CVE-2026-10883

CVE-2026-10883 refers to a type confusion in ANGLE used by Google Chrome up to version 149.0.7827.53, which could allow a remote attacker to cause heap corruption via a crafted HTML page. Connected sources confirm the affected component is ANGLE within Chrome, and that the issue manifests as an o...

CVE-2010-3729

The CVE-2010-3729 entry concerns Google Chrome’s SPDY protocol implementation, with the root cause reported as improper buffer management in the SPDY handling before Chrome 6.0.472.62. This vulnerability could allow remote attackers to execute arbitrary code via unspecified vectors, with network ...

CVE-2010-4574

CVE-2010-4574 affects Google Chrome (before 8.0.552.224) and Chrome OS (before 8.0.552.343) on 64-bit Linux. The vulnerability lies in Pickle::Pickle (base/pickle.cc), where incorrect pointer arithmetic can bypass message deserialization validation, enabling remote input to cause denial of servic...

CVE-2011-0475

Google Chrome before 8.0.552.237 and Chrome OS before 8.0.552.344 are affected by a use-after-free vulnerability in PDF handling, enabling remote denial of service or possibly other impact. Root cause: use-after-free in the PDF document path. Affected products/components: Google Chrome (pre-8.0.5...

CVE-2011-0479

Google Chrome (Windows/Linux/macOS) before 8.0.552.237 and Chrome OS before 8.0.552.344 are affected by CVE-2011-0479, a vulnerability in extensions handling that allows remote attackers to cause a denial of service via a crafted extension that triggers an uninitialized pointer. The issue stems f...

CVE-2011-0782

Google Chrome before 9.0.597.84 on macOS X is affected by an unspecified flaw in the Mac OS X 10.5 SSL libraries that can be triggered remotely to crash the application (denial of service). The NVD record indicates a network-based, low complexity attack with no authentication, resulting in partia...

CVE-2011-0982

CVE-2011-0982 describes a use-after-free vulnerability in Google Chrome prior to 9.0.597.94, exploitable via SVG font face handling that could cause a denial of service and potentially other impacts. Affected product: Google Chrome (before 9.0.597.94). Root cause: use-after-free in the SVG font f...

CVE-2011-1302

CVE-2011-1302 affects Google Chrome’s GPU process; a heap-based buffer overflow in the GPU process (Chrome before 10.0.648.205) allows remote code execution via unknown vectors. The Ubuntu OSV entry corroborates the heap-based overflow. Remediation: upgrade to Chrome 10.0.648.205 or later (the fi...

CVE-2011-1303

Google Chrome prior to version 11.0.696.57 is affected by CVE-2011-1303 due to a stale pointer in the handling of floating objects, which can allow remote attackers to cause a denial of service or unspecified impact. The issue is addressed in Chrome 11.0.696.57, per vendor updates and vulnerabili...

CVE-2011-1809

CVE-2011-1809 is a Google Chrome use-after-free vulnerability in the accessibility feature reported as affecting Chrome prior to version 12.0.742.91. The flaw could allow remote attackers to cause a denial of service and potentially other impact via unknown vectors. Connected sources identify the...

CVE-2011-1810

CVE-2011-1810 affects Google Chrome's CSS implementation prior to version 12.0.742.91, enabling information disclosure of visit history via unspecified vectors. The issue is tracked in multiple security feeds; OpenVAS/OpenVAS 802102/802103 and ThreatPost reference Chrome 12.0.742.91 as the fix. T...

CVE-2011-2349

CVE-2011-2349 is a use-after-free vulnerability in Google Chrome prior to version 12.0.742.112 . The issue occurs in text selection handling and could allow a remote attacker to cause a denial of service or potentially other unspecified impacts. The vulnerability is exploitable over the network w...

CVE-2011-2789

CVE-2011-2789 : Use-after-free in Google Chrome prior to 13.0.782.107 allows remote attackers to cause a denial of service or other unspecified impact via vectors related to Pepper plug-in instantiation. A remediation exists: upgrade to Chrome 13.0.782.107 or later.

CVE-2011-2838

CVE-2011-2838 affects Google Chrome prior to 14.0.835.163. The vulnerability stems from improper MIME-type handling when loading plug-ins, with unspecified impact and remote attack vectors as described in the Initial Description. Connected documents corroborate that this CVE is part of Chrome/Chr...

CVE-2011-2877

Technical details about CVE-2011-2877 are not publicly provided in the supplied documents. The connected sources reference this CVE among broader Apple/Chromium vulnerability collections but do not specify affected component, impact, exploit vectors, or remediation.

CVE-2011-3025

CVE-2011-3025 affects Google Chrome prior to 17.0.963.56; the issue is a parsing vulnerability in H.264 data that can cause a remote denial of service via an out-of-bounds read. No exploitation details are provided in the sources beyond this description. A fix is available in Chrome 17.0.963.56 a...

CVE-2011-3884

CVE-2011-3884 affects Google Chrome up to version before 15.0.874.102. The vulnerability stems from timing issues during DOM traversal, allowing a remote attacker to cause a denial of service or potentially invoke unspecified other impact via a crafted document. The connected documents do not pro...

