4497 matches found
CVE-2010-3117
CVE-2010-3117 affects Google Chrome prior to 5.0.375.127. The issue stems from improper implementation of the browser’s notifications feature, allowing remote attackers to cause an application crash (denial of service) and possibly other unspecified impact via unknown vectors. Public sources in t...
CVE-2010-3256
CVE-2010-3256 corresponds to a Google Chrome issue described as: Chrome before 6.0.472.53 does not properly limit the number of stored autocomplete entries. The provided sources confirm this vulnerability entry and cite Chrome
CVE-2011-0474
Google Chrome before 8.0.552.237 and Chrome OS before 8.0.552.344 are affected by a flaw in handling CSS token sequences with cursors that can lead to a denial of service and possibly other impact via unknown vectors that produce a stale pointer. The provided documents identify the vulnerable sof...
CVE-2011-1286
Google V8 in Google Chrome before 10.0.648.127 is affected by CVE-2011-1286. The issue allows remote attackers to cause a denial of service or potentially other impact by triggering incorrect memory access; vectors are undocumented in the provided sources. Affected component: V8 engine used by Ch...
CVE-2011-2795
Google Chrome before 13.0.782.107 is vulnerable to a cross-frame function leak that allows remote attackers to bypass same-origin access restrictions via a crafted web site; remediation is to upgrade to 13.0.782.107 or later.
CVE-2011-2842
Summary (CVE-2011-2842) Google Chrome for Mac OS X (pre-14.0.835.163) is affected by an issue in the installer that handles lock files insecurely. This is documented as “Insecure lock file handling in the Mac installer,” with the NVD entry noting the vulnerability affects the Mac installer and ha...
CVE-2011-2843
CVE-2011-2843 affects Google Chrome before 14.0.835.163. The vulnerability lies in how Chrome handles media buffers, enabling a remote attacker to trigger an out-of-bounds read via unspecified vectors, resulting in a denial of service. The CVE is listed across multiple security feeds (e.g., OpenV...
CVE-2011-2848
CVE-2011-2848 affects Google Chrome before 14.0.835.163, enabling user-assisted remote attackers to spoof the URL bar through forward-button related vectors. The description explicitly states the vulnerability type and impact as URL-bar spoofing; no additional exploit vectors or mitigations are d...
CVE-2011-2849
CVE-2011-2849 affects Google Chrome before 14.0.835.163. The WebSockets implementation can trigger a NULL pointer dereference, causing a denial of service (application crash) via unspecified vectors. Connected sources confirm Chrome/Chromium vulnerability tracking and a remediation pathway via up...
CVE-2011-3877
Technical details for CVE-2011-3877 are not publicly available in the provided connected documents. Monitor for updates from official advisories.
CVE-2011-3896
CVE-2011-3896 refers to a buffer overflow in Google Chrome prior to 15.0.874.120, related to shader variable mapping, potentially allowing remote impact such as DoS or other effects. Connected sources (Gentoo GLSA 201111-05) specify multiple vulnerabilities in Chromium and V8 with a practical rem...
CVE-2011-3914
CVE-2011-3914 affects the i18n functionality in Google V8 used by Chrome/Chromium prior to version 16.0.912.63, enabling a remote attacker to trigger an out-of-bounds write that can cause a denial of service and possibly other impact. The connected Gentoo GLSA notes multiple Chromium/V8 vulnerabi...
CVE-2011-3963
CVE-2011-3963 affects Google Chromium/Chrome components; description indicates a denial-of-service via out-of-bounds read triggered by PDF FAX image handling. Connected advisories reference Chromium-related vulnerabilities (CVE-2011-3963 among others) and cite remediation guidance. Gentoo GLSA 20...
CVE-2020-15997
CVE-2020-15997: In Google Chrome, a use-after-free in Mojo (prior to 86.0.4240.99) could allow a remote attacker who had already compromised the renderer process to potentially escape the sandbox via a crafted HTML page. The vulnerability is rooted in Mojo handling within Chrome’s renderer path; ...
CVE-2025-8576
CVE-2025-8576: Use-after-free in Chrome Extensions (Chromium) prior to 139.0.7258.66 can lead to heap corruption via a crafted extension. Affected software is Google Chrome/Chromium extensions; exploitation would require remote access with user interaction. Remediation across advisories shows pat...
CVE-2026-13283
Google Chrome on Android is affected by a Use-After-Free in the AdFilter component. The issue arises when a remote attacker convinces a user to perform specific UI gestures on a crafted HTML page, potentially enabling arbitrary code execution. Root cause: use-after-free in AdFilter. Affected vers...
CVE-2026-14054
The CVE-2026-14054 entry concerns Google Chrome (Chromium base) with an issue in policy enforcement that allowed navigation restriction bypass via a crafted HTML page, affecting versions prior to 150.0.7871.47. The vulnerability is described as low severity (CVSS 4.3, MEDIUM by some scales) with ...
