CVE-2011-2792

Technical details for CVE-2011-2792 are not publicly provided in the connected documents; the entries reference the CVE but do not specify affected products, versions, impact, or fixes. Monitor for updates.

CVE-2011-2806

CVE-2011-2806 affects Google Chrome

CVE-2011-2841

CVE-2011-2841 affects Google Chrome

CVE-2011-2876

Google Chrome before 14.0.835.202 is affected by CVE-2011-2876 (use-after-free in text line box) that can cause denial of service and possibly other impact. Affected versions include the 14.x release line prior to 14.0.835.202; OpenVAS/NVD entries describe multiple related CVEs in the Oct 2011 Ch...

CVE-2011-3021

CVE-2011-3021 affects Google Chrome up to version 17.0.963.56, where a use-after-free in the subframe loading path allows remote attackers to cause a denial of service and potentially other impacts. The issue is triggered via subframe loading vectors and is described as a use-after-free vulnerabi...

CVE-2011-3022

CVE-2011-3022 affects Google Chrome (translation feature): the vulnerable code path is in translate/translate_manager.cc, where an HTTP session used for translation could leak information to an eavesdropper. The vulnerability is described as an information disclosure via the HTTP session. Affecte...

CVE-2011-3074

Technical details about CVE-2011-3074 are not publicly available in the provided connected documents. The supplied sources do not specify affected products, versions, impact, or fixes for this CVE.

CVE-2011-3080

CVE-2011-3080 describes a race condition in Google Chrome’s Inter-process Communication (IPC) sandbox that could allow bypassing sandbox restrictions. The initial description specifies Chrome prior to 18.0.1025.168 and mentions unspecified vectors for the bypass. Connected documents corroborate t...

CVE-2011-3965

CVE-2011-3965 affects Google Chrome prior to 17.0.963.46. The root cause is improper signature checking, enabling a remote attacker to trigger a denial of service (application crash) via unspecified vectors. Connected advisories corroborate this family of Chromium/Chrome vulnerabilities and indic...

CVE-2019-5843

CVE-2019-5843 affects Google Chrome’s JavaScript engine prior to 74.0.3729.108, where an out-of-bounds memory access could allow a remote attacker to trigger heap corruption via a crafted HTML page. The vulnerability is rooted in improper memory handling in JavaScript execution, leading to potent...

CVE-2024-11919

CVE-2024-11919 concerns Google Chrome for Android, where an inappropriate implementation in Intents could let a remote attacker perform UI spoofing via a crafted HTML page. The issue affects Chrome on Android prior to version 129.0.6668.58 . The connected Red Hat/Ubuntu/Debian and other CVE feeds...

CVE-2024-13178

CVE-2024-13178 concerns Google Chrome’s fullscreen implementation. The vulnerability arises from an inappropriate fullscreen handling in Chrome/Chromium prior to version 128.0.6613.84, enabling a remote attacker to trigger UI spoofing via a crafted HTML page. Practical impact is UI spoofing with ...

CVE-2025-9866

CVE-2025-9866 affects Google Chrome/Chromium: an incorrect implementation in Chrome extensions allows a remote attacker to bypass the content security policy via a crafted HTML page. Impact: CSP bypass; affected component is the Extensions subsystem. Vulnerable versions are Chrome before 140.0.73...

CVE-2026-14153

CVE-2026-14153 affects Google Chrome (Chromium-based) due to an inappropriate implementation in the Glic component prior to Chrome 150.0.7871.47. This flaw allows a remote attacker to perform UI spoofing by convincing a user to engage specific UI gestures via a crafted HTML page. The issue’s impa...

CVE-2026-14382

CVE-2026-14382 affects Chrome’s ANGLE component. The issue is insufficient validation of untrusted input in ANGLE, enabling a remote sandbox-escape via a crafted HTML page. Product/versions: Google Chrome prior to 150.0.7871.46. Impact: sandbox escape potential with high severity (per Chromium ad...

CVE-2026-14401

CVE-2026-14401 affects Google Chrome on Android through ANGLE, where insufficient validation of untrusted input in ANGLE prior to 150.0.7871.46 enables a renderer-Process-compromised remote attacker to potentially escape the sandbox via a crafted HTML page. The vulnerability is described as high ...

CVE-2026-15110

The CVE-2026-15110 entry concerns Google Chrome: a use-after-free in the Extensions component that can lead to heap corruption. Affected software is Chrome prior to version 150.0.7871.115; the underlying cause is use-after-free within the Extensions handling, exploitable when a user is convinced ...

CVE-2026-5280

CVE-2026-5280 affects Google Chrome’s WebCodecs component. A use-after-free in WebCodecs prior to 146.0.7680.178 allows a remote attacker to run arbitrary code in the sandbox via a crafted HTML page. The issue is acknowledged across multiple advisories (Chromium/Chrome updates and trackers). The ...