CVE-2011-3907

Chromium and V8 are affected by multiple vulnerabilities including CVE-2011-3907 (URL bar spoofing) as part of the Chromium/Chromium-based web engine family. Public entries in Gentoo GLSA-201201-03 describe that a number of issues could allow a context‑dependent attacker to lure a user to a craft...

CVE-2011-3957

CVE-2011-3957 describes a use-after-free in Chrome’s garbage-collection for PDF handling, allowing a remote attacker to cause a denial of service and potentially other impact. The vulnerability affects Google Chrome prior to 17.0.963.46. Multiple connected advisories and OpenVAS entries corrobora...

CVE-2013-0889

CVE-2013-0889 concerns Google Chrome where the browser did not properly enforce a user gesture requirement before proceeding with a file download, potentially enabling remote code execution via a crafted file. The description specifies affected builds: Windows and Linux: before 25.0.1364.97 Mac O...

CVE-2024-7020

CVE-2024-7020 affects Google Chrome (Autofill) via an incorrect UI handling in Chromium before 124.0.6367.60. A remote attacker could induce UI spoofing by a crafted HTML page; CVSS indicates network attack vector, low impact to confidentiality/integrity, with user interaction required and UI acc...

CVE-2026-10021

The CVE-2026-10021 entry describes an issue in Chromium-based Chrome where insufficient validation of untrusted input in the USB component could allow a remote attacker to execute arbitrary code via a crafted HTML page. Affected software is Google Chrome (Chromium-based); the underlying cause is ...

CVE-2026-11007

CVE-2026-11007 describes a vulnerability in WebView for Google Chrome on Android, where insufficient validation of untrusted input in WebView prior to 149.0.7827.53 enabled a renderer-compromised attacker to leak cross-origin data via a crafted HTML page. The connected Debian/OpenSUSE advisories ...

CVE-2026-11038

CVE-2026-11038 affects Google Chrome’s Subresource Integrity policy enforcement. The vulnerability allows a remote attacker to bypass content security policy via malicious network traffic in Chrome versions prior to 149.0.7827.53. Affected component is Subresource Integrity enforcement within Chr...

CVE-2026-11277

CVE-2026-11277 affects Chrome for iOS (Google Chrome on iOS) prior to 149.0.7827.53. The issue is insufficient policy enforcement that could allow a remote attacker to bypass discretionary access control via a crafted HTML page. The Chromium security severity is rated Low, with the base CVSS v3.1...

CVE-2026-11295

The CVE-2026-11295 entry concerns Google Chrome on Android WebView, where an inappropriate implementation allows privilege escalation via a crafted HTML page. Affected component: WebView in Chrome for Android; root cause described as an “inappropriate implementation” without deeper details in the...

CVE-2026-11644

CVE-2026-11644 describes a use-after-free in the Views component of Google Chrome on Linux, allowing code execution via a crafted Chrome Extension when a user is convinced to install a malicious extension. Affected software: Google Chrome (Linux) with the vulnerable Views code path. Root cause: u...

CVE-2026-12438

The CVE-2026-12438 entry corresponds to an issue in WebView for Google Chrome on Android, where an attacker who compromised the renderer process could escape the browser sandbox via a crafted HTML page. Affected product/vector: Android WebView in Chrome; root cause: inappropriate implementation i...

CVE-2026-12459

CVE-2026-12459: In Google Chrome (Chromium-based), the Serial component has an inappropriate implementation prior to 149.0.7827.155 that enables a remote attacker to inject arbitrary scripts or HTML (UXSS) via a crafted HTML page. Affected versions are Chrome before 149.0.7827.155; remediation is...

CVE-2026-13025

CVE-2026-13025 describes a race in DevTools of Google Chrome prior to 149.0.7827.197 that could allow a remote attacker, who already compromised the renderer process, to potentially escape the sandbox via a crafted HTML page. The issue is rated High (CVSS v3.1: AV:N/AC:H/PR:N/UI:R/S:C/C:H/I:H/A:H...

CVE-2026-13970

CVE-2026-13970 : In Google Chrome, an uninitialized-use vulnerability in the Media component allows a remote attacker who has compromised the renderer process to read potentially sensitive data from process memory via a crafted HTML page. Affected versions are before 150.0.7871.47. Impact is info...

CVE-2026-14011

The affected component is Google Chrome (SurfaceCapture) with an out-of-bounds read vulnerability in versions prior to 150.0.7871.47. The issue could allow a remote attacker to read memory via a crafted HTML page. Severity is described as Medium by Chromium, with CVSS-driven impact: Confidentiali...

CVE-2026-14077

The CVE-2026-14077 entry describes an issue in Google Chrome on macOS (before version 150.0.7871.47) where an inappropriate implementation in the Select control allows a remote attacker to spoof the Omnibox (URL bar) contents via a crafted HTML page. Affected component: Select in the browser; roo...

CVE-2026-17661

CVE-2026-17661 is a use-after-free vulnerability in Chrome’s Loader component that could allow a remote attacker to execute arbitrary code inside a sandbox via a crafted HTML page. The issue affects Chrome prior to version 151.0.7922.72, with a high security impact (CVSS v3.1: 8.8, Network, User ...

