CVE-2023-1815

CVE-2023-1815: Use-after-free in Chrome/Chromium Networking APIs (heap corruption) due to a memory reuse issue. Affects Google Chrome/Chromium prior to 112.0.5615.49; exploitation requires user interaction (UI click) after convincing the user. Remediation: update to Chromium 112.0.5615.49 or newe...

CVE-2023-1816

CVE-2023-1816 affects Google Chrome/Chromium’s Picture-in-Picture feature, with root cause described as an incorrect security UI. It allows a remote attacker to potentially perform navigation spoofing through a crafted HTML page. Affected versions are Chrome/Chromium prior to 112.0.5615.49; remed...

CVE-2023-3740

CVE-2023-3740 is a low-severity vulnerability in Google Chrome/Chromium themes due to insufficient validation of untrusted input in Themes, allowing a remote attacker to deliver malicious content via a crafted background URL. Affected product: Google Chrome (Chromium-based) before 115.0.5790.98. ...

CVE-2025-0995

CVE-2025-0995 affects V8 in Google Chrome prior to 133.0.6943.98, with a use-after-free in heap handling on crafted HTML pages. The underlying issue is a heap corruption vulnerability in V8, allowing remote code execution potential as indicated by the high severity (CVSS 3.1: AV:N/AC:L/PR:N/UI:R/...

CVE-2026-12027

The CVE-2026-12027 entry corresponds to an insecure/incorrect implementation in Google Chrome’s Headless mode prior to 149.0.7827.115, where a renderer-compromised page could trigger a sandbox escape through a crafted HTML page. Affected software is Chrome/Chromium Headless; root cause is an inap...

CVE-2018-18338

CVE-2018-18338 affects Chromium/Google Chrome’s canvas renderer. Arch Linux ASA-201812-2 documents a heap-based buffer overflow in the Canva component before 71.0.3578.80, enabling arbitrary code execution on a remote attacker. The fix is to upgrade to Chromium 71.0.3578.80-1 (or newer).

CVE-2022-0454

CVE-2022-0454 corresponds to a heap buffer overflow in ANGLE within Google Chrome prior to 98.0.4758.80, enabling a remote attacker to potentially corrupt heap memory via a crafted HTML page. The vulnerability affects Chrome/ANGLE components, with exploitation possible through network-driven HTML...

CVE-2022-1872

CVE-2022-1872 concerns Google Chrome’s Extensions API, where insufficient policy enforcement allowed a user-assisted attacker to bypass downloads policy via a crafted HTML page and a malicious extension. The issue affects Chrome/Chromium prior to version 102.0.5005.61, with fixes released in the ...

CVE-2022-4180

CVE-2022-4180 affects Google Chrome prior to 108.0.5359.71, involving a use-after-free in the Mojo component that can be triggered when a user is lured into installing a malicious Chrome extension. The underlying issue is heap corruption via crafted Extension payloads. The vulnerability is rated ...

CVE-2022-4452

CVE-2022-4452 affects Google Chrome’s crosvm component. Prior to 107.0.5304.62, insufficient data validation could enable a remote attacker to cause object corruption via a crafted HTML page. Impact is described as High (remote, no user privileges, high confidentiality/integrity/availability impa...

CVE-2023-2134

CVE-2023-2134 affects Google Chrome/Chromium prior to 112.0.5615.137, due to an out-of-bounds memory access in the Service Worker API that could allow a remote attacker to trigger heap corruption via a crafted HTML page. The vulnerability is rated High severity with network attack vector and user...

CVE-2024-0805

Summary: CVE-2024-0805 is an issue in Google Chrome/Chromium where an inappropriate implementation in the Downloads component allowed a remote attacker to perform domain spoofing via a crafted domain name in versions prior to 121.0.6167.85. The vulnerability is documented across multiple connecte...

