5002 matches found
CVE-2011-3966
Technical details for CVE-2011-3966 are not provided in the connected documents; please monitor for updates.
CVE-2013-0890
CVE-2013-0890 corresponds to multiple memory-safety vulnerabilities in the IPC layer of Google Chrome. The initial description states that Chrome before 25.0.1364.97 (Windows/Linux) and before 25.0.1364.99 (macOS) is affected, leading to potential memory corruption and a remote denial of service ...
CVE-2017-15401
The CVE-2017-15401 entry describes a memory corruption bug in WebAssembly via V8 in Google Chrome prior to 62.0.3202.62, enabling out-of-bounds read/write and remote code execution in the sandbox through a crafted HTML page. Connected sources corroborate the Chrome version boundary and provide pu...
CVE-2019-5843
CVE-2019-5843 affects Google Chrome’s JavaScript engine prior to 74.0.3729.108, where an out-of-bounds memory access could allow a remote attacker to trigger heap corruption via a crafted HTML page. The vulnerability is rooted in improper memory handling in JavaScript execution, leading to potent...
CVE-2025-13639
Summary: CVE-2025-13639 is an issue in the WebRTC implementation of Google Chrome/Chromium. Affected component: WebRTC in Chrome/Chromium prior to version 143.0.7499.41. Impact: Remote attacker could cause arbitrary read/write via a crafted HTML page (confidentiality and integrity impact; availab...
CVE-2026-0907
CVE-2026-0907 affects Google Chrome/Chromium Split View UI, allowing UI spoofing via a crafted HTML page before version 144.0.7559.59. Connected documents confirm related Chromium/CEF updates in the 144.0.7559.x series across Fedora and ChromeOS advisories, indicating a patched release beyond 144...
CVE-2026-11207
Summary: CVE-2026-11207 affects Google Chrome Autofill in Chromium-based builds prior to 149.0.7827.53. The root cause is insufficient validation of untrusted input in Autofill, which could allow a remote attacker to potentially perform a sandbox escape via malicious network traffic. What is affe...
CVE-2026-11652
CVE-2026-11652 is a use-after-free in Chrome/Chromium Extensions before 149.0.7827.103. If a renderer process is compromised, a remote attacker could potentially escape the sandbox via a crafted HTML page, as described in multiple sources. Affected product: Google Chrome/Chromium Extensions; vuln...
CVE-2026-11667
CVE-2026-11667 affects Google Chrome WebRTC. The vulnerability is an out-of-bounds read in WebRTC that, if the GPU process is compromised, could enable heap corruption via a crafted HTML page. Impacted software: Chrome prior to version 149.0.7827.103. The publicly documented remediation is to upg...
CVE-2026-12462
CVE-2026-12462 is a use-after-free in the Media component of Google Chrome before 149.0.7827.155. An attacker who has compromised the renderer process could trigger a crafted HTML page to execute arbitrary code inside Chrome’s sandbox. The vulnerability is tied to the Chromium-based Media stack a...
CVE-2026-15119
CVE-2026-15119 concerns a race condition in Google Chrome’s GetUserMedia that can enable a sandbox escape when an attacker already compromised the renderer process. The vulnerability is associated with Chrome versions prior to 150.0.7871.115, with the 150.0.7871.115 release addressing the issue. ...
CVE-2026-17696
CVE-2026-17696 affects Google Chrome (Media) with a side-channel information leakage that enables a cross-origin data leak via a crafted HTML page. The description in the sources notes this as a High-severity issue and lists the fixed version as Chrome 151.0.7922.72 (stable channel). Corroboratin...
CVE-2026-17741
CVE-2026-17741 refers to insufficient validation of untrusted input in WebView for Google Chrome on Android (and the underlying Chromium WebView component). The vulnerability could enable a remote attacker to perform a sandbox escape via a crafted HTML page, as described for Chrome versions older...
CVE-2026-17877
CVE-2026-17877 describes an insecure implementation in Chromoting within Google Chrome on Linux prior to 151.0.7922.72, enabling a local attacker to achieve OS-level privilege escalation through malicious network traffic. Affected software: Google Chrome (Linux) with Chromoting. Root cause: inapp...
CVE-2026-17886
CVE-2026-17886 : Use-after-free in Google Chrome (Enterprise builds) prior to 151.0.7922.72 can enable a remote attacker to potentially cause heap corruption via a crafted HTML page. Public sources reference Chrome stability updates addressing multiple related subsystems (Dawn, Compositing, Views...
CVE-2026-76045
CVE-2026-76045 is a use after free vulnerability in WebGL in Google Chrome prior to 151.0.7922.169 . A remote attacker can execute arbitrary code inside the sandbox via a crafted HTML page. The Chromium security severity is High , with a CVSS 3.1 base score of 8.8 (AV:N/AC:L/PR:N/UI:R). The vulne...
CVE-2026-8008
The CVE-2026-8008 entry concerns Google Chrome DevTools: a UI spoofing vulnerability caused by an inappropriate DevTools implementation that can be exploited when a user is induced to install a malicious Chrome Extension. Multiple connected sources corroborate affected software and version bounds...
