CVE-2023-2933

The CVE-2023-2933 issue affects Google Chrome/Chromium: a Use-After-Free in the PDF component could lead to heap corruption via a crafted PDF file. Root cause is use-after-free in PDF handling; impact is high (remote code execution/compromise of confidentiality, integrity, and availability) as re...

CVE-2023-3732

CVE-2023-3732: Out of bounds memory access in Mojo within Google Chrome before 115.0.5790.98 allows a remote attacker who has compromised the renderer process to potentially cause heap corruption via a crafted HTML page. Connected sources confirm this is a Chromium/Chrome vulnerability affecting ...

CVE-2024-0333

CVE-2024-0333 involves Google Chrome/Chromium where the vulnerability resides in the Extensions subsystem. The root cause is insufficient data validation in Extensions, allowing a crafted HTML page to cause installation of a malicious extension when the user is in a privileged network position. A...

CVE-2024-1077

CVE-2024-1077 affects Google Chrome/Chromium’s Network module, with a use-after-free in the Network component leading to potential heap corruption via a malicious file. Vulnerable condition exists prior to version 121.0.6167.139. Debian Fedora advisories and Alpine/Linux security trackers referen...

CVE-2019-13673

CVE-2019-13673 affects Google Chrome/Chromium: insufficient data validation in developer tools allowed a remote attacker to leak cross-origin data via a crafted HTML page. Fixes are shipped in Chromium/Chrome updates (e.g., Debian security advisory lists Chromium versions 78.0.3904.97+ and relate...

CVE-2019-13708

CVE-2019-13708 affects Google Chrome/Chromium prior to 78.0.3904.70, describing an authentication spoofing issue in which HTTP authentication or omnibox-related UI could be spoofed due to an inconsistent navigation implementation. Public connected sources corroborate that this vulnerability was a...

CVE-2019-13746

CVE-2019-13746 affects Google Chrome Omnibox: Insufficient policy enforcement in Omnibox prior to 79.0.3945.79 allows a remote attacker to spoof the URL bar via a crafted HTML page. Affected: Chrome/Chromium Omnibox (policy enforcement in URL bar). Impact: spoofing of Omnibox contents; no other i...

CVE-2020-16032

CVE-2020-16032 affects Chromium/Google Chrome prior to 87.0.4280.66 in the sharing UI. The vulnerability is described as content spoofing in the sharing component, i.e., an incorrect security UI could misrepresent content shown to users. Affected products include Chromium/Chrome, with multiple up...

CVE-2022-0469

CVE-2022-0469 refers to a use-after-free in Cast within Google Chrome (pre-98.0.4758.80). The underlying issue allows a remote attacker to potentially trigger heap corruption through a crafted HTML page when a user is persuaded to perform specific interactions. The CVE entry is corroborated by mu...

CVE-2023-1817

CVE-2023-1817 is a Chromium/Google Chrome issue affecting Google Chrome on Android prior to 112.0.5615.49, arising from insufficient policy enforcement in Intents. The underlying vulnerability allows a remote attacker to bypass navigation restrictions via a crafted HTML page. Public advisories re...

CVE-2023-1819

CVE-2023-1819 is an information-disclosure flaw in Google Chrome/Chromium Accessibility: an out-of-bounds memory read via a crafted HTML page. Affected: Google Chrome/Chromium (Accessibility component). Root cause: out-of-bounds read. Impact: potential confidential data exposure (C: High, I/N). E...

CVE-2023-1822

CVE-2023-1822 : A vulnerability in Chromium/Google Chrome’s navigation UI allowed domain spoofing via a crafted HTML page. Affected: Chromium/Chrome before version 112.0.5615.49. Root cause: incorrect security UI in Navigation. Impact: remote attacker could spoof domain; user interaction required...

