CVE-2011-1293

The CVE-2011-1293 entry concerns a use-after-free vulnerability in Google Chrome’s HTMLCollection implementation, affecting Chrome versions prior to 10.0.648.204. The vulnerability allows remote attackers to cause a denial of service and potentially other impact via unknown vectors. The provided ...

CVE-2026-19152

Google Chrome vulnerability CVE-2026-19152 affects Chrome releases prior to 151.0.7922.109, where insufficient policy enforcement in the Navigation component could allow a remote attacker who compromises the renderer to escape the sandbox via a crafted HTML page. The issue is tied to the Navigati...

CVE-2026-6307

CVE-2026-6307 concerns a type confusion in V8’s Turbofan compiler affecting Google Chrome before 147.0.7727.101. The vulnerability enables a remote attacker to execute arbitrary code inside a sandbox via a crafted HTML page, with Chromium citing it as High severity. Connected documents provide th...

CVE-2026-7343

CVE-2026-7343 is a Use-after-free in Views in Google Chrome on Windows, exploitable if the renderer is compromised to escape sandbox via a crafted HTML page. Affected versions are Windows builds prior to 147.0.7727.138. The issue is addressed in the 147.0.7727.138 update (and later). If exploitin...

CVE-2026-8582

CVE-2026-8582 affects Dawn in Google Chrome (pre-148.0.7778.168). The issue is described as an object lifecycle vulnerability that could allow a remote attacker to obtain potentially sensitive information from process memory via a crafted HTML page. The provided metrics rate it as CVSSv3.1: Netwo...

CVE-2026-9876

The CVE-2026-9876 entry affects Google Chrome on Android, specifically a WebGL Use-After-Free flaw in the Chromium WebGL pipeline. The vulnerability could enable a remote attacker to escape the Chromium sandbox via a crafted HTML page, as described in the linked Chrome security advisory. The issu...

CVE-2011-3640

CVE-2011-3640 describes an untrusted search path vulnerability in Mozilla Network Security Services (NSS) as used in Google Chrome

CVE-2011-3893

CVE-2011-3893 is described in connected advisories as affecting FFmpeg (libavcodec) with vulnerable MKV and Vorbis media handlers. The vulnerability allows a remote attacker to trigger an out-of-bounds read via crafted media input, resulting in denial of service (application crash or partial avai...

CVE-2017-5096

CVE-2017-5096 affects Google Chrome for Android. The issue is described as insufficient policy enforcement during navigation between schemes, enabling a remote attacker to cause a cross-origin content download via a crafted HTML page and is associated with Android intents. The Chrome 60 release (...

CVE-2024-6998

CVE-2024-6998 affects Chromium-based browsers (Chrome/Chromium) with use-after-free in User Education, allowing a remote attacker who lures a user to perform specific UI gestures via a crafted HTML page to potentially cause heap corruption. The vulnerability is fixed in Chromium 127.0.6533.88+ (D...

CVE-2026-16423

Google Chrome UI use-after-free (CVE-2026-16423) affects Chrome versions prior to 150.0.7871.182. Root cause: use-after-free in the UI code, enabling a remote attacker to craft an HTML page and, via user-initiated UI gestures, potentially heap-corrupt and execute arbitrary code. Impact is high (r...

CVE-2026-17682

CVE-2026-17682 is an integer overflow in ANGLE used by Google Chrome prior to 151.0.7922.72 that could enable a sandbox escape when a renderer process is compromised via a crafted HTML page. The vulnerability affects Chrome’s ANGLE component and is listed among a large set of security fixes in th...

CVE-2026-17750

CVE-2026-17750 describes a use-after-free in ANGLE used by Google Chrome, enabling a remote attacker to potentially escape the browser sandbox via a crafted HTML page. The vulnerability is tied to the ANGLE component within Chrome and is triggered in Chrome versions prior to 151.0.7922.72. The de...

