CVE-2026-17696

CVE-2026-17696 affects Google Chrome (Media) with a side-channel information leakage that enables a cross-origin data leak via a crafted HTML page. The description in the sources notes this as a High-severity issue and lists the fixed version as Chrome 151.0.7922.72 (stable channel). Corroboratin...

CVE-2011-1304

Google Chrome 11.0.696.57 patch (April 2011) fixed multiple vulnerabilities, including CVE-2011-1304: a pop-up blocker bypass via plug-ins. The issue affected Chrome before 11.0.696.57 and could be exploited remotely through plug-in interactions, potentially bypassing the pop-up blocker. The patc...

CVE-2011-1800

CVE-2011-1800 affects Google Chrome’s WebKit/WebCore SVG Filters: multiple integer overflows in the SVG Filters implementation may allow remote denial of service and other impact. Affected component is WebCore/SVG Filters in WebKit used by Chrome prior to 11.0.696.68. Exploitation details are not...

CVE-2011-1809

CVE-2011-1809 is a Google Chrome use-after-free vulnerability in the accessibility feature reported as affecting Chrome prior to version 12.0.742.91. The flaw could allow remote attackers to cause a denial of service and potentially other impact via unknown vectors. Connected sources identify the...

CVE-2011-2345

CVE-2011-2345 affects Google Chrome’s NPAPI implementation prior to 12.0.742.112, where strings are not handled correctly, allowing remote attackers to trigger an out-of-bounds read and cause a denial of service via unspecified vectors. Documented references in OpenVAS/NVD indicate this CVE is pa...

CVE-2011-2361

Google Chrome before 13.0.782.107 has a vulnerability in the Basic Authentication dialog where improper handling of strings could allow remote attackers to capture credentials via a crafted web site (CVE-2011-2361). The issue is tied to Chrome’s authentication UI/Basic Auth dialog, with corrobora...

CVE-2011-2791

The CVE-2011-2791 vulnerability affects Google Chrome’s ICU functionality prior to 13.0.782.107, where an out-of-bounds write in ICU can be triggered by unknown vectors, potentially allowing a denial of service or other unspecified impacts. Affected component: ICU integration in Chrome. Remediati...

CVE-2011-2835

Technical details for CVE-2011-2835 are not publicly provided in the connected documents. OpenVAS/Gentoo entries reference the CVE but do not reveal affected products, root cause, or remediation. Monitor for updates.

CVE-2011-2838

CVE-2011-2838 affects Google Chrome prior to 14.0.835.163. The vulnerability stems from improper MIME-type handling when loading plug-ins, with unspecified impact and remote attack vectors as described in the Initial Description. Connected documents corroborate that this CVE is part of Chrome/Chr...

CVE-2011-3017

CVE-2011-3017 is a use-after-free vulnerability in Google Chrome prior to 17.0.963.56 related to database handling that can cause denial of service or possibly other impact. The connected documents indicate Chrome versions before 17.0.963.56 are affected; remediation involves updating Chrome to 1...

CVE-2011-3884

CVE-2011-3884 affects Google Chrome up to version before 15.0.874.102. The vulnerability stems from timing issues during DOM traversal, allowing a remote attacker to cause a denial of service or potentially invoke unspecified other impact via a crafted document. The connected documents do not pro...

CVE-2011-3909

Technical details for CVE-2011-3909 are not publicly provided in the connected documents. Monitor for updates.

CVE-2011-3910

CVE-2011-3910 concerns Google Chrome/Chromium prior to 16.0.912.63, where improper handling of YUV video frames could enable a remote attacker to trigger an out-of-bounds read and cause a denial of service. The connected advisories indicate this vulnerability is addressed by updating Chromium to ...

CVE-2011-3957

CVE-2011-3957 describes a use-after-free in Chrome’s garbage-collection for PDF handling, allowing a remote attacker to cause a denial of service and potentially other impact. The vulnerability affects Google Chrome prior to 17.0.963.46. Multiple connected advisories and OpenVAS entries corrobora...

CVE-2024-7020

CVE-2024-7020 affects Google Chrome (Autofill) via an incorrect UI handling in Chromium before 124.0.6367.60. A remote attacker could induce UI spoofing by a crafted HTML page; CVSS indicates network attack vector, low impact to confidentiality/integrity, with user interaction required and UI acc...

CVE-2025-12428

CVE-2025-12428 describes a Type Confusion in V8 within Google Chrome/Chromium before version 142.0.7444.59, enabling a remote attacker to perform arbitrary read/write through a crafted HTML page. The issue affects Chromium-based browsers (Chrome/Chromium) and is classified with high severity and ...

CVE-2025-12430

CVE-2025-12430 affects Google Chrome/Chromium where an object lifecycle issue in Media could enable UI spoofing via a crafted HTML page in versions prior to 142.0.7444.59. Connected advisories show updated Chromium/CEF packages: Fedora updates reference chromium/cef builds reaching 142.0.7444.162...

