CVE-2026-14390

CVE-2026-14390 describes a use-after-free in ANGLE used by Google Chrome before version 150.0.7871.46. The vulnerability could allow a remote attacker to attempt a sandbox escape via a crafted HTML page. The description and connected sources consistently identify ANGLE as the affected Graphics/AN...

CVE-2026-3541

CVE-2026-3541 describes an out-of-bounds memory read in Chrome’s CSS handling due to an inappropriate implementation in CSS code. A remote attacker could exploit this via a crafted HTML page to trigger a memory read, with a High impact as indicated by multiple sources. Public postings and advisor...

CVE-2026-4674

CVE-2026-4674 describes an out-of-bounds read in CSS processing in Google Chrome, exploitable via a crafted HTML page to cause out-of-bounds memory access. Affected software: Google Chrome, with the vulnerability rooted in CSS handling prior to version 146.0.7680.165. The entry specifies a high s...

CVE-2026-7899

CVE-2026-7899 describes an out-of-bounds read/write vulnerability in V8 within Google Chrome before 148.0.7778.96. The issue could allow a remote attacker to execute arbitrary code inside the Chrome sandbox via a crafted HTML page. Affected product: Google Chrome (desktop on Windows, macOS, Linux...

CVE-2026-8004

CVE-2026-8004 describes an issue in Google Chrome where insufficient policy enforcement in DevTools could allow a user-assisted cross-origin data leak via a crafted malicious extension. Affected product: Google Chrome (DevTools component). Root cause: policy enforcement gaps in DevTools prior to ...

CVE-2026-9915

CVE-2026-9915 describes a heap buffer overflow in the ANGLE component of Google Chrome, prior to 148.0.7778.216. The issue could allow a remote attacker who already controls the renderer process to potentially escape the sandbox via a crafted HTML page. The description applies to Chrome/ANGLE wit...

CVE-2010-2296

Google Chrome before 5.0.375.70 is affected by CVE-2010-2296 due to the implementation of unspecified DOM methods that can bypass the Same Origin Policy via unknown vectors. The vulnerability enables remote attackers to circumvent SOP, with impact described as complete confidentiality/integrity/a...

CVE-2010-2650

CVE-2010-2650 affects Google Chrome prior to 5.0.375.99. Public details across connected docs indicate multiple vulnerabilities addressed in the 5.0.375.99 update, with the OpenVAS/Seebug entries confirming that Google Chrome 5.0.375.99 fixed several issues. Concrete items from Seebug include mul...

CVE-2010-3117

CVE-2010-3117 affects Google Chrome prior to 5.0.375.127. The issue stems from improper implementation of the browser’s notifications feature, allowing remote attackers to cause an application crash (denial of service) and possibly other unspecified impact via unknown vectors. Public sources in t...

CVE-2010-3249

CVE-2010-3249 affects Google Chrome prior to 6.0.472.53, where SVG filter handling could be abused to cause a denial of service (and potentially other impact) via remote vectors. The NVD entry lists impact on confidentiality, integrity, and availability (C=C, I=C, A=C) with network attack vector ...

CVE-2010-3917

Google Chrome information disclosure vulnerability (CVE-2010-3917) affects Google Chrome prior to 3.0. The root cause is improper handling of XML documents, allowing a remote attacker to obtain sensitive information via a crafted webpage. Documented impacts indicate confidentiality exposure when ...

CVE-2011-0473

CVE-2011-0473 affects Google Chrome before 8.0.552.237 and Chrome OS before 8.0.552.344; vulnerability arises from improper handling of CSS token sequences with CANVAS elements, allowing remote denial of service or possibly other impact via unknown vectors that lead to a stale pointer. Root cause...

CVE-2011-0477

CVE-2011-0477 affects Google Chrome (before 8.0.552.237) and Chrome OS (before 8.0.552.344). The vulnerability arises from a mismatch in video frame sizes that can cause incorrect memory access, enabling remote attackers to trigger a denial of service and potentially other impacts via unknown vec...

CVE-2011-1454

CVE-2011-1454 describes a use-after-free in the DOM id handling of Google Chrome prior to 11.0.696.57. The vulnerability allows remote attackers to cause a denial of service or potentially other impact via a crafted HTML document. The connected sources confirm the affected product (Google Chrome)...

CVE-2011-1817

Google Chrome before version 12.0.742.91 is affected by a history deletion handling issue that can lead to memory corruption and potential denial of service. Root cause: incomplete/incorrect history deletion implementation. Impact: remote attackers could trigger memory corruption; other vectors a...

CVE-2011-2347

CVE-2011-2347 affects Google Chrome prior to 12.0.742.112, where improper handling of Cascading Style Sheets (CSS) token sequences can cause memory corruption and potentially other unspecified impacts via unknown vectors. Exploitation is remote. The vulnerability has a CVSS v2 base score of 6.8 (...

