CVE-2011-3968

Technical details for CVE-2011-3968 are not publicly available in the provided connected documents; monitor for updates.

CVE-2014-1735

CVE-2014-1735 refers to multiple vulnerabilities in the V8 JavaScript engine as used by Chromium/Google Chrome. Affected software includes Google V8 before 3.24.35.33 and Chrome/Chromium before 34.0.1847.131 (Windows/OS X) or 34.0.1847.132 (Linux). The stated impact is denial of service or possib...

CVE-2019-25154

The CVE-2019-25154 entry describes an Inappropriate implementation in iframe handling in Google Chrome prior to 77.0.3865.75, which could allow a remote attacker to potentially perform a sandbox escape via a crafted HTML page. Affected software is Google Chrome (Chromium-based); the underlying is...

CVE-2024-11919

CVE-2024-11919 concerns Google Chrome for Android, where an inappropriate implementation in Intents could let a remote attacker perform UI spoofing via a crafted HTML page. The issue affects Chrome on Android prior to version 129.0.6668.58 . The connected Red Hat/Ubuntu/Debian and other CVE feeds...

CVE-2024-13178

CVE-2024-13178 concerns Google Chrome’s fullscreen implementation. The vulnerability arises from an inappropriate fullscreen handling in Chrome/Chromium prior to version 128.0.6613.84, enabling a remote attacker to trigger UI spoofing via a crafted HTML page. Practical impact is UI spoofing with ...

CVE-2025-10890

CVE-2025-10890 is a Chromium/Chrome vulnerability where a side-channel in the V8 engine allowed a remote attacker to disclose cross-origin data via a crafted HTML page. Affected software includes Google Chrome/Chromium with V8 before version 140.0.7339.207. The root cause is a side-channel inform...

CVE-2026-15900

CVE-2026-15900: Use-after-free in GPU of Google Chrome on Android (pre-150.0.7871.128). A remote attacker could escape the sandbox via a crafted HTML page. Affected product: Google Chrome on Android; root cause: GPU-related use-after-free; impact: potential sandbox escape and total compromise per...

CVE-2026-17747

CVE-2026-17747: An insufficient validation of untrusted input flaw was found in the Payments component of Google Chrome on Android. The issue stems from inadequate input validation in Payments, allowing a remote attacker who had already compromised the renderer process to perform UI spoofing via ...

CVE-2026-18003

CVE-2026-18003 concerns Google Chrome on iOS, where an inappropriate implementation in Chrome for iOS prior to 151.0.7922.72 enables a remote attacker to perform UI spoofing via a crafted HTML page. The NVD entry notes a Chromium-based, low-severity issue (CVSS v3.1: 4.3, MEDIUM) with attack vect...

CVE-2026-19153

CVE-2026-19153 corresponds to a Chrome vulnerability where insufficient validation of untrusted input in Workers could be leveraged by a renderer process that has been compromised to bypass site isolation via a crafted HTML page. The issue affects Google Chrome prior to version 151.0.7922.109, wi...

CVE-2011-1451

Technical details for CVE-2011-1451 are not publicly provided in the connected documents. Available information only references a Chrome issue with DOM id maps and potential dangling pointers. Monitor for updates.

CVE-2011-2800

Technical details for CVE-2011-2800 are not publicly provided in the supplied connected documents; no explicit product/version/impact/fix information beyond the initial description is available here. Monitor for updated disclosures or vendor advisories.

CVE-2011-3031

CVE-2011-3031 is a use-after-free in Google V8's element wrapper, affecting Chrome prior to 17.0.963.65. The vulnerability could cause a denial of service or possibly other impact via unknown vectors. Publicly documented mitigations include updates in Chromium/OpenSUSE (openSUSE-SU-2012:0374-1) a...

CVE-2011-3881

CVE-2011-3881 affects WebKit as used in Google Chrome <15.0.874.102 and Android

CVE-2011-3903

CVE-2011-3903 affects Chromium and V8 per Gentoo GLSA 201201-03 and related advisories. The issue is described as multiple vulnerabilities tied to regex handling in Chromium that could allow a context-dependent attacker to cause arbitrary code execution or a Denial of Service, with possible URL b...

CVE-2011-3908

CVE-2011-3908 (Google Chrome) affects Chrome versions before 16.0.912.63. The vulnerability arises from improper parsing of SVG documents, enabling a remote attacker to trigger an out-of-bounds read and cause a denial of service via unspecified vectors. According to the description, the issue is ...

CVE-2011-3958

Technical details for CVE-2011-3958 are not provided in the supplied connected documents. No affected product/version or remediation is stated here. Monitor for updates.

