← Back
CWE-119

14,616 CVEs • Abstraction: Class • Likelihood of Exploit: High

Improper Restriction of Operations within the Bounds of a Memory Buffer

The product performs operations on a memory buffer, but it reads from or writes to a memory location outside the buffer's intended boundary. This may result in read or write operations on unexpected memory locations that could be linked to other variables, data structures, or internal program data.

JSON object

Loading...

CVEs (14,616)

CVE
VENDORS
PRODUCTS
UPDATED
PUBLISHED
CVSS
1Google
1Chrome
Oct 21, 2026
Oct 20, 2026
N/A· v4
8.8 HIGH· v3
N/A· v2
Memory corruption in DevTools in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to potentially execute arbitrary code inside the sandbox via a crafted HTML page. (Chromium security severity: Low)
1Google
1Chrome
Oct 21, 2026
Oct 20, 2026
N/A· v4
8.8 HIGH· v3
N/A· v2
Memory corruption in Bluetooth in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML page. (Chromium security severity: Medium)
1Google
1Chrome
Oct 21, 2026
Oct 20, 2026
N/A· v4
8.8 HIGH· v3
N/A· v2
Memory corruption in Browser in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to potentially execute arbitrary code inside the sandbox via a crafted HTML page. (Chromium security severity: Medium)
1Google
1Chrome
Oct 22, 2026
Oct 20, 2026
N/A· v4
9.6 CRITICAL· v3
N/A· v2
Memory corruption in PolicyContainer in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to potentially execute arbitrary code outside the sandbox via a crafted HTML page. (Chromium security severity: Mediu...Show more
Memory corruption in PolicyContainer in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to potentially execute arbitrary code outside the sandbox via a crafted HTML page. (Chromium security severity: Medium)Show less
1Google
1Chrome
Oct 21, 2026
Oct 20, 2026
N/A· v4
8.8 HIGH· v3
N/A· v2
Memory corruption in DevTools in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML page. (Chromium security severity: Low)
1Google
1Chrome
Oct 21, 2026
Oct 20, 2026
N/A· v4
8.8 HIGH· v3
N/A· v2
Memory corruption in DataTransfer in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to potentially execute arbitrary code inside the sandbox via a crafted HTML page. (Chromium security severity: Medium)
1Google
1Chrome
Oct 21, 2026
Oct 20, 2026
N/A· v4
6.5 MEDIUM· v3
N/A· v2
Memory corruption in Loader in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to potentially read memory inside the sandbox via a crafted HTML page. (Chromium security severity: Low)
1Google
1Chrome
Oct 23, 2026
Oct 20, 2026
N/A· v4
8.8 HIGH· v3
N/A· v2
Memory corruption in ContextMenu in Google Chrome on on Android prior to 156.0.8078.47 allowed a remote attacker to potentially execute arbitrary code inside the sandbox via a crafted HTML page. (Chromium security severi...Show more
Memory corruption in ContextMenu in Google Chrome on on Android prior to 156.0.8078.47 allowed a remote attacker to potentially execute arbitrary code inside the sandbox via a crafted HTML page. (Chromium security severity: Low)Show less
1Google
1Chrome
Oct 22, 2026
Oct 20, 2026
N/A· v4
8.8 HIGH· v3
N/A· v2
Memory corruption in Extensions in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML page. (Chromium security severity: Medium)
1Google
1Chrome
Oct 22, 2026
Oct 20, 2026
N/A· v4
8.8 HIGH· v3
N/A· v2
Memory corruption in ShadowDOM in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML page. (Chromium security severity: Medium)
1Google
1Chrome
Oct 22, 2026
Oct 20, 2026
N/A· v4
8.8 HIGH· v3
N/A· v2
Memory corruption in API in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to potentially execute arbitrary code inside the sandbox via a crafted HTML page. (Chromium security severity: Medium)
1Google
1Chrome
Oct 22, 2026
Oct 20, 2026
N/A· v4
8.8 HIGH· v3
N/A· v2
Memory corruption in Skia in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML page. (Chromium security severity: Medium)
1Google
1Chrome
Oct 22, 2026
Oct 20, 2026
N/A· v4
8.8 HIGH· v3
N/A· v2
Memory corruption in Frames in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to potentially execute arbitrary code inside the sandbox via a crafted HTML page. (Chromium security severity: High)
1Google
1Chrome
Oct 22, 2026
Oct 20, 2026
N/A· v4
8.8 HIGH· v3
N/A· v2
Memory corruption in Audio in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML page. (Chromium security severity: Medium)
1Google
1Chrome
Oct 21, 2026
Oct 20, 2026
N/A· v4
6.5 MEDIUM· v3
N/A· v2
Memory corruption in CacheStorage in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to potentially read memory inside the sandbox via a crafted HTML page. (Chromium security severity: High)
1Google
1Chrome
Oct 23, 2026
Oct 20, 2026
N/A· v4
8.8 HIGH· v3
N/A· v2
Memory corruption in Text in Google Chrome on on Android prior to 156.0.8078.47 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML page. (Chromium security severity: Medium)
1Google
1Chrome
Oct 21, 2026
Oct 20, 2026
N/A· v4
8.8 HIGH· v3
N/A· v2
Memory corruption in API in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML page. (Chromium security severity: Medium)
1Google
1Chrome
Oct 21, 2026
Oct 20, 2026
N/A· v4
8.8 HIGH· v3
N/A· v2
Memory corruption in DisplayLocking in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to potentially execute arbitrary code inside the sandbox via a crafted HTML page. (Chromium security severity: High)
1Google
1Chrome
Oct 21, 2026
Oct 20, 2026
N/A· v4
8.8 HIGH· v3
N/A· v2
Memory corruption in Interstitials in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML page. (Chromium security severity: Medium)
1Google
1Chrome
Oct 23, 2026
Oct 20, 2026
N/A· v4
8.8 HIGH· v3
N/A· v2
Memory corruption in Mobile in Google Chrome on on Android prior to 156.0.8078.47 allowed a remote attacker to potentially execute arbitrary code inside the sandbox via a crafted HTML page. (Chromium security severity: L...Show more
Memory corruption in Mobile in Google Chrome on on Android prior to 156.0.8078.47 allowed a remote attacker to potentially execute arbitrary code inside the sandbox via a crafted HTML page. (Chromium security severity: Low)Show less