CVE-2011-1198

The CVE-2011-1198 entry concerns Google Chrome’s video functionality prior to version 10.0.648.127. The vulnerability arises from a malformed out-of-bounds structure which can be triggered by unspecified vectors, leading to a denial-of-service and possibly other unspecified impacts. The provided ...

CVE-2011-1294

The CVE-2011-1294 entry corresponds to Google Chrome before version 10.0.648.204, where improper handling of CSS token sequences could cause a denial of service and possibly other impact via a stale pointer. Public records (NVD/OpenVAS entries) corroborate Chrome-related vulnerabilities in Mar 20...

CVE-2011-1302

CVE-2011-1302 affects Google Chrome’s GPU process; a heap-based buffer overflow in the GPU process (Chrome before 10.0.648.205) allows remote code execution via unknown vectors. The Ubuntu OSV entry corroborates the heap-based overflow. Remediation: upgrade to Chrome 10.0.648.205 or later (the fi...

CVE-2011-1439

CVE-2011-1439 affects Google Chrome on Linux prior to 11.0.696.57. The vulnerability arises from improper isolation of renderer processes, with unspecified impact and remote attack vectors described in the entry. The issue was fixed in Chrome 11.0.696.57 (stable update), per Google's Chrome relea...

CVE-2011-1448

Google Chrome (Windows/Linux/macOS) prior to 11.0.696.57 is affected by CVE-2011-1448 due to incorrect height calculations in a rendering-related component, enabling remote attackers to cause a denial of service and possibly other impact via a stale pointer. The issue is identified in the Chrome ...

CVE-2011-1819

Google Chrome (before 12.0.742.91) is vulnerable to extension-injected access into chrome:// pages. The connected OpenVAS entries enumerate CVE-2011-1819 as part of a multi‑vulnerability set titled “Google Chrome Multiple Vulnerabilities (Jun 2011),” with the underlying issue described as extensi...

CVE-2011-2349

CVE-2011-2349 is a use-after-free vulnerability in Google Chrome prior to version 12.0.742.112 . The issue occurs in text selection handling and could allow a remote attacker to cause a denial of service or potentially other unspecified impacts. The vulnerability is exploitable over the network w...

CVE-2011-2862

CVE-2011-2862 concerns Google V8 in Chrome before 14.0.835.163, where access to built-in objects is not properly restricted. Affected software is the V8 engine as used by Chrome; root cause and precise impact are not detailed in the provided documents. No exploitation details are given here, and ...

CVE-2011-2864

CVE-2011-2864 affects Google Chrome prior to 14.0.835.163; improper handling of Tibetan characters enables a remote denial-of-service via an out-of-bounds read (vectors not specified). A fix is provided in the Chrome stable update 14.0.835.163.

CVE-2011-2874

Technical details for CVE-2011-2874 are not publicly provided in the supplied documents. No explicit affected products, versions, impact, or remediation are stated here. Monitor for updates.

CVE-2011-3904

CVE-2011-3904 is a use-after-free in Chrome/Chromium bidi handling (Google Chrome before 16.0.912.63). The OpenVAS/Gentoo entries corroborate a high-severity flaw with potential DoS/impact, but explicit exploitation details are not provided in the documents. Remediation per sources: upgrade to Ch...

CVE-2011-3907

Chromium and V8 are affected by multiple vulnerabilities including CVE-2011-3907 (URL bar spoofing) as part of the Chromium/Chromium-based web engine family. Public entries in Gentoo GLSA-201201-03 describe that a number of issues could allow a context‑dependent attacker to lure a user to a craft...

CVE-2011-3921

CVE-2011-3921: A use-after-free in Google Chrome prior to 16.0.912.75 affects the browser’s handling of animation frames, allowing remote-triggered denial of service and potentially other impact. Affected software: Google Chrome (pre-16.0.912.75). Root cause: use-after-free in animation-frame pro...

CVE-2013-0889

CVE-2013-0889 concerns Google Chrome where the browser did not properly enforce a user gesture requirement before proceeding with a file download, potentially enabling remote code execution via a crafted file. The description specifies affected builds: Windows and Linux: before 25.0.1364.97 Mac O...

CVE-2017-5090

CVE-2017-5090 affects Google Chrome on macOS, where the Omnibox failed to enforce domain policy, enabling a remote attacker to spoof domains using a crafted name containing U+0620. Impact is domain spoofing; attack details describe exploitation remotely via the Omnibox. The vulnerability is assoc...

CVE-2025-10501

CVE-2025-10501 is a use-after-free in WebRTC within Chromium-based Chrome before version 140.0.7339.185. The vulnerability stems from heap corruption risk via crafted HTML, enabling remote attackers to potentially exploit memory safety. Connected sources confirm this exact flaw across multiple di...

CVE-2025-8577

CVE-2025-8577 : In Chrome/Chromium-based browsers, an inappropriate implementation in Picture-in-Picture prior to 139.0.7258.66 allowed a remote attacker to spoof UI via a crafted HTML page after convincing a user to perform specific UI gestures. Concrete details across connected sources show Chr...

