CVE-2021-30594

CVE-2021-30594 affects Chromium-derived browsers (Page Info UI) with a use-after-free in the Page Info UI component before version 92.0.4515.131. The issue is described in connected advisories as a Chromium engine vulnerability that could allow heap-type corruption via crafted interactions, with ...

CVE-2022-4186

CVE-2022-4186 affects Google Chrome/Chromium, describing insufficient validation of untrusted input in Downloads. Prior to 108.0.5359.71, an attacker who convinces a user to install a malicious extension could bypass Download restrictions via a crafted HTML page. The CVE is labeled Medium severit...

CVE-2023-4352

CVE-2023-4352 is a Type Confusion in V8 affecting Google Chrome and other Chromium-based browsers prior to 116.0.5845.96, enabling potential heap corruption via a crafted HTML page. The CVE is rated High (8.8) with network attack vector, low complexity, requiring user interaction, and impacts to ...

CVE-2019-5819

CVE-2019-5819 corresponds to a vulnerability in Chromium/Google Chrome's Developer Tools. The root cause is insufficient data validation in the Developer Tools before version 74.0.3729.108, allowing a local attacker to execute arbitrary code by processing a crafted string copied to the clipboard....

CVE-2020-16015

CVE-2020-16015 affects Google Chrome/Chromium, specifically the WASM component. The issue is described as insufficient data validation in WASM prior to 87.0.4280.66, which could allow a remote attacker to trigger heap corruption via a crafted HTML page. Multiple connected sources corroborate that...

CVE-2020-16043

CVE-2020-16043 affects Chromium-based browsers (e.g., Chrome) before version 87.0.4280.141 . The issue is an insufficient data validation in networking that could allow a remote attacker to bypass discretionary access control via malicious network traffic. Impact per sources: remote code/impact r...

CVE-2020-6515

CVE-2020-6515 describes a use-after-free in the tab strip of Google Chrome/Chromium prior to version 84.0.4147.89, potentially enabling remote code execution via a crafted HTML page and heap corruption. The connected documents confirm (1) affected product line: Google Chrome/Chromium; (2) vulnera...

CVE-2020-6544

CVE-2020-6544 affects Google Chrome (media component) with a use-after-free in media leading to potential heap corruption via a crafted HTML page. The vulnerability is exploitable remotely and, per the supplied documents, is addressed by upgrading to Chrome 84.0.4147.125 or newer. Connected advis...

CVE-2020-6562

CVE-2020-6562 affects Blink in Google Chrome; root cause is insufficient policy enforcement. A crafted HTML page could leak cross-origin data. Affected: Chrome before 85.0.4183.83. Fix: update to 85.0.4183.83 or newer (as per connected advisories).

CVE-2020-6565

CVE-2020-6565 affects Google Chrome on iOS (Omnibox/URL bar). Insecure/improper Omnibox handling allowed a remote attacker to spoof the URL bar contents using a crafted HTML page. Root cause: inappropriate Omnibox implementation. Impact: spoofed UI; potential user deception. Remediation: update t...

CVE-2021-21167

CVE-2021-21167 affects Google Chrome prior to 89.0.4389.72, with a use-after-free in the bookmarks component that can lead to heap corruption via a crafted HTML page. Affected software is the Chromium-based browser (Chrome); root cause is a use-after-free condition in bookmarks. Impact stated: re...

CVE-2021-21180

CVE-2021-21180 is a use-after-free vulnerability in Google Chrome’s tab search component, allowing a remote attacker to potentially trigger heap corruption via a crafted HTML page. The publicly documented impact is a remote code execution/heap corruption risk, with the vulnerability existing in C...

CVE-2022-0980

CVE-2022-0980 describes a use-after-free vulnerability in Google Chrome’s New Tab Page, exploitable when a user is convinced to install a malicious extension, potentially enabling heap corruption through specific interactions. The issue affects Chrome prior to 99.0.4844.74; Google’s Stable Channe...

CVE-2022-1640

CVE-2022-1640 is a Google Chrome/Chromium vulnerability: a Use-after-free in Sharing path in Chrome prior to version 101.0.4951.64 could enable heap corruption when a user interacted with a crafted HTML page. The issue is listed in Chrome’s May 2022 stable-channel update (and Debian/Gentoo/Fedora...

CVE-2022-2478

CVE-2022-2478 is a Google Chrome vulnerability (Use-after-free in PDF handling) that allows a remote attacker to potentially cause heap corruption via a crafted HTML page. The issue affects Chrome prior to 103.0.5060.134; exploitation aligns with a network attack vector and requires user interact...

CVE-2022-3889

CVE-2022-3889 : Type Confusion in V8 affecting Google Chrome/Chromium prior to 107.0.5304.106, leading to potential heap corruption via a crafted HTML page. Root cause: type confusion in V8. Impact: remote attacker could exploit to compromise memory; Chromium security rating: High. Affected produ...

CVE-2023-1213

CVE-2023-1213 describes a use-after-free in SwiftShader within Google Chrome/Chromium before 111.0.5563.64, allowing a remote attacker to potentially cause heap corruption via a crafted HTML page. The issue has high severity (CVSS 3.1: AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H). Affected component is C...

