CVE-2026-17709

CVE-2026-17709 describes a race in Downloads in Google Chrome on macOS prior to 151.0.7922.72 that could allow a remote attacker who has compromised the renderer process to perform a sandbox escape via a crafted HTML page. The description notes a Chromium security severity of High/CRITICAL and re...

CVE-2026-17802

Vulnerability summary (CVE-2026-17802) : Side-channel information leakage in the GPU of Google Chrome on Android, prior to 151.0.7922.72. A remote attacker could leak cross-origin data via a crafted HTML page, indicating a confidentiality impact. The issue is associated with Chrome/Chromium and i...

CVE-2026-17844

CVE-2026-17844 affects Google Chrome (Cast component) with insufficient validation of untrusted input, allowing a local-network attacker to leak cross-origin data through malicious traffic. The public descriptions consistently cite the Cast feature as the vulnerable surface, with the issue existi...

CVE-2026-17881

The CVE-2026-17881 entry describes an Integer overflow in WebXR affecting Google Chrome before 151.0.7922.72. A remote attacker could execute arbitrary code inside the sandbox via a crafted HTML page. Affected component: WebXR in Chrome (Chromium base). Impacted versions are prior to 151.0.7922.7...

CVE-2011-0481

CVE-2011-0481 : Buffer overflow in Google Chrome before 8.0.552.237 and Chrome OS before 8.0.552.344 allows remote attackers to cause a denial of service or possibly other impact via vectors related to PDF shading. Affected software is Google Chrome and Chrome OS (versions cited in the entry). Th...

CVE-2011-0484

CVE-2011-0484 affects Google Chrome (before 8.0.552.237) and Chrome OS (before 8.0.552.344). The issue arises from improper DOM node removal, enabling denial of service or unspecified impact via a stale rendering node. NVD assigns a base score of 7.5 ( HIGH ) with network/low complexity exploit c...

CVE-2011-0783

CVE-2011-0783 is a Google Chrome/Chromium vulnerability (before 9.0.597.84) described as an unspecified flaw that allows user-assisted remote attackers to cause a denial of service (application crash) via vectors involving a “bad volume setting.” Multiple OpenVAS/Debian entries corroborate Chrome...

CVE-2011-1111

CVE-2011-1111 affects Google Chrome before 9.0.597.107. The issue arises from improper implementation of forms controls, enabling a remote attacker to cause a denial of service (application crash) or possibly other unspecified impact via unknown vectors. Connected documents confirm Chrome is vuln...

CVE-2011-1300

The CVE-2011-1300 entry affects ANGLE’s WebGLES library (libGLESv2.dll) used by Mozilla Firefox 4.x on Windows and by Chrome’s GPU process, due to an off-by-three error in Program::getActiveUniformMaxLength. This allows remote code execution via unspecified vectors. Public sources indicate Chrome...

CVE-2011-1437

Google Chrome prior to 11.0.696.57 is affected by CVE-2011-1437 due to integer overflows in float rendering, exploitable remotely to cause a denial of service and possibly other impact. The vulnerability is part of a set of issues fixed in Chrome 11.0.696.57 (threat posts and CVE listings confirm...

CVE-2011-1691

The CVE-2011-1691 issue affects WebKit’s CSS Core (CSSComputedStyleDeclaration.cpp) in WebCore, where counterToCSSValue mishandles access to counterIncrement and counterReset from getComputedStyle data. It permits remote attackers to trigger a denial-of-service (NULL pointer dereference and crash...

CVE-2011-1807

CVE-2011-1807 is associated with Google Chrome versions prior to 11.0.696.71. The vulnerability stems from how the browser handles blobs, enabling a remote attacker to trigger an out-of-bounds write and execute arbitrary code via unspecified vectors. The issue is documented as a high-severity, ne...

CVE-2011-2342

Google Chrome (before 12.0.742.91) is affected by CVE-2011-2342 due to a DOM implementation flaw that allows a remote attacker to bypass the Same Origin Policy. The vulnerability is described as a Same Origin bypass in the DOM, with a medium–high risk in public listings and a CVSS base score of 7...

CVE-2011-2824

The CVE-2011-2824 entry relates to a use-after-free vulnerability in Google Chrome before 13.0.782.215. The issue enables remote attackers to cause a denial of service or potentially other unspecified impacts via vectors involving counter nodes. Affected product is Google Chrome; the root cause i...

CVE-2011-2826

CVE-2011-2826 affects Google Chrome prior to 13.0.782.215. The vulnerability enables remote attackers to bypass the Same Origin Policy via vectors related to empty origins, potentially compromising cross-origin protections. The provided documents do not include specific exploit details, affected ...

CVE-2011-2830

Technical details about CVE-2011-2830 are not present in the provided connected documents. The description only reiterates that Google V8 in Chrome before 14.0.835.163 is affected. Monitor for updates from vendor/security advisories.