CVE-2025-13230

CVE-2025-13230: Type Confusion in V8 within Google Chrome before 142.0.7444.59 may allow a remote attacker to cause heap corruption via a crafted HTML page. Affected product: Google Chrome (V8 engine). Impact as described: high severity, potential code execution through heap corruption. Remediati...

CVE-2025-8576

CVE-2025-8576: Use-after-free in Chrome Extensions (Chromium) prior to 139.0.7258.66 can lead to heap corruption via a crafted extension. Affected software is Google Chrome/Chromium extensions; exploitation would require remote access with user interaction. Remediation across advisories shows pat...

CVE-2025-8581

CVE-2025-8581 affects Google Chrome/Chromium where an inappropriate Extension implementation prior to 139.0.7258.66 can allow a remote attacker—who lures a user into specific UI gestures via a crafted HTML page—to leak cross-origin data. The CVSS 3.1 base score is 4.3 (Medium); impact is limited ...

CVE-2026-10882

CVE-2026-10882 affects Google Chrome (Chromium-derived) prior to version 149.0.7827.53. The issue is a use-after-free in the Network component, enabling a remote attacker to execute arbitrary code via a crafted HTML page (Chrome security severity: Critical). The most relevant public detail is tha...

CVE-2026-10897

CVE-2026-10897 affects Google Chrome (GPU component) with the root cause described as an inappropriate implementation in the GPU. This could allow a remote attacker to escape the Chrome sandbox via a crafted HTML page. The vulnerability is addressed in the Chrome 149.0.7827.53 stable release (Lin...

CVE-2026-11244

The CVE-2026-11244 entry concerns Google Chrome’s WebAuthentication input validation. Affected component: WebAuthentication in Chrome (prior to 149.0.7827.53). Root cause: insufficient validation of untrusted input, enabling a remote attacker who compromised a renderer process to bypass the same-...

CVE-2026-11667

CVE-2026-11667 affects Google Chrome WebRTC. The vulnerability is an out-of-bounds read in WebRTC that, if the GPU process is compromised, could enable heap corruption via a crafted HTML page. Impacted software: Chrome prior to version 149.0.7827.103. The publicly documented remediation is to upg...

CVE-2026-12462

CVE-2026-12462 is a use-after-free in the Media component of Google Chrome before 149.0.7827.155. An attacker who has compromised the renderer process could trigger a crafted HTML page to execute arbitrary code inside Chrome’s sandbox. The vulnerability is tied to the Chromium-based Media stack a...

CVE-2026-14143

Affected product: Google Chrome on iOS prior to 150.0.7871.47. Issue: Incorrect security UI in Passwords UI that enables UI spoofing via a crafted HTML page. Impact: allows a remote attacker to perform UI spoofing; user interaction is required. Root cause: described as a security UI flaw in the p...

CVE-2026-14154

Summary: CVE-2026-14154 relates to an insecure DevTools implementation in Google Chrome prior to 150.0.7871.47 that could enable UI spoofing when a user is persuaded to install a malicious Chrome extension. Affected software: Google Chrome (DevTools component) prior to version 150.0.7871.47. Root...

CVE-2026-14391

The CVE-2026-14391 entry concerns an integer overflow in ANGLE used by Google Chrome on Windows, prior to version 150.0.7871.46. The vulnerability allows a remote attacker who has already compromised the renderer process to potentially read sensitive data from process memory via a crafted HTML pa...

CVE-2026-14402

CVE-2026-14402 describes an uninitialized use in ANGLE within Google Chrome on Windows, prior to version 150.0.7871.46. The issue allows a remote attacker to potentially read sensitive data from a process's memory via a crafted HTML page. Affected component is ANGLE in Chrome’s Windows build; und...

CVE-2026-14410

CVE-2026-14410 affects Google Chrome’s Skia rendering pipeline. The issue arises from an inappropriate implementation in Skia that, if a renderer process is compromised, enables UI spoofing via a crafted HTML page. Impact is limited to remote UI spoofing with no broader exploit chain described; b...

CVE-2026-15119

CVE-2026-15119 concerns a race condition in Google Chrome’s GetUserMedia that can enable a sandbox escape when an attacker already compromised the renderer process. The vulnerability is associated with Chrome versions prior to 150.0.7871.115, with the 150.0.7871.115 release addressing the issue. ...

CVE-2026-17692

CVE-2026-17692 involves a Use-After-Free in DataTransfer in Google Chrome for Windows, prior to version 151.0.7922.72. The flaw could let a renderer‑process‑hijacked page potentially escape the Chrome sandbox, enabling a remote attacker to impact the host after compromising the renderer. The vuln...

CVE-2026-17741

CVE-2026-17741 refers to insufficient validation of untrusted input in WebView for Google Chrome on Android (and the underlying Chromium WebView component). The vulnerability could enable a remote attacker to perform a sandbox escape via a crafted HTML page, as described for Chrome versions older...

CVE-2026-17886

CVE-2026-17886 : Use-after-free in Google Chrome (Enterprise builds) prior to 151.0.7922.72 can enable a remote attacker to potentially cause heap corruption via a crafted HTML page. Public sources reference Chrome stability updates addressing multiple related subsystems (Dawn, Compositing, Views...

