CVE-2020-6467

CVE-2020-6467 is a use-after-free vulnerability in the WebRTC component of Chromium/Google Chrome prior to 83.0.4103.61. The advisory description from the initial document states a remote attacker could potentially exploit a heap corruption via a crafted HTML page. Connected sources corroborate a...

CVE-2021-38001

CVE-2021-38001 is a type confusion in V8 of the Chromium engine (Chromium-based browsers) prior to version 95.0.4638.69. The issue could allow a remote attacker to trigger heap corruption via crafted HTML, potentially enabling arbitrary code execution. Publicly documented impact includes remote c...

CVE-2022-3656

CVE-2022-3656 affects Google Chrome/Chromium’s File System API, with Insufficient data validation that allowed bypassing file-system restrictions via a crafted HTML page. Affected: Chrome/Chromium prior to 107.0.5304.62; impact per NVD: high (CVSS 3.1: AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H; base 8....

CVE-2023-3422

The CVE-2023-3422 issue affects Chromium-based browsers (notably Google Chrome) and is triggered by a use-after-free in Guest View on versions before 114.0.5735.198. An attacker could persuade a user to install a malicious extension, potentially exploiting heap corruption via a crafted HTML page,...

CVE-2023-3727

CVE-2023-3727 is a use-after-free in WebRTC of Google Chrome/Chromium, potentially enabling remote heap corruption in versions before 115.0.5790.98. Affected product: Google Chrome (Chromium-based). Impact: high severity; remote attacker could exploit to compromise memory. Remediation: update to ...

CVE-2024-0808

The CVE-2024-0808 entry is supported by multiple connected documents: it describes an Integer underflow in Chromium’s WebUI that affects Google Chrome prior to 121.0.6167.85, enabling a remote attacker to potentially trigger heap corruption via a malicious file (High/CRITICAL via CVSS). Affected ...

CVE-2025-2135

CVE-2025-2135 corresponds to a Type Confusion in V8 used by Google Chrome, prior to 134.0.6998.88, that could lead to heap corruption via a crafted HTML page. Public materials in connected documents corroborate Chrome’s vulnerability class and Chrome version discussed in Chrome’s security updates...

CVE-2019-13718

CVE-2019-13718 corresponds to a Chrome/Chromium IDN spoofing flaw in Omnibox caused by insufficient validation of internationalized domain names (IDN homographs) in versions prior to 78.0.3904.70. Public advisories (Debian, Arch, Mageia, CNVD/CVE trackers) confirm the issue and cite a fix in 78.0...

CVE-2022-2607

CVE-2022-2607 is a use-after-free in the Tab Strip of Google Chrome on Chrome OS, prior to 104.0.5112.79, permitting heap corruption via specific user interactions. The issue affects Chrome/Chromium components on ChromeOS according to the CVE entry; Debian advisory confirms a fix in 104.0.5112.79...

CVE-2022-2611

CVE-2022-2611 : Concrete details across connected sources show an issue in the Fullscreen API in Google Chrome/Chromium where, on Android prior to 104.0.5112.79, a crafted HTML page can cause the Omnibox (URL bar) to be spoofed by a remote attacker. The affected software is Google Chrome (Android...

CVE-2023-1817

CVE-2023-1817 is a Chromium/Google Chrome issue affecting Google Chrome on Android prior to 112.0.5615.49, arising from insufficient policy enforcement in Intents. The underlying vulnerability allows a remote attacker to bypass navigation restrictions via a crafted HTML page. Public advisories re...

CVE-2023-1818

CVE-2023-1818 is a use-after-free in Vulkan within Google Chrome’s rendering stack prior to version 112.0.5615.49, enabling potential heap corruption via a crafted HTML page. The vulnerability affects Chrome’s Vulkan-related code paths and has been reflected across multiple advisories (Debian DSA...

