CVE-2011-2861

Technical details for CVE-2011-2861 are not publicly provided in the connected documents. Monitor for updates from upstream sources.

CVE-2011-2876

Google Chrome before 14.0.835.202 is affected by CVE-2011-2876 (use-after-free in text line box) that can cause denial of service and possibly other impact. Affected versions include the 14.x release line prior to 14.0.835.202; OpenVAS/NVD entries describe multiple related CVEs in the Oct 2011 Ch...

CVE-2011-3054

The CVE-2011-3054 entry relates to Chromium/Chrome’s WebUI privilege isolation. OpenSUSE security update 0466-1 notes a Low impact fix: “Apply additional isolations to webui privileges,” indicating a refinement of WebUI isolation rather than a new exploit. The patch was part of an update path to ...

CVE-2011-3969

Technical details for CVE-2011-3969 are not provided in the connected documents. The initial description notes a use-after-free in Chrome before 17.0.963.46, but no product/version specifics or remediation are present in the supplied sources. Monitor for updates.

CVE-2013-0893

CVE-2013-0893: Google Chrome is affected by a race condition in media handling that could lead to denial of service or other unspecified impact. Vulnerable versions are Chrome before 25.0.1364.97 on Windows/Linux and before 25.0.1364.99 on Mac OS X. The issue is addressed in the Chrome update rel...

CVE-2014-1714

Chromium/Google Chrome CVE-2014-1714 affects Windows, macOS, and Linux. The flaw is in ScopedClipboardWriter::WritePickledData where a clipboard format value is not verified, enabling a remote attacker to cause denial of service or other impact via clipboard-related vectors. Affected versions are...

CVE-2019-13672

CVE-2019-13672 affects Google Chrome on iOS, where an incorrect security UI in the Omnibox could allow a crafted HTML page to spoof the URL bar. The issue is triggered by using Chrome versions prior to 77.0.3865.75. The documented remediation is to update to 77.0.3865.75 or later. No exploitation...

CVE-2025-13042

CVE-2025-13042 affects Google Chrome (V8/Chromium) with an incomplete V8 implementation that allows a remote attacker to exploit heap corruption via a crafted HTML page. The issue is categorized as High severity; impact includes potential arbitrary code execution, denial of service, or informatio...

CVE-2026-10984

Summary: CVE-2026-10984 affects Google Chrome on Android due to an inappropriate Accessibility implementation, enabling UI spoofing via a crafted HTML page. The issue lies in older Android builds before 149.0.7827.53; upgrading to 149.0.7827.53 or later mitigates the vulnerability. The vulnerabil...

CVE-2026-12010

Heap buffer overflow in the GPU component of Google Chrome on Android (vulnerable before 149.0.7827.115) could allow a remote attacker who has compromised the renderer process to potentially escape the sandbox via a crafted HTML page. The issue affects Chrome on Android and is classified as Criti...

CVE-2026-13781

CVE-2026-13781 concerns an issue in Skia used by Google Chrome before 150.0.7871.47. The vulnerability stems from insufficient validation of untrusted input, which could enable a remote attacker who has already compromised the renderer process to potentially escape the browser sandbox via a craft...

CVE-2026-14054

The CVE-2026-14054 entry concerns Google Chrome (Chromium base) with an issue in policy enforcement that allowed navigation restriction bypass via a crafted HTML page, affecting versions prior to 150.0.7871.47. The vulnerability is described as low severity (CVSS 4.3, MEDIUM by some scales) with ...

CVE-2026-14133

Technical details are not publicly available in the provided documents. Monitor for updates.

CVE-2026-14141

CVE-2026-14141 affects Google Chrome on Android (Document Picture-in-Picture security UI). Affected component: Picture-in-Picture UI, with a domain-spoofing risk via a crafted HTML page. Root cause: improper UI security handling in Picture-in-Picture. Impact per sources: Chromium security severit...

CVE-2026-14150

CVE-2026-14150 affects Google Chrome’s Speech component and is due to insufficient validation of untrusted input in the renderer. Prior to version 150.0.7871.47, a remote attacker who had already compromised the renderer process could perform UI spoofing via a crafted HTML page. The security rati...

CVE-2026-14414

CVE-2026-14414 — Insufficient validation of untrusted input in Skia within Google Chrome prior to 150.0.7871.46 allows a remote attacker who has already compromised the renderer process to exfiltrate potentially sensitive data from process memory via a crafted HTML page. The issue is tied to Skia...

CVE-2026-14419

CVE-2026-14419 affects Google Chrome where a use-after-free in Skia could allow a remote attacker to escape the sandbox via a crafted HTML page. It targets Skia in Chrome before version 150.0.7871.46. The issue is listed as Critical (CVSS: 9.6, Network) with potential for total impact to confiden...

