4916 matches found
CVE-2011-3042
CVE-2011-3042 is aUse-after-free in table section handling in Chrome/Chromium prior to 17.0.963.65. Connected updates (openSUSE-SU-2012:0374-1) patch Chromium, upgrading to around 19.x and addressing multiple CVEs including 2011-3042. Remediation: apply the openSUSE security update to obtain the ...
CVE-2011-3051
CVE-2011-3051 describes a use-after-free in the CSS cross-fade handling in Google Chrome’s rendering path prior to version 17.0.963.83. The vulnerability could allow a remote attacker to cause a denial of service or potentially other impact via cross-fade related vectors. Affected software is Goo...
CVE-2017-5072
CVE-2017-5072 affects Google Chrome/Chromium Omnibox. Insecure implementation allowed a remote attacker to spoof the address bar using RTL characters via a crafted URL page, reported for Android and tied to Chrome/Chromium versions around 59.x. The vulnerability arises from the Omnibox component’...
CVE-2026-10007
CVE-2026-10007 describes a use-after-free in the SVG handling of Google Chrome (Chromium-based) that can allow a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML page. The vulnerability affects Chrome builds prior to 148.0.7778.216 and is classified with high severi...
CVE-2026-14076
CVE-2026-14076 affects Google Chrome prior to 150.0.7871.47. The issue is insufficient policy enforcement of the Content Security Policy in Chrome’s network stack, allowing a remote attacker to bypass CSP with a crafted HTML page. Impact is a CSP bypass, with no other confidentiality/integrity/av...
CVE-2026-17704
CVE-2026-17704: Use-after-free in ANGLE component of Google Chrome leading to potential sandbox escape when a renderer process+ crafted HTML page is exploited. Affected versions are before 151.0.7922.72 (Chromium-based build). The vulnerability allows a remote attacker who has compromised the ren...
CVE-2026-6920
CVE-2026-6920 describes an out-of-bounds read in the GPU component of Google Chrome on Android, allowing a remote attacker who compromises the renderer process to potentially escape the sandbox via a crafted HTML page. Affected: Chrome on Android; vulnerable component: GPU/renderer interaction; r...
CVE-2010-4042
CVE-2010-4042 is a WebKit/Chrome related vulnerability where Google Chrome before 7.0.517.41 does not properly handle element maps, allowing remote attackers to cause a denial of service or other impact via stale elements. Public advisories reference a fix in WebKit-related components (e.g., libw...
CVE-2011-0984
CVE-2011-0984 affects Google Chrome prior to 9.0.597.94, where the browser mishandles plug-ins, enabling a remote attacker to cause a denial of service via an out-of-bounds read. Public sources (including Debian DSA-2166-1 and OpenVAS entries) corroborate the family of Chrome/Chromium vulnerabili...
CVE-2011-1117
Technical details for CVE-2011-1117 are not publicly provided in the connected documents. Monitor for updates.
CVE-2011-1449
Technical details for CVE-2011-1449 are not provided in the connected documents; no affected products, root cause, impact, or remediation are specified here. Monitor for updates.
CVE-2011-2797
Technical details for CVE-2011-2797 are not publicly available in the provided documents. Monitor for updates.
CVE-2011-2863
The CVE describes an information-disclosure vulnerability in Google Chrome’s V8 JavaScript engine, occurring in versions before 14.0.0.0 due to insufficient policy enforcement. A remote attacker could obtain potentially sensitive information from process memory via a crafted HTML page. Affected p...
CVE-2011-3037
Google Chrome before 17.0.963.65 is affected by CVE-2011-3037: Bad casts in anonymous block splitting, caused by improper casting of variables during analysis of documents. The vulnerability allows a remote attacker to cause a denial of service or potentially other impact via a crafted document. ...
CVE-2011-3073
Technical details for CVE-2011-3073 are not publicly provided in the supplied documents; no affected product/version or remediation is specified here. Monitor for updates.
CVE-2011-3888
CVE-2011-3888 corresponds to a use-after-free vulnerability in Google Chrome prior to 15.0.874.102. The flaw affects editing operations in conjunction with an unknown plug-in and can allow a user‑assisted remote attacker to cause a denial of service and potentially other impacts. The provided con...
CVE-2011-3900
CVE-2011-3900 affects Google Chrome prior to 15.0.874.121, specifically a vulnerability in the V8 engine where an out-of-bounds write could lead to denial of service or potentially other impact. Public references in the connected documents confirm the Chrome/Chromium V8 context and the remediatio...
CVE-2011-3926
CVE-2011-3926 describes a heap-based buffer overflow in the tree builder of Google Chrome prior to version 16.0.912.77. The vulnerability can lead to a denial of service or potentially other impact via unknown vectors. The provided documents confirm the affected product (Google Chrome) and the vu...
