CVE-2026-17826

CVE-2026-17826 concerns Chrome for iOS (Google Chrome on iOS). The issue is an inappropriate implementation in Chrome for iOS prior to 151.0.7922.72 that could allow a remote attacker who persuades a user to perform specific UI gestures to leak cross-origin data via a crafted HTML page. The docum...

CVE-2026-17887

CVE-2026-17887 is a Use-After-Free in Chrome's TabStrip prior to 151.0.7922.72 that could allow a remote attacker to trigger heap corruption by convincing a user to perform specific UI gestures on a crafted HTML page. Affected product: Google Chrome (Chromium-based); root cause is use-after-free ...

CVE-2026-19155

CVE-2026-19155 affects Google Chrome (Payments component) and is due to a use-after-free in Payments prior to Chrome 151.0.7922.109. An attacker who can compromise the renderer could potentially escape the sandbox via a crafted HTML page. The Chrome security update (151.0.7922.108/109 for Windows...

CVE-2010-2901

CVE-2010-2901 affects Google Chrome rendering before 5.0.375.125, with memory corruption enabling remote denial of service via unknown vectors. Public records in multiple feeds (Ubuntu USN-1195-1, openSUSE, Gentoo GLSA/GNU patches) confirm this CVE and reference a Chrome/Chromium exposure prior t...

CVE-2010-4197

CVE-2010-4197 is a use-after-free in WebKit as used by WebKitGTK+ and other WebKit-based products, leading to remote denial of service or potentially other impact via text-editing vectors. The vulnerability affects WebKit in Google Chrome before 7.0.517.44 and webkitgtk before 1.2.6, with multipl...

CVE-2011-0779

CVE-2011-0779 affects Google Chrome/Chromium prior to 9.0.597.84: a missing key in an extension can be exploited remotely to cause a denial of service (application crash) via a crafted extension. Debian DSAs reference this CVE and fix it in chromium-browser; for squeeze, version 6.0.472.63~r59945...

CVE-2011-3053

CVE-2011-3053 is a use-after-free in block splitting affecting Google Chrome up to 17.0.963.83 and related Chromium/WebKit components. Connected advisories document a fix path via security updates: openSUSE’s openSUSE-SU-2012:0466-1 for Chromium (addressing CVE-2011-3053 among others) and Ubuntu ...

CVE-2011-3913

Technical details about CVE-2011-3913 are not publicly provided in the supplied connected documents. The entries reference it among others but do not describe affected product, version, exploit, or remediation.

CVE-2012-0725

CVE-2012-0725 affects Adobe Flash Player prior to 11.2.202.229 in Google Chrome up to 18.0.1025.151. The description notes memory corruption that could lead to a denial of service or possibly other impact via unknown vectors; no concrete exploit details or remediation are provided in the document...

CVE-2013-6644

CVE-2013-6644 affects Google Chrome/Chromium prior to 32.0.1700.76 (Windows) and 32.0.1700.77 (Mac/Linux). The entry describes multiple unspecified vulnerabilities that could cause a denial of service or have other impact via unknown vectors. Public advisories in the connected documents show thes...

CVE-2017-15430

CVE-2017-15430 affects the Chromecast plugin in Google Chrome prior to 63.0.3239.84. Root cause: insufficient data validation in the Chromecast plugin. Impact: remote attacker could inject arbitrary scripts/HTML (UXSS) via a crafted HTML page. Public references note the vulnerability in Chrome’s ...

CVE-2020-15993

CVE-2020-15993 affects Google Chrome (printing path) with a use-after-free in the printing flow leading to potential heap corruption when processing crafted HTML pages. Affected software is Google Chrome prior to version 86.0.4240.99; exploitation could be remote via a crafted page with printing ...

CVE-2020-36765

CVE-2020-36765 affects Google Chrome (

CVE-2024-6991

CVE-2024-6991 corresponds to a use-after-free in Chromium’s Dawn component, allowing a remote attacker to potentially trigger heap corruption via a crafted HTML page. The vulnerability affects Google Chrome/Chromium prior to version 127.0.6533.72, with multiple downstream advisories noting fixes ...

CVE-2024-9959

CVE-2024-9959 affects Google Chrome/Chromium with a Use-After-Free in DevTools prior to 130.0.6723.58. A remote attacker who has compromised the renderer could potentially exploit heap corruption via a crafted Chrome Extension. The issue is associated with the Chromium DevTools component and has ...

CVE-2025-13630

CVE-2025-13630 is a Type Confusion in V8 in Google Chrome that could enable remote heap corruption via a crafted HTML page. Affected product is Chromium/Chrome (V8 engine); the issue is fixed in a Chrome/Chromium update ≥ 143.0.7499.41 (ChromeOS notes show related patching in the 143.0.7499.x fam...

CVE-2026-10959

The connected documents confirm CVE-2026-10959 affects Google Chrome on Android (before version 149.0.7827.53). The underlying issue is a use-after-free in Input, enabling a remote attacker to execute arbitrary code inside Chrome’s sandbox via a crafted HTML page. Impact is a high-severity remote...

