CVE-2020-6518

CVE-2020-6518: Use-after-free in Google Chrome’s developer tools prior to 84.0.4147.89, enabling a remote attacker who entices a user to use devtools to potentially trigger heap corruption via a crafted HTML page. Affected product: Google Chrome (Developer Tools). Root cause: use-after-free in de...

CVE-2020-6539

CVE-2020-6539 refers to a use-after-free in CSS handling in Google Chrome prior to 84.0.4147.105, enabling potential remote code execution via a crafted HTML page. The vulnerability affects Chrome’s CSS engine and could allow heap corruption leading to arbitrary code execution, with impact descri...

CVE-2020-6543

CVE-2020-6543 affects Google Chrome/Chromium and is a use-after-free in the task scheduling path that could allow a remote attacker to abuse heap corruption via a crafted HTML page. The vulnerability is described as potentially enabling remote code execution with network attack surface and requir...

CVE-2021-21129

CVE-2021-21129 describes a policy-enforcement vulnerability in Chromium’s File System API, prior to version 88.0.4324.96, enabling a remote attacker to bypass filesystem restrictions via a crafted HTML page. Root cause: insufficient policy enforcement in the File System API. Impact stated by sour...

CVE-2021-30579

CVE-2021-30579 is a use-after-free vulnerability in the Chromium-based UI framework of Google Chrome prior to 92.0.4515.107. The issue could allow a remote attacker to trigger heap corruption via a crafted HTML page, with the impact described as remote code execution and potential content spoofin...

CVE-2022-4189

CVE-2022-4189 relates to Google Chrome/Chromium: Insufficient policy enforcement in DevTools that could let a user who installs a malicious extension bypass navigation restrictions via a crafted Chrome Extension. The issue is documented with a Medium severity (CVSS v3.1 base score 4.3) and is add...

CVE-2023-6351

CVE-2023-6351 describes a use-after-free in libavif used by Google Chrome before 119.0.6045.199, allowing a remote attacker to cause heap corruption via a crafted AVIF file. Affected product/component: Google Chrome/Chromium with libavif. Root cause: use-after-free in libavif leading to possible ...

CVE-2020-15964

CVE-2020-15964 is a Chrome/Chromium vulnerability affecting the media component (V8) with a pre-85.0.4183.121 build. The issue is described as an out-of-bounds write in V8 that could enable remote arbitrary code execution, tied to heap corruption in crafted HTML pages. Multiple connected advisori...

CVE-2020-15970

CVE-2020-15970 is a Use-after-free in the NFC component of the Chromium/Google Chrome browser before 86.0.4240.75. Public sources in Debian/Arch/Fedora/FreeBSD describe it as a remote issue where an attacker who can cause renderer compromise could potentially escape the sandbox via a crafted HTML...

CVE-2020-6383

CVE-2020-6383 is a type confusion in Google Chrome's V8 engine that could allow a remote attacker to cause heap corruption via a crafted HTML page. The initial entry notes Chrome versions prior to 80.0.3987.116 were affected. The connected Chrome update (Stable Channel Update for Desktop) confirm...

CVE-2020-6549

CVE-2020-6549 : Use-after-free in Chrome’s media subsystem (pre-84.0.4147.125) can allow a remote attacker to exploit heap corruption via a crafted HTML page. Affected: Google Chrome (media component). Root cause: use-after-free. Impact per sources: arbitrary code execution, information disclosur...

CVE-2021-30524

CVE-2021-30524 is a use-after-free vulnerability in the Chromium browser’s TabStrip component, reported before 91.0.4472.77. The issue, exploited via crafted HTML pages, could allow a remote attacker to potentially execute arbitrary code when a user is persuaded to install a malicious extension. ...

CVE-2021-30567

CVE-2021-30567 is a use-after-free in Chromium’s DevTools before 92.0.4515.107. It can allow heap corruption via a specific user gesture after convincing a user to open DevTools. Affected software is Chromium/Chrome (DevTools component). Impact: potential remote code execution or instability as d...

CVE-2021-30601

CVE-2021-30601: A use-after-free in Chrome’s Extensions API affects Google Chrome versions prior to 92.0.4515.159. An attacker convincing a user to install a malicious extension could potentially exploited heap corruption via a crafted HTML page. Affected component: Chrome Extensions API; root ca...

CVE-2022-2479

CVE-2022-2479 affects Google Chrome/Chromium, with insufficient validation of untrusted input in a file-context on Android before version 103.0.5060.134. An attacker could entice a user to install a malicious app and, via a crafted HTML page, read potentially sensitive information from internal f...

CVE-2023-0931

CVE-2023-0931 is a confirmed use-after-free in Video handling of Google Chrome/Chromium before 110.0.5481.177, exploitable via a crafted HTML page to potentially cause heap corruption. Affected component: Video (Chromium rendering/Media pipeline). Root cause: use-after-free in Video path, enablin...

CVE-2023-0941

CVE-2023-0941 is referenced in connected Astra Linux security notes as a Use-after-free in Prompts vulnerability affecting Google Chrome/Chromium before version 110.0.5481.177 . The issue could enable a remote attacker to potentially cause heap corruption via a crafted HTML page (Chromium securit...

