CVE-2026-19163

Summary (CVE-2026-19163) : A use-after-free in Media in Google Chrome on Windows prior to version 151.0.7922.109 could allow a remote attacker who had compromised the renderer process to potentially perform a sandbox escape via a crafted HTML page. The vulnerability affects the Chrome release pri...

CVE-2011-2823

CVE-2011-2823 affects Google Chrome before 13.0.782.215. The vulnerability is a use-after-free in the line box handling, enabling remote denial of service and possibly other impact. The provided connected sources confirm the Chrome-specific root cause and vulnerable component, but do not specify ...

CVE-2013-6646

CVE-2013-6646 is a use-after-free vulnerability in Google Chrome’s Web Workers implementation. The flaw affects Chrome on Windows (pre-32.0.1700.76) and macOS/Linux (pre-32.0.1700.77), enabling remote denial of service and potentially other unspecified impacts via worker shutdown-related vectors....

CVE-2022-4923

CVE-2022-4923 describes an Inappropriate implementation in Omnibox of Google Chrome before 99.0.4844.51, enabling a privileged network-position attacker to perform a man-in-the-middle via malicious traffic. Affected component: Omnibox within Chrome/Chromium; underlying cause cited as improper Omn...

CVE-2023-3729

CVE-2023-3729 affects Google Chrome on ChromeOS (Splitscreen) and is caused by a use-after-free that can lead to heap corruption when a user is induced to perform specific UI interactions. The issue is tied to ChromeOS builds prior to version 115.0.5790.131. The vulnerability’s impact is describe...

CVE-2023-7012

CVE-2023-7012 affects Google Chrome’s Permission Prompts due to insufficient data validation, potentially enabling a sandbox escape when a user runs a malicious app. Described for Chrome versions before 117.0.5938.62; exploitation requires user interaction and a malicious file. Astra Linux bullet...

CVE-2026-11701

The CVE-2026-11701 entry describes an insecure implementation in Chrome’s Guest View prior to version 149.0.7827.103, enabling a remote attacker to perform UI spoofing via a crafted HTML page. Affected software: Google Chrome (Guest View component). Root cause: inappropriate/defective Guest View ...

CVE-2026-12448

CVE-2026-12448 affects WebView in Google Chrome on Android prior to 149.0.7827.155. The issue is an inappropriate implementation in WebView that allows a remote attacker to escalate privileges via a crafted HTML page. The vulnerability is tied to Chromium WebView behavior and is rated High severi...

CVE-2026-17658

CVE-2026-17658 is a use-after-free in V8 within Google Chrome, affecting desktop Chrome prior to version 151.0.7922.72. According to the sources, this vulnerability could allow a remote attacker to execute arbitrary code inside the browser sandbox via a crafted HTML page, with a Chromium security...

CVE-2026-17686

CVE-2026-17686 : In Google Chrome, insufficient validation of untrusted input in Passwords (Chromium-based) before version 151.0.7922.72 allowed a renderer-compromised, remote attacker to bypass site isolation via a crafted HTML page. This vulnerability is rated High (CVSS v3.1 base score 8.1) an...

CVE-2026-17884

CVE-2026-17884 affects Google Chrome’s WebRTC in Chromium, with an object lifecycle issue that could allow a remote attacker to potentially cause heap corruption via a crafted HTML page in Chrome versions before 151.0.7922.72. The issue is described as a WebRTC object lifecycle flaw upstream, lin...

CVE-2026-5865

CVE-2026-5865 is a confirmed type confusion in the V8 engine used by Google Chrome prior to version 147.0.7727.55, allowing a remote attacker to execute arbitrary code inside the Chrome sandbox via a crafted HTML page. The issue is addressed in the Chrome 147 release; Debian notes fixes in 147.0....

CVE-2010-0650

CVE-2010-0650 affects WebKit used by Google Chrome (pre-4.0.249.78) and Apple Safari. The flaw allows remote attackers to bypass restrictions on popup windows via crafted mouse click events. Public updates exist: openSUSE/SUSE and Mandriva advisories reference libwebkit/webkit updates addressing ...

CVE-2011-1203

CVE-2011-1203 affects Google Chrome prior to 10.0.648.127. It arises from improper handling of SVG cursors, which can allow a remote attacker to cause a denial of service or possibly other unspecified impact via a stale pointer. The vulnerability is tied to Chrome/Chromium’s SVG rendering behavio...

CVE-2011-3056

CVE-2011-3056 affects Google Chrome prior to 17.0.963.83, where a cross-origin policy bypass is possible via a vector involving a “magic iframe.” The underlying issue is a Same Origin Policy bypass in the browser’s handling of iframes, enabling partial confidentiality/integrity exposure. The publ...

CVE-2011-3922

CVE-2011-3922 is a stack-based buffer overflow in Google Chrome’s glyph handling affecting Chrome up to version 16.0.912.75. Exploitation could cause a denial of service or possibly other impact, as described in connected advisories. The MiracleLinux/OpenSUSE/NASL entries confirm the issue was as...

