CVE-2021-21119

CVE-2021-21119 : A use-after-free in the Media component of Google Chrome/Chromium prior to 88.0.4324.96 could allow a remote attacker who had compromised the renderer process to potentially exploit heap corruption via a crafted HTML page. The issue affects Chromium-based browsers and was noted a...

CVE-2021-21121

CVE-2021-21121 is a concrete use-after-free vulnerability in Chromium’s Omnibox on Linux, described as a use-after-free in the Omnibox component of the Chromium browser before version 88.0.4324.96. The advisory states a remote attacker could potentially perform a sandbox escape via a crafted HTML...

CVE-2021-21128

CVE-2021-21128 is a heap buffer overflow in Blink/WebKit of the Chromium browser prior to 88.0.4324.96. Per the Arch/DEBIAN security entries, this is a Chromium/browser component issue that could enable arbitrary code execution and is fixed in newer Chromium builds (upstream or downstream) after ...

CVE-2022-33649

CVE-2022-33649 is a Microsoft Edge (Chromium-based) security feature bypass vulnerability. The NVD entry specifies a 3.1.1 CVSS: 3.1 base score 9.6 (CRITICAL) with network attack vector, no user privileges required, and user interaction needed. The overall impact is high on confidentiality, integ...

CVE-2023-35392

CVE-2023-35392 affects Microsoft Edge (Chromium-based). The vulnerability stems from errors in presenting information in the browser’s UI, enabling a remote spoofing attack that requires user interaction. According to available documents, exploitation is possible over network with user interactio...

CVE-2024-26163

CVE-2024-26163 affects Microsoft Edge (Chromium-based). A security feature bypass vulnerability with CVSSv3.1 base metrics: AV:N/AC:L/PR:N/UI:R/S:C/C:N/I:L/A:N (base score 4.7, MEDIUM). The issue is network-exploitable with user interaction required; impact is limited to bypassing security featur...

CVE-2021-30618

Technical details about CVE-2021-30618 are not publicly provided in the supplied connected documents. Monitoring for updates is advised.

CVE-2024-43472

CVE-2024-43472 affects Microsoft Edge (Chromium-based). Affected component: Edge browser (Chromium-based) with elevation of privilege. Root cause details are not fully disclosed in the provided documents, but Nessus corroborates vulnerability in Edge

CVE-2021-21126

Chromium/Google Chrome is affected by CVE-2021-21126 due to an insufficient policy enforcement in extensions, enabling a remote attacker to bypass site isolation via a crafted extension. Affected components include the extensions subsystem of Chromium (prior to version 88.0.4324.96). The issue is...

CVE-2021-21127

CVE-2021-21127 affects Chromium/Chrome:Insufficient policy enforcement in extensions before 88.0.4324.96 allows bypassing Content Security Policy via a crafted extension. Affected product: Chromium/Chrome extensions subsystem; root cause is policy enforcement weakness in extensions. Impact: attac...

CVE-2024-21326

Technical details for CVE-2024-21326 are not publicly provided in the supplied documents. Monitor for updates.

CVE-2021-21131

CVE-2021-21131 is a policy enforcement issue in Chromium’s File System API (before version 88.0.4324.96). The vulnerability allows a remote attacker to bypass filesystem restrictions via a crafted HTML page. Affected product: Chromium browser (File System API component). Root cause: insufficient ...

CVE-2021-21137

CVE-2021-21137 concerns an incorrect calculation issue in the DevTools component of Chromium prior to 88.0.4324.96. The core vulnerability is an inappropriate implementation in DevTools that could allow a remote attacker to obtain potentially sensitive information from disk via a crafted HTML pag...

CVE-2021-30612

Chromium is affected by CVE-2021-30612, a Use-After-Free in WebRTC. The vulnerability affects Chromium/Chromium-based builds where WebRTC handling can dereference freed objects, potentially leading to memory corruption with high impact (confidentiality, integrity, and availability). The CVSS 3.1 ...

CVE-2024-26192

Microsoft Edge (Chromium-based) Information Disclosure Vulnerability (CVE-2024-26192) affects the Edge Chromium-based browser. Connected sources confirm the vulnerability is a information disclosure flaw in Edge that can expose sensitive data via the browser’s components; CVSS 3.1 vector indicate...

CVE-2021-30606

CVE-2021-30606 is a use-after-free in Chromium’s Blink component. Affects Chromium-based browsers (as reflected in multiple feeds, e.g., Fedora package updates for chromium 93.0.4577.63 and Chrome release notes) with the underlying issue in Blink. Impact is rated High (CVSSv3.1: AV:N/AC:L/PR:N/UI...

CVE-2022-33680

CVE-2022-33680 affects Microsoft Edge (Chromium-based). It is an Elevation of Privilege vulnerability in Edge, with CVSSv3.1 base score 8.3 (NETWORK, HIGH), requiring user interaction and having a changed scope that impacts confidentiality, integrity, and availability. Affected product: Microsoft...

