4509 matches found
CVE-2026-10959
The connected documents confirm CVE-2026-10959 affects Google Chrome on Android (before version 149.0.7827.53). The underlying issue is a use-after-free in Input, enabling a remote attacker to execute arbitrary code inside Chrome’s sandbox via a crafted HTML page. Impact is a high-severity remote...
CVE-2023-3742
CVE-2023-3742: Google Chrome on ChromeOS prior to 114.0.5735.90 suffers from insufficient policy enforcement in the ADB component, enabling a local attacker with physical access to bypass device policy restrictions. Affected product: Google Chrome on ChromeOS; vulnerable element: ADB policy enfor...
CVE-2023-7011
CVE-2023-7011 describes an improper implementation in Google Chrome’s Picture in Picture (PiP) feature that allowed a remote attacker to spoof the Omnibox contents via a crafted HTML page. Affected software is Google Chrome (PiP module) prior to version 119.0.6045.105. The underlying issue is an ...
CVE-2026-7333
CVE-2026-7333 describes a use-after-free in the GPU component of Google Chrome, leading to a potential sandbox escape via a crafted HTML page on Chromium-based browsers. Affected product: Google Chrome versions earlier than 147.0.7727.138. Root cause: use-after-free in GPU handling. Impact: remot...
CVE-2011-3019
CVE-2011-3019 : A heap-based buffer overflow in Google Chrome prior to 17.0.963.56 allows remote attackers to cause denial of service or potentially other impact via a crafted Matroska (MKV) file. Affected product: Google Chrome. Root cause: heap-based overflow in MKV parsing. Impact: crash or po...
CVE-2011-3041
CVE-2011-3041 is a use-after-free vulnerability in class attribute handling within Chromium/Chrome components. The openSUSE security update (openSUSE-SU-2012:0374-1) explicitly lists High CVE-2011-3041 and attributes the issue to use-after-free in class attribute handling, with remediation in the...
CVE-2011-3049
Chromium/Chrome CVE-2011-3049 is documented in openSUSE security advisory GLSA 201203-19 and related openSUSE updates. The concrete entry notes: CVE-2011-3049 — Extension web request API can interfere with system requests (low severity). The openSUSE patch set (openSUSE-SU-2012:0466-1) upgrades C...
CVE-2011-3066
Vulnerability context (CVE-2011-3066) : In Google Chrome, Skia-based rendering used for clip operations contains a clipping bug that may trigger an out-of-bounds read, leading to a denial of service. Affected product is Chrome before version 18.0.1025.151 (and related Chromium builds). The issue ...
CVE-2011-3878
CVE-2011-3878 : A race condition in Google Chrome prior to 15.0.874.102 allows remote attackers to cause a denial of service or possibly other impact via vectors related to worker process initialization. The NVD entry lists CVSS v2 base score 6.8 (medium) with network attack vector and partial im...
CVE-2012-5376
CVE-2012-5376 affects Google Chrome prior to 22.0.1229.94: the Inter-process Communication (IPC) implementation in Chrome’s renderer process can bypass sandbox restrictions, enabling remote attackers to write to arbitrary files given renderer access.
CVE-2013-0887
Chromium-based: CVE-2013-0887 affects Google Chrome prior to 25.0.1364.97 (Windows/Linux) and prior to 25.0.1364.99 (Mac). The developer-tools process does not properly restrict privileges when interacting with a connected server, but the provided documents do not specify impact, attack vectors, ...
CVE-2016-10403
CVE-2016-10403 affects Google Chrome's PDFium component in the browser before version 51.0.2704.63, where insufficient data validation on image data can allow a remote attacker to cause an out-of-bounds memory read by a specially crafted PDF file. Documents corroborate a memory-read impact (confi...
CVE-2019-13672
CVE-2019-13672 affects Google Chrome on iOS, where an incorrect security UI in the Omnibox could allow a crafted HTML page to spoof the URL bar. The issue is triggered by using Chrome versions prior to 77.0.3865.75. The documented remediation is to update to 77.0.3865.75 or later. No exploitation...
CVE-2021-4322
Google Chrome/Chromium DevTools contains a Use-After-Free in DevTools vulnerability (CVE-2021-4322) affecting Chrome versions prior to 91.0.4472.77. Exploitation would allow arbitrary code execution when a user installs a crafted malicious extension. Remediation: update Chrome to 91.0.4472.77 or ...
CVE-2023-7010
CVE-2023-7010 is a use-after-free vulnerability in WebRTC in Google Chrome, with impact described as potential heap corruption. The affected software is Google Chrome (WebRTC component); the concrete detail provided indicates exploitation could be remote via a crafted HTML page, and the vulnerabi...
CVE-2026-5290
CVE-2026-5290 is a use-after-free in Chrome/Chromium’s Compositing pathway that, if the renderer is already compromised, could enable a sandbox escape via a crafted HTML page. The vulnerability affects Chrome prior to version 146.0.7680.178; Google’s update to 146.0.7680.178 (and newer) fixes thi...
