4917 matches found
CVE-2026-17933
CVE-2026-17933 affects Google Chrome prior to 151.0.7922.72 due to an Inappropriate implementation in DOMStorage, enabling a remote attacker to leak cross-origin data via a crafted HTML page. The issue has a CVSS v3.1 base score of 4.3 (Medium); impact on confidentiality only. Remediation: upgrad...
CVE-2011-2851
Google Chrome before 14.0.835.163 is vulnerable to an out-of-bounds read in video handling via unspecified vectors, allowing remote denial of service. Affected product: Google Chrome; root cause: improper video handling; impact: remote DoS; remediation: update to version 14.0.835.163 or newer as ...
CVE-2011-2858
Technical details for CVE-2011-2858 are not publicly provided in the connected documents. The materials reference the CVE but do not disclose affected components, root cause, or remediation specifics. Monitor for updates.
CVE-2011-3023
Google Chrome contains a use-after-free vulnerability in drag-and-drop handling (CVE-2011-3023). It affects Chrome versions before 17.0.963.56 and can lead to denial of service or possibly other impact, potentially user-involvement required. Remediation: upgrade to Chrome 17.0.963.56 or newer. No...
CVE-2011-3061
Google Chrome up to 18.0.1025.142 is affected by CVE-2011-3061 due to improper verification of X.509 certificates before using a SPDY proxy, which could enable MITM or leakage of sensitive information via a crafted certificate. Root cause: SPDY proxy certificate checking error. Mitigation, per th...
CVE-2011-3877
Technical details for CVE-2011-3877 are not publicly available in the provided connected documents. Monitor for updates from official advisories.
CVE-2011-3917
CVE-2011-3917: A stack-based buffer overflow in Chrome’s FileWatcher (affected product: Chrome/Chromium) allows remote denial of service or possibly other impact for builds before 16.0.912.63. The connected advisories document public patches and upgrades for Chromium, recommending upgrade to Chro...
CVE-2021-4319
CVE-2021-4319 is a use-after-free in Blink (Chrome) prior to 93.0.4577.82, enabling a remote attacker to trigger arbitrary read/write through a crafted HTML page. The connected Astra Linux bulletin and Chrome release notes confirm the same description; the issue is fixed in Chrome 93.0.4577.82 or...
CVE-2025-14766
CVE-2025-14766 refers to an out-of-bounds read/write in the V8 engine of Google Chrome/Chromium prior to version 143.0.7499.147, enabling a remote attacker to potentially trigger heap corruption via a crafted HTML page. Public reports and security advisories confirm broader impact on Chromium-bas...
CVE-2025-8881
CVE-2025-8881 relates to an inappropriate implementation in Google Chrome’s File Picker prior to 139.0.7258.127. A remote attacker could coax a user to perform specific UI gestures to cause leakage of cross-origin data via a crafted HTML page. The vulnerability is tied to the Chromium/Chrome File...
CVE-2026-10004
Google Chrome/Chromium Passwords component vulnerability: insufficient validation of untrusted input before version 148.0.7778.216 allows UI spoofing via a crafted HTML page. Impact is UI spoofing; no exploit details are provided in the documents. Remediation: update to Chrome 148.0.7778.216 or l...
CVE-2026-10927
The vulnerability CVE-2026-10927 affects Google Chrome’s Dawn component in the renderer process, with an out-of-bounds read that could enable a sandbox escape via a crafted HTML page. The issue is tied to Chrome versions prior to 149.0.7827.53. An attacker who already has renderer access could po...
CVE-2026-10965
CVE-2026-10965 is an integer overflow in Google Chrome’s DevTools prior to 149.0.7827.53. The issue allows a remote attacker to execute arbitrary code inside a sandbox via a crafted HTML page. Affected software: Chrome (DevTools). Root cause: integer overflow in DevTools as described in multiple ...
CVE-2026-11038
CVE-2026-11038 affects Google Chrome’s Subresource Integrity policy enforcement. The vulnerability allows a remote attacker to bypass content security policy via malicious network traffic in Chrome versions prior to 149.0.7827.53. Affected component is Subresource Integrity enforcement within Chr...
CVE-2026-11062
CVE-2026-11062 affects Google Chrome extensions: insufficient policy enforcement in Extensions allows an attacker to inject scripts/HTML into a privileged page when a user installs a crafted malicious extension. Impact is partial integrity compromise of privileged pages; exploit not confirmed in ...
CVE-2026-11092
Summary of CVE-2026-11092 : Google Chrome’s DevTools policy enforcement is insufficient before version 149.0.7827.53. An attacker could persuade a user to install a crafted (malicious) Chrome Extension to execute privilege escalation. Affected software: Chrome with DevTools; trigger requires user...
CVE-2026-11252
Technical details (affected product, versions, root cause, impact and exploit specifics) are not publicly available in the provided documents. Monitor updates from Chromium/Chrome advisories and associated ENISA/CVE sources for new information.
