CVE-2026-9880

CVE-2026-9880 affects Google Chrome WebGL in the Chromium WebGL stack. The root cause is insufficient validation of untrusted input in WebGL, enabling a remote attacker who has compromised the renderer process to potentially escape the Chrome sandbox via a crafted HTML page. Affected software is ...

CVE-2011-1450

CVE-2011-1450 concerns Google Chrome prior to 11.0.696.57, where the browser mishandles file dialogs, allowing remote attackers to trigger a denial of service or potentially other impact via dangling pointers. The vulnerability is tied to the Chrome 11.0.696.57 release which fixes multiple issues...

CVE-2011-2806

CVE-2011-2806 affects Google Chrome

CVE-2011-3041

CVE-2011-3041 is a use-after-free vulnerability in class attribute handling within Chromium/Chrome components. The openSUSE security update (openSUSE-SU-2012:0374-1) explicitly lists High CVE-2011-3041 and attributes the issue to use-after-free in class attribute handling, with remediation in the...

CVE-2011-3057

CVE-2011-3057 affects Google Chrome's V8 engine (Chromium) and is described as an invalid read in V8, with the initial entry noting a remote denial of service vector. Connected documents corroborate that this CVE is among a set of Chromium/V8 issues (e.g., CVEs 2011-3057 through 2011-3065) tracke...

CVE-2011-3059

Google Chrome prior to 18.0.1025.142 is affected by CVE-2011-3059, an out-of-bounds read in SVG text handling that can be exploited remotely to cause a denial of service. The vulnerability stems from improper handling of SVG text elements in the browser’s rendering pipeline. Practical impact repo...

CVE-2011-3080

CVE-2011-3080 describes a race condition in Google Chrome’s Inter-process Communication (IPC) sandbox that could allow bypassing sandbox restrictions. The initial description specifies Chrome prior to 18.0.1025.168 and mentions unspecified vectors for the bypass. Connected documents corroborate t...

CVE-2011-3887

CVE-2011-3887 affects Google Chrome prior to 15.0.874.102; the issue stems from improper handling of javascript: URLs, allowing remote attackers to bypass access restrictions and read cookies via unspecified vectors. Multiple Nessus/OpenVAS entries referencing CVE-2011-3887 corroborate browser-re...

CVE-2013-0881

CVE-2013-0881 affects Google Chrome prior to 25.0.1364.97 on Windows/Linux and prior to 25.0.1364.99 on macOS. The vulnerability arises from an incorrect read operation in the Matroska container handling, which can allow a remote attacker to trigger a denial of service. Affected component: Chrome...

CVE-2020-15996

CVE-2020-15996 is a use-after-free in passwords within Google Chrome prior to 86.0.4240.99, allowing a remote attacker who has compromised the renderer process to potentially perform a sandbox escape via a crafted HTML page. The issue affects Chrome’s password handling in the renderer; the root c...

CVE-2026-11307

CVE-2026-11307 describes a use-after-free in PDFium used by Google Chrome prior to 149.0.7827.53, enabling a remote attacker to execute arbitrary code inside the sandbox via a crafted PDF file. Affected software: Google Chrome (PDFium component). Root cause: use-after-free in PDFium lead to code ...

CVE-2026-11700

This CVE affects Google Chrome’s Tracing component in the renderer process. The root cause is a use-after-free in Tracing, which, if an attacker can compromise the renderer, could enable a sandbox escape via a crafted HTML page. The vulnerability is described for Chrome versions prior to 149.0.78...

CVE-2026-14135

The CVE-2026-14135 entry describes an issue in Google Chrome/Chromium where insufficient validation of untrusted input in the Network component allowed a remote attacker—who had already compromised the renderer process—to perform UI spoofing via a crafted HTML page. Affected software is Chrome wi...

CVE-2026-14392

CVE-2026-14392 describes an out-of-bounds write in the Tint component of Google Chrome, affecting Chrome prior to 150.0.7871.46. The issue could allow a remote attacker to escape the Chrome sandbox via a crafted HTML page, as indicated by the description and cross-referenced Chrome security advis...

CVE-2026-15904

Google Chrome on Linux with Ozone is vulnerable to a use-after-free in Ozone that can lead to heap corruption. A remote attacker would need user interaction (specific UI gestures) and a crafted HTML page to potentially exploit the issue, with affected versions prior to 150.0.7871.128. Remediation...

CVE-2026-17656

CVE-2026-17656 is a use-after-free vulnerability in the Ozone component of Google Chrome, affecting desktop Chrome prior to version 151.0.7922.72. The flaw could allow a remote attacker to escape the Chrome sandbox via a crafted HTML page, representing a critical risk per the advisory metrics. Th...

CVE-2026-17730

Technical details for CVE-2026-17730 are not provided in the connected documents; the initial description contains limited information. Please monitor for updates.

