CVE-2024-5844

CVE-2024-5844 affects Google Chrome, specifically a heap buffer overflow in the Tab Strip module that allowed a remote attacker to read out-of-bounds memory via a crafted HTML page. The issue is fixed in Chrome 126.0.6478.56/57 (stable channel), with the vulnerable baseline cited as prior to 126....

CVE-2024-7966

CVE-2024-7966 : Out-of-bounds memory access in Skia used by Google Chrome prior to 128.0.6613.84. A remote attacker who had compromised the renderer process could trigger memory corruption via a crafted HTML page. Debian security advisory notes potential arbitrary code execution, DoS, or informat...

CVE-2026-15771

CVE-2026-15771 affects Google Chrome on Windows prior to 150.0.7871.125. The vulnerability arises from insufficient validation of untrusted input in the Media component, allowing a remote attacker who has compromised the renderer process to potentially read sensitive information from process memo...

CVE-2026-19146

CVE-2026-19146 affects Google Chrome for Android, where an uninitialized use of the GPU in the renderer could allow a remote attacker who has compromised the renderer process to read potentially sensitive data from process memory via a crafted HTML page. The vulnerability is tied to GPU usage and...

CVE-2019-5794

CVE-2019-5794 is a UI spoofing vulnerability reported in Chromium/Google Chrome before version 73.0.3683.75. The issue allows a remote attacker to achieve domain spoofing via a crafted HTML page. Public disclosures in connected sources confirm the affected product as Chromium/Chrome and reference...

CVE-2023-4072

Summary: CVE-2023-4072 is a WebGL-related out-of-bounds read/write vulnerability in Google Chrome/Chromium. The issue can enable a remote attacker to cause heap corruption via a crafted HTML page, with high impact as indicated by the CVSS vector (base score 8.8, Confidentiality/Integrity/Availabi...

CVE-2024-7550

This CVE-2024-7550 concerns a Type Confusion in V8 used by Google Chrome/Chromium, leading to potential heap corruption via a crafted HTML page. Affected software is Chrome/Chromium with version guidance shown as pre-127.6533.99 builds. The vulnerability’s root cause is a V8 type confusion that c...

CVE-2024-5834

CVE-2024-5834 affects Google Chrome (Dawn) prior to version 126.0.6478.54 . The root cause is an inappropriate implementation in Dawn that allowed a remote attacker to execute arbitrary code via a crafted HTML page . The issue was addressed in the Chrome 126 stable update (126.0.6478.54 for Linux...

CVE-2024-6773

CVE-2024-6773 affects Google Chrome/Chromium (V8) prior to 126.0.6478.182. Inappropriate V8 implementation allowed remote heap corruption via a crafted HTML page. Impact is high confidentiality/integrity/availability; attack vector is network with user interaction required. Public details are sup...

CVE-2019-5833

CVE-2019-5833 describes an incorrect dialog box scoping in Google Chrome for Android prior to 75.0.3770.80, enabling a crafted HTML page to display misleading security UI. The vulnerability affects the Chromium/Chrome UI layer and is categorized as a security UI spoofing issue; multiple advisorie...

CVE-2024-10826

Concretely affected: Chromium-based Chrome/Chromium on Android and various Linux distributions (Chromium) with version strings up to 130.0.6723.116. The root cause is a use-after-free in the Family Experiences component that can lead to heap corruption via a crafted HTML page. Impact is high (C/H...

CVE-2024-5841

CVE-2024-5841 is a Use-after-Free in V8 affecting Google Chrome (Chromium-based) prior to version 126.0.6478.54, enabling remote code execution via a crafted HTML page and potentially causing heap corruption. The issue is documented with a CVSSv3.1 base score of 8.8 (High), attack vector Network,...

CVE-2024-12694

CVE-2024-12694 : Affected software is Google Chrome (Chromium) with a use-after-free in the Compositing path prior to 131.0.6778.204, allowing a remote attacker to potentially cause heap corruption via a crafted HTML page. The vulnerability is fixed in Chrome/Chromium 131.0.6778.204+; remediation...