CVE-2023-2467

Google Chrome on Android prior to 113.0.5672.63 is affected by CVE-2023-2467 due to an inappropriate implementation in Prompts, which could allow a remote attacker to bypass permissions restrictions via a crafted HTML page. The impact is a permissions bypass without other code execution details p...

CVE-2024-0804

CVE-2024-0804 affects Google Chrome/Chromium: Insufficient policy enforcement in the iOS Security UI allows a crafted HTML page to leak cross-origin data. Public references indicate the issue is tied to Chrome/Chromium’s UI policy enforcement and was addressed in Chrome 121.0.6167.85 (and related...

CVE-2024-3516

CVE-2024-3516 describes a heap buffer overflow in ANGLE used by Google Chrome, exploitable via a crafted HTML page, affecting Chrome

CVE-2018-6086

CVE-2018-6086 is a use-after-free in Google Chrome’s Networking Disk Cache caused by a double-eviction in Incognito mode. The issue affects Chrome/Chromium prior to version 66.0.3359.117 (fixed in the 66.0.3359.117 release, per Debian security advisories and the Chrome stable-channel blog). A rem...

CVE-2022-2617

CVE-2022-2617 affects Google Chrome/Chromium via a Use-after-Free in the Extensions API prior to 104.0.5112.79, enabling a user-assisted heap corruption path when a malicious extension is installed. Public updates exist: Debian fixes Chromium to 104.0.5112.79-1~deb11u1; Fedora/GLSA advisories sho...

CVE-2023-4362

CVE-2023-4362 affects Google Chrome/Chromium prior to 116.0.5845.96. It is a heap buffer overflow in Mojom IDL that could allow a remote attacker who has already compromised the renderer process and gained control of a WebUI process to trigger heap corruption via a crafted HTML page, with impact ...

CVE-2024-0222

CVE-2024-0222 involves a use-after-free in ANGLE used by Google Chrome/Chromium, allowing a remote attacker who gains renderer process access to potentially corrupt the heap via a crafted HTML page. Affected software version appears to be Chrome/Chromium up to and including 120.0.6099.199 (and Ch...

CVE-2019-13718

CVE-2019-13718 corresponds to a Chrome/Chromium IDN spoofing flaw in Omnibox caused by insufficient validation of internationalized domain names (IDN homographs) in versions prior to 78.0.3904.70. Public advisories (Debian, Arch, Mageia, CNVD/CVE trackers) confirm the issue and cite a fix in 78.0...

CVE-2020-16020

CVE-2020-16020 concerns the Chromium/Google Chrome cryptohome component. In ChromeOS builds prior to 87.0.4280.66, an attacker who already had code execution within the browser process could bypass discretionary access control via a malicious file, enabling elevated privilege effects within the b...

CVE-2020-16029

CVE-2020-16029 is an access restriction bypass in PDFium used by Chromium/Chrome prior to version 87.0.4280.66. The issue is described as an inappropriate/improper implementation in PDFium that allows bypassing navigation restrictions via a crafted PDF file. Connected advisories identify the affe...

CVE-2022-1132

CVE-2022-1132 affects Google Chrome on Chrome OS; the issue is an Inappropriate implementation in Virtual Keyboard that allowed a local attacker with physical access to bypass navigation restrictions prior to Chrome OS 100.0.4896.60. The Chrome 100 stability update (100.0.4896.60) and Debian/ Mag...

CVE-2024-2631

CVE-2024-2631 affects Google Chrome/Chromium on iOS with insecure UI handling in versions before 123.0.6312.58, enabling a remote attacker to spoof UI via a crafted HTML page. The vulnerability is categorized as Medium severity in the provided metrics, with network attack vector, user interaction...

CVE-2025-1920

CVE-2025-1920 affects Google Chrome/Chromium where a Type Confusion in V8 prior to 134.0.6998.88 can lead to heap corruption via a crafted HTML page. The vulnerability originates in V8’s handling of certain objects, with impact described as high for confidentiality, integrity, and availability. A...

