4917 matches found
CVE-2026-17803
CVE-2026-17803 describes an insufficient validation of untrusted input in Chrome's Save to Drive component, enabling a sandbox escape when processing a crafted PDF. Affected software is Google Chrome/Chromium, with the vulnerability present in builds prior to 151.0.7922.72. Red Hat, Debian, OSV, ...
CVE-2026-17882
CVE-2026-17882 is a policy-bypass flaw in Chrome Extensions. Affects the Extensions component of Google Chrome before 151.0.7922.72; a user tricked into installing a malicious extension could bypass site isolation via a crafted Chrome Extension. Upstream chromium issue 523637452 is cited. Accordi...
CVE-2010-4038
Google Chrome (pre-7.0.517.41) WebSockets handling flaw allows remote attackers to cause a denial of service (application crash) via shutdown handling vectors. Connected sources confirm Chrome is affected with this vulnerability; exploitation status and patch details are not provided in the suppl...
CVE-2011-0485
The CVE-2011-0485 entry affects Google Chrome and Chrome OS: versions prior to 8.0.552.237 (Chrome) and 8.0.552.344 (Chrome OS) are vulnerable due to improper handling of speech data, leading to a remote code execution condition via unspecified vectors that cause a stale pointer. No explicit expl...
CVE-2011-1122
The CVE-2011-1122 issue concerns Google Chrome/Chromium before 9.0.597.107, where the WebGL implementation allows remote attackers to cause a denial of service via an out-of-bounds read. Connected sources confirm the affected product as Google Chrome/Chromium and identify the vulnerability as Web...
CVE-2011-2784
CVE-2011-2784 concerns Google Chrome prior to 13.0.782.107, where a request for the GL program log could disclose a local file path in an unspecified log entry. The connected OpenVAS/Nessus entries group this with multiple Chrome vulnerabilities around the same era, but no explicit remediation ve...
CVE-2011-2795
Google Chrome before 13.0.782.107 is vulnerable to a cross-frame function leak that allows remote attackers to bypass same-origin access restrictions via a crafted web site; remediation is to upgrade to 13.0.782.107 or later.
CVE-2011-2803
CVE-2011-2803 affects Google Chrome prior to 13.0.782.107. The issue arises in handling Skia paths, enabling a remote attacker to induce a denial of service via an out-of-bounds read. Vectors are not specified in the provided documents. Public references corroborate the CVE and list it under Chro...
CVE-2011-2842
Summary (CVE-2011-2842) Google Chrome for Mac OS X (pre-14.0.835.163) is affected by an issue in the installer that handles lock files insecurely. This is documented as “Insecure lock file handling in the Mac installer,” with the NVD entry noting the vulnerability affects the Mac installer and ha...
CVE-2011-2850
Technical details for CVE-2011-2850 are not publicly provided in the connected documents. Monitor for updates; currently, the supplied materials do not specify affected versions, root cause, impact, or remediation for this CVE.
CVE-2011-3070
CVE-2011-3070 is a use-after-free in Google Chrome prior to 18.0.1025.151 involving the V8 bindings, with impact stated as remote denial of service or possibly other effects. The connected documents corroborate the CVE across Chrome/OpenVAS entries; however, no concrete exploit details or patched...
CVE-2011-3876
CVE-2011-3876 is listed among Chromium/V8 vulnerabilities in the Gentoo GLSA 201111-01. The connected Gentoo advisories identify Chromium/V8 as affected and recommend upgrading Chromium to >= 15.0.874.102 (and V8 to >= 3.5.10.22) to remediate. The provided documents do not disclose the exac...
CVE-2011-3906
CVE-2011-3906 affects Google Chrome/Chromium prior to 16.0.912.63, arising from the PDF parser causing an out-of-bounds read that can lead to remote denial of service. The Gentoo GLSA and related OpenVAS entries reference Chromium vulnerabilities and list a fix by upgrading to Chromium 16.0.912.7...
CVE-2011-3961
CVE-2011-3961 describes a race condition in Google Chrome prior to 17.0.963.46 that could allow a remote attacker to execute arbitrary code by triggering a crash in a utility process. The impact is high, with potential full control of the affected host if exploited. The vulnerability affects Goog...
CVE-2011-3963
CVE-2011-3963 affects Google Chromium/Chrome components; description indicates a denial-of-service via out-of-bounds read triggered by PDF FAX image handling. Connected advisories reference Chromium-related vulnerabilities (CVE-2011-3963 among others) and cite remediation guidance. Gentoo GLSA 20...
CVE-2025-8880
CVE-2025-8880 describes a race in V8 within Google Chrome before 139.0.7258.127, allowing a remote attacker to execute arbitrary code inside a sandbox via a crafted HTML page. Connected documents corroborate: Chromium/Chrome security notes identify this race in V8 as a high-severity issue and Chr...