CVE-2024-0811

CVE-2024-0811 describes an insecure Extensions API implementation in Google Chrome prior to 121.0.6167.85 that could allow a user-assisted attacker to leak cross-origin data via a malicious extension. The issue is tied to Chrome/Chromium’s Extensions API and is labeled with a low severity. Affect...

CVE-2024-2630

CVE-2024-2630 affects Google Chrome on iOS, describing an inappropriate implementation that allowed a remote attacker to leak cross-origin data via a crafted HTML page. The issue is tied to Chromium/Chrome prior to version 123.0.6312.58. Public advisories in connected feeds confirm remediation by...

CVE-2024-3516

CVE-2024-3516 describes a heap buffer overflow in ANGLE used by Google Chrome, exploitable via a crafted HTML page, affecting Chrome

CVE-2018-18359

CVE-2018-18359 affects chromium-browser/chromium before 71.0.3578.80. According to the Arch Linux ASA-201812-2 and Debian/Debian tracker entries, it is an information-disclosure vulnerability caused by an out-of-bounds read in the V8 JavaScript engine. Impact is that a remote attacker could acces...

CVE-2021-30586

CVE-2021-30586 is a use-after-free vulnerability in Chrome’s dialog-box handling on Windows, affecting Chrome versions before 92.0.4515.107. A remote attacker could exploit this by convincing a user to install a malicious extension and by presenting a crafted HTML page, potentially triggering hea...

CVE-2022-3200

The CVE-2022-3200 entry corresponds to a Heap buffer overflow in Chrome/Chromium internals prior to 105.0.5195.125, enabling remote heap corruption via a crafted HTML page. Affected software shown in connected sources includes Chromium/Chrome updates (e.g., Chromium 105.0.5195.125). Root cause: h...

CVE-2023-0930

CVE-2023-0930 corresponds to a heap buffer overflow in Chrome/Chromium’s Video component, present in Google Chrome prior to 110.0.5481.177. The issue could allow a remote attacker to potentially exploit heap corruption via a crafted HTML page. The vulnerability is rated High severity with network...

CVE-2023-4360

CVE-2023-4360 affects Color in Google Chrome (Chromium) prior to 116.0.5845.96. A remote attacker could craft an HTML page to obfuscate security UI. The issue is confirmed public in Chromium’s advisory and Chrome/Debian updates note the fix in version 116.0.5845.96 (and later). Remediation: upgra...

CVE-2024-0224

The CVE-2024-0224 entry describes a use-after-free in WebAudio in Google Chrome/Chromium, leading to potential heap corruption via a crafted HTML page. Affected component: Web Audio in Chromium-based browsers prior to version 120.0.6099.199. Root cause: use-after-free in WebAudio code path that m...

CVE-2024-1077

CVE-2024-1077 affects Google Chrome/Chromium’s Network module, with a use-after-free in the Network component leading to potential heap corruption via a malicious file. Vulnerable condition exists prior to version 121.0.6167.139. Debian Fedora advisories and Alpine/Linux security trackers referen...

CVE-2018-17468

CVE-2018-17468 affects Chromium/Google Chrome Blink prior to 70.0.3538.67. The issue is an information-disclosure in Blink during navigation caused by incorrect handling of timer information, allowing a remote attacker to obtain cross-origin URLs. Affected components: Blink in Chromium/Chrome bef...

CVE-2018-6057

CVE-2018-6057 affects Google Chrome/Chromium prior to 65.0.3325.146, due to improper permissions handling of shared memory (ashmem). The issue permitted a renderer-compromised page to bypass inter-process read-only guarantees. Public documents confirm the vulnerability and list Chrome/Chromium 65...

CVE-2021-30580

The CVE-2021-30580 entry refers to a vulnerability in Chromium-based Google Chrome on Android, caused by Insufficient policy enforcement in Android intents. The issue allowed an attacker who could persuade a user to install a malicious application to exfiltrate potentially sensitive data via a cr...

