CVE-2026-11671

Summary: CVE-2026-11671 is a use-after-free in Chrome’s Navigation path that could allow a remote attacker to escape the browser sandbox via a crafted HTML page, affecting Chrome builds prior to 149.0.7827.103. Impact: High (sandbox escape possibility; remote code execution potential) per Chromiu...

CVE-2026-11689

Technical details for CVE-2026-11689 are not publicly available in the provided documents. Monitor for updates from vendors and security advisories.

CVE-2026-11696

Google Chrome on Windows is affected by CVE-2026-11696 due to an uninitialized use in the Video component prior to 149.0.7827.103. A remote attacker who has already gained renderer process access could read potentially sensitive data from process memory via a crafted HTML page. Impact: disclosure...

CVE-2026-11699

CVE-2026-11699 : Use-after-free in Bluetooth in Google Chrome on macOS before 149.0.7827.103. This allows a remote attacker to potentially exploit heap corruption via a crafted HTML page. Impact: high. Remediation: upgrade to Chrome 149.0.7827.103 or later (as referenced by the Chrome release not...

CVE-2026-12465

CVE-2026-12465 affects Google Chrome Metrics: an Object lifecycle issue in Chrome prior to 149.0.7827.155 allows a renderer-compromised remote attacker to potentially escape the sandbox via a crafted HTML page. Patch: update to Chrome 149.0.7827.155 or newer. Exploitation details are not describe...

CVE-2026-13792

CVE-2026-13792 is a use-after-free in Chrome for macOS Touch Bar prior to Chrome 150.0.7871.47 that could allow sandbox escape via a crafted HTML page. Connected sources confirm Chrome 150 includes fixes (e.g., 150.0.7871.47). Affected product: Google Chrome (macOS); vulnerable component: Touch B...

CVE-2026-14107

CVE-2026-14107 describes a use-after-free in Chrome’s Scheduling component, exploitable via a crafted HTML page to achieve remote code execution inside the sandbox. Affected software: Google Chrome, versions before 150.0.7871.47. Root cause: use-after-free in scheduling logic (Chromium). Impact: ...

CVE-2026-14109

CVE-2026-14109 describes insufficient policy enforcement in Mojo within Google Chrome prior to 150.0.7871.47, enabling a sandbox escape if a renderer process is compromised via a crafted HTML page. The connected Linux/Unix-facing records (Debian OSV, NVD, CVE lists, EUVD) corroborate: affected so...

CVE-2026-15132

CVE-2026-15132 affects Google Chrome (V8) with an Uninitialized Use in V8 that could allow a remote attacker to execute arbitrary code inside the browser sandbox via a crafted HTML page. The vulnerability is rated High (CVSS 3.1 base score 8.8) with network attack vector, requiring user interacti...

CVE-2026-15765

CVE-2026-15765 : Use-after-free in Ozone of Google Chrome prior to 150.0.7871.125. A remote attacker, tricking a user into specific UI gestures, could potentially exploit heap corruption via a crafted HTML page. The Chrome security update 150.0.7871.124/125 (Stable Channel) includes fixes for thi...

CVE-2026-16422

Google Chrome on Linux is affected by CVE-2026-16422 due to insufficient validation of untrusted input in the Certificate component. Prior to version 150.0.7871.182, this could allow an attacker with a privileged network position to perform domain spoofing via malicious network traffic. The issue...

CVE-2026-17679

CVE-2026-17679 is a Chrome vulnerability arising from insufficient validation of untrusted input in Print Preview. The issue affects Google Chrome prior to 151.0.7922.72 and could allow a remote attacker who compromises the renderer process to leak cross-origin data via a crafted HTML page. The C...

CVE-2026-17691

This CVE (CVE-2026-17691) concerns an out-of-bounds write in ANGLE used by Google Chrome on Windows, affecting Chrome builds prior to 151.0.7922.72. The root cause is an ANGLE vulnerability that could allow a remote attacker to escape the Chrome sandbox via a crafted HTML page. The impact is desc...

CVE-2026-17732

CVE-2026-17732 affects Google Chrome’s SVG implementation in Chromium, where an inappropriate SVG handling flaw could allow a remote attacker to leak cross-origin data via a crafted HTML page. Upstream references point to Chromium issue 476646486; affectedChromium/Chrome versions were prior to 15...

CVE-2026-17769

CVE-2026-17769 concerns Google Chrome (Cast component). Root cause: insufficient validation of untrusted input in Cast, allowing a remote attacker to leak cross-origin data via a crafted HTML page. Affected: Chrome prior to 151.0.7922.72. Impact is cross-origin data leakage; no exploitation statu...

CVE-2026-17775

Google Chrome vulnerability CVE-2026-17775 arises from an inappropriate implementation in the PresentationAPI, affecting Chrome versions prior to 151.0.7922.72. The issue could allow a remote attacker to leak cross-origin data via a crafted HTML page. Impact is a cross-origin data leak; the docum...

