CVE-2019-5861

CVE-2019-5861 affects Chromium/Blink prior to 76.0.3809.87, where an error in determining the click location could allow bypassing anti-clickjacking (content spoofing). Affected component: Blink/WebKit click-location logic in Chromium before the fixed version. Impact per advisories: potential con...

CVE-2019-5876

CVE-2019-5876 describes a use-after-free in media handling in Google Chrome/Chromium. Public description states that on Android, prior to 77.0.3865.75, a remote attacker could potentially trigger heap corruption via a crafted HTML page. The Debian advisory lists CVE-2019-5876 among multiple Chrom...

CVE-2022-0808

Technical details about CVE-2022-0808 are not publicly provided in the connected documents. Monitor for updates and new disclosures to confirm affected products, root cause, impact, and fixes.

CVE-2026-12457

CVE-2026-12457 affects Google Chrome extensions in the renderer prior to version 149.0.7827.155. The underlying issue is an inappropriate extension implementation that lets a remote attacker, who has already compromised the renderer process, bypass Chrome’s site isolation via a crafted HTML page....

CVE-2019-13707

CVE-2019-13707 is an information-disclosure vulnerability in Chromium/Google Chrome (Android) caused by insufficient validation of untrusted input in intents, allowing a local attacker to leak files via a crafted application. It affects Chrome/Chromium versions prior to 78.0.3904.70; the issue ha...

CVE-2019-5757

CVE-2019-5757 concerns a type confusion in the SVG handling of Google Chrome/Chromium. The issue arises from an incorrect object type assumption in SVG, allowing a remote attacker to potentially corrupt objects via a crafted HTML page. Public advisories place the vulnerability in the Chrome/Chrom...

CVE-2019-5774

CVE-2019-5774 affects Google Chrome on Linux; the issue arises from omission of the .desktop filetype in Safe Browsing checks, allowing an attacker who persuades a user to download a .desktop file to execute arbitrary code via that file. The vulnerability is tied to SafeBrowsing in Chrome before ...

CVE-2019-5806

The CVE-2019-5806 entry concerns Google Chrome/Chromium on Windows prior to 74.0.3729.108. A concrete flaw is an integer overflow in the ANGLE library, which can lead to heap corruption via a crafted HTML page. The issue is actionable in the browser context where remote attackers could exploit it...

CVE-2020-6409

The connected advisories confirm CVE-2020-6409 affects Chromium/Google Chrome "Omnibox" in versions before 80.0.3987.87. The issue is described as an inappropriate Omnibox implementation that lets a remote attacker bypass navigation restrictions by enticing a user to visit a crafted domain name. ...

CVE-2021-21153

CVE-2021-21153 : A stack buffer overflow in the GPU Process of Google Chrome on Linux (pre-88.0.4324.182) could allow a remote attacker to cause out-of-bounds memory access via a crafted HTML page. The available connected documents confirm the affected component and root cause, and indicate the v...

CVE-2021-30508

CVE-2021-30508 is a heap buffer overflow in Chrome/Chromium’s Media Feeds component, affecting Chromium before version 90.0.4430.212. The vulnerability could allow a remote attacker to trigger heap corruption via a crafted HTML page, potentially enabling arbitrary code execution. Public advisorie...

CVE-2019-13704

CVE-2019-13704 affects Google Chrome/Chromium before 78.0.3904.70 and is described as an access restriction bypass via CSP, specifically a Content Security Policy bypass. Connected advisories confirm the issue as a CSP bypass vulnerability in Chromium/Chrome, with remediation guidance to upgrade ...

CVE-2022-1499

CVE-2022-1499 – Chrome/Chromium WebAuthentication bypass Affected software: Google Chrome (Chromium derivatives) on desktop platforms; affected component: WebAuthentication implementation.Root cause: Inappropriate implementation in WebAuthentication allowed a remote attacker to bypass the same-or...

CVE-2022-2480

The CVE-2022-2480 entry concerns a Use after free in the Service Worker API in Google Chrome, affecting versions prior to 103.0.5060.134. The connected sources confirm heap corruption as the potential impact when a crafted HTML page triggers the vulnerability. Remediation documented in Debian/rel...

CVE-2023-5859

CVE-2023-5859 affects Chromium-based browsers (notably Google Chrome) with a security UI flaw in Picture-in-Picture that allowed a remote attacker to spoof the domain via a crafted local HTML page. The issue’s impact is domain spoofing (low severity per NVD, CVSS 3.1: 4.3) and is fixed by updatin...

CVE-2019-13724

CVE-2019-13724 is a WebBluetooth-related vulnerability in Chromium/Google Chrome prior to 78.0.3904.108. The issue is described as an out-of-bounds memory access in the Web Bluetooth component, which could allow a remote attacker who has compromised the renderer process to potentially trigger hea...

CVE-2020-6516

CVE-2020-6516 is a Chrome/CORB policy-bypass vulnerability where cross-origin data could be leaked via a crafted HTML page. Affected product: Google Chrome prior to 84.0.4147.89 (Chromium-based browser). Root cause: CORS policy bypass in Chrome’s handling of cross-origin requests. Impact: potenti...

