CVE-2026-9873

CVE-2026-9873 is a use-after-free vulnerability in Google Chrome's Network component. In Chromium-based Chrome, the flaw could allow a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML page. Affected builds are prior to 148.0.7778.216; a fixed version is 148.0.7778.2...

CVE-2026-9997

CVE-2026-9997 corresponds to a use-after-free in the Chrome Input component (Chromium-based) that affects Chrome versions prior to 148.0.7778.216. A renderer process compromise could enable a remote attacker to attempt a sandbox escape via a crafted HTML page. The issue is described across multip...

CVE-2010-2297

CVE-2010-2297 affects Google Chrome’s WebKit/WebCore (FixedTableLayout.cpp) where an HTML document with a large colspan inside a table can crash the browser or potentially execute arbitrary code. Affected version: Chrome prior to 5.0.375.70. Public references in NVD, SUSE/SUSE-verified advisories...

CVE-2010-3113

CVE-2010-3113 affects Google Chrome (< 5.0.375.127) and webkitgtk (

CVE-2011-1113

CVE-2011-1113 affects Google Chrome before 9.0.597.107 on 64-bit Linux. The vulnerability arises from improper pickle deserialization in the browser, enabling remote attackers to trigger a denial of service via an out-of-bounds read. The available connected documents confirm the affected platform...

CVE-2011-1292

CVE-2011-1292 is a use-after-free vulnerability in Chrome’s frame-loader that allows remote denial of service and possibly other impact via unknown vectors, affecting Google Chrome (and Chromium) prior to 10.0.648.204. Connected advisories confirm multiple related issues (CVE-2011-1293, -1440, -1...

CVE-2011-3897

Technical details for CVE-2011-3897 are not present in the provided documents. No specific affected product/version or impact is given here. Monitor for updates.

CVE-2011-3924

CVE-2011-3924 involves a use-after-free vulnerability in Google Chrome prior to 16.0.912.77, affecting DOM selections. The impact per the description is a possible denial of service or other unspecified effects. The provided connected documents do not add concrete technical details (affected comp...

CVE-2013-0885

CVE-2013-0885 corresponds to a Chrome vulnerability affecting Windows, Linux, and macOS where API privileges granted during interaction with the Chrome Web Store were not properly restricted. The CVE entry notes an unspecified impact and attack vectors, but connected records identify the issue as...

CVE-2019-13690

CVE-2019-13690 affects Google Chrome on ChromeOS via an inappropriate OS implementation . Before version 75.0.3770.80 , a remote attacker could achieve OS-level privilege escalation by tricking the user with a malicious file. The documented impact is high, but the connected sources do not provide...

CVE-2021-4322

Google Chrome/Chromium DevTools contains a Use-After-Free in DevTools vulnerability (CVE-2021-4322) affecting Chrome versions prior to 91.0.4472.77. Exploitation would allow arbitrary code execution when a user installs a crafted malicious extension. Remediation: update Chrome to 91.0.4472.77 or ...

CVE-2023-7010

CVE-2023-7010 is a use-after-free vulnerability in WebRTC in Google Chrome, with impact described as potential heap corruption. The affected software is Google Chrome (WebRTC component); the concrete detail provided indicates exploitation could be remote via a crafted HTML page, and the vulnerabi...

CVE-2025-8582

CVE-2025-8582 affects Google Chrome/Chromium Core prior to 139.0.7258.66. The vulnerability arises from insufficient validation of untrusted input in Core, allowing a remote attacker to spoof the Omnibox (URL bar) via a crafted HTML page. Impact: page URL bar spoofing; exploitation details are no...

CVE-2026-10892

CVE-2026-10892 is an out-of-bounds write in the GPU component of Google Chrome on Android, before version 149.0.7827.53, allowing a remote attacker to potentially escape the sandbox via a crafted HTML page. The issue affects Chrome for Android and is categorized as Critical. Public references sho...

CVE-2026-13789

CVE-2026-13789 is a vulnerability in Google Chrome’s GPU process (GPU) caused by a use-after-free condition, allowing a remote attacker who has compromised the renderer process to potentially escape the browser sandbox via a crafted HTML page. Affected product: Google Chrome (Chromium-based) prio...

CVE-2026-14144

CVE-2026-14144 relates to Google Chrome desktop, where an issue in the Chromium Views security UI allows UI spoofing via a crafted HTML page. A remote attacker could exploit this after convincing a user to perform specific UI gestures, with exploitation requiring user interaction. Affected versio...

CVE-2026-14406

CVE-2026-14406 affects Google Chrome's V8 engine prior to 150.0.7871.46. Root cause: an out-of-bounds read in V8. Impact: attacker-assisted access to potentially sensitive information from process memory via a crafted Chrome Extension. Remediation: update Chrome to 150.0.7871.46 or later. Exploit...