CVE-2025-8580

CVE-2025-8580 involves an inappropriate implementation in Chrome/Chromium’s Filesystems prior to version 139.0.7258.66 , allowing a remote attacker to perform UI spoofing via a crafted HTML page. The reported impact is low (as per Chromium’s security metrics) with network attack vector, requiring...

CVE-2026-10022

Summary: A type confusion in the V8 JavaScript engine within Google Chrome before version 148.0.7778.216 may allow an attacker who convinces a user to install a malicious extension to execute arbitrary code inside a browser sandbox. Affected components: V8 in Google Chrome (Chromium-based). Root ...

CVE-2026-10889

CVE-2026-10889 : Out-of-bounds read in ANGLE used by Google Chrome before 149.0.7827.53 allowed a remote attacker who had compromised the renderer to potentially sandbox-escape via a crafted HTML page. Affected component: ANGLE in Chrome. Impact: sandbox escape with high/critical severity as stat...

CVE-2026-10983

CVE-2026-10983 affects Dawn in Google Chrome. The issue is insufficient validation of untrusted input, enabling a remote attacker to potentially perform a sandbox escape via a crafted HTML page. Affected versions are prior to 149.0.7827.53. The provided documents do not specify exploitation statu...

CVE-2026-11111

CVE-2026-11111 is an out-of-bounds read in ANGLE affecting Google Chrome (Chromium-based) prior to 149.0.7827.53. The vulnerability enables a remote attacker to perform an out-of-bounds memory read via a crafted HTML page. Several connected sources confirm this as a Chromium/ANGLE issue and indic...

CVE-2026-11282

CVE-2026-11282 affects Google Chrome on Linux. The issue is insufficient policy enforcement in the Sandbox, potentially allowing a sandbox escape via a crafted HTML page on versions prior to 149.0.7827.53. The reported impact is a high-risk security bypass leading to full exposure of the host, wi...

CVE-2026-11295

The CVE-2026-11295 entry concerns Google Chrome on Android WebView, where an inappropriate implementation allows privilege escalation via a crafted HTML page. Affected component: WebView in Chrome for Android; root cause described as an “inappropriate implementation” without deeper details in the...

CVE-2026-11631

CVE-2026-11631 is a Use-after-Free in Aura within Google Chrome on Windows, before build 149.0.7827.103. The root cause is a memory management error in Aura that could allow a compromised renderer process to escape the sandbox via a crafted HTML page, enabling a remote attacker to potentially tak...

CVE-2026-11638

Concrete details found: CVE-2026-11638 affects Google Chrome (Printing) before 149.0.7827.103. The vulnerability is a use-after-free in the Printing component that could allow a remote attacker to potentially escape the Chrome sandbox via a crafted HTML page (severity: Critical). Impact is sandbo...

CVE-2026-11663

CVE-2026-11663 concerns Google Chrome affected by a use-after-free in Skia prior to version 149.0.7827.103. If a renderer-process compromise occurs, a crafted HTML page could potentially enable a sandbox escape. The vulnerability is described with a high severity. The document set indicates the f...

CVE-2026-12439

CVE-2026-12439 describes a use-after-free in Google Chrome’s Digital Credentials handling, leading to potential heap corruption when processing a crafted HTML page. Affected product: Chrome (Chromium-based) before version 149.0.7827.155. Root cause: use-after-free in Digital Credentials component...

CVE-2026-14017

CVE-2026-14017 concerns Google Chrome’s Navigation logic. Affected component: Chrome prior to build 150.0.7871.47; root cause: inappropriate navigation implementation allowed a remote attacker who had already compromised the renderer process to potentially escape the Chrome sandbox via a crafted ...

CVE-2026-14053

CVE-2026-14053 affects Google Chrome where extensions enforcement is insufficient. A remote attacker who has already compromised the renderer process could leak cross-origin data via a crafted HTML page, due to policy enforcement gaps in Extensions before version 150.0.7871.47. The vulnerability ...

CVE-2026-14077

The CVE-2026-14077 entry describes an issue in Google Chrome on macOS (before version 150.0.7871.47) where an inappropriate implementation in the Select control allows a remote attacker to spoof the Omnibox (URL bar) contents via a crafted HTML page. Affected component: Select in the browser; roo...

CVE-2026-14156

CVE-2026-14156 : Concrete details across multiple sources show an issue in Google Chrome’s StorageAccessAPI where insufficient policy enforcement enables a remote attacker who compromised a renderer process to bypass same-origin policy via a crafted HTML page. Affected component: StorageAccessAPI...

CVE-2026-14426

CVE-2026-14426 is a Use After Free in V8 within Google Chrome before 150.0.7871.46. A remote attacker could lure a user into specific UI gestures to run arbitrary code in Chrome’s sandbox via a crafted HTML page. Severity: High. Affected: V8 in Chrome (pre-150.7871.46). Mitigation: Chrome update ...