CVE-2026-0900
CVE-2026-0900: In Chrome/Chromium, an inappropriate implementation in V8 prior to 144.0.7559.59 could allow a remote attacker to cause object corruption via a crafted HTML page. The issue is rated High (CVSS 8.8). References indicate fixes in Chromium/Chrome updates (e.g., Chromium 144.0.7559.59+...
CVE-2026-10883
CVE-2026-10883 refers to a type confusion in ANGLE used by Google Chrome up to version 149.0.7827.53, which could allow a remote attacker to cause heap corruption via a crafted HTML page. Connected sources confirm the affected component is ANGLE within Chrome, and that the issue manifests as an o...
CVE-2026-11043
CVE-2026-11043: Out-of-bounds write in ANGLE affecting Google Chrome on macOS prior to 149.0.7827.53. Likely allows a remote attacker who compromises the renderer to escape the sandbox via a crafted HTML page. Root cause: ANGLE out-of-bounds write. Remediation: update to Chrome 149.0.7827.53 or n...
CVE-2026-11185
CVE-2026-11185 is a use-after-free in Google Chrome’s V8 engine, affecting Chrome builds prior to 149.0.7827.53. An attacker could lure a user to install a crafted malicious extension and achieve arbitrary code execution inside the sandbox. Affected component: V8 in Chrome. Root cause: use-after-...
CVE-2026-11303
Concisely: Affects Google Chrome (PDFium) with a use-after-free in PDFium when handling crafted PDFs, enabling remote code execution inside the sandbox. Vulnerable in Chrome versions prior to 149.0.7827.53; mitigation is to upgrade to 149.0.7827.53 or later. No exploitation/weaponization details ...
CVE-2026-11628
Use-after-free in Ozone component of Google Chrome (versions before 149.0.7827.103) can allow a local attacker to potentially cause heap corruption when physical access is available. Root cause: use-after-free. Affected software is Chrome with the Ozone stack; the vulnerability is mitigated by up...
CVE-2026-12009
Affected software: Google Chrome on macOS. Vulnerability: Insufficient validation of untrusted input in Accessibility could allow a renderer-compromised attacker to escape the sandbox via a crafted HTML page. Root cause: input validation weakness in Accessibility feature. Impact: potential sandbo...
CVE-2026-12015
The CVE-2026-12015 entry describes a use-after-free in Chrome’s Autofill component handled in the renderer process. A remote attacker who can compromise the renderer could leverage a crafted HTML page to read potentially sensitive data from process memory. Affected software is Google Chrome (Auto...
CVE-2026-12026
CVE-2026-12026 : Affected product is Google Chrome/Chromium on ChromeOS. The vulnerability is an out-of-bounds read in the Video component, allowing a remote attacker who has compromised the renderer process to read sensitive data from process memory via a crafted HTML page. Root cause described ...
CVE-2026-12035
CVE-2026-12035 affects Google Chrome on Windows (Views component). Affected: Chrome versions prior to 149.0.7827.115. Root cause: Use-after-free in Views leading to potential heap corruption via a crafted HTML page. Impact: potential remote code execution via heap corruption (per the vulnerabilit...
CVE-2026-13887
The CVE-2026-13887 entry relates to Google Chrome for Android, where an inappropriate NFC implementation before version 150.0.7871.47 allowed a remote attacker who had already compromised the renderer process to leak cross-origin data via a crafted HTML page. This is triggered by a renderer compr...
CVE-2026-14011
The affected component is Google Chrome (SurfaceCapture) with an out-of-bounds read vulnerability in versions prior to 150.0.7871.47. The issue could allow a remote attacker to read memory via a crafted HTML page. Severity is described as Medium by Chromium, with CVSS-driven impact: Confidentiali...
CVE-2026-14047
CVE-2026-14047 affects Google Chrome before version 150.0.7871.47 due to insufficient policy enforcement in Extensions, enabling an attacker who persuades a user to install a malicious extension to bypass content security policy via a crafted Chrome Extension. The vulnerability’s impact is descri...
CVE-2026-14389
The provided sources describe a vulnerability in Google Chrome’s Skia: an integer overflow in Skia, prior to Chrome 150.0.7871.46, could allow a remote attacker who has compromised the renderer process to potentially escape the sandbox via a crafted HTML page. Affected component: Skia inside Chro...
CVE-2026-14417
CVE-2026-14417 affects Dawn in Google Chrome prior to 150.0.7871.46. The issue is a use-after-free in Dawn, enabling a remote attacker to potentially escape the Chrome sandbox via a crafted HTML page. The known remediation is upgrading to Chrome 150.0.7871.46 or later, as reflected in the referen...
CVE-2026-17710
CVE-2026-17710 is a concrete Chromium-based Chrome vulnerability affecting the MHTML component on macOS. The issue is an inappropriate implementation in MHTML that could allow a remote attacker who has compromised the renderer process to potentially escape the Chrome sandbox via a crafted HTML pa...
CVE-2026-17727
CVE-2026-17727 describes an out-of-bounds write in WebGL affecting Google Chrome on Android prior to version 151.0.7922.72. The vulnerability could allow a remote, crafted HTML page to potentially escape the Chrome sandbox. Public entries (NVD, Debian, CVE lists, and vendors) consistently describ...