CVE-2013-0882

Google Chrome vulnerable to denial of service and potentially other impact via a large number of SVG parameters. Affected: Windows/Linux builds < 25.0.1364.97 and Mac

CVE-2013-0888

CVE-2013-0888 affects Google Chrome where Skia processing allowed an out-of-bounds read via a user-gesture related check for dangerous file downloads. Affected versions are Chrome on Windows and Linux prior to 25.0.1364.97, and on macOS prior to 25.0.1364.99. The vulnerability enables a denial of...

CVE-2014-1715

CVE-2014-1715 is a directory traversal vulnerability in Chromium/Google Chrome prior to 33.0.1750.152 (for Linux/macOS) and prior to 33.0.1750.154 (Windows). The issue was addressed in Chromium/Chrome updates cited by multiple advisories, with Debian noting fixes in 33.0.1750.152-1~deb7u1 and ope...

CVE-2014-1736

CVE-2014-1736 is an integer overflow in the V8 engine’s api.cc used by Google Chrome/Chromium prior to version 34.0.1847.132 on Linux (and earlier Windows/macOS builds per the CVE description). The vulnerability can allow remote denial of service or other impacts via a large length value. Publicl...

CVE-2020-15998

CVE-2020-15998 affects Google Chrome: a use-after-free in the USB handling path could allow a compromised renderer to escape the sandbox via a crafted HTML page. Impact was mitigated by Chrome 86.0.4240.99 (and later); update to that version or newer. Affected component: USB-related code in Chrom...

CVE-2023-7011

CVE-2023-7011 describes an improper implementation in Google Chrome’s Picture in Picture (PiP) feature that allowed a remote attacker to spoof the Omnibox contents via a crafted HTML page. Affected software is Google Chrome (PiP module) prior to version 119.0.6045.105. The underlying issue is an ...

CVE-2025-13227

CVE-2025-13227 describes a Type Confusion in V8 used by Google Chrome, prior to version 142.0.7444.59, which could allow a remote attacker to trigger heap corruption via a crafted HTML page. Multiple connected sources corroborate the issue as a Chrome/V8 vulnerability affecting Chrome versions be...

CVE-2026-10001

CVE-2026-10001 affects Google Chrome/Chromium’s PerformanceManager: a use-after-free in PerformanceManager can allow a remote attacker who has already compromised the renderer process to potentially escape the sandbox via a crafted HTML page. Impact is described as high (CVSS 3.1: AV:N/AC:H/PR:N/...

CVE-2026-11145

Consolidated details show a vulnerability in Google Chrome for Android (affected component: Geolocation) due to a race condition, allowing a remote attacker to leak cross-origin data via a crafted HTML page. Impact is described as Confidentiality HIGH with no integrity/availability impact, CVSS b...

CVE-2026-11688

CVE-2026-11688 describes an inappropriate SVG implementation in Google Chrome prior to 149.0.7827.103 that enables a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML page. Impact is high (C/H/I/A = 8.8 CVSS v3.1) per Chromium, with network access, no privileges, use...

CVE-2026-13022

CVE-2026-13022 affects Google Chrome up to version 149.0.7827.196/197 (prior to 149.0.7827.197). The issue is an inappropriate implementation in Autofill within the Chromium-based renderer, enabling a remote attacker who has compromised the renderer process to leak cross-origin data via a crafted...

CVE-2026-17952

CVE-2026-17952 affects Google Chrome’s V8 engine prior to 151.0.7922.72. The issue arises from an inappropriate implementation in V8 that allows an attacker, by convincing a user to install a crafted Chrome extension, to execute arbitrary code inside Chrome’s sandbox. Practical impact is arbitrar...

CVE-2026-18013

CVE-2026-18013 : In Chrome for iOS (Google Chrome on iOS), prior to version 151.0.7922.72, an inappropriate implementation allowed a remote attacker to spoof UI via a crafted HTML page. This vulnerability is documented with a Chromium severity of Low and a CVSS v3.1 base score of 4.3 (MEDIUM), in...

CVE-2026-9875

CVE-2026-9875: Out-of-bounds read in WebGL in Google Chrome on Android (pre-148.0.7778.216) could allow a remote attacker to perform a sandbox escape via a crafted HTML page. Affects WebGL in Chromium-based Chrome for Android; fixed in the Chrome stable channel update to 148.0.7778.216/217. The i...

CVE-2010-4493

Summary: CVE-2010-4493 is a use-after-free in Google Chrome prior to 8.0.552.215, related to handling of mouse dragging events, causing a denial of service when exploited remotely. The connected sources confirm the issue in Chrome/WebKit contexts and document remediation via browser/webkit update...

