CVE-2011-1120

The CVE-2011-1120 entry concerns Google Chrome’s WebGL implementation. The vulnerability arises in WebGL prior to version 9.0.597.107 and allows remote attackers to trigger an out-of-bounds read, leading to a denial of service (Issue 71717). Exploitation vectors are not specified in the provided ...

CVE-2026-110163

A Use after free vulnerability exists in the DOM component of Google Chrome versions prior to 155.0.8059.79 . This flaw allows a remote attacker to execute arbitrary code within the sandbox by navigating to a crafted HTML page. Remediation is available in version 155.0.8059.79 for Windows, Mac, a...

CVE-2026-110168

Google Chrome versions prior to 155.0.8059.79 are vulnerable to a use after free flaw in the V8 component. This vulnerability allows a remote attacker to execute arbitrary code inside the sandbox by leveraging a crafted HTML page . This flaw has been addressed in the 155.0.8059.79 update for Wind...

CVE-2026-110169

Google Chrome versions prior to 155.0.8059.79 are vulnerable to a use after free flaw in the V8 component. A remote attacker can exploit this vulnerability by visiting a crafted HTML page to execute arbitrary code inside the sandbox. This issue is classified as High severity. Remediation is avail...

CVE-2026-5875

A policy bypass vulnerability in the Blink rendering module of Google Chrome (prior to version 147.0.7727.55) allows a remote attacker to perform UI spoofing via a crafted HTML page. This vulnerability, which carries a Medium severity rating, can be leveraged to replace or deceive the user interf...

CVE-2017-15405

Summary: CVE-2017-15405 describes a local code execution risk in Chrome OS’s cryptohomed due to improper symlink handling and a race in the stateful recovery feature, allowing a local attacker to run arbitrary code via a crafted HTML page on Chrome OS versions prior to 61.0.3163.113. The Chrome O...

CVE-2025-12434

A race condition in the Storage component of Google Chrome and Microsoft Edge on Windows allows a remote attacker to perform UI spoofing . By convincing a user to engage in specific UI gestures on a crafted HTML page, the attacker can exploit synchronization errors when using a shared resource. T...

CVE-2025-12441

An out-of-bounds read vulnerability exists in the V8 JavaScript engine used by Google Chrome and Microsoft Edge . A remote attacker can exploit this by hosting a crafted HTML page , which allows for unauthorized access to protected information by reading data outside the buffer boundaries in memo...

CVE-2025-12445

A policy bypass in the Extensions component of Google Chrome (and other Chromium-based browsers like Microsoft Edge) prior to version 142.0.7444.59 allows a remote attacker to leak cross-origin data . The vulnerability is triggered when a user is convinced to install a malicious extension, which ...

CVE-2026-110155

A buffer overflow vulnerability exists in the PDFium component of Google Chrome prior to version 155.0.8059.79 . This flaw allows a remote attacker to execute arbitrary code inside the sandbox by navigating to a crafted HTML page . This issue has been addressed in the stable channel update and is...

CVE-2026-110921

A use-after-free vulnerability in the V8 JavaScript engine allows a remote attacker to execute arbitrary code inside the browser sandbox. This flaw occurs because memory is accessed after being released, and it can be triggered by convincing a user to visit a crafted HTML page . The vulnerability...

CVE-2026-4452

Google Chrome on Windows contains an integer overflow vulnerability within the ANGLE component (prior to version 146.0.7680.153 ). A remote attacker can exploit this flaw via a crafted HTML page to potentially trigger heap corruption . This issue was also reported to affect Microsoft Edge . Remed...

CVE-2025-12911

Google Chrome versions prior to 140.0.7339.80 are vulnerable to a Permission Misimplementation flaw. This vulnerability allows a remote attacker to perform UI spoofing by delivering a specially crafted HTML page. The flaw is related to errors in how the user interface represents information or ha...

CVE-2026-110918

A memory corruption vulnerability exists in the Core component of Google Chrome prior to version 155.0.8059.84 . A remote attacker can exploit this flaw by having a user visit a crafted HTML page , potentially allowing the attacker to read memory . This issue was addressed in the stable channel u...

CVE-2024-7017

Google Chrome versions prior to 126.0.6478.182 are vulnerable to a sandbox escape due to an inappropriate implementation in the DevTools set of tools. The root cause is attributed to synchronization errors when using a shared resource, which a remote attacker could exploit via a crafted HTML page...

CVE-2025-11212

An inappropriate implementation in the Media component of Google Chrome on Windows (prior to version 141.0.7390.54) allows a remote attacker to perform domain spoofing via a crafted HTML page. This vulnerability requires the attacker to convince a user to engage in specific UI gestures . To remed...

CVE-2025-12435

Google Chrome and Microsoft Edge browsers are affected by CVE-2025-12435 , which involves an incorrect security UI in the Omnibox component. A remote attacker could exploit this via a specially crafted HTML page to perform UI spoofing , misrepresenting critical information to the user. The vulner...

CVE-2026-5892

Google Chrome versions prior to 147.0.7727.55 are vulnerable to insufficient policy enforcement in Progressive Web App (PWA) implementations. A remote attacker who has already compromised the renderer process can exploit this flaw to install arbitrary PWAs without user consent via a crafted HTML ...

CVE-2026-110920

A memory corruption vulnerability exists in the V8 engine of Google Chrome versions prior to 155.0.8059.84 . A remote attacker can exploit this flaw by tricking a user into visiting a crafted HTML page , potentially leading to arbitrary code execution inside the browser sandbox. Google addressed ...

CVE-2024-9126

Google Chrome on iOS prior to version 127.0.6533.88 is vulnerable to a Use after free flaw in the Internals component. A remote attacker could exploit this by convincing a user to perform specific curated UI gestures , potentially leading to heap corruption . This vulnerability could compromise t...

CVE-2025-11213

An inappropriate implementation in the Omnibox component of Google Chrome on Android (prior to version 141.0.7390.54) allows a remote attacker to perform domain spoofing via a crafted HTML page. Success requires the attacker to convince a user to perform specific UI gestures. While some documents...

CVE-2026-110914

Google Chrome versions prior to 155.0.8059.84 are vulnerable to a memory corruption flaw in Workers . A remote attacker can exploit this by navigating to a crafted HTML page to potentially execute arbitrary code inside the sandbox. This issue is tracked as CWE-119 (Improper Restriction of Operati...

CVE-2025-12446

The SplitView component in Google Chrome , Microsoft Edge , and other Chromium -based browsers (including Opera and Vivaldi ) is vulnerable to an incorrect security UI issue. A remote attacker can exploit this by convincing a user to perform specific UI gestures, enabling UI spoofing via a crafte...

CVE-2025-12910

An inappropriate implementation in Passkeys within Google Chrome prior to version 140.0.7339.80 allows a local attacker to obtain potentially sensitive information via debug logs . This vulnerability is associated with the CWE-1295 category (Debug Messages Revealing Unnecessary Information). Spec...

CVE-2026-110917

Google Chrome versions prior to 155.0.8059.84 are vulnerable to a memory corruption issue in SVG processing. A remote attacker can exploit this by tricking a user into visiting a crafted HTML page , which may allow the attacker to read memory . The vulnerability is classified as High severity by ...