CVE-2023-1822

CVE-2023-1822 : A vulnerability in Chromium/Google Chrome’s navigation UI allowed domain spoofing via a crafted HTML page. Affected: Chromium/Chrome before version 112.0.5615.49. Root cause: incorrect security UI in Navigation. Impact: remote attacker could spoof domain; user interaction required...

CVE-2023-2135

CVE-2023-2135 : Use-after-free in Chromium/Google Chrome DevTools prior to 112.0.5615.137 could allow a remote attacker to trigger heap corruption via a crafted HTML page after convincing a user to enable preconditions. Impact aligns with a high-severity heap corruption scenario. Affected product...

CVE-2023-2933

The CVE-2023-2933 issue affects Google Chrome/Chromium: a Use-After-Free in the PDF component could lead to heap corruption via a crafted PDF file. Root cause is use-after-free in PDF handling; impact is high (remote code execution/compromise of confidentiality, integrity, and availability) as re...

CVE-2023-3421

CVE-2023-3421 is a use-after-free in Media in Google Chrome/Chromium prior to 114.0.5735.198 that could allow a remote attacker to cause heap corruption via a crafted HTML page. The vulnerability is documented across multiple advisories confirming the affected component as Chromium’s media handli...

CVE-2023-3732

CVE-2023-3732: Out of bounds memory access in Mojo within Google Chrome before 115.0.5790.98 allows a remote attacker who has compromised the renderer process to potentially cause heap corruption via a crafted HTML page. Connected sources confirm this is a Chromium/Chrome vulnerability affecting ...

CVE-2024-0225

The CVE affects Google Chrome (Chromium/WebGPU) with a use-after-free in WebGPU, leading to potential heap corruption via a crafted HTML page. Affected versions are prior to 120.0.6099.199; remediation is to update to 120.0.6099.199 or newer, as reflected by multiple advisories (e.g., Fedora/Debi...

CVE-2026-14020

CVE-2026-14020 affects Google Chrome WebXR prior to 150.0.7871.47. The root cause is insufficient validation of untrusted input in WebXR, allowing a remote attacker who has compromised the renderer process to perform UI spoofing via a crafted HTML page. Impact is UI spoofing with medium severity ...

CVE-2020-16032

CVE-2020-16032 affects Chromium/Google Chrome prior to 87.0.4280.66 in the sharing UI. The vulnerability is described as content spoofing in the sharing component, i.e., an incorrect security UI could misrepresent content shown to users. Affected products include Chromium/Chrome, with multiple up...

CVE-2020-6466

CVE-2020-6466 is a use-after-free vulnerability in Google Chrome’s media component (pre-83.0.4103.61). The issue could allow a remote attacker who has renderer access to potentially execute arbitrary code or escape the sandbox via a crafted HTML page. Debian/Arch advisories confirm mitigation by ...

CVE-2022-1496

CVE-2022-1496 : Use-after-free in File Manager of Google Chrome before 101.0.4951.41 can allow a remote attacker to potentially exploit heap corruption via specific and direct user interaction. Affected product: Google Chrome/Chromium File Manager. Root cause: use-after-free vulnerability in File...

CVE-2022-1864

CVE-2022-1864 : In Google Chrome, a use-after-free in WebApp Installs (prior to 102.0.5005.61) can allow heap corruption when a user is convinced to install a malicious extension and performs specific interactions. The issue affects Chrome’s handling of WebApp Installs and is tied to a post-relea...

CVE-2022-1875

CVE-2022-1875 relates to Google Chrome’s PDF implementation. The vulnerability arises from an inappropriate PDF handling implementation, allowing a remote attacker to leak cross-origin data via a crafted HTML page. Affected versions are Chrome before 102.0.5005.61. Impact is cross-origin data lea...

CVE-2022-2621

CVE-2022-2621 is a use-after-free in Chrome/Chromium extensions before 104.0.5112.79 that can be triggered when a user installs a malicious extension, potentially enabling heap corruption. Affected products include Google Chrome/Chromium with the Extensions component vulnerable to the described u...