CVE-2010-2648
CVE-2010-2648 : In Google Chrome, the Unicode Bidirectional Algorithm (UBA) implementation prior to 5.0.375.99 is vulnerable to memory corruption that can lead to a denial of service or potentially other impact via unknown vectors. The description confirms the affected product/version and the und...
CVE-2010-3116
CVE-2010-3116 corresponds to multiple use-after-free vulnerabilities in WebKit related to MIME-type handling by plug-ins. The issue affects WebKit-based clients such as Apple Safari (before 4.1.3 and 5.0.x before 5.0.3), Google Chrome (before 5.0.375.127), and webkitgtk (before 1.2.6). Exploitati...
CVE-2010-3730
CVE-2010-3730 affects Google Chrome prior to 6.0.472.62. The vulnerability arises from improper handling of a document’s origin when managing properties, enabling a remote attacker to induce an unspecified impact via a crafted web site (the so‑called “property pollution”). Publicly documented det...
CVE-2010-4198
CVE-2010-4198 affects WebKit as used in Google Chrome prior to 7.0.517.44 and webkitgtk prior to 1.2.6; it does not properly handle large text areas, enabling remote memory corruption (and potentially other impact) via a crafted HTML document. Affected products include WebKit/WebKitGTK+ and Chrom...
CVE-2011-1107
CVE-2011-1107 is a WebKit/Web browser vulnerability where a malicious site could cause the address bar to display a spoofed URL. It is documented as affecting WebKit components used by Safari on iOS and Mac OS X, with the issue described as a URL spoofing flaw in the handling of URLs (DOM/history...
CVE-2011-1110
CVE-2011-1110 affects Google Chrome pre-9.0.597.107, where improper handling of key frame rules can cause a remote denial of service or other unspecified impact via stale pointers. The vulnerability is documented across multiple sources (NVD/Nessus/OpenVAS) with a base CVSSv2 of 7.5 (HIGH). Affec...
CVE-2011-1113
CVE-2011-1113 affects Google Chrome before 9.0.597.107 on 64-bit Linux. The vulnerability arises from improper pickle deserialization in the browser, enabling remote attackers to trigger a denial of service via an out-of-bounds read. The available connected documents confirm the affected platform...
CVE-2011-3024
CVE-2011-3024 affects Google Chrome (Chromium-based) with vulnerable versions before 17.0.963.56. The issue allows remote attackers to trigger a denial-of-service through an empty X.509 certificate, causing the application to crash. Underlying cause and exact exploit vector are not detailed in th...
CVE-2011-3027
CVE-2011-3027 affects Google Chrome prior to version 17.0.963.56. The issue is tied to a cast of an unspecified variable during handling of document columns, enabling a remote attacker to trigger denial of service and potentially other impacts via a crafted document. The description does not spec...
CVE-2011-3071
CVE-2011-3071 : In Google Chrome, a use-after-free in the HTMLMediaElement implementation (pre-18.0.1025.151) may allow a remote attacker to cause a denial of service or possibly other impact via unknown vectors. Affected product: Google Chrome. Root cause: use-after-free in HTMLMediaElement. Imp...
CVE-2011-3885
The CVE-2011-3885 entry concerns a use-after-free in Google Chrome prior to 15.0.874.102, exploitable to cause a denial of service and potentially other unspecified impact via vectors related to stale CSS token-sequence data. Affected product: Google Chrome (pre-15.0.874.102). Root cause: use-aft...
CVE-2011-3887
CVE-2011-3887 affects Google Chrome prior to 15.0.874.102; the issue stems from improper handling of javascript: URLs, allowing remote attackers to bypass access restrictions and read cookies via unspecified vectors. Multiple Nessus/OpenVAS entries referencing CVE-2011-3887 corroborate browser-re...
CVE-2011-3889
CVE-2011-3889 affects Google Chrome’s Web Audio implementation. The vulnerability is a heap-based buffer overflow in the Web Audio component prior to version 15.0.874.102, which could allow a remote attacker to cause a denial of service or potentially other impact via unknown vectors. Impact is d...
CVE-2011-3898
CVE-2011-3898 affects Google Chrome (Chromium) prior to 15.0.874.120 when using JRE 7, where applet execution proceeds without user confirmation. Public sources (Gentoo GLSA 201111-05) call for upgrading Chromium to >=15.0.874.121 and V8 to >=3.5.10.24; OpenVAS/Gentoo entries corroborate mu...
CVE-2011-3927
CVE-2011-3927 affects Skia as used by Google Chrome prior to 16.0.912.77, where incomplete initialization of values could enable a remote attacker to cause a denial of service or potentially other impact via unknown vectors. The connected documents confirm Chromium-related fixes: the GLSA/openSUS...
CVE-2011-3953
CVE-2011-3953 affects Google Chrome (Chrome before 17.0.963.46). The root cause is that clipboard monitoring after a paste event is not prevented, with unspecified impact. Affected versions are Chrome before 17.0.963.46; mitigation is to upgrade to 17.0.963.46 or newer. Gentoo GLSA/OSV entries in...