CVE-2024-7977

CVE-2024-7977 affects Google Chrome on Windows (Installer component) and stems from insufficient data validation, enabling privilege escalation via a malicious file. The vulnerability is tied to Chrome/Chromium family behavior prior to version 128.0.6613.84. Mitigation is to upgrade to the patche...

CVE-2024-8194

CVE-2024-8194 is a Type Confusion in V8 affecting Google Chrome (Chromium) prior to 128.0.6613.113. The vulnerability could allow a remote attacker to trigger heap corruption via a crafted HTML page. Affected component: Chrome/Chromium’s V8 engine; impact described as high. Public documentation i...

CVE-2024-8639

CVE-2024-8639 corresponds to a use-after-free in Autofill in Google Chrome/Chromium. The issue arises when processing Autofill data in Chromium-based browsers, potentially allowing a remote attacker to cause heap corruption via a crafted HTML page. Affected software is Chrome/Chromium prior to ve...

CVE-2019-5831

CVE-2019-5831 reports an object lifecycle issue in V8 used by Google Chrome/Chromium prior to version 75.0.3770.80, enabling potential remote heap corruption via a crafted HTML page. Public advisories and Debian security notices confirm this as a Chromium/V8 issue with multiple CVEs, and remediat...

CVE-2020-6439

CVE-2020-6439 affects Google Chrome/Chromium where an insufficient policy enforcement in navigations permits bypassing the security UI via a crafted HTML page. Affected component is the navigation policy enforcement flow in Chromium/Chrome prior to version 81.0.4044.92. The issue is described as ...

CVE-2021-30561

The connected advisories confirm CVE-2021-30561 is a type confusion in the V8 component of the Chromium engine, affecting Google Chrome/Chromium prior to version 91.0.4472.164. The vulnerability could allow remote code execution via a crafted HTML page, with heap corruption as a potential outcome...

CVE-2024-8906

CVE-2024-8906 : Affected software: Google Chrome/Chromium (Chrome prior to 129.0.6668.58). Description: Incorrect security UI in Downloads allowed a remote attacker to spoof UI by convincing a user to perform specific UI gestures on a crafted HTML page. Root cause (as stated): flawed security UI ...

CVE-2019-13753

CVE-2019-13753 is an out-of-bounds read in the SQLite component used by Google Chrome/Chromium, fixed in Chrome/Chromium after version 79.0.3945.79. Exploitation via a crafted HTML page could allow a remote attacker to read potentially sensitive data from process memory. Public details in linked ...

CVE-2024-7964

CVE-2024-7964 affects Chromium/Google Chrome (Password handling in Passwords) with a use-after-free flaw that can lead to remote heap corruption. Public advisories and Chrome release notes tie this to Chrome/Chromium updates (128.* channel) and list it among 38 fixes, including other memory-safet...

CVE-2020-6430

CVE-2020-6430 is a type confusion in the V8 JavaScript engine of Chromium/Google Chrome prior to 81.0.4044.92. A remote attacker could potentially cause heap corruption and execute arbitrary code. Mitigation: upgrade Chromium to 81.0.4044.92 or newer (upstream fix in 81.0.4044.92; Debian referenc...

CVE-2024-5843

CVE-2024-5843 affects Google Chrome/Chromium: an Inappropriate implementation in Downloads allowed a remote attacker to obfuscate the security UI via a malicious file. The Chrome release notes for 126.x document this as one of 21 fixes, with CVE-2024-5843 listed among Medium/High-severity issues ...

CVE-2024-6778

The CVE-2024-6778 entry concerns a race in Chrome/Chromium DevTools that allowed an attacker, by convincing a user to install a crafted Chrome Extension, to inject scripts or HTML into a privileged page. Affected software is Google Chrome/Chromium (DevTools component); the underlying issue is a D...

