CVE-2025-0441

CVE-2025-0441 corresponds to an information-disclosure flaw in Google Chrome’s Fenced Frames implementation. Connected sources confirm the issue affects Google Chrome/Chromium, describing an inappropriate implementation in Fenced Frames that could allow a remote attacker to glean potentially sens...

CVE-2023-4075

CVE-2023-4075 describes a use-after-free in Cast within Chromium-based browsers (Google Chrome) prior to 115.0.5790.170, enabling a remote attacker to potentially induce heap corruption via a crafted HTML page. The issue affects Chromium/Chrome versions before the fixed point and is rated High se...

CVE-2026-7340

CVE-2026-7340 concerns an integer overflow in ANGLE within Google Chrome on Windows before 147.0.7727.138 . The vulnerability could allow a remote attacker to trigger an out-of-bounds memory read via a crafted HTML page , as described in multiple sources (NVD/OSV/Chromium notes). The issue is tie...

CVE-2024-5495

CVE-2024-5495 affects Google Chrome/Chromium Dawn code, with a use-after-free vulnerability that can lead to heap corruption via a crafted HTML page on pre-125.0.6422.141 versions. The connected sources corroborate the issue across multiple advisories (CVE listing, CNVD/CNNVD, Debian/Fedora updat...

CVE-2024-7255

CVE-2024-7255 affects Google Chrome (WebTransport) with an out-of-bounds read in Chromium before 127.6533.88. The root cause is an out-of-bounds memory access via a crafted HTML page, enabling a remote attacker to potentially read memory. Impact is described as high severity (C/H/I/H/A/H). Public...

CVE-2024-7969

CVE-2024-7969 is a Type Confusion in V8 affecting Google Chrome/Chromium up to version 128.0.6613.113, enabling remote heap corruption via a crafted HTML page. Public notices indicate fixes in Chrome/Chromium channels to 128.0.6613.113 (and 128.0.6613.114 for some channels); Debian advisories als...

CVE-2025-4052

CVE-2025-4052 affects Google Chrome/Chromium DevTools. The issue is described as an inappropriate implementation in DevTools prior to 136.0.7103.59, allowing a remote attacker who entices a user to perform specific UI gestures to bypass discretionary access control via a crafted HTML page. The Ch...

CVE-2020-16042

CVE-2020-16042: Uninitialized Use in V8 within Google Chrome prior to 87.0.4280.88. This allows a remote attacker to potentially read sensitive information from a process’s memory via a crafted HTML page. The issue is tied to the Chromium/WebKit stack (V8) in Chrome, with confirmed remediation av...

CVE-2020-6404

CVE-2020-6404 is a heap-corruption/BLINK-related vulnerability in Google Chrome prior to 80.0.3987.87. Connected documents confirm that this flaw stems from an inappropriate Blink/WebKit implementation, enabling a remote attacker to potentially trigger heap corruption via a crafted HTML page. The...

CVE-2024-5840

Summary of CVE-2024-5840: Google Chrome/Chromium prior to 126.0.6478.54 is affected by a CORS policy bypass vulnerability that can let remote attackers bypass discretionary access control via a crafted HTML page. The vulnerability target is the browser’s CORS handling (Chromium component). Report...

CVE-2024-5845

CVE-2024-5845: A use-after-free in the Audio path of Google Chrome (Chromium) prior to 126.0.6478.54 could allow a remote attacker to trigger heap corruption via a crafted PDF file. Public data in connected documents confirms the affected software as Google Chrome/Chromium, with the issue categor...

CVE-2025-0451

CVE-2025-0451 describes an inappropriate implementation in the Extensions API of Google Chrome prior to version 133.0.6943.53. A remote attacker could induce a user to perform specific UI gestures, enabling UI spoofing via a crafted Chrome Extension. The core issue is in the Extensions API implem...

