CVE-2019-5862

Chromium/Google Chrome: CVE-2019-5862 is an AppCache validation flaw in Chromium before 76.0.3809.87 (renderer-compromised bypass). The issue allows a remote attacker to bypass site isolation via a crafted HTML page. Affected component: AppCache in Chromium; root cause: insufficient data validati...

CVE-2020-6385

CVE-2020-6385 is a policy enforcement bypass in the Chromium/Google Chrome storage component reported to affect versions before 80.0.3987.87. The issue allows bypassing site isolation via a crafted HTML page, with remote attack potential and impact including information disclosure and UI/content ...

CVE-2022-1485

CVE-2022-1485 corresponds to a use-after-free in Chrome/Chromium’s File System API (heap corruption) prior to 101.0.4951.41. The issue is described consistently across sources (Chromium/Chrome release notes and security bulletins), affecting Google Chrome and Chromium-derived builds. The Chrome 1...

CVE-2022-1863

CVE-2022-1863 affects Google Chrome before 102.0.5005.61, with a use-after-free in Tab Groups that could lead to heap corruption. The issue could be exploited by convincing a user to install a malicious extension through crafted Chrome Extensions and specific user interaction. The Debian security...

CVE-2026-3925

CVE-2026-3925 affects Google Chrome on Android (prior to 146.0.7680.71) due to an incorrect security UI in LookalikeChecks that enables UI spoofing via a crafted HTML page. The issue is tied to Chromium’s Lookalike UI handling; multiple advisories and Debian/Fedora updates reference Chromium/Chro...

CVE-2019-13659

Technical details for CVE-2019-13659 are not publicly available in the provided documents. Monitor for updates from product advisories and security trackers.

CVE-2019-13702

CVE-2019-13702 affects Google Chrome on Windows with an insecure installer implementation that allowed privilege escalation via a crafted executable. The vulnerability originates from an inappropriate installer implementation, enabling local attackers to elevate privileges. Public advisories conf...

CVE-2022-1854

This CVE concerns Google Chrome’s ANGLE component and is caused by a Use-after-Free leading to potential heap corruption via a crafted HTML page. Affected software is Chrome (ANGLE) prior to version 102.0.5005.61. The issue is reported across multiple sources (e.g., Debian advisory for chromium, ...

CVE-2022-2295

The CVE-2022-2295 issue is a type confusion in V8 affecting Google Chrome/Chromium, prior to version 103.0.5060.114, enabling a remote attacker to potentially trigger heap corruption via a crafted HTML page. Public details across connected sources confirm the affected component as Chromium’s V8 e...

CVE-2023-0472

CVE-2023-0472 is a Chrome/WebRTC use-after-free vulnerability affecting Google Chrome prior to 109.0.5414.119. The issue, described as a use-after-free in WebRTC that could enable a remote attacker to cause heap corruption via a crafted HTML page, is rated High severity (CVSS 3.1: 8.8). The Chrom...

CVE-2017-15422

ICU vulnerability CVE-2017-15422: An integer overflow in ICU’s international date handling (ICU for C/C++) enables out-of-bounds memory reads via crafted HTML. Affected: ICU before 60.1; used in Google Chrome’s V8 (pre-63.0.3239.84) and other products. Impact per sources: potential memory disclos...

CVE-2019-13722

CVE-2019-13722 concerns an inappropriate implementation in WebRTC in Google Chrome prior to 79.0.3945.79, which could allow a remote attacker to trigger heap corruption via a crafted HTML page. The vulnerability affects Chrome WebRTC code and arises from improper handling that may lead to memory ...

CVE-2019-13759

Google Chrome vulnerable: CVE-2019-13759 stems from incorrect security UI in interstitials that enables domain spoofing via a crafted HTML page. Affected: Chrome versions prior to 79.0.3945.79. Impact: potential spoofing of the address bar/domain in interstitial UI. Mitigation: upgrade to Chrome ...