CVE-2026-17675

This CVE (CVE-2026-17675) affects Google Chrome before build 151.0.7922.72, where an Out of bounds write in ANGLE could be triggered by a crafted HTML page to escape the sandbox via a compromised renderer. The issue is listed in the Chrome 2026-07-30 stability update as a Critical vulnerability (...

CVE-2026-17723

CVE-2026-17723 relates to a use-after-free in Media in Google Chrome on Windows prior to 151.0.7922.72. A remote attacker who had compromised the renderer process could potentially perform a sandbox escape via a crafted HTML page. The issue is described as high severity (CVSS 3.1/8.3) with networ...

CVE-2026-5279

CVE-2026-5279 affects Google Chrome (V8) with object corruption in V8 that allowed remote code execution via a crafted HTML page in a sandbox. The Chromium security note lists this as High severity; the Chrome stable update fixes include 146.0.7680.178 (and prior 177/178 variants on different cha...

CVE-2026-7359

CVE-2026-7359 affects ANGLE in Google Chrome prior to 147.0.7727.138. The vulnerability is a use-after-free in ANGLE that could allow a renderer-compromised remote attacker to potentially escape the Chrome sandbox via a crafted HTML page. Affected product: Google Chrome (ANGLE component); root ca...

CVE-2026-76036

Affected: Dawn, the open-source WebGPU implementation library bundled in Chrome on Android, versions prior to 151.0.7922.169. Cause: A buffer overflow in Dawn allows writing beyond memory boundaries. Impact: A remote attacker can execute arbitrary code outside the Chrome sandbox by luring a victi...

CVE-2010-2301

This CVE-2010-2301 entry describes an XSS in WebKit’s WebCore (Editing/markup.cpp) affecting Google Chrome prior to 5.0.375.70. The vulnerability allows remote attackers to inject arbitrary web script or HTML via node.innerHTML on TEXTAREA, with potential for script execution in the victim’s brow...

CVE-2010-3114

CVE-2010-3114 affects Google Chrome prior to 5.0.375.127 and webkitgtk prior to 1.2.6. The root cause is a failure to properly handle SVG documents due to incorrect processing within WebKit’s text/SVG handling paths, enabling remote attackers to induce a denial of service through memory corruptio...

CVE-2011-0471

CVE-2011-0471 relates to Google Chrome and Chrome OS where the node-iteration implementation mishandles pointers, allowing remote denial of service and possibly other unspecified impacts. Affected versions are Chrome before 8.0.552.237 and Chrome OS before 8.0.552.344. The issue stems from improp...

CVE-2011-1112

Google Chrome (before 9.0.597.107) is affected by an SVG rendering issue that allows remote attackers to cause a denial of service (application crash) or potentially other impact via unknown vectors. Public sources in the connected documents reference the vulnerability as a set of multiple CVEs i...

CVE-2011-1204

CVE-2011-1204 affects Google Chrome before 10.0.648.127, where improper handling of attributes in documents can cause DOM tree corruption. This can enable remote attackers to trigger a denial of service and potentially other unspecified impacts. Public sources confirm the remediation: applying Ch...

CVE-2011-1465

CVE-2011-1465 concerns Google Chrome’s SPDY implementation in net/http/http_network_transaction.cc. The issue is that SPDY response bodies can be drained, which may allow remote SPDY servers to trigger a denial of service (application exit) by canceling a stream. The vulnerability affects Chrome ...

CVE-2011-1808

CVE-2011-1808 refers to a use-after-free flaw in Google Chrome prior to version 12.0.742.91, triggered by incorrect integer calculations during float handling. The vulnerability allows remote attackers to cause a denial of service and potentially other unspecified effects, as described in the NVD...

CVE-2011-2351

Technical details for CVE-2011-2351 are not publicly provided in the supplied documents. Monitor for updates.

CVE-2011-3024

CVE-2011-3024 affects Google Chrome (Chromium-based) with vulnerable versions before 17.0.963.56. The issue allows remote attackers to trigger a denial-of-service through an empty X.509 certificate, causing the application to crash. Underlying cause and exact exploit vector are not detailed in th...

CVE-2011-3049

Chromium/Chrome CVE-2011-3049 is documented in openSUSE security advisory GLSA 201203-19 and related openSUSE updates. The concrete entry notes: CVE-2011-3049 — Extension web request API can interfere with system requests (low severity). The openSUSE patch set (openSUSE-SU-2012:0466-1) upgrades C...

CVE-2011-3055

CVE-2011-3055 affects Chromium/Chrome prior to versions adopting the OpenSUSE patch, where the browser’s native UI could prompt for an unpacked extension installation without user confirmation, enabling user-assisted remote execution via a crafted extension. Connected advisories confirm the issue...

CVE-2011-3878

CVE-2011-3878 : A race condition in Google Chrome prior to 15.0.874.102 allows remote attackers to cause a denial of service or possibly other impact via vectors related to worker process initialization. The NVD entry lists CVSS v2 base score 6.8 (medium) with network attack vector and partial im...