CVE-2010-1205

CVE-2010-1205 is a buffer overflow in libpng (pngpread.c) that could allow remote code execution via a crafted PNG image. Affected libpng versions are prior to 1.2.44 and prior to 1.4.3. The overflow is tied to the internal copy in pngpread.c and is described across advisories mentioning memory c...

CVE-2024-5838

CVE-2024-5838: Type Confusion in V8 in Google Chrome prior to 126.0.6478.54 allows remote attacker to perform out-of-bounds memory access via a crafted HTML page. Affected software: Google Chrome/Chromium (V8 engine). Impact per sources: high confidentiality, integrity, and availability risks. Th...

CVE-2024-6101

CVE-2024-6101 affects Google Chrome components (V8/WebAssembly) with an out-of-bounds memory access vulnerability caused by an inappropriate implementation. According to multiple sources, including Chromium blog updates and Debian security advisories, the issue was fixed in Chrome 126.0.6478.114 ...

CVE-2026-11645

CVE-2026-11645 is an out-of-bounds read/write in Google Chrome’s V8 engine (pre-149.0.7827.103). A remote attacker could trigger arbitrary code execution inside the browser sandbox via a crafted HTML page. The vulnerability was identified as high severity and is being actively exploited in the wi...

CVE-2019-5794

CVE-2019-5794 is a UI spoofing vulnerability reported in Chromium/Google Chrome before version 73.0.3683.75. The issue allows a remote attacker to achieve domain spoofing via a crafted HTML page. Public disclosures in connected sources confirm the affected product as Chromium/Chrome and reference...

CVE-2021-30561

The connected advisories confirm CVE-2021-30561 is a type confusion in the V8 component of the Chromium engine, affecting Google Chrome/Chromium prior to version 91.0.4472.164. The vulnerability could allow remote code execution via a crafted HTML page, with heap corruption as a potential outcome...

CVE-2024-5839

CVE-2024-5839 corresponds to Google Chrome/V8/Chromium memory allocator issue: Inappropriate Implementation in Memory Allocator in Chrome prior to 126.0.6478.54 can enable a remote attacker to cause heap corruption via a crafted HTML page (Chromium security severity: Medium). The Chrome 126 relea...

CVE-2024-6291

CVE-2024-6291 concerns Google Chrome/Chromium, where a use-after-free in SwiftShader (a GPU-related component) could allow a remote attacker to cause heap corruption via a crafted HTML page. The issue is described as affecting Chrome before version 126.0.6478.126. Exploitability is implied by rem...

CVE-2022-0971

CVE-2022-0971 is a use-after-free in Blink Layout in Google Chrome (Android) prior to 99.0.4844.74, exploited by a remote attacker who had compromised the renderer process to potentially cause heap corruption via a crafted HTML page. Affected: Google Chrome/Blink Layout; Root cause: use-after-fre...

CVE-2022-2010

CVE-2022-2010 corresponds to an Out-of-bounds read in Chrome/Chromium’s compositing path, exploitable when a renderer process is compromised to potentially escape the sandbox via a crafted HTML page. Affected software is Google Chrome/Chromium up to versions prior to 102.0.5005.115. Debian/Debian...

CVE-2023-4074

CVE-2023-4074 is a Chrome/Chromium-related vulnerability described as a use-after-free in Blink Task Scheduling. Affects Google Chrome’s Blink engine, with the root cause being a use-after-free condition that could allow a remote attacker to trigger heap corruption via a crafted HTML page. The vu...

CVE-2024-7535

CVE-2024-7535 affects Google Chrome/Chromium’s V8 engine prior to version 127.6533.99, enabling potential heap corruption via a crafted HTML page. Severity is High. Remediation observed in connected sources recommends upgrading Chromium to 127.6533.99 (e.g., Debian/Fedora updates). Exploitation s...

CVE-2019-5833

CVE-2019-5833 describes an incorrect dialog box scoping in Google Chrome for Android prior to 75.0.3770.80, enabling a crafted HTML page to display misleading security UI. The vulnerability affects the Chromium/Chrome UI layer and is categorized as a security UI spoofing issue; multiple advisorie...

