CVE-2026-17812

CVE-2026-17812 affects Google Chrome/Chromium’s DigitalCredentials component. An inappropriate implementation allowed a remote attacker to perform UI spoofing via a crafted HTML page before version 151.0.7922.72. Public sources from Red Hat and Debian summarize the issue; upstream Chromium notes ...

CVE-2026-17843

Summary of CVE-2026-17843 : An inappropriate implementation flaw in the CSS component of Google Chrome/Chromium allowed a remote attacker to leak cross-origin data via a crafted HTML page. Affected software is Chrome/Chromium before version 151.0.7922.72. Impact is exposure of cross-origin data; ...

CVE-2026-17896

CVE-2026-17896 is a use-after-free in Chrome/Chromium DevTools prior to 151.0.7922.72, enabling a remote attacker to execute arbitrary code within the sandbox via a crafted HTML page. Upstream reference: chromium issue 525331547. Affected advisories reference DevTools as the vulnerable component....

CVE-2026-17933

CVE-2026-17933 affects Google Chrome prior to 151.0.7922.72 due to an Inappropriate implementation in DOMStorage, enabling a remote attacker to leak cross-origin data via a crafted HTML page. The issue has a CVSS v3.1 base score of 4.3 (Medium); impact on confidentiality only. Remediation: upgrad...

CVE-2026-5907

Chromium/Google Chrome vulnerability CVE-2026-5907 involves insufficient data validation in the Media component, allowing out-of-bounds memory read via a crafted video file. Affected: Chromium/Chrome up to version 147.0.7727.55 (Chrome stable release). Public-branch disclosures in multiple adviso...

CVE-2026-8567

Summary: CVE-2026-8567 is an integer overflow in the ANGLE component of Google Chrome on Windows, prior to version 148.0.7778.168, enabling a remote attacker to trigger an out-of-bounds memory write via a crafted HTML page. Affected software: Google Chrome (Windows, Chromium-based). Vulnerable co...

CVE-2026-9959

CVE-2026-9959 describes a race in WebRTC in Google Chrome on Windows prior to 148.0.7778.216 that allowed a remote attacker to leak cross-origin data via a crafted HTML page. The provided connected documents identify the affected software (Google Chrome on Windows) and the vulnerable component (W...

CVE-2026-9984

CVE-2026-9984 affects Google Chrome on Windows with a use-after-free in the UI of the Chromium-based browser, allowing remote code execution via a crafted HTML page. Root cause: use-after-free in the UI component. Affected products/versions: Chrome prior to 148.0.7778.216. Impact: arbitrary code ...

CVE-2010-2108

Google Chrome before 5.0.375.55 is affected by CVE-2010-2108: an unspecified vulnerability that allows remote bypass of the whitelist‑mode plugin blocker via unknown vectors. The issue is documented in CVE‑2010‑2108 and is associated with multiple related Chrome vulnerabilities (including issues ...

CVE-2010-2903

Google Chrome CVE-2010-2903 affects Chrome versions prior to 5.0.375.125, where the browser may truncate and improperly elide hostnames. Root cause described as an issue in hostname handling; impact is unspecified in the provided documents. Exploitation details are not disclosed in the connected ...

CVE-2010-3254

Technical details for CVE-2010-3254 are not publicly detailed in the provided connected documents. The set includes references and mappings to the CVE across OpenVAS, Ubuntu advisories, and NVD, but no concrete exploit vectors, affected versions beyond Chrome before 6.0.472.53, or remediation spe...

CVE-2011-0474

Google Chrome before 8.0.552.237 and Chrome OS before 8.0.552.344 are affected by a flaw in handling CSS token sequences with cursors that can lead to a denial of service and possibly other impact via unknown vectors that produce a stale pointer. The provided documents identify the vulnerable sof...

CVE-2011-1118

CVE-2011-1118 affects Google Chrome prior to 9.0.597.107. The vulnerability arises from improper handling of TEXTAREA elements, which can allow remote attackers to crash the browser (DoS) or cause unspecified additional impact via a crafted HTML document. Publicly linked references indicate this ...

CVE-2011-1119

CVE-2011-1119 affects Google Chrome up to version 9.0.597.107. The vulnerability arises in device orientation handling, allowing remote attackers to cause a denial of service or possibly cause other unspecified impact via unknown vectors that lead to a stale pointer. Affected product is Google Ch...

CVE-2011-1194

Summary (CVE-2011-1194): Google Chrome before 10.0.648.127 contains multiple vulnerabilities that allow remote attackers to bypass the pop-up blocker via unknown vectors. The impact is bypass of the browser’s pop-up protections, with no detailed exploit information provided in the sources. Affect...

CVE-2011-1200

CVE-2011-1200 affects Google Chrome prior to 10.0.648.127. The issue is described as an improper cast of an unspecified variable during text rendering, allowing remote attackers to cause a denial of service or potentially other impact via a crafted document. Connected sources (NVD, OpenVAS/NESSUS...

