CVE-2010-1230

CVE-2010-1230 affects Google Chrome prior to 4.1.249.1036. The issue concerns incorrect behavior when attempting to delete Web SQL Databases and clear STS state. The impact is described as unspecified; no exploit vectors are provided in the documents. Severity is CVSS v2 base score 10.0 (HIGH). N...

CVE-2010-2646

CVE-2010-2646 affects Google Chrome up to version 5.0.375.99, where sandboxing of IFRAME elements was not properly isolated. This memory-corruption/remote-vector issue has high severity (CVSS 9.3) with unspecified impact described in the entry. The available connected documents indicate a vendor ...

CVE-2010-3413

Google Chrome before 6.0.472.59 contains an unspecified vulnerability in the pop-up blocking functionality that could allow remote attackers to cause a denial of service (application crash) via unknown vectors. The OpenVAS entries reference multiple vulnerabilities in Chrome 6.0.472.59 era, but d...

CVE-2011-0777

CVE-2011-0777 affects Chromium/Google Chrome before 9.0.597.84. A use-after-free in image loading can allow remote attackers to cause a denial of service and possibly other impact. Several connected sources (e.g., Debian DSA 2166-1 and OpenVAS entries) corroborate the vuln in Chromium/Chrome arou...

CVE-2011-1291

CVE-2011-1291 affects Google Chrome versions older than 10.0.648.204. The vulnerability stems from improper handling of base strings, described as a “buffer error,” which could allow remote attackers to trigger a denial of service and potentially other impact via unknown vectors. Public reference...

CVE-2011-1435

Google Chrome vulnerability CVE-2011-1435 affects Chrome before 11.0.696.57, where the extensions tabs permission can be abused to read local files via a crafted extension. Root cause: improper handling of the tabs permission by extensions. Impact is a read of local files (confidentiality). Remed...

CVE-2011-1810

CVE-2011-1810 affects Google Chrome's CSS implementation prior to version 12.0.742.91, enabling information disclosure of visit history via unspecified vectors. The issue is tracked in multiple security feeds; OpenVAS/OpenVAS 802102/802103 and ThreatPost reference Chrome 12.0.742.91 as the fix. T...

CVE-2011-1814

CVE-2011-1814 affects Google Chrome prior to version 12.0.742.91. OpenVAS entries map CVE-2011-1814 to multiple Jun 2011 Chrome vulnerabilities, including a read-from-uninitialized-pointer issue that can cause a denial of service. The associated OpenVAS data list Chrome variants on Windows/Linux ...

CVE-2011-2348

CVE-2011-2348 affects Google Chrome with the V8 engine prior to 12.0.742.112. Root cause: an incorrect bounds check in V8. Impact: remote denial of service and possibly unspecified other effects via unknown vectors. Remediation: upgrade to a Chrome/Chromium version released after 12.0.742.112 (up...

CVE-2011-2804

CVE-2011-2804 affects Google Chrome up to version 13.0.782.107, where the PDF viewer mishandles nested functions in PDF documents, enabling remote crashes or potentially other impact via crafted files. For Chrome, this was associated with a Medium (CVSS v2 4.3) severity and was observable as an a...

CVE-2011-2829

CVE-2011-2829 affects Google Chrome prior to 13.0.782.215 on 32-bit platforms, via an integer overflow in a uniform arrays path. Impact: remote denial of service and possibly other unspecified effects. Exploitation details are not provided in the documents. Remediation: update to Chrome 13.0.782....

CVE-2011-2837

CVE-2011-2837 affects Google Chrome on Linux prior to 14.0.835.163. The root cause described in the initial entry is that Chrome did not use PIC and PIE options for position-independent code, with unspecified impact and attack vectors. The connected documents provide corroboration across OpenVAS/...

CVE-2011-2839

CVE-2011-2839 affects Google Chrome’s Linux PDF handling: the PDF implementation does not properly use memset, enabling remote DoS and possibly other impact via unknown vectors. A fix is available in Chrome 13.0.782.215 and later.

CVE-2011-2852

The CVE-2011-2852 entry concerns Google Chrome's V8 engine, where an Off-by-one error in V8 (as shipped in Chrome prior to 14.0.835.163) may allow a remote attacker to cause a denial of service or potentially other impact via unknown vectors. Affected product/component: Google Chrome using V8. Ro...

CVE-2011-2877

Technical details about CVE-2011-2877 are not publicly provided in the supplied documents. The connected sources reference this CVE among broader Apple/Chromium vulnerability collections but do not specify affected component, impact, exploit vectors, or remediation.

CVE-2011-3025

CVE-2011-3025 affects Google Chrome prior to 17.0.963.56; the issue is a parsing vulnerability in H.264 data that can cause a remote denial of service via an out-of-bounds read. No exploitation details are provided in the sources beyond this description. A fix is available in Chrome 17.0.963.56 a...

CVE-2011-3040

Google Chrome before 17.0.963.65 is affected by CVE-2011-3040 due to improper handling of text, enabling a remote attacker to cause a denial of service via a crafted document (out-of-bounds read). The vulnerability is addressed by updating to Chrome 17.0.963.65 or later (per the public Chrome upd...