CVE-2026-11277
CVE-2026-11277 affects Chrome for iOS (Google Chrome on iOS) prior to 149.0.7827.53. The issue is insufficient policy enforcement that could allow a remote attacker to bypass discretionary access control via a crafted HTML page. The Chromium security severity is rated Low, with the base CVSS v3.1...
CVE-2026-11288
The CVE-2026-11288 entry concerns Google Chrome’s CSS policy enforcement. Affects Chrome prior to build 149.0.7827.53, where insufficient policy enforcement in CSS could allow a remote attacker to leak cross-origin data via a crafted HTML page. From the connected sources, the vulnerability is tie...
CVE-2026-11308
Summary : CVE-2026-11308 describes an insecure implementation in Google Chrome’s Extensions handling prior to version 149.0.7827.53. Affected software/area : Google Chrome — Extensions module. Root cause : Inappropriate implementation in Extensions, enabling privilege escalation. Impact : An atta...
CVE-2026-11654
CVE-2026-11654 is a use-after-free in CameraCapture in Google Chrome on macOS. The issue allows remote code execution via a crafted HTML page that could lead to a sandbox escape. Affected software: Google Chrome on Mac prior to 149.0.7827.103. Mitigation: update to Chrome Stable channel build 149...
CVE-2026-11660
CVE-2026-11660: Google Chrome’s New Tab Page suffered insufficient validation of untrusted input, enabling a renderer-compromised remote attacker to potentially escape the sandbox via a crafted HTML page. Affected: Chrome before 149.0.7827.103. Impact: sandbox escape risk; attacker could leverage...
CVE-2026-11662
CVE-2026-11662 affects Google Chrome bindings: Type Confusion in Bindings could allow remote code execution in a sandbox via a crafted HTML page, before version 149.0.7827.103. The issue is rated High (CVSS 3.1 base 8.8), with network attack vector and user interaction required. Affected componen...
CVE-2026-12024
CVE-2026-12024 affects Google Chrome DevTools with insufficient policy enforcement, allowing a remote attacker to bypass the same-origin policy via a crafted HTML page. The vulnerability is associated with Chrome prior to 149.0.7827.115. According to the connected sources, this is mitigated by up...
CVE-2026-12438
The CVE-2026-12438 entry corresponds to an issue in WebView for Google Chrome on Android, where an attacker who compromised the renderer process could escape the browser sandbox via a crafted HTML page. Affected product/vector: Android WebView in Chrome; root cause: inappropriate implementation i...
CVE-2026-12466
Summary (CVE-2026-12466) : A heap buffer overflow in WebRTC within Google Chrome on Windows before version 149.0.7827.155 allows remote code execution via a crafted HTML page. Multiple connected sources corroborate the Windows/WebRTC/chrome vector and fixed version, signaling a high-severity Chro...
CVE-2026-14383
The CVE-2026-14383 entry concerns Google Chrome’s V8 engine. Affected component: V8 in Chrome prior to version 150.0.7871.46. Description from multiple sources indicates an inappropriate implementation allowed remote attackers to execute arbitrary code inside the browser sandbox via a crafted HTM...
CVE-2026-14413
Uninitialized use in ANGLE within Google Chrome up to version 150.0.7871.46 allows a renderer-compromised attacker to potentially escape the sandbox via a crafted HTML page. CVE-2026-14413 (Severity High) indicates a sandbox-escape risk; remediations require updating to 150.0.7871.46 or later. No...
CVE-2026-14422
CVE-2026-14422 : Out-of-bounds read/write in Tint component of Google Chrome before version 150.0.7871.46. The issue allowed a remote attacker to potentially trigger memory access errors via a crafted HTML page. The severity is listed as High. Affected product: Google Chrome (Tint within Chromium...
CVE-2026-17764
CVE-2026-17764 describes an Inappropriate implementation flaw in the FedCM component of Chromium/Google Chrome that allowed a remote attacker to bypass the same-origin policy via a crafted HTML page. The issue affects Chrome/Chromium builds prior to version 151.0.7922.72, with the underlying caus...
CVE-2026-17801
CVE-2026-17801 is an out-of-bounds read/write flaw in ANGLE used by Google Chrome/Chromium prior to version 151.0.7922.72. It enables a remote attacker to potentially escape the sandbox via a crafted HTML page. Impact is described as high (I/H) and critical under CVSS 3.1 (9.6). The affected comp...
CVE-2026-17926
CVE-2026-17926 affects Google Chrome/Chromium DevTools. Insufficient validation of untrusted input in DevTools could allow a remote attacker to bypass navigation restrictions when a user is enticed to perform specific UI gestures on a crafted HTML page. Impact: potential integrity risk with user ...
CVE-2026-3544
CVE-2026-3544 is a heap buffer overflow in WebCodecs of Google Chrome/Chromium, allowing a remote, unauthenticated attacker to induce an out-of-bounds write via a crafted HTML page. Affected product: Chrome/Chromium’s WebCodecs component; root cause: heap memory overflow. Impact stated as high se...