CVE-2026-17859

CVE-2026-17859 concerns an inappropriate implementation in Chrome’s favicon handling that could allow a remote attacker to leak cross-origin data via a crafted HTML page. The vulnerability is described as affecting Google Chrome prior to version 151.0.7922.72, with a Chromium security severity of...

CVE-2026-17907

CVE-2026-17907: Google Chrome’s Network component contains a side-channel information leakage vulnerability. A remote attacker could leverage a crafted HTML page to leak cross-origin data, via a flaw in Chrome prior to version 151.0.7922.72. The issue is documented across multiple feeds (RH Red H...

CVE-2026-5291

CVE-2026-5291 corresponds to an Inappropriate implementation in WebGL in Google Chrome (Chromium) prior to 146.0.7680.178, allowing remote attackers to obtain potentially sensitive data from process memory via a crafted HTML page. Connected documents confirm the affected product is Google Chrome/...

CVE-2026-8011

Summary of CVE-2026-8011: Google Chrome before 148.0.7778.96 has an insufficient policy enforcement issue in the Search feature that allows a remote attacker to leak cross-origin data via a crafted HTML page. This is documented across multiple sources (NVD, Debian OSV, ENISA EUVD, CVE list, and r...

CVE-2026-9885

CVE-2026-9885 concerns an upstream Chrome UI integrity issue: insufficient validation of untrusted input in the Mac UI could allow a renderer-compromised remote attacker to escape the sandbox via a crafted HTML page. Affected product: Google Chrome on macOS (before 148.0.7778.216). Root cause: in...

CVE-2026-9891

CVE-2026-9891 is a use-after-free vulnerability in Chrome’s Extensions component (Chromium) that affects pre-148.0.7778.216 builds. The issue arises when a renderer process is compromised, potentially enabling a sandbox escape via a crafted Chrome Extension. The vulnerability is discussed across ...

CVE-2026-9963

Uninitialized Use in iOS Google Chrome (on iOS) prior to version 148.0.7778.216 allows a remote attacker to trigger arbitrary code execution inside the Chrome sandbox via a crafted HTML page after convincing a user to perform specific UI gestures. Affected product: Google Chrome on iOS; root caus...

CVE-2010-2900

CVE-2010-2900 concerns Google Chrome prior to 5.0.375.125, which does not properly handle a large canvas. The connected records identify Chrome as the affected product and list CVE-2010-2900 among WebKit/Chrome vulnerabilities in 2010-2011 public advisories (e.g., USN-1195-1, OpenVAS entries). Th...

CVE-2010-3120

WebKit/Chrome CVE-2010-3120 affects Google Chrome prior to version 5.0.375.127, where the Geolocation implementation is insecure due to an improper handling, allowing remote attackers to cause a denial of service (memory corruption) or possibly other unspecified impact via unknown vectors. The vu...

CVE-2010-3414

The CVE-2010-3414 issue affects Google Chrome on Mac OS X prior to 6.0.472.59, where an incorrect fix for CVE-2010-3112 left file dialogs vulnerable. The root cause is tied to that fix, enabling memory corruption leading to potential denial of service and unspecified impact via unknown vectors. R...

CVE-2010-4576

CVE-2010-4576 affects Google Chrome before 8.0.552.224 and Chrome OS before 8.0.552.343. The issue lies in browser/worker_host/message_port_dispatcher.cc where certain postMessage calls with web workers are mishandled, enabling remote attackers to trigger a NULL pointer dereference and crash the ...

CVE-2011-0784

CVE-2011-0784 describes a race condition in Google Chrome prior to 9.0.597.84 that can allow remote code execution via audio-related vectors. Affected: Google Chrome (Desktop builds) before 9.0.597.84. Root cause: race condition in audio handling. Impact: remote arbitrary code execution with part...

CVE-2011-0985

CVE-2011-0985 affects Google Chrome before 9.0.597.94, where memory exhaustion can prevent proper process termination (unspecified impact/remote vectors). Debian advisory DSA-2166-1 notes this as part of several vulnerabilities in chromium-browser and states the issue is fixed in the squeeze pack...

CVE-2011-1125

Google Chrome

CVE-2011-1190

CVE-2011-1190 involves the Web Workers cross-origin issue in Chrome before 10.0.648.127. The vulnerability allowed remote attackers to bypass the Same Origin Policy via an error-message leak, potentially exposing partial data to other origins. Affected software: Google Chrome/Chromium WebKit impl...

CVE-2011-1197

CVE-2011-1197 affects Google Chrome before version 10.0.648.127. The vulnerability stems from improper table painting in the rendering path, allowing remote attackers to cause a denial of service and potentially other unspecified impact via unknown vectors that lead to a stale pointer. Affected v...

CVE-2011-1285

The CVE-2011-1285 issue affects Google Chrome prior to version 10.0.648.127. The vulnerability is in the regular-expression functionality, where reentrancy is not properly implemented, enabling remote attackers to cause a denial of service via memory corruption or possibly other impact through un...