CVE-2026-11634

CVE-2026-11634 describes a use-after-free in Chrome’s Gamepad handling on Windows, exploitable via a crafted HTML page to potentially escape the Chromium sandbox. Affected: Google Chrome on Windows, prior to version 149.0.7827.103. Impact: remote attacker could achieve sandbox escape with a high ...

CVE-2026-12008

CVE-2026-12008 : In Google Chrome, a Use-after-free in DigitalCredentials (pre-149.0.7827.115) could allow a remote attacker who has compromised the renderer process to potentially escape the sandbox via a crafted HTML page. The Chrome Stable update (149.0.7827.114/115 for Windows/Mac; 149.0.7827...

CVE-2026-17653

CVE-2026-17653: In Google Chrome, a use-after-free in Skia prior to 151.0.7922.72 allowed a renderer-compromised attacker to potentially escape the sandbox via a crafted HTML page. Affected component: Skia inside Chrome’s rendering stack. Root cause: use-after-free in Skia code paths used during ...

CVE-2026-18017

CVE-2026-18017 is a use-after-free vulnerability in Dawn within Google Chrome prior to 151.0.7922.72. The issue could allow a remote attacker to execute arbitrary code inside a sandbox by presenting a crafted HTML page. Affected component is Dawn (Chromium project) used by Chrome; the root cause ...

CVE-2026-19173

CVE-2026-19173 describes an out-of-bounds write in Skia affecting Google Chrome before 151.0.7922.109. A remote attacker who compromises the renderer process could leverage a crafted HTML page to potentially escape the sandbox. The vulnerability is tied to the Skia graphics library within Chrome’...

CVE-2026-5290

CVE-2026-5290 is a use-after-free in Chrome/Chromium’s Compositing pathway that, if the renderer is already compromised, could enable a sandbox escape via a crafted HTML page. The vulnerability affects Chrome prior to version 146.0.7680.178; Google’s update to 146.0.7680.178 (and newer) fixes thi...

CVE-2010-4040

CVE-2010-4040 affects Google Chrome prior to 7.0.517.41. The vulnerability arises from improper handling of animated GIF images, enabling a remote attacker to trigger memory corruption which can lead to a denial of service and potentially other impacts. The available details describe memory corru...

CVE-2011-0472

CVE-2011-0472 affects Google Chrome before 8.0.552.237 and Chrome OS before 8.0.552.344. The issue is improper handling of printing PDF documents, allowing user‑assisted remote attackers to cause a denial of service (application crash) via a multi‑page document. The connected documents do not pro...

CVE-2011-1115

Technical details about CVE-2011-1115 are not publicly provided in the connected documents. Please monitor for updates from vendor advisories and vulnerability databases.

CVE-2011-1296

Technical details for CVE-2011-1296 are not provided in the connected documents. The initial description notes a Chrome SVG text handling issue leading to DoS, but no concrete product/version/impact specifics are given beyond that.

CVE-2011-3033

CVE-2011-3033 : A buffer overflow in Skia, used by Chromium/Chrome, can lead to a crash or potentially other impact. Affected: Chromium-based browsers. Root cause: overflow in Skia drawing library. Impact: remote crash/possible further effects as described in disclosures. Remediation: upgrade to ...

CVE-2014-1732

CVE-2014-1732 describes a use-after-free in the Speech Recognition UI (speech_recognition_bubble_views.cc) of Google Chrome/Chromium. The vulnerability affects Chrome/Chromium built before 34.0.1847.132 on Windows/OS X and Linux, potentially enabling a denial of service or other impact via an INP...

CVE-2014-1733

CVE-2014-1733 is a compiler bug in Seccomp-BPF that could allow a sandbox bypass in Chromium/Google Chrome. Public sources flag the issue as part of a set of vulnerabilities in Chromium, with patches deemed necessary across multiple distributions. The initial CVE description notes the sandbox byp...

CVE-2024-7023

CVE-2024-7023 : Google Chrome Updater has insufficient data validation in its Updater component, affecting Chrome versions prior to 128.0.6537.0. This enables a remote attacker to escalate privileges via a malicious file. Remediation: update Chrome to version 128.0.6537.0 or later. If additional ...

CVE-2024-7024

CVE-2024-7024 affects Google Chrome (V8) due to an inappropriate V8 implementation that could allow a sandbox escape via a crafted HTML page. Affected versions are prior to 126.0.6478.54. Impact: remote attacker could escape the sandbox. Remediation: update to a Chromium/Chrome version containing...

CVE-2026-12464

CVE-2026-12464 : A use-after-free in the Google Chrome renderer before 149.0.7827.155 may allow a remote attacker who compromises the renderer to escape the sandbox via a crafted HTML page, per multiple sources. Affected software is Chrome browsers with the vulnerable Chromium component; the issu...

CVE-2026-17705

CVE-2026-17705 describes an integer overflow in the libxml component used by Google Chrome before 151.0.7922.72. The issue allows a remote attacker to execute arbitrary code inside the browser sandbox when processing a crafted HTML page. The known impact is a high-severity vulnerability (Chromium...