CVE-2024-7980

CVE-2024-7980 affects Google Chrome on Windows with vulnerable Installer logic due to insufficient data validation, enabling local privilege escalation via a crafted symbolic link. The issue is fixed in Chrome 128.0.6613.84 (and later); Debian/Alpine advisories also reference this fix. Users shou...

CVE-2019-5824

CVE-2019-5824 affects the Chromium/Chrome media path: a parameter-passing error in the media component could enable heap corruption via a crafted HTML page. Connected advisories corroborate that Chromium/Chrome updates across distributions (e.g., Debian DSA-4500-1, openSUSE/Fedora advisories) add...

CVE-2024-7981

CVE-2024-7981 : In Google Chrome/Chromium, an inappropriate implementation in the Views layer allowed a remote attacker to perform UI spoofing via a crafted HTML page in Chrome prior to version 128.0.6613.84. Public references across Debian, FreeBSD, Gentoo, and other advisories confirm Chromium/...

CVE-2019-5796

CVE-2019-5796 affects Chromium-based browsers (Chrome/Chromium) via the Extensions component. A race condition in Extensions before 73.0.3683.75 could be triggered remotely, with official advisories stating the vulnerability exists in Chromium’s Extensions and that upgrading to 73.0.3683.75 or ne...

CVE-2023-5479

CVE-2023-5479 corresponds to an insufficiently secure Extensions API in Google Chrome/Chromium before 118.0.5993.70, enabling a user-assisted bypass of enterprise policy via a crafted HTML page if a malicious extension is installed. Public details across connected documents confirm the affected c...

CVE-2024-5842

CVE-2024-5842 is a memory‑safety bug in Google Chrome’s Browser UI (use-after-free) that, prior to Chrome 126.0.6478.54, could allow a remote attacker to cause an out-of-bounds read via a crafted HTML page after convincing a user to perform specific UI gestures. The issue affects the Browser UI c...

CVE-2024-8034

CVE-2024-8034 affects Google Chrome on Android prior to 128.0.6613.84 due to an insecure Custom Tabs implementation that allowed a remote attacker to perform UI spoofing via a crafted HTML page. The Chrome release notes and Debian security advisory corroborate the issue and indicate the fix is in...

CVE-2024-8638

CVE-2024-8638 is a Chrome/Chromium vulnerability affecting Google Chrome/Chromium before 128.0.6613.137, caused by a type confusion in V8 that could allow an attacker to trigger object corruption via a crafted HTML page. The issue has a high impact across confidentiality, integrity, and availabil...

CVE-2024-8909

CVE-2024-8909 affects Google Chrome on iOS (Chromium-based) prior to 129.0.6668.58. Root cause: Inappropriate UI implementation, enabling a remote attacker to spoof the UI via a crafted HTML page. Impact is UI spoofing; no other impacts are stated in the documents. The vulnerability is addressed ...

CVE-2024-11115

CVE-2024-11115 targets Google Chrome on iOS with insufficient policy enforcement in Navigation, enabling privilege escalation via a sequence of UI gestures. Affected: Chrome/iOS versions prior to 131.0.6778.69. Connected documents corroborate wider Chromium updates and security fixes across distr...

CVE-2020-6377

CVE-2020-6377 is a use-after-free in Chrome/Chromium’s audio path that could allow remote heap corruption via a crafted HTML page. Affected products: Google Chrome/Chromium prior to version 79.0.3945.117. Public advisories indicate fixes in later builds (e.g., Debian/Chromium updates to 79.0.3945...

CVE-2020-6455

CVE-2020-6455 is an out-of-bounds read in Chromium/Google Chrome’s WebSQL implementation. The issue could allow a remote attacker to potentially cause heap corruption via a crafted page. Affected software is Chrome/Chromium before version 81.0.4044.92. The Debian Arch Linux security advisory and ...

CVE-2024-7972

CVE-2024-7972 affects Google Chrome (V8) prior to 128.0.6613.84, enabling potential out-of-bounds memory access via a crafted HTML page. The issue is documented with Chrome/Chromium as the vulnerable component; Debian security advisory also confirms the fix version 128.0.6613.84 for chromium. Rem...