CVE-2011-3072

CVE-2011-3072 affects Google Chrome prior to 18.0.1025.151, where remote attackers could bypass the Same Origin Policy via popup-related vectors. The issue is part of a set of Chromium/Chrome vulnerabilities; impact includes partial confidentiality, integrity, and availability. Remediation: updat...

CVE-2025-12727

The CVE-2025-12727 entry concerns an improper implementation in V8 used by Google Chrome/Chromium, allowing heap corruption via a crafted HTML page. Affected component: V8 within Chromium/Chromium-based browsers; root cause: insecure/inconsistent handling in V8 leading to heap corruption. Impact ...

CVE-2026-10955

Summary (CVE-2026-10955): Type Confusion in ANGLE affecting Google Chrome on Windows, prior to version 149.0.7827.53. The vulnerability could allow a remote attacker to perform out-of-bounds memory access via a crafted HTML page. The issue is documented across multiple sources (NVD, EUVD, CIRCL, ...

CVE-2026-11002

CVE-2026-11002 : Use-after-free in Chrome Autofill (Chromium) prior to 149.0.7827.53 when a renderer process is compromised, potentially enabling a sandbox escape via a crafted HTML page. Affected: Chromium-based Chrome. Impact: remote code execution with sandbox break. Remediation: upgrade to Ch...

CVE-2026-11007

CVE-2026-11007 describes a vulnerability in WebView for Google Chrome on Android, where insufficient validation of untrusted input in WebView prior to 149.0.7827.53 enabled a renderer-compromised attacker to leak cross-origin data via a crafted HTML page. The connected Debian/OpenSUSE advisories ...

CVE-2026-11028

Google Chrome on Linux and ChromeOS is affected by CVE-2026-11028 due to a use-after-free in the Media component, allowing a remote attacker who compromises the renderer to run arbitrary code in the sandbox via a crafted HTML page. The issue is instead mitigated in versions newer than 149.0.7827....

CVE-2026-11061

CVE-2026-11061 involves a Type Confusion in ANGLE used by Google Chrome/Chromium before version 149.0.7827.53, which could enable a remote attacker to perform a sandbox escape via a crafted HTML page. Affected software is Google Chrome/Chromium with ANGLE integration; the underlying issue is type...

CVE-2026-11697

CVE-2026-11697 affects Google Chrome’s UI layer built on Chromium, where insufficient validation of untrusted input could enable a remote attacker to escape the sandbox via a crafted HTML page. The issue is described as a High-severity vulnerability, with exploitation linked to messages that prev...

CVE-2026-14098

CVE-2026-14098 affects Google Chrome and other Chromium-based browsers due to an inappropriate CSS implementation that allows a remote attacker to leak cross-origin data via a crafted HTML page. Affected version range is Chrome prior to 150.0.7871.47. Impact is cross-origin data leakage; exploita...

CVE-2026-14427

CVE-2026-14427 : Heap buffer overflow in Skia used by Google Chrome prior to 150.0.7871.46. A remote attacker who already compromised the renderer could potentially escape the sandbox via a crafted HTML page. Affected: Chrome/Skia stack (Chrome 150 pre-release fix applies). Root cause: heap buffe...

CVE-2026-17951

CVE-2026-17951 is a heap buffer overflow in Chrome’s WebRTC that allows a remote attacker to read out-of-bounds memory via a crafted HTML page. Affected product: Google Chrome prior to 151.0.7922.72 (WebRTC component). Underlying cause: heap buffer overflow in WebRTC. Impact: confidentiality, int...

CVE-2026-17998

This CVE (CVE-2026-17998) affects Google Chrome extensions UI handling. Description: Incorrect security UI in Extensions allowed UI spoofing if a user was convinced to install a malicious extension. Affected product/version: Google Chrome prior to 151.0.7922.72. Underlying cause: insecure Chrome ...

CVE-2026-7352

CVE-2026-7352 is a use-after-free in the Media component of Google Chrome on Android, prior to version 147.0.7727.138. The vulnerability could be triggered by a crafted HTML page by a remote attacker who had compromised the renderer process, potentially enabling a sandbox escape. Affected product...

CVE-2026-7979

CVE-2026-7979 concerns Google Chrome: an inappropriate implementation in Media allows a remote attacker to leak cross-origin data via a crafted HTML page, before Chrome 148.0.7778.96. Connected sources confirm the vulnerability in Chrome’s Media handling and list the fixed version 148.0.7778.96 (...

CVE-2026-8566

The CVE-2026-8566 entry concerns an insufficient policy enforcement flaw in the Payments component of Google Chrome on Android, arising from a policy enforcement bug in Chromium. The vulnerability allows a remote attacker to bypass discretionary access control through a crafted HTML page. Affecte...

CVE-2026-8580

CVE-2026-8580 describes a use-after-free in Mojo of Google Chrome before 148.0.7778.168. The underlying flaw is a use-after-free in Mojo that could allow a remote attacker to potentially perform a sandbox escape via a crafted HTML page. The issue is classified with a Chromium-based severity of Me...

