CVE-2011-2819

CVE-2011-2819 is referenced in connected OpenVAS entries as a WebKit/WebKit-based cross-origin vulnerability describing a cross-origin issue in the handling of the beforeload event. The initial description refers to a Chrome-based SOP bypass via base URI, but the connected documents ground this C...

CVE-2011-2828

CVE-2011-2828 affects Google Chrome (V8 engine) prior to version 13.0.782.215. The vulnerability is an out-of-bounds write in the V8 JavaScript engine that could be triggered remotely, with the NVD entry noting possible denial of service and unspecified other impact. The connected OpenVAS entries...

CVE-2011-2853

CVE-2011-2853 concerns Google Chrome prior to version 14.0.835.163. Description: a use-after-free vulnerability in plug-in handling could allow a remote attacker to cause a denial of service or potentially other impact. Affected product: Google Chrome (pre-14.0.835.163). Underlying cause: use-aft...

CVE-2011-2875

CVE-2011-2875 affects Google Chrome’s V8 engine prior to version 14.0.835.163, where improper object sealing leads to type confusion. This can allow remote attackers to cause a denial of service and potentially other unspecified impacts. Remediation is to update Chrome to 14.0.835.163 or later (a...

CVE-2011-3876

CVE-2011-3876 is listed among Chromium/V8 vulnerabilities in the Gentoo GLSA 201111-01. The connected Gentoo advisories identify Chromium/V8 as affected and recommend upgrading Chromium to >= 15.0.874.102 (and V8 to >= 3.5.10.22) to remediate. The provided documents do not disclose the exac...

CVE-2011-3955

CVE-2011-3955 affects Google Chrome/Chromium up to version 17.0.963.46, where an attacker could trigger an IndexedDB transaction abort, causing the application to crash or potentially other impact. The vulnerability is discussed in multiple advisories (e.g., Gentoo GLSA-201202-01) with explicit r...

CVE-2011-3961

CVE-2011-3961 describes a race condition in Google Chrome prior to 17.0.963.46 that could allow a remote attacker to execute arbitrary code by triggering a crash in a utility process. The impact is high, with potential full control of the affected host if exploited. The vulnerability affects Goog...

CVE-2017-15403

CVE-2017-15403 affects Chrome OS crosh networking (network_diag) due to insufficient data validation, enabling local command injection under chronos privileges via a crafted HTML page. Affected platforms include Chrome OS before 61.0.3163.113. Google Chrome OS update 61.0.3163.113 (stable channel...

CVE-2021-4319

CVE-2021-4319 is a use-after-free in Blink (Chrome) prior to 93.0.4577.82, enabling a remote attacker to trigger arbitrary read/write through a crafted HTML page. The connected Astra Linux bulletin and Chrome release notes confirm the same description; the issue is fixed in Chrome 93.0.4577.82 or...

CVE-2025-13230

CVE-2025-13230: Type Confusion in V8 within Google Chrome before 142.0.7444.59 may allow a remote attacker to cause heap corruption via a crafted HTML page. Affected product: Google Chrome (V8 engine). Impact as described: high severity, potential code execution through heap corruption. Remediati...

CVE-2026-11634

CVE-2026-11634 describes a use-after-free in Chrome’s Gamepad handling on Windows, exploitable via a crafted HTML page to potentially escape the Chromium sandbox. Affected: Google Chrome on Windows, prior to version 149.0.7827.103. Impact: remote attacker could achieve sandbox escape with a high ...

CVE-2026-12443

CVE-2026-12443 is a use-after-free in Chrome’s Web Authentication implementation that could allow a remote attacker to execute arbitrary code via a crafted HTML page. Affected software: Google Chrome (Chromium). Underlying issue is in Web Authentication handling that leads to memory misuse. Impac...

CVE-2026-15107

CVE-2026-15107 concerns Google's Chrome browser: a use-after-free in IndexedDB allowed via a crafted HTML page to potentially execute arbitrary code inside the sandbox. Affected software is Chrome prior to 150.0.7871.115 (Windows/Mac) with Linux at 150.0.7871.114. The underlying issue is a use-af...

CVE-2026-5858

CVE-2026-5858 describes a heap buffer overflow in WebML used by Google Chrome/Chromium. The vulnerability enables remote code execution via a crafted HTML page and affects Chrome/Chromium prior to version 147.0.7727.55. The provided connected documents indicate fixes in Chrome/Chromium updates (1...

CVE-2026-6363

CVE-2026-6363 : Type Confusion in V8 within Google Chrome before 147.0.7727.101. A remote attacker could trigger out-of-bounds memory access via a crafted HTML page. Affected software: Google Chrome (V8 engine). Root cause: type confusion in V8. Impact: potential memory access issues; exploitatio...

CVE-2026-9875

CVE-2026-9875: Out-of-bounds read in WebGL in Google Chrome on Android (pre-148.0.7778.216) could allow a remote attacker to perform a sandbox escape via a crafted HTML page. Affects WebGL in Chromium-based Chrome for Android; fixed in the Chrome stable channel update to 148.0.7778.216/217. The i...