CVE-2024-7533
CVE-2024-7533 affects Google Chrome/Chromium’s Sharing module. A Use-After-Free in the Sharing component on iOS up to version 127.6533.99 could allow a remote attacker to trigger heap corruption via a crafted HTML page, per multiple sources. Public advisories confirm the fix is included in Chromi...
CVE-2026-11290
CVE-2026-11290 describes an integer overflow in Android WebView used by Google Chrome, affecting Chrome on Android up to version before 149.0.7827.53. The vulnerability allows a local attacker to trigger a denial of service by processing a malicious file. The available description states the issu...
CVE-2026-11291
Technical details are not publicly available in the provided documents. Monitoring for updates is advised; current descriptions reference Android Autofill in Chrome prior to 149.0.7827.53 with a Chromium security severity rating of Low, but no concrete exploit/impact details are provided.
CVE-2026-11306
CVE-2026-11306 (Google Chrome) is a use-after-free in PDFium that allows a remote attacker to execute arbitrary code inside the sandbox via a crafted PDF file, affecting Chrome versions prior to 149.0.7827.53. The vulnerability is described across multiple sources as a PDFium issue leading to pot...
CVE-2026-13028
CVE-2026-13028 is a use-after-free in WebGL of Google Chrome on Android, prior to version 149.0.7827.197, that could allow a remote attacker to sandbox-escape via a crafted HTML page. Severity is Critical (CVSS 3.1: AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:H). The available connected documents reiterate...
CVE-2026-13283
Google Chrome on Android is affected by a Use-After-Free in the AdFilter component. The issue arises when a remote attacker convinces a user to perform specific UI gestures on a crafted HTML page, potentially enabling arbitrary code execution. Root cause: use-after-free in AdFilter. Affected vers...
CVE-2026-17663
CVE-2026-17663 affects Google Chrome on Android prior to 151.0.7922.72. The issue is "Insufficient validation of untrusted input in GPU" in the renderer, allowing a remote attacker who compromises the renderer process to potentially escape the sandbox via a crafted HTML page. The Chrome release n...
CVE-2026-17967
CVE-2026-17967 affects Chrome for iOS (Google Chrome on iOS). The issue is a use-after-free leading to potential heap corruption when processing crafted HTML pages, reported for Chrome on iOS versions before 151.0.7922.72. The vulnerability can be exploited remotely, with the impact described as ...
CVE-2026-5858
CVE-2026-5858 describes a heap buffer overflow in WebML used by Google Chrome/Chromium. The vulnerability enables remote code execution via a crafted HTML page and affects Chrome/Chromium prior to version 147.0.7727.55. The provided connected documents indicate fixes in Chrome/Chromium updates (1...
CVE-2026-8014
CVE-2026-8014 affects Google Chrome prior to 148.0.7778.96. The Debian/EUVD/NVD entries describe an inappropriate implementation in Preload that allows a remote attacker to leak cross-origin data via a crafted HTML page. The vulnerability impact is described as low severity, with a CVSS 3.1 base ...
CVE-2010-4199
Summary: CVE-2010-4199 affects WebKit (GTK+/WebKit) as used in Debian, Ubuntu, and related packages. The vulnerability arises from improper casting of an unspecified variable during processing of an SVG element, enabling remote attackers to cause a denial of service or possibly other impact via ...
CVE-2011-1193
CVE-2011-1193 affects Google Chrome’s V8 engine; Google Chrome before 10.0.648.127 can bypass the Same Origin Policy via unspecified vectors. Affected product: Google Chrome (V8). Root cause: SOP bypass in the V8/SOP handling. Impact per sources: partial confidentiality, integrity, and availabili...
CVE-2011-2860
CVE-2011-2860 affects Google Chrome prior to 14.0.835.163, where a use-after-free in handling table styles allows remote attackers to cause a denial of service or potentially other impact. The issue is exploitable via vectors related to table styles, with a high impact identified (CVSS-like metri...
CVE-2011-3043
CVE-2011-3043 is a use-after-free vulnerability in Chrome’s handling of flexbox with floats. OpenSUSE OpenVAS/NASL data references this CVE as part of the Chromium v8 security fixes in openSUSE-SU-2012:0374-1, with the patch described as updating Chromium to 19.0.1066 (and related fixes). The vul...
CVE-2011-3060
CVE-2011-3060 affects Google Chrome (pre-18.0.1025.142). The issue is a vulnerability in how text fragments are handled, leading to an out-of-bounds read and potential denial of service. The description specifies the vector as unspecified and does not provide exploitation details. The available i...