CVE-2025-6192

CVE-2025-6192 is a Use-after-free vulnerability in Google Chrome/Chromium’s memory management related to Metrics/Profiler, allowing remote code execution via a crafted HTML page. Affected versions precede 137.0.7151.119 (Chrome stable channel; Chromium baseline). Debian security advisories confir...

CVE-2026-14013

CVE-2026-14013 affects Google Chrome before version 150.0.7871.47, due to an inappropriate SVG implementation that enables UI spoofing via a crafted HTML page. The issue is documented across multiple feeds (NVD, Debian OSV, EUVD) with a Medium severity. The connected references indicate a patch/r...

CVE-2026-15130

CVE-2026-15130 affects Google Chrome navigation policy enforcement. The vulnerability arises from insufficient policy enforcement in Navigation, enabling a remote attacker to bypass site isolation via a crafted HTML page. A fix is available in the Stable channel: Windows/Mac 150.0.7871.114/115 an...

CVE-2020-16035

CVE-2020-16035 affects the cros-disks component in Chromium/ChromeOS before 87.0.4280.66, due to insufficient data validation. This could allow a compromised browser process to bypass noexec restrictions via a malicious file, enabling potential local or remote implications as described in multipl...

CVE-2022-3196

Concrete details confirm CVE-2022-3196 affects Chromium/Google Chrome PDF handling with a use-after-free leading to possible heap corruption via crafted PDFs, fixed in upstream Chrome/Chromium at version 105.0.5195.125 and newer. Public sources describe the vulnerability as a PDF memory reuse-aft...

CVE-2021-37981

CVE-2021-37981 is a Chrome/Chromium vulnerability: a heap buffer overflow in the Skia component prior to 95.0.4638.54 allows a renderer-compromised remote attacker to potentially escape the sandbox via a crafted HTML page. The connected documents confirm the flaw lies in Skia, affects Chromium-ba...

CVE-2022-0797

The CVE-2022-0797 entry describes an out-of-bounds memory access/write in Chrome’s Mojo component before version 99.0.4844.51. A remote attacker could trigger this via a crafted HTML page, leading to arbitrary code execution or a crash. Connected sources consistently reference Chrome Mojo as the ...

CVE-2023-4359

CVE-2023-4359 affects Google Chrome on iOS before 116.0.5845.96 due to an inappropriate implementation in the App Launcher. The issue could allow a remote attacker to spoof elements of the security UI through a crafted HTML page. Public advisories/updates indicate that Chromium-based browsers (Ch...

CVE-2024-0805

Summary: CVE-2024-0805 is an issue in Google Chrome/Chromium where an inappropriate implementation in the Downloads component allowed a remote attacker to perform domain spoofing via a crafted domain name in versions prior to 121.0.6167.85. The vulnerability is documented across multiple connecte...

CVE-2024-3157

CVE-2024-3157 describes an out-of-bounds memory access in the Chromium/Chrome Compositing pipeline prior to 123.0.6312.122. The vulnerability could allow a remote attacker who has compromised the GPU process to potentially escape the Chromium sandbox through specific UI gestures. Affected softwar...

CVE-2026-13942

CVE-2026-13942 affects Google Chrome on ChromeOS prior to 150.0.7871.47, where an inappropriate implementation in the Video Capture component allows a local attacker to perform UI spoofing through a crafted HTML page. The issue is explicitly described across multiple sources as a local vulnerabil...

CVE-2011-1440

CVE-2011-1440 affects Google Chrome prior to 11.0.696.57. The vulnerability is a use-after-free in handling the ruby element and CSS token sequences in the rendering pipeline (WebKit-based). Exploitation is remote and could cause a denial of service or possibly other unspecified impact. The avail...

CVE-2019-5874

The connected Debian/Fedora entries confirm CVE-2019-5874 is a Chromium/Chrome vulnerability related to insufficient filtering in external URI handling. Root cause: inadequate filtering of URI schemes in chrome's navigation logic, allowing a crafted HTML page to bypass navigation restrictions. Im...