CVE-2026-17750

CVE-2026-17750 describes a use-after-free in ANGLE used by Google Chrome, enabling a remote attacker to potentially escape the browser sandbox via a crafted HTML page. The vulnerability is tied to the ANGLE component within Chrome and is triggered in Chrome versions prior to 151.0.7922.72. The de...

CVE-2026-17995

CVE-2026-17995 is a Google Chrome/Chromium vulnerability affecting Dawn (Chrome rendering path). Out-of-bounds read via a crafted HTML page allows a remote attacker to read memory. Affected software: Dawn in Chrome before version 151.0.7922.72. Impact: high for confidentiality and availability pe...

CVE-2010-4204

CVE-2010-4204 is confirmed in connected data as a WebKit/WebKitGTK+ vulnerability—affecting WebKitGTK+ (webkitgtk before 1.2.6) and WebKit in Chrome before 7.0.517.44. The issue arises from accessing a frame object after it has been destroyed, enabling remote denial of service (and possibly other...

CVE-2011-2857

Technical details for CVE-2011-2857 (Chrome use-after-free via focus controller) are not provided in the connected documents. Monitor for updates to confirm affected versions, impact, and remediation.

CVE-2011-3047

CVE-2011-3047 affects Google Chrome/Chromium’s GPU process via an errant plug-in load, causing memory corruption. This could enable remote code execution or a denial of service. Public advisories consistently associate the issue with the GPU process and provide vendor patches; for example, Gentoo...

CVE-2011-3892

CVE-2011-3892: FFmpeg/libavcodec Theora decoder contains a double‑free vulnerability exploitable via a crafted Theora stream, allowing remote denial of service and possibly other impact. Connected advisories (Debian, Mandriva, FreeBSD VuXML) indicate multiple FFmpeg/libav issues and list CVE-2011...

CVE-2024-7000

CVE-2024-7000 is a use-after-free vulnerability in Chrome/Chromium CSS handling, allowing heap corruption via a crafted HTML page when a user is tricked into specific UI gestures. Affected: Google Chrome prior to 127.0.6533.72 (and Chromium); root cause: use-after-free in CSS. Impact: potentially...

CVE-2025-12429

The CVE concerns Google Chrome’s V8: an inappropriate implementation allowed arbitrary read/write via a crafted HTML page in versions prior to 142.0.7444.59. It is rated High severity with a network vector and no user interaction required. Remediation is to upgrade to 142.0.7444.59 or newer (Chro...

CVE-2026-10888

CVE-2026-10888 affects Cast Streaming in Google Chrome, prior to version 149.0.7827.53. Description: use-after-free in Cast Streaming could be triggered by malicious network traffic on the local network segment, enabling arbitrary code execution. Severity: Critical; attack vector: adjacent (local...

CVE-2026-14139

The CVE affects Google Chrome’s TabStrip with an inappropriate implementation in versions before 150.0.7871.47. A remote attacker could entice a user to perform specific UI gestures via a crafted HTML page to achieve UI spoofing. The issue is tied to a TabStrip implementation flaw in Chromium, wi...

CVE-2026-17867

CVE-2026-17867 is an insufficient validation of untrusted input in Dawn (Chromium/Google Chrome) that could allow a remote attacker to escape the sandbox via a crafted HTML page. Upstream description ties this to Dawn in Chrome prior to 151.0.7922.72; Red Hat and Debian entries reference the same...

CVE-2026-17930

Google Chrome vulnerability CVE-2026-17930 affects Extensions with insufficient validation of untrusted input, enabling privilege escalation for a renderer-compromised process via a crafted HTML page. Affected software: Chrome extensions framework (Chromium-based). Root cause: insufficient input ...

CVE-2010-1773

CVE-2010-1773 is an off-by-one vulnerability in WebKit’s WebCore: the toAlphabetic() routine in rendering/RenderListMarker.cpp contains an error in WebKit prior to r59950. This affects WebKit-based stacks (e.g., Chrome older than 5.0.375.70) and allows remote attackers to read sensitive informati...

CVE-2010-3255

CVE-2010-3255 affects WebKitGTK+ and Google Chrome. The vulnerability arises from improper handling of counter nodes in WebKit, allowing remote attackers to cause memory corruption or potentially other impact, with affected products including Google Chrome prior to 6.0.472.53 and webkitgtk prior ...

CVE-2011-3036

CVE-2011-3036 affects Google Chrome prior to 17.0.963.65, where a bad cast during line box handling could allow a remote attacker to cause a denial of service (and possibly other impact) via a crafted document. Root cause: bad cast in line box handling. Remediation: update Chrome to 17.0.963.65 o...

CVE-2011-3042

CVE-2011-3042 is aUse-after-free in table section handling in Chrome/Chromium prior to 17.0.963.65. Connected updates (openSUSE-SU-2012:0374-1) patch Chromium, upgrading to around 19.x and addressing multiple CVEs including 2011-3042. Remediation: apply the openSUSE security update to obtain the ...