CVE-2011-2801

CVE-2011-2801 is a use-after-free vulnerability in Google Chrome prior to 13.0.782.107. The flaw is triggered via vectors related to the frame loader, enabling remote attackers to cause a denial of service and potentially other impact. Affected product: Google Chrome; vulnerable component: frame ...

CVE-2011-2828

CVE-2011-2828 affects Google Chrome (V8 engine) prior to version 13.0.782.215. The vulnerability is an out-of-bounds write in the V8 JavaScript engine that could be triggered remotely, with the NVD entry noting possible denial of service and unspecified other impact. The connected OpenVAS entries...

CVE-2011-2853

CVE-2011-2853 concerns Google Chrome prior to version 14.0.835.163. Description: a use-after-free vulnerability in plug-in handling could allow a remote attacker to cause a denial of service or potentially other impact. Affected product: Google Chrome (pre-14.0.835.163). Underlying cause: use-aft...

CVE-2011-2880

Google Chrome CVE-2011-2880 is a use-after-free vulnerability in the V8 bindings prior to 14.0.835.202. Affected software: Google Chrome (Chrome versions before 14.0.835.202). Impact described: remote denial of service or potentially other unspecified impact. Root cause: use-after-free in V8 bind...

CVE-2011-3018

CVE-2011-3018: Google Chrome before 17.0.963.56 is affected by a heap-based buffer overflow in path rendering, enabling remote attackers to cause a denial of service or possibly other impact. This is tied to Chrome components handling path rendering. The connected documents confirm the same vulne...

CVE-2011-3065

CVE-2011-3065 : Skia in Google Chrome (before 18.0.1025.142) allows remote attackers to cause memory corruption and possibly other impact via unknown vectors. Outcome described as memory corruption/DoS with unspecified additional effects. Mitigation: upgrade Chrome to version 18.0.1025.142 or new...

CVE-2011-3879

CVE-2011-3879 affects Google Chrome prior to 15.0.874.102, where redirects to chrome: URLs are not prevented, yielding unspecified impact and remote attack vectors. Remediation per connected advisories is to upgrade to Chrome 15.0.874.102 or newer (e.g., as noted in GLSA 201111-01 for Chromium/Ch...

CVE-2011-3894

CVE-2011-3894 affects Google Chrome (and Chromium-based builds) prior to version 15.0.874.120, where VP8 decoding could be manipulated by a crafted stream, leading to memory corruption and potentially other impact. The connected advisories corroborate multiple Chromium/V8 vulnerabilities around t...

CVE-2011-3916

Technical details about CVE-2011-3916 are not publicly available in the provided documents. Monitor for updates.

CVE-2025-11458

The CVE-2025-11458 entry describes a heap buffer overflow in Chrome’s Sync component prior to 141.0.7390.65, allowing a remote attacker to trigger an out-of-bounds memory read via a crafted HTML page. Affected software is Google Chrome (Chromium-based). The underlying issue is a heap-based overfl...

CVE-2026-10015

CVE-2026-10015 affects Google Chrome (Chromium WTF component). An integer overflow in WTF could be triggered by a crafted HTML page, allowing a remote attacker to execute arbitrary code inside the browser sandbox. Impact is user-controlled code execution with high severity, and the vulnerability ...

CVE-2026-10017

Summary (CVE-2026-10017) Out-of-bounds read in Chrome/Chromium Headless before 148.0.7778.216. An attacker who already compromised the renderer process could potentially escape the sandbox via a crafted HTML page. The issue affects the Headless component of Chromium and is described with Chromium...

CVE-2026-10899

CVE-2026-10899 is a real issue described as a use-after-free in the Ozone component of Google Chrome on Linux, before Chrome 149.0.7827.53. The vulnerability stems from heap corruption potentially exploitable via a crafted HTML page after a user interacts with specific UI gestures. Connected sour...

CVE-2026-11020

CVE-2026-11020 concerns Google Chrome (Chromium-based) extensions. The initial description and connected advisories confirm an inappropriate implementation in Extensions that could allow a remote attacker to leak cross-origin data via a crafted XML file. The vulnerability is tied to Chrome versio...

CVE-2026-11034

The CVE-2026-11034 entry affects Google Chrome on Android, specifically the Tab Group Sync feature. The issue is insufficient validation of untrusted input, allowing a remote attacker to inject arbitrary scripts or HTML (UXSS) via malicious network traffic. Affects Chrome versions before 149.0.78...

CVE-2026-11096

CVE-2026-11096 details an out-of-bounds read in WebRTC for Google Chrome, prior to 149.0.7827.53. The issue could allow a remote attacker to obtain potentially sensitive information from a process’s memory via a crafted HTML page. Affected product/component: WebRTC in Chrome (Chromium-based). Roo...

CVE-2026-11175

CVE-2026-11175 affects Google Chrome on Android, involving the Messages security UI. The root cause is an incorrect security UI which allows UI spoofing via a crafted HTML page. Impact is a remote attacker potentially spoofing the UI. Remediation: upgrade Chrome to version 149.0.7827.53 or later....

