CVE-2011-1800

CVE-2011-1800 affects Google Chrome’s WebKit/WebCore SVG Filters: multiple integer overflows in the SVG Filters implementation may allow remote denial of service and other impact. Affected component is WebCore/SVG Filters in WebKit used by Chrome prior to 11.0.696.68. Exploitation details are not...

CVE-2011-1807

CVE-2011-1807 is associated with Google Chrome versions prior to 11.0.696.71. The vulnerability stems from how the browser handles blobs, enabling a remote attacker to trigger an out-of-bounds write and execute arbitrary code via unspecified vectors. The issue is documented as a high-severity, ne...

CVE-2011-2345

CVE-2011-2345 affects Google Chrome’s NPAPI implementation prior to 12.0.742.112, where strings are not handled correctly, allowing remote attackers to trigger an out-of-bounds read and cause a denial of service via unspecified vectors. Documented references in OpenVAS/NVD indicate this CVE is pa...

CVE-2011-2799

Technical details about CVE-2011-2799 are not publicly available in the provided documents. The connected items reference Apple Safari/iTunes entries and OpenVAS checks but do not specify Chrome-related root cause, affected versions, or a fix; monitor for updates.

CVE-2011-2837

CVE-2011-2837 affects Google Chrome on Linux prior to 14.0.835.163. The root cause described in the initial entry is that Chrome did not use PIC and PIE options for position-independent code, with unspecified impact and attack vectors. The connected documents provide corroboration across OpenVAS/...

CVE-2011-2838

CVE-2011-2838 affects Google Chrome prior to 14.0.835.163. The vulnerability stems from improper MIME-type handling when loading plug-ins, with unspecified impact and remote attack vectors as described in the Initial Description. Connected documents corroborate that this CVE is part of Chrome/Chr...

CVE-2011-2852

The CVE-2011-2852 entry concerns Google Chrome's V8 engine, where an Off-by-one error in V8 (as shipped in Chrome prior to 14.0.835.163) may allow a remote attacker to cause a denial of service or potentially other impact via unknown vectors. Affected product/component: Google Chrome using V8. Ro...

CVE-2011-2864

CVE-2011-2864 affects Google Chrome prior to 14.0.835.163; improper handling of Tibetan characters enables a remote denial-of-service via an out-of-bounds read (vectors not specified). A fix is provided in the Chrome stable update 14.0.835.163.

CVE-2011-3023

Google Chrome contains a use-after-free vulnerability in drag-and-drop handling (CVE-2011-3023). It affects Chrome versions before 17.0.963.56 and can lead to denial of service or possibly other impact, potentially user-involvement required. Remediation: upgrade to Chrome 17.0.963.56 or newer. No...

CVE-2011-3077

CVE-2011-3077 is a Google Chrome vulnerability described in multiple sources as a use-after-free in the script bindings, leading to possible denial of service or other impact. The cited description specifies Chrome versions older than 18.0.1025.151 are affected, with vectors related to a read-aft...

CVE-2025-10890

CVE-2025-10890 is a Chromium/Chrome vulnerability where a side-channel in the V8 engine allowed a remote attacker to disclose cross-origin data via a crafted HTML page. Affected software includes Google Chrome/Chromium with V8 before version 140.0.7339.207. The root cause is a side-channel inform...

CVE-2025-13227

CVE-2025-13227 describes a Type Confusion in V8 used by Google Chrome, prior to version 142.0.7444.59, which could allow a remote attacker to trigger heap corruption via a crafted HTML page. Multiple connected sources corroborate the issue as a Chrome/V8 vulnerability affecting Chrome versions be...

CVE-2026-14150

CVE-2026-14150 affects Google Chrome’s Speech component and is due to insufficient validation of untrusted input in the renderer. Prior to version 150.0.7871.47, a remote attacker who had already compromised the renderer process could perform UI spoofing via a crafted HTML page. The security rati...

CVE-2026-1862

CVE-2026-1862 is a Type Confusion in V8 affecting Google Chrome before 144.0.7559.132. The vulnerability arises from a V8 type-confusion in the JIT/optimized path (via JSObject::GetProperty) that can lead to heap corruption, enabling a remote attacker to achieve arbitrary read/write and potential...

CVE-2026-4462

CVE-2026-4462 is an out-of-bounds read in Blink of Google Chrome, affecting versions prior to 146.0.7680.153. The vulnerability allows a remote attacker to trigger an out-of-bounds memory read via a crafted HTML page. Current connected documents consistently describe this Chrome/Blink issue with ...

CVE-2026-9998

CVE-2026-9998 affects the Skia component in Google Chrome/Chromium. An integer overflow in Skia prior to version 148.0.7778.216 could allow a remote attacker who has compromised the renderer process to potentially perform a sandbox escape via a crafted HTML page. The impact is a high-severity, lo...