CVE-2026-16421

CVE-2026-16421 relates to an Inappropriate implementation in WebAudio in Google Chrome (Chromium) before 150.0.7871.182 that could allow a remote attacker to execute arbitrary code inside a sandbox via a crafted HTML page. The vulnerability is part of a set of Chromium/WebAudio issues associated ...

CVE-2026-17693

CVE-2026-17693 : Google Chrome is affected by insufficient policy enforcement in FileSystem, prior to 151.0.7922.72, enabling a remote attacker to leak cross-origin data via a crafted HTML page. The vulnerability impact and details are documented across multiple sources in the Connected documents...

CVE-2026-17728

CVE-2026-17728 describes an insecure implementation in Google Chrome extensions prior to build 151.0.7922.72, where a crafted HTML page could lead to UXSS by remote code injection. The base description notes an inappropriate implementation in Extensions that enables an attacker to inject arbitrar...

CVE-2026-17736

CVE-2026-17736 affects Google Chrome on Android (WebView) with insufficient validation of untrusted input in WebView, allowing a renderer-compromised remote attacker to potentially escape the sandbox via a crafted HTML page. The issue is described as affecting Android builds prior to 151.0.7922.7...

CVE-2026-17896

CVE-2026-17896 is a use-after-free in Chrome/Chromium DevTools prior to 151.0.7922.72, enabling a remote attacker to execute arbitrary code within the sandbox via a crafted HTML page. Upstream reference: chromium issue 525331547. Affected advisories reference DevTools as the vulnerable component....

CVE-2026-4679

CVE-2026-4679 describes an integer overflow in Chrome’s Fonts code, allowing a remote attacker to trigger an out-of-bounds memory write via a crafted HTML page. Affected software: Google Chrome (Chromium-based) prior to version 146.0.7680.165. Root cause: integer overflow in the Fonts component. ...

CVE-2026-5907

Chromium/Google Chrome vulnerability CVE-2026-5907 involves insufficient data validation in the Media component, allowing out-of-bounds memory read via a crafted video file. Affected: Chromium/Chrome up to version 147.0.7727.55 (Chrome stable release). Public-branch disclosures in multiple adviso...

CVE-2026-8567

Summary: CVE-2026-8567 is an integer overflow in the ANGLE component of Google Chrome on Windows, prior to version 148.0.7778.168, enabling a remote attacker to trigger an out-of-bounds memory write via a crafted HTML page. Affected software: Google Chrome (Windows, Chromium-based). Vulnerable co...

CVE-2026-9984

CVE-2026-9984 affects Google Chrome on Windows with a use-after-free in the UI of the Chromium-based browser, allowing remote code execution via a crafted HTML page. Root cause: use-after-free in the UI component. Affected products/versions: Chrome prior to 148.0.7778.216. Impact: arbitrary code ...

CVE-2010-2108

Google Chrome before 5.0.375.55 is affected by CVE-2010-2108: an unspecified vulnerability that allows remote bypass of the whitelist‑mode plugin blocker via unknown vectors. The issue is documented in CVE‑2010‑2108 and is associated with multiple related Chrome vulnerabilities (including issues ...

CVE-2010-2903

Google Chrome CVE-2010-2903 affects Chrome versions prior to 5.0.375.125, where the browser may truncate and improperly elide hostnames. Root cause described as an issue in hostname handling; impact is unspecified in the provided documents. Exploitation details are not disclosed in the connected ...

CVE-2010-3250

CVE-2010-3250 concerns Google Chrome prior to version 6.0.472.53 and is described as an unspecified vulnerability that allows remote attackers to enumerate the set of installed extensions via unknown vectors. The NVD entry confirms this vulnerable condition, and OpenVAS entries list Google Chrome

CVE-2010-3254

Technical details for CVE-2010-3254 are not publicly detailed in the provided connected documents. The set includes references and mappings to the CVE across OpenVAS, Ubuntu advisories, and NVD, but no concrete exploit vectors, affected versions beyond Chrome before 6.0.472.53, or remediation spe...

CVE-2011-0474

Google Chrome before 8.0.552.237 and Chrome OS before 8.0.552.344 are affected by a flaw in handling CSS token sequences with cursors that can lead to a denial of service and possibly other impact via unknown vectors that produce a stale pointer. The provided documents identify the vulnerable sof...

CVE-2011-1118

CVE-2011-1118 affects Google Chrome prior to 9.0.597.107. The vulnerability arises from improper handling of TEXTAREA elements, which can allow remote attackers to crash the browser (DoS) or cause unspecified additional impact via a crafted HTML document. Publicly linked references indicate this ...

CVE-2011-1119

CVE-2011-1119 affects Google Chrome up to version 9.0.597.107. The vulnerability arises in device orientation handling, allowing remote attackers to cause a denial of service or possibly cause other unspecified impact via unknown vectors that lead to a stale pointer. Affected product is Google Ch...

CVE-2011-1194

Summary (CVE-2011-1194): Google Chrome before 10.0.648.127 contains multiple vulnerabilities that allow remote attackers to bypass the pop-up blocker via unknown vectors. The impact is bypass of the browser’s pop-up protections, with no detailed exploit information provided in the sources. Affect...