CVE-2026-11247

Google Chrome on Android CustomTabs had insufficient policy enforcement before version 149.0.7827.53, allowing a remote attacker to leak cross-origin data via a crafted HTML page. Root cause: policy enforcement gaps in CustomTabs; impact: cross-origin data leakage. References indicate a patch in ...

CVE-2026-14401

CVE-2026-14401 affects Google Chrome on Android through ANGLE, where insufficient validation of untrusted input in ANGLE prior to 150.0.7871.46 enables a renderer-Process-compromised remote attacker to potentially escape the sandbox via a crafted HTML page. The vulnerability is described as high ...

CVE-2026-17682

CVE-2026-17682 is an integer overflow in ANGLE used by Google Chrome prior to 151.0.7922.72 that could enable a sandbox escape when a renderer process is compromised via a crafted HTML page. The vulnerability affects Chrome’s ANGLE component and is listed among a large set of security fixes in th...

CVE-2010-2898

CVE-2010-2898 is tied to a GNU C Library (glibc) vulnerability referenced by multiple advisories and OpenVAS/MIRACLE/OSV entries. The linked documents indicate a glibc-related issue in the early 2010s and note its relation to other CVEs (e.g., 2011-1071) but do not provide concrete exploit detail...

CVE-2010-4206

CVE-2010-4206 is a WebKit/WebKitGTK+ vulnerability described across multiple advisories as an array index error in FEBlend::apply (WebCore/graphics/filters/FEBlend.cpp). This defect was present in WebKit builds used by Google Chrome prior to 7.0.517.44 and webkitgtk before 1.2.6, among other prod...

CVE-2011-2788

Technical details for CVE-2011-2788 are not publicly available in the provided documents. No specifics on affected product versions, root cause, or remediation are present. Monitor for updates from official advisories and vulnerability feeds.

CVE-2011-3016

CVE-2011-3016 involves a use-after-free in Google Chrome prior to 17.0.963.56, tied to a read-after-free issue with counter nodes. The vulnerability could allow remote attackers to cause a denial of service and potentially other unspecified impacts. Public exploitation details beyond the basic de...

CVE-2013-0879

CVE-2013-0879 affects Google Chrome on Windows, Linux, and macOS where Web Audio nodes are not properly implemented, leading to memory corruption and potential impact as described in the CVE record. The vulnerability is documented in multiple security advisories and is listed among Chrome securit...

CVE-2014-1734

CVE-2014-1734 is a Chromium/Chrome vulnerability described as “Various fixes from internal audits, fuzzing and other initiatives.” Public details show affected software as Chromium/Chrome; prior versions include Chrome before 34.0.1847.131 (Windows/OS X) and before 34.0.1847.132 (Linux). Connecte...

CVE-2020-15994

CVE-2020-15994 affects Google Chrome’s V8 engine, with heap corruption possible through a remote attacker via a crafted HTML page in versions prior to 86.0.4240.99. The vulnerability is described as a use-after-free in V8. The Chrome 86.0.4240.99 Android update notes this release includes multipl...

CVE-2021-30558

Google Chrome prior to 91.0.4472.77 had an insufficient Content Security Policy enforcement vulnerability allowing a remote attacker to bypass CSP via a crafted HTML page. The issue affects Chrome desktop (client-side CSP handling) with a high impact per CVSS metrics, and was addressed in the Chr...

CVE-2026-14153

CVE-2026-14153 affects Google Chrome (Chromium-based) due to an inappropriate implementation in the Glic component prior to Chrome 150.0.7871.47. This flaw allows a remote attacker to perform UI spoofing by convincing a user to engage specific UI gestures via a crafted HTML page. The issue’s impa...

CVE-2026-14418

Technical details about CVE-2026-14418 are not publicly available in the provided documents. Monitor for updates from official advisories for affected products, impact, and fixes.

CVE-2026-16423

Google Chrome UI use-after-free (CVE-2026-16423) affects Chrome versions prior to 150.0.7871.182. Root cause: use-after-free in the UI code, enabling a remote attacker to craft an HTML page and, via user-initiated UI gestures, potentially heap-corrupt and execute arbitrary code. Impact is high (r...

CVE-2026-19141

CVE-2026-19141 is a use-after-free in the Chromium-based Google Chrome Android renderer. The issue affects Resources in Chrome on Android prior to 151.0.7922.109, where a remote attacker with renderer access could potentially escape the sandbox via a crafted HTML page. The vulnerability’s impact ...

CVE-2026-19152

Google Chrome vulnerability CVE-2026-19152 affects Chrome releases prior to 151.0.7922.109, where insufficient policy enforcement in the Navigation component could allow a remote attacker who compromises the renderer to escape the sandbox via a crafted HTML page. The issue is tied to the Navigati...