CVE-2026-2648

CVE-2026-2648 describes a heap buffer overflow in PDFium used by Google Chrome before 145.0.7632.109 that allows remote code execution via a crafted PDF file, leading to out-of-bounds memory writes. The vulnerability affects Chromium/PDFium components and is rated High severity (CVSS v3.1: 8.8). ...

CVE-2026-4445

CVE-2026-4445 is a use-after-free in WebRTC in Google Chrome prior to 146.0.7680.153, allowing a remote attacker to potentially cause heap corruption via a crafted HTML page. The issue is tied to Chromium/WebRTC components and is categorized as High severity. Google Chrome released a security upd...

CVE-2026-4447

Concerning CVE-2026-4447, an issue in V8 for Google Chrome prior to 146.0.7680.153 enables remote code execution in the sandbox via a crafted HTML page. Several connected documents confirm affected Software: Google Chrome (V8) prior to 146.0.7680.153; Chromium-based builds and Debian/Fedora advis...

CVE-2026-6296

CVE-2026-6296 is a heap buffer overflow in ANGLE within Google Chrome, prior to version 147.0.7727.101, enabling a remote attacker to potentially escape the sandbox via a crafted HTML page. The issue is addressed in Chrome’s 147.0.7727.101 stable release (and related channel updates), with Debian...

CVE-2026-6300

Google Chrome (Chromium CSS engine) contains a use-after-free in CSS that allows remote code execution inside the sandbox via a crafted HTML page. Affected versions are prior to 147.0.7727.101; remediation is to upgrade to Chrome 147.0.7727.101 or newer as indicated by the referenced Chromium upd...

CVE-2026-6314

CVE-2026-6314 affects Google Chrome’s GPU process. An out-of-bounds write in the GPU code prior to version 147.0.7727.101 could allow a remote attacker with GPU process access to potentially escape the sandbox via a crafted HTML page. Impact is a sandbox escape risk as described in the entry. Aff...

CVE-2026-7955

CVE-2026-7955 refers to an uninitialized use in the GPU path of Google Chrome before Chrome 148.0.7778.96. The issue could allow a remote attacker who has already compromised the renderer process to read potentially sensitive information from process memory via a crafted HTML page. Affected produ...

CVE-2026-8021

CVE-2026-8021 is a UI-based script injection (UXSS) in Google Chrome. Multiple connected sources (OSV/DEBIAN-CVE-2026-8021, PT-2026-38214, PTSecurity) confirm: affecting Google Chrome versions prior to 148.0.7778.96, caused by a vulnerability in the browser UI that could execute arbitrary scripts...

CVE-2010-1230

CVE-2010-1230 affects Google Chrome prior to 4.1.249.1036. The issue concerns incorrect behavior when attempting to delete Web SQL Databases and clear STS state. The impact is described as unspecified; no exploit vectors are provided in the documents. Severity is CVSS v2 base score 10.0 (HIGH). N...

CVE-2010-2646

CVE-2010-2646 affects Google Chrome up to version 5.0.375.99, where sandboxing of IFRAME elements was not properly isolated. This memory-corruption/remote-vector issue has high severity (CVSS 9.3) with unspecified impact described in the entry. The available connected documents indicate a vendor ...

CVE-2010-3413

Google Chrome before 6.0.472.59 contains an unspecified vulnerability in the pop-up blocking functionality that could allow remote attackers to cause a denial of service (application crash) via unknown vectors. The OpenVAS entries reference multiple vulnerabilities in Chrome 6.0.472.59 era, but d...

CVE-2011-0777

CVE-2011-0777 affects Chromium/Google Chrome before 9.0.597.84. A use-after-free in image loading can allow remote attackers to cause a denial of service and possibly other impact. Several connected sources (e.g., Debian DSA 2166-1 and OpenVAS entries) corroborate the vuln in Chromium/Chrome arou...

CVE-2011-1291

CVE-2011-1291 affects Google Chrome versions older than 10.0.648.204. The vulnerability stems from improper handling of base strings, described as a “buffer error,” which could allow remote attackers to trigger a denial of service and potentially other impact via unknown vectors. Public reference...

CVE-2011-1435

Google Chrome vulnerability CVE-2011-1435 affects Chrome before 11.0.696.57, where the extensions tabs permission can be abused to read local files via a crafted extension. Root cause: improper handling of the tabs permission by extensions. Impact is a read of local files (confidentiality). Remed...

CVE-2011-1810

CVE-2011-1810 affects Google Chrome's CSS implementation prior to version 12.0.742.91, enabling information disclosure of visit history via unspecified vectors. The issue is tracked in multiple security feeds; OpenVAS/OpenVAS 802102/802103 and ThreatPost reference Chrome 12.0.742.91 as the fix. T...

CVE-2011-1814

CVE-2011-1814 affects Google Chrome prior to version 12.0.742.91. OpenVAS entries map CVE-2011-1814 to multiple Jun 2011 Chrome vulnerabilities, including a read-from-uninitialized-pointer issue that can cause a denial of service. The associated OpenVAS data list Chrome variants on Windows/Linux ...