CVE-2022-2743

Mode C: The CVE-2022-2743 entry describes a concrete vulnerability in Google Chrome’s Window Manager on Chrome OS and Lacros, where an integer overflow can enable a remote attacker to cause an out-of-bounds memory write through crafted UI interactions. Affected software is Google Chrome on Chrome...

CVE-2023-5853

CVE-2023-5853: A security-UI obfuscation vulnerability in Chromium-based browsers (Chrome/Chromium) before 119.0.6045.105; a crafted HTML page could mislead users in the Downloads UI. Remediation: upgrade to 119.0.6045.105 or newer.

CVE-2019-13728

CVE-2019-13728 is an out-of-bounds write in the v8 JavaScript library used by Chromium/Google Chrome, causing heap corruption. A remote attacker could potentially exploit this via a crafted HTML page. Remediation per connected advisories: upgrade to Chromium/Chrome versions where this CVE is fixe...

CVE-2019-5762

CVE-2019-5762 is a PDFium-related memory-management issue in Google Chrome prior to 72.0.3626.81, enabling a remote attacker to execute arbitrary code inside the sandbox via a crafted PDF. The vulnerability stems from inappropriate memory handling when caching in PDFium. The documented impact is ...

CVE-2019-5781

CVE-2019-5781 affects Google Chrome: Incorrect handling of a confusable character in the Omnibox (URL bar). Prior to 72.0.3626.81, a remote attacker could spoof the Omnibox via a crafted domain name. The connected documents do not provide additional technical details, exploitation methods, or rem...

CVE-2023-5855

CVE-2023-5855 is a Use-After-Free in Chromium/Google Chrome Reading Mode. A remote attacker could entice a user to perform specific UI gestures, potentially causing heap corruption. Affected versions are Chrome/Chromium prior to 119.0.6045.105. Mitigation: upgrade to 119.0.6045.105 or later (as r...

CVE-2023-5856

CVE-2023-5856 affects Google Chrome/Chromium: Use-after-free in the Side Panel prior to 119.0.6045.105 can be triggered by a crafted HTML page when a user performs specific UI gestures, potentially causing heap corruption and remote code execution. Affected software: Google Chrome (Chromium-deriv...

CVE-2024-1938

CVE-2024-1938 corresponds to a Chrome/Chromium V8 type-confusion vulnerability (prior to 122.0.6261.94). The issue enables remote attackers to potentially trigger object corruption via a crafted HTML page, with high impact across confidentiality, integrity, and availability per the source. The As...

CVE-2019-13758

CVE-2019-13758: Google Chrome/Chromium navigation policy enforcement flaw on Android allowed remote bypass of navigation restrictions via a crafted HTML page. Affected product: Chrome on Android prior to 79.0.3945.79. Impact: bypass of navigation restrictions (no exploitation details provided). R...

CVE-2019-5772

The CVE-2019-5772 entry affects Google Chrome's PDFium component. Description: Sharing of objects over calls into the JavaScript runtime in PDFium can lead to heap corruption when processing a crafted PDF, enabling a remote attacker to potentially exploit the issue. Affected product/area: Chrome ...

CVE-2021-21222

CVE-2021-21222 is a heap buffer overflow in V8 (Chrome) prior to 90.0.4430.85, enabling a remote attacker with renderer access to bypass site isolation via a crafted HTML page. The issue is demonstrated across Chromium-derived stacks; affected components include V8 and related rendering/subsystem...

CVE-2021-30538

CVE-2021-30538 : The Chromium browser’s Content Security Policy enforcement is insufficient before 91.0.4472.77, allowing a remote attacker to bypass CSP via a crafted HTML page. Public references in security advisories (e.g., Fedora/Arch Linux chromium updates, Debian/Alpine entries) confirm the...

CVE-2022-0792

CVE-2022-0792 is an out-of-bounds read in ANGLE used by Google Chrome prior to 99.0.4844.51. The vulnerability allows a remote attacker to potentially exploit heap corruption via a crafted HTML page. Affected product: Chrome/Chromium frontend components relying on ANGLE. Root cause: out-of-bounds...

CVE-2022-2613

CVE-2022-2613 is a use-after-free vulnerability in Chrome/Chromium’s input handling on ChromeOS, specifically tied to the Gesture Process in Chromium. The issue is reported to occur on ChromeOS builds prior to 104.0.5112.79, potentially enabling heap corruption via certain user interactions. Conn...

CVE-2023-1534

CVE-2023-1534 is an out-of-bounds read in ANGLE used by Google Chrome/Chromium prior to version 111.0.5563.110, enabling heap corruption via a crafted HTML page after an attacker compromises the renderer process. The connected sources confirm affected products (Chrome/Chromium) and the vulnerable...

CVE-2023-5854

CVE-2023-5854 describes a use-after-free in the Profiles component of Google Chrome (Chromium) before 119.0.6045.105, enabling a remote attacker who persuades a user to perform specific UI gestures to potentially trigger heap corruption. The issue is documented across multiple sources (Astra Linu...