CVE-2011-3075
CVE-2011-3075 describes a use-after-free in Google Chrome prior to 18.0.1025.151, exploitable remotely via style-application commands to cause a denial of service or possibly other impact. The vulnerability affects the Chrome rendering/style handling and is mitigated by upgrading to version 18.0....
CVE-2011-3895
CVE-2011-3895 is a heap-based buffer overflow in FFmpeg’s Vorbis decoder (libavcodec) that can be triggered by a crafted input stream, potentially causing a denial of service or other unspecified impact. The connected documents indicate FFmpeg vulnerabilities across multiple CVEs, including this ...
CVE-2011-3928
Technical details about CVE-2011-3928 are not publicly available in the provided documents. Monitor for updates from vendors and security advisories.
CVE-2026-11037
CVE-2026-11037 describes an out-of-bounds write in Chrome’s Codecs component, affecting Google Chrome before version 149.0.7827.53. The issue could allow a remote attacker to potentially achieve a sandbox escape via a crafted video file. Chromium/Chrome lists the vulnerability with a Chromium sec...
CVE-2026-11670
CVE-2026-11670: Use-after-free in PDF handling in Google Chrome prior to 149.0.7827.103 enables remote code execution in the sandbox when parsing a crafted PDF. Affected component is Chrome's PDF rendering; impact is high. Remediation per the connected documents is to update to Chrome 149.0.7827....
CVE-2026-12017
Google Chrome extension component (Extensions) is affected by CVE-2026-12017. An insufficient input validation in the Extensions path allowed a remote attacker who had compromised the renderer process to bypass site isolation via a crafted HTML page. Affected product: Google Chrome (Extensions). ...
CVE-2026-14398
In Connected sources, CVE-2026-14398 is described as a Use-after-free in ANGLE affecting Google Chrome prior to 150.0.7871.46, enabling a remote attacker to potentially escape the sandbox via a crafted HTML page. The vulnerability is confirmed as part of ANGLE in Chrome, with a critical severity....
CVE-2026-17681
The CVE-2026-17681 entry is validated by the connected Chrome release data: Google Chrome on Android versions affected prior to 151.0.7922.72 had insufficient validation of untrusted input in Web Authentication, enabling a renderer-compromise–driven sandbox escape via a crafted HTML page. The vul...
CVE-2026-17722
CVE-2026-17722 corresponds to an object lifecycle issue in WebView of Google Chrome on Android, affecting versions prior to 151.0.7922.72. A remote attacker who has already compromised the renderer process could potentially escape the Chrome sandbox via a crafted HTML page, per NVD and related fe...
CVE-2026-17955
CVE-2026-17955 affects Google Chrome (Payments in Chromium) and is caused by insufficient validation of untrusted input, enabling a remote attacker to perform UI spoofing via a crafted HTML page. The vulnerability is documented with a Chromium severity of Low and is addressed by updating to Chrom...
CVE-2026-9872
Google Chrome on Android prior to 148.0.7778.216 has an out-of-bounds write in the GPU component of Chromium, which could allow a remote attacker to escape the sandbox via a crafted HTML page. The issue is tracked as CVE-2026-9872 and is considered Critical. A fix is included in Chrome 148.0.7778...
CVE-2026-9887
CVE-2026-9887 is a use-after-free vulnerability in the Chromium-based Proxy component of Google Chrome, exploitable via a crafted PAC script to achieve remote code execution. The flaw affects Chrome before version 148.0.7778.216, and Google released a stable-channel fix in 148.0.7778.216/217 (Win...
CVE-2026-9975
CVE-2026-9975 describes an out-of-bounds read and write flaw in ANGLE used by Google Chrome, affecting Chrome builds prior to 148.0.7778.216. The vulnerability could allow a remote attacker who has already compromised the renderer process to potentially escape the Chrome sandbox via a crafted HTM...
CVE-2010-1825
CVE-2010-1825 is a use-after-free vulnerability in WebKit, affecting Google Chrome prior to 6.0.472.59, with exploitation via vectors related to nested SVG elements. The connected advisories (SUSE/OpenSUSE, Ubuntu, Debian, etc.) corroborate the issue and describe potential remote denial of servic...
CVE-2011-2818
CVE-2011-2818 is a use-after-free memory corruption in Chrome/Safari related to display box rendering, enabling remote code execution or DoS via a crafted web page. Affected: Google Chrome before 13.0.782.107; exploitation via elements with certain styles as siblings/children of floated elements....
CVE-2011-2845
CVE-2011-2845 affects Google Chrome prior to 15.0.874.102. The issue arises from improper handling of history data, enabling a user‑assisted remote attacker to spoof the URL bar via unspecified vectors. Impact: URL bar spoofing could mislead users about the destination site. The vulnerability is ...