4509 matches found
CVE-2011-2835
Technical details for CVE-2011-2835 are not publicly provided in the connected documents. OpenVAS/Gentoo entries reference the CVE but do not reveal affected products, root cause, or remediation. Monitor for updates.
CVE-2011-3063
CVE-2011-3063 relates to Google Chrome/Chromium where the renderer’s navigation requests were not properly validated. The initial CVE description states the impact is unspecified. Connected advisories (OpenVAS/Gentoo GLSA and Chrome vulnerability bundles) corroborate that CVE-2011-3063 is among m...
CVE-2011-3891
CVE-2011-3891 affects Google Chrome prior to 15.0.874.102, where improper restriction of internal Google V8 functions may enable remote attackers to cause a denial of service or potentially other impact via unknown vectors. The cited connected advisories indicate this requires upgrading to Chrome...
CVE-2011-3912
CVE-2011-3912 describes a use-after-free in Google Chrome SVG filters that could cause a denial of service or other impact. Affected: Chrome prior to 16.0.912.63. Remediation: upgrade to Chromium/Chrome 16.0.912.75 or newer (as reflected in Gentoo GLSA 201201-03 and related advisories). If exploi...
CVE-2011-3957
CVE-2011-3957 describes a use-after-free in Chrome’s garbage-collection for PDF handling, allowing a remote attacker to cause a denial of service and potentially other impact. The vulnerability affects Google Chrome prior to 17.0.963.46. Multiple connected advisories and OpenVAS entries corrobora...
CVE-2013-0891
CVE-2013-0891: Google Chrome (Windows/Linux before 25.0.1364.97, macOS before 25.0.1364.99) is affected by an integer overflow in blob handling, leading to possible denial of service or other impact. The issue is disclosed in the Chrome vulnerability set and is reflected in OpenVAS/Nessus entries...
CVE-2013-0895
Google Chrome/Crome-derived browser on Linux and macOS has CVE-2013-0895 (and related 2013-08x family) due to Incorrect path handling in file copying. OpenSUSE openSUSE-SU-2013:0454-1 documents this CVE as a High-severity issue and notes a fix in the Chromium update path, with the 27.x line addre...
CVE-2023-7282
CVE-2023-7282 affects Google Chrome (Chromium-based) via an inappropriate Navigation implementation that enables domain spoofing when a user is persuaded to perform specific UI gestures on a crafted HTML page. Vulnerable versions are prior to 113.0.5672.63. The root cause is in the Navigation han...
CVE-2026-10000
CVE-2026-10000 is a use-after-free vulnerability in Google Chrome on Windows affecting the Passwords component. The underlying issue occurs when the renderer process is compromised, enabling a crafted HTML page to potentially escape the Chrome sandbox. Impact is described as high, with remote cod...
CVE-2026-11701
The CVE-2026-11701 entry describes an insecure implementation in Chrome’s Guest View prior to version 149.0.7827.103, enabling a remote attacker to perform UI spoofing via a crafted HTML page. Affected software: Google Chrome (Guest View component). Root cause: inappropriate/defective Guest View ...
CVE-2026-12017
Google Chrome extension component (Extensions) is affected by CVE-2026-12017. An insufficient input validation in the Extensions path allowed a remote attacker who had compromised the renderer process to bypass site isolation via a crafted HTML page. Affected product: Google Chrome (Extensions). ...
CVE-2026-16413
CVE-2026-16413 is an out-of-bounds write in ANGLE used by Google Chrome (Chromium-based) prior to 150.0.7871.182, potentially enabling a sandbox escape when a renderer process is compromised via a crafted HTML page. Connected sources confirm the issue in ANGLE and identify affected Chrome/Chromiu...
CVE-2010-3118
The CVE-2010-3118 affects Google Chrome’s Omnibox autosuggest feature (Chrome before 5.0.375.127). The vulnerability could allow remote attackers to obtain sensitive information by reading the network traffic generated by the autosuggest process. Exploitation details, affected versions beyond the...
CVE-2010-3412
CVE-2010-3412 refers to Google Chrome’s console implementation race condition in versions prior to 6.0.472.59. The description from the CVE entry states an unspecified impact/attack vector. Connected documents corroborate multiple vulnerability listings for Google Chrome around Sep 2010 (includin...
CVE-2010-3415
CVE-2010-3415 affects Google Chrome versions before 6.0.472.59; the flaw is in Geolocation handling that could cause memory corruption and a denial of service (or other unspecified impact) via unknown vectors. The connected documents also reference overlapping use-after-free Geolocation issues in...
CVE-2010-4575
CVE-2010-4575 affects Google Chrome (before 8.0.552.224) and Chrome OS (before 8.0.552.343). The issue is in ThemeInstalledInfoBarDelegate::Observe, where incorrect tab interaction by an extension is not handled properly, enabling user-assisted remote attackers to cause a denial of service (appli...