CVE-2010-2650

CVE-2010-2650 affects Google Chrome prior to 5.0.375.99. Public details across connected docs indicate multiple vulnerabilities addressed in the 5.0.375.99 update, with the OpenVAS/Seebug entries confirming that Google Chrome 5.0.375.99 fixed several issues. Concrete items from Seebug include mul...

CVE-2010-3258

The CVE-2010-3258 issue affects Google Chrome prior to version 6.0.472.53, where the sandbox implementation fails to deserialize certain parameters, with the impact described as unspecified and remote attack vectors. The vulnerability is tied to the browser’s sandbox deserialization logic (Chrome...

CVE-2010-3417

CVE-2010-3417 affects Google Chrome prior to version 6.0.472.59. The vulnerability arises because Chrome does not prompt the user before granting access to the browser extension history, enabling potential disclosure of sensitive information via unspecified vectors. The issue is mitigated by upgr...

CVE-2010-3917

Google Chrome information disclosure vulnerability (CVE-2010-3917) affects Google Chrome prior to 3.0. The root cause is improper handling of XML documents, allowing a remote attacker to obtain sensitive information via a crafted webpage. Documented impacts indicate confidentiality exposure when ...

CVE-2011-0473

CVE-2011-0473 affects Google Chrome before 8.0.552.237 and Chrome OS before 8.0.552.344; vulnerability arises from improper handling of CSS token sequences with CANVAS elements, allowing remote denial of service or possibly other impact via unknown vectors that lead to a stale pointer. Root cause...

CVE-2011-0477

CVE-2011-0477 affects Google Chrome (before 8.0.552.237) and Chrome OS (before 8.0.552.344). The vulnerability arises from a mismatch in video frame sizes that can cause incorrect memory access, enabling remote attackers to trigger a denial of service and potentially other impacts via unknown vec...

CVE-2011-0776

The CVE concerns Google Chrome’s sandbox on macOS prior to 9.0.597.84, where the sandbox implementation may allow remote attackers to obtain potentially sensitive information about local files via vectors related to the stat system call. Affected software: Chrome sandbox on macOS (pre-9.0.597.84)...

CVE-2011-1199

CVE-2011-1199 affects Google Chrome prior to version 10.0.648.127. The vulnerability arises from improper handling of DataView objects, enabling remote attackers to cause an application crash (DoS) or potentially other unspecified impact via unknown vectors. The available connected sources confir...

CVE-2011-1818

CVE-2011-1818 refers to a use-after-free vulnerability in Google Chrome’s image loader prior to version 12.0.742.91. The issue allows remote attackers to cause a denial of service or potentially other impact via unknown vectors. Affected product: Google Chrome (image loading code). Root cause: us...

CVE-2011-2786

Chrome prior to 13.0.782.107 is affected. The issue stems from the speech-input bubble not being reliably shown on screen, which could allow a remote attacker to record audio via a crafted web page containing an INPUT element. The provided documents describe the vulnerability and its potential im...

CVE-2011-2801

CVE-2011-2801 is a use-after-free vulnerability in Google Chrome prior to 13.0.782.107. The flaw is triggered via vectors related to the frame loader, enabling remote attackers to cause a denial of service and potentially other impact. Affected product: Google Chrome; vulnerable component: frame ...

CVE-2011-2822

Google Chrome on Windows prior to 13.0.782.215 is affected by CVE-2011-2822 due to URL parsing on the command line. The OpenVAS/NVD entries identify the flaw as a parsing issue with unspecified impact/attack vectors. A fix is available in Chrome 13.0.782.215 (and later), per vendor advisories sum...

CVE-2011-2844

Technical details (affected component, root cause, and remediation) for CVE-2011-2844 are not provided in the connected documents; public details appear limited to the initial description. Monitor for updates from referenced advisories and OpenVAS entries.

CVE-2011-3018

CVE-2011-3018: Google Chrome before 17.0.963.56 is affected by a heap-based buffer overflow in path rendering, enabling remote attackers to cause a denial of service or possibly other impact. This is tied to Chrome components handling path rendering. The connected documents confirm the same vulne...

CVE-2011-3065

CVE-2011-3065 : Skia in Google Chrome (before 18.0.1025.142) allows remote attackers to cause memory corruption and possibly other impact via unknown vectors. Outcome described as memory corruption/DoS with unspecified additional effects. Mitigation: upgrade Chrome to version 18.0.1025.142 or new...

CVE-2011-3879

CVE-2011-3879 affects Google Chrome prior to 15.0.874.102, where redirects to chrome: URLs are not prevented, yielding unspecified impact and remote attack vectors. Remediation per connected advisories is to upgrade to Chrome 15.0.874.102 or newer (e.g., as noted in GLSA 201111-01 for Chromium/Ch...

CVE-2011-3894

CVE-2011-3894 affects Google Chrome (and Chromium-based builds) prior to version 15.0.874.120, where VP8 decoding could be manipulated by a crafted stream, leading to memory corruption and potentially other impact. The connected advisories corroborate multiple Chromium/V8 vulnerabilities around t...

