CVE-2011-2880

Google Chrome CVE-2011-2880 is a use-after-free vulnerability in the V8 bindings prior to 14.0.835.202. Affected software: Google Chrome (Chrome versions before 14.0.835.202). Impact described: remote denial of service or potentially other unspecified impact. Root cause: use-after-free in V8 bind...

CVE-2011-3967

CVE-2011-3967 is associated with Google Chrome/Chromium vulnerabilities described in the GLSA/Gentoo advisories as part of a set titled Chromium: Multiple vulnerabilities. The public records indicate affected Chrome/Chromium versions prior to 17.0.963.46 and recommend upgrading to Chromium 17.0.9...

CVE-2026-11670

CVE-2026-11670: Use-after-free in PDF handling in Google Chrome prior to 149.0.7827.103 enables remote code execution in the sandbox when parsing a crafted PDF. Affected component is Chrome's PDF rendering; impact is high. Remediation per the connected documents is to update to Chrome 149.0.7827....

CVE-2026-11688

CVE-2026-11688 describes an inappropriate SVG implementation in Google Chrome prior to 149.0.7827.103 that enables a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML page. Impact is high (C/H/I/A = 8.8 CVSS v3.1) per Chromium, with network access, no privileges, use...

CVE-2026-12468

CVE-2026-12468: A race in Chrome Mac updater allows a remote attacker (with renderer access) to potentially escape the sandbox via a crafted HTML page. Affected: Google Chrome on macOS prior to 149.0.7827.155. Impact: High. Mitigation: update to 149.0.7827.155 or later (per linked Chrome security...

CVE-2026-13038

Use-after-free in Chrome’s Autofill on Windows exploited via a crafted HTML page could allow remote code execution. Affected versions are Chrome on Windows before 149.0.7827.197. If exploiting, attacker could take arbitrary code execution; impact is severe (CVE-2026-13038). The cited sources indi...

CVE-2026-14144

CVE-2026-14144 relates to Google Chrome desktop, where an issue in the Chromium Views security UI allows UI spoofing via a crafted HTML page. A remote attacker could exploit this after convincing a user to perform specific UI gestures, with exploitation requiring user interaction. Affected versio...

CVE-2026-14154

Summary: CVE-2026-14154 relates to an insecure DevTools implementation in Google Chrome prior to 150.0.7871.47 that could enable UI spoofing when a user is persuaded to install a malicious Chrome extension. Affected software: Google Chrome (DevTools component) prior to version 150.0.7871.47. Root...

CVE-2026-7359

CVE-2026-7359 affects ANGLE in Google Chrome prior to 147.0.7727.138. The vulnerability is a use-after-free in ANGLE that could allow a renderer-compromised remote attacker to potentially escape the Chrome sandbox via a crafted HTML page. Affected product: Google Chrome (ANGLE component); root ca...

CVE-2010-3253

CVE-2010-3253 concerns Google Chrome prior to version 6.0.472.53, where the notification permissions implementation is exposed to memory corruption, enabling denial of service and possibly other unspecified impact via unknown vectors. The CVE appears in multiple feeds (NVD and OpenVAS entries ref...

CVE-2010-4201

Affected software: Google Chrome. Vulnerable component: text control selections handling leading to a use-after-free. Root cause: use-after-free in Chrome before 7.0.517.44. Impact: remote denial of service or possibly other unspecified effects. Exploitation status: not detailed in the provided d...

CVE-2011-1116

Google Chrome before 9.0.597.107 is affected by an SVG animation handling flaw that can lead to denial of service or other impact via a stale pointer. Connected sources confirm this CVE (CVE-2011-1116) and reference Chrome upgrades to 9.0.597.107 as the fix; no exploitation details are provided i...

CVE-2011-1813

Google Chrome vulnerability CVE-2011-1813 affects Chrome prior to 12.0.742.91, due to a flaw in the extension framework that can cause a stale pointer. This can lead to denial of service and possibly other impact via unspecified vectors. The issue is tied to multiple Chrome vulnerabilities fixed ...

CVE-2011-2332

CVE-2011-2332 affects Google Chrome (V8 engine) versions prior to 12.0.742.91. The vulnerability is a Same Origin Policy bypass in the V8 engine, allowing remote attackers to bypass SOP via unspecified vectors. The NVD/OpenVAS references confirm a cross-origin bypass in V8; Chrome 12.0.742.91 con...

CVE-2011-2840

CVE-2011-2840 affects Google Chrome prior to 14.0.835.163. The vulnerability allows a user-assisted remote attacker to spoof the URL bar through vectors related to unusual user interaction. The issue is addressed by updating Chrome to the fixed build (14.0.835.163 or later). Multiple connected so...

CVE-2011-2879

CVE-2011-2879 affects Google Chrome older than 14.0.835.202. The root cause is improper handling of object lifetimes and thread safety during audio node processing, allowing remote attackers to cause a denial of service or potentially other unspecified impact via unknown vectors. Public reference...