CVE-2023-6702

CVE-2023-6702 describes a Type Confusion in V8 used by Google Chrome/Chromium before version 120.0.6099.109, which could allow a remote attacker to potentially cause heap corruption via a crafted HTML page. The vulnerability is rated High (CVSS 3.1: AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H). Public no...

CVE-2023-21775

CVE-2023-21775 is a Microsoft Edge (Chromium-based) Remote Code Execution vulnerability. Public details in the connected NC SC advisory confirm fixes in Google Chrome and Microsoft Edge, with updates to Chrome 109.0.5414.74 (and Edge equivalents) addressing the issue. The briefing does not provid...

CVE-2023-38187

CVE-2023-38187 affects Microsoft Edge (Chromium-based). Descriptions across sources identify an elevation of privilege vulnerability in Edge; the connected documents confirm the CVE exists but do not provide explicit technical details (vulnerable component/version/root cause) within this set. Exp...

CVE-2021-21129

CVE-2021-21129 describes a policy-enforcement vulnerability in Chromium’s File System API, prior to version 88.0.4324.96, enabling a remote attacker to bypass filesystem restrictions via a crafted HTML page. Root cause: insufficient policy enforcement in the File System API. Impact stated by sour...

CVE-2023-36027

CVE-2023-36027 affects Microsoft Edge (Chromium-based) and is described as an elevated-privilege vulnerability. The OpenVAS NASL entry links this CVE to a pre-update condition: Edge versions older than 118.0.2088.102 / 119.0.2151.58 are affected, with a remote-execution/elevation-privilege scenar...

CVE-2021-30610

CVE-2021-30610 is a use-after-free vulnerability in Chromium’s Extensions API. The issue affects Chromium components used by extensions and is documented with a high impact (C/H/I/A) in CVSS 3.1 (8.8) and a network attack vector with user interaction required. Exploitation status is not provided ...

CVE-2021-30620

CVE-2021-30620 affects Chromium/Blink and is caused by insufficient policy enforcement in Blink. The vulnerability is cited in multiple feeds (Astra Linux, Alpine, Fedora advisories) and maps to a high-severity issue with network exposure. According to the connected documents, the root cause is i...

CVE-2021-21130

CVE-2021-21130 refers to a policy enforcement issue in Chromium’s File System API prior to 88.0.4324.96, allowing a crafted HTML page to bypass filesystem restrictions. Affected software: Chromium browser (before 88.0.4324.96). Root cause: insufficient policy enforcement in the File System API co...

CVE-2021-30622

CVE-2021-30622 is a Use-After-Free vulnerability in Chromium related to WebApp Installs. Connected documents confirm the issue affects Chromium/WebApp Installs and show multiple vendor advisories and package updates (e.g., Chromium 93.x updates for Fedora and Alpine Linux) addressing this CVE. Th...

CVE-2022-30192

Technical details about CVE-2022-30192 are not publicly available in the provided documents. Monitor for updates from vendor advisories and security databases.

CVE-2024-38083

CVE-2024-38083 affects Microsoft Edge (Chromium-based). It is a spoofing vulnerability in the browser’s UI behavior, with impact limited to spoofing user interface and partial data integrity impact; exploitation is not described as remote code execution. The CVE is associated with Edge versions p...

CVE-2022-26909

Technical details for CVE-2022-26909 are not publicly provided in the supplied documents. Monitor for updates from official advisories (Microsoft Edge vulnerability guides) to obtain affected products, impact, and remediation.

CVE-2021-30608

CVE-2021-30608 is a Chromium use-after-free vulnerability in the Web Share feature. Affected component: Web Share in Chromium/Chrome. Root cause indicated: use-after-free. Exploitation status is not provided in the documents. Several vendor advisories reference the CVE (e.g., Chromium-based updat...

CVE-2021-30623

CVE-2021-30623 is a use-after-free in Chromium's Bookmarks code. The connected feeds identify Chromium/Chromium-based Chrome involvement and note the issue among Chrome security fixes; one Fedora entry references a chromium update addressing this family of fixes. The materials do not provide expl...

CVE-2024-21388

Microsoft Edge (Chromium-based) is affected by CVE-2024-21388, a Privilege Escalation vulnerability tied to a private “marketing” API. The connected exploit repository describes a Python-based technique exploiting a private Edge API on privileged Microsoft domains to silently install extensions w...

CVE-2021-30615

CVE-2021-30615 is a Chromium-based cross-origin data leak in Navigation. Connected documents show affected Chromium packages in Fedora (chromium-93.0.4577.63-1.fcXX) and references to Chromium updates in Astra Linux and Alpine Linux feeds, indicating remediation through updating Chromium to a new...

CVE-2023-28286

Technical details about CVE-2023-28286 are not publicly provided in the supplied documents; no affected versions, exploit info, or fixes are described. Monitor for future updates from vendors and security advisories.

