CVE-2026-17757

CVE-2026-17757 describes an uninitialized-use vulnerability in Skia used by Google Chrome up to version 151.0.7922.72 . A remote attacker could leak cross-origin data via a crafted HTML page, with a Medium Chromium severity. Affected component: Skia in Chrome; root cause: uninitialized data being...

CVE-2026-17993

CVE-2026-17993 is a race condition in Chrome’s Updater on Windows prior to 151.0.7922.72 that could allow a local attacker to escalate privileges by processing a malicious file. The issue is documented for Google Chrome (Chromium) with a Low severity, and the practical impact is local privilege e...

CVE-2026-2649

CVE-2026-2649 affects Chromium-based browsers (Google Chrome/Chromium) via an integer overflow in the V8 engine before 145.0.7632.109, allowing remote heap corruption through a crafted HTML page. Affected products/versions include Chromium releases up to 145.0.7632.109 (various OS package updates...

CVE-2026-6363

CVE-2026-6363 : Type Confusion in V8 within Google Chrome before 147.0.7727.101. A remote attacker could trigger out-of-bounds memory access via a crafted HTML page. Affected software: Google Chrome (V8 engine). Root cause: type confusion in V8. Impact: potential memory access issues; exploitatio...

CVE-2010-2299

The CVE-2010-2299 entry describes a Type Confusion in Google Chrome’s Clipboard::DispatchObject (app/clipboard/clipboard.cc) where improper handling of CBF_SMBITMAP in ViewHostMsg_ClipboardWriteObjectsAsync could enable remote code execution via crafted data from the renderer. Affected are Chrome...

CVE-2010-2651

CVE-2010-2651 affects Google Chrome’s CSS rendering in versions before 5.0.375.99, where improper style rendering could allow remote attackers to trigger memory corruption (DoS or other impact) via unknown vectors. Documented in OpenVAS/Ubuntu USN entries and the Chrome 5.0.375.99 update (July 20...

CVE-2010-3116

CVE-2010-3116 corresponds to multiple use-after-free vulnerabilities in WebKit related to MIME-type handling by plug-ins. The issue affects WebKit-based clients such as Apple Safari (before 4.1.3 and 5.0.x before 5.0.3), Google Chrome (before 5.0.375.127), and webkitgtk (before 1.2.6). Exploitati...

CVE-2010-3252

Affected product: Google Chrome (pre-6.0.472.53). The issue is a use-after-free in the Notifications presenter, leading to denial of service or possibly other impacts via unknown vectors. Root cause is a use-after-free error in the Notifications presenter component. Impact is described as denial ...

CVE-2010-3730

CVE-2010-3730 affects Google Chrome prior to 6.0.472.62. The vulnerability arises from improper handling of a document’s origin when managing properties, enabling a remote attacker to induce an unspecified impact via a crafted web site (the so‑called “property pollution”). Publicly documented det...

CVE-2010-4198

CVE-2010-4198 affects WebKit as used in Google Chrome prior to 7.0.517.44 and webkitgtk prior to 1.2.6; it does not properly handle large text areas, enabling remote memory corruption (and potentially other impact) via a crafted HTML document. Affected products include WebKit/WebKitGTK+ and Chrom...

CVE-2011-0483

CVE-2011-0483 affects Google Chrome before 8.0.552.237 and Chrome OS before 8.0.552.344, where a cast of an unspecified variable during video handling could allow remote denial of service and possibly other impact via unknown vectors. The vulnerability is documented across multiple feeds (NVD and...

CVE-2011-1059

CVE-2011-1059 concerns a use-after-free in WebKit/WebCore (HistoryController handling of provisional items) that affects Google Chrome builds before 11.0.672.2 and related products. The vulnerability allows user-assisted remote attackers to trigger a denial of service via a crash or potentially o...

CVE-2011-1110

CVE-2011-1110 affects Google Chrome pre-9.0.597.107, where improper handling of key frame rules can cause a remote denial of service or other unspecified impact via stale pointers. The vulnerability is documented across multiple sources (NVD/Nessus/OpenVAS) with a base CVSSv2 of 7.5 (HIGH). Affec...

CVE-2011-1443

CVE-2011-1443 affects Google Chrome prior to version 11.0.696.57, where the layered rendering code can expose a denial-of-service or possibly other impact via stale pointers. Public sources in the connected docs confirm the issue as a Chrome layering pointer problem and reference the 11.0.696.57 ...

CVE-2011-1444

CVE-2011-1444 affects Google Chrome on Linux, where a race condition in the sandbox launcher can allow remote denial of service or other impact. The issue is tied to Chrome prior to version 11.0.696.57. Debian/Gentoo advisory entries indicate the vulnerability was addressed by upgrading Chromium/...

CVE-2011-1799

CVE-2011-1799 affects Google Chrome/Chromium browser components (WebKit) where improper casts of variables during interaction with WebKit can enable remote denial of service or unspecified impact. Public sources in the Debian security advisories (DSA-2245-1) and Debian/OpenVAS entries confirm the...