CVE-2026-8021
CVE-2026-8021 is a UI-based script injection (UXSS) in Google Chrome. Multiple connected sources (OSV/DEBIAN-CVE-2026-8021, PT-2026-38214, PTSecurity) confirm: affecting Google Chrome versions prior to 148.0.7778.96, caused by a vulnerability in the browser UI that could execute arbitrary scripts...
CVE-2026-8554
CVE-2026-8554 is a type confusion flaw in the ANGLE component of the Chromium-based Google Chrome browser on Windows. The issue allows a remote attacker who has compromised a renderer process to trigger an out-of-bounds memory write via a crafted HTML page, due to a flaw in ANGLE’s handling of da...
CVE-2026-9878
CVE-2026-9878 is a use-after-free in ANGLE within Google Chrome prior to 148.0.7778.216, allowing a remote attacker to execute arbitrary code inside the browser sandbox. The vulnerability affects ANGLE components used by Chrome; the public details confirm a sandbox escape risk via a crafted HTML ...
CVE-2026-9973
CVE-2026-9973 is an out-of-bounds write in the V8 engine of Google Chrome. A remote attacker could execute arbitrary code inside the Chrome sandbox via a crafted HTML page on affected Chrome builds prior to 148.0.7778.216. Remediation is to update Chrome to 148.0.7778.216 or newer (Chrome stable ...
CVE-2026-9983
Moderate confidence CVE-2026-9983 affects Google Chrome’s Skia component. A type confusion flaw in Skia prior to Chrome 148.0.7778.216 could allow a remote attacker to run arbitrary code inside the browser sandbox via a crafted HTML page. From the connected sources, the issue is described as a ty...
CVE-2026-9994
CVE-2026-9994 affects Google Chrome on Windows due to a use-after-free in Chrome’s Core, allowing a renderer-compromised attacker to potentially escape the sandbox via a crafted HTML page. The vulnerability is triggered by an issue in Core that existed prior to version 148.0.7778.216. Impact is h...
CVE-2010-2902
CVE-2010-2902 affects Google Chrome prior to 5.0.375.125, with the SVG implementation vulnerable to memory corruption that can lead to a denial of service (and possibly other impact). Multiple independent advisories and databases (SUSE, Ubuntu, OpenVAS/OpenVAS-derived feeds, Debian tracker) corro...
CVE-2010-3119
CVE-2010-3119 affects Google Chrome before 5.0.375.127 and webkitgtk before 1.2.6. The root cause is described as improper Ruby language support, leading to a denial of service (memory corruption) and potentially unspecified other impact via unknown vectors. Connected advisories (e.g., MiracleLin...
CVE-2010-4575
CVE-2010-4575 affects Google Chrome (before 8.0.552.224) and Chrome OS (before 8.0.552.343). The issue is in ThemeInstalledInfoBarDelegate::Observe, where incorrect tab interaction by an extension is not handled properly, enabling user-assisted remote attackers to cause a denial of service (appli...
CVE-2011-0470
Google Chrome before 8.0.552.237 and Chrome OS before 8.0.552.344 are affected by a vulnerability in handling extensions notifications that can be exploited to crash the application (denial of service). The provided documents state the issue but do not give explicit exploitation details or a conf...
CVE-2011-0780
CVE-2011-0780 affects Google Chrome prior to 9.0.597.84, where the PDF print workflow interacts improperly with print operations, allowing user‑assisted remote attackers to cause a denial of service (application crash) or potentially other impact via unknown vectors. Affected component: PDF event...
CVE-2011-1124
CVE-2011-1124 is a use-after-free vulnerability in Google Chrome prior to 9.0.597.107 that can allow remote attackers to cause a denial of service or potentially other impact via vectors related to blocked plug-ins. The associated sources describe the issue consistently; no specific exploit detai...
CVE-2011-1446
CVE-2011-1446 affects Google Chrome prior to version 11.0.696.57. The vulnerability allows remote attackers to spoof the URL bar via two vectors: (1) a navigation error and (2) an interrupted load. The issue is documented in multiple sources (NVD entry for CVE-2011-1446 and Chrome patch notes). I...
CVE-2011-2342
Google Chrome (before 12.0.742.91) is affected by CVE-2011-2342 due to a DOM implementation flaw that allows a remote attacker to bypass the Same Origin Policy. The vulnerability is described as a Same Origin bypass in the DOM, with a medium–high risk in public listings and a CVSS base score of 7...
CVE-2011-2785
Google Chrome up to 13.0.782.107 is affected by CVE-2011-2785 due to improper validation of the home-page URL in the extensions framework. This allows a crafted extension to influence extension behavior with unspecified impact. Root cause: URL validation flaw in extensions home page. Mitigation: ...