CVE-2026-17887

CVE-2026-17887 is a Use-After-Free in Chrome's TabStrip prior to 151.0.7922.72 that could allow a remote attacker to trigger heap corruption by convincing a user to perform specific UI gestures on a crafted HTML page. Affected product: Google Chrome (Chromium-based); root cause is use-after-free ...

CVE-2026-19155

CVE-2026-19155 affects Google Chrome (Payments component) and is due to a use-after-free in Payments prior to Chrome 151.0.7922.109. An attacker who can compromise the renderer could potentially escape the sandbox via a crafted HTML page. The Chrome security update (151.0.7922.108/109 for Windows...

CVE-2026-9874

CVE-2026-9874 is a use-after-free in Chrome’s Dawn component (Chromium) that could allow a sandbox escape via a crafted HTML page. Affected product: Google Chrome (Dawn in Chromium). Version history: fixed in Chrome stable channel as of 148.0.7778.216 (Windows/Linux/macOS varied builds; subsequen...

CVE-2026-9889

CVE-2026-9889 refers to an out-of-bounds read and write in the Dawn component of Google Chrome on Android, fixed in the Chrome update that reaches 148.0.7778.216 (and later). The vulnerability potentially allowed a remote attacker to escape the Chrome sandbox via a crafted HTML page. Affected pro...

CVE-2010-1770

CVE-2010-1770 affects WebKit-based browsers (Safari up to v5 on macOS 10.5–10.6 and Windows; Safari up to v4.1 on macOS 10.4; Chrome up to 5.0.375.70). The issue is a transformation handling bug for a text node using IBM1147 charset, in HTML with a BR element, related to a type checking issue. Co...

CVE-2011-0981

CVE-2011-0981 affects Google Chrome (WebKit/Chromium) prior to 9.0.597.94, where improper event handling for animations can lead to a stale pointer, enabling remote denial-of-service or other unspecified impact via unknown vectors. The entry attributes the issue to WebKit/Chromium components and ...

CVE-2011-1114

CVE-2011-1114 affects Google Chrome prior to 9.0.597.107, where improper handling of tables may lead to a stale node, enabling remote denial of service or potentially other unspecified impact via unknown vectors. No explicit exploitation details or remediation are provided in the connected docume...

CVE-2011-1203

CVE-2011-1203 affects Google Chrome prior to 10.0.648.127. It arises from improper handling of SVG cursors, which can allow a remote attacker to cause a denial of service or possibly other unspecified impact via a stale pointer. The vulnerability is tied to Chrome/Chromium’s SVG rendering behavio...

CVE-2011-2823

CVE-2011-2823 affects Google Chrome before 13.0.782.215. The vulnerability is a use-after-free in the line box handling, enabling remote denial of service and possibly other impact. The provided connected sources confirm the Chrome-specific root cause and vulnerable component, but do not specify ...

CVE-2017-15395

The CVE-2017-15395 entry concerns a null-pointer dereference in the ImageCapture component of Chromium/Blink, leading to a potential denial of service or instability. Affected products include Chromium-based browsers (Chromium/Chromium-browser and Google Chrome) with versions prior to 62.0.3202.6...

CVE-2017-5125

CVE-2017-5125 affects Chromium/Chromium‑Browser (Skia) prior to 62.0.3202.62. Root cause: a heap overflow in the Skia component that can be triggered by a crafted HTML page. Impact: remote attacker could potentially execute arbitrary code within the browser context; impact details are cited acros...

CVE-2017-5132

CVE-2017-5132 —In Chrome/Chromium, an incorrect WebAssembly stack manipulation in the WebAssembly component before version 62.0.3202.62 can allow a remote attacker to trigger arbitrary code execution via a crafted HTML page. The issue is associated with a heap/stack manipulation flaw in the Chrom...