CVE-2023-36022

CVE-2023-36022 : Microsoft Edge (Chromium-based) contains a remote code execution vulnerability. Reported as CVSSv3.1: Local attack, User interaction required, with Confidentiality Impact High, Integrity/Availability Low. No exploit details in provided docs. Remediation: apply the vendor update (...

CVE-2024-21337

CVE-2024-21337 is an Elevation of Privilege vulnerability in Microsoft Edge (Chromium-based). Affected product: Edge (Chromium-based). CVSS 3.1 metrics indicate local attack vector, high complexity, no privileges required, user interaction required, and a changed scope with low impact on confiden...

CVE-2023-21794

CVE-2023-21794 is a Microsoft Edge (Chromium-based) spoofing vulnerability. The available description identifies a spoofing issue but does not detail the exact root cause or vulnerable component/versions in this document. Public advisories linked to the CVE indicate mitigation via updating Edge t...

CVE-2025-21404

Microsoft Edge (Chromium-based) contains a Spoofing Vulnerability (CVE-2025-21404). Affected products include Edge Chromium-based on desktop and mobile (iOS/Android); the issue is described as spoofing UI without widely documented exploitation details in the provided sources. The CVE entry lists ...

CVE-2021-30613

CVE-2021-30613 affects Chromium and is described as a Use-After-Free in the Base internals. The provided documents confirm this vulnerability exists in Chromium components and include multiple vendor advisories (e.g., Alpine, Debian, Fedora/Gentoo references) referencing the same CVE. The root ca...

CVE-2021-30611

Chromium: CVE-2021-30611 is a Use-After-Free in WebRTC. Affected component is Chromium WebRTC; underlying issue is a use-after-free in WebRTC code paths. CVSSv3.1 base score 8.8 (HIGH) with network attack vector, no privileges required, user interaction required, and high impact on confidentialit...

CVE-2021-30619

CVE-2021-30619 is a Chromium UI spoofing vulnerability in Autofill. Connected advisories confirm Chromium as the affected product and reference security updates (e.g., Fedora chromium 93.0.4577.63-1.fc35 and related feeds). The CVE description indicates UI spoofing with integrity impact, and the ...

CVE-2023-36008

CVE-2023-36008, Microsoft Edge (Chromium-based) Remote Code Execution Vulnerability, is evidenced in connected sources as a remote code execution issue affecting Microsoft Edge (Chromium-based). The OpenVAS/Nessus entries corroborate an RCE vulnerability referenced with Edge versions around the 1...

CVE-2024-21385

CVE-2024-21385 affects Microsoft Edge (Chromium-based). The vulnerability is an Elevation of Privilege in Edge/Chromium components (root cause not explicitly detailed in the provided documents). CVSS v3.1 vector: AV:N/AC:H/PR:N/UI:R/S:C/C:H/I:H/A:H with base score 8.3 (HIGH). Public sources indic...

CVE-2023-38173

CVE-2023-38173 describes a spoofing vulnerability in Microsoft Edge for Android. Affected product is Edge for Android (Chromium-based). The entry notes a CVSS v3.1 base score of 4.3 (Medium) with network attack vector, no confidentiality impact, and partial integrity impact; user interaction is r...

CVE-2021-21125

CVE-2021-21125 is a policy-enforcement vulnerability in the Chromium-based File System API of Google Chrome (Windows) before version 88.0.4324.96. The issue allowed a remote attacker to bypass filesystem restrictions via a crafted HTML page. Connected sources confirm this CVE occurs within Chromi...

CVE-2021-21136

CVE-2021-21136 affects Chromium WebView on Android (before 88.0.4324.96). Root cause: insufficient policy enforcement in WebView. Impact: remote attacker could leak cross-origin data via a crafted HTML page. Public fixes and references indicate upgrade to Chromium 88.0.4324.96+ (e.g., Chromium pa...

CVE-2021-30609

CVE-2021-30609 is a use-after-free vulnerability in Chromium’s Sign-In code path. Connected advisories (Astra Linux, Fedora package updates) indicate Chromium/Chromium-based packages were updated to address this issue (e.g., Chromium 93.0.4577.x in Fedora updates). The available documents do not ...

CVE-2021-30616

CVE-2021-30616 is a reported vulnerability in Chromium involving a Use after free in Media . The connected documents confirm the affected component is Chromium’s media handling code, with the root cause described as a use-after-free. Impacts are described as affecting confidentiality, integrity, ...

CVE-2021-30621

Chromium/CVE-2021-30621: UI Spoofing in Autofill. Affects Chromium and downstream Chromium-based builds (e.g., Chromium 93.x updates noted in Fedora/Alpine security bulletins). Description consistently labels a UI spoofing flaw in Autofill; connected advisories reference Chromium security fixes b...

CVE-2021-21133

CVE-2021-21133 is a policy-enforcement vulnerability in Chromium’s Downloads component. The issue, observed in Chromium before 88.0.4324.96, could allow an attacker who lures a user to download files to bypass navigation restrictions via a crafted HTML page. Public advisories (Arch Linux ASA-2021...