CVE-2026-14411

CVE-2026-14411 describes insufficient validation of untrusted input in ANGLE used by Google Chrome, prior to build 150.0.7871.46. The issue may allow a remote attacker to cause a sandbox escape via a crafted HTML page. Documented impact is a high-severity, likely remote threat affecting ANGLE int...

CVE-2026-15905

CVE-2026-15905 is a local-use-after-free vulnerability in the Aura component of Google Chrome (Chromium-based) prior to 150.0.7871.128, allowing a local attacker to potentially cause heap corruption via a malicious file. The issue is confirmed in multiple sources and is addressed by an update to ...

CVE-2026-17785

CVE-2026-17785 is an uninitialized use flaw in the ANGLE component of Chrome, allowing a remote attacker to leak cross-origin data via a crafted HTML page. Affected product: Google Chrome (ANGLE in Chromium). Root cause: uninitialized use in ANGLE; impact: potential cross-origin data leakage. Mit...

CVE-2026-17927

CVE-2026-17927: Google Chrome (DevTools) before 151.0.7922.72 has insufficient policy enforcement, enabling a user-assisted leak of cross-origin data via a crafted Chrome Extension. Impact is described as Low severity; exploit requires user interaction and a malicious extension installed by the u...

CVE-2026-17938

CVE-2026-17938 affects Google Chrome on Android; the issue is an inappropriate FullScreen implementation that enables a remote attacker to perform UI spoofing via a crafted HTML page. Root cause: flawed FullScreen handling in Chromium-based Chrome for Android prior to version 151.0.7922.72. Impac...

CVE-2026-19159

Google Chrome vulnerable component: Views in Chromium-based Chrome. CVE-2026-19159 is a use-after-free flaw that can lead to heap corruption when a user is coerced into specific UI gestures via a crafted HTML page, affecting Chrome versions prior to 151.0.7922.109. The issue is documented in the ...

CVE-2010-3115

MiracleLinux AXSA:2011-34 references CVE-2010-3115: Google Chrome

CVE-2010-3257

CVE-2010-3257 is a use-after-free vulnerability in WebKit/WebKitGTK+ that can allow remote code execution or a crash via element focus. It affects WebKit-based components used by Safari, Chrome, and webkitgtk prior to affected patch levels (e.g., webkitgtk before 1.2.6). The MiracleLinux AXSA adv...

CVE-2010-4487

CVE-2010-4487 describes an incomplete blacklist vulnerability in Google Chrome up to version 8.0.552.215 on Linux and macOS, allowing remote attackers to cause an unspecified impact via a "dangerous file" . The primary description provides no details on exploit vectors or specifics of the impact....

CVE-2011-1107

CVE-2011-1107 is a WebKit/Web browser vulnerability where a malicious site could cause the address bar to display a spoofed URL. It is documented as affecting WebKit components used by Safari on iOS and Mac OS X, with the issue described as a URL spoofing flaw in the handling of URLs (DOM/history...

CVE-2011-1413

Google Chrome on Linux is affected by CVE-2011-1413: an unspecified flaw in the X server allows remote attackers to cause a denial of service via long X messages. Affected software is Chrome prior to 10.0.648.127 on Linux; root cause and mitigation details are not provided in the connected docume...

CVE-2011-1438

CVE-2011-1438 affects Google Chrome prior to 11.0.696.57. The vulnerability allows remote attackers to bypass the Same Origin Policy via vectors involving blobs, enabling cross-origin access or leakage. The issue is tied to the browser’s handling of blob-related operations and was addressed in th...

CVE-2011-3035

CVE-2011-3035 concerns a use-after-free in SVG use handling in Google Chrome up to version before 17.0.963.65. The vulnerability could allow a remote attacker to cause a denial of service or potentially other impact via SVG use element vectors. Public references in the provided documents corrobor...

CVE-2011-3058

Google Chrome pre-18.0.1025.142 has a vulnerability where improper handling of EUC-JP encoding can permit remote cross-site scripting (XSS) via unspecified vectors. The description specifies the affected version range and the exploit could be triggered remotely through EUC-JP-encoded inputs, lead...

CVE-2011-3953

CVE-2011-3953 affects Google Chrome (Chrome before 17.0.963.46). The root cause is that clipboard monitoring after a paste event is not prevented, with unspecified impact. Affected versions are Chrome before 17.0.963.46; mitigation is to upgrade to 17.0.963.46 or newer. Gentoo GLSA/OSV entries in...

CVE-2011-3971

CVE-2011-3971 describes a use-after-free in Google Chrome prior to version 17.0.963.46. The vulnerability, triggered by mousemove-related vectors, allows user-assisted remote attackers to cause a denial of service and possibly other impacts. Affected software is Google Chrome before 17.0.963.46; ...

CVE-2013-0898

CVE-2013-0898 is a use-after-free vulnerability in Chrome’s URL handling. Affected: Google Chrome on Windows, Linux, and Mac OS X; vulnerable component is URL handling. Impact: remote denial of service and possibly other unspecified effects via URL-related vectors. Exploitation status is not prov...

