CVE-2012-4930

The CVE-2012-4930 issue affects the SPDY protocol (v3 and earlier) as used by Firefox, Chrome, and other products. It allows a man-in-the-middle to observe length-based side channels of TLS-compressed data to potentially recover plaintext HTTP headers (CRIME attack). Root cause: TLS compression w...

CVE-2019-5858

CVE-2019-5858 affects Chromium/Google Chrome on macOS (OS X) prior to 76.0.3809.87; the CVE entry describes an incorrect security UI in the MacOS services integration that could let a local attacker execute arbitrary code via a crafted HTML page. Public-connected advisories for this family (CVE-2...

CVE-2020-6452

CVE-2020-6452 affects Chromium/Google Chrome prior to 80.0.3987.162 (and related Chromium builds). Root cause: heap/buffer overflow in the Media component (and related use-after-free issues in WebAudio per connected records). Impact: remote attacker could potentially execute arbitrary code by ent...

CVE-2022-0608

CVE-2022-0608 is a Chrome Mojo integer overflow vulnerability (pre-98.0.4758.102) that could enable remote heap corruption via a crafted HTML page. Affected: Google Chrome (Mojo component). Impact per sources: potential arbitrary code execution or crash; CVSS values indicate high impact. Remediat...

CVE-2022-1868

The CVE-2022-1868 case concerns Google Chrome’s Extensions API where an improper implementation allowed bypassing navigation restrictions when a user is convinced to install a crafted malicious extension. Affected software is Google Chrome prior to 102.0.5005.61; a fix is reflected in Chrome/chro...

CVE-2022-1919

CVE-2022-1919 concerns a Use-after-Free in Google Chrome Codecs, before 101.0.4951.41, enabling a remote attacker to potentially trigger heap corruption via a crafted HTML page. The vulnerability is documented with a high CVSS score (8.8) and network attack vector with user interaction required. ...

CVE-2023-2133

CVE-2023-2133 affects Chromium/Google Chrome’s Service Worker API. It describes an out-of-bounds memory access that could enable heap corruption via a crafted HTML page. Impact is high (C/H/I/A) with network attacker vector and user interaction required. The description states a fix for Chromium/...

CVE-2019-5855

CVE-2019-5855 affecting Chromium is due to an integer overflow in the PDFium text rendering path, allowing a remote attacker to potentially execute arbitrary code via a crafted PDF. The advisory in Arch Linux (ASA-201908-1) states this as part of a set of issues in Chromium before 76.0.3809.87-1,...

CVE-2021-21188

CVE-2021-21188 is a Chrome/Blink use-after-free vulnerability in Blink/WebKit leading to potential heap corruption. Connected documents confirm the issue exists in Google Chrome prior to version 89.0.4389.72 and is exploitable via a crafted HTML page, with remote code execution as a possible impa...

CVE-2021-30511

CVE-2021-30511 concerns an information-disclosure flaw: an out-of-bounds read in the Tab Groups component of the Chromium browser before version 90.0.4430.212. Multiple connected advisories (Fedora/Arch/Linux security bulletins and Debian tracker) corroborate the same description for Chromium/Chr...

CVE-2021-30527

CVE-2021-30527 is a use-after-free vulnerability in Chromium’s WebUI before version 91.0.4472.77. Exploitation could be triggered by convincing a user to install a malicious extension or via a crafted HTML page, enabling heap corruption and arbitrary code execution. Affected software is Chromium/...

CVE-2021-30566

CVE-2021-30566 affects Chromium-based web engines (Chrome/Chromium) with a stack buffer overflow in the Printing component prior to 92.0.4515.107. The flaw could be triggered by a crafted HTML page and, if a renderer process is compromised, may allow remote code execution or other impact as descr...

CVE-2021-30576

CVE-2021-30576 is a use-after-free vulnerability in DevTools of the Chromium browser engine before version 92.0.4515.107. The issue can be triggered when a user is convinced to install a malicious extension and visit a crafted HTML page, potentially allowing remote code execution or content spoof...

CVE-2022-1135

CVE-2022-1135 affects Google Chrome (Chromium-based) Shopping Cart handling prior to version 100.0.4896.60, where a use-after-free could lead to heap corruption. Root cause is a vulnerability in Shopping Cart code paths that can be triggered by standard user interaction, enabling potential remote...

CVE-2022-1497

CVE-2022-1497 affects Google Chrome (Chromium base) with an Inappropriate implementation in Input that allowed a remote attacker to spoof the contents of cross-origin websites via a crafted HTML page. The connected sources consistently describe this issue in Chrome/Chromium prior to version 101.0...

CVE-2023-1531

Summary of CVE-2023-1531 : A use-after-free in ANGLE used by Google Chrome/Chromium leads to potential heap corruption when processing crafted HTML pages. Affected versions are Chrome/Chromium prior to 111.0.5563.110. Connected advisories confirm the issue in Chromium-based browsers and document ...

CVE-2019-13765

CVE-2019-13765 describes a use-after-free in Chrome’s Content Delivery Manager leading to potential heap corruption via a crafted HTML page. Affected software: Google Chrome (Content Delivery Manager component); vulnerable when running versions prior to 78.0.3904.70. The underlying impact is remo...