CVE-2026-17790

CVE-2026-17790 : An uninitialized-use flaw in ANGLE within the Chromium-based Google Chrome on Windows allows a crafted HTML page to recover potentially sensitive information from process memory. Affected: ANGLE component of Chrome before version 151.0.7922.72. Upstream reference notes Chromium i...

CVE-2026-17929

CVE-2026-17929 involves the DevTools component of Chromium-based Google Chrome. The flaw stems from insufficient validation of untrusted input, allowing a remote attacker to bypass navigation restrictions via a malicious file. Affected software is Google Chrome before version 151.0.7922.72. Impac...

CVE-2026-17971

CVE-2026-17971 affects Google Chrome (Chromium-based) Frame: an inappropriate implementation in Frame before version 151.0.7922.72 could allow a remote attacker to trigger out-of-bounds memory access via a crafted HTML page. The CVE entry notes Chromium security severity as Low, and the vulnerabi...

CVE-2026-17997

CVE-2026-17997 concerns Google Chrome prior to version 151.0.7922.72, where an inappropriate implementation in Passwords allowed a remote attacker who had gained control of the renderer process to leak cross-origin data via a crafted HTML page. The NVD entry labels the chromium-based severity as ...

CVE-2026-18001

Summary: CVE-2026-18001 reports an inappropriate implementation in Chrome’s WebGL that could leak potentially sensitive information from process memory through a crafted HTML page. Affected software/area: Google Chrome (WebGL path) prior to version 151.0.7922.72. Root cause (as described): Inappr...

CVE-2026-18011

CVE-2026-18011 concerns an inappropriate implementation in Google Chrome for iOS on iOS devices, affecting Chrome versions prior to 151.0.7922.72 . The issue allows a local attacker to obtain potentially sensitive information from process memory given physical access to the device. From the conne...

CVE-2026-2318

CVE-2026-2318 concerns an Inappropriate implementation in PictureInPicture in Google Chrome (Chromium) prior to version 145.0.7632.45. The issue allows a remote attacker to induce UI spoofing via a crafted HTML page after convincing a user to perform specific UI gestures. Affected software is Goo...

CVE-2026-3536

The CVE-2026-3536 issue is an integer overflow in ANGLE within Google Chrome prior to 145.0.7632.159, allowing a remote attacker to potentially perform out-of-bounds memory access via a crafted HTML page. The vulnerability is rated Critical (NVD/Chrome CVSS 3.1: 8.8) with network attack vector an...

CVE-2026-3545

CVE-2026-3545 affects Google Chrome/Chromium prior to 145.0.7632.159. Description across connected sources notes insufficient data validation in Navigation can allow a remote attacker to potentially perform a sandbox escape via a crafted HTML page, with high/critical impact per Chromium. The Debi...

CVE-2026-3936

CVE-2026-3936: Use-after-free in WebView for Google Chrome on Android, arising from heap corruption via a crafted HTML page. Affected component is WebView within Chrome/Chromium on Android; vulnerability occurs in versions prior to 146.0.7680.71. The fix is in 146.0.7680.71 and newer; update Chro...

CVE-2026-3938

CVE-2026-3938 affects Google Chrome/Chromium clipboard policy enforcement. Prior to version 146.0.7680.71, a renderer-compromised attacker could leak cross-origin data via a crafted HTML page due to insufficient clipboard policy enforcement. Impact is data leakage with low severity according to C...

CVE-2026-4676

CVE-2026-4676 affects Dawn in Google Chrome up to version 146.0.7680.165. The issue is a use-after-free in Dawn that could allow a remote attacker to potentially perform a sandbox escape via a crafted HTML page. The description specifies a high Chromium security severity. There are no explicit ex...

CVE-2026-7896

CVE-2026-7896 is a Chrome/Blink vulnerability due to an integer overflow that can lead to heap corruption on a crafted HTML page. The vulnerability affects Blink in Google Chrome versions before 148.0.7778.96. The Chrome 148 stable update lists “Critical CVE-2026-7896: Integer overflow in Blink” ...

CVE-2026-8518

CVE-2026-8518 is a use-after-free in Blink from Google Chrome prior to version 148.0.7778.168 that allows a remote attacker to execute arbitrary code inside the Chrome sandbox via a crafted HTML page. Affected software is Google Chrome (Blink). Root cause: use-after-free in Blink leads to remote ...

CVE-2026-8524

Technical details (affected products, vulnerable components, root cause, or exploitation specifics) are not provided in the supplied documents. Please monitor official advisories for updates.

CVE-2026-9126

CVE-2026-9126 describes a use-after-free in DOM in Google Chrome prior to version 148.0.7778.179 . The vulnerability allows a remote attacker to execute arbitrary code within the browser sandbox via a crafted HTML page. The associated metrics indicate a high-impact, (CVSS 3.1) base score of 8.8 w...

CVE-2026-9898

CVE-2026-9898 affects Google Chrome’s GPU component on Android, with insufficient validation of untrusted input allowing potential sandbox escape if the renderer is compromised via a crafted HTML page. The issue targets Android users running Chrome before build 148.0.7778.216. Google released the...