CVE-2023-2460

CVE-2023-2460 is a Chromium/Chrome family issue: insufficient validation of untrusted input in Extensions could let a user-installed malicious extension bypass file access checks via a crafted HTML page. The vulnerability affects Google Chrome (and Chromium-based builds) up to version 113.0.5672....

CVE-2024-2886

The CVE-2024-2886 entry concerns a use-after-free in WebCodecs within Google Chrome, exploitable via a crafted HTML page to achieve arbitrary read/write. Affected software is Google Chrome (WebCodecs) with the vulnerable intake prior to version 123.0.6312.86. The impact is high (network attack ve...

CVE-2019-13660

CVE-2019-13660 affects Chromium/Google Chrome prior to 77.0.3865.75. Root cause: a user interface issue in full screen mode enabling UI spoofing of notifications via a crafted HTML page. Published details in Debian security advisory (CVE-2019-13660) and similar vendor advisories indicate remediat...

CVE-2020-6567

CVE-2020-6567 involves Google Chrome (Windows) prior to 85.0.4183.83, where insufficient validation of untrusted input in command line handling allowed bypassing navigation restrictions via a crafted HTML page. Connected advisories confirm Chromium updates to 85.0.4183.83 or later as the fix (e.g...

CVE-2020-6575

The CVE-2020-6575 vulnerability affects Google Chrome’s Mojo component in the renderer path, described as a race condition that could allow a sandbox escape when a crafted HTML page is loaded. The issue requires the renderer process to be compromised to exploit the sandbox escape vector. Exploita...

CVE-2021-21106

The CVE-2021-21106 issue affects Chromium-based browsers (e.g., Google Chrome up to 87.0.4280.141 and related Chromium builds) and is caused by a use-after-free in the autofill component. This vulnerability could allow a remote attacker who has compromised the renderer process to escape the sandb...

CVE-2021-21138

CVE-2021-21138 is a use-after-free in the Chromium DevTools component (Chromium before 88.0.4324.96) that could allow a local attacker to escape the sandbox via a crafted file. Public sources in the connected documents confirm the issue and its association with DevTools, and note that a fix is in...

CVE-2021-21174

CVE-2021-21174 is an implementation error in the Referrer policy handling in Chromium/Google Chrome before 89.0.4389.72, allowing a remote attacker to bypass navigation restrictions via a crafted HTML page. Affected product: Chromium/Chrome (referrer policy component). Root cause: inappropriate/r...

CVE-2022-0977

CVE-2022-0977 is a Use-After-Free in Chrome OS Browser UI affecting Google Chrome on Chrome OS before 99.0.4844.74, enabling heap corruption via a crafted HTML page when a user engages in specific interactions. The issue is part of a family of Chrome/Chromium UI and rendering vulnerabilities that...

CVE-2022-1138

CVE-2022-1138 affects Google Chrome (Chromium-based) before 100.0.4896.60. The vulnerability is caused by an inappropriate implementation in the Web Cursor component, which could allow a remote attacker with renderer access to obscure the Omnibox (URL bar) via a crafted HTML page. Remediation per...

CVE-2022-4195

CVE-2022-4195 stems from insufficient policy enforcement in Safe Browsing within Google Chrome. The vulnerability allows a remote attacker to bypass Safe Browsing warnings via a malicious file, affecting Chrome versions prior to 108.0.5359.71. The Chrome 108 release notes acknowledge this and lis...

CVE-2023-3598

CVE-2023-3598 describes an out-of-bounds read/write flaw in ANGLE used by Google Chrome/Chromium prior to version 114.0.5735.90, potentially enabling heap corruption via a crafted HTML page and allowing remote code execution or crash. Connected sources (Astra Linux, Fedora advisories) confirm aff...

CVE-2023-6112

CVE-2023-6112: Use-after-free in Navigation in Google Chrome/Chromium (

CVE-2020-15988

CVE-2020-15988 affects Chromium/Google Chrome on Windows prior to 86.0.4240.75, where insufficient policy enforcement in the downloads component could allow a remote attacker to bypass download restrictions and execute arbitrary code via a crafted HTML page if the user is tricked into opening a d...

CVE-2020-6548

CVE-2020-6548: Heap buffer overflow in Skia within Google Chrome prior to 84.0.4147.125. A remote attacker who gains control of the renderer process could exploit heap corruption via a crafted HTML page. Affected product: Chrome/Chromium with Skia integration. Impact: potential arbitrary code exe...

CVE-2021-21151

CVE-2021-21151 is a use-after-free vulnerability in the Payments component of Chromium/Google Chrome, exploitable before version 88.0.4324.182. The issue could enable a remote attacker to potentially escape the sandbox, enabling arbitrary code execution. Affected product: Chromium-based browser (...

CVE-2021-30603

CVE-2021-30603 concerns a data race in WebAudio for Google Chrome. The vulnerability is triggered in Chrome versions prior to 92.0.4515.159 via a crafted HTML page, potentially enabling heap corruption on a remote attacker. Affected component is WebAudio within Chrome’s rendering stack; root caus...