CVE-2019-5775

CVE-2019-5775 corresponds to a vulnerability in Google Chrome’s Omnibox: an incorrect handling of a confusable character enables a remote attacker to spoof the URL bar via a crafted domain name. The issue affects Chrome versions prior to 72.0.3626.81. Exploitation could mislead users by displayin...

CVE-2023-1532

CVE-2023-1532 affects Google Chrome (Chromium-based) due to an out-of-bounds read in the GPU Video component, potentially enabling heap corruption via a crafted HTML page. The issue is exploitable remotely with user interaction required; patching to Chrome 111.0.5563.110 or newer is the documente...

CVE-2019-13763

CVE-2019-13763 affects Google Chrome: Insufficient policy enforcement in payments in Chrome prior to 79.0.3945.79 allowed a renderer-compromised remote attacker to leak cross-origin data via a crafted HTML page. Affected software is Chrome (renderer process context) with the vulnerability tied to...

CVE-2019-5804

CVE-2019-5804 affects Google Chrome (Chromium) prior to 73.0.3683.75. It arises from incorrect command line processing, enabling a local attacker to spoof domains via a crafted domain name. OpenSUSE/Nessus references confirm the remediation in Chrome releases up to 73.0.3683.75 and later. The vul...

CVE-2021-21199

CVE-2021-21199 : Use-after-free in Aura window and event manager of Chrome on Linux, enabling heap corruption when a renderer process is compromised. Affected: Chromium-based Chrome on Linux; vulnerable component is Aura/window management. Impact: potential remote code execution via crafted HTML ...

CVE-2022-0790

The CVE-2022-0790 issue is a use-after-free in Chrome’s Cast UI affecting Google Chrome prior to 99.0.4844.51. The root cause is a memory management error that could be triggered when a user interacts with a crafted HTML page, potentially enabling a sandbox escape. Multiple connected sources (e.g...

CVE-2022-2162

CVE-2022-2162 concerns Google Chrome/Chromium on Windows with vulnerable File System API policy enforcement. The issue is described as insufficient policy enforcement that allowed a remote attacker to bypass file system access via a crafted HTML page. The practical impact is potential unauthorize...

CVE-2019-13711

CVE-2019-13711 is an information-disclosure vulnerability affecting Chromium/Google Chrome prior to version 78.0.3904.70. The connected sources describe a cross-context information leak in Chromium/Chrome (before 78.0.3904.70), with Debian/Mageia/Arch advisories noting fixes in 78.0.3904.70-1 or ...

CVE-2019-13757

CVE-2019-13757 describes an incorrect security UI issue in the Omnibox of Google Chrome/Chromium that could enable domain spoofing using IDN homographs. The root cause is a security UI flaw in Omnibox handling of domain name input, allowing spoofed domains to appear legitimate. Public reports and...

CVE-2020-6403

CVE-2020-6403 affects Google Chrome/Chromium Omnibox behavior. The issue is an incorrect Omnibox implementation on iOS prior to 80.0.3987.87, which could allow a remote attacker to spoof the Omnibox (URL bar) via a crafted HTML page. Impact described in connected advisories includes UI spoofing r...

CVE-2020-6490

CVE-2020-6490 affects Google Chrome/Chromium loaders prior to 83.0.4103.61, with insufficient data validation in the loader enabling a remote attacker who could write to disk to leak cross-origin data via a crafted HTML page. Upstream fixes are in Chrome/Chromium 83.0.4103.61 and newer; Debian an...

CVE-2021-30510

CVE-2021-30510 is a race condition vulnerability in the Aura component of Chromium (Chromium before 90.0.4430.212). Multiple connected advisories confirm this issue alongside other OOB/UAF problems in the Chromium stack; affected version range is before 90.0.4430.212. Impact notes in the sources ...