CVE-2023-0929

CVE-2023-0929 describes a use-after-free in the Vulkan component of Google Chrome/Chromium before version 110.0.5481.177, allowing a remote attacker to potentially cause heap corruption via a crafted HTML page. The issue is tied to the Vulkan path in Chromium’s render/GPU stack and is categorized...

CVE-2023-1219

CVE-2023-1219: The connected Astra Linux bulletin confirms a heap buffer overflow in Chrome/Chromium’s Metrics prior to 111.0.5563.64, allowing a renderer-compromised, remote attacker to potentially trigger heap corruption via a crafted HTML page. Affected software is Google Chrome/Chromium (Chro...

CVE-2023-2467

Google Chrome on Android prior to 113.0.5672.63 is affected by CVE-2023-2467 due to an inappropriate implementation in Prompts, which could allow a remote attacker to bypass permissions restrictions via a crafted HTML page. The impact is a permissions bypass without other code execution details p...

CVE-2020-16020

CVE-2020-16020 concerns the Chromium/Google Chrome cryptohome component. In ChromeOS builds prior to 87.0.4280.66, an attacker who already had code execution within the browser process could bypass discretionary access control via a malicious file, enabling elevated privilege effects within the b...

CVE-2020-16035

CVE-2020-16035 affects the cros-disks component in Chromium/ChromeOS before 87.0.4280.66, due to insufficient data validation. This could allow a compromised browser process to bypass noexec restrictions via a malicious file, enabling potential local or remote implications as described in multipl...

CVE-2021-30626

CVE-2021-30626 affects the ANGLE component used by Google Chrome. It describes a memory out-of-bounds access in ANGLE prior to Chrome 93.0.4577.82, which could allow a remote attacker to cause heap corruption via a crafted HTML page. The vulnerability impact is described as potentially allowing h...

CVE-2021-37963

Technical details about CVE-2021-37963 are not publicly provided in the connected documents. The sources reiterate the same description without specifics on affected products/versions beyond Chrome prior to 94.0.4606.54. Monitor for updates.

CVE-2022-1130

CVE-2022-1130 affects Google Chrome on Android, specifically the WebOTP component. The vulnerability is caused by insufficient validation of trusted input, allowing a remote attacker to send arbitrary intents from any app via a malicious app. The issue is fixed in Chrome versions 100.0.4896.60 an...

CVE-2023-4362

CVE-2023-4362 affects Google Chrome/Chromium prior to 116.0.5845.96. It is a heap buffer overflow in Mojom IDL that could allow a remote attacker who has already compromised the renderer process and gained control of a WebUI process to trigger heap corruption via a crafted HTML page, with impact ...

CVE-2024-10229

CVE-2024-10229 affects Google Chrome/Chromium via an Inappropriate implementation in Extensions that bypasses site isolation when a crafted Chrome Extension is used, prior to patch version 130.0.6723.69. Public advisories (Debian, Fedora) confirm the fix is in 130.0.6723.69-1..., and Debian/Fedor...

CVE-2024-2628

CVE-2024-2628: Google Chrome/Chromium downloads UI can be spoofed due to an inappropriate implementation in the Downloads flow. This allowed remote attackers to induce UI spoofing via a crafted URL (Impact: Medium as per CVSS). Affected software is Chromium-based (Chrome/Chromium) prior to versio...

CVE-2024-2885

Chromium-based Dawn use-after-free in Google Chrome before 123.0.6312.86 can allow a remote attacker to trigger heap corruption via a crafted HTML page. Affected component: Dawn in Chrome/Chromium. Root cause: use-after-free in Dawn logic. Impact: high (confidentiality, integrity, availability). ...

