CVE-2011-2791

The CVE-2011-2791 vulnerability affects Google Chrome’s ICU functionality prior to 13.0.782.107, where an out-of-bounds write in ICU can be triggered by unknown vectors, potentially allowing a denial of service or other unspecified impacts. Affected component: ICU integration in Chrome. Remediati...

CVE-2011-2804

CVE-2011-2804 affects Google Chrome up to version 13.0.782.107, where the PDF viewer mishandles nested functions in PDF documents, enabling remote crashes or potentially other impact via crafted files. For Chrome, this was associated with a Medium (CVSS v2 4.3) severity and was observable as an a...

CVE-2011-2862

CVE-2011-2862 concerns Google V8 in Chrome before 14.0.835.163, where access to built-in objects is not properly restricted. Affected software is the V8 engine as used by Chrome; root cause and precise impact are not detailed in the provided documents. No exploitation details are given here, and ...

CVE-2011-3072

CVE-2011-3072 affects Google Chrome prior to 18.0.1025.151, where remote attackers could bypass the Same Origin Policy via popup-related vectors. The issue is part of a set of Chromium/Chrome vulnerabilities; impact includes partial confidentiality, integrity, and availability. Remediation: updat...

CVE-2011-3884

CVE-2011-3884 affects Google Chrome up to version before 15.0.874.102. The vulnerability stems from timing issues during DOM traversal, allowing a remote attacker to cause a denial of service or potentially invoke unspecified other impact via a crafted document. The connected documents do not pro...

CVE-2011-3904

CVE-2011-3904 is a use-after-free in Chrome/Chromium bidi handling (Google Chrome before 16.0.912.63). The OpenVAS/Gentoo entries corroborate a high-severity flaw with potential DoS/impact, but explicit exploitation details are not provided in the documents. Remediation per sources: upgrade to Ch...

CVE-2011-3909

Technical details for CVE-2011-3909 are not publicly provided in the connected documents. Monitor for updates.

CVE-2011-3910

CVE-2011-3910 concerns Google Chrome/Chromium prior to 16.0.912.63, where improper handling of YUV video frames could enable a remote attacker to trigger an out-of-bounds read and cause a denial of service. The connected advisories indicate this vulnerability is addressed by updating Chromium to ...

CVE-2013-0889

CVE-2013-0889 concerns Google Chrome where the browser did not properly enforce a user gesture requirement before proceeding with a file download, potentially enabling remote code execution via a crafted file. The description specifies affected builds: Windows and Linux: before 25.0.1364.97 Mac O...

CVE-2024-6997

CVE-2024-6997 is a use-after-free in Chrome/Chromium Tabs prior to 127.0.6533.72, enabling heap corruption via a crafted HTML page when a user engages specific UI gestures. Affected product: Google Chrome/Chromium; root cause: use-after-free in tab handling; impact: remote code execution/compromi...

CVE-2024-9859

CVE-2024-9859 describes a type-confusion vulnerability in WebAssembly in Google Chrome prior to version 126.0.6478.126, allowing a remote attacker to execute arbitrary code via a crafted HTML page. Affected software: Google Chrome before 126.0.6478.126 (Chromium-based). Root cause: type confusion...

CVE-2025-13042

CVE-2025-13042 affects Google Chrome (V8/Chromium) with an incomplete V8 implementation that allows a remote attacker to exploit heap corruption via a crafted HTML page. The issue is categorized as High severity; impact includes potential arbitrary code execution, denial of service, or informatio...

CVE-2025-13224

CVE-2025-13224 is a Type Confusion in V8 affecting Google Chrome prior to 142.0.7444.175, leading to potential heap corruption via a crafted HTML page. The issue affects Chrome’s V8 and was addressed in the 142.0.7444.175+ stable channel releases (Windows/macOS/Linux). Debian/Alpine security advi...

CVE-2025-13229

CVE-2025-13229 is a type confusion in V8 affecting Google Chrome before 142.0.7444.59. The vulnerability allows a remote attacker to potentially trigger heap corruption via a crafted HTML page, with a high severity (CVSS v3.1: 8.8, AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H). Affected product/stack: Goo...

CVE-2025-13630

CVE-2025-13630 is a Type Confusion in V8 in Google Chrome that could enable remote heap corruption via a crafted HTML page. Affected product is Chromium/Chrome (V8 engine); the issue is fixed in a Chrome/Chromium update ≥ 143.0.7499.41 (ChromeOS notes show related patching in the 143.0.7499.x fam...

CVE-2026-11291

Technical details are not publicly available in the provided documents. Monitoring for updates is advised; current descriptions reference Android Autofill in Chrome prior to 149.0.7827.53 with a Chromium security severity rating of Low, but no concrete exploit/impact details are provided.

CVE-2026-12448

CVE-2026-12448 affects WebView in Google Chrome on Android prior to 149.0.7827.155. The issue is an inappropriate implementation in WebView that allows a remote attacker to escalate privileges via a crafted HTML page. The vulnerability is tied to Chromium WebView behavior and is rated High severi...