CVE-2011-3898

CVE-2011-3898 affects Google Chrome (Chromium) prior to 15.0.874.120 when using JRE 7, where applet execution proceeds without user confirmation. Public sources (Gentoo GLSA 201111-05) call for upgrading Chromium to >=15.0.874.121 and V8 to >=3.5.10.24; OpenVAS/Gentoo entries corroborate mu...

CVE-2013-0896

CVE-2013-0896 affects Google Chrome prior to 25.0.1364.97 (Windows/Linux) and 25.0.1364.99 (macOS). The issue is a memory management problem during plug-in message handling, enabling a remote attacker to cause a denial of service or other impact via unknown vectors. The connected documents corrob...

CVE-2016-10403

CVE-2016-10403 affects Google Chrome's PDFium component in the browser before version 51.0.2704.63, where insufficient data validation on image data can allow a remote attacker to cause an out-of-bounds memory read by a specially crafted PDF file. Documents corroborate a memory-read impact (confi...

CVE-2025-13226

CVE-2025-13226 is a Type Confusion in V8 affecting Google Chrome before 142.0.7444.59, enabling potential heap corruption via a crafted HTML page and, per the CVE entry, remote impact. The connected documents indicate the issue is addressed in the Chrome 142 release (Chrome 142.0.7444.59/60), wit...

CVE-2026-11264

CVE-2026-11264 : Chrome/Chromium CSP policy bypass identified as a vulnerability affecting Chrome prior to 149.0.7827.53. A remote attacker could bypass the Content Security Policy via a crafted HTML page. Severity is low; attack vector is network with user interaction required. The remediation i...

CVE-2026-11692

CVE-2026-11692 is a use-after-free in Chrome’s Read Anything feature prior to 149.0.7827.103. If a renderer process is already compromised, this could enable a sandbox escape via a crafted HTML page. The connected sources consistently describe the issue as a high-severity Chrome/Chromium vulnerab...

CVE-2026-12449

CVE-2026-12449 relates to a use-after-free in Chromoting for Google Chrome on Windows cases prior to version 149.0.7827.155, enabling a local attacker to achieve OS‑level privilege escalation via a malicious file. The cross‑reference entries confirm the affected component as Chromoting within Chr...

CVE-2026-12468

CVE-2026-12468: A race in Chrome Mac updater allows a remote attacker (with renderer access) to potentially escape the sandbox via a crafted HTML page. Affected: Google Chrome on macOS prior to 149.0.7827.155. Impact: High. Mitigation: update to 149.0.7827.155 or later (per linked Chrome security...

CVE-2026-13774

CVE-2026-13774: Use-after-free in Chrome Extensions allows arbitrary code execution when a user installs a malicious extension. Affected: Google Chrome (Extensions). Root cause: use-after-free in Extensions. Impact: potential arbitrary code execution. Mitigation: update to Chrome 150.0.7871.47 or...

CVE-2026-14104

CVE-2026-14104 affects WebAppInstalls in Google Chrome prior to 150.0.7871.47. The vulnerability arises from insufficient validation of untrusted input, allowing a remote attacker to execute arbitrary code inside the browser sandbox via a crafted HTML page. The issue is documented across multiple...

CVE-2026-14112

The CVE-2026-14112 entry describes an inappropriate implementation in Google Chrome (enterprise) prior to version 150.0.7871.47 that could allow a remote attacker to extract potentially sensitive data from process memory when a user is persuaded to perform specific UI gestures via a crafted HTML ...

CVE-2026-14432

The CVE-2026-14432 entry documents a use-after-free in V8 affecting Google Chrome’s JavaScript engine prior to version 150.0.7871.46 . This vulnerability could allow a remote attacker to execute arbitrary code inside a sandbox via a crafted HTML page, as described in multiple sources. Affected co...

CVE-2026-16418

CVE-2026-16418 describes a stack buffer overflow in the V8 engine of Google Chrome (Chromium) before version 150.0.7871.182, allowing a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML page. Affected product is Google Chrome (Chromium-based) on desktop Windows; expl...

CVE-2026-17757

CVE-2026-17757 describes an uninitialized-use vulnerability in Skia used by Google Chrome up to version 151.0.7922.72 . A remote attacker could leak cross-origin data via a crafted HTML page, with a Medium Chromium severity. Affected component: Skia in Chrome; root cause: uninitialized data being...

CVE-2026-17865

CVE-2026-17865 describes an insecure implementation in the Crypto component of Google Chrome on macOS prior to 151.0.7922.72, where a renderer process compromise could enable a sandbox escape via a crafted HTML page. The issue originates in the Chromium Crypto path (upstream bug 520516655). Impac...

CVE-2026-17993

CVE-2026-17993 is a race condition in Chrome’s Updater on Windows prior to 151.0.7922.72 that could allow a local attacker to escalate privileges by processing a malicious file. The issue is documented for Google Chrome (Chromium) with a Low severity, and the practical impact is local privilege e...