CVE-2019-5791

CVE-2019-5791 is a type confusion in the V8 engine of Chromium/Chrome prior to version 73.0.3683.75. The issue potentially allows remote code execution via crafted HTML pages. Debian/Arch notes indicate fixes in 73.0.3683.75 (Debian: 73.0.3683.75-1; Arch: “before 73.0.3683.75” fixed). Affected pr...

CVE-2020-6434

CVE-2020-6434 is a use-after-free vulnerability in the Chrome/Chromium DevTools component, reported to affect Chromium before version 81.0.4044.92. The connected advisories attribute an arbitrary code execution impact to this issue, with upstream fixes released in the 81.0.4044.92 timeframe. Reme...

CVE-2024-11114

CVE-2024-11114 affects Google Chrome/Chromium on Windows, due to an inappropriate implementation in the Views module that can allow a remote attacker who has compromised the renderer to perform a sandbox escape via a crafted HTML page. Affected product/component: Chrome/Chromium rendering/Views. ...

CVE-2025-5063

CVE-2025-5063 is a use-after-free in Chromes’s Compositing component, exploitable via a crafted HTML page on Google Chrome before version 137.0.7151.55. The issue could lead to heap corruption and is addressed in the Chrome 137 stable update (Linux/Windows/macOS). Affected product: Google Chrome ...

CVE-2024-8637

CVE-2024-8637 : Affects Google Chrome/Chromium components with a Use-After-Free in Media Router on Android prior to 128.0.6613.137, potentially allowing heap corruption. Fedora Debian and other feeds indicate a fixed Chromium/Chromium-based package version 128.0.6613.137 (e.g., chromium 128.0.661...

CVE-2017-5130

CVE-2017-5130 describes an integer overflow in libxml2’s xmlmemory.c that could enable a remote attacker to cause heap corruption via a crafted XML file. The vulnerability affects libxml2 up to version before 2.9.5 and has been observed in products such as Google Chrome (prior to 62.0.3202.62) an...

CVE-2019-5790

CVE-2019-5790 is a heap-based buffer overflow in the V8 JavaScript engine of Chromium/Google Chrome prior to 73.0.3683.75. This vulnerability could allow a remote attacker to execute arbitrary code inside the browser’s sandbox via a crafted HTML page. The Chrome security fix was delivered in the ...

CVE-2019-5810

CVE-2019-5810 is a Chromium/Google Chrome information disclosure vulnerability in the Autofill component, reported as information leakage from process memory via a crafted HTML page in Chromium before version 74.0.3729.108. Public records in Debian security advisories and Arch Linux ASA-201904-12...

CVE-2022-1232

CVE-2022-1232 concerns a type confusion in Chrome/Chromium’s V8 engine prior to 100.0.4896.75, enabling a remote attacker to potentially trigger heap corruption via a crafted HTML page. Multiple sources (Chromium/Chrome advisories, Debian security tracker, Gentoo GLSA) confirm the issue and that ...

CVE-2024-11113

CVE-2024-11113 affects Google Chrome (Accessibility component). A use-after-free in the Accessibility path prior to Chrome 131.0.6778.69 allowed a remote attacker who had compromised the renderer process to potentially cause heap corruption via a crafted HTML page. The Chrome release notes confir...

CVE-2024-7979

CVE-2024-7979 is a Chromium-derived issue: Insufficient data validation in the Windows Installer component of Google Chrome prior to version 128.0.6613.84 allows privilege escalation via a crafted symbolic link. Public sources in the connected documents tie this CVE to Chrome/Chromium, with Debia...

CVE-2019-5821

CVE-2019-5821 is a concrete issue in PDFium used by Google Chrome/Chromium, caused by an integer overflow in PDFium before 74.0.3729.108, enabling a remote attacker to potentially trigger heap corruption with a crafted PDF. Evidence across multiple advisories confirms the affected component (PDFi...