CVE-2020-15972

CVE-2020-15972 is a use-after-free in the audio path of Chromium/Google Chrome prior to 86.0.4240.75. The issue could allow a remote attacker to exploit heap corruption via a crafted HTML page, potentially leading to arbitrary code execution or other impacts as described in the Debian/Arch adviso...

CVE-2020-6554

CVE-2020-6554 is a use-after-free in Chrome extensions that could enable a sandbox escape via a crafted extension in Chrome versions before 84.0.4147.125. Public connected documents confirm Chromium/Chrome advisories and Debian advisory references to this vulnerability and related fixes; one Debi...

CVE-2021-21121

CVE-2021-21121 is a concrete use-after-free vulnerability in Chromium’s Omnibox on Linux, described as a use-after-free in the Omnibox component of the Chromium browser before version 88.0.4324.96. The advisory states a remote attacker could potentially perform a sandbox escape via a crafted HTML...

CVE-2021-21122

CVE-2021-21122 is a use-after-free in the Blink/WebKit component of the Chromium/Chrome stack, reported to affect Chromium builds before version 88.0.4324.96. The vulnerability resides in Blink and, per security advisories, could result in arbitrary code execution or heap corruption when a crafte...

CVE-2021-21171

CVE-2021-21171 is a Chrome/Chromium UI security issue where the TabStrip and Navigation UI could spoof the Omnibox via a crafted HTML page. Affected product: Chromium before version 89.0.4389.72. Root cause: incorrect security UI handling in TabStrip/Navigation leading to content spoofing. Impact...

CVE-2021-21183

CVE-2021-21183: In Google Chrome/Chromium before 89.0.4389.72, an inappropriate implementation in the Performance APIs allowed a remote attacker to leak cross-origin data via a crafted HTML page. The issue is part of a broader set of Chromium-related vulnerabilities fixed in late 2021; Debian adv...

CVE-2021-30569

CVE-2021-30569 is a use-after-free in the sqlite component of the Chromium browser engine (Chrome) before version 92.0.4515.107. The vulnerability could allow a remote attacker to cause heap corruption via a crafted HTML page, potentially enabling arbitrary code execution. The connected data from...

CVE-2022-1490

Google Chrome/Chromium suffered a use-after-free in the Browser Switcher before 101.0.4951.41, allowing a remote attacker to potentially exploit heap corruption via a crafted HTML page after user interaction. The issue affects Chrome/Chromium components related to the Browser Switcher; CVE-2022-1...

CVE-2022-2011

CVE-2022-2011 describes a use-after-free in ANGLE used by Google Chrome/Chromium. The vulnerability affects Chrome/Chromium prior to 102.0.5005.115 and can allow remote heap corruption via a crafted HTML page. Connected sources consistently reference ANGLE use-after-free and list Chromium/Chrome ...

CVE-2023-5476

CVE-2023-5476: Use-after-free in Blink History of Google Chrome leading to potential heap corruption via a crafted HTML page. Affected: Chrome prior to 118.0.5993.70. Impact: remote attacker could exploit heap corruption (high severity in CVSS). Remediation: update to Chrome 118.0.5993.70 or newe...

CVE-2026-12460

CVE-2026-12460 affects Google Chrome/Chromium: insufficient policy enforcement in File System Access allows a remote attacker who has compromised the renderer to bypass site isolation via a crafted PDF file, prior to Chrome 149.0.7827.155. The vulnerability is triggered through the JavaScript/PDF...

CVE-2020-15959

CVE-2020-15959 affects Google Chrome/Chromium browsers up to versions prior to 85.0.4183.102, where insufficient policy enforcement in networking could allow an attacker, via social engineering to persuade a user to enable logging, to obtain potentially sensitive information from a process’s memo...

CVE-2020-6550

CVE-2020-6550 is a Use-After-Free in IndexedDB in Google Chrome before 84.0.4147.125 that could allow a remote attacker to cause heap corruption via a crafted HTML page. The issue affects Chrome/Chromium’s IndexedDB component; root cause is a use-after-free memory error leading to potential arbit...

CVE-2021-21128

CVE-2021-21128 is a heap buffer overflow in Blink/WebKit of the Chromium browser prior to 88.0.4324.96. Per the Arch/DEBIAN security entries, this is a Chromium/browser component issue that could enable arbitrary code execution and is fixed in newer Chromium builds (upstream or downstream) after ...

CVE-2021-21135

CVE-2021-21135 corresponds to an incorrect implementation in the Performance API of Chromium/Chrome prior to 88.0.4324.96. The flaw allows a remote attacker to leak cross-origin data via a crafted HTML page. The issue is tied to the Chromium browser, with advisories and package updates in distrib...

CVE-2021-21197

CVE-2021-21197 describes a heap buffer overflow in the TabStrip component of Google Chrome before 89.0.4389.114, enabling a remote attacker to potentially corrupt the heap via a crafted HTML page. Connected sources (Debian security advisories and Astra Linux bulletin) corroborate the same tab-imp...