CVE-2010-2108

Google Chrome before 5.0.375.55 is affected by CVE-2010-2108: an unspecified vulnerability that allows remote bypass of the whitelist‑mode plugin blocker via unknown vectors. The issue is documented in CVE‑2010‑2108 and is associated with multiple related Chrome vulnerabilities (including issues ...

CVE-2010-2897

CVE-2010-2897 affects Google Chrome prior to 5.0.375.125. The connected records consistently state vulnerability to an unspecified flaw in the Windows kernel with unknown impact and attack vectors, without detailing root cause beyond “unspecified flaw.” The NVD entry lists a base score of 10.0 (H...

CVE-2011-0475

Google Chrome before 8.0.552.237 and Chrome OS before 8.0.552.344 are affected by a use-after-free vulnerability in PDF handling, enabling remote denial of service or possibly other impact. Root cause: use-after-free in the PDF document path. Affected products/components: Google Chrome (pre-8.0.5...

CVE-2011-0777

CVE-2011-0777 affects Chromium/Google Chrome before 9.0.597.84. A use-after-free in image loading can allow remote attackers to cause a denial of service and possibly other impact. Several connected sources (e.g., Debian DSA 2166-1 and OpenVAS entries) corroborate the vuln in Chromium/Chrome arou...

CVE-2011-0782

Google Chrome before 9.0.597.84 on macOS X is affected by an unspecified flaw in the Mac OS X 10.5 SSL libraries that can be triggered remotely to crash the application (denial of service). The NVD record indicates a network-based, low complexity attack with no authentication, resulting in partia...

CVE-2011-1434

CVE-2011-1434 (Google Chrome) : The Chrome browser is vulnerable due to a thread safety issue in handling MIME data, allowing remote attackers to cause a denial of service and potentially other impacts via unspecified vectors. This affects Chrome versions before 11.0.696.57. The vulnerability is ...

CVE-2011-1442

CVE-2011-1442 affects Google Chrome prior to 11.0.696.57. The vulnerability stems from improper handling of mutation events, allowing remote attackers to cause a denial of service (node tree corruption) or possibly other impact via unknown vectors. The connected documents provide corroborating Ch...

CVE-2011-1448

Google Chrome (Windows/Linux/macOS) prior to 11.0.696.57 is affected by CVE-2011-1448 due to incorrect height calculations in a rendering-related component, enabling remote attackers to cause a denial of service and possibly other impact via a stale pointer. The issue is identified in the Chrome ...

CVE-2011-1812

Google Chrome CVE-2011-1812 affects Chrome pre-12.0.742.91. The vulnerability is an extensions-permission bypass that lets remote attackers bypass access restrictions via extensions. Public details in NVD state the issue; ThreatPost confirms Chrome 12.0.742.91 fixes multiple chrome vulnerabilitie...

CVE-2011-1819

Google Chrome (before 12.0.742.91) is vulnerable to extension-injected access into chrome:// pages. The connected OpenVAS entries enumerate CVE-2011-1819 as part of a multi‑vulnerability set titled “Google Chrome Multiple Vulnerabilities (Jun 2011),” with the underlying issue described as extensi...

CVE-2011-2349

CVE-2011-2349 is a use-after-free vulnerability in Google Chrome prior to version 12.0.742.112 . The issue occurs in text selection handling and could allow a remote attacker to cause a denial of service or potentially other unspecified impacts. The vulnerability is exploitable over the network w...

CVE-2011-2789

CVE-2011-2789 : Use-after-free in Google Chrome prior to 13.0.782.107 allows remote attackers to cause a denial of service or other unspecified impact via vectors related to Pepper plug-in instantiation. A remediation exists: upgrade to Chrome 13.0.782.107 or later.

CVE-2011-2839

CVE-2011-2839 affects Google Chrome’s Linux PDF handling: the PDF implementation does not properly use memset, enabling remote DoS and possibly other impact via unknown vectors. A fix is available in Chrome 13.0.782.215 and later.

CVE-2011-2847

This CVE (CVE-2011-2847) is a use-after-free in Google Chrome's document loader, exploitable via a crafted document to cause a denial of service (and possibly other impact). Affected software: Chrome before 14.0.835.163. Impact is described as DoS/other unspecified effects; remediation is to upgr...

CVE-2011-2851

Google Chrome before 14.0.835.163 is vulnerable to an out-of-bounds read in video handling via unspecified vectors, allowing remote denial of service. Affected product: Google Chrome; root cause: improper video handling; impact: remote DoS; remediation: update to version 14.0.835.163 or newer as ...

CVE-2011-2858

Technical details for CVE-2011-2858 are not publicly provided in the connected documents. The materials reference the CVE but do not disclose affected components, root cause, or remediation specifics. Monitor for updates.

CVE-2011-2874

Technical details for CVE-2011-2874 are not publicly provided in the supplied documents. No explicit affected products, versions, impact, or remediation are stated here. Monitor for updates.