CVE-2019-13735

CVE-2019-13735 is a Chrome/Chromium vulnerability: an out-of-bounds write in the V8 JavaScript engine that could allow remote code execution inside the sandbox via a crafted HTML page. Public details in connected sources identify the affected component (V8 in Chromium/Chrome) and confirm remediat...

CVE-2019-5761

CVE-2019-5761 affects Google Chrome’s SwiftShader component. The issue is described as incorrect object lifecycle management in SwiftShader, enabling a remote attacker to potentially exploit heap corruption via a crafted HTML page. Affected software is Chrome prior to version 72.0.3626.81. Fedora...

CVE-2019-5875

CVE-2019-5875 is a URL-spoofing vulnerability in Chromium-based browsers (Google Chrome/Chromium) where insufficient data validation in downloads allowed a crafted HTML page to spoof the Omnibox (URL bar). Connected advisories confirm the vulnerability and document remediation: Debian’s security ...

CVE-2021-21150

CVE-2021-21150 describes a use-after-free vulnerability in Chromium’s Downloads component on Windows (pre-88.0.4324.182). The issue stems from use-after-free in the Downloads pathway, allowing a remote attacker who has compromised the renderer process to potentially escape the browser sandbox via...

CVE-2021-21223

CVE-2021-21223 describes an integer overflow in Mojo inside Google Chrome prior to 90.0.4430.85. A remote attacker who has compromised the renderer process could potentially perform a sandbox escape via a crafted HTML page. Affected: Google Chrome (Mojo component) before 90.0.4430.85. Impact per ...

CVE-2022-0974

CVE-2022-0974 pertains to Google Chrome on Chrome OS prior to 99.0.4844.74, where a use-after-free in Splitscreen can be triggered by a crafted HTML page after user interaction, potentially enabling heap corruption and remote code execution. The issue is documented across multiple sources (NVD de...

CVE-2022-1139

CVE-2022-1139 refers to an inappropriate implementation in Chrome’s Background Fetch API that could allow a remote attacker to leak cross-origin data via a crafted HTML page. The issue is associated with Chrome/Chromium before version 100.0.4896.60 and was acknowledged in Google’s March 29, 2022 ...

CVE-2022-1639

The CVE-2022-1639 issue is confirmed in ANGLE within Google Chrome before 101.0.4951.64, caused by a use-after-free that can lead to heap corruption via a crafted HTML page. Affected software is Chrome (ANGLE/Chromium stack) with remote, user-page interaction required for exploitation, and the im...

CVE-2022-1871

Chromium/Google Chrome 102.x are affected by CVE-2022-1871: Insufficient policy enforcement in the File System API allows a user-trathan to bypass file system policy via a crafted HTML page after installing a malicious extension. Root cause: insufficient policy enforcement in the File System API....

CVE-2023-5858

The CVE-2023-5858 entry concerns Google Chrome’s WebApp Provider: an inappropriate implementation in Chrome prior to 119.0.6045.105 allowed a remote attacker to obfuscate the security UI via a crafted HTML page. The issue is categorized as Low severity by Chromium, with CVSSv3.1 metrics: AV:N/AC:...

CVE-2025-4051

CVE-2025-4051 involves insufficient data validation in DevTools of Google Chrome/Chromium, allowing a remote attacker to bypass discretionary access control when a user is persuaded to perform specific UI gestures on a crafted HTML page. The vulnerability affects Chrome before version 136.0.7103....

CVE-2025-5959

CVE-2025-5959 is a Type Confusion in V8 used by Google Chrome prior to 137.0.7151.103 that allowed a remote attacker to execute arbitrary code inside the browser sandbox via a crafted HTML page. Affected software is Google Chrome (Chromium/V8 engine); the issue is rated High severity with network...

CVE-2021-21196

CVE-2021-21196 involves a heap buffer overflow in the TabStrip component of Chromium/Google Chrome on Windows, prior to version 89.0.4389.114. The underlying issue is a heap overflow that could be triggered by a crafted HTML page, potentially enabling heap corruption. Affected software, evidence ...

CVE-2021-21212

CVE-2021-21212 affects Google Chrome on ChromeOS (and Chromium-based builds) with an incorrect security UI in the Network Config UI, before version 90.0.4430.72. The underlying issue is a security UI flaw that could allow a remote attacker to potentially compromise WiFi connection security via a ...

CVE-2021-30520

CVE-2021-30520 affects Chromium before 90.0.4430.212. A use-after-free in the Tab Strip component enables arbitrary code execution via crafted pages or extension interactions. Affected: Chromium-based browsers as shipped in Chromium upstream; vulnerable component is Tab Strip. Impact: remote atta...

CVE-2021-30522

CVE-2021-30522 affects Chromium prior to 91.0.4472.77, with a use-after-free in the WebAudio component that could allow remote code execution through a crafted page. The Arch Linux advisories explicitly describe the issue and state the fix is to upgrade to Chromium 91.0.4472.77-1 (or newer). Othe...

CVE-2021-30537

The CVE-2021-30537 entry concerns the Chromium browser’s cookies component. The connected documents confirm: affected software is Chromium prior to version 91.0.4472.77; vulnerability type is insufficient policy enforcement in cookies; attacker could bypass cookie policy via a crafted HTML page. ...