CVE-2011-2836

CVE-2011-2836 (Google Chrome): Affects Google Chrome prior to 14.0.835.163. The issue arises because Chrome does not require Infobar interaction before using the Windows Media Player plug‑in, enabling remote attackers to cause an unspecified impact via crafted Flash content. The CVSSv2 base score...

CVE-2011-3020

CVE-2011-3020 affects Google Chrome’s Native Client validator, with the vulnerability described as unspecified and impact/attack vector unknown in Chrome prior to 17.0.963.56. The provided documents confirm the affected component (Native Client validator) and a pre-patch version, but do not discl...

CVE-2011-3052

CVE-2011-3052 involves memory corruption in the WebGL canvas handling of Chromium/Chrome. The issue arises from the WebGL implementation not properly handling CANVAS elements, enabling a remote attacker to cause a denial of service (memory corruption) and potentially other unspecified impacts via...

CVE-2013-0895

Google Chrome/Crome-derived browser on Linux and macOS has CVE-2013-0895 (and related 2013-08x family) due to Incorrect path handling in file copying. OpenSUSE openSUSE-SU-2013:0454-1 documents this CVE as a High-severity issue and notes a fix in the Chromium update path, with the 27.x line addre...

CVE-2017-15401

The CVE-2017-15401 entry describes a memory corruption bug in WebAssembly via V8 in Google Chrome prior to 62.0.3202.62, enabling out-of-bounds read/write and remote code execution in the sandbox through a crafted HTML page. Connected sources corroborate the Chrome version boundary and provide pu...

CVE-2018-20069

Affected product: Google Chrome for iOS. Vulnerability in the Navigation module (top-frame navigation to data URLs) due to failure to prevent navigation, allowing a remote attacker to confuse the user about the page origin via a crafted HTML page. Impact as stated includes user confusion about or...

CVE-2025-10500

Concretely affected: Google Chrome Dawn component, with vulnerability CVE-2025-10500 in Chrome prior to 140.0.7339.185. Root cause is a Use After Free in Dawn that can lead to heap corruption when processing crafted HTML pages. Impact is high (remote code execution potential) per the CVE entry. R...

CVE-2025-13639

Summary: CVE-2025-13639 is an issue in the WebRTC implementation of Google Chrome/Chromium. Affected component: WebRTC in Chrome/Chromium prior to version 143.0.7499.41. Impact: Remote attacker could cause arbitrary read/write via a crafted HTML page (confidentiality and integrity impact; availab...

CVE-2026-10972

Use-after-free in Ozone within Google Chrome on Linux, fixed by patch to 149.0.7827.53 or newer. The flaw could allow a remote attacker to escape the sandbox via a crafted HTML page. Affected component: Ozone in Chrome; root cause: use-after-free. Impact: high (sandbox escape, remote code executi...

CVE-2026-11167

CVE-2026-11167 affects WebView in Google Chrome on Android, prior to version 149.0.7827.53. The issue is described as an “inappropriate implementation in WebView” that could allow a remote attacker who has compromised the renderer process to achieve a sandbox escape via a crafted HTML page. The r...

CVE-2026-11683

CVE-2026-11683 affects Google Chrome’s WebCodecs. The root cause is a use-after-free in WebCodecs that allows a remote attacker to execute arbitrary code inside a sandbox via a crafted HTML page. The vulnerability is in Chrome versions prior to 149.0.7827.103 (Chromium-based). Impact is described...

CVE-2026-8554

CVE-2026-8554 is a type confusion flaw in the ANGLE component of the Chromium-based Google Chrome browser on Windows. The issue allows a remote attacker who has compromised a renderer process to trigger an out-of-bounds memory write via a crafted HTML page, due to a flaw in ANGLE’s handling of da...

CVE-2026-9969

CVE-2026-9969 affects the ANGLE component in Google Chrome (Chromium-based). Description: Insufficient validation of untrusted input in ANGLE allows remote code execution via a crafted HTML page, with Chromium severity high. The public records indicate the issue exists in Chrome builds prior to 1...

CVE-2026-9973

CVE-2026-9973 is an out-of-bounds write in the V8 engine of Google Chrome. A remote attacker could execute arbitrary code inside the Chrome sandbox via a crafted HTML page on affected Chrome builds prior to 148.0.7778.216. Remediation is to update Chrome to 148.0.7778.216 or newer (Chrome stable ...

CVE-2026-9983

Moderate confidence CVE-2026-9983 affects Google Chrome’s Skia component. A type confusion flaw in Skia prior to Chrome 148.0.7778.216 could allow a remote attacker to run arbitrary code inside the browser sandbox via a crafted HTML page. From the connected sources, the issue is described as a ty...

CVE-2026-9994

CVE-2026-9994 affects Google Chrome on Windows due to a use-after-free in Chrome’s Core, allowing a renderer-compromised attacker to potentially escape the sandbox via a crafted HTML page. The vulnerability is triggered by an issue in Core that existed prior to version 148.0.7778.216. Impact is h...

