4916 matches found
CVE-2026-14132
CVE-2026-14132 affects Google Chrome WebXR: an inappropriate WebXR implementation allows a remote attacker to spoof UI via a crafted HTML page. Affects Chrome versions prior to 150.0.7871.47; the issue is rated Low severity with user interaction required and network attack vector. The publicly do...
CVE-2026-14397
CVE-2026-14397: Out-of-bounds write in ANGLE used by Google Chrome on macOS prior to 150.0.7871.46 could allow a remote attacker to perform a sandbox escape via a crafted HTML page. The vulnerability is tied to ANGLE in Chrome; the impact is a sandbox escape with high confidentiality, integrity, ...
CVE-2026-14424
CVE-2026-14424 affects Dawn in Google Chrome on macOS prior to 150.0.7871.46. A use-after-free vulnerability in Dawn could allow a remote attacker to potentially escape the sandbox via a crafted HTML page, with Chromium severity listed as High. The available documents consistently describe the tr...
CVE-2026-15776
CVE-2026-15776 affects Google Chrome/V8: an inappropriate implementation in V8 allowed remote code execution inside the sandbox via a crafted HTML page before Chrome 150.0.7871.125. The issue is addressed in the Chrome Stable Channel Update, which upgrades to 150.0.7871.125 (Windows/Mac) and 150....
CVE-2026-17709
CVE-2026-17709 describes a race in Downloads in Google Chrome on macOS prior to 151.0.7922.72 that could allow a remote attacker who has compromised the renderer process to perform a sandbox escape via a crafted HTML page. The description notes a Chromium security severity of High/CRITICAL and re...
CVE-2026-17990
CVE-2026-17990 affects Google Chrome prior to 151.0.7922.72, where insufficient validation of untrusted input in WebAuthn allows a remote attacker who has compromised the renderer process to potentially escape the sandbox via a crafted PDF file. The vulnerability is tied to WebAuthn handling in C...
CVE-2026-18018
CVE-2026-18018 affects Google Chrome on Windows, where the Updater’s implementation allowed a local attacker to spoof UI via a malicious file. The issue is described as an inappropriate implementation in the Updater prior to Chrome version 151.0.7922.72, with a Low severity (CVSS: Local, Low impa...
CVE-2026-18019
Technical details for CVE-2026-18019 are not publicly available in the provided documents. Monitor for updates.
CVE-2026-7941
CVE-2026-7941 affects Google Chrome on Android (mobile) prior to 148.0.7778.96. The root cause is insufficient validation of untrusted input in the mobile Chrome, enabling UXSS: a local attacker could inject arbitrary scripts or HTML via a crafted Chrome Extension. Remediation is to update to ver...
CVE-2026-9882
CVE-2026-9882 affects Google Chrome’s ANGLE component, where an integer overflow allows a remote attacker to leak cross-origin data via a crafted HTML page. Public reports/entries consistently describe the flaw as an integer overflow in ANGLE prior to Chrome 148.0.7778.216. The Chromium/Chrome se...
CVE-2010-2110
Google Chrome before 5.0.375.55 does not properly execute JavaScript code in the extension context, with unspecified impact and remote attack vectors. The CVE-2010-2110 entry is supported by multiple sources noting a patch release for version 5.0.375.55. Connected documents also reference broader...
CVE-2010-2902
CVE-2010-2902 affects Google Chrome prior to 5.0.375.125, with the SVG implementation vulnerable to memory corruption that can lead to a denial of service (and possibly other impact). Multiple independent advisories and databases (SUSE, Ubuntu, OpenVAS/OpenVAS-derived feeds, Debian tracker) corro...
CVE-2010-3118
The CVE-2010-3118 affects Google Chrome’s Omnibox autosuggest feature (Chrome before 5.0.375.127). The vulnerability could allow remote attackers to obtain sensitive information by reading the network traffic generated by the autosuggest process. Exploitation details, affected versions beyond the...
CVE-2010-3119
CVE-2010-3119 affects Google Chrome before 5.0.375.127 and webkitgtk before 1.2.6. The root cause is described as improper Ruby language support, leading to a denial of service (memory corruption) and potentially unspecified other impact via unknown vectors. Connected advisories (e.g., MiracleLin...
CVE-2010-4575
CVE-2010-4575 affects Google Chrome (before 8.0.552.224) and Chrome OS (before 8.0.552.343). The issue is in ThemeInstalledInfoBarDelegate::Observe, where incorrect tab interaction by an extension is not handled properly, enabling user-assisted remote attackers to cause a denial of service (appli...
CVE-2011-0780
CVE-2011-0780 affects Google Chrome prior to 9.0.597.84, where the PDF print workflow interacts improperly with print operations, allowing user‑assisted remote attackers to cause a denial of service (application crash) or potentially other impact via unknown vectors. Affected component: PDF event...