CVE-2011-1455

Google Chrome before 11.0.696.57 is affected by CVE-2011-1455 due to improper handling of multipart-encoded PDFs, enabling remote attackers to trigger an out-of-bounds read and cause a denial-of-service. Affected product: Google Chrome (desktop) prior to version 11.0.696.57; root cause relates to...

CVE-2011-3022

CVE-2011-3022 affects Google Chrome (translation feature): the vulnerable code path is in translate/translate_manager.cc, where an HTTP session used for translation could leak information to an eavesdropper. The vulnerability is described as an information disclosure via the HTTP session. Affecte...

CVE-2011-3074

Technical details about CVE-2011-3074 are not publicly available in the provided connected documents. The supplied sources do not specify affected products, versions, impact, or fixes for this CVE.

CVE-2011-3954

CWE-2011-3954 affects Google Chrome/Chromium where an attacker could trigger a denial of service by causing excessive database usage, leading to an application crash. The historical description specifies Chrome versions before 17.0.963.46 are vulnerable. Connected documents corroborate a Chromium...

CVE-2011-3965

CVE-2011-3965 affects Google Chrome prior to 17.0.963.46. The root cause is improper signature checking, enabling a remote attacker to trigger a denial of service (application crash) via unspecified vectors. Connected advisories corroborate this family of Chromium/Chrome vulnerabilities and indic...

CVE-2019-5843

CVE-2019-5843 affects Google Chrome’s JavaScript engine prior to 74.0.3729.108, where an out-of-bounds memory access could allow a remote attacker to trigger heap corruption via a crafted HTML page. The vulnerability is rooted in improper memory handling in JavaScript execution, leading to potent...

CVE-2026-10931

Summary: CVE-2026-10931 is a use-after-free in Chrome’s FileSystem that could allow a remote sandbox escape via a crafted HTML page. Affected product/area: Google Chrome (Chromium-based) prior to version 149.0.7827.53. Impact: high severity with potential sandbox escape; attacker could trigger ne...

CVE-2026-13037

CVE-2026-13037 is a use-after-free vulnerability in WebView for Android within Google Chrome, before version 149.0.7827.197. The flaw allows a local attacker to run arbitrary code inside the sandbox via a crafted HTML page. Affected component: WebView in Chrome on Android; root cause: use-after-f...

CVE-2026-14132

CVE-2026-14132 affects Google Chrome WebXR: an inappropriate WebXR implementation allows a remote attacker to spoof UI via a crafted HTML page. Affects Chrome versions prior to 150.0.7871.47; the issue is rated Low severity with user interaction required and network attack vector. The publicly do...

CVE-2026-14424

CVE-2026-14424 affects Dawn in Google Chrome on macOS prior to 150.0.7871.46. A use-after-free vulnerability in Dawn could allow a remote attacker to potentially escape the sandbox via a crafted HTML page, with Chromium severity listed as High. The available documents consistently describe the tr...

CVE-2026-15776

CVE-2026-15776 affects Google Chrome/V8: an inappropriate implementation in V8 allowed remote code execution inside the sandbox via a crafted HTML page before Chrome 150.0.7871.125. The issue is addressed in the Chrome Stable Channel Update, which upgrades to 150.0.7871.125 (Windows/Mac) and 150....

CVE-2026-17751

CVE-2026-17751 : In Google Chrome, the AdFilter component in Chromium contains an inappropriate implementation that enables a remote attacker to run arbitrary code inside the sandbox via a crafted HTML page. Affected: Chrome versions prior to 151.0.7922.72. Impact: potential full sandbox escape. ...

CVE-2026-17765

CVE-2026-17765: In Google Chrome, an inappropriate WebProtect implementation before 151.0.7922.72 allowed a remote attacker who had compromised the renderer process to leak cross-origin data via a crafted HTML page. This is a Medium-severity issue. Affected software: Google Chrome (WebProtect com...

CVE-2026-17804

CVE-2026-17804 is a use-after-free in Chrome/Chromium’s Media component that could enable a sandbox escape when a renderer process is compromised via a crafted HTML page. The vulnerability affects Chrome prior to 151.0.7922.72 and is described across multiple sources (NVD, Debian, Red Hat, CIRCL,...

CVE-2026-17837

CVE-2026-17837 concerns insufficient validation of untrusted input in Chrome/Chromium DevTools, enabling potential sandbox escape via a crafted HTML page when the renderer is compromised. The vulnerability affects Google Chrome prior to 151.0.7922.72 and is described across multiple feeds (NVD/Re...

CVE-2026-19147

CVE-2026-19147 affects Google Chrome on Linux. The issue is a use-after-free in the Aura component, allowing a remote attacker that has compromised the renderer to potentially escape the sandbox via a crafted HTML page. The vulnerability is tied to Chrome/Chromium’s Aura handling and is fixed in ...