CVE-2021-38007

CVE-2021-38007 describes a type confusion vulnerability in the V8 component of the Chromium-based Chromium browser engine prior to version 96.0.4664.45. Multiple connected advisories confirm the same issue affecting Chromium-derived products (e.g., Chromium, Vivaldi, Opera) and list it among a br...

CVE-2023-0928

Affected software: Google Chrome (SwiftShader component). Issue: Use-after-free in SwiftShader could enable heap corruption via a crafted HTML page. Version scope: prior to 110.0.5481.177. Impact: remote attacker could potentially exploit, with high severity (CVE-2023-0928). Root cause: use-after...

CVE-2024-3170

CVE-2024-3170 affects Google Chrome prior to 121.0.6167.85, where a Use-after-Free in WebRTC could allow a remote attacker to cause heap corruption via a crafted HTML page. The issue is in Chromium’s WebRTC handling and is addressed by updating Chrome to 121.0.6167.85 or later. Public exploits ex...

CVE-2025-0997

CVE-2025-0997 affects Google Chrome (Chromium-based) prior to 133.0.6943.98. The issue is a use-after-free in Navigation triggered by a crafted Chrome Extension, potentially enabling heap corruption. Impact per sources: high severity (CVSS 3.1 base 8.1) with network attack vector, but user intera...

CVE-2026-15764

CVE-2026-15764 is a use-after-free in Chrome’s Ozone path on Linux, enabling potential heap corruption when a user is coerced into specific UI gestures via a crafted HTML page. Affected software is Google Chrome on Linux prior to the fixed build, with the issue classified as Critical (CVSS v3.1: ...

CVE-2026-19157

CVE-2026-19157 : Out-of-bounds write in ANGLE affecting Google Chrome on Android before 151.0.7922.109. The issue could allow a remote attacker to potentially escape the Chrome sandbox via a crafted HTML page. Affects the ANGLE component within Chrome; no specific vendor/version details beyond th...

CVE-2021-4078

The CVE-2021-4078 entry pertains to Google Chrome/V8 with a type-confusion vulnerability in V8 that was present in Chrome up to version 96.0.4664.93. The underlying issue is described as a type confusion in V8, which could allow a remote attacker to potentially trigger heap corruption via a craft...

CVE-2022-1134

CVE-2022-1134 is a Type Confusion in V8 affecting Google Chrome up to version 100.0.4896.60 prior to the March 2022 stability update. The vulnerability allows a remote attacker to potentially trigger heap corruption through a crafted HTML page. The Chrome release notes for Chrome 100 enumerate th...

CVE-2022-1858

CVE-2022-1858 is a Chrome/Chromium DevTools vulnerability: an out-of-bounds memory read in DevTools could be triggered by specific user interaction, leading to potential data exposure. Affected product is Google Chrome through versions prior to 102.0.5005.61 (Chromium/DevTools codebase). The issu...

CVE-2022-3053

CVE-2022-3053 corresponds to an “Inappropriate implementation in Pointer Lock” in Google Chrome on macOS prior to 105.0.5195.52, enabling a remote attacker to restrict user navigation via a crafted HTML page. The connected documents confirm this vulnerability in Chromium/Chrome with affected vers...

CVE-2022-4178

Summary of CVE-2022-4178 : A use-after-free in Mojo within Google Chrome before 108.0.5359.71 allows a remote attacker who has compromised the renderer process to potentially cause heap corruption via a crafted HTML page. The vulnerability affects the Mojo IPC path used by Chrome’s rendering comp...

CVE-2023-3739

CVE-2023-3739 affects Google Chrome on ChromeOS, via Chromad. The vulnerability stems from insufficient validation of untrusted input in Chromad, enabling a remote attacker to execute arbitrary code with a crafted shell script on ChromeOS builds prior to 115.0.5790.131. Impact is remote code exec...

CVE-2023-6510

CVE-2023-6510 is a Chrome/Chromium use-after-free in Media Capture (prior to 120.0.6099.62) that could allow a remote attacker to potentially exploit heap corruption via specific UI interaction. Affected product: Chromium/Chrome browser components handling Media Capture. Root cause: use-after-fre...

