CVE-2019-5765

CVE-2019-5765 is described in the connected documents as an access restriction bypass (policy enforcement error) in the Chromium browser prior to version 72.0.3626.81. Fedora Arch/Linux advisories and Debian security trackers list this CVE among Chromium issues resolved by upgrading to 72.0.3626....

CVE-2019-5847

CVE-2019-5847 is a vulnerability described as an inappropriate JavaScript implementation in Google Chrome before 75.0.3770.142, potentially enabling remote heap corruption via a crafted HTML page. Connected advisories link this CVE to problems in the V8 JavaScript engine and list affected product...

CVE-2021-21222

CVE-2021-21222 is a heap buffer overflow in V8 (Chrome) prior to 90.0.4430.85, enabling a remote attacker with renderer access to bypass site isolation via a crafted HTML page. The issue is demonstrated across Chromium-derived stacks; affected components include V8 and related rendering/subsystem...

CVE-2022-2613

CVE-2022-2613 is a use-after-free vulnerability in Chrome/Chromium’s input handling on ChromeOS, specifically tied to the Gesture Process in Chromium. The issue is reported to occur on ChromeOS builds prior to 104.0.5112.79, potentially enabling heap corruption via certain user interactions. Conn...

CVE-2023-5857

CVE-2023-5857 affects Google Chrome/Chromium: an inappropriate implementation in the Downloads component allowed a remote attacker to potentially execute arbitrary code via a malicious file. The issue is tied to Chromium’s handling in Downloads prior to 119.0.6045.105. Public disclosures in conne...

CVE-2023-5858

The CVE-2023-5858 entry concerns Google Chrome’s WebApp Provider: an inappropriate implementation in Chrome prior to 119.0.6045.105 allowed a remote attacker to obfuscate the security UI via a crafted HTML page. The issue is categorized as Low severity by Chromium, with CVSSv3.1 metrics: AV:N/AC:...

CVE-2025-5958

CVE-2025-5958 affects Google Chrome (Chromium base). The vulnerability is a use-after-free in the Media component, which could allow a remote attacker to cause heap corruption via a crafted HTML page. Affected versions are prior to 137.0.7151.103. Google released a fix in the 137.0.7151.103 stabl...

CVE-2019-13664

CVE-2019-13664 : In Chromium/Blink, insufficient policy enforcement allowed bypassing the Content Security Policy via a crafted HTML page. Affected products are Chromium/Google Chrome (Blink engine); the issue is tied to CSP bypass in the rendering/Blink path. Debian security advisory DSA-4562-1 ...

CVE-2019-5774

CVE-2019-5774 affects Google Chrome on Linux; the issue arises from omission of the .desktop filetype in Safe Browsing checks, allowing an attacker who persuades a user to download a .desktop file to execute arbitrary code via that file. The vulnerability is tied to SafeBrowsing in Chrome before ...

CVE-2021-21150

CVE-2021-21150 describes a use-after-free vulnerability in Chromium’s Downloads component on Windows (pre-88.0.4324.182). The issue stems from use-after-free in the Downloads pathway, allowing a remote attacker who has compromised the renderer process to potentially escape the browser sandbox via...

CVE-2021-30508

CVE-2021-30508 is a heap buffer overflow in Chrome/Chromium’s Media Feeds component, affecting Chromium before version 90.0.4430.212. The vulnerability could allow a remote attacker to trigger heap corruption via a crafted HTML page, potentially enabling arbitrary code execution. Public advisorie...

CVE-2022-1145

CVE-2022-1145 is a Chrome use-after-free in Extensions affecting Chrome

CVE-2022-1492

Summary: CVE-2022-1492 corresponds to a Chrome/Blink vulnerability described as insufficient data validation in Blink Editing that could allow a remote attacker to inject arbitrary scripts or HTML via a crafted HTML page. The issue affects Google Chrome’s Blink Editing path and is associated with...

CVE-2022-2157

CVE-2022-2157 describes a use-after-free in Chrome’s Interest groups, allowing a remote attacker who already compromised a renderer to trigger heap corruption via a crafted HTML page. The vulnerability affects Google Chrome (Chromium) before version 103.0.5060.53; impact is described as high for ...

CVE-2019-5757

CVE-2019-5757 concerns a type confusion in the SVG handling of Google Chrome/Chromium. The issue arises from an incorrect object type assumption in SVG, allowing a remote attacker to potentially corrupt objects via a crafted HTML page. Public advisories place the vulnerability in the Chrome/Chrom...

CVE-2019-5781

CVE-2019-5781 affects Google Chrome: Incorrect handling of a confusable character in the Omnibox (URL bar). Prior to 72.0.3626.81, a remote attacker could spoof the Omnibox via a crafted domain name. The connected documents do not provide additional technical details, exploitation methods, or rem...

CVE-2021-21118

CVE-2021-21118 is a data validation issue in the V8 JavaScript engine of Chromium-based browsers. The connected advisories and Debian/Arch Fedora entries confirm the vulnerability stems from insufficient data validation in V8 prior to version 88.0.4324.96, potentially enabling out-of-bounds memor...