CVE-2022-1493

Summary: CVE-2022-1493 is a Use-after-Free in DevTools of Google Chrome/Chromium up to version 101.0.4951.41, enabling a remote attacker to potentially cause heap corruption via specific, direct user interaction. The vulnerability affects Chrome/Chromium’s DevTools components and is reflected in ...

CVE-2019-13726

CVE-2019-13726: A buffer overflow in Google Chrome’s password manager allows remote code execution via a crafted HTML page. Affected product: Google Chrome (Chromium core). Root cause: buffer/overflow in the password management path. Impact: remote arbitrary code execution with high impact on con...

CVE-2019-13737

CVE-2019-13737 in Google Chrome describes insufficient policy enforcement in the autocomplete component. The vulnerability could allow a remote attacker to obtain potentially sensitive information from process memory via a crafted HTML page. Affected are Chrome versions prior to 79.0.3945.79. Mit...

CVE-2019-13742

CVE-2019-13742 corresponds to an UI spoof vulnerability in Google Chrome’s Omnibox on iOS, where an incorrect security UI allowed a remote attacker to spoof the URL bar via a crafted domain name prior to version 79.0.3945.79. Connected security advisories reference Chrome/Chromium remediation pat...

CVE-2019-5758

CVE-2019-5758 is a use-after-free in Blink/WebKit reported for Chromium-based browsers (Zhe Jin). The connected Debian/Nessus entries enumerate it among Chromium CVEs, linked to Blink/WebKit handling of HTML, and remediation is to update Chromium/Chrome to a newer version as released in the 72.x+...

CVE-2020-6414

CVE-2020-6414 affects Chromium/Google Chrome with insufficient policy enforcement in Safe Browsing, allowing a remote attacker to bypass navigation restrictions via crafted HTML. Connected advisories (e.g., Debian DSA-4638-1 and Arch Linux ASA-202002-3) confirm the issue is tied to Safe Browsing ...

CVE-2020-6483

CVE-2020-6483 is a Chromium/Chrome vulnerability where an insufficient policy enforcement in the payments component allowed a remote attacker to bypass navigation restrictions via a crafted HTML page. Connected advisories confirm this is a Chromium/Chrome issue affecting the payments module and d...

CVE-2024-2625

CVE-2024-2625 affects Google Chrome/V8 with an object lifecycle issue in V8 prior to 123.0.6312.58 that could allow remote exploitation via a crafted HTML page (high severity). The issue is fixed in Chrome 123.0.6312.58+; Debian reports a fix to 123.0.6312.86-1~deb12u1 for stable, and Fedora pack...

CVE-2019-13752

CVE-2019-13752: Affected software is Google Chrome/Chromium with SQLite in the WebKit/Blink stack. The issue is an out-of-bounds read in the SQLite library, allowing a remote attacker to obtain potentially sensitive information from process memory via a crafted HTML page. It affects Chrome/Chromi...

CVE-2019-13719

CVE-2019-13719 is a Chromium-based UI security issue in full-screen mode for Google Chrome (prior to 78.0.3904.70). It allowed a crafted HTML page to obscure the security UI, enabling potential spoofing or misleading UI, with root cause tied to the UI handling in full-screen mode. The vulnerabili...

CVE-2019-13747

CVE-2019-13747 affects Google Chrome/Chromium rendering on Android versions prior to 79.0.3945.79, where uninitialized data in rendering could enable a remote attacker to trigger heap corruption via a crafted HTML page. The provided connected documents confirm this CVE is tied to Chromium/Chrome ...

CVE-2019-5802

CVE-2019-5802 is a UI spoofing vulnerability in Chromium/Google Chrome prior to 73.0.3683.75. The issue enables a remote attacker to spoof a domain via crafted HTML content, as documented by multiple sources (Chrome security notes and distribution advisories). The flaw is categorized under conten...

CVE-2020-6420

CVE-2020-6420 affects Google Chrome (media component). The issue is insufficient policy enforcement that allows a remote attacker to bypass the same-origin policy via a crafted HTML page, enabling information disclosure and potential further actions. Affected versions are Chrome before 80.0.3987....

