CVE-2019-13744

CVE-2019-13744 affects Google Chrome before 79.0.3945.79, where insufficient policy enforcement in cookies could enable a remote attacker to leak cross-origin data via a crafted HTML page. The issue is rooted in cookie policy handling within Chrome; several advisories reference this CVE as part o...

CVE-2023-5853

CVE-2023-5853: A security-UI obfuscation vulnerability in Chromium-based browsers (Chrome/Chromium) before 119.0.6045.105; a crafted HTML page could mislead users in the Downloads UI. Remediation: upgrade to 119.0.6045.105 or newer.

CVE-2019-13727

CVE-2019-13727 is a policy-enforcement error in Chrome’s WebSockets implementation that could allow a remote attacker to bypass the same-origin policy via a crafted HTML page. The vulnerability affects Google Chrome versions prior to 79.0.3945.79, with the issue explicitly tied to insufficient po...

CVE-2020-6380

CVE-2020-6380: In Google Chrome/Chromium, insufficient policy enforcement in extensions allowed a remote attacker with a compromised renderer to bypass site isolation via a crafted extension, affecting versions prior to 79.0.3945.130. The vulnerability is described as a policy enforcement error i...

CVE-2021-30546

CVE-2021-30546 is a use-after-free in the Chromium Autofill component prior to version 91.0.4472.101 , allowing a remote attacker to potentially trigger heap corruption via a crafted HTML page. The vulnerability affects Google/Chromium browsers with Autofill enabled, and is part of a broader set ...

CVE-2022-1499

CVE-2022-1499 – Chrome/Chromium WebAuthentication bypass Affected software: Google Chrome (Chromium derivatives) on desktop platforms; affected component: WebAuthentication implementation.Root cause: Inappropriate implementation in WebAuthentication allowed a remote attacker to bypass the same-or...

CVE-2022-2480

The CVE-2022-2480 entry concerns a Use after free in the Service Worker API in Google Chrome, affecting versions prior to 103.0.5060.134. The connected sources confirm heap corruption as the potential impact when a crafted HTML page triggers the vulnerability. Remediation documented in Debian/rel...

CVE-2019-5765

CVE-2019-5765 is described in the connected documents as an access restriction bypass (policy enforcement error) in the Chromium browser prior to version 72.0.3626.81. Fedora Arch/Linux advisories and Debian security trackers list this CVE among Chromium issues resolved by upgrading to 72.0.3626....

CVE-2021-30508

CVE-2021-30508 is a heap buffer overflow in Chrome/Chromium’s Media Feeds component, affecting Chromium before version 90.0.4430.212. The vulnerability could allow a remote attacker to trigger heap corruption via a crafted HTML page, potentially enabling arbitrary code execution. Public advisorie...

CVE-2022-0808

Technical details about CVE-2022-0808 are not publicly provided in the connected documents. Monitor for updates and new disclosures to confirm affected products, root cause, impact, and fixes.

CVE-2023-0138

CVE-2023-0138 is a heap buffer overflow in libphonenumber affecting Google Chrome/Chromium prior to 109.0.5414.74, enabling potential heap corruption via a crafted HTML page. The issue is tied to Chrome/Chromium’s libphonenumber component; remediation is to upgrade to Chrome 109.0.5414.74 or late...

CVE-2019-5879

CVE-2019-5879 : In Google Chrome, before 77.0.3865.75, insufficient policy enforcement in extensions allowed a user-tricked installation of a malicious extension to read local files. The issue arises from vulnerable extension permissions; impact is local data exposure. Affected product: Google Ch...

CVE-2021-21153

CVE-2021-21153 : A stack buffer overflow in the GPU Process of Google Chrome on Linux (pre-88.0.4324.182) could allow a remote attacker to cause out-of-bounds memory access via a crafted HTML page. The available connected documents confirm the affected component and root cause, and indicate the v...

CVE-2019-13664

CVE-2019-13664 : In Chromium/Blink, insufficient policy enforcement allowed bypassing the Content Security Policy via a crafted HTML page. Affected products are Chromium/Google Chrome (Blink engine); the issue is tied to CSP bypass in the rendering/Blink path. Debian security advisory DSA-4562-1 ...

CVE-2019-13688

CVE-2019-13688 is a use-after-free in Blink affecting Chromium/Google Chrome prior to 77.0.3865.90, enabling heap corruption on crafted HTML pages. Connected sources confirm the issue as part of a set of Chromium vulnerabilities, with remediation in newer Chromium builds. The Mageia advisory spec...

CVE-2019-13714

The CVE-2019-13714 entry concerns Google Chrome before 78.0.3904.70, where insufficient validation of untrusted input in the Color Enhancer extension can allow CSS injection into an HTML page via a crafted URL. Affected product: Google Chrome (earlier than 78.0.3904.70). Root cause/impact: CSS in...

CVE-2019-13740

CVE-2019-13740 affects Google Chrome prior to 79.0.3945.79, where an incorrect security UI in sharing could enable domain spoofing via a crafted HTML page. The issue is fixed in Chrome updates released after 79.0.3945.79; confirmed patches appear in Debian’s chromium security advisory (DSA-4606-1...

