CVE-2022-1139

CVE-2022-1139 refers to an inappropriate implementation in Chrome’s Background Fetch API that could allow a remote attacker to leak cross-origin data via a crafted HTML page. The issue is associated with Chrome/Chromium before version 100.0.4896.60 and was acknowledged in Google’s March 29, 2022 ...

CVE-2022-1869

CVE-2022-1869 refers to a type confusion in the V8 JavaScript engine used by Google Chrome before version 102.0.5005.61. The vulnerability arises from a type-confusion error in V8 that could allow a remote attacker to trigger heap corruption via a crafted HTML page. Several connected advisories c...

CVE-2023-5186

CVE-2023-5186 is a use-after-free vulnerability in Chromium-based browsers (Google Chrome and Chromium) prior to 117.0.5938.132. The issue lies in Passwords handling, where a crafted UI interaction can lead to a heap corruption through a use-after-free condition, potentially enabling arbitrary co...

CVE-2019-13758

CVE-2019-13758: Google Chrome/Chromium navigation policy enforcement flaw on Android allowed remote bypass of navigation restrictions via a crafted HTML page. Affected product: Chrome on Android prior to 79.0.3945.79. Impact: bypass of navigation restrictions (no exploitation details provided). R...

CVE-2021-21147

CVE-2021-21147 affects Chromium/Chrome where Skia had an inappropriate implementation that could allow a local attacker to spoof the Omnibox (URL bar) via a crafted HTML page. The public records consistently cite version 88.0.4324.146 as the fix, with Debian notes stating the patch is in 88.0.432...

CVE-2021-30522

CVE-2021-30522 affects Chromium prior to 91.0.4472.77, with a use-after-free in the WebAudio component that could allow remote code execution through a crafted page. The Arch Linux advisories explicitly describe the issue and state the fix is to upgrade to Chromium 91.0.4472.77-1 (or newer). Othe...

CVE-2021-30537

The CVE-2021-30537 entry concerns the Chromium browser’s cookies component. The connected documents confirm: affected software is Chromium prior to version 91.0.4472.77; vulnerability type is insufficient policy enforcement in cookies; attacker could bypass cookie policy via a crafted HTML page. ...

CVE-2022-0792

CVE-2022-0792 is an out-of-bounds read in ANGLE used by Google Chrome prior to 99.0.4844.51. The vulnerability allows a remote attacker to potentially exploit heap corruption via a crafted HTML page. Affected product: Chrome/Chromium frontend components relying on ANGLE. Root cause: out-of-bounds...

CVE-2022-1490

Google Chrome/Chromium suffered a use-after-free in the Browser Switcher before 101.0.4951.41, allowing a remote attacker to potentially exploit heap corruption via a crafted HTML page after user interaction. The issue affects Chrome/Chromium components related to the Browser Switcher; CVE-2022-1...

CVE-2023-4905

CVE-2023-4905 affects Google Chrome/Chromium where an inappropriate implementation in Prompts allowed a remote attacker to spoof the security UI via a crafted HTML page. The vulnerability is associated with Chrome/Chromium versions prior to 117.0.5938.62. Publicly documented fixes include Chrome/...

CVE-2026-14142

Summary : CVE-2026-14142 describes an inappropriate implementation in Google Chrome’s Extensions prior to 150.0.7871.47, enabling a remote attacker (with renderer access) to spoof the UI via a crafted HTML page. The vulnerability affects Chrome extensions rendering logic and is rated Low severity...

CVE-2019-13724

CVE-2019-13724 is a WebBluetooth-related vulnerability in Chromium/Google Chrome prior to 78.0.3904.108. The issue is described as an out-of-bounds memory access in the Web Bluetooth component, which could allow a remote attacker who has compromised the renderer process to potentially trigger hea...