CVE-2011-3962

CVE-2011-3962 affects Google Chrome prior to version 17.0.963.46. The issue arises from improper path clipping, enabling a remote attacker to trigger an out-of-bounds read via unspecified vectors, resulting in a denial of service. The available documents reference the Chrome 17.0.963.46 milestone...

CVE-2025-10500

Concretely affected: Google Chrome Dawn component, with vulnerability CVE-2025-10500 in Chrome prior to 140.0.7339.185. Root cause is a Use After Free in Dawn that can lead to heap corruption when processing crafted HTML pages. Impact is high (remote code execution potential) per the CVE entry. R...

CVE-2025-8577

CVE-2025-8577 : In Chrome/Chromium-based browsers, an inappropriate implementation in Picture-in-Picture prior to 139.0.7258.66 allowed a remote attacker to spoof UI via a crafted HTML page after convincing a user to perform specific UI gestures. Concrete details across connected sources show Chr...

CVE-2026-10886

CVE-2026-10886: In Google Chrome, a use-after-free in the FileSystem component can allow a remote attacker to perform a sandbox escape via a crafted HTML page. The vulnerability affects Chrome builds prior to 149.0.7827.53. The Chrome Stable update 149.0.7827.53 (Linux/Windows/macOS) includes fix...

CVE-2026-11037

CVE-2026-11037 describes an out-of-bounds write in Chrome’s Codecs component, affecting Google Chrome before version 149.0.7827.53. The issue could allow a remote attacker to potentially achieve a sandbox escape via a crafted video file. Chromium/Chrome lists the vulnerability with a Chromium sec...

CVE-2026-11264

CVE-2026-11264 : Chrome/Chromium CSP policy bypass identified as a vulnerability affecting Chrome prior to 149.0.7827.53. A remote attacker could bypass the Content Security Policy via a crafted HTML page. Severity is low; attack vector is network with user interaction required. The remediation i...

CVE-2026-14079

CVE-2026-14079 affects Google Chrome (Chromium) due to insufficient policy enforcement in Network handling, allowing a crafted HTML page to bypass the same-origin policy before version 150.0.7871.47. Affected: Chrome/Chromium network policy enforcement; Root cause: insufficient policy enforcement...

CVE-2026-14141

CVE-2026-14141 affects Google Chrome on Android (Document Picture-in-Picture security UI). Affected component: Picture-in-Picture UI, with a domain-spoofing risk via a crafted HTML page. Root cause: improper UI security handling in Picture-in-Picture. Impact per sources: Chromium security severit...

CVE-2026-14143

Affected product: Google Chrome on iOS prior to 150.0.7871.47. Issue: Incorrect security UI in Passwords UI that enables UI spoofing via a crafted HTML page. Impact: allows a remote attacker to perform UI spoofing; user interaction is required. Root cause: described as a security UI flaw in the p...

CVE-2026-14424

CVE-2026-14424 affects Dawn in Google Chrome on macOS prior to 150.0.7871.46. A use-after-free vulnerability in Dawn could allow a remote attacker to potentially escape the sandbox via a crafted HTML page, with Chromium severity listed as High. The available documents consistently describe the tr...

CVE-2026-16806

CVE-2026-16806 affects Google Chrome WebMCP. A use-after-free in WebMCP can be triggered by visiting a crafted HTML page, allowing a remote attacker to execute arbitrary code inside the sandbox. The public sources confirm this vulnerability and tie it to the Chrome stable release update LP to 150...

CVE-2026-9975

CVE-2026-9975 describes an out-of-bounds read and write flaw in ANGLE used by Google Chrome, affecting Chrome builds prior to 148.0.7778.216. The vulnerability could allow a remote attacker who has already compromised the renderer process to potentially escape the Chrome sandbox via a crafted HTM...

CVE-2010-2899

CVE-2010-2899 affects Google Chrome up to version 5.0.375.125 in the layout implementation. The vulnerability is described as an unspecified issue that allows remote attackers to obtain sensitive data from process memory via unknown vectors. The connected documents confirm the affected product an...

CVE-2010-3251

CVE-2010-3251 concerns the WebSockets implementation in Google Chrome prior to 6.0.472.53. It allows remote attackers to cause a denial of service via a NULL pointer dereference, resulting in an application crash. The description indicates the exploit is remote and network-based, but the vectors ...

CVE-2010-4039

CVE-2010-4039 affects Google Chrome on Linux prior to 7.0.517.41 where the process fails to properly set the PATH environment variable. The description does not specify the exact impact or attack vectors; vulnerability details are limited to this PATH handling issue. Open-source/ANSI references i...

CVE-2011-1123

CVE-2011-1123 affects Google Chrome prior to 9.0.597.107, where access to internal extension functions is not properly restricted. The impact is unspecified, with remote attack vectors mentioned in the description. The provided connected documents corroborate the vulnerability presence across mul...

CVE-2011-1192

Google Chrome on Linux before 10.0.648.127 is affected by CVE-2011-1192 due to improper handling of Unicode ranges, enabling remote attackers to cause a denial of service via an out-of-bounds read. Affected component is Chrome’s Unicode range handling; impact is partial availability downtime. The...