CVE-2011-1188

CVE-2011-1188 affects Google Chrome prior to 10.0.648.127. The vulnerability arises from improper handling of counter nodes, enabling a remote attacker to cause memory corruption and a denial-of-service (and potentially other impact) via unknown vectors. The issue is mitigated by updating Chrome ...

CVE-2011-1805

CVE-2011-1805 affects Google Chrome before version 11.0.0.0, where a bad cast in CSS could allow a remote attacker to trigger heap corruption via a crafted HTML page. This is a remote, network-exploitable vulnerability with high impact (confidentiality/integrity/availability). Remediation: upgrad...

CVE-2011-2855

Technical details are not publicly available in the provided documents. Monitor for updates.

CVE-2011-3015

CVE-2011-3015 involves multiple integer overflows in Google Chrome’s PDF codecs, affecting Chrome versions prior to 17.0.963.56. The issue can allow a remote attacker to trigger a denial of service or possibly cause other impact via unknown vectors. Affected product/version detail: Google Chrome ...

CVE-2011-3039

CVE-2011-3039 affects Google Chrome prior to 17.0.963.65, with a use-after-free in quote handling that can lead to denial of service and potentially other impact. The vulnerability is triggered via quote handling vectors in the browser’s rendering/JavaScript context. Public references in connecte...

CVE-2011-3050

CVE-2011-3050 affects Google Chrome

CVE-2011-3064

CVE-2011-3064 is a use-after-free in Google Chrome before 18.0.1025.142 related to SVG clipping. This could allow a remote attacker to cause a denial of service and possibly other unspecified impacts by abusing SVG clipping handling. Affected software: Google Chrome (pre-18.0.1025.142). Root caus...

CVE-2011-3076

Technical details about CVE-2011-3076 are not provided in the connected documents. The materials here cite the Chrome use-after-free issue but do not include affected versions, root cause, impact, or fixes. Monitor for updates.

CVE-2011-3234

CVE-2011-3234 affects Google Chrome prior to 14.0.835.163. The issue arises from how Chrome handles boxes, allowing remote attackers to trigger an out-of-bounds read and potentially cause a denial of service. The description notes remote exploitation via unspecified vectors. No vendor/version-spe...

CVE-2011-3890

CVE-2011-3890: A use-after-free in Google Chrome prior to 15.0.874.102 related to video source handling can allow remote attackers to cause a denial of service or possibly other impact. Affects Chrome versions before the fixed build; exploitation details and in-wild activity are not described in ...

CVE-2013-0883

CVE-2013-0883 : Technical details are not provided in the supplied documents; only a generic description is present. Monitor official advisories for updates.

CVE-2013-0892

CVE-2013-0892 involves multiple unspecified vulnerabilities in Google Chrome’s IPC layer affecting Windows, Linux, and Mac OS X. The CVE entry notes a denial-of-service or possibly other impact via unknown vectors, with vulnerable versions listed as before 25.0.1364.97 on Windows/Linux and before...

CVE-2023-3742

CVE-2023-3742: Google Chrome on ChromeOS prior to 114.0.5735.90 suffers from insufficient policy enforcement in the ADB component, enabling a local attacker with physical access to bypass device policy restrictions. Affected product: Google Chrome on ChromeOS; vulnerable element: ADB policy enfor...

CVE-2026-10886

CVE-2026-10886: In Google Chrome, a use-after-free in the FileSystem component can allow a remote attacker to perform a sandbox escape via a crafted HTML page. The vulnerability affects Chrome builds prior to 149.0.7827.53. The Chrome Stable update 149.0.7827.53 (Linux/Windows/macOS) includes fix...

CVE-2026-17657

CVE-2026-17657 affects Google Chrome desktop prior to version 151.0.7922.72. The vulnerability is a use-after-free in Navigation that, if a renderer process is already compromised, could enable a sandbox escape via a crafted HTML page. Chrome’s July 2026 stable-channel update addresses this, with...

CVE-2026-19148

CVE-2026-19148: Out-of-bounds write in the GPU component of Google Chrome on Linux prior to 151.0.7922.109 can allow a remote attacker who compromises the renderer process to potentially escape the Chrome sandbox via a crafted HTML page. Affected software: Google Chrome (Linux). Root cause: GPU-r...

CVE-2026-7338

CVE-2026-7338: Use-after-free in Cast in Google Chrome prior to 147.0.7727.138 allows a local-network attacker to potentially trigger heap corruption via malicious network traffic. Affected product: Google Chrome (Cast component); root cause is a use-after-free in Cast. Remediation: update Chrome...

CVE-2026-9873

CVE-2026-9873 is a use-after-free vulnerability in Google Chrome's Network component. In Chromium-based Chrome, the flaw could allow a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML page. Affected builds are prior to 148.0.7778.216; a fixed version is 148.0.7778.2...