CVE-2019-5761

CVE-2019-5761 affects Google Chrome’s SwiftShader component. The issue is described as incorrect object lifecycle management in SwiftShader, enabling a remote attacker to potentially exploit heap corruption via a crafted HTML page. Affected software is Chrome prior to version 72.0.3626.81. Fedora...

CVE-2019-5762

CVE-2019-5762 is a PDFium-related memory-management issue in Google Chrome prior to 72.0.3626.81, enabling a remote attacker to execute arbitrary code inside the sandbox via a crafted PDF. The vulnerability stems from inappropriate memory handling when caching in PDFium. The documented impact is ...

CVE-2020-6516

CVE-2020-6516 is a Chrome/CORB policy-bypass vulnerability where cross-origin data could be leaked via a crafted HTML page. Affected product: Google Chrome prior to 84.0.4147.89 (Chromium-based browser). Root cause: CORS policy bypass in Chrome’s handling of cross-origin requests. Impact: potenti...

CVE-2021-21223

CVE-2021-21223 describes an integer overflow in Mojo inside Google Chrome prior to 90.0.4430.85. A remote attacker who has compromised the renderer process could potentially perform a sandbox escape via a crafted HTML page. Affected: Google Chrome (Mojo component) before 90.0.4430.85. Impact per ...

CVE-2022-0975

CVE-2022-0975 is a use-after-free in ANGLE affecting Google Chrome prior to 99.0.4844.74, leading to potential remote heap corruption. The vulnerability is documented across multiple sources (Chrome stable channel update and Debian security advisory) with fixes implemented in version 99.0.4844.74...

CVE-2022-1865

Consolidated details confirm CVE-2022-1865 affects Google Chrome prior to 102.0.5005.61, due to a use-after-free in the Bookmarks component that can be triggered by convincing a user to install a malicious extension and perform specific interactions, potentially enabling heap corruption. Public b...

CVE-2022-1871

Chromium/Google Chrome 102.x are affected by CVE-2022-1871: Insufficient policy enforcement in the File System API allows a user-trathan to bypass file system policy via a crafted HTML page after installing a malicious extension. Root cause: insufficient policy enforcement in the File System API....

CVE-2023-1534

CVE-2023-1534 is an out-of-bounds read in ANGLE used by Google Chrome/Chromium prior to version 111.0.5563.110, enabling heap corruption via a crafted HTML page after an attacker compromises the renderer process. The connected sources confirm affected products (Chrome/Chromium) and the vulnerable...

CVE-2023-2137

The provided connected docs confirm CVE-2023-2137 affects Google Chrome/Chromium and its underlying SQLite component, with a heap buffer overflow in SQLite prior to Chrome 112.0.5615.137. The root cause is a heap corruption condition that could be triggered by a crafted HTML page, allowing remote...

CVE-2019-13735

CVE-2019-13735 is a Chrome/Chromium vulnerability: an out-of-bounds write in the V8 JavaScript engine that could allow remote code execution inside the sandbox via a crafted HTML page. Public details in connected sources identify the affected component (V8 in Chromium/Chrome) and confirm remediat...

CVE-2019-5772

The CVE-2019-5772 entry affects Google Chrome's PDFium component. Description: Sharing of objects over calls into the JavaScript runtime in PDFium can lead to heap corruption when processing a crafted PDF, enabling a remote attacker to potentially exploit the issue. Affected product/area: Chrome ...

CVE-2021-21118

CVE-2021-21118 is a data validation issue in the V8 JavaScript engine of Chromium-based browsers. The connected advisories and Debian/Arch Fedora entries confirm the vulnerability stems from insufficient data validation in V8 prior to version 88.0.4324.96, potentially enabling out-of-bounds memor...

CVE-2021-21123

CVE-2021-21123 is a data validation vulnerability in Google Chrome’s File System API (Chromium) prior to 88.0.4324.96. The issue allows a remote attacker to bypass filesystem restrictions via a crafted HTML page due to insufficient data validation in the File System API/File System component. The...