CVE-2026-9903

CVE-2026-9903 : Insufficient validation of untrusted input in the Site Isolation component of Google Chrome (Chromium) prior to 148.0.7778.216 allows a remote attacker who has already compromised the renderer process to bypass site isolation via a crafted MHTML page. The impact is to weaken the b...

CVE-2026-9924

CVE-2026-9924 is a heap buffer overflow in the ANGLE component of Google Chrome on Windows, fixed by updating to version 148.0.7778.216 or newer. The vulnerability affects the ANGLE path and could allow a remote attacker who has compromised a renderer process to escape the sandbox via a crafted H...

CVE-2026-9940

The CVE-2026-9940 entry describes a heap buffer overflow in ANGLE within Google Chrome (Chromium) prior to 148.0.7778.216. The underlying issue is a heap corruption vulnerability triggered by a crafted HTML page, allowing a remote attacker to potentially exploit it. Severity is rated High; attack...

CVE-2026-9947

CVE-2026-9947 affects Google Chrome’s XML component in Chromium. It is a use-after-free vulnerability that could allow a remote attacker to execute arbitrary code inside the browser sandbox via a crafted HTML page. The issue is reported for Chrome versions prior to 148.0.7778.216; remediation is ...

CVE-2026-9951

CVE-2026-9951 describes a use-after-free in the UI of Google Chrome (Chromium) prior to version 148.0.7778.216. The underlying issue is a UI component use-after-free flaw that could enable a remote attacker to potentially perform a sandbox escape through a crafted HTML page, with the documented i...

CVE-2026-9956

CVE-2026-9956: A use-after-free in Google Chrome on iOS (pre-148.0.7778.216) allows a remote attacker to trigger arbitrary code execution by convincing a user to perform specific UI gestures via a crafted HTML page. Affected product: Google Chrome on iOS. Root cause: use-after-free in the iOS bro...

CVE-2010-3247

CVE-2010-3247 concerns Google Chrome prior to 6.0.472.53, where the browser did not properly restrict URL characters, allowing remote attackers to spoof the URL bar through homographic sequences. OpenVAS entries reinforce the issue as multiple vulnerabilities affecting Chrome (Windows and Linux) ...

CVE-2010-3417

CVE-2010-3417 affects Google Chrome prior to version 6.0.472.59. The vulnerability arises because Chrome does not prompt the user before granting access to the browser extension history, enabling potential disclosure of sensitive information via unspecified vectors. The issue is mitigated by upgr...

CVE-2010-4039

CVE-2010-4039 affects Google Chrome on Linux prior to 7.0.517.41 where the process fails to properly set the PATH environment variable. The description does not specify the exact impact or attack vectors; vulnerability details are limited to this PATH handling issue. Open-source/ANSI references i...

CVE-2011-1116

Google Chrome before 9.0.597.107 is affected by an SVG animation handling flaw that can lead to denial of service or other impact via a stale pointer. Connected sources confirm this CVE (CVE-2011-1116) and reference Chrome upgrades to 9.0.597.107 as the fix; no exploitation details are provided i...

CVE-2011-1199

CVE-2011-1199 affects Google Chrome prior to version 10.0.648.127. The vulnerability arises from improper handling of DataView objects, enabling remote attackers to cause an application crash (DoS) or potentially other unspecified impact via unknown vectors. The available connected sources confir...

CVE-2011-1811

CVE-2011-1811 concerns Google Chrome prior to version 12.0.742.91. The issue is described as a denial-of-service (application crash) triggered by handling a very large number of form submissions, via unspecified vectors. The vulnerability is listed across multiple sources (e.g., NVD/NVD CVE entry...

CVE-2011-1813

Google Chrome vulnerability CVE-2011-1813 affects Chrome prior to 12.0.742.91, due to a flaw in the extension framework that can cause a stale pointer. This can lead to denial of service and possibly other impact via unspecified vectors. The issue is tied to multiple Chrome vulnerabilities fixed ...

CVE-2011-2332

CVE-2011-2332 affects Google Chrome (V8 engine) versions prior to 12.0.742.91. The vulnerability is a Same Origin Policy bypass in the V8 engine, allowing remote attackers to bypass SOP via unspecified vectors. The NVD/OpenVAS references confirm a cross-origin bypass in V8; Chrome 12.0.742.91 con...

CVE-2011-2879

CVE-2011-2879 affects Google Chrome older than 14.0.835.202. The root cause is improper handling of object lifetimes and thread safety during audio node processing, allowing remote attackers to cause a denial of service or potentially other unspecified impact via unknown vectors. Public reference...

CVE-2011-3967

CVE-2011-3967 is associated with Google Chrome/Chromium vulnerabilities described in the GLSA/Gentoo advisories as part of a set titled Chromium: Multiple vulnerabilities. The public records indicate affected Chrome/Chromium versions prior to 17.0.963.46 and recommend upgrading to Chromium 17.0.9...

CVE-2026-10917

CVE-2026-10917 affects Google Chrome (Media component) prior to version 149.0.7827.53. The root cause is insufficient validation of untrusted input in Media, which could allow a remote attacker who has compromised the renderer process to attempt a sandbox escape via a crafted HTML page. The linke...