CVE-2011-1446
CVE-2011-1446 affects Google Chrome prior to version 11.0.696.57. The vulnerability allows remote attackers to spoof the URL bar via two vectors: (1) a navigation error and (2) an interrupted load. The issue is documented in multiple sources (NVD entry for CVE-2011-1446 and Chrome patch notes). I...
CVE-2011-1456
CVE-2011-1456 affects Google Chrome earlier than 11.0.696.57. The vulnerability arises from Chrome’s handling of PDF forms, allowing remote attackers to cause a denial of service or potentially other unspecified impact via vectors that lead to “stale pointers.” Exploitation details are not provid...
CVE-2011-2785
Google Chrome up to 13.0.782.107 is affected by CVE-2011-2785 due to improper validation of the home-page URL in the extensions framework. This allows a crafted extension to influence extension behavior with unspecified impact. Root cause: URL validation flaw in extensions home page. Mitigation: ...
CVE-2011-2790
CVE-2011-2790 is a use-after-free vulnerability in handling of floating styles, affecting Google Chrome and Apple Safari. The flaw allows remote attackers to trigger a denial of service or possibly other impact by convincing a user to view a crafted page. Affected software, per the provided docs,...
CVE-2011-2792
Technical details for CVE-2011-2792 are not publicly provided in the connected documents; the entries reference the CVE but do not specify affected products, versions, impact, or fixes. Monitor for updates.
CVE-2011-2802
CVE-2011-2802 : Google Chrome’s V8 engine (pre-13.0.782.107) fails to perform const lookups correctly, enabling a crafted website to crash the browser (DoS) and potentially other unspecified impacts. Affected product: Google Chrome (V8 engine). Root cause: incorrect handling of const lookups in V...
CVE-2011-2805
CVE-2011-2805 is a WebKit-related cross-origin scripting issue documented in OpenVAS entries for Safari/WebKit. The vulnerability arises from a cross-origin handling flaw in URLs with embedded usernames, enabling cross-site scripting when rendering or processing such URLs within affected WebKit-b...
CVE-2011-3063
CVE-2011-3063 relates to Google Chrome/Chromium where the renderer’s navigation requests were not properly validated. The initial CVE description states the impact is unspecified. Connected advisories (OpenVAS/Gentoo GLSA and Chrome vulnerability bundles) corroborate that CVE-2011-3063 is among m...
CVE-2011-3883
CVE-2011-3883 affects Google Chrome before 15.0.874.102. The issue is a use-after-free in counters that can lead to remote denial of service and possibly other impacts. Remediation in public advisories recommends upgrading to Chrome/Chromium version 15.0.874.102 or newer (Chromium 15.x+ as cited ...
CVE-2011-3891
CVE-2011-3891 affects Google Chrome prior to 15.0.874.102, where improper restriction of internal Google V8 functions may enable remote attackers to cause a denial of service or potentially other impact via unknown vectors. The cited connected advisories indicate this requires upgrading to Chrome...
CVE-2011-3912
CVE-2011-3912 describes a use-after-free in Google Chrome SVG filters that could cause a denial of service or other impact. Affected: Chrome prior to 16.0.912.63. Remediation: upgrade to Chromium/Chrome 16.0.912.75 or newer (as reflected in Gentoo GLSA 201201-03 and related advisories). If exploi...
CVE-2011-3915
Technical details for CVE-2011-3915 are not publicly available in the provided documents. Monitor for updates from vendors and security feeds.
CVE-2011-3959
CVE-2011-3959 refers to a buffer overflow in the locale implementation of Google Chrome prior to 17.0.963.46, enabling remote causes of denial of service or possibly other impact via unspecified vectors. Evidence across connected docs shows Chromium/Chrome remediation updates: Gentoo GLSA-201202-...
CVE-2011-3966
Technical details for CVE-2011-3966 are not provided in the connected documents; please monitor for updates.
CVE-2013-0884
CVE-2013-0884 is referenced in connected OpenSUSE/Gentoo/Nessus entries as a Chromium/Chrome issue described as an “Inappropriate load of NaCl.” The available connected documents confirm the affected component is part of Chromium/Chrome’s NaCl handling, but do not provide detailed root-cause anal...
CVE-2013-0890
CVE-2013-0890 corresponds to multiple memory-safety vulnerabilities in the IPC layer of Google Chrome. The initial description states that Chrome before 25.0.1364.97 (Windows/Linux) and before 25.0.1364.99 (macOS) is affected, leading to potential memory corruption and a remote denial of service ...
CVE-2013-0891
CVE-2013-0891: Google Chrome (Windows/Linux before 25.0.1364.97, macOS before 25.0.1364.99) is affected by an integer overflow in blob handling, leading to possible denial of service or other impact. The issue is disclosed in the Chrome vulnerability set and is reflected in OpenVAS/Nessus entries...