CVE-2021-21196

CVE-2021-21196 involves a heap buffer overflow in the TabStrip component of Chromium/Google Chrome on Windows, prior to version 89.0.4389.114. The underlying issue is a heap overflow that could be triggered by a crafted HTML page, potentially enabling heap corruption. Affected software, evidence ...

CVE-2021-30520

CVE-2021-30520 affects Chromium before 90.0.4430.212. A use-after-free in the Tab Strip component enables arbitrary code execution via crafted pages or extension interactions. Affected: Chromium-based browsers as shipped in Chromium upstream; vulnerable component is Tab Strip. Impact: remote atta...

CVE-2021-30523

Chromium/WebRTC use-after-free vulnerability CVE-2021-30523 existed in Chromium before 91.0.4472.77, reported via Arch Linux advisory ASA-202106-33 and mirrored in Fedora/Debian Alpine entries. The issue is a use-after-free in the WebRTC component that could allow arbitrary code execution on remo...

CVE-2022-0800

CVE-2022-0800 is a heap buffer overflow in Google Chrome’s Cast UI prior to 99.0.4844.51. A remote attacker could exploit this by convincing a user to engage in specific interaction with a crafted HTML page, potentially causing heap corruption. Public reports indicate the vulnerability affects Ch...

CVE-2022-1313

CVE-2022-1313 describes a use-after-free in Chromium-based browsers (Chrome/Chromium) related to tab groups, leading to potential heap corruption via a crafted HTML page. The issue affects Chromium-derived browsers and was publicly disclosed with the impact of remote code execution/compromise via...

CVE-2022-1492

Summary: CVE-2022-1492 corresponds to a Chrome/Blink vulnerability described as insufficient data validation in Blink Editing that could allow a remote attacker to inject arbitrary scripts or HTML via a crafted HTML page. The issue affects Google Chrome’s Blink Editing path and is associated with...

CVE-2023-5472

CVE-2023-5472 describes a use-after-free in Chrome/Chromium Profiles prior to 118.0.5993.117, enabling heap corruption via a crafted HTML page for a remote attacker. Impact is high (CVE has base score 8.8). Affected software includes Google Chrome/Chromium; Debian advisories confirm fixed version...

CVE-2025-6191

CVE-2025-6191 is a Chrome/Chromium vulnerability: an integer overflow in V8 prior to 137.0.7151.119 can enable a remote attacker to trigger out-of-bounds memory access via a crafted HTML page, with a High severity. There are public advisories and a Chrome security update (Stable channel 137.0.715...

CVE-2020-6550

CVE-2020-6550 is a Use-After-Free in IndexedDB in Google Chrome before 84.0.4147.125 that could allow a remote attacker to cause heap corruption via a crafted HTML page. The issue affects Chrome/Chromium’s IndexedDB component; root cause is a use-after-free memory error leading to potential arbit...

CVE-2021-21172

CVE-2021-21172 corresponds to a policy enforcement error in Chrome's File System API on Windows, allowing a remote attacker to bypass filesystem restrictions via a crafted HTML page. Affected: Google Chrome/Chromium prior to 89.0.4389.72 (File System API component). Root cause: insufficient polic...

CVE-2021-21212

CVE-2021-21212 affects Google Chrome on ChromeOS (and Chromium-based builds) with an incorrect security UI in the Network Config UI, before version 90.0.4430.72. The underlying issue is a security UI flaw that could allow a remote attacker to potentially compromise WiFi connection security via a ...

CVE-2023-0141

Conforms to CVE-2023-0141: Google Chrome/Chromium suffered from insufficient CORS policy enforcement, enabling a remote attacker to leak cross-origin data via a crafted HTML page. Affected versions were prior to 109.0.5414.74. The Chrome stable update 109.0.5414.74+ includes fixes; the release no...

