Browse CVEs

HIGH 8.8 CVE-2026-3931 Heap buffer overflow in Skia in Google Chrome prior to 146.0.7680.71 allowed a remote attacker to perform out of bounds memory access via a crafted H… Chrome 146.0.7680.71+ Fix from $1,9502026-03-11 HIGH 8.8 CVE-2026-3913 Heap buffer overflow in WebML in Google Chrome prior to 146.0.7680.71 allowed a remote attacker to potentially exploit heap corruption via a crafted … Chrome 146.0.7680.71+ Fix from $1,9502026-03-11 HIGH 8.8 CVE-2026-3915 Heap buffer overflow in WebML in Google Chrome prior to 146.0.7680.71 allowed a remote attacker to perform an out of bounds memory read via a crafted… Chrome 146.0.7680.71+ Fix from $1,9502026-03-11 HIGH 8.8 CVE-2026-3544 Heap buffer overflow in WebCodecs in Google Chrome prior to 145.0.7632.159 allowed a remote attacker to perform an out of bounds memory write via a c… Chrome 145.0.7632.159 / 145.0.7632.160+ Fix from $1,9502026-03-04 CRITICAL 9.8 CVE-2026-0006 In multiple locations, there is a possible out of bounds read and write due to a heap buffer overflow. This could lead to remote code execution with … Android Mitigation only Fix from $2,3002026-03-02 HIGH 8.8 CVE-2026-2648 Heap buffer overflow in PDFium in Google Chrome prior to 145.0.7632.109 allowed a remote attacker to perform an out of bounds memory write via a craf… Chrome 145.0.7632.109+ Fix from $1,9502026-02-18 HIGH 8.8 CVE-2026-2650 Heap buffer overflow in Media in Google Chrome prior to 145.0.7632.109 allowed a remote attacker to potentially exploit heap corruption via a crafted… Chrome 145.0.7632.109+ Fix from $1,9502026-02-18 HIGH 8.8 CVE-2026-2314 Heap buffer overflow in Codecs in Google Chrome prior to 145.0.7632.45 allowed a remote attacker to potentially exploit heap corruption via a crafted… Chrome 145.0.7632.45+ Fix from $1,9502026-02-11 HIGH 8.8 CVE-2026-1861 Heap buffer overflow in libvpx in Google Chrome prior to 144.0.7559.132 allowed a remote attacker to potentially exploit heap corruption via a crafte… Chrome 144.0.7559.132+ Fix from $1,9502026-02-03 HIGH 8.0 CVE-2025-36923 In NrmmDecoder::DecodeSORTransparentContext of cn_NrmmDecoder.cpp, there is a possible out of bounds write due to a heap buffer overflow. This could … Android Mitigation only Fix from $1,9502025-12-11 HIGH 7.5 CVE-2025-48592 In initDecoder of C2SoftDav1dDec.cpp, there is a possible out of bounds read due to a heap buffer overflow. This could lead to remote information dis… Android Patch available Fix from $1,9502025-12-08 MEDIUM 6.7 CVE-2025-20774 In display, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege if a malicious ac… Android Mitigation only Fix from $1,6002025-12-02 HIGH 8.1 CVE-2025-11458 Heap buffer overflow in Sync in Google Chrome prior to 141.0.7390.65 allowed a remote attacker to perform an out of bounds memory read via a crafted … Chrome 141.0.7390.65+ Fix from $1,9502025-11-06 HIGH 8.8 CVE-2025-11205 Heap buffer overflow in WebGPU in Google Chrome prior to 141.0.7390.54 allowed a remote attacker who had compromised the renderer process to potentia… Chrome 141.0.7390.54+ Fix from $1,9502025-11-06 HIGH 7.1 CVE-2025-11206 Heap buffer overflow in Video in Google Chrome prior to 141.0.7390.54 allowed a remote attacker to potentially perform a sandbox escape via a crafted… Chrome 141.0.7390.54+ Fix from $1,9502025-11-06 HIGH 8.8 