-1229 entry concerns Google Chrome (Chromium-based) prior to version 111.0.5563.64. Affected component: Permission prompts implementation. Root cause: Inappropriate implementation in Permission prompts allowed a remote attacker to bypass navigation restrictions via a crafted HTML page...

CVE-2026-13950

A vulnerability exists in the GPU component of Google Chrome (prior to version 150.0.7871.47) and Microsoft Edge due to an uninitialized use flaw. A remote attacker who has already compromised the renderer process can exploit this by using a crafted HTML page to obtain potentially sensitive infor...