CVE-2011-3061

Google Chrome up to 18.0.1025.142 is affected by CVE-2011-3061 due to improper verification of X.509 certificates before using a SPDY proxy, which could enable MITM or leakage of sensitive information via a crafted certificate. Root cause: SPDY proxy certificate checking error. Mitigation, per th...

CVE-2011-3907

Chromium and V8 are affected by multiple vulnerabilities including CVE-2011-3907 (URL bar spoofing) as part of the Chromium/Chromium-based web engine family. Public entries in Gentoo GLSA-201201-03 describe that a number of issues could allow a context‑dependent attacker to lure a user to a craft...

CVE-2011-3917

CVE-2011-3917: A stack-based buffer overflow in Chrome’s FileWatcher (affected product: Chrome/Chromium) allows remote denial of service or possibly other impact for builds before 16.0.912.63. The connected advisories document public patches and upgrades for Chromium, recommending upgrade to Chro...

CVE-2011-3925

CVE-2011-3925 is a use-after-free vulnerability in the Safe Browsing feature of Chromium-based browsers, with exploitation possible via a navigation entry and an interstitial page, potentially causing denial of service through heap memory corruption (impact listed as partial confidentiality, inte...

CVE-2011-3960

Affected software: Google Chrome. Issue: pre-17.0.963.46 builds fail to correctly decode audio data, enabling remote attackers to cause a denial of service via an out-of-bounds read (vectors unspecified). Root cause: improper audio data handling in decoding path. Impact: Denial of Service; no exp...

CVE-2017-5090

CVE-2017-5090 affects Google Chrome on macOS, where the Omnibox failed to enforce domain policy, enabling a remote attacker to spoof domains using a crafted name containing U+0620. Impact is domain spoofing; attack details describe exploitation remotely via the Omnibox. The vulnerability is assoc...

CVE-2024-7020

CVE-2024-7020 affects Google Chrome (Autofill) via an incorrect UI handling in Chromium before 124.0.6367.60. A remote attacker could induce UI spoofing by a crafted HTML page; CVSS indicates network attack vector, low impact to confidentiality/integrity, with user interaction required and UI acc...

CVE-2025-13226

CVE-2025-13226 is a Type Confusion in V8 affecting Google Chrome before 142.0.7444.59, enabling potential heap corruption via a crafted HTML page and, per the CVE entry, remote impact. The connected documents indicate the issue is addressed in the Chrome 142 release (Chrome 142.0.7444.59/60), wit...

CVE-2026-10888

CVE-2026-10888 affects Cast Streaming in Google Chrome, prior to version 149.0.7827.53. Description: use-after-free in Cast Streaming could be triggered by malicious network traffic on the local network segment, enabling arbitrary code execution. Severity: Critical; attack vector: adjacent (local...

CVE-2026-13036

The CVE-2026-13036 entry documents a use-after-free in Blink of Google Chrome before 149.0.7827.197, enabling a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML page. Affected component: Blink (Chromium-based crawler). Root cause: use-after-free in Blink logic; impa...

CVE-2026-14133

Technical details are not publicly available in the provided documents. Monitor for updates.

CVE-2026-6307

CVE-2026-6307 concerns a type confusion in V8’s Turbofan compiler affecting Google Chrome before 147.0.7727.101. The vulnerability enables a remote attacker to execute arbitrary code inside a sandbox via a crafted HTML page, with Chromium citing it as High severity. Connected documents provide th...

CVE-2026-9872

Google Chrome on Android prior to 148.0.7778.216 has an out-of-bounds write in the GPU component of Chromium, which could allow a remote attacker to escape the sandbox via a crafted HTML page. The issue is tracked as CVE-2026-9872 and is considered Critical. A fix is included in Chrome 148.0.7778...

CVE-2010-2106

Google Chrome before 5.0.375.55 is reported to be vulnerable to spoofing the URL bar via vectors involving unload event handlers. The CVE-2010-2106 entry is supported by multiple sources (NVD, OpenVAS/Nessus aggregations) indicating a URL-spoofing flaw tied to unload handlers; the OpenVAS/Nessus ...

CVE-2010-2300

CVE-2010-2300 is a use-after-free vulnerability in WebKit’s WebCore (Element::normalizeAttributes in dom/Element.cpp) affecting Google Chrome builds prior to 5.0.375.70. The issue can lead to remote code execution or memory corruption via DOM mutation-event handling vectors, per the description. ...

CVE-2010-2649

Google Chrome 5.0.375.99 and prior versions are affected by multiple vulnerabilities including invalid image handling that can crash the browser or potentially allow memory corruption. Public sources (OpenVAS entries and Seebug summary) describe a set of issues in July 2010 across WebGL bounds ch...

CVE-2010-2903

Google Chrome CVE-2010-2903 affects Chrome versions prior to 5.0.375.125, where the browser may truncate and improperly elide hostnames. Root cause described as an issue in hostname handling; impact is unspecified in the provided documents. Exploitation details are not disclosed in the connected ...