CVE-2026-13947

CVE-2026-13947 concerns Google Chrome’s XR handling. The vulnerability is described as an uninitialized use in XR that affects Chrome prior to version 150.0.7871.47 . A remote attacker who had already compromised the renderer process could potentially read sensitive information from the process m...

CVE-2019-5874

The connected Debian/Fedora entries confirm CVE-2019-5874 is a Chromium/Chrome vulnerability related to insufficient filtering in external URI handling. Root cause: inadequate filtering of URI schemes in chrome's navigation logic, allowing a crafted HTML page to bypass navigation restrictions. Im...

CVE-2020-16029

CVE-2020-16029 is an access restriction bypass in PDFium used by Chromium/Chrome prior to version 87.0.4280.66. The issue is described as an inappropriate/improper implementation in PDFium that allows bypassing navigation restrictions via a crafted PDF file. Connected advisories identify the affe...

CVE-2022-1132

CVE-2022-1132 affects Google Chrome on Chrome OS; the issue is an Inappropriate implementation in Virtual Keyboard that allowed a local attacker with physical access to bypass navigation restrictions prior to Chrome OS 100.0.4896.60. The Chrome 100 stability update (100.0.4896.60) and Debian/ Mag...

CVE-2022-2617

CVE-2022-2617 affects Google Chrome/Chromium via a Use-after-Free in the Extensions API prior to 104.0.5112.79, enabling a user-assisted heap corruption path when a malicious extension is installed. Public updates exist: Debian fixes Chromium to 104.0.5112.79-1~deb11u1; Fedora/GLSA advisories sho...

CVE-2024-0333

CVE-2024-0333 involves Google Chrome/Chromium where the vulnerability resides in the Extensions subsystem. The root cause is insufficient data validation in Extensions, allowing a crafted HTML page to cause installation of a malicious extension when the user is in a privileged network position. A...

CVE-2026-13034

Vulnerability summary (CVE-2026-13034). In Google Chrome, an inappropriate implementation in the Passwords component before version 149.0.7827.197 allows a remote attacker who has compromised the renderer process to bypass site isolation via a crafted HTML page. The issue is tied to Chromium’s se...

CVE-2026-13860

Google Chrome on Windows is affected by CVE-2026-13860 due to an Incorrect security UI in Autofill, allowing UI spoofing when a user is induced to perform specific UI gestures via a crafted HTML page. The issue affects Chrome versions prior to 150.0.7871.47; exploitation requires user interaction...

CVE-2026-14116

The vulnerability CVE-2026-14116 affects Google Chrome DevTools. The root cause is insufficient validation of untrusted input in DevTools, allowing a remote attacker to leak cross-origin data through a crafted HTML page when a user is guided to perform specific UI gestures. Impact is cross-origin...

CVE-2022-0459

CVE-2022-0459 concerns a use-after-free vulnerability in Chrome’s Screen Capture code, leading to potential heap corruption. The issue affects Chrome/Chromium prior to version 98.0.4758.80, with exploitation described as requiring a crafted HTML page and user interaction to trigger the vulnerabil...

CVE-2023-1819

CVE-2023-1819 is an information-disclosure flaw in Google Chrome/Chromium Accessibility: an out-of-bounds memory read via a crafted HTML page. Affected: Google Chrome/Chromium (Accessibility component). Root cause: out-of-bounds read. Impact: potential confidential data exposure (C: High, I/N). E...

CVE-2024-0518

The CVE-2024-0518 entry concerns a type confusion in V8 used by Google Chrome/Chromium prior to version 120.0.6099.224, which could allow a remote attacker to potentially trigger heap corruption via a crafted HTML page. Connected sources confirm Chromium/Chrome vulnerability details and indicate ...

CVE-2026-15124

CVE-2026-15124 affects Google Chrome; vulnerability in the Passwords component due to insufficient policy enforcement allows a remote attacker to bypass the same-origin policy via a crafted HTML page. Impact is a cross-origin bypass as described in the public advisories. Remediation: update to Ch...