CVE-2011-2350

CVE-2011-2350: Google Chrome's HTML parser is affected before version 12.0.742.112 due to lifetime and re-entrancy issues. This can allow a remote attacker to cause a denial of service or potentially other impact via unknown vectors. The description and linked references indicate a patch/update i...

CVE-2011-2841

CVE-2011-2841 affects Google Chrome

CVE-2011-3019

CVE-2011-3019 : A heap-based buffer overflow in Google Chrome prior to 17.0.963.56 allows remote attackers to cause denial of service or potentially other impact via a crafted Matroska (MKV) file. Affected product: Google Chrome. Root cause: heap-based overflow in MKV parsing. Impact: crash or po...

CVE-2011-3021

CVE-2011-3021 affects Google Chrome up to version 17.0.963.56, where a use-after-free in the subframe loading path allows remote attackers to cause a denial of service and potentially other impacts. The issue is triggered via subframe loading vectors and is described as a use-after-free vulnerabi...

CVE-2011-3027

CVE-2011-3027 affects Google Chrome prior to version 17.0.963.56. The issue is tied to a cast of an unspecified variable during handling of document columns, enabling a remote attacker to trigger denial of service and potentially other impacts via a crafted document. The description does not spec...

CVE-2011-3066

Vulnerability context (CVE-2011-3066) : In Google Chrome, Skia-based rendering used for clip operations contains a clipping bug that may trigger an out-of-bounds read, leading to a denial of service. Affected product is Chrome before version 18.0.1025.151 (and related Chromium builds). The issue ...

CVE-2011-3071

CVE-2011-3071 : In Google Chrome, a use-after-free in the HTMLMediaElement implementation (pre-18.0.1025.151) may allow a remote attacker to cause a denial of service or possibly other impact via unknown vectors. Affected product: Google Chrome. Root cause: use-after-free in HTMLMediaElement. Imp...

CVE-2011-3885

The CVE-2011-3885 entry concerns a use-after-free in Google Chrome prior to 15.0.874.102, exploitable to cause a denial of service and potentially other unspecified impact via vectors related to stale CSS token-sequence data. Affected product: Google Chrome (pre-15.0.874.102). Root cause: use-aft...

CVE-2011-3889

CVE-2011-3889 affects Google Chrome’s Web Audio implementation. The vulnerability is a heap-based buffer overflow in the Web Audio component prior to version 15.0.874.102, which could allow a remote attacker to cause a denial of service or potentially other impact via unknown vectors. Impact is d...

CVE-2011-3927

CVE-2011-3927 affects Skia as used by Google Chrome prior to 16.0.912.77, where incomplete initialization of values could enable a remote attacker to cause a denial of service or potentially other impact via unknown vectors. The connected documents confirm Chromium-related fixes: the GLSA/openSUS...

CVE-2012-5376

CVE-2012-5376 affects Google Chrome prior to 22.0.1229.94: the Inter-process Communication (IPC) implementation in Chrome’s renderer process can bypass sandbox restrictions, enabling remote attackers to write to arbitrary files given renderer access.

CVE-2013-0887

Chromium-based: CVE-2013-0887 affects Google Chrome prior to 25.0.1364.97 (Windows/Linux) and prior to 25.0.1364.99 (Mac). The developer-tools process does not properly restrict privileges when interacting with a connected server, but the provided documents do not specify impact, attack vectors, ...

CVE-2013-0897

CVE-2013-0897 affects Google Chrome’s PDF functionality. An off-by-one error in the PDF handling code on Windows, Linux, and macOS allows a remote attacker to cause a denial-of-service via a crafted PDF document. The issue is triggered by reading beyond bounds in PDF processing; impact is limited...

CVE-2021-38023

CVE-2021-38023 affects Google Chrome (Chromium-based) Extensions. The vulnerability is a use-after-free in Extensions that could allow a remote attacker to exploit heap corruption via a crafted HTML page. This is described as a High-severity issue with network attack vector, requiring user intera...

CVE-2023-7281

CVE-2023-7281 – Google Chrome/ui spoofing via crafted HTML page . The issue arises from an inappropriate implementation in the Chrome browser’s Compositing feature, allowing a remote attacker to perform UI spoofing. Affected product: Google Chrome (Chromium base) prior to version 119.0.6045.105. ...

CVE-2023-7282

CVE-2023-7282 affects Google Chrome (Chromium-based) via an inappropriate Navigation implementation that enables domain spoofing when a user is persuaded to perform specific UI gestures on a crafted HTML page. Vulnerable versions are prior to 113.0.5672.63. The root cause is in the Navigation han...

CVE-2025-11205

The CVE-2025-11205 entry concerns a heap buffer overflow in WebGPU plumbed through Google Chrome/Chromium before version 141.0.7390.54. The root cause is a WebGPU heap overflow that allows a renderer process compromise to potentially trigger heap corruption via a crafted HTML page. Documented imp...

CVE-2026-0908

CVE-2026-0908: Use-after-free in ANGLE of Google Chrome prior to 144.0.7559.59 can enable heap‑corruption via a crafted HTML page. Affected: ANGLE in Chromium/Chrome up to version 144.0.7559.59. Mitigation: upgrade to Chrome/Chromium 144.0.7559.59 or newer (fixed in updated Chromium/Chrome builds...