CVE-2019-5861

CVE-2019-5861 affects Chromium/Blink prior to 76.0.3809.87, where an error in determining the click location could allow bypassing anti-clickjacking (content spoofing). Affected component: Blink/WebKit click-location logic in Chromium before the fixed version. Impact per advisories: potential con...

CVE-2022-0974

CVE-2022-0974 pertains to Google Chrome on Chrome OS prior to 99.0.4844.74, where a use-after-free in Splitscreen can be triggered by a crafted HTML page after user interaction, potentially enabling heap corruption and remote code execution. The issue is documented across multiple sources (NVD de...

CVE-2022-2743

Mode C: The CVE-2022-2743 entry describes a concrete vulnerability in Google Chrome’s Window Manager on Chrome OS and Lacros, where an integer overflow can enable a remote attacker to cause an out-of-bounds memory write through crafted UI interactions. Affected software is Google Chrome on Chrome...

CVE-2023-0471

CVE-2023-0471: Use-after-free in WebTransport in Google Chrome before 109.0.5414.119. A crafted HTML page could trigger heap corruption via WebTransport, enabling remote code execution or instability per Chromium advisory. The Chrome release notes confirm a security fix in the 109.0.5414.119 Stab...

CVE-2019-5806

The CVE-2019-5806 entry concerns Google Chrome/Chromium on Windows prior to 74.0.3729.108. A concrete flaw is an integer overflow in the ANGLE library, which can lead to heap corruption via a crafted HTML page. The issue is actionable in the browser context where remote attackers could exploit it...

CVE-2019-5847

CVE-2019-5847 is a vulnerability described as an inappropriate JavaScript implementation in Google Chrome before 75.0.3770.142, potentially enabling remote heap corruption via a crafted HTML page. Connected advisories link this CVE to problems in the V8 JavaScript engine and list affected product...

CVE-2021-21222

CVE-2021-21222 is a heap buffer overflow in V8 (Chrome) prior to 90.0.4430.85, enabling a remote attacker with renderer access to bypass site isolation via a crafted HTML page. The issue is demonstrated across Chromium-derived stacks; affected components include V8 and related rendering/subsystem...

CVE-2022-0607

CVE-2022-0607 is a use-after-free vulnerability in Google Chrome’s GPU handling, prior to version 98.0.4758.102, susceptible to remote heap corruption via a crafted HTML page. The issue affects Chrome/Chromium GPU code paths and was elevated to high impact in Chrome’s February 2022 security relea...

CVE-2022-0973

CVE-2022-0973 is a Chrome use-after-free vulnerability in Safe Browsing that could enable a remote attacker to cause heap corruption via a crafted HTML page. The connected sources confirm the issue affects Google Chrome before version 99.0.4844.74 and were addressed in the Chrome Stable Channel u...

CVE-2022-1639

The CVE-2022-1639 issue is confirmed in ANGLE within Google Chrome before 101.0.4951.64, caused by a use-after-free that can lead to heap corruption via a crafted HTML page. Affected software is Chrome (ANGLE/Chromium stack) with remote, user-page interaction required for exploitation, and the im...

CVE-2023-5854

CVE-2023-5854 describes a use-after-free in the Profiles component of Google Chrome (Chromium) before 119.0.6045.105, enabling a remote attacker who persuades a user to perform specific UI gestures to potentially trigger heap corruption. The issue is documented across multiple sources (Astra Linu...

CVE-2023-5857

CVE-2023-5857 affects Google Chrome/Chromium: an inappropriate implementation in the Downloads component allowed a remote attacker to potentially execute arbitrary code via a malicious file. The issue is tied to Chromium’s handling in Downloads prior to 119.0.6045.105. Public disclosures in conne...

CVE-2023-5858

The CVE-2023-5858 entry concerns Google Chrome’s WebApp Provider: an inappropriate implementation in Chrome prior to 119.0.6045.105 allowed a remote attacker to obfuscate the security UI via a crafted HTML page. The issue is categorized as Low severity by Chromium, with CVSSv3.1 metrics: AV:N/AC:...

CVE-2025-5065

The CVE-2025-5065 entry corresponds to an insecure implementation in Chrome’s FileSystemAccess API that could enable UI spoofing via a crafted HTML page. Affected software is Google Chrome (Chromium-based); vulnerability arises from an inappropriate implementation in FileSystemAccess API prior to...

CVE-2019-13704

CVE-2019-13704 affects Google Chrome/Chromium before 78.0.3904.70 and is described as an access restriction bypass via CSP, specifically a Content Security Policy bypass. Connected advisories confirm the issue as a CSP bypass vulnerability in Chromium/Chrome, with remediation guidance to upgrade ...

CVE-2019-13707

CVE-2019-13707 is an information-disclosure vulnerability in Chromium/Google Chrome (Android) caused by insufficient validation of untrusted input in intents, allowing a local attacker to leak files via a crafted application. It affects Chrome/Chromium versions prior to 78.0.3904.70; the issue ha...

CVE-2019-13728

CVE-2019-13728 is an out-of-bounds write in the v8 JavaScript library used by Chromium/Google Chrome, causing heap corruption. A remote attacker could potentially exploit this via a crafted HTML page. Remediation per connected advisories: upgrade to Chromium/Chrome versions where this CVE is fixe...