CVE-2013-0881
CVE-2013-0881 affects Google Chrome prior to 25.0.1364.97 on Windows/Linux and prior to 25.0.1364.99 on macOS. The vulnerability arises from an incorrect read operation in the Matroska container handling, which can allow a remote attacker to trigger a denial of service. Affected component: Chrome...
CVE-2013-0897
CVE-2013-0897 affects Google Chrome’s PDF functionality. An off-by-one error in the PDF handling code on Windows, Linux, and macOS allows a remote attacker to cause a denial-of-service via a crafted PDF document. The issue is triggered by reading beyond bounds in PDF processing; impact is limited...
CVE-2020-15996
CVE-2020-15996 is a use-after-free in passwords within Google Chrome prior to 86.0.4240.99, allowing a remote attacker who has compromised the renderer process to potentially perform a sandbox escape via a crafted HTML page. The issue affects Chrome’s password handling in the renderer; the root c...
CVE-2010-2110
Google Chrome before 5.0.375.55 does not properly execute JavaScript code in the extension context, with unspecified impact and remote attack vectors. The CVE-2010-2110 entry is supported by multiple sources noting a patch release for version 5.0.375.55. Connected documents also reference broader...
CVE-2010-2301
This CVE-2010-2301 entry describes an XSS in WebKit’s WebCore (Editing/markup.cpp) affecting Google Chrome prior to 5.0.375.70. The vulnerability allows remote attackers to inject arbitrary web script or HTML via node.innerHTML on TEXTAREA, with potential for script execution in the victim’s brow...
CVE-2010-2902
CVE-2010-2902 affects Google Chrome prior to 5.0.375.125, with the SVG implementation vulnerable to memory corruption that can lead to a denial of service (and possibly other impact). Multiple independent advisories and databases (SUSE, Ubuntu, OpenVAS/OpenVAS-derived feeds, Debian tracker) corro...
CVE-2010-3112
The CVE-2010-3112 entry concerns Google Chrome prior to 5.0.375.127 where the file dialogs implementation is flawed, allowing memory corruption that could lead to a denial of service and potentially unspecified additional impact. Affected product is Google Chrome; vulnerable component is the file...
CVE-2010-3119
CVE-2010-3119 affects Google Chrome before 5.0.375.127 and webkitgtk before 1.2.6. The root cause is described as improper Ruby language support, leading to a denial of service (memory corruption) and potentially unspecified other impact via unknown vectors. Connected advisories (e.g., MiracleLin...
CVE-2010-3120
WebKit/Chrome CVE-2010-3120 affects Google Chrome prior to version 5.0.375.127, where the Geolocation implementation is insecure due to an improper handling, allowing remote attackers to cause a denial of service (memory corruption) or possibly other unspecified impact via unknown vectors. The vu...
CVE-2011-0483
CVE-2011-0483 affects Google Chrome before 8.0.552.237 and Chrome OS before 8.0.552.344, where a cast of an unspecified variable during video handling could allow remote denial of service and possibly other impact via unknown vectors. The vulnerability is documented across multiple feeds (NVD and...
CVE-2011-0784
CVE-2011-0784 describes a race condition in Google Chrome prior to 9.0.597.84 that can allow remote code execution via audio-related vectors. Affected: Google Chrome (Desktop builds) before 9.0.597.84. Root cause: race condition in audio handling. Impact: remote arbitrary code execution with part...
CVE-2011-1059
CVE-2011-1059 concerns a use-after-free in WebKit/WebCore (HistoryController handling of provisional items) that affects Google Chrome builds before 11.0.672.2 and related products. The vulnerability allows user-assisted remote attackers to trigger a denial of service via a crash or potentially o...
CVE-2011-1190
CVE-2011-1190 involves the Web Workers cross-origin issue in Chrome before 10.0.648.127. The vulnerability allowed remote attackers to bypass the Same Origin Policy via an error-message leak, potentially exposing partial data to other origins. Affected software: Google Chrome/Chromium WebKit impl...
CVE-2011-1285
The CVE-2011-1285 issue affects Google Chrome prior to version 10.0.648.127. The vulnerability is in the regular-expression functionality, where reentrancy is not properly implemented, enabling remote attackers to cause a denial of service via memory corruption or possibly other impact through un...
CVE-2011-1444
CVE-2011-1444 affects Google Chrome on Linux, where a race condition in the sandbox launcher can allow remote denial of service or other impact. The issue is tied to Chrome prior to version 11.0.696.57. Debian/Gentoo advisory entries indicate the vulnerability was addressed by upgrading Chromium/...
CVE-2011-1455
Google Chrome before 11.0.696.57 is affected by CVE-2011-1455 due to improper handling of multipart-encoded PDFs, enabling remote attackers to trigger an out-of-bounds read and cause a denial-of-service. Affected product: Google Chrome (desktop) prior to version 11.0.696.57; root cause relates to...
CVE-2011-2790
CVE-2011-2790 is a use-after-free vulnerability in handling of floating styles, affecting Google Chrome and Apple Safari. The flaw allows remote attackers to trigger a denial of service or possibly other impact by convincing a user to view a crafted page. Affected software, per the provided docs,...