CVE-2011-3906

CVE-2011-3906 affects Google Chrome/Chromium prior to 16.0.912.63, arising from the PDF parser causing an out-of-bounds read that can lead to remote denial of service. The Gentoo GLSA and related OpenVAS entries reference Chromium vulnerabilities and list a fix by upgrading to Chromium 16.0.912.7...

CVE-2025-11205

The CVE-2025-11205 entry concerns a heap buffer overflow in WebGPU plumbed through Google Chrome/Chromium before version 141.0.7390.54. The root cause is a WebGPU heap overflow that allows a renderer process compromise to potentially trigger heap corruption via a crafted HTML page. Documented imp...

CVE-2026-10007

CVE-2026-10007 describes a use-after-free in the SVG handling of Google Chrome (Chromium-based) that can allow a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML page. The vulnerability affects Chrome builds prior to 148.0.7778.216 and is classified with high severi...

CVE-2026-10984

Summary: CVE-2026-10984 affects Google Chrome on Android due to an inappropriate Accessibility implementation, enabling UI spoofing via a crafted HTML page. The issue lies in older Android builds before 149.0.7827.53; upgrading to 149.0.7827.53 or later mitigates the vulnerability. The vulnerabil...

CVE-2026-12468

CVE-2026-12468: A race in Chrome Mac updater allows a remote attacker (with renderer access) to potentially escape the sandbox via a crafted HTML page. Affected: Google Chrome on macOS prior to 149.0.7827.155. Impact: High. Mitigation: update to 149.0.7827.155 or later (per linked Chrome security...

CVE-2026-14112

The CVE-2026-14112 entry describes an inappropriate implementation in Google Chrome (enterprise) prior to version 150.0.7871.47 that could allow a remote attacker to extract potentially sensitive data from process memory when a user is persuaded to perform specific UI gestures via a crafted HTML ...

CVE-2026-14138

CVE-2026-14138 affects Google Chrome on Windows (WebAppInstalls) prior to build 150.0.7871.47. The issue is an inappropriate implementation that can enable UI spoofing via a crafted HTML page when a user is prompted to perform specific UI gestures. Impact is UI spoofing with low severity and part...

CVE-2026-8008

The CVE-2026-8008 entry concerns Google Chrome DevTools: a UI spoofing vulnerability caused by an inappropriate DevTools implementation that can be exploited when a user is induced to install a malicious Chrome Extension. Multiple connected sources corroborate affected software and version bounds...

CVE-2026-8011

Summary of CVE-2026-8011: Google Chrome before 148.0.7778.96 has an insufficient policy enforcement issue in the Search feature that allows a remote attacker to leak cross-origin data via a crafted HTML page. This is documented across multiple sources (NVD, Debian OSV, ENISA EUVD, CVE list, and r...

CVE-2010-2109

CVE-2010-2109 refers to an unspecified vulnerability in Google Chrome before 5.0.375.55 that allows user-assisted remote attackers to cause a denial of service (memory error) or possibly other impact via vectors related to the drag + drop functionality. Affected software is Google Chrome pre-5.0....

CVE-2010-3247

CVE-2010-3247 concerns Google Chrome prior to 6.0.472.53, where the browser did not properly restrict URL characters, allowing remote attackers to spoof the URL bar through homographic sequences. OpenVAS entries reinforce the issue as multiple vulnerabilities affecting Chrome (Windows and Linux) ...

CVE-2010-3249

CVE-2010-3249 affects Google Chrome prior to 6.0.472.53, where SVG filter handling could be abused to cause a denial of service (and potentially other impact) via remote vectors. The NVD entry lists impact on confidentiality, integrity, and availability (C=C, I=C, A=C) with network attack vector ...

CVE-2010-4038

Google Chrome (pre-7.0.517.41) WebSockets handling flaw allows remote attackers to cause a denial of service (application crash) via shutdown handling vectors. Connected sources confirm Chrome is affected with this vulnerability; exploitation status and patch details are not provided in the suppl...

CVE-2011-1436

CVE-2011-1436 affects Google Chrome on Linux prior to 11.0.696.57, caused by improper interaction with the X Window System that can trigger a remote-denial of service (application crash) via unspecified vectors. The 11.0.696.57 Chrome patch (Stable Channel) addresses multiple vulnerabilities, inc...

CVE-2011-1806

The provided connected sources confirm CVE-2011-1806 affects Google Chrome prior to 11.0.696.71, where improper GPU command buffer handling can allow remote attackers to execute arbitrary code or cause a denial of service via memory corruption. The vulnerability is tied to the GPU command buffer ...

CVE-2011-1817

Google Chrome before version 12.0.742.91 is affected by a history deletion handling issue that can lead to memory corruption and potential denial of service. Root cause: incomplete/incorrect history deletion implementation. Impact: remote attackers could trigger memory corruption; other vectors a...

CVE-2011-2347

CVE-2011-2347 affects Google Chrome prior to 12.0.742.112, where improper handling of Cascading Style Sheets (CSS) token sequences can cause memory corruption and potentially other unspecified impacts via unknown vectors. Exploitation is remote. The vulnerability has a CVSS v2 base score of 6.8 (...