CVE-2026-13028

CVE-2026-13028 is a use-after-free in WebGL of Google Chrome on Android, prior to version 149.0.7827.197, that could allow a remote attacker to sandbox-escape via a crafted HTML page. Severity is Critical (CVSS 3.1: AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:H). The available connected documents reiterate...

CVE-2026-14014

CVE-2026-14014 corresponds to an insufficiently robust Paint implementation in Google Chrome that allows UI spoofing via a crafted HTML page. Affected product: Google Chrome (Paint component); root cause: inappropriate implementation in Paint prior to version 150.0.7871.47. Impact is UI spoofing ...

CVE-2010-1230

CVE-2010-1230 affects Google Chrome prior to 4.1.249.1036. The issue concerns incorrect behavior when attempting to delete Web SQL Databases and clear STS state. The impact is described as unspecified; no exploit vectors are provided in the documents. Severity is CVSS v2 base score 10.0 (HIGH). N...

CVE-2010-3413

Google Chrome before 6.0.472.59 contains an unspecified vulnerability in the pop-up blocking functionality that could allow remote attackers to cause a denial of service (application crash) via unknown vectors. The OpenVAS entries reference multiple vulnerabilities in Chrome 6.0.472.59 era, but d...

CVE-2011-1294

The CVE-2011-1294 entry corresponds to Google Chrome before version 10.0.648.204, where improper handling of CSS token sequences could cause a denial of service and possibly other impact via a stale pointer. Public records (NVD/OpenVAS entries) corroborate Chrome-related vulnerabilities in Mar 20...

CVE-2011-1302

CVE-2011-1302 affects Google Chrome’s GPU process; a heap-based buffer overflow in the GPU process (Chrome before 10.0.648.205) allows remote code execution via unknown vectors. The Ubuntu OSV entry corroborates the heap-based overflow. Remediation: upgrade to Chrome 10.0.648.205 or later (the fi...

CVE-2011-1439

CVE-2011-1439 affects Google Chrome on Linux prior to 11.0.696.57. The vulnerability arises from improper isolation of renderer processes, with unspecified impact and remote attack vectors described in the entry. The issue was fixed in Chrome 11.0.696.57 (stable update), per Google's Chrome relea...

CVE-2011-1814

CVE-2011-1814 affects Google Chrome prior to version 12.0.742.91. OpenVAS entries map CVE-2011-1814 to multiple Jun 2011 Chrome vulnerabilities, including a read-from-uninitialized-pointer issue that can cause a denial of service. The associated OpenVAS data list Chrome variants on Windows/Linux ...

CVE-2011-2348

CVE-2011-2348 affects Google Chrome with the V8 engine prior to 12.0.742.112. Root cause: an incorrect bounds check in V8. Impact: remote denial of service and possibly unspecified other effects via unknown vectors. Remediation: upgrade to a Chrome/Chromium version released after 12.0.742.112 (up...

CVE-2011-2829

CVE-2011-2829 affects Google Chrome prior to 13.0.782.215 on 32-bit platforms, via an integer overflow in a uniform arrays path. Impact: remote denial of service and possibly other unspecified effects. Exploitation details are not provided in the documents. Remediation: update to Chrome 13.0.782....

CVE-2011-3025

CVE-2011-3025 affects Google Chrome prior to 17.0.963.56; the issue is a parsing vulnerability in H.264 data that can cause a remote denial of service via an out-of-bounds read. No exploitation details are provided in the sources beyond this description. A fix is available in Chrome 17.0.963.56 a...

CVE-2011-3921

CVE-2011-3921: A use-after-free in Google Chrome prior to 16.0.912.75 affects the browser’s handling of animation frames, allowing remote-triggered denial of service and potentially other impact. Affected software: Google Chrome (pre-16.0.912.75). Root cause: use-after-free in animation-frame pro...

CVE-2019-15684

The CVE concerns the Kaspersky Protection Chrome extension (Google Chrome) prior to version 30.112.62.0. The vulnerability allows remote unauthorized access to the extension’s uninstall functionality, potentially removing other installed extensions. The attacker can trigger uninstall prompts via ...

CVE-2025-12429

The CVE concerns Google Chrome’s V8: an inappropriate implementation allowed arbitrary read/write via a crafted HTML page in versions prior to 142.0.7444.59. It is rated High severity with a network vector and no user interaction required. Remediation is to upgrade to 142.0.7444.59 or newer (Chro...

CVE-2025-8582

CVE-2025-8582 affects Google Chrome/Chromium Core prior to 139.0.7258.66. The vulnerability arises from insufficient validation of untrusted input in Core, allowing a remote attacker to spoof the Omnibox (URL bar) via a crafted HTML page. Impact: page URL bar spoofing; exploitation details are no...

CVE-2026-11145

Consolidated details show a vulnerability in Google Chrome for Android (affected component: Geolocation) due to a race condition, allowing a remote attacker to leak cross-origin data via a crafted HTML page. Impact is described as Confidentiality HIGH with no integrity/availability impact, CVSS b...