CVE-2019-5875

CVE-2019-5875 is a URL-spoofing vulnerability in Chromium-based browsers (Google Chrome/Chromium) where insufficient data validation in downloads allowed a crafted HTML page to spoof the Omnibox (URL bar). Connected advisories confirm the vulnerability and document remediation: Debian’s security ...

CVE-2022-0802

CVE-2022-0802 affects Google Chrome on Android before 99.0.4844.51, where an improper implementation in full-screen mode could allow a remote attacker to hide the Omnibox contents via a crafted HTML page. The issue stems from a UI/fullscreen handling flaw that can misrepresent the URL bar visibil...

CVE-2022-1636

CVE-2022-1636 affects Google Chrome up to version 101.0.4951.64, where a use-after-free in Performance APIs could allow a remote attacker to trigger heap corruption via a crafted HTML page. Impact is high (C/H/I/H; network attack vector, no privileges required, user interaction required). Remedia...

CVE-2020-15963

CVE-2020-15963 concerns Google Chrome where insufficient policy enforcement in extensions could allow a user-tempted installation of a malicious extension to sandbox-escape. Affected software: Google Chrome prior to 85.0.4183.121 (extensions component policy enforcement). Root cause: insufficient...

CVE-2021-30574

CVE-2021-30574 is a use-after-free in the protocol handling component of the Chromium-based Google Chrome browser prior to 92.0.4515.107. The description indicates an attacker could craft an HTML page to trigger a remote heap corruption, potentially enabling arbitrary code execution or similar im...

CVE-2022-1862

CVE-2022-1862 corresponds to an issue in Google Chrome extensions: an inappropriate implementation in Extensions allowed a user-assisted attacker to bypass profile restrictions via a crafted HTML page. The vulnerability affects Chrome prior to 102.0.5005.61 (and related Chromium builds). Impact d...

CVE-2023-1530

CVE-2023-1530 affects Chromium-derived browsers (Google Chrome/Chromium) prior to version 111.0.5563.110. The flaw is a Use-After-Free in PDF handling that can enable heap corruption via a crafted HTML page, leading to remote code execution risk as described in multiple advisories. Remediation is...

CVE-2023-5187

CVE-2023-5187 is a use-after-free vulnerability in Chrome/Chromium extensions prior to 117.0.5938.132. A user who installs a crafted malicious extension could trigger heap corruption via a crafted HTML page, potentially leading to arbitrary code execution. Affected: Google Chrome/Chromium extensi...

CVE-2025-5958

CVE-2025-5958 affects Google Chrome (Chromium base). The vulnerability is a use-after-free in the Media component, which could allow a remote attacker to cause heap corruption via a crafted HTML page. Affected versions are prior to 137.0.7151.103. Google released a fix in the 137.0.7151.103 stabl...

CVE-2021-21120

CVE-2021-21120 is a use-after-free in Chromium’s WebSQL implementation reported as affecting Chromium before version 88.0.4324.96 . The connected sources confirm a remote attacker could potentially exploit this to cause heap corruption via a crafted HTML page. The details consistently reference t...

CVE-2021-21201

CVE-2021-21201: Use-after-free in permissions of Google Chrome prior to 90.0.4430.72 can allow a remote attacker with renderer access to escape the sandbox via a crafted HTML page. Connected advisories (e.g., ASA-202104-2/ASA-202104-5) reiterate sandbox-escape and related issues across Chromium c...

CVE-2021-30509

CVE-2021-30509 affects Chromium/Google Chrome before 90.0.4430.212. It describes an out-of-bounds write in the Tab Strip component that an attacker could trigger by convincing a user to install a malicious extension, enabling memory corruption via a crafted HTML page and crafted Chrome extension....

CVE-2021-30530

CVE-2021-30530 : The connected documents confirm a vulnerability in Chromium’s WebAudio component prior to 91.0.4472.77, described as an out-of-bounds memory access. Exploitation is possible through a crafted HTML page that could be remote, with impact including potential memory access violations...