CVE-2024-4949

CVE-2024-4949 affects Chromium-based Chrome builds due to a use-after-free in V8 prior to 125.0.6422.60, enabling potential heap corruption via a crafted HTML page. Connected advisories (Debian, Fedora, CHAINGUARD CGR, and vendor advisories) confirm this CVE and indicate updates to Chromium 125.0...

CVE-2024-5496

This CVE (CVE-2024-5496) concerns a use-after-free in Media Session within Google Chrome/Chromium. The vulnerability exists in Chrome prior to version 125.0.6422.141 and could allow a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML page. The Chrome 125.0.6422.141 r...

CVE-2024-5835

CVE-2024-5835 is a Chrome/Chromium vulnerability described as a heap buffer overflow in the Tab Groups UI, potentially allowing heap corruption via a crafted HTML page when a user is enticed to perform specific UI gestures. The Chrome blog confirms this CVE as part of the June 2024 stable-channel...

CVE-2019-5831

CVE-2019-5831 reports an object lifecycle issue in V8 used by Google Chrome/Chromium prior to version 75.0.3770.80, enabling potential remote heap corruption via a crafted HTML page. Public advisories and Debian security notices confirm this as a Chromium/V8 issue with multiple CVEs, and remediat...

CVE-2023-5477

CVE-2023-5477 describes an inappropriate implementation in the Chrome/Chromium Installer prior to 118.0.5993.70 that could allow a local attacker to bypass discretionary access control via a crafted command. Connected advisories confirm affected products include Google Chrome/Chromium and note a ...

CVE-2024-12694

CVE-2024-12694 : Affected software is Google Chrome (Chromium) with a use-after-free in the Compositing path prior to 131.0.6778.204, allowing a remote attacker to potentially cause heap corruption via a crafted HTML page. The vulnerability is fixed in Chrome/Chromium 131.0.6778.204+; remediation...

CVE-2024-5833

CVE-2024-5833 : A type confusion in V8 within Google Chrome (Chromium) prior to 126.0.6478.54 can allow a remote attacker to trigger out-of-bounds memory access through a crafted HTML page. Affected software: Google Chrome/Chromium with V8. Impact is described as high (CVE-2024-5833). Remediation...

CVE-2024-5844

CVE-2024-5844 affects Google Chrome, specifically a heap buffer overflow in the Tab Strip module that allowed a remote attacker to read out-of-bounds memory via a crafted HTML page. The issue is fixed in Chrome 126.0.6478.56/57 (stable channel), with the vulnerable baseline cited as prior to 126....

CVE-2024-6773

CVE-2024-6773 affects Google Chrome/Chromium (V8) prior to 126.0.6478.182. Inappropriate V8 implementation allowed remote heap corruption via a crafted HTML page. Impact is high confidentiality/integrity/availability; attack vector is network with user interaction required. Public details are sup...

CVE-2019-5796

CVE-2019-5796 affects Chromium-based browsers (Chrome/Chromium) via the Extensions component. A race condition in Extensions before 73.0.3683.75 could be triggered remotely, with official advisories stating the vulnerability exists in Chromium’s Extensions and that upgrading to 73.0.3683.75 or ne...

CVE-2024-5834

CVE-2024-5834 affects Google Chrome (Dawn) prior to version 126.0.6478.54 . The root cause is an inappropriate implementation in Dawn that allowed a remote attacker to execute arbitrary code via a crafted HTML page . The issue was addressed in the Chrome 126 stable update (126.0.6478.54 for Linux...

CVE-2024-5837

CVE-2024-5837 is a Type Confusion in V8 affecting Google Chrome/Chromium before version 126.0.6478.54, enabling a remote attacker to potentially cause out-of-bounds memory access via a crafted HTML page (severity High). Connected sources confirm the issue and provide remediation details: Chrome/C...

CVE-2024-6292

CVE-2024-6292 is a use-after-free in Dawn affecting Google Chrome (Chromium-based) before 126.0.6478.126, leading to potential heap corruption via a crafted HTML page. The vulnerability is categorized as High severity with network attack vector and user interaction required. The Chrome release no...