CVE-2011-1201

CVE-2011-1201 affects the WebKit context implementation used by Google Chrome prior to version 10.0.648.127. The vulnerability allows remote attackers to cause a denial of service or potentially other unspecified impact via vectors leading to a stale pointer. The connected documents confirm the a...

CVE-2011-1811

CVE-2011-1811 concerns Google Chrome prior to version 12.0.742.91. The issue is described as a denial-of-service (application crash) triggered by handling a very large number of form submissions, via unspecified vectors. The vulnerability is listed across multiple sources (e.g., NVD/NVD CVE entry...

CVE-2011-1815

CVE-2011-1815 affects Google Chrome (pre-12.0.742.91). The vulnerability allows remote attackers to inject script into a tab page via vectors related to extensions, specifically extension script injection into new tab page. The issue is tied to Chrome’s extension framework and is mitigated by upd...

CVE-2011-2787

CVE-2011-2787 : Google Chrome prior to 13.0.782.107 is affected. The issue is a re-entrancy flaw in the GPU lock that can be exploited by remote attackers to cause a denial of service via unspecified vectors, potentially crashing the browser. The vulnerability is documented in CVE-2011-2787 as af...

CVE-2011-2878

CVE-2011-2878 affects Google Chrome (before 14.0.835.202). The flaw permits remote attackers to bypass the Same Origin Policy by exploiting access to the window prototype via unspecified vectors; impact described as SOP bypass. Versions, affected platforms, and exact exploit vectors are not furth...

CVE-2011-3916

Technical details about CVE-2011-3916 are not publicly available in the provided documents. Monitor for updates.

CVE-2011-3956

The connected documents confirm that CVE-2011-3956 is part of a Chromium/Chromium-derived browser vulnerability set (Chromium/Chrome family). The Gentoo GLSA entry ties CVE-2011-3956 to “Chromium: Multiple vulnerabilities” with impact including potential remote code execution, denial of service, ...

CVE-2011-3964

CVE-2011-3964 affects Google Chrome before 17.0.963.46, where the drag‑and‑drop UI implementation could allow an attacker to spoof the URL bar via unspecified vectors. The vulnerability is part of a set of Chromium issues, with high severity in multiple advisories. Mitigation present in public ad...

CVE-2025-13640

CVE-2025-13640 affects Chromium-based components (Chromium/Chromebooks/Chromium in Chromium-derived builds). The issue is an inappropriate implementation in Passwords that could allow a local attacker to bypass authentication via physical access. Publicly visible details describe the vulnerabilit...

CVE-2026-10001

CVE-2026-10001 affects Google Chrome/Chromium’s PerformanceManager: a use-after-free in PerformanceManager can allow a remote attacker who has already compromised the renderer process to potentially escape the sandbox via a crafted HTML page. Impact is described as high (CVSS 3.1: AV:N/AC:H/PR:N/...

CVE-2026-11244

The CVE-2026-11244 entry concerns Google Chrome’s WebAuthentication input validation. Affected component: WebAuthentication in Chrome (prior to 149.0.7827.53). Root cause: insufficient validation of untrusted input, enabling a remote attacker who compromised a renderer process to bypass the same-...

CVE-2026-12010

Heap buffer overflow in the GPU component of Google Chrome on Android (vulnerable before 149.0.7827.115) could allow a remote attacker who has compromised the renderer process to potentially escape the sandbox via a crafted HTML page. The issue affects Chrome on Android and is classified as Criti...

CVE-2026-14405

CVE-2026-14405 describes an uninitialized use in the V8 engine of Google Chrome, prior to version 150.0.7871.46, which could allow a remote attacker to execute arbitrary code inside the browser sandbox via a crafted HTML page. The vulnerability affects the V8 component within Chrome and is associ...

CVE-2026-2649

CVE-2026-2649 affects Chromium-based browsers (Google Chrome/Chromium) via an integer overflow in the V8 engine before 145.0.7632.109, allowing remote heap corruption through a crafted HTML page. Affected products/versions include Chromium releases up to 145.0.7632.109 (various OS package updates...

CVE-2026-7979

CVE-2026-7979 concerns Google Chrome: an inappropriate implementation in Media allows a remote attacker to leak cross-origin data via a crafted HTML page, before Chrome 148.0.7778.96. Connected sources confirm the vulnerability in Chrome’s Media handling and list the fixed version 148.0.7778.96 (...

CVE-2026-8566

The CVE-2026-8566 entry concerns an insufficient policy enforcement flaw in the Payments component of Google Chrome on Android, arising from a policy enforcement bug in Chromium. The vulnerability allows a remote attacker to bypass discretionary access control through a crafted HTML page. Affecte...

CVE-2026-9984

CVE-2026-9984 affects Google Chrome on Windows with a use-after-free in the UI of the Chromium-based browser, allowing remote code execution via a crafted HTML page. Root cause: use-after-free in the UI component. Affected products/versions: Chrome prior to 148.0.7778.216. Impact: arbitrary code ...