CVE-2026-14406
CVE-2026-14406 affects Google Chrome's V8 engine prior to 150.0.7871.46. Root cause: an out-of-bounds read in V8. Impact: attacker-assisted access to potentially sensitive information from process memory via a crafted Chrome Extension. Remediation: update Chrome to 150.0.7871.46 or later. Exploit...
CVE-2026-5865
CVE-2026-5865 is a confirmed type confusion in the V8 engine used by Google Chrome prior to version 147.0.7727.55, allowing a remote attacker to execute arbitrary code inside the Chrome sandbox via a crafted HTML page. The issue is addressed in the Chrome 147 release; Debian notes fixes in 147.0....
CVE-2026-7343
CVE-2026-7343 is a Use-after-free in Views in Google Chrome on Windows, exploitable if the renderer is compromised to escape sandbox via a crafted HTML page. Affected versions are Windows builds prior to 147.0.7727.138. The issue is addressed in the 147.0.7727.138 update (and later). If exploitin...
CVE-2026-9874
CVE-2026-9874 is a use-after-free in Chrome’s Dawn component (Chromium) that could allow a sandbox escape via a crafted HTML page. Affected product: Google Chrome (Dawn in Chromium). Version history: fixed in Chrome stable channel as of 148.0.7778.216 (Windows/Linux/macOS varied builds; subsequen...
CVE-2026-9889
CVE-2026-9889 refers to an out-of-bounds read and write in the Dawn component of Google Chrome on Android, fixed in the Chrome update that reaches 148.0.7778.216 (and later). The vulnerability potentially allowed a remote attacker to escape the Chrome sandbox via a crafted HTML page. Affected pro...
CVE-2010-2105
CVE-2010-2105 affects Google Chrome up to version 5.0.375.55. The issue stems from Chrome not properly following Safe Browsing URL canonicalization requirements, with unspecified impact and remote attack vectors. Affected product is Chrome; root cause tied to Safe Browsing canonicalization. Remed...
CVE-2010-2296
Google Chrome before 5.0.375.70 is affected by CVE-2010-2296 due to the implementation of unspecified DOM methods that can bypass the Same Origin Policy via unknown vectors. The vulnerability enables remote attackers to circumvent SOP, with impact described as complete confidentiality/integrity/a...
CVE-2010-3411
CVE-2010-3411 affects Google Chrome on Linux, where Chrome versions before 6.0.472.59 fail to properly handle cursors, potentially allowing a denial of service (assertion failure) via unspecified vectors. Impact is limited to availability (partial) per the CVSS vector. A fix is to upgrade to Chro...
CVE-2011-0781
CVE-2011-0781 affects Google Chrome before 9.0.597.84, where autofill profile merging is not handled correctly. The description provided states an unspecified impact and remote attack vectors, but does not give concrete details on affected components beyond the autofill merging behavior. No expli...
CVE-2011-1118
CVE-2011-1118 affects Google Chrome prior to 9.0.597.107. The vulnerability arises from improper handling of TEXTAREA elements, which can allow remote attackers to crash the browser (DoS) or cause unspecified additional impact via a crafted HTML document. Publicly linked references indicate this ...
CVE-2011-1122
The CVE-2011-1122 issue concerns Google Chrome/Chromium before 9.0.597.107, where the WebGL implementation allows remote attackers to cause a denial of service via an out-of-bounds read. Connected sources confirm the affected product as Google Chrome/Chromium and identify the vulnerability as Web...
CVE-2011-1200
CVE-2011-1200 affects Google Chrome prior to 10.0.648.127. The issue is described as an improper cast of an unspecified variable during text rendering, allowing remote attackers to cause a denial of service or potentially other impact via a crafted document. Connected sources (NVD, OpenVAS/NESSUS...
CVE-2011-1303
Google Chrome prior to version 11.0.696.57 is affected by CVE-2011-1303 due to a stale pointer in the handling of floating objects, which can allow remote attackers to cause a denial of service or unspecified impact. The issue is addressed in Chrome 11.0.696.57, per vendor updates and vulnerabili...
CVE-2011-2784
CVE-2011-2784 concerns Google Chrome prior to 13.0.782.107, where a request for the GL program log could disclose a local file path in an unspecified log entry. The connected OpenVAS/Nessus entries group this with multiple Chrome vulnerabilities around the same era, but no explicit remediation ve...
CVE-2011-2803
CVE-2011-2803 affects Google Chrome prior to 13.0.782.107. The issue arises in handling Skia paths, enabling a remote attacker to induce a denial of service via an out-of-bounds read. Vectors are not specified in the provided documents. Public references corroborate the CVE and list it under Chro...