CVE-2011-0479
Google Chrome (Windows/Linux/macOS) before 8.0.552.237 and Chrome OS before 8.0.552.344 are affected by CVE-2011-0479, a vulnerability in extensions handling that allows remote attackers to cause a denial of service via a crafted extension that triggers an uninitialized pointer. The issue stems f...
CVE-2011-0484
CVE-2011-0484 affects Google Chrome (before 8.0.552.237) and Chrome OS (before 8.0.552.344). The issue arises from improper DOM node removal, enabling denial of service or unspecified impact via a stale rendering node. NVD assigns a base score of 7.5 ( HIGH ) with network/low complexity exploit c...
CVE-2011-1191
Google Chrome is affected by CVE-2011-1191 (use-after-free in the handling of DOM URLs) prior to version 10.0.648.127. The issue can allow remote denial of service or possibly other impact. The connected documents specify the vulnerable component as Chrome (DOM URL handling) and the affected rang...
CVE-2011-1195
CVE-2011-1195 concerns a use-after-free in Google Chrome prior to 10.0.648.127 related to document script lifetime handling. The vulnerability can allow remote attackers to cause a denial of service or possibly have unspecified other impact. The available connected documents confirm the affected ...
CVE-2011-1300
The CVE-2011-1300 entry affects ANGLE’s WebGLES library (libGLESv2.dll) used by Mozilla Firefox 4.x on Windows and by Chrome’s GPU process, due to an off-by-three error in Program::getActiveUniformMaxLength. This allows remote code execution via unspecified vectors. Public sources indicate Chrome...
CVE-2011-1304
Google Chrome 11.0.696.57 patch (April 2011) fixed multiple vulnerabilities, including CVE-2011-1304: a pop-up blocker bypass via plug-ins. The issue affected Chrome before 11.0.696.57 and could be exploited remotely through plug-in interactions, potentially bypassing the pop-up blocker. The patc...
CVE-2011-1691
The CVE-2011-1691 issue affects WebKit’s CSS Core (CSSComputedStyleDeclaration.cpp) in WebCore, where counterToCSSValue mishandles access to counterIncrement and counterReset from getComputedStyle data. It permits remote attackers to trigger a denial-of-service (NULL pointer dereference and crash...
CVE-2011-1809
CVE-2011-1809 is a Google Chrome use-after-free vulnerability in the accessibility feature reported as affecting Chrome prior to version 12.0.742.91. The flaw could allow remote attackers to cause a denial of service and potentially other impact via unknown vectors. Connected sources identify the...
CVE-2011-1810
CVE-2011-1810 affects Google Chrome's CSS implementation prior to version 12.0.742.91, enabling information disclosure of visit history via unspecified vectors. The issue is tracked in multiple security feeds; OpenVAS/OpenVAS 802102/802103 and ThreatPost reference Chrome 12.0.742.91 as the fix. T...
CVE-2011-2824
The CVE-2011-2824 entry relates to a use-after-free vulnerability in Google Chrome before 13.0.782.215. The issue enables remote attackers to cause a denial of service or potentially other unspecified impacts via vectors involving counter nodes. Affected product is Google Chrome; the root cause i...
CVE-2011-2826
CVE-2011-2826 affects Google Chrome prior to 13.0.782.215. The vulnerability enables remote attackers to bypass the Same Origin Policy via vectors related to empty origins, potentially compromising cross-origin protections. The provided documents do not include specific exploit details, affected ...
CVE-2011-2836
CVE-2011-2836 (Google Chrome): Affects Google Chrome prior to 14.0.835.163. The issue arises because Chrome does not require Infobar interaction before using the Windows Media Player plug‑in, enabling remote attackers to cause an unspecified impact via crafted Flash content. The CVSSv2 base score...
CVE-2011-2877
Technical details about CVE-2011-2877 are not publicly provided in the supplied documents. The connected sources reference this CVE among broader Apple/Chromium vulnerability collections but do not specify affected component, impact, exploit vectors, or remediation.
CVE-2011-3017
CVE-2011-3017 is a use-after-free vulnerability in Google Chrome prior to 17.0.963.56 related to database handling that can cause denial of service or possibly other impact. The connected documents indicate Chrome versions before 17.0.963.56 are affected; remediation involves updating Chrome to 1...
CVE-2011-3020
CVE-2011-3020 affects Google Chrome’s Native Client validator, with the vulnerability described as unspecified and impact/attack vector unknown in Chrome prior to 17.0.963.56. The provided documents confirm the affected component (Native Client validator) and a pre-patch version, but do not discl...