CVE-2011-1286

Google V8 in Google Chrome before 10.0.648.127 is affected by CVE-2011-1286. The issue allows remote attackers to cause a denial of service or potentially other impact by triggering incorrect memory access; vectors are undocumented in the provided sources. Affected component: V8 engine used by Ch...

CVE-2011-1303

Google Chrome prior to version 11.0.696.57 is affected by CVE-2011-1303 due to a stale pointer in the handling of floating objects, which can allow remote attackers to cause a denial of service or unspecified impact. The issue is addressed in Chrome 11.0.696.57, per vendor updates and vulnerabili...

CVE-2011-1442

CVE-2011-1442 affects Google Chrome prior to 11.0.696.57. The vulnerability stems from improper handling of mutation events, allowing remote attackers to cause a denial of service (node tree corruption) or possibly other impact via unknown vectors. The connected documents provide corroborating Ch...

CVE-2011-2847

This CVE (CVE-2011-2847) is a use-after-free in Google Chrome's document loader, exploitable via a crafted document to cause a denial of service (and possibly other impact). Affected software: Chrome before 14.0.835.163. Impact is described as DoS/other unspecified effects; remediation is to upgr...

CVE-2011-2858

Technical details for CVE-2011-2858 are not publicly provided in the connected documents. The materials reference the CVE but do not disclose affected components, root cause, or remediation specifics. Monitor for updates.

CVE-2011-3061

Google Chrome up to 18.0.1025.142 is affected by CVE-2011-3061 due to improper verification of X.509 certificates before using a SPDY proxy, which could enable MITM or leakage of sensitive information via a crafted certificate. Root cause: SPDY proxy certificate checking error. Mitigation, per th...

CVE-2011-3077

CVE-2011-3077 is a Google Chrome vulnerability described in multiple sources as a use-after-free in the script bindings, leading to possible denial of service or other impact. The cited description specifies Chrome versions older than 18.0.1025.151 are affected, with vectors related to a read-aft...

CVE-2011-3914

CVE-2011-3914 affects the i18n functionality in Google V8 used by Chrome/Chromium prior to version 16.0.912.63, enabling a remote attacker to trigger an out-of-bounds write that can cause a denial of service and possibly other impact. The connected Gentoo GLSA notes multiple Chromium/V8 vulnerabi...

CVE-2011-3960

Affected software: Google Chrome. Issue: pre-17.0.963.46 builds fail to correctly decode audio data, enabling remote attackers to cause a denial of service via an out-of-bounds read (vectors unspecified). Root cause: improper audio data handling in decoding path. Impact: Denial of Service; no exp...

CVE-2019-15684

The CVE concerns the Kaspersky Protection Chrome extension (Google Chrome) prior to version 30.112.62.0. The vulnerability allows remote unauthorized access to the extension’s uninstall functionality, potentially removing other installed extensions. The attacker can trigger uninstall prompts via ...

CVE-2020-15997

CVE-2020-15997: In Google Chrome, a use-after-free in Mojo (prior to 86.0.4240.99) could allow a remote attacker who had already compromised the renderer process to potentially escape the sandbox via a crafted HTML page. The vulnerability is rooted in Mojo handling within Chrome’s renderer path; ...

CVE-2025-8578

CVE-2025-8578 relates to a use-after-free in the Cast component of Google Chrome/Chromium before version 139.0.7258.66, allowing a remote attacker to trigger heap corruption via a crafted HTML page. The issue affects Chromium-based builds and is addressed by updating to Chromium 139.0.7258.127 or...

CVE-2025-8583

CVE-2025-8583 : In Google Chrome/Chromium, an inappropriate permissions implementation allowed a remote UI spoofing via a crafted HTML page. Affected product is Chromium-based Chrome; impact is UI spoofing with low severity (CVSS 3.1 base 4.3). Remediation observed in connected docs: updates to C...

CVE-2026-0903

CVE-2026-0903 refers to an Inappropriate implementation in Downloads in Google Chrome (Windows) before 144.0.7559.59, allowing a remote attacker to bypass dangerous file-type protections with a malicious file. Publicly documented fixes show Chromium-based updates delivering version 144.0.7559.59 ...

CVE-2026-10004

Google Chrome/Chromium Passwords component vulnerability: insufficient validation of untrusted input before version 148.0.7778.216 allows UI spoofing via a crafted HTML page. Impact is UI spoofing; no exploit details are provided in the documents. Remediation: update to Chrome 148.0.7778.216 or l...

CVE-2026-10021

The CVE-2026-10021 entry describes an issue in Chromium-based Chrome where insufficient validation of untrusted input in the USB component could allow a remote attacker to execute arbitrary code via a crafted HTML page. Affected software is Google Chrome (Chromium-based); the underlying cause is ...

CVE-2026-10890

CVE-2026-10890 is a Use after Free in Cast in Google Chrome prior to 149.0.7827.53, enabling heap corruption via malicious network traffic on a local network segment. Affected feature: Cast in Chrome; root cause: use-after-free. Impact: potential heap corruption with high severity (CRITICAL). Goo...