CVE-2021-37979

CVE-2021-37979 is a Chrome/Chromium-related vulnerability describing a heap buffer overflow in the WebRTC component of the Chromium engine (before version 94.0.4606.81). The issue could allow a remote attacker to trigger heap corruption by convincing a user to visit a malicious page containing cr...

CVE-2022-4188

CVE-2022-4188 affects Google Chrome on Android before 108.0.5359.71, due to insufficient validation of untrusted input in CORS. This allowed a remote attacker to bypass the same-origin policy via a crafted HTML page. The issue is categorized as Medium severity (CVSS 3.1: 4.3). A fix was released ...

CVE-2023-1217

CVE-2023-1217 describes a stack buffer overflow in Chrome’s crash reporting on Windows prior to 111.0.5563.64. A remote attacker who already compromised a renderer process could read potentially sensitive data from the process memory via a crafted HTML page. The available connected data confirms ...

CVE-2024-2400

CVE-2024-2400 describes a use-after-free in Chrome/Chromium’s Performance Manager, allowing a remote attacker to potentially corrupt heap via a crafted HTML page. Affected software includes Google Chrome and Chromium, with vulnerable iterations prior to version 122.0.6261.128. The underlying issu...

CVE-2026-9116

CVE-2026-9116: In Google Chrome, insufficient policy enforcement in ServiceWorker before version 148.0.7778.179 allows a remote attacker to leak cross-origin data via a crafted HTML page. Affects Chrome’s ServiceWorker component; impact stated as Confidentiality impact (partial) with a CVSS v3.1 ...

CVE-2020-15971

CVE-2020-15971 is a use-after-free in the printing component of Chromium/Google Chrome before 86.0.4240.75. A remote attacker who has compromised the renderer could potentially escape the sandbox via a crafted HTML page, as described in multiple sources (Debian/Arch/FreeBSD summaries). Public dis...

CVE-2020-15973

CVE-2020-15973: Insufficient policy enforcement in the extensions component of Google Chrome (Chromium) prior to 86.0.4240.75 allowed an attacker, by convincing a user to install a malicious extension, to bypass the same-origin policy. Public advisories (Debian, FreeBSD, Arch Linux) confirm the i...

CVE-2020-15975

CVE-2020-15975 affects Chromium/Google Chrome before 86.0.4240.75, caused by an integer overflow in the SwiftShader component that could enable remote code execution via crafted HTML. Debian/Arch advisories confirm the vulnerability in SwiftShader with the fix to version 86.0.4240.75 (or later) a...

CVE-2020-6400

CVE-2020-6400 refers to an inappropriate CORS implementation in Google Chrome prior to 80.0.3987.87, enabling a remote attacker to leak cross-origin data via a crafted HTML page. The vulnerability affects Chrome’s cross-origin resource sharing handling and is addressed by updating to Chrome 80.0....

CVE-2020-6532

CVE-2020-6532 affects Google Chrome (SCTP use-after-free) prior to version 84.0.4147.105. The root cause is a use-after-free in SCTP handling, which could allow remote code execution via a crafted HTML page (heap corruption). Public advisories in connected docs confirm the issue and list affected...

CVE-2020-6535

CVE-2020-6535 affects Google Chrome/WebUI where insufficient data validation in the WebUI allowed a renderer-compromised attacker to inject scripts/HTML into a privileged page via a crafted HTML page. The vulnerability targets Chrome versions prior to 84.0.4147.89. Public sources in connected doc...

CVE-2020-6541

The CVE-2020-6541 entry concerns a Use-after-free in WebUSB in Google Chrome prior to version 84.0.4147.105 . The underlying issue could allow a remote attacker to potentially exploit a heap corruption via a crafted HTML page. Affected software is Chrome’s WebUSB component; exploitability is desc...

CVE-2021-21173

CVE-2021-21173 describes a side-channel information leakage in Google Chrome/Chromium’s Network Internals, allowing a remote attacker to leak cross-origin data via a crafted HTML page. Affected component: Network Internals in Chromium before version 89.0.4389.72. Root cause: side-channel informat...

CVE-2023-0696

CVE-2023-0696 describes a Type Confusion in V8 affecting Google Chrome/Chromium prior to 110.0.5481.77, enabling potential heap corruption via a crafted HTML page. The Chrome/Chromium release notes confirm security fixes for this and related CVEs, with Chrome 110.0.5481.77+ addressing the issue. ...

CVE-2020-16019

CVE-2020-16019 is an issue in the Chromium filesystem component described as an inappropriate implementation that allowed a remote attacker, who had already compromised the browser process, to bypass noexec restrictions via a malicious file. Connected sources confirm the vulnerability affects Chr...

CVE-2020-6574

CVE-2020-6574 affects Chromium-based Chrome on macOS before 85.0.4183.102, due to insufficient policy enforcement in the installer that could allow a local privilege-escalation via a crafted binary. Several connected advisories confirm the issue and cite upgrades to at least 85.0.4183.102 (or lat...