CVE-2026-11180

CVE-2026-11180 describes an insecure SVG handling in Google Chrome before version 149.0.7827.53, where an improper implementation could allow a remote attacker to leak cross-origin data via a crafted HTML page. The impact is data disclosure with network access as the attack vector, and user inter...

CVE-2026-11232

CVE-2026-11232 impacts Google Chrome TabGroups. The issue is an inappropriate implementation in TabGroups prior to version 149.0.7827.53, enabling a remote attacker to perform UI spoofing via malicious network traffic. Severity is indicated as Low. No remediation details are provided in the conne...

CVE-2026-11268

CVE-2026-11268 affects ANGLE in Google Chrome on Windows, with an uninitialized use that allows a remote attacker to leak cross-origin data via a crafted HTML page. The description indicates the issue exists in Chrome builds prior to version 149.0.7827.53, implying the fix is included in 149.0.78...

CVE-2026-11684

CVE-2026-11684 affects Google Chrome’s Network policy enforcement. Affected component: network policy handling in Chrome before 149.0.7827.103. Root cause: insufficient policy enforcement allowed a remote attacker who had compromised the utility process to leak cross-origin data via a crafted HTM...

CVE-2026-11686

The CVE-2026-11686 entry describes an issue in Dawn within Google Chrome on macOS before 149.0.7827.103. The root cause is insufficient validation of untrusted input in Dawn, which could allow a remote attacker who has compromised the renderer process to leak cross-origin data via a crafted HTML ...

CVE-2026-13025

CVE-2026-13025 describes a race in DevTools of Google Chrome prior to 149.0.7827.197 that could allow a remote attacker, who already compromised the renderer process, to potentially escape the sandbox via a crafted HTML page. The issue is rated High (CVSS v3.1: AV:N/AC:H/PR:N/UI:R/S:C/C:H/I:H/A:H...

CVE-2026-13829

CVE-2026-13829 describes insufficient validation of untrusted input in the Settings module of Google Chrome on Windows, allowing a remote attacker who has compromised a renderer process to potentially escape the sandbox via a crafted HTML page. Affected software/version: Google Chrome on Windows ...

CVE-2026-13845

CVE-2026-13845 – A use-after-free in Google Chrome’s DOM handling prior to 150.0.7871.47 allows a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML page. Affected software: Google Chrome (Chromium-based). Root cause: use-after-free in DOM manipulation. Impact: remote...

CVE-2026-14155

Technical details are not publicly available in the provided documents for CVE-2026-14155; monitor for updates from the connected sources.

CVE-2026-17667

CVE-2026-17667 is a vulnerability in Google Chrome related to the ANGLE component. The issue is described as an uninitialized use in ANGLE that could allow a remote attacker to leak cross-origin data via a crafted HTML page. The connected Chrome/Chromium advisory confirms the flaw and ties it to ...

CVE-2026-17744

CVE-2026-17744 affects Google Chrome on Linux and concerns an inappropriate implementation in the File Input path of Chrome/Chromium. The vulnerability could enable a sandbox escape through a crafted HTML page, with the root cause described as improper handling in the File Input component. Affect...

CVE-2026-17788

CVE-2026-17788 : In Google Chrome, an inappropriate implementation in the Blink rendering engine allows a remote attacker to leak cross-origin data through a crafted HTML page. Affected versions are those before 151.0.7922.72. The Chromium advisory lists this as a Medium-severity issue with poten...

CVE-2026-17842

CVE-2026-17842 affects Google Chrome on iOS (Chrome for iOS) prior to version 151.0.7922.72. The issue is an inappropriate implementation that allows a remote attacker, who convinces a user to perform specific UI gestures, to bypass the same-origin policy via a crafted HTML page. Impact is limite...

CVE-2026-18005

The CVE-2026-18005 issue is in the WebXR component of Google Chrome (Chromium) and upstream Chromium: inappropriate implementation in WebXR allows a remote attacker to obtain potentially sensitive information from process memory via a crafted HTML page. Affected product/version: Google Chrome/Chr...

CVE-2026-18009

The CVE-2026-18009 entry describes insufficient validation of untrusted input in Google Chrome before 151.0.7922.72, specifically in Passwords, enabling a remote attacker to perform UI spoofing via malicious network traffic. Affected product: Google Chrome (Chromium-based); root cause: inadequate...

CVE-2026-3537

Google Chrome on Android is affected by CVE-2026-3537 due to an object lifecycle issue in PowerVR that could allow a remote attacker to cause heap corruption via a crafted HTML page. The vulnerability affects builds prior to 145.0.7632.159, with Chromium/Chrome update notices indicating a fix in ...

CVE-2026-3543

CVE-2026-3543 describes an out-of-bounds memory access in Google Chrome’s V8 engine caused by an inappropriate implementation prior to version 145.0.7632.159. The vulnerability is triggered by a crafted HTML page and is rated High severity (CVSS v3.1). Affected product/version: Google Chrome with...