CVE-2013-0880

CVE-2013-0880 affects Google Chrome on Windows, Linux, and macOS with a use-after-free in database handling that can lead to remote DoS or other unspecified impact. The initial description lists affected versions as Chrome before 25.0.1364.97/99 (Mac), 25.0.1364.97 (Windows/Linux). Connected docu...

CVE-2017-15395

The CVE-2017-15395 entry concerns a null-pointer dereference in the ImageCapture component of Chromium/Blink, leading to a potential denial of service or instability. Affected products include Chromium-based browsers (Chromium/Chromium-browser and Google Chrome) with versions prior to 62.0.3202.6...

CVE-2017-5074

CVE-2017-5074 is a real vulnerability affecting Google Chrome on Windows prior to 59.0.3071.86, described as a use-after-free in the Chrome Apps Bluetooth component that could lead to memory corruption. Several connected sources corroborate the issue and its association with Chromium/Chrome relea...

CVE-2017-5128

CVE-2017-5128 affects the Chromium/ Blink WebGL component: a heap overflow in WebGL prior to Chrome 62.0.3202.62. The flaw can be triggered by a crafted HTML page, enabling remote code execution with high impact if exploited. Affected product/version: Chromium browser/WebGL before 62.0.3202.62. R...

CVE-2020-6492

CVE-2020-6492 affects Google Chrome via a Use-After-Free in ANGLE (before 83.0.4103.97). The underlying issue is a use-after-free in ANGLE that could allow a remote attacker to potentially escape the Chrome sandbox through a crafted HTML page. Affected component: ANGLE within Chrome; impact descr...

CVE-2023-3731

CVE-2023-3731 affects Google Chrome on ChromeOS prior to 115.0.5790.131, where a use-after-free in Diagnostics could be triggered by a user-installed malicious extension, potentially enabling heap corruption. The vulnerability is tied to Diagnostics handling in ChromeOS, with high severity. Publi...

CVE-2026-11036

CVE-2026-11036 affects Google Chrome before 149.0.7827.53 due to an inappropriate implementation in the DOM, enabling a remote attacker to bypass the same-origin policy via a crafted HTML page. The vulnerability is described across multiple sources (NVD/EUVD/CIRCL sighting) with the same core det...

CVE-2026-17652

CVE-2026-17652 describes a use-after-free in the Views component of Google Chrome prior to 151.0.7922.72. The issue could allow a remote attacker who has compromised the renderer process to potentially escape the Chrome sandbox via a crafted HTML page. Affected software is Google Chrome (Views/Ch...

CVE-2026-17712

CVE-2026-17712 refers to a race condition in the Skia graphics library used by the Chromium-based Google Chrome browser. The upstream flaw allows a remote attacker to execute arbitrary code inside the browser sandbox via a crafted HTML page, with the impact described as high severity. Affected pr...

CVE-2026-17758

CVE-2026-17758: Heap buffer overflow in Dawn component of Google Chrome. The vulnerability affects Chrome builds prior to 151.0.7922.72, enabling a remote attacker to potentially perform a sandbox escape through a crafted HTML page. This entry is supported by multiple sources in the connected doc...

CVE-2011-1109

CVE-2011-1109 affects Google Chrome prior to 9.0.597.107. It describes a vulnerability in how CSS stylesheet nodes are processed, which can lead to a denial of service or unspecified impact via a stale pointer. The exact exploit vectors are not detailed in the provided documents. The CVSS base sc...

CVE-2011-2825

CVE-2011-2825 concerns a use-after-free in Google Chrome prior to 13.0.782.215 tied to font handling, allowing remote attackers to cause a denial of service or potentially other impact via custom-font vectors. The Connected documents confirm affected software (Chrome before 13.0.782.215) and the ...

CVE-2011-3032

CVE-2011-3032 is a use-after-free vulnerability in Google Chrome's SVG value handling, affecting Chrome versions prior to 17.0.963.65. Remote attackers could cause a denial of service or possibly other impact via SVG value handling vectors. The issue is mitigated by updating Chrome to 17.0.963.65...

CVE-2011-3069

Technical details for CVE-2011-3069 are not publicly available in the provided documents; monitor for updates.

CVE-2013-6641

CVE-2013-6641 is a use-after-free in Blink’s FormAssociatedElement::formRemovedFromTree, affecting Chromium-derived browsers (Chromium/chromium-browser) prior to the patched 32.0.1700.76/77 builds. The vulnerability arises from improper handling of the past names map of a FORM element, enabling r...

CVE-2017-15406

CVE-2017-15406 describes a stack buffer overflow in V8 used by Google Chrome prior to 62.0.3202.75, enabling a remote attacker to trigger an out-of-bounds memory read via a crafted HTML page. Affected product: Google Chrome (V8 component); the vulnerability stems from a memory-safety flaw in V8, ...

CVE-2022-3048

CVE-2022-3048 refers to an inappropriate implementation in the Chrome OS lockscreen within Google Chrome on Chrome OS, prior to version 105.0.5195.52. The issue allowed a local attacker with physical access to bypass lockscreen navigation restrictions. Public advisories indicate a fix shipped wit...