CVE-2011-3040
Google Chrome before 17.0.963.65 is affected by CVE-2011-3040 due to improper handling of text, enabling a remote attacker to cause a denial of service via a crafted document (out-of-bounds read). The vulnerability is addressed by updating to Chrome 17.0.963.65 or later (per the public Chrome upd...
CVE-2011-3052
CVE-2011-3052 involves memory corruption in the WebGL canvas handling of Chromium/Chrome. The issue arises from the WebGL implementation not properly handling CANVAS elements, enabling a remote attacker to cause a denial of service (memory corruption) and potentially other unspecified impacts via...
CVE-2011-3915
Technical details for CVE-2011-3915 are not publicly available in the provided documents. Monitor for updates from vendors and security feeds.
CVE-2011-3959
CVE-2011-3959 refers to a buffer overflow in the locale implementation of Google Chrome prior to 17.0.963.46, enabling remote causes of denial of service or possibly other impact via unspecified vectors. Evidence across connected docs shows Chromium/Chrome remediation updates: Gentoo GLSA-201202-...
CVE-2013-0884
CVE-2013-0884 is referenced in connected OpenSUSE/Gentoo/Nessus entries as a Chromium/Chrome issue described as an “Inappropriate load of NaCl.” The available connected documents confirm the affected component is part of Chromium/Chrome’s NaCl handling, but do not provide detailed root-cause anal...
CVE-2021-38023
CVE-2021-38023 affects Google Chrome (Chromium-based) Extensions. The vulnerability is a use-after-free in Extensions that could allow a remote attacker to exploit heap corruption via a crafted HTML page. This is described as a High-severity issue with network attack vector, requiring user intera...
CVE-2026-14076
CVE-2026-14076 affects Google Chrome prior to 150.0.7871.47. The issue is insufficient policy enforcement of the Content Security Policy in Chrome’s network stack, allowing a remote attacker to bypass CSP with a crafted HTML page. Impact is a CSP bypass, with no other confidentiality/integrity/av...
CVE-2026-14418
Technical details about CVE-2026-14418 are not publicly available in the provided documents. Monitor for updates from official advisories for affected products, impact, and fixes.
CVE-2010-1233
Google Chrome before 4.1.249.1036 is affected by multiple integer overflows in WebKit JavaScript objects, allowing remote attackers to trigger unspecified impact via network vectors. The vulnerability is confirmed in the CVE-2010-1233 record and is treated as a concrete Chrome/WebKit issue in rel...
CVE-2010-2645
CVE-2010-2645 applies to Google Chrome prior to 5.0.375.99, where WebGL usage could trigger an out-of-bounds read leading to a denial of service. The issue is described as an unspecified vulnerability with unknown vectors, affecting Chrome’s WebGL handling. Public references in OpenVAS and third-...
CVE-2010-4574
CVE-2010-4574 affects Google Chrome (before 8.0.552.224) and Chrome OS (before 8.0.552.343) on 64-bit Linux. The vulnerability lies in Pickle::Pickle (base/pickle.cc), where incorrect pointer arithmetic can bypass message deserialization validation, enabling remote input to cause denial of servic...
CVE-2010-4576
CVE-2010-4576 affects Google Chrome before 8.0.552.224 and Chrome OS before 8.0.552.343. The issue lies in browser/worker_host/message_port_dispatcher.cc where certain postMessage calls with web workers are mishandled, enabling remote attackers to trigger a NULL pointer dereference and crash the ...
CVE-2011-0470
Google Chrome before 8.0.552.237 and Chrome OS before 8.0.552.344 are affected by a vulnerability in handling extensions notifications that can be exploited to crash the application (denial of service). The provided documents state the issue but do not give explicit exploitation details or a conf...
CVE-2011-0481
CVE-2011-0481 : Buffer overflow in Google Chrome before 8.0.552.237 and Chrome OS before 8.0.552.344 allows remote attackers to cause a denial of service or possibly other impact via vectors related to PDF shading. Affected software is Google Chrome and Chrome OS (versions cited in the entry). Th...
CVE-2011-0783
CVE-2011-0783 is a Google Chrome/Chromium vulnerability (before 9.0.597.84) described as an unspecified flaw that allows user-assisted remote attackers to cause a denial of service (application crash) via vectors involving a “bad volume setting.” Multiple OpenVAS/Debian entries corroborate Chrome...
CVE-2011-0982
CVE-2011-0982 describes a use-after-free vulnerability in Google Chrome prior to 9.0.597.94, exploitable via SVG font face handling that could cause a denial of service and potentially other impacts. Affected product: Google Chrome (before 9.0.597.94). Root cause: use-after-free in the SVG font f...
CVE-2011-1124
CVE-2011-1124 is a use-after-free vulnerability in Google Chrome prior to 9.0.597.107 that can allow remote attackers to cause a denial of service or potentially other impact via vectors related to blocked plug-ins. The associated sources describe the issue consistently; no specific exploit detai...