CVE-2024-8905

CVE-2024-8905 affects Google Chrome/Chromium (V8). An inappropriate implementation in V8 prior to 129.0.6668.58 may allow a remote attacker to trigger stack corruption via a crafted HTML page. The CVE has a high base score (8.8) with network attack vector and required user interaction. Remediatio...

CVE-2024-10826

Concretely affected: Chromium-based Chrome/Chromium on Android and various Linux distributions (Chromium) with version strings up to 130.0.6723.116. The root cause is a use-after-free in the Family Experiences component that can lead to heap corruption via a crafted HTML page. Impact is high (C/H...

CVE-2024-5847

CVE-2024-5847 is a Use-after-Free in PDFium affecting Google Chrome/Chromium prior to 126.0.6478.54. The underlying issue is heap corruption triggered by crafted PDF files, enabling remote code execution possibilities as described in the CVE entry. The Chrome 126 security release (126.0.6478.54) ...

CVE-2024-8198

CVE-2024-8198 is a heap buffer overflow in Skia used by Google Chrome/Chromium prior to 128.0.6613.113. The issue allows a remote attacker who has compromised the renderer process to trigger heap corruption via a crafted HTML page. Affected software is Chrome/Chromium with Skia; impact is high. R...

CVE-2024-8639

CVE-2024-8639 corresponds to a use-after-free in Autofill in Google Chrome/Chromium. The issue arises when processing Autofill data in Chromium-based browsers, potentially allowing a remote attacker to cause heap corruption via a crafted HTML page. Affected software is Chrome/Chromium prior to ve...

CVE-2020-6377

CVE-2020-6377 is a use-after-free in Chrome/Chromium’s audio path that could allow remote heap corruption via a crafted HTML page. Affected products: Google Chrome/Chromium prior to version 79.0.3945.117. Public advisories indicate fixes in later builds (e.g., Debian/Chromium updates to 79.0.3945...

CVE-2020-6437

CVE-2020-6437 affects the WebView component in Chromium/Google Chrome prior to 81.0.4044.92. An inappropriate implementation/implementation error in WebView allowed a remote attacker to spoof the security UI via a crafted application. The issue is fixed upstream in 81.0.4044.92 (Debian notes also...

CVE-2024-5836

CVE-2024-5836 affects Google Chrome DevTools by Inappropriate Implementation in DevTools, allowing code execution when a user is convinced to install a crafted Chrome Extension. Impact is High with attacker-controlled arbitrary code execution possible via a malicious extension, prior to Chrome 12...

CVE-2024-6779

CVE-2024-6779 : Out-of-bounds memory access in the V8 component of Google Chrome prior to 126.0.6478.182 may allow a remote attacker to potentially escape the sandbox via a crafted HTML page. Multiple connected sources confirm the issue exists in Chromium/Chrome up to the 126.0.6478.182 update an...

CVE-2016-5131

CVE-2016-5131 is a use-after-free in libxml2 up to version 2.9.4 (as used in Chrome before 52.0.2743.82) triggered by XPointer range-to, leading to possible denial of service and potentially other impact. Connected advisories reaffirms libxml2 as the vulnerable component and references several ve...

CVE-2020-6430

CVE-2020-6430 is a type confusion in the V8 JavaScript engine of Chromium/Google Chrome prior to 81.0.4044.92. A remote attacker could potentially cause heap corruption and execute arbitrary code. Mitigation: upgrade Chromium to 81.0.4044.92 or newer (upstream fix in 81.0.4044.92; Debian referenc...

CVE-2023-4072

Summary: CVE-2023-4072 is a WebGL-related out-of-bounds read/write vulnerability in Google Chrome/Chromium. The issue can enable a remote attacker to cause heap corruption via a crafted HTML page, with high impact as indicated by the CVSS vector (base score 8.8, Confidentiality/Integrity/Availabi...