CVE-2018-6084

CVE-2018-6084 affects Google Chrome on macOS prior to 66.0.3359.117. The underlying issue is unsafe/insufficiently sanitized use of Distributed Objects by the Google Updater, allowing a local attacker to execute arbitrary code via an executable file. Connected sources corroborate the macOS Update...

CVE-2022-3049

CVE-2022-3049 describes a use-after-free in SplitScreen on Google Chrome for Chrome OS/Lacros prior to 105.0.5195.52, where a remote attacker who lures a user into specific UI interactions could trigger heap corruption via a crafted HTML page. Affected software is Chrome/Chrome OS with SplitScree...

CVE-2024-6994

CVE-2024-6994: A heap buffer overflow in the Layout component of Google Chrome/Chromium prior to 127.0.6533.72 enables remote heap corruption via a crafted HTML page. Public sources corroborate the issue across Chrome/Chromium derivatives (e.g., Astra Linux reports 127.0.6533.72; Debian security ...

CVE-2026-11293

CVE-2026-11293 affects Google Chrome (desktop) with Chromium, involving a use-after-free in Input that could allow a remote attacker to potentially escape the sandbox via a crafted HTML page. The issue references Chrome versions prior to 149.0.7827.53 and indicates the vulnerability is tied to th...

CVE-2026-17817

CVE-2026-17817 concerns an inappropriate implementation in Chrome/Chromium’s ReportingAndNEL component that allowed a remote attacker to leak cross-origin data via a crafted HTML page. Affected are Google Chrome versions prior to 151.0.7922.72; the upstream fix is in 151.0.7922.72. Citations from...

CVE-2011-3044

CVE-2011-3044 affects Google Chrome prior to 17.0.963.65. The vulnerability is a use-after-free in SVG animation elements, allowing remote attackers to trigger a denial of service (and potentially other impacts) via SVG animation vectors. Mitigation provided in the Chrome update to version 17.0.9...

CVE-2011-3922

CVE-2011-3922 is a stack-based buffer overflow in Google Chrome’s glyph handling affecting Chrome up to version 16.0.912.75. Exploitation could cause a denial of service or possibly other impact, as described in connected advisories. The MiracleLinux/OpenSUSE/NASL entries confirm the issue was as...

CVE-2013-6646

CVE-2013-6646 is a use-after-free vulnerability in Google Chrome’s Web Workers implementation. The flaw affects Chrome on Windows (pre-32.0.1700.76) and macOS/Linux (pre-32.0.1700.77), enabling remote denial of service and potentially other unspecified impacts via worker shutdown-related vectors....

CVE-2021-4320

CVE-2021-4320 affects Blink in Google Chrome and was due to ause-after-free in Blink. The vulnerability exists in Chrome versions prior to 92.0.4515.107, enabling a remote attacker who has compromised the renderer process to perform arbitrary read/write via a crafted HTML page. Multiple connected...

CVE-2023-7012

CVE-2023-7012 affects Google Chrome’s Permission Prompts due to insufficient data validation, potentially enabling a sandbox escape when a user runs a malicious app. Described for Chrome versions before 117.0.5938.62; exploitation requires user interaction and a malicious file. Astra Linux bullet...

CVE-2025-13229

CVE-2025-13229 is a type confusion in V8 affecting Google Chrome before 142.0.7444.59. The vulnerability allows a remote attacker to potentially trigger heap corruption via a crafted HTML page, with a high severity (CVSS v3.1: 8.8, AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H). Affected product/stack: Goo...

CVE-2025-13632

CVE-2025-13632 affects Google Chrome/Chromium DevTools, where an inappropriate DevTools implementation allowed sandbox escape when a user installed a crafted malicious extension. The vulnerable component is DevTools in Chrome, with exploitation tied to extension installation. The issue stems from...

CVE-2026-15107

CVE-2026-15107 concerns Google's Chrome browser: a use-after-free in IndexedDB allowed via a crafted HTML page to potentially execute arbitrary code inside the sandbox. Affected software is Chrome prior to 150.0.7871.115 (Windows/Mac) with Linux at 150.0.7871.114. The underlying issue is a use-af...