CVE-2021-30548

CVE-2021-30548: A use-after-free in the Loader component of Chromium/Chrome prior to 91.0.4472.101 allows remote code execution via a crafted HTML page. Affected software: Chromium/Chrome (Loader); root cause: use-after-free. Impact: remote attacker could run arbitrary code. Remediation: upgrade ...

CVE-2021-30549

CVE-2021-30549 is a use-after-free in Chromium’s Spell check component affecting Chromium-based browsers up to version 91.0.4472.101. The vulnerability can be triggered when a user installs a malicious extension, potentially enabling heap corruption and remote code execution via a crafted HTML pa...

CVE-2022-2615

CVE-2022-2615 targets Google Chrome/Chromium prior to 104.0.5112.79, where insufficient cookie policy enforcement allows a crafted HTML page to leak cross-origin data. The issue is confirmed across multiple sources (Chromium/Chrome updates cited by Debian security tracker and related advisories)....

CVE-2023-1231

CVE-2023-1231 describes an issue in Google Chrome on Android where the Autofill implementation allowed a crafted HTML page to spoof the omnibox contents. The vulnerability is tied to Chromium’s Autofill logic and is described as an inappropriate implementation, with a CVSS v3.1 base score of 4.3 ...

CVE-2023-4361

CVE-2023-4361 concerns Google Chrome/Chromium Autofill on Android (pre-116.0.5845.96). The vulnerability is an inappropriate Autofill implementation that allows a remote attacker to bypass Autofill restrictions via a crafted HTML page, enabling potential unauthorized autofill actions. Affected so...

CVE-2019-13729

CVE-2019-13729 : Use-after-free in Chrome’s WebSockets before 79.0.3945.79 allowing remote heap corruption via a crafted HTML page. Affected: Google Chrome (WebSockets) on legacy builds up to 79.0.3945.79. Root cause: use-after-free in the WebSockets implementation. Impact: heap corruption; remot...

CVE-2019-5759

CVE-2019-5759 is a use-after-free vulnerability in Chromium-based browsers related to handling HTML pages containing select elements. The Debian advisory attributes it to Almog Benin and confirms a use-after-free in that area, contributing to potential sandbox escape. Public details across connec...

CVE-2019-5867

CVE-2019-5867 affects Chromium/Google Chrome before 76.0.3809.100, with an out-of-bounds read in the V8 JavaScript engine that could lead to heap corruption. The CVE is described as a remote code execution risk via a crafted HTML page, with several advisories confirming that upgrading to 76.0.380...

CVE-2020-6477

CVE-2020-6477 affects Google Chrome on macOS (OS X) before 83.0.4103.61. The issue is an inappropriate implementation in the installer that allows a local attacker to escalate privileges via a crafted file. Public references in the connected documents confirm the affected product and root cause, ...

CVE-2021-30556

Chromium/WebAudio vulnerability CVE-2021-30556: Use-after-free in the WebAudio component before 91.0.4472.114 allows remote code execution via a crafted page. Affects Chromium-based products relying on this engine; upgrade to 91.0.4472.114 or newer to fix. Arch Linux advisories note that an explo...

CVE-2025-5280

CVE-2025-5280 is a Google Chrome/Chromium vulnerability: an out-of-bounds write in V8 could enable heap corruption via a crafted HTML page, impacting Chrome versions prior to 137.0.7151.55. The Chrome security note confirms the fix in 137.0.7151.55 (Linux/Windows/Mac) and Debian security advisori...

CVE-2019-13725

CVE-2019-13725 describes a use-after-free vulnerability in Bluetooth handling in Google Chrome before 79.0.3945.79 that could allow a remote attacker to execute arbitrary code via a crafted HTML page. The CVE is part of a broader Chrome/Chromium set of issues (CVE-2019-13725–...-6380) disclosed a...