CVE-2021-30629

CVE-2021-30629 is a concrete vulnerability in Chromium/Chrome: a use-after-free in the Permissions component of the Chromium browser engine before 93.0.4577.82. The issue could allow a remote attacker who compromises the renderer process to potentially trigger heap corruption via a crafted HTML p...

CVE-2021-37957

The CVE-2021-37957 entry concerns a Use-after-Free in WebGPU in Google Chrome before 94.0.4606.54, allowing a remote attacker to potentially trigger heap corruption via a crafted HTML page. Affected component: Chrome/WebGPU. Root cause: use-after-free in WebGPU code paths leading to heap corrupti...

CVE-2022-3887

Use-after-free in Web Workers in Google Chrome prior to 107.0.5304.106 (CVE-2022-3887) allows remote heap corruption via crafted HTML. Affected: Google Chrome/Web Workers. Root cause: use-after-free in Web Workers (Chromium). Impact: High severity per Chrome/NVD. Remediation: Chrome Stable channe...

CVE-2023-2461

CVE-2023-2461 affects Google Chrome/Chromium OS Inputs on ChromeOS before 113.0.5672.63. Root cause: use-after-free in OS Inputs leading to heap corruption via crafted UI interaction after user engagement. Impact per sources: remote attacker could exploit via user interaction; CVSS v3.1 indicates...

CVE-2023-3735

CVE-2023-3735 concerns Google Chrome/Chromium: an inappropriate implementation in the Web API Permission Prompts allowed a crafted HTML page to obfuscate security UI. The issue affects Chrome/Chromium’s permission UI handling and is classified as Medium severity (CVSS v3.1: AV:N/AC:L/PR:N/UI:R/S:...

CVE-2026-14039

CVE-2026-14039 concerns Google Chrome’s GetUserMedia, where insufficient policy enforcement before version 150.0.7871.47 allowed a remote attacker to bypass the same-origin policy via a crafted HTML page. The vulnerability affects Chrome components related to media permissions and page-origin che...

CVE-2018-6073

CVE-2018-6073 is a WebGL heap-buffer overflow in Google Chrome before 65.0.3325.146 that allowed a remote attacker to perform an out-of-bounds memory write via a crafted HTML page. The vulnerability is tied to the WebGL implementation in Chrome’s rendering stack. Debian security advisories list t...

CVE-2021-37961

CVE-2021-37961 is a use-after-free vulnerability in Google Chrome/Chromium’s Tab Strip that could allow remote code execution via a crafted HTML page (heap corruption). Public references indicate this CVE is part of Chromium security fixes; Debian notes a fix in later Chromium versions (bullseye:...

CVE-2022-0466

CVE-2022-0466 involves Google Chrome’s Extensions Platform, with an Inappropriate implementation in Chrome’s Extensions Platform prior to 98.0.4758.80. An attacker convincing a user to install a malicious extension could trigger a sandbox escape via a crafted HTML page. Affects Chrome desktop rel...

CVE-2022-1876

CVE-2022-1876 refers to a heap buffer overflow in Chrome DevTools prior to 102.0.5005.61. The issue could be triggered when a user is convinced to install a malicious extension and visits a crafted HTML page, potentially allowing heap corruption. Affected component: Chrome’s DevTools. Root cause:...

CVE-2022-3304

CVE-2022-3304 is a use-after-free in CSS in Google Chrome/Chromium prior to 106.0.5249.62 that could allow remote heap corruption via a crafted HTML page. The issue affects Chrome/Chromium’s CSS handling and was fixed in Chrome 106.0.5249.61–106.0.5249.62 (stable channel). Exploitation status is ...

CVE-2022-4181

CVE-2022-4181 is a use-after-free in Google Chrome’s Forms component via Chromium. The concrete details show a heap-corruption vulnerability in Chrome/Chromium’s Forms handling, exploitable through a crafted HTML page and rated High severity. Affected product: Google Chrome (Chromium base); vulne...