CVE-2021-30538

CVE-2021-30538 : The Chromium browser’s Content Security Policy enforcement is insufficient before 91.0.4472.77, allowing a remote attacker to bypass CSP via a crafted HTML page. Public references in security advisories (e.g., Fedora/Arch Linux chromium updates, Debian/Alpine entries) confirm the...

CVE-2022-0975

CVE-2022-0975 is a use-after-free in ANGLE affecting Google Chrome prior to 99.0.4844.74, leading to potential remote heap corruption. The vulnerability is documented across multiple sources (Chrome stable channel update and Debian security advisory) with fixes implemented in version 99.0.4844.74...

CVE-2022-1139

CVE-2022-1139 refers to an inappropriate implementation in Chrome’s Background Fetch API that could allow a remote attacker to leak cross-origin data via a crafted HTML page. The issue is associated with Chrome/Chromium before version 100.0.4896.60 and was acknowledged in Google’s March 29, 2022 ...

CVE-2022-1490

Google Chrome/Chromium suffered a use-after-free in the Browser Switcher before 101.0.4951.41, allowing a remote attacker to potentially exploit heap corruption via a crafted HTML page after user interaction. The issue affects Chrome/Chromium components related to the Browser Switcher; CVE-2022-1...

CVE-2022-1869

CVE-2022-1869 refers to a type confusion in the V8 JavaScript engine used by Google Chrome before version 102.0.5005.61. The vulnerability arises from a type-confusion error in V8 that could allow a remote attacker to trigger heap corruption via a crafted HTML page. Several connected advisories c...

CVE-2019-13728

CVE-2019-13728 is an out-of-bounds write in the v8 JavaScript library used by Chromium/Google Chrome, causing heap corruption. A remote attacker could potentially exploit this via a crafted HTML page. Remediation per connected advisories: upgrade to Chromium/Chrome versions where this CVE is fixe...

CVE-2019-5764

CVE-2019-5764 is a use-after-free/incorrect pointer management in the WebRTC code path of Chromium/Google Chrome, prior to version 72.0.3626.81, allowing a remote attacker to potentially exploit heap corruption via a crafted HTML page. Public references in Debian advisories and Fedora/Nessus entr...

CVE-2019-5876

CVE-2019-5876 describes a use-after-free in media handling in Google Chrome/Chromium. Public description states that on Android, prior to 77.0.3865.75, a remote attacker could potentially trigger heap corruption via a crafted HTML page. The Debian advisory lists CVE-2019-5876 among multiple Chrom...

CVE-2020-6409

The connected advisories confirm CVE-2020-6409 affects Chromium/Google Chrome "Omnibox" in versions before 80.0.3987.87. The issue is described as an inappropriate Omnibox implementation that lets a remote attacker bypass navigation restrictions by enticing a user to visit a crafted domain name. ...

CVE-2021-21147

CVE-2021-21147 affects Chromium/Chrome where Skia had an inappropriate implementation that could allow a local attacker to spoof the Omnibox (URL bar) via a crafted HTML page. The public records consistently cite version 88.0.4324.146 as the fix, with Debian notes stating the patch is in 88.0.432...

CVE-2021-21223

CVE-2021-21223 describes an integer overflow in Mojo inside Google Chrome prior to 90.0.4430.85. A remote attacker who has compromised the renderer process could potentially perform a sandbox escape via a crafted HTML page. Affected: Google Chrome (Mojo component) before 90.0.4430.85. Impact per ...

CVE-2021-30522

CVE-2021-30522 affects Chromium prior to 91.0.4472.77, with a use-after-free in the WebAudio component that could allow remote code execution through a crafted page. The Arch Linux advisories explicitly describe the issue and state the fix is to upgrade to Chromium 91.0.4472.77-1 (or newer). Othe...

CVE-2021-30523

Chromium/WebRTC use-after-free vulnerability CVE-2021-30523 existed in Chromium before 91.0.4472.77, reported via Arch Linux advisory ASA-202106-33 and mirrored in Fedora/Debian Alpine entries. The issue is a use-after-free in the WebRTC component that could allow arbitrary code execution on remo...

CVE-2022-0803

CVE-2022-0803 concerns Google Chrome prior to 99.0.4844.51. It describes an inappropriate implementation in Permissions that allows a remote attacker to tamper with the Omnibox (URL bar) contents via a crafted HTML page. The issue affects Chrome’s handling within the Permissions component and has...

CVE-2022-1865

Consolidated details confirm CVE-2022-1865 affects Google Chrome prior to 102.0.5005.61, due to a use-after-free in the Bookmarks component that can be triggered by convincing a user to install a malicious extension and perform specific interactions, potentially enabling heap corruption. Public b...

CVE-2026-12463

The CVE-2026-12463 entry corresponds to an UXSS vulnerability in Google Chrome on Linux, caused by an inappropriate implementation in Views that allowed a compromised renderer to inject arbitrary scripts/HTML via a crafted HTML page. Affected product is Chrome on Linux, with the issue present pri...

