CVE-2026-9112

CVE-2026-9112 involves a use-after-free in the GPU component of Google Chrome on Windows, allowing a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML page. Affected product: Google Chrome (Windows); vulnerable component: GPU code paths; root cause: use-after-free in...

CVE-2026-9886

CVE-2026-9886 affects Google Chrome on macOS with versions prior to 148.0.7778.216. It is a use‑after‑free in the Chromium Base component that could allow a remote attacker to escape the browser sandbox via a crafted HTML page. The Chrome update 148.0.7778.216 (and related 148.0.7778.215/216 on o...

CVE-2026-9937

CVE-2026-9937 concerns a use-after-free in the UI of Google Chrome on Windows, prior to build 148.0.7778.216. The issue arises when a compromised renderer process can trigger a sandbox escape via a crafted HTML page. Affected: Chromium-based Chrome UI components; root cause described as a UI use-...

CVE-2026-9938

CVE-2026-9938 concerns an inappropriate implementation in the V8 component of Google Chrome, affecting Chrome versions prior to 148.0.7778.216. The vulnerability allows a remote attacker to execute arbitrary code inside the browser sandbox via a crafted HTML page. The cited sources consistently d...

CVE-2026-9971

CVE-2026-9971 affects Google Chrome on iOS prior to version 148.0.7778.216 due to an inappropriate implementation in iOS. This allows a remote attacker to exploit UXSS by convincing a user to perform specific UI gestures on a crafted HTML page. The vulnerability impacts UX and script/HTML injecti...

CVE-2026-9974

CVE-2026-9974 concerns Google Chrome's GPU component in Chromium. The vulnerability is an out-of-bounds write in the GPU code that, if a renderer process is already compromised, could enable a sandbox escape via a crafted HTML page. Affected version range is Chrome prior to 148.0.7778.216. The do...

CVE-2026-9992

The CVE-2026-9992 entry concerns a use-after-free in the Network component of Google Chrome, exploited remotely via a crafted HTML page to achieve arbitrary code execution inside the sandbox. Affected software is Chrome prior to version 148.0.7778.216. The underlying cause is a use-after-free in ...

CVE-2026-9995

The CVE-2026-9995 entry describes a use-after-free in Chrome’s WebXR component prior to version 148.0.7778.216. A crafted HTML page could allow a remote attacker to execute arbitrary code inside the browser sandbox. Affected product: Google Chrome (WebXR). Root cause: use-after-free in WebXR. Imp...

CVE-2010-2105

CVE-2010-2105 affects Google Chrome up to version 5.0.375.55. The issue stems from Chrome not properly following Safe Browsing URL canonicalization requirements, with unspecified impact and remote attack vectors. Affected product is Chrome; root cause tied to Safe Browsing canonicalization. Remed...

CVE-2011-1804

CVE-2011-1804 affects WebKit/WebCore: rendering/RenderBox.cpp before r86862, used in Google Chrome up to 11.0.696.71. Root cause is improper rendering of floats, enabling remote attackers to cause a denial of service or potentially other impact via a stale pointer. Exploitation details are not pr...

CVE-2011-1806

The provided connected sources confirm CVE-2011-1806 affects Google Chrome prior to 11.0.696.71, where improper GPU command buffer handling can allow remote attackers to execute arbitrary code or cause a denial of service via memory corruption. The vulnerability is tied to the GPU command buffer ...

CVE-2011-1818

CVE-2011-1818 refers to a use-after-free vulnerability in Google Chrome’s image loader prior to version 12.0.742.91. The issue allows remote attackers to cause a denial of service or potentially other impact via unknown vectors. Affected product: Google Chrome (image loading code). Root cause: us...

CVE-2011-2360

CVE-2011-2360 affects Google Chrome before 13.0.782.107, where the browser does not prompt the user before downloading a dangerous file, enabling a crafted site to bypass content restrictions. The issue is tied to the Chrome

CVE-2011-2794

Google Chrome

CVE-2011-2844

Technical details (affected component, root cause, and remediation) for CVE-2011-2844 are not provided in the connected documents; public details appear limited to the initial description. Monitor for updates from referenced advisories and OpenVAS entries.

CVE-2011-2875

CVE-2011-2875 affects Google Chrome’s V8 engine prior to version 14.0.835.163, where improper object sealing leads to type confusion. This can allow remote attackers to cause a denial of service and potentially other unspecified impacts. Remediation is to update Chrome to 14.0.835.163 or later (a...

CVE-2011-3972

The CVE-2011-3972 entry concerns Google Chrome’s shader translator vulnerability prior to 17.0.963.46, allowing remote attackers to cause a denial of service via an out-of-bounds read. Related connected data confirms the vulnerability is tracked against Chromium/Chrome family with CVE-2011-3972 l...

CVE-2017-15403

CVE-2017-15403 affects Chrome OS crosh networking (network_diag) due to insufficient data validation, enabling local command injection under chronos privileges via a crafted HTML page. Affected platforms include Chrome OS before 61.0.3163.113. Google Chrome OS update 61.0.3163.113 (stable channel...