CVE-2011-3070
CVE-2011-3070 is a use-after-free in Google Chrome prior to 18.0.1025.151 involving the V8 bindings, with impact stated as remote denial of service or possibly other effects. The connected documents corroborate the CVE across Chrome/OpenVAS entries; however, no concrete exploit details or patched...
CVE-2011-3972
The CVE-2011-3972 entry concerns Google Chrome’s shader translator vulnerability prior to 17.0.963.46, allowing remote attackers to cause a denial of service via an out-of-bounds read. Related connected data confirms the vulnerability is tracked against Chromium/Chrome family with CVE-2011-3972 l...
CVE-2017-15404
CVE-2017-15404 affects Crash Reporting in Google Chrome on Chrome OS prior to 61.0.3163.113. The issue involves processing crash dumps with root privileges and improper symlink handling, enabling local privilege escalation via a crafted HTML page. The Chrome OS update 61.0.3163.113 addresses this...
CVE-2025-10201
The CVE-2025-10201 entry concerns an Inappropriate implementation in Mojo within Google Chrome on Android, Linux, and ChromeOS prior to version 140.0.7339.127. The root cause is a Mojo implementation flaw that allowed a remote attacker to bypass site isolation via a crafted HTML page, per connect...
CVE-2026-12449
CVE-2026-12449 relates to a use-after-free in Chromoting for Google Chrome on Windows cases prior to version 149.0.7827.155, enabling a local attacker to achieve OS‑level privilege escalation via a malicious file. The cross‑reference entries confirm the affected component as Chromoting within Chr...
CVE-2026-13022
CVE-2026-13022 affects Google Chrome up to version 149.0.7827.196/197 (prior to 149.0.7827.197). The issue is an inappropriate implementation in Autofill within the Chromium-based renderer, enabling a remote attacker who has compromised the renderer process to leak cross-origin data via a crafted...
CVE-2026-14132
CVE-2026-14132 affects Google Chrome WebXR: an inappropriate WebXR implementation allows a remote attacker to spoof UI via a crafted HTML page. Affects Chrome versions prior to 150.0.7871.47; the issue is rated Low severity with user interaction required and network attack vector. The publicly do...
CVE-2026-14135
The CVE-2026-14135 entry describes an issue in Google Chrome/Chromium where insufficient validation of untrusted input in the Network component allowed a remote attacker—who had already compromised the renderer process—to perform UI spoofing via a crafted HTML page. Affected software is Chrome wi...
CVE-2026-16804
Google Chrome prior to 150.0.7871.186 is affected by a use-after-free in Input that, if the renderer process is compromised, could permit a sandbox escape via a crafted HTML page (high severity; CVSSv3.1: 8.3). The issue is addressed in the Stable Channel update to 150.0.7871.186/187, with four r...
CVE-2026-9873
CVE-2026-9873 is a use-after-free vulnerability in Google Chrome's Network component. In Chromium-based Chrome, the flaw could allow a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML page. Affected builds are prior to 148.0.7778.216; a fixed version is 148.0.7778.2...
CVE-2011-0485
The CVE-2011-0485 entry affects Google Chrome and Chrome OS: versions prior to 8.0.552.237 (Chrome) and 8.0.552.344 (Chrome OS) are vulnerable due to improper handling of speech data, leading to a remote code execution condition via unspecified vectors that cause a stale pointer. No explicit expl...
CVE-2011-1447
Technical details for CVE-2011-1447 are not publicly provided in the connected documents. The materials reference the issue generically (stale pointer in drop-down handling) but do not specify affected product versions, impact, or fix. Monitor for updates.
CVE-2011-1454
CVE-2011-1454 describes a use-after-free in the DOM id handling of Google Chrome prior to 11.0.696.57. The vulnerability allows remote attackers to cause a denial of service or potentially other impact via a crafted HTML document. The connected sources confirm the affected product (Google Chrome)...
CVE-2011-1801
CVE-2011-1801 affects Google Chrome prior to version 11.0.696.71. The vulnerability is described as unspecified and allows remote attackers to bypass the browser’s pop-up blocker via unknown vectors. Several connected sources confirm Chrome versions before 11.0.696.71 are impacted; some entries r...
CVE-2011-1804
CVE-2011-1804 affects WebKit/WebCore: rendering/RenderBox.cpp before r86862, used in Google Chrome up to 11.0.696.71. Root cause is improper rendering of floats, enabling remote attackers to cause a denial of service or potentially other impact via a stale pointer. Exploitation details are not pr...
CVE-2011-2360
CVE-2011-2360 affects Google Chrome before 13.0.782.107, where the browser does not prompt the user before downloading a dangerous file, enabling a crafted site to bypass content restrictions. The issue is tied to the Chrome