Chromium
by Chromium
Source repositories
CVEs (1,132)
| CVE | Vendor / Product | Sev | Risk | CVSS | EPSS | KEV | Published | Description |
|---|---|---|---|---|---|---|---|---|
| CVE-2023-3217 | Hig | 0.58 | 8.8 | 0.13 | Jun 13, 2023 | Use after free in WebXR in Google Chrome prior to 114.0.5735.133 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. (Chromium security severity: High) | ||
| CVE-2023-2723 | Hig | 0.58 | 8.8 | 0.15 | May 16, 2023 | Use after free in DevTools in Google Chrome prior to 113.0.5672.126 allowed a remote attacker who had compromised the renderer process to potentially exploit heap corruption via a crafted HTML page. (Chromium security severity: High) | ||
| CVE-2021-30624 | Hig | 0.58 | 8.8 | 0.04 | Sep 3, 2021 | Chromium: CVE-2021-30624 Use after free in Autofill | ||
| CVE-2021-30623 | Hig | 0.58 | 8.8 | 0.04 | Sep 3, 2021 | Chromium: CVE-2021-30623 Use after free in Bookmarks | ||
| CVE-2021-30622 | Hig | 0.58 | 8.8 | 0.04 | Sep 3, 2021 | Chromium: CVE-2021-30622 Use after free in WebApp Installs | ||
| CVE-2021-30620 | Hig | 0.58 | 8.8 | 0.04 | Sep 3, 2021 | Chromium: CVE-2021-30620 Insufficient policy enforcement in Blink | ||
| CVE-2021-30618 | Hig | 0.58 | 8.8 | 0.04 | Sep 3, 2021 | Chromium: CVE-2021-30618 Inappropriate implementation in DevTools | ||
| CVE-2021-30616 | Hig | 0.58 | 8.8 | 0.04 | Sep 3, 2021 | Chromium: CVE-2021-30616 Use after free in Media | ||
| CVE-2021-30614 | Hig | 0.58 | 8.8 | 0.04 | Sep 3, 2021 | Chromium: CVE-2021-30614 Heap buffer overflow in TabStrip | ||
| CVE-2021-30613 | Hig | 0.58 | 8.8 | 0.04 | Sep 3, 2021 | Chromium: CVE-2021-30613 Use after free in Base internals | ||
| CVE-2021-30610 | Hig | 0.58 | 8.8 | 0.04 | Sep 3, 2021 | Chromium: CVE-2021-30610 Use after free in Extensions API | ||
| CVE-2021-30609 | Hig | 0.58 | 8.8 | 0.04 | Sep 3, 2021 | Chromium: CVE-2021-30609 Use after free in Sign-In | ||
| CVE-2021-30608 | Hig | 0.58 | 8.8 | 0.04 | Sep 3, 2021 | Chromium: CVE-2021-30608 Use after free in Web Share | ||
| CVE-2021-30607 | Hig | 0.58 | 8.8 | 0.04 | Sep 3, 2021 | Chromium: CVE-2021-30607 Use after free in Permissions | ||
| CVE-2021-30606 | Hig | 0.58 | 8.8 | 0.04 | Sep 3, 2021 | Chromium: CVE-2021-30606 Use after free in Blink | ||
| CVE-2026-19560 | Hig | 0.57 | 8.8 | 0.00 | Aug 11, 2026 | Use after free in Blink in Google Chrome prior to 151.0.7922.137 allowed a remote attacker to execute arbitrary code inside a sandbox via a crafted HTML page. (Chromium security severity: High) | ||
| CVE-2026-19559 | Hig | 0.57 | 8.8 | 0.00 | Aug 11, 2026 | Use after free in HTML in Google Chrome prior to 151.0.7922.137 allowed a remote attacker to execute arbitrary code inside a sandbox via a crafted HTML page. (Chromium security severity: High) | ||
| CVE-2026-19174 | Hig | 0.57 | 8.8 | 0.00 | Aug 6, 2026 | Integer overflow in V8 in Google Chrome prior to 151.0.7922.109 allowed a remote attacker to execute arbitrary code inside a sandbox via a crafted HTML page. (Chromium security severity: High) | ||