CVE-2026-11306

CVE-2026-11306 (Google Chrome) is a use-after-free in PDFium that allows a remote attacker to execute arbitrary code inside the sandbox via a crafted PDF file, affecting Chrome versions prior to 149.0.7827.53. The vulnerability is described across multiple sources as a PDFium issue leading to pot...

CVE-2026-12464

CVE-2026-12464 : A use-after-free in the Google Chrome renderer before 149.0.7827.155 may allow a remote attacker who compromises the renderer to escape the sandbox via a crafted HTML page, per multiple sources. Affected software is Chrome browsers with the vulnerable Chromium component; the issu...

CVE-2026-14139

The CVE affects Google Chrome’s TabStrip with an inappropriate implementation in versions before 150.0.7871.47. A remote attacker could entice a user to perform specific UI gestures via a crafted HTML page to achieve UI spoofing. The issue is tied to a TabStrip implementation flaw in Chromium, wi...

CVE-2026-6920

CVE-2026-6920 describes an out-of-bounds read in the GPU component of Google Chrome on Android, allowing a remote attacker who compromises the renderer process to potentially escape the sandbox via a crafted HTML page. Affected: Chrome on Android; vulnerable component: GPU/renderer interaction; r...

CVE-2010-2107

Summary (CVE-2010-2107) : Google Chrome before 5.0.375.55 is affected by an unspecified vulnerability related to Safe Browsing that can cause a memory error and potentially other impact, enabling denial of service. Several open vulnerability feeds corroborate multiple issues (including Safe Brows...

CVE-2010-2646

CVE-2010-2646 affects Google Chrome up to version 5.0.375.99, where sandboxing of IFRAME elements was not properly isolated. This memory-corruption/remote-vector issue has high severity (CVSS 9.3) with unspecified impact described in the entry. The available connected documents indicate a vendor ...

CVE-2010-3250

CVE-2010-3250 concerns Google Chrome prior to version 6.0.472.53 and is described as an unspecified vulnerability that allows remote attackers to enumerate the set of installed extensions via unknown vectors. The NVD entry confirms this vulnerable condition, and OpenVAS entries list Google Chrome

CVE-2010-3254

Technical details for CVE-2010-3254 are not publicly detailed in the provided connected documents. The set includes references and mappings to the CVE across OpenVAS, Ubuntu advisories, and NVD, but no concrete exploit vectors, affected versions beyond Chrome before 6.0.472.53, or remediation spe...

CVE-2011-0476

CVE-2011-0476 : Google Chrome before 8.0.552.237 and Chrome OS before 8.0.552.344 are affected. A PDF document can trigger an out-of-memory error, causing stack memory corruption and a possible denial of service. The description is supported by multiple sources (NVD/OpenVAS entries) with a high C...

CVE-2011-0478

Google Chrome/CromeOS vulnerability CVE-2011-0478 affects Chrome before 8.0.552.237 and Chrome OS before 8.0.552.344, due to improper handling of SVG use elements. This can cause denial of service and possibly unspecified other impact via unknown vectors that lead to a stale pointer. The issue is...

CVE-2011-1111

CVE-2011-1111 affects Google Chrome before 9.0.597.107. The issue arises from improper implementation of forms controls, enabling a remote attacker to cause a denial of service (application crash) or possibly other unspecified impact via unknown vectors. Connected documents confirm Chrome is vuln...

CVE-2011-1119

CVE-2011-1119 affects Google Chrome up to version 9.0.597.107. The vulnerability arises in device orientation handling, allowing remote attackers to cause a denial of service or possibly cause other unspecified impact via unknown vectors that lead to a stale pointer. Affected product is Google Ch...

CVE-2011-1194

Summary (CVE-2011-1194): Google Chrome before 10.0.648.127 contains multiple vulnerabilities that allow remote attackers to bypass the pop-up blocker via unknown vectors. The impact is bypass of the browser’s pop-up protections, with no detailed exploit information provided in the sources. Affect...

CVE-2011-1198

The CVE-2011-1198 entry concerns Google Chrome’s video functionality prior to version 10.0.648.127. The vulnerability arises from a malformed out-of-bounds structure which can be triggered by unspecified vectors, leading to a denial-of-service and possibly other unspecified impacts. The provided ...

CVE-2011-1291

CVE-2011-1291 affects Google Chrome versions older than 10.0.648.204. The vulnerability stems from improper handling of base strings, described as a “buffer error,” which could allow remote attackers to trigger a denial of service and potentially other impact via unknown vectors. Public reference...

CVE-2011-1435

Google Chrome vulnerability CVE-2011-1435 affects Chrome before 11.0.696.57, where the extensions tabs permission can be abused to read local files via a crafted extension. Root cause: improper handling of the tabs permission by extensions. Impact is a read of local files (confidentiality). Remed...

CVE-2011-1437

Google Chrome prior to 11.0.696.57 is affected by CVE-2011-1437 due to integer overflows in float rendering, exploitable remotely to cause a denial of service and possibly other impact. The vulnerability is part of a set of issues fixed in Chrome 11.0.696.57 (threat posts and CVE listings confirm...