CVE-2010-2645

CVE-2010-2645 applies to Google Chrome prior to 5.0.375.99, where WebGL usage could trigger an out-of-bounds read leading to a denial of service. The issue is described as an unspecified vulnerability with unknown vectors, affecting Chrome’s WebGL handling. Public references in OpenVAS and third-...

CVE-2010-3415

CVE-2010-3415 affects Google Chrome versions before 6.0.472.59; the flaw is in Geolocation handling that could cause memory corruption and a denial of service (or other unspecified impact) via unknown vectors. The connected documents also reference overlapping use-after-free Geolocation issues in...

CVE-2010-4574

CVE-2010-4574 affects Google Chrome (before 8.0.552.224) and Chrome OS (before 8.0.552.343) on 64-bit Linux. The vulnerability lies in Pickle::Pickle (base/pickle.cc), where incorrect pointer arithmetic can bypass message deserialization validation, enabling remote input to cause denial of servic...

CVE-2011-0479

Google Chrome (Windows/Linux/macOS) before 8.0.552.237 and Chrome OS before 8.0.552.344 are affected by CVE-2011-0479, a vulnerability in extensions handling that allows remote attackers to cause a denial of service via a crafted extension that triggers an uninitialized pointer. The issue stems f...

CVE-2011-0782

Google Chrome before 9.0.597.84 on macOS X is affected by an unspecified flaw in the Mac OS X 10.5 SSL libraries that can be triggered remotely to crash the application (denial of service). The NVD record indicates a network-based, low complexity attack with no authentication, resulting in partia...

CVE-2011-0982

CVE-2011-0982 describes a use-after-free vulnerability in Google Chrome prior to 9.0.597.94, exploitable via SVG font face handling that could cause a denial of service and potentially other impacts. Affected product: Google Chrome (before 9.0.597.94). Root cause: use-after-free in the SVG font f...

CVE-2011-1124

CVE-2011-1124 is a use-after-free vulnerability in Google Chrome prior to 9.0.597.107 that can allow remote attackers to cause a denial of service or potentially other impact via vectors related to blocked plug-ins. The associated sources describe the issue consistently; no specific exploit detai...

CVE-2011-1191

Google Chrome is affected by CVE-2011-1191 (use-after-free in the handling of DOM URLs) prior to version 10.0.648.127. The issue can allow remote denial of service or possibly other impact. The connected documents specify the vulnerable component as Chrome (DOM URL handling) and the affected rang...

CVE-2011-1195

CVE-2011-1195 concerns a use-after-free in Google Chrome prior to 10.0.648.127 related to document script lifetime handling. The vulnerability can allow remote attackers to cause a denial of service or possibly have unspecified other impact. The available connected documents confirm the affected ...

CVE-2011-1304

Google Chrome 11.0.696.57 patch (April 2011) fixed multiple vulnerabilities, including CVE-2011-1304: a pop-up blocker bypass via plug-ins. The issue affected Chrome before 11.0.696.57 and could be exploited remotely through plug-in interactions, potentially bypassing the pop-up blocker. The patc...

CVE-2011-1441

CVE-2011-1441 affects Google Chrome

CVE-2011-1800

CVE-2011-1800 affects Google Chrome’s WebKit/WebCore SVG Filters: multiple integer overflows in the SVG Filters implementation may allow remote denial of service and other impact. Affected component is WebCore/SVG Filters in WebKit used by Chrome prior to 11.0.696.68. Exploitation details are not...

CVE-2011-1809

CVE-2011-1809 is a Google Chrome use-after-free vulnerability in the accessibility feature reported as affecting Chrome prior to version 12.0.742.91. The flaw could allow remote attackers to cause a denial of service and potentially other impact via unknown vectors. Connected sources identify the...

CVE-2011-2361

Google Chrome before 13.0.782.107 has a vulnerability in the Basic Authentication dialog where improper handling of strings could allow remote attackers to capture credentials via a crafted web site (CVE-2011-2361). The issue is tied to Chrome’s authentication UI/Basic Auth dialog, with corrobora...

CVE-2011-2791

The CVE-2011-2791 vulnerability affects Google Chrome’s ICU functionality prior to 13.0.782.107, where an out-of-bounds write in ICU can be triggered by unknown vectors, potentially allowing a denial of service or other unspecified impacts. Affected component: ICU integration in Chrome. Remediati...

CVE-2011-2835

Technical details for CVE-2011-2835 are not publicly provided in the connected documents. OpenVAS/Gentoo entries reference the CVE but do not reveal affected products, root cause, or remediation. Monitor for updates.

CVE-2011-2838

CVE-2011-2838 affects Google Chrome prior to 14.0.835.163. The vulnerability stems from improper MIME-type handling when loading plug-ins, with unspecified impact and remote attack vectors as described in the Initial Description. Connected documents corroborate that this CVE is part of Chrome/Chr...

CVE-2011-3017

CVE-2011-3017 is a use-after-free vulnerability in Google Chrome prior to 17.0.963.56 related to database handling that can cause denial of service or possibly other impact. The connected documents indicate Chrome versions before 17.0.963.56 are affected; remediation involves updating Chrome to 1...