CVE-2017-15404

CVE-2017-15404 affects Crash Reporting in Google Chrome on Chrome OS prior to 61.0.3163.113. The issue involves processing crash dumps with root privileges and improper symlink handling, enabling local privilege escalation via a crafted HTML page. The Chrome OS update 61.0.3163.113 addresses this...

CVE-2026-10002

CVE-2026-10002 is a use-after-free in PDFium within Google Chrome, fixed in Chrome 148.0.7778.216 and later. The vulnerability affects PDFium’s handling of crafted PDF files, enabling potential heap corruption when a remote attacker supplies a malicious document. Affected product: Google Chrome (...

CVE-2026-10009

CVE-2026-10009: Integer overflow in Skia within Google Chrome (pre-148.0.7778.216). An attacker who compromised the renderer could run arbitrary code in the sandbox via a crafted HTML page. Affected component: Skia in Chromium-based Chrome; impact: remote code execution with sandbox escape; statu...

CVE-2026-10012

CVE-2026-10012: Use-after-free in Skia within Google Chrome before 148.0.7778.216 allows a compromised renderer to potentially escape the Chromium sandbox via a crafted HTML page. Affected: Skia component in Chrome (Chromium-based). Root cause: use-after-free bug in Skia identified upstream. Impa...

CVE-2026-10019

The CVE-2026-10019 entry documents an integer overflow in ANGLE used by Google Chrome. Affected software: Google Chrome (ANGLE integration). Vulnerable component/file: ANGLE; root cause is an integer overflow leading to potential cross-origin data leakage when parsing/handling a crafted HTML page...

CVE-2026-10885

Use after free in Chrome for iOS: Google Chrome on iOS prior to 149.0.7827.53 allows remote code execution via a crafted HTML page. The issue in Chrome for iOS is confirmed in multiple sources (CVE-2026-10885). The Chrome 149 stability release includes this fix (149.0.7827.53) across desktop and ...

CVE-2026-11112

CVE-2026-11112 affects Chromoting in Google Chrome on Linux, with insufficient validation of untrusted input prior to 149.0.7827.53. A remote attacker who has compromised the renderer process could potentially perform a sandbox escape via a crafted Chrome Extension. The vulnerability is associate...

CVE-2026-11113

CVE-2026-11113 affects Google Chrome (Chromium-based) ANGLE: insufficient validation of untrusted input may allow a remote attacker, who already compromised the renderer process, to escape the sandbox via a crafted HTML page. The issue is categorized as CRITICAL by multiple sources; attack vector...

CVE-2026-11188

The connected sources confirm CVE-2026-11188 is a use-after-free in the USB handling of Google Chrome on Android, prior to version 149.0.7827.53, enabling a remote attacker to potentially escape the sandbox via a crafted HTML page. Affected software: Google Chrome on Android; vulnerable component...

CVE-2026-11193

Affected software: Google Chrome Password Manager (Chromium). Condition: Insufficient policy enforcement allows a remote attacker to bypass discretionary access control via a crafted HTML page in Chrome versions prior to 149.0.7827.53. Impact: attacker can bypass DAC; CVSS shows Network vector, E...

CVE-2026-11249

The CVE-2026-11249 entry describes a use-after-free in the Network component of Google Chrome affecting versions prior to 149.0.7827.53 . A remote attacker who has already compromised the renderer process could craft an HTML page to read potentially sensitive data from process memory. The connect...

CVE-2026-11250

CVE-2026-11250 concerns Google Chrome DevTools prior to version 149.0.7827.53. The issue is an inappropriate implementation in DevTools that allowed a remote attacker who had already compromised the renderer process to read potentially sensitive data from process memory via a crafted HTML page. P...

CVE-2026-11636

CVE-2026-11636 is a use-after-free in Chrome’s Autofill on Windows prior to 149.0.7827.103, enabling a remote attacker who entices a user to perform specific UI gestures to potentially trigger heap corruption via a crafted HTML page. The issue affects the Chromium-based browser and is addressed i...

CVE-2026-11643

CVE-2026-11643 : Use-after-free in Proxy handling of Google Chrome before version 149.0.7827.103 allows a remote attacker to execute arbitrary code via malicious network traffic. Impact is rated high/critical; exploit would require network access with no user interaction. The documented remediati...

CVE-2026-11680

CVE-2026-11680 describes a use-after-free in the Media component of Google Chrome on Windows, before version 149.0.7827.103. The underlying issue reportedly allows a remote attacker to execute arbitrary code inside Chrome’s sandbox via a crafted HTML page. Affected software is Chrome for Windows;...

CVE-2026-12031

Google Chrome on Windows before 149.0.7827.115 is affected by CVE-2026-12031 due to an inappropriate implementation in Views that can allow a remote attacker, who has compromised the renderer process, to potentially escape the sandbox via a crafted HTML page. The issue is rated High (CVSS 3.1: AV...