CVE-2026-16807

Summary (concrete): CVE-2026-16807 is an out-of-bounds write in Chrome’s Codecs before version 150.0.7871.186 that could permit a remote attacker to escape the browser sandbox via a crafted HTML page. Affected software: Google Chrome (Desktop); vulnerable component: Codecs. Root cause: out-of-bou...

CVE-2026-17704

CVE-2026-17704: Use-after-free in ANGLE component of Google Chrome leading to potential sandbox escape when a renderer process+ crafted HTML page is exploited. Affected versions are before 151.0.7922.72 (Chromium-based build). The vulnerability allows a remote attacker who has compromised the ren...

CVE-2026-17826

CVE-2026-17826 concerns Chrome for iOS (Google Chrome on iOS). The issue is an inappropriate implementation in Chrome for iOS prior to 151.0.7922.72 that could allow a remote attacker who persuades a user to perform specific UI gestures to leak cross-origin data via a crafted HTML page. The docum...

CVE-2026-17954

CVE-2026-17954 affects Google Chrome’s MHTML handling. A policy bypass in MHTML could leak cross-origin data via a crafted MHTML page, as described for Chrome versions prior to 151.0.7922.72. The vulnerability is rated low by Chromium, with network attack vector and user interaction required. Aff...

CVE-2026-5290

CVE-2026-5290 is a use-after-free in Chrome/Chromium’s Compositing pathway that, if the renderer is already compromised, could enable a sandbox escape via a crafted HTML page. The vulnerability affects Chrome prior to version 146.0.7680.178; Google’s update to 146.0.7680.178 (and newer) fixes thi...

CVE-2010-0650

CVE-2010-0650 affects WebKit used by Google Chrome (pre-4.0.249.78) and Apple Safari. The flaw allows remote attackers to bypass restrictions on popup windows via crafted mouse click events. Public updates exist: openSUSE/SUSE and Mandriva advisories reference libwebkit/webkit updates addressing ...

CVE-2011-2825

CVE-2011-2825 concerns a use-after-free in Google Chrome prior to 13.0.782.215 tied to font handling, allowing remote attackers to cause a denial of service or potentially other impact via custom-font vectors. The Connected documents confirm affected software (Chrome before 13.0.782.215) and the ...

CVE-2011-3056

CVE-2011-3056 affects Google Chrome prior to 17.0.963.83, where a cross-origin policy bypass is possible via a vector involving a “magic iframe.” The underlying issue is a Same Origin Policy bypass in the browser’s handling of iframes, enabling partial confidentiality/integrity exposure. The publ...

CVE-2013-6641

CVE-2013-6641 is a use-after-free in Blink’s FormAssociatedElement::formRemovedFromTree, affecting Chromium-derived browsers (Chromium/chromium-browser) prior to the patched 32.0.1700.76/77 builds. The vulnerability arises from improper handling of the past names map of a FORM element, enabling r...

CVE-2017-5082

CVE-2017-5082 is a Chromium/Google Chrome vulnerability affecting the credit card editor component. Connected sources describe an insufficient validation/memory misreference in the credit card editor, enabling a local attacker to execute code or cause information disclosure when processing crafte...

CVE-2022-4923

CVE-2022-4923 describes an Inappropriate implementation in Omnibox of Google Chrome before 99.0.4844.51, enabling a privileged network-position attacker to perform a man-in-the-middle via malicious traffic. Affected component: Omnibox within Chrome/Chromium; underlying cause cited as improper Omn...

CVE-2023-3731

CVE-2023-3731 affects Google Chrome on ChromeOS prior to 115.0.5790.131, where a use-after-free in Diagnostics could be triggered by a user-installed malicious extension, potentially enabling heap corruption. The vulnerability is tied to Diagnostics handling in ChromeOS, with high severity. Publi...