CVE-2026-17752
CVE-2026-17752 affects Google Chrome on macOS prior to 151.0.7922.72. The issue is a use-after-free in the Views component that can lead to heap corruption via a crafted HTML page, enabling remote exploitation. The public descriptions consistently state heap-related impact with high severity; the...
CVE-2026-17772
CVE-2026-17772: An out-of-bounds read in WebGL in Google Chrome was reported for Chrome versions prior to 151.0.7922.72, enabling a remote attacker to read memory via a crafted HTML page. Multiple feeds (NVD, Debian, Red Hat, CIRCL, EUVD, OSV mirrors) corroborate the flaw as a WebGL WebKit/Chromi...
CVE-2026-17783
CVE-2026-17783 concerns Google Chrome: an inappropriate implementation in the Loader prior to 151.0.7922.72 can allow a remote attacker to leak cross-origin data via a crafted HTML page. The issue is described as a Chromium security vulnerability with a Medium impact. Affected component is the Ch...
CVE-2026-17794
CVE-2026-17794 describes insufficient validation of untrusted input in the Mobile component of Google Chrome on Android, allowing a remote attacker who has compromised the renderer process to spoof the contents of the Omnibox (URL bar) via a crafted HTML page. The issue affects Chrome on Android ...
CVE-2026-17847
The CVE-2026-17847 entry describes an insufficient validation of untrusted input in ANGLE within Chromium-based browsers, enabling a potential sandbox escape via a crafted HTML page. Public documents consistently identify ANGLE as the affected component and Chrome/Chromium versions prior to 151.0...
CVE-2026-17855
The CVE-2026-17855 issue is a race in Chrome’s DevTools (Chromium) on macOS that could allow a remote attacker who already compromised the renderer process to escape the sandbox via a crafted HTML page. Affected: Google Chrome with DevTools on macOS before 151.0.7922.72. Root cause: race conditio...
CVE-2026-17898
CVE-2026-17898 describes a Use-after-free in Chrome’s DevTools prior to 151.0.7922.72. An attacker could convince a user to install a malicious Chrome extension to execute arbitrary code inside a sandbox. The description across NVD, Debian OSV, CVE lists, and CIRCL/Nessus synopses mirrors this sa...
CVE-2026-17979
CVE-2026-17979 describes a race in the V8 engine affecting Google Chrome before version 151.0.7922.72 that could allow a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML page. The description across sources specifies the vulnerability in V8 / Chromium components and...
CVE-2026-17989
CVE-2026-17989 affects Google Chrome’s V8 engine. The vulnerability is a Type Confusion in V8 that could allow a remote attacker to execute arbitrary code inside Chrome’s sandbox via a crafted HTML page on versions prior to 151.0.7922.72. The impact is remote code execution with high confidential...
CVE-2026-18007
CVE-2026-18007 affects Google Chrome on Android. The issue is an inappropriate implementation in Input that enables UI spoofing via a crafted HTML page. Root cause described as an Input handling problem in Chrome’s Android build, with the vulnerability present in versions prior to 151.0.7922.72. ...
CVE-2026-5901
CVE-2026-5901 concerns insufficient policy enforcement in Chrome/Chromium DevTools, enabling a user-assisted attacker who installs a malicious extension to bypass enterprise host restrictions for cookie modification. The issue affects Chrome/Chromium builds prior to version 147.0.7727.55, with ad...
CVE-2026-7354
CVE-2026-7354 : Out-of-bounds read/write in ANGLE (Chromium/Google Chrome) prior to 147.0.7727.138 can allow a remote attacker to sandbox-escape via a crafted HTML page. This affects Google Chrome and is listed with high severity; the Chrome release notes indicate the fix is included in the 147.0...
CVE-2026-7993
CVE-2026-7993 affects Google Chrome on Android prior to 148.0.7778.96. The issue is insufficient validation of untrusted input in Payments, allowing a renderer-compromised attacker to spoof the Omnibox (URL bar) via a crafted HTML page. Affected component is Chrome’s Payments logic in Android, wi...
CVE-2026-8009
CVE-2026-8009: Google Chrome prior to 148.0.7778.96 has an Inappropriate implementation in Cast that lets a remote attacker who compromised the renderer bypass navigation restrictions via a crafted HTML page. Affected software is Chrome versions before 148.0.7778.96; the root cause is an incorrec...
CVE-2026-9112
CVE-2026-9112 involves a use-after-free in the GPU component of Google Chrome on Windows, allowing a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML page. Affected product: Google Chrome (Windows); vulnerable component: GPU code paths; root cause: use-after-free in...
CVE-2026-9886
CVE-2026-9886 affects Google Chrome on macOS with versions prior to 148.0.7778.216. It is a use‑after‑free in the Chromium Base component that could allow a remote attacker to escape the browser sandbox via a crafted HTML page. The Chrome update 148.0.7778.216 (and related 148.0.7778.215/216 on o...