CVE-2026-13783

CVE-2026-13783 is a Use-After-Free in Views in Google Chrome affecting versions before 150.0.7871.47. The vulnerability could allow a remote attacker to exploit heap corruption by convincing a user to perform specific UI gestures on a crafted HTML page. Several connected sources (NVD, Debian, EUV...

CVE-2026-13784

Summary : CVE-2026-13784 is a Use-After-Free in Chrome/Chromium’s Views component, exploitable via crafted HTML and requiring user interaction through specific UI gestures. This can lead to heap corruption and is rated Critical. What is affected : Google Chrome/Chromium prior to 150.0.7871.47 (Vi...

CVE-2026-13813

Summary: CVE-2026-13813 concerns Chrome for iOS where insufficient policy enforcement in the renderer allowed a sandbox escape via a crafted HTML page after renderer compromise. The issue affects Google Chrome on iOS before version 150.0.7871.47 (Chromium security severity: High). Root cause / vu...

CVE-2026-13861

CVE-2026-13861 : Use-after-free in Chrome’s Core component prior to 150.0.7871.47 allows a remote attacker who has compromised the renderer process to potentially escape the sandbox via a crafted HTML page. Exploitation details in the connected records indicate an impact across confidentiality, i...

CVE-2026-13873

CVE-2026-13873 describes an out-of-bounds read in the Layout component of Google Chrome, exploitable via a crafted HTML page to potentially disclose memory contents. Affected software is Google Chrome (Chromium-based). The root cause is an out-of-bounds read in Layout, leading to potential inform...

CVE-2026-13971

CVE-2026-13971 refers to an uninitialized use in Skia used by Google Chrome prior to 150.0.7871.47. This could allow a remote attacker who already compromised the renderer process to read potentially sensitive data from process memory via a crafted HTML page. Affected software: Google Chrome (Ski...

CVE-2026-14400

Summary of CVE-2026-14400 : Google Chrome’s ANGLE component contains an out-of-bounds write in versions prior to 150.0.7871.46. If a renderer process is compromised, an attacker could potentially perform a sandbox escape through a crafted HTML page. This is a remote, high-severity vulnerability (...

CVE-2026-14421

CVE-2026-14421 concerns an uninitialized-use issue in Dawn for Google Chrome on ChromeOS, prior to version 150.0.7871.46. The issue could allow a remote attacker to read potentially sensitive data from process memory via a crafted HTML page. Documents consistently describe the vulnerability as Un...

CVE-2026-14430

CVE-2026-14430 describes an integer overflow in V8 (Chromium/Google Chrome) prior to version 150.0.7871.46 , allowing a remote attacker to execute arbitrary code inside a sandbox via a crafted HTML page. Affected component: V8 engine within Chrome. Impact per documents: remote code execution with...

CVE-2026-17661

CVE-2026-17661 is a use-after-free vulnerability in Chrome’s Loader component that could allow a remote attacker to execute arbitrary code inside a sandbox via a crafted HTML page. The issue affects Chrome prior to version 151.0.7922.72, with a high security impact (CVSS v3.1: 8.8, Network, User ...

CVE-2026-17668

CVE-2026-17668 is an Uninitialized Use in ANGLE affecting Google Chrome (Chromium) prior to 151.0.7922.72. The issue could allow a remote attacker to leak cross-origin data via a crafted HTML page. Chrome’s July 2026 stable-channel update (151.0.7922.71/72) includes a security fix for this and re...

CVE-2026-17740

CVE-2026-17740 affects Google Chrome via an uninitialized use in ANGLE, before version 151.0.7922.72. A crafted HTML page could allow a remote attacker to leak cross-origin data. The Chromium-based severity is listed as Medium. Affected software is Chrome (ANGLE component); root cause is uninitia...

CVE-2026-17832

The CVE-2026-17832 entry describes a use-after-free flaw in ANGLE within the Chromium-based Google Chrome browser, specifically prior to version 151.0.7922.72. The vulnerability arises when a remote attacker who has already compromised the renderer process could potentially escape the Chrome sand...

CVE-2026-17935

CVE-2026-17935 : Heap buffer overflow in Google Chrome 151.0.7922.72 prior versions’ Codecs exposes remote code execution within the sandbox via a crafted HTML page. The vulnerability affects Chrome’s Codecs component; underlying root cause is a heap buffer overflow. Current references indicate a...

CVE-2026-17940

CVE-2026-17940 details (mode C): Insufficient validation of untrusted input in Chromium-based Google Chrome’s Picture-in-Picture on Android allows a remote attacker who compromises the renderer process to potentially escape the sandbox via a crafted HTML page. Affected software: Google Chrome on ...

CVE-2026-17960

CVE-2026-17960 describes insufficient policy enforcement in Chrome for iOS (Google Chrome on iOS) prior to 151.0.7922.72, where a remote attacker could bypass the no-referrer policy via a crafted HTML page. The issue affects Chrome on iOS and is rooted in policy enforcement; the exact component/f...