CVE-2026-8014

CVE-2026-8014 affects Google Chrome prior to 148.0.7778.96. The Debian/EUVD/NVD entries describe an inappropriate implementation in Preload that allows a remote attacker to leak cross-origin data via a crafted HTML page. The vulnerability impact is described as low severity, with a CVSS 3.1 base ...

CVE-2010-2900

CVE-2010-2900 concerns Google Chrome prior to 5.0.375.125, which does not properly handle a large canvas. The connected records identify Chrome as the affected product and list CVE-2010-2900 among WebKit/Chrome vulnerabilities in 2010-2011 public advisories (e.g., USN-1195-1, OpenVAS entries). Th...

CVE-2010-4205

CVE-2010-4205 affects Google Chrome prior to 7.0.517.44, where improper handling of the data types of event objects can allow remote attackers to cause a denial of service or potentially other impact via unknown vectors. The provided documents do not include a vendor fix/patch information or conc...

CVE-2011-1108

CVE-2011-1108 affects Google Chrome/Chromium before 9.0.597.107. A flaw in JavaScript dialogs can be triggered by a crafted HTML document to cause a denial of service (application crash) or other unspecified impact. The Debian/DSA advisories and OpenVAS entries mirror this issue and recommend upg...

CVE-2011-1197

CVE-2011-1197 affects Google Chrome before version 10.0.648.127. The vulnerability stems from improper table painting in the rendering path, allowing remote attackers to cause a denial of service and potentially other unspecified impact via unknown vectors that lead to a stale pointer. Affected v...

CVE-2011-1443

CVE-2011-1443 affects Google Chrome prior to version 11.0.696.57, where the layered rendering code can expose a denial-of-service or possibly other impact via stale pointers. Public sources in the connected docs confirm the issue as a Chrome layering pointer problem and reference the 11.0.696.57 ...

CVE-2011-1445

CVE-2011-1445 affects Google Chrome up to version 11.0.696.57, where SVG document handling is vulnerable to an out-of-bounds read, enabling a remote DoS. The OpenVAS entries corroborate a vulnerability in Chrome with SVG-related memory errors. Patch: upgrade to Chrome 11.0.696.57 or later (as rel...

CVE-2011-1456

CVE-2011-1456 affects Google Chrome earlier than 11.0.696.57. The vulnerability arises from Chrome’s handling of PDF forms, allowing remote attackers to cause a denial of service or potentially other unspecified impact via vectors that lead to “stale pointers.” Exploitation details are not provid...

CVE-2011-2785

Google Chrome up to 13.0.782.107 is affected by CVE-2011-2785 due to improper validation of the home-page URL in the extensions framework. This allows a crafted extension to influence extension behavior with unspecified impact. Root cause: URL validation flaw in extensions home page. Mitigation: ...

CVE-2011-2805

CVE-2011-2805 is a WebKit-related cross-origin scripting issue documented in OpenVAS entries for Safari/WebKit. The vulnerability arises from a cross-origin handling flaw in URLs with embedded usernames, enabling cross-site scripting when rendering or processing such URLs within affected WebKit-b...

CVE-2011-3057

CVE-2011-3057 affects Google Chrome's V8 engine (Chromium) and is described as an invalid read in V8, with the initial entry noting a remote denial of service vector. Connected documents corroborate that this CVE is among a set of Chromium/V8 issues (e.g., CVEs 2011-3057 through 2011-3065) tracke...

CVE-2011-3059

Google Chrome prior to 18.0.1025.142 is affected by CVE-2011-3059, an out-of-bounds read in SVG text handling that can be exploited remotely to cause a denial of service. The vulnerability stems from improper handling of SVG text elements in the browser’s rendering pipeline. Practical impact repo...

CVE-2011-3883

CVE-2011-3883 affects Google Chrome before 15.0.874.102. The issue is a use-after-free in counters that can lead to remote denial of service and possibly other impacts. Remediation in public advisories recommends upgrading to Chrome/Chromium version 15.0.874.102 or newer (Chromium 15.x+ as cited ...

CVE-2011-3954

CWE-2011-3954 affects Google Chrome/Chromium where an attacker could trigger a denial of service by causing excessive database usage, leading to an application crash. The historical description specifies Chrome versions before 17.0.963.46 are vulnerable. Connected documents corroborate a Chromium...

CVE-2011-3966

Technical details for CVE-2011-3966 are not provided in the connected documents; please monitor for updates.

CVE-2013-0890

CVE-2013-0890 corresponds to multiple memory-safety vulnerabilities in the IPC layer of Google Chrome. The initial description states that Chrome before 25.0.1364.97 (Windows/Linux) and before 25.0.1364.99 (macOS) is affected, leading to potential memory corruption and a remote denial of service ...