CVE-2024-9962

CVE-2024-9962 concerns Google Chrome prior to version 130.0.6723.58, where an improper permissions implementation could allow a remote attacker to cause UI spoofing by convincing a user to perform specific UI gestures on a crafted HTML page. The vulnerability impacts Chrome/Chromium components an...

CVE-2025-8879

CVE-2025-8879 is a heap buffer overflow in libaom used by Google Chrome/Chromium prior to 139.0.7258.127. The vulnerability allows remote exploitation via a curated set of gestures, leading to heap corruption with high impact (execution of code, crash). Affected component: libaom integration in C...

CVE-2020-15966

CVE-2020-15966 refers to Google Chrome where insufficient policy enforcement in extensions prior to 85.0.4183.121 could allow a user-driven attacker to obtain potentially sensitive information by convincing a user to install a malicious extension. Public disclosures in Debian/Arch/Fedora security...

CVE-2021-21181

CVE-2021-21181 is a side-channel information leakage vulnerability in Chrome Autofill. The connected Debian security advisories confirm this CVE among a chromium set and state that fixes are available in Chrome 89.x (mitigated in Debian packages as 89.0.4389.114 and later). The Astra Linux bullet...

CVE-2021-21190

CVE-2021-21190 affects the PDFium component in Google Chrome prior to 89.0.4389.72, where uninitialized data in PDFium could allow a remote attacker to glean potentially sensitive information from a process’s memory via a crafted PDF file. The connected advisories confirm the issue and note the v...

CVE-2022-2606

CVE-2022-2606 describes a use-after-free in Chrome/Chromium’s Managed devices API, allowing a remote attacker to potentially trigger heap corruption when a user enables a specific Enterprise policy and loads a crafted HTML page. Affected products are Google Chrome/Chromium prior to version 104.0....

CVE-2022-3889

CVE-2022-3889 : Type Confusion in V8 affecting Google Chrome/Chromium prior to 107.0.5304.106, leading to potential heap corruption via a crafted HTML page. Root cause: type confusion in V8. Impact: remote attacker could exploit to compromise memory; Chromium security rating: High. Affected produ...

CVE-2023-1214

CVE-2023-1214 affects Chromium/Google Chrome prior to 111.0.5563.64, due to a V8 type confusion that could enable remote heap corruption via a crafted HTML page. The connected Astra Linux bulletin confirms the same description and identifies the vulnerable line of Chromium prior to the 111.0.5563...

CVE-2020-15960

CVE-2020-15960 refers to an information-disclosure vulnerability in Chromium/Google Chrome prior to 85.0.4183.121. The 15960 issue is an out-of-bounds read in the storage component, exploitable via a crafted HTML page. The Debian/Arch/Gentoo entries corroborate the fix was to upgrade to 85.0.4183...

CVE-2020-15974

CVE-2020-15974 is an integer overflow in Blink affecting Chromium/Google Chrome prior to 86.0.4240.75, potentially enabling arbitrary code execution or site‑isolation bypass as described in the linked Debian advisory. Debian notes a broader patch set and fixes in 87.0.4280.88-0.4~deb10u1 for Chro...

CVE-2020-15989

CVE-2020-15989 affects the PDFium component in Chromium/Google Chrome, where uninitialized data could allow a crafted PDF file to disclose potentially sensitive information from process memory. This vulnerability is tied to the Chromium baseline before 86.0.4240.75 (reported in multiple advisorie...

CVE-2020-15991

CVE-2020-15991: Use-after-free in the password manager of Chromium/Google Chrome before 86.0.4240.75 allows a remote attacker who can render HTML in the renderer to potentially escape the sandbox. The Debian/Fedora/Arch security advisories and FreeBSD/vuxml entries confirm this vulnerability and ...

CVE-2020-6557

CVE-2020-6557 affects Chromium prior to 86.0.4240.75. The vulnerability arises from an inappropriate implementation in the networking component, enabling domain spoofing via a crafted HTML page. Public documents in connected sources confirm the issue and recommend upgrading Chromium to 86.0.4240....

CVE-2021-21113

CVE-2021-21113 refers to a heap buffer overflow in the Skia component of the Chromium-based Chromium/Google Chrome stack, reported as affecting versions before 87.0.4280.141. The vulnerability can allow a remote attacker to potentially cause heap corruption through a crafted HTML page. The connec...

CVE-2021-21162

CVE-2021-21162: Use-after-free in Chromium’s WebRTC before 89.0.4389.72. Affects the WebRTC component; root cause is a use-after-free leading to potential heap corruption exploitable by a crafted HTML page. Exploitation status not detailed in the provided docs beyond the CVE entry. Remediation: u...

CVE-2021-30568

CVE-2021-30568 corresponds to a heap buffer overflow in WebGL within the Chromium-based Chromium/Chrome engine, affecting versions prior to 92.0.4515.107. The vulnerability is triggered by processing a crafted HTML page and could enable remote code execution through heap corruption. The Astra Lin...