CVE-2023-6707

CVE-2023-6707 is a Use-after-free in CSS in Google Chrome (Chromium) prior to 120.0.6099.109. The issue affects the CSS handling path in Chrome/Chromium and can lead to heap corruption via a crafted HTML page. The Chrome stable channel update 120.0.6099.109 (and related Chromium 120.0.6099.109 bu...

CVE-2025-9132

CVE-2025-9132 concerns Google Chrome’s V8 engine: an out-of-bounds write can lead to heap corruption when processing crafted HTML pages. The vulnerability affects Chrome/Chromium prior to version 139.0.7258.138. Impact is described as potential arbitrary code execution/heap damage, with a High se...

CVE-2018-16065

CVE-2018-16065 is a Javascript reentrancy/use-after-free bug in V8 within Google Chrome, before version 69.0.3497.81, allowing a remote attacker to execute arbitrary code inside the Chrome sandbox via a crafted HTML page. Multiple connected sources confirm the issue and reference a fix in Chromiu...

CVE-2018-6118

CVE-2018-6118 is a use-after-free in Google Chrome’s Media Cache (incognito cache double-eviction) exploited via crafted HTML on renderer-compromised sites prior to 66.0.3359.139. Affected product: Google Chrome (Media Cache component). Impact: arbitrary code execution or memory corruption; Chrom...

CVE-2018-6138

CVE-2018-6138 affects Google Chrome/Chromium extensions via insufficient policy enforcement in the Extensions API, enabling a user-assisted bypass of navigation restrictions by installing a malicious extension. Affected are versions prior to 67.0.3396.62; remediation per advisories is to upgrade ...

CVE-2021-4316

CVE-2021-4316 affects Google Chrome (Cast UI) held in Chromium-based builds. The vulnerability arises from an inappropriate implementation in Cast UI that allowed a remote attacker to spoof the browser UI via a crafted HTML page. The impact is described as spoofing the UI with Low severity (NVD C...

CVE-2022-0606

CVE-2022-0606 is a Use-after-Free in ANGLE affecting Google Chrome prior to 98.0.4758.102. The vulnerability could allow a remote attacker to cause heap corruption via a crafted HTML page. Affected component is ANGLE within Chrome/Chromium. The fix was released in Chrome 98.0.4758.102 (stable cha...

CVE-2023-6348

CVE-2023-6348 describes a Type Confusion in Chrome/Chromium’s Spellcheck that could allow heap corruption when a renderer is compromised via a crafted HTML page. Connected sources confirm affected components as Chromium-based browsers (Chrome/Chromium) and outline remediation by upgrading to Chro...

CVE-2023-6706

CVE-2023-6706 is a use-after-free in FedCM for Google Chrome/Chromium prior to 120.0.6099.109, enabling a remote attacker who tricked a user into UI interaction to potentially trigger heap corruption via a crafted HTML page. Public references in the connected documents confirm this vulnerability ...

CVE-2026-11309

CVE-2026-11309 affects Google Chrome (Chromium-based) where insufficient policy enforcement in History permits a remote attacker to spoof UI via a crafted HTML page. Affected versions before 149.0.7827.53 are vulnerable; Chrome 149.0.7827.53 and later mitigate. Root cause is policy enforcement ga...

CVE-2026-14058

CVE-2026-14058 affects Google Chrome: insufficient policy enforcement in the HTML Parser allows a remote attacker to bypass Content Security Policy via a crafted HTML page. Affected version range is Chrome prior to 150.0.7871.47. The vulnerability is documented across multiple sources (NVD, Debia...

CVE-2018-17476

CVE-2018-17476 concerns Google Chrome/Chromium before 70.0.3538.67, where an incorrect Cast UI dialog placement could allow a remote attacker to obscure the full-screen warning via a crafted HTML page. The issue is categorized as content spoofing/UI-related, with potential to mislead users about ...