CVE-2025-10502 Heap buffer overflow in ANGLE in Google Chrome prior to 140.0.7339.185 allowed a remote attacker to potentially exploit heap corruption via malicious… Chrome 140.0.7339.185+ Fix from $1,9502025-09-24 HIGH 8.8 CVE-2025-32318 In Skia, there is a possible out of bounds write due to a heap buffer overflow. This could lead to remote escalation of privilege with no additional … Android Mitigation only Fix from $1,9502025-09-05 HIGH 7.8 CVE-2025-32325 In appendFrom of Parcel.cpp, there is a possible out of bounds write due to a heap buffer overflow. This could lead to local escalation of privilege … Android Patch available Fix from $1,9502025-09-04 HIGH 7.8 CVE-2024-49714 In avrc_vendor_msg of avrc_opt.cc, there is a possible out of bounds write due to a heap buffer overflow. This could lead to paired device escalation… Android Patch available Fix from $1,9502025-09-04 HIGH 7.8 CVE-2025-26455 In multiple functions of NdkMediaCodec.cpp, there is a possible out of bounds write due to a heap buffer overflow. This could lead to local escalatio… Android Patch available Fix from $1,9502025-09-04 HIGH 7.8 CVE-2025-36906 In ConvertReductionOp of darwinn_mlir_converter_aidl.cc, there is a possible out of bounds write due to a heap buffer overflow. This could lead to lo… Android Mitigation only Fix from $1,9502025-09-04 HIGH 7.3 CVE-2025-36907 In draw_surface_image() of abl/android/lib/draw/draw.c, there is a possible out of bounds write due to a heap buffer overflow. This could lead to loc… Android Mitigation only Fix from $1,9502025-09-04 MEDIUM 6.7 CVE-2025-36902 In syna_cdev_ioctl_store_pid() of syna_tcm2_sysfs.c, there is a possible out of bounds write due to a heap buffer overflow. This could lead to local … Android Mitigation only Fix from $1,6002025-09-04 CRITICAL 9.8 CVE-2025-26416 In initializeSwizzler of SkBmpStandardCodec.cpp, there is a possible out of bounds write due to a heap buffer overflow. This could lead to remote esc… Android Mitigation only Fix from $2,3002025-09-02 HIGH 8.8 CVE-2025-8879 Heap buffer overflow in libaom in Google Chrome prior to 139.0.7258.127 allowed a remote attacker to potentially exploit heap corruption via a curate… Chrome 139.0.7258.127+ Fix from $1,9502025-08-13 HIGH 8.8 CVE-2025-4096 Heap buffer overflow in HTML in Google Chrome prior to 136.0.7103.59 allowed a remote attacker to potentially exploit heap corruption via a crafted H… Chrome 136.0.7103.59+ Fix from $1,9502025-05-05 HIGH 8.8 CVE-2025-3619 Heap buffer overflow in Codecs in Google Chrome on Windows prior to 135.0.7049.95 allowed a remote attacker to potentially exploit heap corruption vi… Chrome 135.0.7049.95+ Fix from $1,9502025-04-16 HIGH 8.8 CVE-2025-1426 Heap buffer overflow in GPU in Google Chrome on Android prior to 133.0.6943.126 allowed a remote attacker to potentially exploit heap corruption via … Chrome 133.0.6943.126+ Fix from $1,9502025-02-19 HIGH 8.8 CVE-2025-0999 Heap buffer overflow in V8 in Google Chrome prior to 133.0.6943.126 allowed a remote attacker to potentially exploit heap corruption via a crafted HT… Chrome 133.0.6943.126+ Fix from $1,9502025-02-19 HIGH 8.2 CVE-2025-0611 Object corruption in V8 in Google Chrome prior to 132.0.6834.110 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML … Chrome 132.0.6834.110+ Fix from $1,9502025-01-22