CVE-2010-1822

CVE-2010-1822 (WebKit): WebKit used in Apple Safari (pre-4.1.3 and 5.0.x before 5.0.3) and Google Chrome (before 6.0.472.62) fails to correctly cast an unspecified variable when processing an SVG element embedded in a non-SVG document, allowing remote attackers to trigger arbitrary code execution...

CVE-2011-0983

Technical details for CVE-2011-0983 are not publicly available in the provided connected documents. Monitor for updates from official advisories; no product, impact, or remediation specifics are provided here.

CVE-2011-1189

CVE-2011-1189 affects Google Chrome prior to 10.0.648.127. The vulnerability arises from improper box layout in the browser’s rendering, allowing remote attackers to cause a denial of service or potentially other impact via unknown vectors that lead to a “stale node.” Exploitation details are not...

CVE-2011-1295

The CVE-2011-1295 entry concerns WebKit used by Google Chrome (pre-10.0.648.204) and Safari (pre-5.0.6). The root cause is improper handling of DOM node parentage in WebKit, which can lead to DOM tree corruption. Consequences stated in the sources include remote denial of service, cross-site scri...

CVE-2011-2359

Technical details about CVE-2011-2359 (affected product/versions, root cause, impact, fix) are not publicly available in the provided connected documents. Monitor for updates.

CVE-2011-2827

CVE-2011-2827 affects Google Chrome via a use-after-free in the text-search workflow. Affected component: Chrome’s text-search handling (likely in the browser engine). Vulnerable condition: Chrome versions prior to 13.0.782.215. Impact: remote attackers could trigger a denial of service or potent...

CVE-2011-2846

Technical details for CVE-2011-2846 are not present in the provided connected documents. Monitor for updates; information currently limited to the CVE entry and associated references.

CVE-2011-3034

CVE-2011-3034 is a use-after-free in SVG document handling in Google Chrome up to version 17.0.963.65, potentially causing a remote denial of service (and possibly other impact) via SVG vectors. The connected documents confirm the CVE is referenced in Chrome’s 2012 updates, and show related patch...

CVE-2011-3081

CVE-2011-3081 is a Use-after-free in Chromium/Google Chrome's floats handling. Affected: Chrome

CVE-2013-6645

CVE-2013-6645 is a use-after-free in Chromium’s OnWindowRemovingFromRootWindow (web_contents_view_aura.cc) that can allow user-assisted remote denial of service via speech-input related vectors. Public references show Chromium/Chromium-based browsers were fixed in updates: openSUSE notes Chromium...

CVE-2017-15426

The CVE-2017-15426 entry covers a vulnerability in Google Chrome's Omnibox where policy enforcement for IDN homographs could allow domain spoofing. Affected product/component: Google Chrome/Omnibox prior to version 63.0.3239.84. Root cause: insufficient policy enforcement enabling spoofed URLs vi...

CVE-2017-5028

CVE-2017-5028 affects Google Chrome’s V8 engine. The issue is insufficient data validation in V8 prior to Chrome 56.0.2924.76, enabling a remote attacker to leak cross-origin data via a crafted HTML page. Impact per provided metrics: CVSSv2 base 4.3 (Partial confidentiality), CVSSv3 base 6.5 (Con...

CVE-2018-6122

CVE-2018-6122 : A type confusion vulnerability in the V8 JavaScript engine of Google Chrome (pre-66.0.3359.139) could allow a remote attacker to exploit heap corruption via a crafted HTML page. Affected product: Google Chrome (V8 component). Root cause: type confusion in V8. Impact: remote code e...

CVE-2023-4369

CVE-2023-4369 affects Google Chrome on ChromeOS prior to 116.0.5845.120. The issue is insufficient data validation in Systems Extensions, which could allow a user who is convinced to install a malicious extension to bypass file restrictions via a crafted HTML page. Connected sources corroborate t...

CVE-2024-7022

CVE-2024-7022 describes an uninitialized use in V8 of Google Chrome before 123.0.6312.58, permitting a remote attacker to trigger out-of-bounds memory access via a crafted HTML page. Affected component: V8 JavaScript engine within Chrome/Chromium. Root cause: uninitialized use leading to memory a...

CVE-2025-13632

CVE-2025-13632 affects Google Chrome/Chromium DevTools, where an inappropriate DevTools implementation allowed sandbox escape when a user installed a crafted malicious extension. The vulnerable component is DevTools in Chrome, with exploitation tied to extension installation. The issue stems from...

CVE-2026-16807

Summary (concrete): CVE-2026-16807 is an out-of-bounds write in Chrome’s Codecs before version 150.0.7871.186 that could permit a remote attacker to escape the browser sandbox via a crafted HTML page. Affected software: Google Chrome (Desktop); vulnerable component: Codecs. Root cause: out-of-bou...

CVE-2026-19156

CVE-2026-19156 affects Google Chrome before 151.0.7922.109. Description: heap buffer overflow in Base allows exploitation via a crafted Chrome Extension after user installs a malicious extension. Impact is high; Chrome update 151.0.7922.109 addresses the issue (stable channel). Other sources (EUV...