CVE-2022-1133

CVE-2022-1133 is a use-after-free in WebRTC Perf in Google Chrome prior to 100.0.4896.60, which could allow a remote attacker to cause heap corruption via a crafted HTML page. The Chrome 100.0.4896.60 update patches this issue; users and administrators should apply the Chrome update to mitigat e ...

CVE-2023-1220

The CVE-2023-1220 entry is confirmed to be a heap buffer overflow in UMA within Google Chrome (Chromium) prior to 111.0.5563.64. The vulnerability could be triggered by a remote attacker who has compromised the renderer process through a crafted HTML page, potentially causing heap corruption. Con...

CVE-2024-1939

CVE-2024-1939 affects Google Chrome's V8 engine (prior to Chrome 122.0.6261.94). It describes a Type Confusion in V8 that can lead to heap corruption via a crafted HTML page, potentially enabling remote code execution. The connected exploit content attributes the root cause to wasmS128 handling a...

CVE-2026-14129

The CVE-2026-14129 entry concerns Google Chrome on Android. An inappropriate implementation in the PreviewTab component allows a remote attacker to perform UI spoofing through a crafted HTML page after convincing the user to perform specific UI gestures. The issue is fixed in Chrome/Chromium upda...

CVE-2020-15976

CVE-2020-15976 is a use-after-free in the WebXR component of Chromium/Google Chrome (Android) prior to 86.0.4240.75, potentially enabling heap corruption and arbitrary code execution via a crafted HTML page. Remediation from connected sources includes upgrading to Chromium 86.0.4240.75 or newer (...

CVE-2020-16003

CVE-2020-16003 is a Chrome vulnerability: Use after free in the printing component. The connected data confirms Chrome/Chromium fixed this issue in the Chrome update cycle (reported as a use-after-free in printing), but the specific exploit details or affected versions beyond the prior 86.0.4240....

CVE-2020-6556

CVE-2020-6556 describes a heap buffer overflow in the SwiftShader component of Google Chrome/Chromium prior to version 84.0.4147.135, enabling remote exploitation of heap corruption via a crafted HTML page. The issue affects the SwiftShader path in Chrome/Chromium and could lead to arbitrary code...

CVE-2021-21155

CVE-2021-21155 is a heap buffer overflow in the Tab Strip component of the Chromium-based Chrome/Chromium browser for Windows, before build 88.0.4324.182. The issue arises when a crafted HTML page is loaded, with a compromised renderer process potentially enabling a sandbox escape. The connected ...

CVE-2021-21164

CVE-2021-21164 (Chrome on iOS) affects Google Chrome on iOS prior to version 89.0.4389.72, due to insufficient data validation that allows a remote attacker to leak cross-origin data via a crafted HTML page. The vulnerability is tied to Chrome’s handling on iOS, with the impact described as cross...

CVE-2021-21226

CVE-2021-21226: Use-after-free in navigation in Google Chrome prior to 90.0.4430.85 allows a remote attacker who has compromised the renderer process to potentially perform a sandbox escape via a crafted HTML page. Affected software: Google Chrome (renderer/navigation path). Root cause: use-after...

CVE-2021-30575

CVE-2021-30575 affects the Chromium-based Chrome Autofill component. The vulnerability is an out-of-bounds write in the Autofill module of the Chromium browser engine before version 92.0.4515.107 . The underlying issue enables a remote attacker who can render content to potentially trigger heap c...

CVE-2022-2605

CVE-2022-2605 : Out-of-bounds read in Dawn of Google Chrome prior to 104.0.5112.79 could allow a remote attacker to potentially trigger heap corruption with a crafted HTML page. Public sources in connected documents indicate this affects Chrome/Chromium components and that fixes exist in 104.0.51...

CVE-2022-2610

CVE-2022-2610 : Concrete details across connected docs show a Chrome/Chromium vulnerability in Background Fetch due to insufficient policy enforcement, allowing a remote attacker to leak cross-origin data via a crafted HTML page. Affected software is Google Chrome (Chromium-based), with the root ...

CVE-2023-0135

Summary of CVE-2023-0135 (Google Chrome/Chromium) : A use-after-free in the Cart component of Google Chrome prior to 109.0.5414.74 allowed an attacker—if a user was convinced to install a malicious extension—to potentially trigger heap corruption via database corruption and a crafted HTML page. T...

CVE-2023-1533

CVE-2023-1533 corresponds to a use-after-free in WebProtect within Google Chrome before version 111.0.5563.110, leading to potential heap corruption via a crafted HTML page. Multiple sources (Chromium-derived advisories and Astra Linux bulletin) confirm the issue affects Chrome/Chromium component...

CVE-2023-2724

CVE-2023-2724 is a Chromium/Google Chrome type-confusion vulnerability in V8 prior to 113.0.5672.126. The issue allows a remote attacker to potentially trigger heap corruption via a crafted HTML page, with impact described as high (confidentiality, integrity, and availability). Remediation provid...

CVE-2023-4904

CVE-2023-4904 affects Google Chrome and Chromium-based derivatives, due to insufficient policy enforcement in the Downloads module. The issue allowed a remote attacker to bypass enterprise policy restrictions via a crafted download, enabling policy circumvention without requiring local privileges...