CVE-2026-3935
CVE-2026-3935 affects Google Chrome/Chromium on multiple platforms due to an incorrect security UI in WebAppInstalls, enabling UI spoofing via a crafted HTML page. Affected versions before 146.0.7680.71 (Chrome/Chromium upstream) are susceptible; fixes are delivered in Chromium 146.0.7680.71 and ...
CVE-2026-4673
CVE-2026-4673 is a heap buffer overflow in WebAudio in Google Chrome. Before 146.0.7680.165, a crafted HTML page could trigger an out-of-bounds memory write, enabling a remote attacker to exploit the vulnerability. Affected component: WebAudio in Chrome (Chromium). Root cause: heap buffer overflo...
CVE-2026-7357
CVE-2026-7357 is a Use-After-Free in the GPU component of Google Chrome (Chromium) affecting versions prior to 147.0.7727.138. The issue can be exploited by a remote attacker who has already compromised the renderer process via a crafted HTML page, potentially leading to heap corruption and arbit...
CVE-2026-9904
CVE-2026-9904 affects Google Chrome via a Use-After-Free in ANGLE, with the root cause in ANGLE’s memory management. A crafted HTML page could potentially escape the Chrome sandbox, as described in multiple sources. A fix is available in Chrome 148.0.7778.216 (and surrounding 148.0.7778.215/217 f...
CVE-2026-9958
CVE-2026-9958: Use-after-free in PDFium within Google Chrome (pre-148.0.7778.216) allows a remote attacker to potentially exploit heap corruption via a crafted PDF file. Affected: Google Chrome/Chromium PDFium component. Root cause: use-after-free. Impact: high (per CVSS), with potential for impa...
CVE-2026-9982
Affected software: Google Chrome (ANGLE component). Issue: insufficient validation of untrusted input in ANGLE allows a renderer process user to escalate to sandbox escape via a crafted HTML page. Severity: High (CVSS 3.1 base 8.3). Affected version window: prior to 148.0.7778.216; remediation: u...
CVE-2010-2106
Google Chrome before 5.0.375.55 is reported to be vulnerable to spoofing the URL bar via vectors involving unload event handlers. The CVE-2010-2106 entry is supported by multiple sources (NVD, OpenVAS/Nessus aggregations) indicating a URL-spoofing flaw tied to unload handlers; the OpenVAS/Nessus ...
CVE-2010-2649
Google Chrome 5.0.375.99 and prior versions are affected by multiple vulnerabilities including invalid image handling that can crash the browser or potentially allow memory corruption. Public sources (OpenVAS entries and Seebug summary) describe a set of issues in July 2010 across WebGL bounds ch...
CVE-2010-3256
CVE-2010-3256 corresponds to a Google Chrome issue described as: Chrome before 6.0.472.53 does not properly limit the number of stored autocomplete entries. The provided sources confirm this vulnerability entry and cite Chrome
CVE-2010-3258
The CVE-2010-3258 issue affects Google Chrome prior to version 6.0.472.53, where the sandbox implementation fails to deserialize certain parameters, with the impact described as unspecified and remote attack vectors. The vulnerability is tied to the browser’s sandbox deserialization logic (Chrome...
CVE-2010-3411
CVE-2010-3411 affects Google Chrome on Linux, where Chrome versions before 6.0.472.59 fail to properly handle cursors, potentially allowing a denial of service (assertion failure) via unspecified vectors. Impact is limited to availability (partial) per the CVSS vector. A fix is to upgrade to Chro...
CVE-2010-4038
Google Chrome (pre-7.0.517.41) WebSockets handling flaw allows remote attackers to cause a denial of service (application crash) via shutdown handling vectors. Connected sources confirm Chrome is affected with this vulnerability; exploitation status and patch details are not provided in the suppl...
CVE-2011-0485
The CVE-2011-0485 entry affects Google Chrome and Chrome OS: versions prior to 8.0.552.237 (Chrome) and 8.0.552.344 (Chrome OS) are vulnerable due to improper handling of speech data, leading to a remote code execution condition via unspecified vectors that cause a stale pointer. No explicit expl...
CVE-2011-1122
The CVE-2011-1122 issue concerns Google Chrome/Chromium before 9.0.597.107, where the WebGL implementation allows remote attackers to cause a denial of service via an out-of-bounds read. Connected sources confirm the affected product as Google Chrome/Chromium and identify the vulnerability as Web...
CVE-2011-2784
CVE-2011-2784 concerns Google Chrome prior to 13.0.782.107, where a request for the GL program log could disclose a local file path in an unspecified log entry. The connected OpenVAS/Nessus entries group this with multiple Chrome vulnerabilities around the same era, but no explicit remediation ve...
CVE-2011-2795
Google Chrome before 13.0.782.107 is vulnerable to a cross-frame function leak that allows remote attackers to bypass same-origin access restrictions via a crafted web site; remediation is to upgrade to 13.0.782.107 or later.