CVE-2019-13704

CVE-2019-13704 affects Google Chrome/Chromium before 78.0.3904.70 and is described as an access restriction bypass via CSP, specifically a Content Security Policy bypass. Connected advisories confirm the issue as a CSP bypass vulnerability in Chromium/Chrome, with remediation guidance to upgrade ...

CVE-2019-13707

CVE-2019-13707 is an information-disclosure vulnerability in Chromium/Google Chrome (Android) caused by insufficient validation of untrusted input in intents, allowing a local attacker to leak files via a crafted application. It affects Chrome/Chromium versions prior to 78.0.3904.70; the issue ha...

CVE-2019-13735

CVE-2019-13735 is a Chrome/Chromium vulnerability: an out-of-bounds write in the V8 JavaScript engine that could allow remote code execution inside the sandbox via a crafted HTML page. Public details in connected sources identify the affected component (V8 in Chromium/Chrome) and confirm remediat...

CVE-2019-13758

CVE-2019-13758: Google Chrome/Chromium navigation policy enforcement flaw on Android allowed remote bypass of navigation restrictions via a crafted HTML page. Affected product: Chrome on Android prior to 79.0.3945.79. Impact: bypass of navigation restrictions (no exploitation details provided). R...

CVE-2019-5762

CVE-2019-5762 is a PDFium-related memory-management issue in Google Chrome prior to 72.0.3626.81, enabling a remote attacker to execute arbitrary code inside the sandbox via a crafted PDF. The vulnerability stems from inappropriate memory handling when caching in PDFium. The documented impact is ...

CVE-2019-5772

The CVE-2019-5772 entry affects Google Chrome's PDFium component. Description: Sharing of objects over calls into the JavaScript runtime in PDFium can lead to heap corruption when processing a crafted PDF, enabling a remote attacker to potentially exploit the issue. Affected product/area: Chrome ...

CVE-2019-5806

The CVE-2019-5806 entry concerns Google Chrome/Chromium on Windows prior to 74.0.3729.108. A concrete flaw is an integer overflow in the ANGLE library, which can lead to heap corruption via a crafted HTML page. The issue is actionable in the browser context where remote attackers could exploit it...

CVE-2021-21160

CVE-2021-21160 is a heap buffer overflow in WebAudio within Chromium/Google Chrome prior to version 89.0.4389.72. A remote attacker could exploit this via a crafted HTML page to cause heap corruption. The connected sources confirm this issue across multiple advisories (Chromium/Chromebook updates...

CVE-2021-30537

The CVE-2021-30537 entry concerns the Chromium browser’s cookies component. The connected documents confirm: affected software is Chromium prior to version 91.0.4472.77; vulnerability type is insufficient policy enforcement in cookies; attacker could bypass cookie policy via a crafted HTML page. ...

CVE-2022-1639

The CVE-2022-1639 issue is confirmed in ANGLE within Google Chrome before 101.0.4951.64, caused by a use-after-free that can lead to heap corruption via a crafted HTML page. Affected software is Chrome (ANGLE/Chromium stack) with remote, user-page interaction required for exploitation, and the im...

CVE-2022-1871

Chromium/Google Chrome 102.x are affected by CVE-2022-1871: Insufficient policy enforcement in the File System API allows a user-trathan to bypass file system policy via a crafted HTML page after installing a malicious extension. Root cause: insufficient policy enforcement in the File System API....

CVE-2023-4909

CVE-2023-4909 describes an Inappropriate implementation in Interstitials in Google Chrome/Chromium prior to 117.0.5938.62 that allows a remote attacker to obfuscate the security UI via a crafted HTML page. The issue is documented across multiple sources (Chromium/Chrome advisories, Debian securit...

CVE-2019-5761

CVE-2019-5761 affects Google Chrome’s SwiftShader component. The issue is described as incorrect object lifecycle management in SwiftShader, enabling a remote attacker to potentially exploit heap corruption via a crafted HTML page. Affected software is Chrome prior to version 72.0.3626.81. Fedora...

CVE-2020-15980

CVE-2020-15980: In Chromium/Chrome, insufficient policy enforcement in the Intents component allows a local attacker to bypass navigation restrictions via crafted Intents. Impact is described as local code execution/privilege by affected components; Debian/Arch/FreeBSD advisories indicate fixes i...

CVE-2020-6516

CVE-2020-6516 is a Chrome/CORB policy-bypass vulnerability where cross-origin data could be leaked via a crafted HTML page. Affected product: Google Chrome prior to 84.0.4147.89 (Chromium-based browser). Root cause: CORS policy bypass in Chrome’s handling of cross-origin requests. Impact: potenti...

CVE-2023-0141

Conforms to CVE-2023-0141: Google Chrome/Chromium suffered from insufficient CORS policy enforcement, enabling a remote attacker to leak cross-origin data via a crafted HTML page. Affected versions were prior to 109.0.5414.74. The Chrome stable update 109.0.5414.74+ includes fixes; the release no...

CVE-2023-1534

CVE-2023-1534 is an out-of-bounds read in ANGLE used by Google Chrome/Chromium prior to version 111.0.5563.110, enabling heap corruption via a crafted HTML page after an attacker compromises the renderer process. The connected sources confirm affected products (Chrome/Chromium) and the vulnerable...