CVE-2011-2802
CVE-2011-2802 : Google Chrome’s V8 engine (pre-13.0.782.107) fails to perform const lookups correctly, enabling a crafted website to crash the browser (DoS) and potentially other unspecified impacts. Affected product: Google Chrome (V8 engine). Root cause: incorrect handling of const lookups in V...
CVE-2011-2805
CVE-2011-2805 is a WebKit-related cross-origin scripting issue documented in OpenVAS entries for Safari/WebKit. The vulnerability arises from a cross-origin handling flaw in URLs with embedded usernames, enabling cross-site scripting when rendering or processing such URLs within affected WebKit-b...
CVE-2011-3020
CVE-2011-3020 affects Google Chrome’s Native Client validator, with the vulnerability described as unspecified and impact/attack vector unknown in Chrome prior to 17.0.963.56. The provided documents confirm the affected component (Native Client validator) and a pre-patch version, but do not discl...
CVE-2011-3063
CVE-2011-3063 relates to Google Chrome/Chromium where the renderer’s navigation requests were not properly validated. The initial CVE description states the impact is unspecified. Connected advisories (OpenVAS/Gentoo GLSA and Chrome vulnerability bundles) corroborate that CVE-2011-3063 is among m...
CVE-2011-3883
CVE-2011-3883 affects Google Chrome before 15.0.874.102. The issue is a use-after-free in counters that can lead to remote denial of service and possibly other impacts. Remediation in public advisories recommends upgrading to Chrome/Chromium version 15.0.874.102 or newer (Chromium 15.x+ as cited ...
CVE-2011-3912
CVE-2011-3912 describes a use-after-free in Google Chrome SVG filters that could cause a denial of service or other impact. Affected: Chrome prior to 16.0.912.63. Remediation: upgrade to Chromium/Chrome 16.0.912.75 or newer (as reflected in Gentoo GLSA 201201-03 and related advisories). If exploi...
CVE-2011-3915
Technical details for CVE-2011-3915 are not publicly available in the provided documents. Monitor for updates from vendors and security feeds.
CVE-2011-3959
CVE-2011-3959 refers to a buffer overflow in the locale implementation of Google Chrome prior to 17.0.963.46, enabling remote causes of denial of service or possibly other impact via unspecified vectors. Evidence across connected docs shows Chromium/Chrome remediation updates: Gentoo GLSA-201202-...
CVE-2013-0884
CVE-2013-0884 is referenced in connected OpenSUSE/Gentoo/Nessus entries as a Chromium/Chrome issue described as an “Inappropriate load of NaCl.” The available connected documents confirm the affected component is part of Chromium/Chrome’s NaCl handling, but do not provide detailed root-cause anal...
CVE-2013-0891
CVE-2013-0891: Google Chrome (Windows/Linux before 25.0.1364.97, macOS before 25.0.1364.99) is affected by an integer overflow in blob handling, leading to possible denial of service or other impact. The issue is disclosed in the Chrome vulnerability set and is reflected in OpenVAS/Nessus entries...
CVE-2013-0895
Google Chrome/Crome-derived browser on Linux and macOS has CVE-2013-0895 (and related 2013-08x family) due to Incorrect path handling in file copying. OpenSUSE openSUSE-SU-2013:0454-1 documents this CVE as a High-severity issue and notes a fix in the Chromium update path, with the 27.x line addre...
CVE-2025-10500
Concretely affected: Google Chrome Dawn component, with vulnerability CVE-2025-10500 in Chrome prior to 140.0.7339.185. Root cause is a Use After Free in Dawn that can lead to heap corruption when processing crafted HTML pages. Impact is high (remote code execution potential) per the CVE entry. R...
CVE-2025-8581
CVE-2025-8581 affects Google Chrome/Chromium where an inappropriate Extension implementation prior to 139.0.7258.66 can allow a remote attacker—who lures a user into specific UI gestures via a crafted HTML page—to leak cross-origin data. The CVSS 3.1 base score is 4.3 (Medium); impact is limited ...
CVE-2026-11028
Google Chrome on Linux and ChromeOS is affected by CVE-2026-11028 due to a use-after-free in the Media component, allowing a remote attacker who compromises the renderer to run arbitrary code in the sandbox via a crafted HTML page. The issue is instead mitigated in versions newer than 149.0.7827....
CVE-2026-11029
CVE-2026-11029 affects Google Chrome for Android prior to 149.0.7827.53. The issue is caused by insufficient validation of untrusted input in the Drag and Drop path, which could allow a renderer process that’s already been compromised to potentially escape the browser sandbox via a crafted HTML p...
CVE-2026-11258
This CVE (CVE-2026-11258) affects Google Chrome’s File System Access and is due to an inappropriate implementation that allows a remote attacker to bypass discretionary access control when a user is persuaded by a crafted HTML page to perform specific UI gestures. Affected software: Chrome prior ...
CVE-2026-11281
CVE-2026-11281 is a local vulnerability affecting Google Chrome on Windows, where an integer overflow in Chromoting could allow a local attacker to read potentially sensitive data from process memory via a crafted ETW event. The issue is described as having low Chromium security severity, with a ...