CVE-2021-30585

CVE-2021-30585 is a use-after-free in the sensor handling of the Chromium browser engine used by Google Chrome on Windows, before version 92.0.4515.107. A crafted HTML page could trigger a heap corruption that a remote attacker could exploit. Public documents consistently describe the vulnerabili...

CVE-2025-5958

CVE-2025-5958 affects Google Chrome (Chromium base). The vulnerability is a use-after-free in the Media component, which could allow a remote attacker to cause heap corruption via a crafted HTML page. Affected versions are prior to 137.0.7151.103. Google released a fix in the 137.0.7151.103 stabl...

CVE-2019-5767

CVE-2019-5767 affects Google Chrome on Android (WebAPKs). The issue is caused by insufficient protection of the permission UI in WebAPKs, allowing an attacker who persuades a user to install a malicious APK to access privacy/security sensitive web APIs. Affected: Chrome on Android with WebAPK per...

CVE-2019-5771

CVE-2019-5771 : An incorrect JIT of GLSL shaders in SwiftShader used by Google Chrome prior to 72.0.3626.81 allows a remote attacker to execute arbitrary code via a crafted HTML page. This is fixed in Chrome 72.0.3626.81 and later. The vulnerability affects SwiftShader’s GLSL JIT within Chrome; n...

CVE-2021-21119

CVE-2021-21119 : A use-after-free in the Media component of Google Chrome/Chromium prior to 88.0.4324.96 could allow a remote attacker who had compromised the renderer process to potentially exploit heap corruption via a crafted HTML page. The issue affects Chromium-based browsers and was noted a...

CVE-2021-21192

CVE-2021-21192 refers to a heap buffer overflow in the Chrome tab groups implementation, allowing a remote attacker to potentially trigger heap corruption via a crafted HTML page. Affected product: Google Chrome (tab groups feature). Vulnerable component: tab groups code path handling HTML-driven...

CVE-2021-30528

CVE-2021-30528 is a use-after-free vulnerability in the Chromium WebAuthentication component (Chromium/Google Chrome) on Android, before version 91.0.4472.77. The issue can allow a remote attacker who has compromised the renderer process of a user who saved a credit card in their Google account t...

CVE-2022-1128

CVE-2022-1128 affects Google Chrome on Windows and is caused by an inappropriate implementation of the Web Share API. The issue allows a crafted HTML page on a local network segment to leak cross-origin data. The vulnerability is tied to Chrome versions prior to 100.0.4896.60. The CVSS v3.1 vecto...

CVE-2022-2161

CVE-2022-2161 targets Google Chrome/Chromium WebApp Provider. Description and connected sources confirm a Use-after-free in the WebApp Provider module, enabling heap corruption via user interactions. Affected software is Chrome/Chromium prior to version 103.0.5060.53 (stable channel updates refer...

CVE-2023-5850

The CVE-2023-5850 issue affects Google Chrome/Chromium prior to version 119.0.6045.105, caused by an Incorrect security UI in the Downloads feature that can allow domain spoofing through a crafted domain name. The vulnerability is described as a medium-severity Chromium security issue and is addr...

CVE-2026-12453

CVE-2026-12453 affects Google Chrome (Chromium-based) prior to 149.0.7827.155. The issue is insufficient validation of untrusted input in Input, allowing a renderer process account-compromised page to bypass the same-origin policy via a crafted HTML page. Practical impact stated is the bypass of ...

CVE-2021-21161

CVE-2021-21161 is a reported heap buffer overflow in the Chromium browser’s TabStrip component, fixed in versions before 89.0.4389.72 (vulnerable prior to that update). The issue allows a remote attacker to potentially cause heap corruption via a crafted HTML page. In practice, updates to Chromiu...

CVE-2021-21209

CVE-2021-21209 concerns the Google Chrome storage API: an inappropriate implementation allowed a remote attacker to leak cross-origin data via a crafted HTML page in Chrome versions prior to 90.0.4430.72. The issue is documented across multiple advisories, noting it as an information-disclosure v...

CVE-2021-30525

CVE-2021-30525 describes a use-after-free in the Chromium browser's TabGroups component prior to 91.0.4472.77. A remote attacker could trigger heap corruption by convincing a user to install a crafted HTML page via a malicious extension. The issue is part of a broader set of Chromium vulnerabilit...

CVE-2021-30531

CVE-2021-30531: A CSP policy enforcement issue in the Chromium/Google Chrome component before 91.0.4472.77 allowed remote attackers to bypass content security policy via a crafted HTML page. Affected product: Chromium/Chrome browser; vulnerable component: Content Security Policy enforcement in th...

CVE-2021-30573

CVE-2021-30573 affects the GPU component of Chromium/Chrome before version 92.0.4515.107. It is described as a use-after-free issue that could allow a remote attacker to trigger heap corruption via a crafted HTML page, with remote code execution and content impact stated in several advisories. Ex...

CVE-2021-30578

CVE-2021-30578 concerns the Chromium-based Chrome/Chromium media component. The issue is an uninitialized use in the Media module prior to version 92.0.4515.107, enabling a remote attacker to trigger out-of-bounds memory access via a crafted HTML page. Exploitation would require delivering the pa...