CVE-2026-17772

CVE-2026-17772: An out-of-bounds read in WebGL in Google Chrome was reported for Chrome versions prior to 151.0.7922.72, enabling a remote attacker to read memory via a crafted HTML page. Multiple feeds (NVD, Debian, Red Hat, CIRCL, EUVD, OSV mirrors) corroborate the flaw as a WebGL WebKit/Chromi...

CVE-2026-17794

CVE-2026-17794 describes insufficient validation of untrusted input in the Mobile component of Google Chrome on Android, allowing a remote attacker who has compromised the renderer process to spoof the contents of the Omnibox (URL bar) via a crafted HTML page. The issue affects Chrome on Android ...

CVE-2026-17847

The CVE-2026-17847 entry describes an insufficient validation of untrusted input in ANGLE within Chromium-based browsers, enabling a potential sandbox escape via a crafted HTML page. Public documents consistently identify ANGLE as the affected component and Chrome/Chromium versions prior to 151.0...

CVE-2026-17896

CVE-2026-17896 is a use-after-free in Chrome/Chromium DevTools prior to 151.0.7922.72, enabling a remote attacker to execute arbitrary code within the sandbox via a crafted HTML page. Upstream reference: chromium issue 525331547. Affected advisories reference DevTools as the vulnerable component....

CVE-2026-17898

CVE-2026-17898 describes a Use-after-free in Chrome’s DevTools prior to 151.0.7922.72. An attacker could convince a user to install a malicious Chrome extension to execute arbitrary code inside a sandbox. The description across NVD, Debian OSV, CVE lists, and CIRCL/Nessus synopses mirrors this sa...

CVE-2026-17940

CVE-2026-17940 details (mode C): Insufficient validation of untrusted input in Chromium-based Google Chrome’s Picture-in-Picture on Android allows a remote attacker who compromises the renderer process to potentially escape the sandbox via a crafted HTML page. Affected software: Google Chrome on ...

CVE-2026-17979

CVE-2026-17979 describes a race in the V8 engine affecting Google Chrome before version 151.0.7922.72 that could allow a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML page. The description across sources specifies the vulnerability in V8 / Chromium components and...

CVE-2026-7357

CVE-2026-7357 is a Use-After-Free in the GPU component of Google Chrome (Chromium) affecting versions prior to 147.0.7727.138. The issue can be exploited by a remote attacker who has already compromised the renderer process via a crafted HTML page, potentially leading to heap corruption and arbit...

CVE-2026-78935

CVE-2026-78935 is a critical use-of-uninitialized-variable vulnerability in the Mobile component of Google Chrome on iOS , affecting versions prior to 152.0.7977.65 . A remote attacker could potentially execute arbitrary code outside the browser sandbox by convincing a user to load a crafted HTML...

CVE-2026-79001

CVE-2026-79001 is an information leak in the Bluetooth component of Google Chrome on Mac , fixed in version 152.0.7977.65 . A remote attacker who has already compromised the renderer process and leverages social engineering can obtain sensitive information via a crafted HTML page. Chromium rates ...

CVE-2026-79006

CVE-2026-79006 is a protection mechanism failure in the HttpsUpgrades component of Google Chrome prior to version 152.0.7977.65 . The flaw allows a remote attacker to bypass the web origin policy via crafted network traffic. The CVSS 3.1 score is 4.3 (Medium) with the vector AV:N/AC:L/PR:N/UI:R/S...

CVE-2026-8580

CVE-2026-8580 describes a use-after-free in Mojo of Google Chrome before 148.0.7778.168. The underlying flaw is a use-after-free in Mojo that could allow a remote attacker to potentially perform a sandbox escape via a crafted HTML page. The issue is classified with a Chromium-based severity of Me...

CVE-2026-9938

CVE-2026-9938 concerns an inappropriate implementation in the V8 component of Google Chrome, affecting Chrome versions prior to 148.0.7778.216. The vulnerability allows a remote attacker to execute arbitrary code inside the browser sandbox via a crafted HTML page. The cited sources consistently d...

CVE-2026-9958

CVE-2026-9958: Use-after-free in PDFium within Google Chrome (pre-148.0.7778.216) allows a remote attacker to potentially exploit heap corruption via a crafted PDF file. Affected: Google Chrome/Chromium PDFium component. Root cause: use-after-free. Impact: high (per CVSS), with potential for impa...

CVE-2026-9959

CVE-2026-9959 describes a race in WebRTC in Google Chrome on Windows prior to 148.0.7778.216 that allowed a remote attacker to leak cross-origin data via a crafted HTML page. The provided connected documents identify the affected software (Google Chrome on Windows) and the vulnerable component (W...

CVE-2026-9992

The CVE-2026-9992 entry concerns a use-after-free in the Network component of Google Chrome, exploited remotely via a crafted HTML page to achieve arbitrary code execution inside the sandbox. Affected software is Chrome prior to version 148.0.7778.216. The underlying cause is a use-after-free in ...