CVE-2022-3443

CVE-2022-3443 concerns Google Chrome up to version 106.0.5249.62 (inclusive). The vulnerability arises from insufficient data validation in the File System API, enabling a remote attacker to bypass file-system restrictions via a crafted HTML page. The NVD entry notes a Chromium-based severity of ...

CVE-2022-4913

CVE-2022-4913 affects Google Chrome before 105.0.5195.52 (Chromium-based). An incorrect extension storage implementation allowed a remote attacker who compromises the renderer process to spoof extension storage via a crafted HTML page, enabling potential abuse. Affected product: Google Chrome (ea...

CVE-2025-13228

CVE-2025-13228 affects Google Chrome prior to 142.0.7444.59. The issue is a Type Confusion in V8 that can enable a remote attacker to trigger a heap corruption via a crafted HTML page, potentially allowing code execution. The Chrome 142.0.7444.59 update (and later) fixes this vulnerability; affec...

CVE-2026-11293

CVE-2026-11293 affects Google Chrome (desktop) with Chromium, involving a use-after-free in Input that could allow a remote attacker to potentially escape the sandbox via a crafted HTML page. The issue references Chrome versions prior to 149.0.7827.53 and indicates the vulnerability is tied to th...

CVE-2026-13944

CVE-2026-13944 concerns Google Chrome on macOS where an inappropriate DataTransfer implementation allows a remote attacker to leak cross-origin data via a crafted HTML page, given user-initiated UI gestures. The issue is tied to the DataTransfer handling in Chrome before version 150.0.7871.47. Im...

CVE-2026-16805

CVE-2026-16805 is a use-after-free in Blink affecting Google Chrome prior to 150.0.7871.186, allowing a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML page. The Chrome Stable Channel update mirrors this fix, upgrading to 150.0.7871.186 (Windows/Mac) or 150.0.7871....

CVE-2026-17684

CVE-2026-17684 involves Chrome for iOS prior to 151.0.7922.72, where insufficient validation of untrusted input in the renderer could enable a sandbox escape via a crafted HTML page. The issue arises from input handling within Chrome on iOS (renderer process) and is described as a high-severity, ...

CVE-2026-17817

CVE-2026-17817 concerns an inappropriate implementation in Chrome/Chromium’s ReportingAndNEL component that allowed a remote attacker to leak cross-origin data via a crafted HTML page. Affected are Google Chrome versions prior to 151.0.7922.72; the upstream fix is in 151.0.7922.72. Citations from...

CVE-2026-17954

CVE-2026-17954 affects Google Chrome’s MHTML handling. A policy bypass in MHTML could leak cross-origin data via a crafted MHTML page, as described for Chrome versions prior to 151.0.7922.72. The vulnerability is rated low by Chromium, with network attack vector and user interaction required. Aff...

CVE-2026-17956

CVE-2026-17956 details (NORMAL mode) : In Google Chrome, an inappropriate implementation in the Scheduling component allows a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML page. Affected family: Chrome releases prior to 151.0.7922.72. The root cause is tied to th...

CVE-2026-9874

CVE-2026-9874 is a use-after-free in Chrome’s Dawn component (Chromium) that could allow a sandbox escape via a crafted HTML page. Affected product: Google Chrome (Dawn in Chromium). Version history: fixed in Chrome stable channel as of 148.0.7778.216 (Windows/Linux/macOS varied builds; subsequen...

CVE-2026-9889

CVE-2026-9889 refers to an out-of-bounds read and write in the Dawn component of Google Chrome on Android, fixed in the Chrome update that reaches 148.0.7778.216 (and later). The vulnerability potentially allowed a remote attacker to escape the Chrome sandbox via a crafted HTML page. Affected pro...

CVE-2010-4578

CVE-2010-4578 affects Google Chrome before 8.0.552.224 and Chrome OS before 8.0.552.343. The issue is due to improper cursor handling that can lead to stale pointers, enabling remote attackers to cause a denial of service and possibly other unspecified impact via unknown vectors. Exploitation det...

CVE-2011-1121

CVE-2011-1121 concerns Google Chrome prior to 9.0.597.107. The issue is an integer overflow in a TEXTAREA-related path, allowing a remote attacker to trigger a denial of service and potentially other impact. Affected product: Google Chrome (pre-9.0.597.107); root cause: integer overflow in a comp...

CVE-2017-15425

The CVE-2017-15425 vulnerability affects Google Chrome’s Omnibox prior to 63.0.3239.84, due to insufficient policy enforcement that enables domain spoofing via IDN homographs in crafted domain names. Impact is domain spoofing risk; exploitation arises from adversaries leveraging visually similar ...

CVE-2017-5064

CVE-2017-5064 relates to Blink in Google Chrome prior to 58.0.3029.81 on Windows, where incorrect handling of DOM changes could lead to heap corruption via a crafted HTML page. The vulnerability affects Chrome/Chromium’s rendering engine (Blink) and could be exploited remotely without user intera...

CVE-2026-11247

Google Chrome on Android CustomTabs had insufficient policy enforcement before version 149.0.7827.53, allowing a remote attacker to leak cross-origin data via a crafted HTML page. Root cause: policy enforcement gaps in CustomTabs; impact: cross-origin data leakage. References indicate a patch in ...