CVE-2017-15401

The CVE-2017-15401 entry describes a memory corruption bug in WebAssembly via V8 in Google Chrome prior to 62.0.3202.62, enabling out-of-bounds read/write and remote code execution in the sandbox through a crafted HTML page. Connected sources corroborate the Chrome version boundary and provide pu...

CVE-2018-20069

Affected product: Google Chrome for iOS. Vulnerability in the Navigation module (top-frame navigation to data URLs) due to failure to prevent navigation, allowing a remote attacker to confuse the user about the page origin via a crafted HTML page. Impact as stated includes user confusion about or...

CVE-2024-7018

CVE-2024-7018 describes a heap buffer overflow in PDF handling within Google Chrome prior to 124.0.6367.78, potentially allowing a remote attacker to trigger heap corruption via a crafted PDF. The issue originates in the Chromium-based PDF processing path and is documented across multiple feeds (...

CVE-2026-11290

CVE-2026-11290 describes an integer overflow in Android WebView used by Google Chrome, affecting Chrome on Android up to version before 149.0.7827.53. The vulnerability allows a local attacker to trigger a denial of service by processing a malicious file. The available description states the issu...

CVE-2026-11293

CVE-2026-11293 affects Google Chrome (desktop) with Chromium, involving a use-after-free in Input that could allow a remote attacker to potentially escape the sandbox via a crafted HTML page. The issue references Chrome versions prior to 149.0.7827.53 and indicates the vulnerability is tied to th...

CVE-2010-2652

Google Chrome before 5.0.375.99 does not correctly implement modal dialogs, enabling denial of service (application crash) via unspecified vectors. Connected sources confirm a set of related Chrome vulnerabilities (including modal-dialog handling) in the 5.0.375.99 timeframe and reference a patch...

CVE-2010-3414

The CVE-2010-3414 issue affects Google Chrome on Mac OS X prior to 6.0.472.59, where an incorrect fix for CVE-2010-3112 left file dialogs vulnerable. The root cause is tied to that fix, enabling memory corruption leading to potential denial of service and unspecified impact via unknown vectors. R...

CVE-2010-3729

The CVE-2010-3729 entry concerns Google Chrome’s SPDY protocol implementation, with the root cause reported as improper buffer management in the SPDY handling before Chrome 6.0.472.62. This vulnerability could allow remote attackers to execute arbitrary code via unspecified vectors, with network ...

CVE-2011-0780

CVE-2011-0780 affects Google Chrome prior to 9.0.597.84, where the PDF print workflow interacts improperly with print operations, allowing user‑assisted remote attackers to cause a denial of service (application crash) or potentially other impact via unknown vectors. Affected component: PDF event...

CVE-2011-0985

CVE-2011-0985 affects Google Chrome before 9.0.597.94, where memory exhaustion can prevent proper process termination (unspecified impact/remote vectors). Debian advisory DSA-2166-1 notes this as part of several vulnerabilities in chromium-browser and states the issue is fixed in the squeeze pack...

CVE-2011-1446

CVE-2011-1446 affects Google Chrome prior to version 11.0.696.57. The vulnerability allows remote attackers to spoof the URL bar via two vectors: (1) a navigation error and (2) an interrupted load. The issue is documented in multiple sources (NVD entry for CVE-2011-1446 and Chrome patch notes). I...

CVE-2011-1808

CVE-2011-1808 refers to a use-after-free flaw in Google Chrome prior to version 12.0.742.91, triggered by incorrect integer calculations during float handling. The vulnerability allows remote attackers to cause a denial of service and potentially other unspecified effects, as described in the NVD...

CVE-2011-2342

Google Chrome (before 12.0.742.91) is affected by CVE-2011-2342 due to a DOM implementation flaw that allows a remote attacker to bypass the Same Origin Policy. The vulnerability is described as a Same Origin bypass in the DOM, with a medium–high risk in public listings and a CVSS base score of 7...

CVE-2011-2361

Google Chrome before 13.0.782.107 has a vulnerability in the Basic Authentication dialog where improper handling of strings could allow remote attackers to capture credentials via a crafted web site (CVE-2011-2361). The issue is tied to Chrome’s authentication UI/Basic Auth dialog, with corrobora...

CVE-2011-2802

CVE-2011-2802 : Google Chrome’s V8 engine (pre-13.0.782.107) fails to perform const lookups correctly, enabling a crafted website to crash the browser (DoS) and potentially other unspecified impacts. Affected product: Google Chrome (V8 engine). Root cause: incorrect handling of const lookups in V...

CVE-2011-2830

Technical details about CVE-2011-2830 are not present in the provided connected documents. The description only reiterates that Google V8 in Chrome before 14.0.835.163 is affected. Monitor for updates from vendor/security advisories.