CVE-2026-10016

CVE-2026-10016 is a use-after-free in the DOM of Google Chrome, fixed by the 148.0.7778.216 update. The vulnerability allows a remote attacker to execute arbitrary code inside Chrome’s sandbox via a crafted HTML page. Severity: High (CVSS v3.1 base score 8.8; Network attack vector, no privileges ...

CVE-2026-11070

CVE-2026-11070 affects Chromoting in Google Chrome on Windows, where insufficient validation of untrusted input could allow a sandbox escape via malicious network traffic, if an attacker compromised the network process. The vulnerability is triggered by untrusted network data in Chromoting prior ...

CVE-2026-14014

CVE-2026-14014 corresponds to an insufficiently robust Paint implementation in Google Chrome that allows UI spoofing via a crafted HTML page. Affected product: Google Chrome (Paint component); root cause: inappropriate implementation in Paint prior to version 150.0.7871.47. Impact is UI spoofing ...

CVE-2026-14405

CVE-2026-14405 describes an uninitialized use in the V8 engine of Google Chrome, prior to version 150.0.7871.46, which could allow a remote attacker to execute arbitrary code inside the browser sandbox via a crafted HTML page. The vulnerability affects the V8 component within Chrome and is associ...

CVE-2026-14431

CVE-2026-14431 describes a type confusion in the V8 JavaScript engine used by Google Chrome prior to version 150.0.7871.46 . The issue allows a remote attacker to execute arbitrary code inside Chrome’s sandbox via a crafted HTML page. Affected component: V8 within Chromium/Chrome. Root cause: typ...

CVE-2026-15902

CVE-2026-15902 is a Use-after-free in the Cast component of Chromium/Google Chrome, exploitable via a crafted HTML page to execute arbitrary code in the sandbox. Affected versions are Chrome/Chromium prior to 150.0.7871.128 (update to 150.0.7871.128 or later; some advisories list later fixes such...

CVE-2026-17655

The CVE-2026-17655 advisory affects Google Chrome’s ANGLE component, with insufficient validation of untrusted input leading to a potential sandbox escape via a crafted HTML page. The linked Chrome Stable Channel update notes that version 151.0.7922.71/72 for Windows and macOS (and 151.0.7922.71 ...

CVE-2026-17718

CVE-2026-17718 affects Google Chrome/Chromium ANGLE. A use-after-free in ANGLE could allow a remote attacker to escape the browser sandbox via a crafted HTML page. Impact is described as high/critical; no exploitation details are provided in the sources. The issue is addressed in Chrome/Chromium ...

CVE-2026-17725

CVE-2026-17725 is a Type Confusion in V8 affecting Google Chrome prior to 151.0.7922.72. The flaw allows a remote attacker to execute arbitrary code inside the Chrome sandbox via a crafted HTML page. Affected software is Chrome/Chromium with V8 as the JavaScript engine; the NVD and Debian OSV ent...

CVE-2026-3920

CVE-2026-3920 describes an out-of-bounds memory access in WebML within Google Chrome/Chromium, enabling potential heap corruption via a crafted HTML page. The flaw affects Chrome before version 146.0.7680.71 and is described with a High severity. According to connected sources, the issue arises f...

CVE-2026-3923

CVE-2026-3923 describes a use-after-free in WebMIDI within Google Chrome/Chromium before 146.0.7680.71, potentially enabling heap corruption via a crafted HTML page. Affected: Chrome/Chromium WebMIDI. Impact: high (remote, heap corruption). Remediation: upgrade to Chrome/Chromium 146.0.7680.71 or...

CVE-2010-2648

CVE-2010-2648 : In Google Chrome, the Unicode Bidirectional Algorithm (UBA) implementation prior to 5.0.375.99 is vulnerable to memory corruption that can lead to a denial of service or potentially other impact via unknown vectors. The description confirms the affected product/version and the und...

CVE-2010-3112

The CVE-2010-3112 entry concerns Google Chrome prior to 5.0.375.127 where the file dialogs implementation is flawed, allowing memory corruption that could lead to a denial of service and potentially unspecified additional impact. Affected product is Google Chrome; vulnerable component is the file...

CVE-2010-4205

CVE-2010-4205 affects Google Chrome prior to 7.0.517.44, where improper handling of the data types of event objects can allow remote attackers to cause a denial of service or potentially other impact via unknown vectors. The provided documents do not include a vendor fix/patch information or conc...

CVE-2011-1108

CVE-2011-1108 affects Google Chrome/Chromium before 9.0.597.107. A flaw in JavaScript dialogs can be triggered by a crafted HTML document to cause a denial of service (application crash) or other unspecified impact. The Debian/DSA advisories and OpenVAS entries mirror this issue and recommend upg...

CVE-2011-1445

CVE-2011-1445 affects Google Chrome up to version 11.0.696.57, where SVG document handling is vulnerable to an out-of-bounds read, enabling a remote DoS. The OpenVAS entries corroborate a vulnerability in Chrome with SVG-related memory errors. Patch: upgrade to Chrome 11.0.696.57 or later (as rel...