CVE-2018-18344

CVE-2018-18344 affects Google Chrome/Chromium before 71.0.3578.80 where the setDownloadBehavior devtools protocol feature in Extensions could be abused by a remote attacker who controls an installed extension to access local files. The issue is described as an inappropriate implementation in the ...

CVE-2018-6041

CVE-2018-6041 is a Chrome/Chromium URL spoofing vulnerability in the navigation/UI that allowed a crafted HTML page to spoof the Omnibox contents. The initial description confirms incorrect security UI in navigation, enabling spoofing of the URL bar. Connected documents identify the issue as occu...

CVE-2021-21219

CVE-2021-21219 concerns uninitialized data in PDFium used by Google Chrome prior to 90.0.4430.72, enabling a remote attacker to glean potentially sensitive information from process memory via a crafted PDF. The connected documents corroborate this information-disclosure impact via PDFium across C...

CVE-2021-38015

CVE-2021-38015 affects the Chromium-based browser engine. The provided security advisories describe an inappropriate implementation in the input handling of Chromium (prior to 96.0.4664.45) that could allow a user-assisted attacker who persuades a user to install a malicious extension to bypass n...

CVE-2021-4068

The CVE-2021-4068 entry applies to Chromium’s new tab page. The connected documents confirm an insufficient validation vulnerability in the new tab page component of the Chromium browser engine prior to version 96.0.4664.93, enabling a remote attacker to leak cross-origin data via crafted HTML pa...

CVE-2022-0464

CVE-2022-0464 – Google Chrome/Chromium: Use-after-free in Accessibility leading to possible heap corruption. Affected: Chrome/Chromium browsers prior to 98.0.4758.80. Root cause: use-after-free in Accessibility code path; exploit could require user interaction. Impact: high (potential for comprom...

CVE-2023-0932

CVE-2023-0932: Use-after-free in WebRTC for Google Chrome on Windows prior to 110.0.5481.177. Root cause is heap corruption via crafted HTML page, with high impact (C/H/I/A). Affected product is Chrome/Chromium WebRTC component; remediation is to upgrade to Chrome 110.0.5481.177 or newer (or corr...

CVE-2023-3730

CVE-2023-3730: Use-after-free in Tab Groups of Google Chrome/Chromium prior to 115.0.5790.98. Root cause is a Tab Groups use-after-free in Chrome/Chromium, enabling potential heap corruption when a user interacts with specific UI. Affected products include Google Chrome and Chromium-based browser...

CVE-2023-4363

CVE-2023-4363–Inappropriate implementation in WebShare in Google Chrome (Android) prior to 116.0.5845.96 allowed a remote attacker to spoof the contents of a dialog URL via a crafted HTML page. Connected advisories confirm this CVE is tracked with Chromium updates; fixes are part of Chrome/Chromi...

CVE-2024-1060

CVE-2024-1060 is a Chrome/Chromium issue described as a use-after-free in the Canvas module that could enable remote heap corruption via a crafted HTML page prior to version 121.0.6167.139. The affected product is Google Chrome/Chromium; the root cause is a memory management bug in Canvas. The pu...

CVE-2024-3176

CVE-2024-3176 affects Google Chrome with an out-of-bounds write in SwiftShader triggered by a crafted HTML page, enabling remote memory corruption. Chrome versions prior to 117.0.5938.62 are vulnerable; upgrade to 117.0.5938.62 or later to mitigate. Other connected sources corroborate the same Ch...

CVE-2018-18346

CVE-2018-18346 affects Chromium/Google Chrome before 71.0.3578.80. Reported as an incorrect security UI issue in Blink, enabling a crafted HTML page to cause a confusing browser UI. The Arch Linux advisory confirms the issue set includes CVE-2018-18346 and recommends upgrading to 71.0.3578.80 or ...

CVE-2018-6056

CVE-2018-6056 : A type confusion in Google Chrome’s V8 JavaScript engine could cause a heap out-of-bounds write, enabling remote arbitrary code execution inside the sandbox via a crafted HTML page. Affected: Chrome with V8 up to version prior to 64.0.3282.168. Remediation : upgrade to Chrome 64.0...