CVE-2025-13640
CVE-2025-13640 affects Chromium-based components (Chromium/Chromebooks/Chromium in Chromium-derived builds). The issue is an inappropriate implementation in Passwords that could allow a local attacker to bypass authentication via physical access. Publicly visible details describe the vulnerabilit...
CVE-2026-0907
CVE-2026-0907 affects Google Chrome/Chromium Split View UI, allowing UI spoofing via a crafted HTML page before version 144.0.7559.59. Connected documents confirm related Chromium/CEF updates in the 144.0.7559.x series across Fedora and ChromeOS advisories, indicating a patched release beyond 144...
CVE-2026-11207
Summary: CVE-2026-11207 affects Google Chrome Autofill in Chromium-based builds prior to 149.0.7827.53. The root cause is insufficient validation of untrusted input in Autofill, which could allow a remote attacker to potentially perform a sandbox escape via malicious network traffic. What is affe...
CVE-2026-11281
CVE-2026-11281 is a local vulnerability affecting Google Chrome on Windows, where an integer overflow in Chromoting could allow a local attacker to read potentially sensitive data from process memory via a crafted ETW event. The issue is described as having low Chromium security severity, with a ...
CVE-2026-11630
CVE-2026-11630 concerns a Use-after-free in Chrome's File Input handling, leading to potential heap corruption via a crafted HTML page. Affected software is Google Chrome (Chromium-based); the issue is described as a Use after free in File Input prior to 149.0.7827.103. The Connected and Initial ...
CVE-2026-11652
CVE-2026-11652 is a use-after-free in Chrome/Chromium Extensions before 149.0.7827.103. If a renderer process is compromised, a remote attacker could potentially escape the sandbox via a crafted HTML page, as described in multiple sources. Affected product: Google Chrome/Chromium Extensions; vuln...
CVE-2026-13776
CVE-2026-13776 is a Type Confusion in Dawn within Google Chrome before 150.0.7871.47. The vulnerability could be triggered by a crafted HTML page and, if a renderer process is already compromised, may allow a sandbox escape. The issue is tied to Chrome/Chromium’s Dawn component and is classified ...
CVE-2026-13785
CVE-2026-13785 is a use-after-free in Bluetooth handling in Google Chrome on macOS, affected before version 150.0.7871.47. A remote attacker could harness crafted HTML and force a user to perform specific UI gestures to potentially escape the Chrome sandbox. The issue is documented across multipl...
CVE-2026-17802
Vulnerability summary (CVE-2026-17802) : Side-channel information leakage in the GPU of Google Chrome on Android, prior to 151.0.7922.72. A remote attacker could leak cross-origin data via a crafted HTML page, indicating a confidentiality impact. The issue is associated with Chrome/Chromium and i...
CVE-2026-17844
CVE-2026-17844 affects Google Chrome (Cast component) with insufficient validation of untrusted input, allowing a local-network attacker to leak cross-origin data through malicious traffic. The public descriptions consistently cite the Cast feature as the vulnerable surface, with the issue existi...
CVE-2026-17881
The CVE-2026-17881 entry describes an Integer overflow in WebXR affecting Google Chrome before 151.0.7922.72. A remote attacker could execute arbitrary code inside the sandbox via a crafted HTML page. Affected component: WebXR in Chrome (Chromium base). Impacted versions are prior to 151.0.7922.7...
CVE-2026-8008
The CVE-2026-8008 entry concerns Google Chrome DevTools: a UI spoofing vulnerability caused by an inappropriate DevTools implementation that can be exploited when a user is induced to install a malicious Chrome Extension. Multiple connected sources corroborate affected software and version bounds...
CVE-2026-9879
CVE-2026-9879 – Google Chrome ANGLE vulnerability : An out-of-bounds write in ANGLE within Chromium-based Chrome prior to 148.0.7778.216 allows a remote attacker to execute arbitrary code via a crafted HTML page. The issue affects Chrome’s ANGLE component and is referenced by upstream Chromium bu...
CVE-2026-9991
Affected product: Google Chrome on Windows. Issue: In the Media component, an inappropriate implementation allows a remote attacker who has gained a foothold in the renderer process to leak cross-origin data via a crafted HTML page. Root cause: improper media handling within Chromium’s Windows re...
CVE-2010-1233
Google Chrome before 4.1.249.1036 is affected by multiple integer overflows in WebKit JavaScript objects, allowing remote attackers to trigger unspecified impact via network vectors. The vulnerability is confirmed in the CVE-2010-1233 record and is treated as a concrete Chrome/WebKit issue in rel...
CVE-2010-2652
Google Chrome before 5.0.375.99 does not correctly implement modal dialogs, enabling denial of service (application crash) via unspecified vectors. Connected sources confirm a set of related Chrome vulnerabilities (including modal-dialog handling) in the 5.0.375.99 timeframe and reference a patch...