CVE-2026-10961

The CVE-2026-10961 issue affects Chrome for iOS (Google Chrome on iOS), where a use-after-free in the renderer allows a remote attacker who has compromised the renderer process to potentially escape the sandbox via a crafted HTML page. Impact is a sandbox escape with high severity; exploitation s...

CVE-2026-11092

Summary of CVE-2026-11092 : Google Chrome’s DevTools policy enforcement is insufficient before version 149.0.7827.53. An attacker could persuade a user to install a crafted (malicious) Chrome Extension to execute privilege escalation. Affected software: Chrome with DevTools; trigger requires user...

CVE-2026-11216

CVE-2026-11216 concerns Google Chrome (Chromium-based) with an incorrect security UI in the File Input. The description states a remote attacker could convince a user to perform specific UI gestures on a crafted HTML page to achieve UI spoofing. The impact is UI spoofing via the file input UI, wi...

CVE-2026-11277

CVE-2026-11277 affects Chrome for iOS (Google Chrome on iOS) prior to 149.0.7827.53. The issue is insufficient policy enforcement that could allow a remote attacker to bypass discretionary access control via a crafted HTML page. The Chromium security severity is rated Low, with the base CVSS v3.1...

CVE-2026-11647

CVE-2026-11647 is for Google Chrome on Android, where a use-after-free in the Printing subsystem precedes a sandbox escape via a crafted HTML page when the renderer is compromised. Affected: Chrome on Android prior to version 149.0.7827.103. Impact: remote attacker with renderer access could pote...

CVE-2026-11654

CVE-2026-11654 is a use-after-free in CameraCapture in Google Chrome on macOS. The issue allows remote code execution via a crafted HTML page that could lead to a sandbox escape. Affected software: Google Chrome on Mac prior to 149.0.7827.103. Mitigation: update to Chrome Stable channel build 149...

CVE-2026-12018

CVE-2026-12018 affects Google Chrome on Windows: an “Inappropriate implementation” in Mojo allows local OS-level privilege escalation via a malicious file. The issue is tied to Chrome before build 149.0.7827.115. Impact is described as High severity (CVSS 3.1: AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H,...

CVE-2026-13965

CVE-2026-13965: Use-after-free in Oilpan within Google Chrome (Chromium) before 150.0.7871.47 allows a remote attacker to execute arbitrary code inside a sandbox via a crafted HTML page. Impact: high (arbitrary code in sandbox); attack vector: network, user interaction required. Affected product:...

CVE-2026-14386

CVE-2026-14386 describes an Out-of-bounds read in ANGLE used by Google Chrome before version 150.0.7871.46. The issue could allow a remote attacker to obtain potentially sensitive information from a process’s memory via a crafted HTML page. The connected documents confirm Chrome/ANGLE involvement...

CVE-2026-14413

Uninitialized use in ANGLE within Google Chrome up to version 150.0.7871.46 allows a renderer-compromised attacker to potentially escape the sandbox via a crafted HTML page. CVE-2026-14413 (Severity High) indicates a sandbox-escape risk; remediations require updating to 150.0.7871.46 or later. No...

CVE-2026-15113

CVE-2026-15113 describes a use-after-free vulnerability in the Autofill component of Google Chrome on Android, before version 150.0.7871.115. The root cause is memory mismanagement that allows a crafted HTML page to trigger a sandbox escape, potentially enabling code execution outside the restric...

CVE-2026-17772

CVE-2026-17772: An out-of-bounds read in WebGL in Google Chrome was reported for Chrome versions prior to 151.0.7922.72, enabling a remote attacker to read memory via a crafted HTML page. Multiple feeds (NVD, Debian, Red Hat, CIRCL, EUVD, OSV mirrors) corroborate the flaw as a WebGL WebKit/Chromi...

CVE-2026-17847

The CVE-2026-17847 entry describes an insufficient validation of untrusted input in ANGLE within Chromium-based browsers, enabling a potential sandbox escape via a crafted HTML page. Public documents consistently identify ANGLE as the affected component and Chrome/Chromium versions prior to 151.0...

CVE-2026-17851

CVE-2026-17851 : Side-channel information leakage in Autofill for Google Chrome. A remote attacker who had compromised the renderer could leak cross-origin data via a crafted HTML page. Affected products are Chrome versions prior to 151.0.7922.72; impact is information disclosure (no exploitation...

CVE-2026-18000

CVE-2026-18000 affects Google Chrome on Android. The issue is described as insufficient policy enforcement in USB, allowing a remote attacker who had already compromised the renderer process to leak cross-origin data via a crafted HTML page. Affected version range is Chrome on Android prior to 15...

CVE-2026-3061

CVE-2026-3061 is an out-of-bounds read in the Media component of Google Chrome/Chromium prior to 145.0.7632.116, allowing a remote attacker to trigger an out-of-bounds memory read via a crafted HTML page. Multiple feeds corroborate a Chromium/Chrome impact and include advisories and fix reference...

CVE-2026-5902

CVE-2026-5902 affects Chromium/Chrome on Android prior to 147.0.7727.55, where a race in media handling could be exploited by a compromised renderer to corrupt media stream metadata via a crafted HTML page. The documented impact in the connected sources centers on this race condition in the media...