CVE-2018-6089

Google Chrome/Chromium prior to 66.0.3359.117 was affected by CVE-2018-6089, a Same Origin Policy bypass in Service Workers triggered by a cross-origin PDF redirect after a Safari-like CORS gap. The workaround is upgrading to 66.0.3359.117 or newer; Chrome’s 66 stable release notes confirm the fi...

CVE-2018-6092

The CVE-2018-6092 entry relates to an integer overflow in Chrome’s WebAssembly implementation on 32‑bit systems, allowing remote code execution inside the sandbox via a crafted HTML page. Affected software from the connected advisories includes Google Chrome/Chromium up to version 66.0.3359.117 (...

CVE-2018-6179

CVE-2018-6179 is a Google Chrome/Chromium extension vulnerability: insufficient enforcement of file access permission in the activeTab case allowed a malicious extension to read local files. Affected version range is Chrome/Chromium prior to 68.0.3440.75. Impact described in sources as a local fi...

CVE-2021-4079

CVE-2021-4079 refers to an out-of-bounds write in WebRTC within Google Chrome before version 96.0.4664.93, leading to potential heap corruption by crafted WebRTC packets. The connected security notices confirm the affected component as Chromium-based Chrome/WebRTC, with the vulnerability enabling...

CVE-2022-0456

CVE-2022-0456 affects Google Chrome/Chromium: use-after-free in the Web Search feature leading to potential heap corruption via profile destruction. Public details in Chrome/Chromium advisories and Chrome stable-channel release notes confirm this vulnerability and list Chrome 98.0.4758.80+ as the...

CVE-2023-0699

CVE-2023-0699 is a use-after-free vulnerability in the GPU component of Google Chrome/Chromium prior to 110.0.5481.77. A remote attacker could exploit heap corruption via a crafted HTML page and browser shutdown. Several connected sources confirm the issue and its remediation path, including Chro...

CVE-2023-3736

CVE-2023-3736 concerns an Inappropriate implementation in Custom Tabs in Google Chrome on Android, prior to version 115.0.5790.98, enabling a remote attacker to leak cross-origin data via a crafted HTML page. Affected software: Google Chrome/Chromium family with Custom Tabs integration; root caus...

CVE-2024-0813

The CVE-2024-0813 entry documents a Use‑After‑Free in Google Chrome’s Reading Mode prior to 121.0.6167.85. The underlying issue could allow heap corruption when a user is persuaded to install a malicious extension through specific UI interaction, as described in multiple sources. Affected softwar...

CVE-2025-2136

CVE-2025-2136 : A use-after-free in the Inspector of Google Chrome/Chromium allows remote heap corruption on crafted HTML pages, prior to version 134.0.6998.88. The issue affects Chrome/Chromium and was addressed in the 134.0.6998.88+ updates (e.g., Debian’s 134.0.6998.88-1~deb12u1). If vulnerabl...

CVE-2025-2137

CVE-2025-2137 affects Google Chrome (Chromium’s V8) with an out-of-bounds read in V8 prior to 134.0.6998.88, allowing remote memory access via a crafted HTML page. Affected component: V8 (Chrome/Chromium web engine); root cause: out-of-bounds read. Impact per sources includes potential informatio...

CVE-2018-17477

CVE-2018-17477 affects Chromium/Google Chrome extensions UI: a UI spoofing vulnerability in the extensions pane allows a remote attacker to spoof extension popups via a crafted page. Root cause is a UI spoofing vulnerability in the Extensions component present before version 70.0.3538.67. Exploit...

CVE-2018-18341

CVE-2018-18341 affects Chromium/Google Chrome prior to 71.0.3578.80. The Blink/WebKit component contains a heap-based buffer overflow that could allow a remote attacker to exploit heap corruption via a crafted HTML page. Impact is remote code execution potential as part of heap corruption; exploi...