CVE-2026-6307

CVE-2026-6307 concerns a type confusion in V8’s Turbofan compiler affecting Google Chrome before 147.0.7727.101. The vulnerability enables a remote attacker to execute arbitrary code inside a sandbox via a crafted HTML page, with Chromium citing it as High severity. Connected documents provide th...

CVE-2026-9998

CVE-2026-9998 affects the Skia component in Google Chrome/Chromium. An integer overflow in Skia prior to version 148.0.7778.216 could allow a remote attacker who has compromised the renderer process to potentially perform a sandbox escape via a crafted HTML page. The impact is a high-severity, lo...

CVE-2010-3259

CVE-2010-3259 affects WebKit and WebKitGTK+ components across Safari and Chrome. Root cause: read access to images derived from CANVAS elements was not properly restricted, allowing a remote site to bypass the Same Origin Policy and obtain potentially sensitive image data. Affected versions inclu...

CVE-2010-4492

CVE-2010-4492 is a use-after-free vulnerability in Google Chrome prior to version 8.0.552.215 . The flaw occurs in handling of SVG animations and can allow a remote attacker to cause a denial of service or potentially other unspecified impact. The vulnerability affects Chrome’s rendering/JavaScri...

CVE-2011-0482

CVE-2011-0482 affects Google Chrome (before 8.0.552.237) and Chrome OS (before 8.0.552.344). The vulnerability arises from improper casting of an unspecified variable during handling of anchors in HTML, enabling a remote attacker to cause a denial of service and potentially other impacts. Multipl...

CVE-2011-1186

CVE-2011-1186 affects Google Chrome on Linux prior to 10.0.648.127. The vulnerability stems from improper handling of parallel calls to the print method in JavaScript, which could allow an attacker to crash the browser via crafted script, resulting in a denial-of-service. Connected documents corr...

CVE-2011-3038

CVE-2011-3038 is a use-after-free in multi-column handling affecting Chromium/Chrome as documented in connected advisories. OpenSUSE notes a patch in openSUSE-SU-2012:0374-1 for Chromium v8, addressing High CVE-2011-3038 among others, and lists updates to Chromium 19.0.1060–19.0.1066 with related...

CVE-2011-3067

Technical details for CVE-2011-3067 are not publicly provided in the connected documents. Please monitor for updates; available sources mention Chrome/SOP issue in general terms but do not specify affected components, versions, or fixes in these materials.

CVE-2015-1210

CVE-2015-1210 is a cross-origin bypass vulnerability in the Chrome/Blink V8 bindings. The issue arises in V8ThrowException::createDOMException within bindings/core/v8/V8ThrowException.cpp, which does not properly enforce frame access restrictions when throwing exceptions. A remote attacker could ...

CVE-2023-2458

CVE-2023-2458 describes a use-after-free in ChromeOS Camera within Google Chrome on ChromeOS, prior to 113.0.5672.114, enabling a remote attacker who persuades UI interaction to trigger heap corruption. Connected sources corroborate the same description; no exploit code or live-attack data is pro...

CVE-2024-7019

CVE-2024-7019 describes an insecure UI implementation in Google Chrome (Chromium-based) before 124.0.6367.60, where a remote attacker could induce UI spoofing via a crafted HTML page if the user performs specific UI gestures. The evidence across connected sources consistently references the same ...

CVE-2025-13229

CVE-2025-13229 is a type confusion in V8 affecting Google Chrome before 142.0.7444.59. The vulnerability allows a remote attacker to potentially trigger heap corruption via a crafted HTML page, with a high severity (CVSS v3.1: 8.8, AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H). Affected product/stack: Goo...

CVE-2026-10000

CVE-2026-10000 is a use-after-free vulnerability in Google Chrome on Windows affecting the Passwords component. The underlying issue occurs when the renderer process is compromised, enabling a crafted HTML page to potentially escape the Chrome sandbox. Impact is described as high, with remote cod...

CVE-2026-10011

CVE-2026-10011 concerns an inappropriate implementation in the Skia component of Google Chrome before 148.0.7778.216, where a remote attacker who already had renderer access could leak cross-origin data via a crafted HTML page. The issue is tied to the Skia/Chromium stack and is described in mult...

CVE-2026-13036

The CVE-2026-13036 entry documents a use-after-free in Blink of Google Chrome before 149.0.7827.197, enabling a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML page. Affected component: Blink (Chromium-based crawler). Root cause: use-after-free in Blink logic; impa...

CVE-2026-15107

CVE-2026-15107 concerns Google's Chrome browser: a use-after-free in IndexedDB allowed via a crafted HTML page to potentially execute arbitrary code inside the sandbox. Affected software is Chrome prior to 150.0.7871.115 (Windows/Mac) with Linux at 150.0.7871.114. The underlying issue is a use-af...