CVE-2023-1821

CVE-2023-1821: A low-severity vulnerability in Google Chrome’s WebShare (Chromium) stems from an improper WebShare implementation, potentially allowing a remote attacker to hide the Omnibox (URL bar) contents via a crafted HTML page. Affected products are Google Chrome/Chromium-based browsers pri...

CVE-2024-0222

CVE-2024-0222 involves a use-after-free in ANGLE used by Google Chrome/Chromium, allowing a remote attacker who gains renderer process access to potentially corrupt the heap via a crafted HTML page. Affected software version appears to be Chrome/Chromium up to and including 120.0.6099.199 (and Ch...

CVE-2024-3157

CVE-2024-3157 describes an out-of-bounds memory access in the Chromium/Chrome Compositing pipeline prior to 123.0.6312.122. The vulnerability could allow a remote attacker who has compromised the GPU process to potentially escape the Chromium sandbox through specific UI gestures. Affected softwar...

CVE-2018-16071

CVE-2018-16071 is a use-after-free in WebRTC processing (VP9) within Google Chrome’s WebRTC stack. The vulnerability arises when an untrusted index extracted from an RTP packet is used as the upper bound for vector erase, potentially dereferencing memory beyond the allocated range and causing hea...

CVE-2018-16076

CVE-2018-16076 affects the PDFium component used by Google Chrome/Chromium. The issue is a missing bounds check in PDFium that enables a remote attacker to trigger an out-of-bounds memory read through a crafted PDF file. Debian notes a fix in chromium-browser 69.0.3497.81 (and related updates), i...

CVE-2021-30628

CVE-2021-30628 affects ANGLE in Google Chrome, with a stack buffer overflow leading to potential stack corruption via a crafted HTML page prior to Chrome 93.0.4577.82. The vulnerability is triggered remotely over the network and can impact partial confidentiality, integrity, and availability as d...

CVE-2021-37982

CVE-2021-37982 is a use-after-free in the Incognito component of the Chromium browser engine before version 95.0.4638.54. The issue could allow an attacker to trigger arbitrary code execution via crafted HTML content; affected products cite Chromium-based browsers (e.g., Google Chrome/Chromium) b...

CVE-2022-0306

CVE-2022-0306 is a reported heap buffer overflow in PDFium used by Google Chrome, prior to version 97.0.4692.99. The issue allows a remote attacker to potentially cause heap corruption via a crafted HTML page. Multiple connected sources confirm the same description and link the vulnerability to C...

CVE-2022-1860

CVE-2022-1860 affects Google Chrome UI Foundations on Chrome OS prior to 102.0.5005.61. It is described as a use-after-free vulnerability in the UI Foundations component that can lead to heap corruption when a user is drawn into specific interactions. The issue is confirmed in Chrome release note...

CVE-2022-3199

CVE-2022-3199 concerns a Use-after-Free in Chrome/Chromium frames. The issue arises in Chrome prior to 105.0.5195.125, enabling a remote attacker to potentially trigger heap corruption via a crafted HTML page (high impact). Affected software is Chromium/Chrome's rendering frames subsystem; root c...

CVE-2023-1820

CVE-2023-1820 describes a heap buffer overflow in Google Chrome's Browser History (Chromium) before 112.0.5615.49. The issue allows a remote attacker to potentially corrupt the heap via a crafted HTML page when the user performs specific UI interactions. Affected product: Google Chrome/Chromium (...

CVE-2023-6347

CVE-2023-6347 is a use-after-free in Mojo within Google Chrome/Chromium, prior to version 119.0.6045.199, exposing potential heap corruption via a crafted HTML page. Connected sources confirm the affected component is Mojo in Chromium-based Chrome, with an impact described as high (network attack...

CVE-2024-0812

CVE-2024-0812 is an issue in Google Chrome/Chromium prior to 121.0.6167.85, described as an inappropriate implementation in Accessibility that could allow remote object corruption via a crafted HTML page (severity High). The Connected documents corroborate that Chromium/Chrome updates addressing ...