CVE-2024-6997

CVE-2024-6997 is a use-after-free in Chrome/Chromium Tabs prior to 127.0.6533.72, enabling heap corruption via a crafted HTML page when a user engages specific UI gestures. Affected product: Google Chrome/Chromium; root cause: use-after-free in tab handling; impact: remote code execution/compromi...

CVE-2024-9859

CVE-2024-9859 describes a type-confusion vulnerability in WebAssembly in Google Chrome prior to version 126.0.6478.126, allowing a remote attacker to execute arbitrary code via a crafted HTML page. Affected software: Google Chrome before 126.0.6478.126 (Chromium-based). Root cause: type confusion...

CVE-2025-9866

CVE-2025-9866 affects Google Chrome/Chromium: an incorrect implementation in Chrome extensions allows a remote attacker to bypass the content security policy via a crafted HTML page. Impact: CSP bypass; affected component is the Extensions subsystem. Vulnerable versions are Chrome before 140.0.73...

CVE-2026-10003

CVE-2026-10003: Use-after-free in Chrome’s Views (Chromium) prior to 148.0.7778.216 permits a remote attacker to run arbitrary code via a crafted HTML page after the user engages specific UI gestures. Root cause is a flaw in the Views component of Chromium/Blink; affected software is Google Chrom...

CVE-2026-10887

CVE-2026-10887 is a use-after-free in Chromoting within Google Chrome on macOS, leading to remote arbitrary code execution via malicious network traffic. The connected Chrome release note confirms a fix in Chrome 149.0.7827.53 (and related stability updates) for macOS, addressing the vulnerabilit...

CVE-2026-12443

CVE-2026-12443 is a use-after-free in Chrome’s Web Authentication implementation that could allow a remote attacker to execute arbitrary code via a crafted HTML page. Affected software: Google Chrome (Chromium). Underlying issue is in Web Authentication handling that leads to memory misuse. Impac...

CVE-2026-13027

CVE-2026-13027 is a use-after-free in Chrome’s FileSystem prior to 149.0.7827.197, allowing a remote attacker to potentially exploit heap corruption via a crafted HTML page. Affected: Google Chrome (FileSystem component); root cause: use-after-free vulnerability; impact: heap corruption with high...

CVE-2026-18012

CVE-2026-18012 is a Use-After-Free in PDFium affecting Google Chrome prior to 151.0.7922.72, allowing a remote attacker to execute arbitrary code in the sandbox via a crafted PDF. Root cause: use-after-free in PDFium. Impact: high (CVE metrics show base score 8.8, network attack vector, user inte...

CVE-2026-4462

CVE-2026-4462 is an out-of-bounds read in Blink of Google Chrome, affecting versions prior to 146.0.7680.153. The vulnerability allows a remote attacker to trigger an out-of-bounds memory read via a crafted HTML page. Current connected documents consistently describe this Chrome/Blink issue with ...

CVE-2026-9883

The vulnerability CVE-2026-9883 is a Use-After-Free in the Base component of Google Chrome (Chromium-based) prior to version 148.0.7778.216. The issue allows a remote attacker to execute arbitrary code via a crafted HTML page. The root cause is a use-after-free flaw in Base, fixed in the Chrome s...

CVE-2010-2295

CVE-2010-2295 affects WebKit/WebCore’s EventHandler.cpp in WebKit used by Google Chrome before 5.0.375.70. A change of the focused frame during keydown dispatch could allow a user‑assisted attacker to redirect keystrokes via a crafted HTML document (rdar 7018610). Impact is user‑driven keystroke ...

CVE-2010-3248

Google Chrome prior to version 6.0.472.53 is vulnerable because it does not properly restrict copying to the clipboard, with unspecified impact and attack vectors as per CVE-2010-3248. The issue is documented in multiple sources referencing Chrome webkit/vulnerability entries (including OpenVAS a...

CVE-2011-1301

CVE-2011-1301 affects Google Chrome’s GPU process. The vulnerability is a use-after-free in the GPU process that allowed remote code execution via unknown vectors, on Chrome versions before 10.0.648.205. Affected platforms include Windows and Linux (as per OpenVAS entries), with multiple code-exe...

CVE-2011-2346

CVE-2011-2346 is a use-after-free in Google Chrome’s SVG fonts handling present in Chrome prior to 12.0.742.112. The underlying issue is a memory management error in the SVG font processing path, which could allow a remote attacker to trigger a denial of service or potentially cause other unspeci...

CVE-2011-2854

Technical details about CVE-2011-2854 are not publicly available in the provided connected documents. The references mention the CVE but do not describe affected product/version, root cause, or impact. Monitor for updates.

CVE-2011-2856

CVE-2011-2856 involves Google Chrome/Chromium’s V8 engine. The vulnerability allows remote attackers to bypass the Same Origin Policy via unspecified vectors in Google V8 used by Chrome before 14.0.835.163. Impact is exposure of cross-origin data and potential manipulation of web content; exploit...