CVE-2019-5757

CVE-2019-5757 concerns a type confusion in the SVG handling of Google Chrome/Chromium. The issue arises from an incorrect object type assumption in SVG, allowing a remote attacker to potentially corrupt objects via a crafted HTML page. Public advisories place the vulnerability in the Chrome/Chrom...

CVE-2019-5774

CVE-2019-5774 affects Google Chrome on Linux; the issue arises from omission of the .desktop filetype in Safe Browsing checks, allowing an attacker who persuades a user to download a .desktop file to execute arbitrary code via that file. The vulnerability is tied to SafeBrowsing in Chrome before ...

CVE-2019-5781

CVE-2019-5781 affects Google Chrome: Incorrect handling of a confusable character in the Omnibox (URL bar). Prior to 72.0.3626.81, a remote attacker could spoof the Omnibox via a crafted domain name. The connected documents do not provide additional technical details, exploitation methods, or rem...

CVE-2019-5876

CVE-2019-5876 describes a use-after-free in media handling in Google Chrome/Chromium. Public description states that on Android, prior to 77.0.3865.75, a remote attacker could potentially trigger heap corruption via a crafted HTML page. The Debian advisory lists CVE-2019-5876 among multiple Chrom...

CVE-2020-6409

The connected advisories confirm CVE-2020-6409 affects Chromium/Google Chrome "Omnibox" in versions before 80.0.3987.87. The issue is described as an inappropriate Omnibox implementation that lets a remote attacker bypass navigation restrictions by enticing a user to visit a crafted domain name. ...

CVE-2021-30538

CVE-2021-30538 : The Chromium browser’s Content Security Policy enforcement is insufficient before 91.0.4472.77, allowing a remote attacker to bypass CSP via a crafted HTML page. Public references in security advisories (e.g., Fedora/Arch Linux chromium updates, Debian/Alpine entries) confirm the...

CVE-2022-1146

CVE-2022-1146 affects Google Chrome prior to 100.0.4896.60, due to an inappropriate implementation in Resource Timing. This flaw could allow a remote attacker to leak cross-origin data via a crafted HTML page. Multiple connected sources (Chrome release notes, Debian security advisory, Gentoo GLSA...

CVE-2022-1305

CVE-2022-1305 is a Use-after-free in storage in Chromium/Google Chrome prior to 100.0.4896.88 that could allow a remote attacker to trigger heap corruption via a crafted HTML page. Advisories indicate fixes in version 100.0.4896.88+ across distributions (e.g., Debian DSA-5120-1, Fedora/chromium u...

CVE-2022-2157

CVE-2022-2157 describes a use-after-free in Chrome’s Interest groups, allowing a remote attacker who already compromised a renderer to trigger heap corruption via a crafted HTML page. The vulnerability affects Google Chrome (Chromium) before version 103.0.5060.53; impact is described as high for ...

CVE-2022-2613

CVE-2022-2613 is a use-after-free vulnerability in Chrome/Chromium’s input handling on ChromeOS, specifically tied to the Gesture Process in Chromium. The issue is reported to occur on ChromeOS builds prior to 104.0.5112.79, potentially enabling heap corruption via certain user interactions. Conn...

CVE-2023-5482

CVE-2023-5482 affects Google Chrome/Chromium before 119.0.6045.105 due to insufficient data validation in USB handling, enabling a remote attacker to trigger out-of-bounds memory access via a crafted HTML page. Impact is described as high, with potential memory corruption or crash; exploitation s...

CVE-2023-5851

CVE-2023-5851 describes an insecure/incorrect implementation in Downloads of Google Chrome (Chromium) prior to 119.0.6045.105, which allowed a remote attacker to obfuscate the security UI via a crafted HTML page. Public references in the connected documents confirm the issue affects Chromium-base...

CVE-2023-6346

CVE-2023-6346 is a use-after-free in WebAudio within Chromium-based browsers, enabling potential heap corruption. The vulnerability affects Chromium and derivatives (e.g., Google Chrome) prior to version 119.0.6045.199. Multiple connected advisories confirm the fix in version 119.0.6045.199 or ne...

CVE-2025-4051

CVE-2025-4051 involves insufficient data validation in DevTools of Google Chrome/Chromium, allowing a remote attacker to bypass discretionary access control when a user is persuaded to perform specific UI gestures on a crafted HTML page. The vulnerability affects Chrome before version 136.0.7103....

CVE-2021-21150

CVE-2021-21150 describes a use-after-free vulnerability in Chromium’s Downloads component on Windows (pre-88.0.4324.182). The issue stems from use-after-free in the Downloads pathway, allowing a remote attacker who has compromised the renderer process to potentially escape the browser sandbox via...

CVE-2022-0806

CVE-2022-0806 concerns Google Chrome (and Chromium-derived) browsers. The vulnerability enables a remote attacker to potentially leak cross-origin data via a crafted HTML page when a user is convinced to engage in screen sharing. The issue affects Chrome versions prior to 99.0.4844.51, with an im...