| CVE-2026-19169 | Hig | 0.57 | 8.8 | 0.00 | Aug 6, 2026 | Insufficient validation of untrusted input in Contextual Tasks in Google Chrome prior to 151.0.7922.109 allowed a remote attacker to perform privilege escalation via a crafted HTML page. (Chromium security severity: High) | ||
| CVE-2026-19168 | Hig | 0.57 | 8.8 | 0.00 | Aug 6, 2026 | Inappropriate implementation in V8 in Google Chrome prior to 151.0.7922.109 allowed a remote attacker to execute arbitrary code inside a sandbox via a crafted HTML page. (Chromium security severity: High) |
- risk 0.58cvss 8.8epss 0.13
Use after free in WebXR in Google Chrome prior to 114.0.5735.133 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. (Chromium security severity: High)
- risk 0.58cvss 8.8epss 0.15
Use after free in DevTools in Google Chrome prior to 113.0.5672.126 allowed a remote attacker who had compromised the renderer process to potentially exploit heap corruption via a crafted HTML page. (Chromium security severity: High)
- risk 0.58cvss 8.8epss 0.04
Chromium: CVE-2021-30624 Use after free in Autofill
- risk 0.58cvss 8.8epss 0.04
Chromium: CVE-2021-30623 Use after free in Bookmarks
- risk 0.58cvss 8.8epss 0.04
Chromium: CVE-2021-30622 Use after free in WebApp Installs
- risk 0.58cvss 8.8epss 0.04
Chromium: CVE-2021-30620 Insufficient policy enforcement in Blink
- risk 0.58cvss 8.8epss 0.04
Chromium: CVE-2021-30618 Inappropriate implementation in DevTools
- risk 0.58cvss 8.8epss 0.04
Chromium: CVE-2021-30616 Use after free in Media
- risk 0.58cvss 8.8epss 0.04
Chromium: CVE-2021-30614 Heap buffer overflow in TabStrip
- risk 0.58cvss 8.8epss 0.04
Chromium: CVE-2021-30613 Use after free in Base internals
- risk 0.58cvss 8.8epss 0.04
Chromium: CVE-2021-30610 Use after free in Extensions API
- risk 0.58cvss 8.8epss 0.04
Chromium: CVE-2021-30609 Use after free in Sign-In
- risk 0.58cvss 8.8epss 0.04
Chromium: CVE-2021-30608 Use after free in Web Share
- risk 0.58cvss 8.8epss 0.04
Chromium: CVE-2021-30607 Use after free in Permissions
- risk 0.58cvss 8.8epss 0.04
Chromium: CVE-2021-30606 Use after free in Blink
- risk 0.57cvss 8.8epss 0.00
Use after free in Blink in Google Chrome prior to 151.0.7922.137 allowed a remote attacker to execute arbitrary code inside a sandbox via a crafted HTML page. (Chromium security severity: High)
- risk 0.57cvss 8.8epss 0.00
Use after free in HTML in Google Chrome prior to 151.0.7922.137 allowed a remote attacker to execute arbitrary code inside a sandbox via a crafted HTML page. (Chromium security severity: High)
- risk 0.57cvss 8.8epss 0.00
Integer overflow in V8 in Google Chrome prior to 151.0.7922.109 allowed a remote attacker to execute arbitrary code inside a sandbox via a crafted HTML page. (Chromium security severity: High)
- risk 0.57cvss 8.8epss 0.00
Insufficient validation of untrusted input in Contextual Tasks in Google Chrome prior to 151.0.7922.109 allowed a remote attacker to perform privilege escalation via a crafted HTML page. (Chromium security severity: High)
- risk 0.57cvss 8.8epss 0.00
Inappropriate implementation in V8 in Google Chrome prior to 151.0.7922.109 allowed a remote attacker to execute arbitrary code inside a sandbox via a crafted HTML page. (Chromium security severity: High)
Page 5 of 57