CVE-2026-9878

CVE-2026-9878 is a use-after-free in ANGLE within Google Chrome prior to 148.0.7778.216, allowing a remote attacker to execute arbitrary code inside the browser sandbox. The vulnerability affects ANGLE components used by Chrome; the public details confirm a sandbox escape risk via a crafted HTML ...

CVE-2026-9888

The CVE-2026-9888 entry affects Google Chrome WebView on Android and is caused by a use-after-free in the WebView component, allowing a remote attacker who compromised the renderer process to potentially escape the sandbox via a crafted HTML page. The connected sources confirm the impact as a san...

CVE-2026-9944

CVE-2026-9944 : Uninitialized use in ANGLE within Google Chrome/Chromium allows a remote attacker who has compromised the renderer process to leak cross-origin data via a crafted HTML page. Affected: ANGLE in Chrome/Chromium prior to 148.0.7778.216. Impact: data leakage; no other impacts confirme...

CVE-2026-9993

CVE-2026-9993 affects Google Chrome (Chromium-based) and its Views component. The flaw is a use-after-free in Views that could allow a remote attacker with renderer access to escape the sandbox via a crafted PDF file. Affected version range is Chrome prior to 148.0.7778.216. If exploiting, the im...

CVE-2011-0475

Google Chrome before 8.0.552.237 and Chrome OS before 8.0.552.344 are affected by a use-after-free vulnerability in PDF handling, enabling remote denial of service or possibly other impact. Root cause: use-after-free in the PDF document path. Affected products/components: Google Chrome (pre-8.0.5...

CVE-2011-1198

The CVE-2011-1198 entry concerns Google Chrome’s video functionality prior to version 10.0.648.127. The vulnerability arises from a malformed out-of-bounds structure which can be triggered by unspecified vectors, leading to a denial-of-service and possibly other unspecified impacts. The provided ...

CVE-2011-1294

The CVE-2011-1294 entry corresponds to Google Chrome before version 10.0.648.204, where improper handling of CSS token sequences could cause a denial of service and possibly other impact via a stale pointer. Public records (NVD/OpenVAS entries) corroborate Chrome-related vulnerabilities in Mar 20...

CVE-2011-1302

CVE-2011-1302 affects Google Chrome’s GPU process; a heap-based buffer overflow in the GPU process (Chrome before 10.0.648.205) allows remote code execution via unknown vectors. The Ubuntu OSV entry corroborates the heap-based overflow. Remediation: upgrade to Chrome 10.0.648.205 or later (the fi...

CVE-2011-1439

CVE-2011-1439 affects Google Chrome on Linux prior to 11.0.696.57. The vulnerability arises from improper isolation of renderer processes, with unspecified impact and remote attack vectors described in the entry. The issue was fixed in Chrome 11.0.696.57 (stable update), per Google's Chrome relea...

CVE-2011-1448

Google Chrome (Windows/Linux/macOS) prior to 11.0.696.57 is affected by CVE-2011-1448 due to incorrect height calculations in a rendering-related component, enabling remote attackers to cause a denial of service and possibly other impact via a stale pointer. The issue is identified in the Chrome ...

CVE-2011-1819

Google Chrome (before 12.0.742.91) is vulnerable to extension-injected access into chrome:// pages. The connected OpenVAS entries enumerate CVE-2011-1819 as part of a multi‑vulnerability set titled “Google Chrome Multiple Vulnerabilities (Jun 2011),” with the underlying issue described as extensi...

CVE-2011-2349

CVE-2011-2349 is a use-after-free vulnerability in Google Chrome prior to version 12.0.742.112 . The issue occurs in text selection handling and could allow a remote attacker to cause a denial of service or potentially other unspecified impacts. The vulnerability is exploitable over the network w...

CVE-2011-2862

CVE-2011-2862 concerns Google V8 in Chrome before 14.0.835.163, where access to built-in objects is not properly restricted. Affected software is the V8 engine as used by Chrome; root cause and precise impact are not detailed in the provided documents. No exploitation details are given here, and ...

CVE-2011-2864

CVE-2011-2864 affects Google Chrome prior to 14.0.835.163; improper handling of Tibetan characters enables a remote denial-of-service via an out-of-bounds read (vectors not specified). A fix is provided in the Chrome stable update 14.0.835.163.

CVE-2011-2874

Technical details for CVE-2011-2874 are not publicly provided in the supplied documents. No explicit affected products, versions, impact, or remediation are stated here. Monitor for updates.

CVE-2011-3904

CVE-2011-3904 is a use-after-free in Chrome/Chromium bidi handling (Google Chrome before 16.0.912.63). The OpenVAS/Gentoo entries corroborate a high-severity flaw with potential DoS/impact, but explicit exploitation details are not provided in the documents. Remediation per sources: upgrade to Ch...

CVE-2011-3907

Chromium and V8 are affected by multiple vulnerabilities including CVE-2011-3907 (URL bar spoofing) as part of the Chromium/Chromium-based web engine family. Public entries in Gentoo GLSA-201201-03 describe that a number of issues could allow a context‑dependent attacker to lure a user to a craft...