CVE-2021-30630

CVE-2021-30630 concerns Blink in Google Chrome. The issue is an unsafe implementation in Blink before 93.0.4577.82 that allows a remote attacker, after compromising the renderer process, to leak cross-origin data via a crafted HTML page. Affected component: Blink/Chromium rendering engine; affect...

CVE-2022-0111

CVE-2022-0111 relates to Google Chrome’s navigation logic. Several connected sources confirm an “Inappropriate implementation in Navigation” vulnerability in Chrome prior to 97.0.4692.71 that allowed a remote attacker to incorrectly set the origin via a crafted HTML page. The Debian bulletin note...

CVE-2022-0467

CVE-2022-0467 affects Google Chrome on Windows before 98.0.4758.80, where an inappropriate implementation in Pointer Lock allows a remote attacker to bypass navigation restrictions via a crafted HTML page. The issue impacts Chrome/Chromium components related to Pointer Lock handling. According to...

CVE-2022-1867

CVE-2022-1867 affects Google Chrome/Chromium upstream: insufficient validation of untrusted input in Data Transfer allows bypass of same-origin policy via crafted clipboard content. Affected: Chrome/Chromium before 102.0.5005.61. Remediation: update to Chrome/Chromium 102.0.5005.61 or later; Debi...

CVE-2022-2612

CVE-2022-2612 affects Google Chrome/Chromium prior to version 104.0.5112.79. The issue is a side-channel information leakage in keyboard input that lets a remote attacker who has already compromised the renderer process exfiltrate potentially sensitive data from process memory via a crafted HTML ...

CVE-2024-0814

CVE-2024-0814 describes an incorrect security UI in Google Chrome’s Payments component that could allow a remote attacker to spoof security UI via a crafted HTML page. Concrete details across connected sources specify: affected product/versions include Chrome/Chromium before 121.0.6167.85 (e.g., ...

CVE-2024-2630

CVE-2024-2630 affects Google Chrome on iOS, describing an inappropriate implementation that allowed a remote attacker to leak cross-origin data via a crafted HTML page. The issue is tied to Chromium/Chrome prior to version 123.0.6312.58. Public advisories in connected feeds confirm remediation by...

CVE-2026-13945

CVE-2026-13945 concerns Google Chrome on Linux where insufficient policy enforcement in Extensions allows UI spoofing via a crafted extension. Affected: Chrome on Linux prior to version 150.0.7871.47. Impact is described as user interaction required for exploitation, enabling UI spoofing without ...

CVE-2021-30587

CVE-2021-30587 affects Google Chrome/Chromium before 92.0.4515.107 due to an inappropriate implementation in Compositing that could allow a remote attacker to spoof the Omnibox (URL bar) via a crafted HTML page. Impact is spoofing of URL bar contents with no broader data disclosure stated in the ...

CVE-2021-37989

CVE-2021-37989 is an issue in the Blink component of Google Chrome prior to 95.0.4638.54 . The problem is an inappropriate implementation that allows a remote attacker to abuse the Content Security Policy via a crafted HTML page. Impact is described as potential policy abuse with craftable conten...

CVE-2021-37993

CVE-2021-37993 describes a use-after-free in the PDF Accessibility component of the Chromium-based Google Chrome prior to 95.0.4638.54, enabling a remote attacker to potentially trigger heap corruption via a crafted HTML page. The vulnerability affects Google Chrome’s PDF Accessibility path (Chro...

CVE-2022-2296

CVE-2022-2296 is a use-after-free in Chrome OS Shell on Chrome OS prior to 103.0.5060.114, potentially allowing a remote attacker who entices user interactions to cause heap corruption. Affected software includes Chromium/Chrome family on Chrome OS; the issue is classified with high impact (avail...