← Back
CWE-119

14,610 CVEs • Abstraction: Class • Likelihood of Exploit: High

Improper Restriction of Operations within the Bounds of a Memory Buffer

The product performs operations on a memory buffer, but it reads from or writes to a memory location outside the buffer's intended boundary. This may result in read or write operations on unexpected memory locations that could be linked to other variables, data structures, or internal program data.

JSON object

Loading...

CVEs (14,610)

CVE
VENDORS
PRODUCTS
UPDATED
PUBLISHED
CVSS
1Google
1Chrome
Oct 22, 2026
Oct 20, 2026
N/A· v4
6.5 MEDIUM· v3
N/A· v2
Memory corruption in SignIn in Google Chrome on on iOS prior to 156.0.8078.47 allowed a remote attacker to potentially read memory inside the sandbox via a crafted HTML page. (Chromium security severity: Medium)
1Google
1Chrome
Oct 21, 2026
Oct 20, 2026
N/A· v4
6.5 MEDIUM· v3
N/A· v2
Memory corruption in Dawn in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to potentially read memory inside the sandbox via a crafted HTML page. (Chromium security severity: High)
1Google
1Chrome
Oct 22, 2026
Oct 20, 2026
N/A· v4
8.8 HIGH· v3
N/A· v2
Memory corruption in Navigation in Google Chrome on on iOS prior to 156.0.8078.47 allowed a remote attacker to potentially execute arbitrary code inside the sandbox via a crafted HTML page. (Chromium security severity: M...Show more
Memory corruption in Navigation in Google Chrome on on iOS prior to 156.0.8078.47 allowed a remote attacker to potentially execute arbitrary code inside the sandbox via a crafted HTML page. (Chromium security severity: Medium)Show less
1Google
1Chrome
Oct 21, 2026
Oct 20, 2026
N/A· v4
8.8 HIGH· v3
N/A· v2
Memory corruption in ServiceWorker in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML page. (Chromium security severity: High)
1Google
1Chrome
Oct 22, 2026
Oct 20, 2026
N/A· v4
8.8 HIGH· v3
N/A· v2
Memory corruption in Accessibility in Google Chrome on on Mac prior to 156.0.8078.47 allowed a remote attacker to potentially execute arbitrary code inside the sandbox via a crafted HTML page. (Chromium security severity...Show more
Memory corruption in Accessibility in Google Chrome on on Mac prior to 156.0.8078.47 allowed a remote attacker to potentially execute arbitrary code inside the sandbox via a crafted HTML page. (Chromium security severity: High)Show less
1Google
1Chrome
Oct 21, 2026
Oct 20, 2026
N/A· v4
8.8 HIGH· v3
N/A· v2
Memory corruption in ANGLE in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to potentially execute arbitrary code inside the sandbox via a crafted HTML page. (Chromium security severity: High)
1Google
1Chrome
Oct 21, 2026
Oct 20, 2026
N/A· v4
8.8 HIGH· v3
N/A· v2
Memory corruption in DevTools in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to potentially execute arbitrary code inside the sandbox via a crafted HTML page. (Chromium security severity: Low)
1Google
1Chrome
Oct 22, 2026
Oct 20, 2026
N/A· v4
8.8 HIGH· v3
N/A· v2
Memory corruption in Autofill in Google Chrome on on Mac prior to 156.0.8078.47 allowed a remote attacker to potentially execute arbitrary code inside the sandbox via a crafted HTML page. (Chromium security severity: Low...Show more
Memory corruption in Autofill in Google Chrome on on Mac prior to 156.0.8078.47 allowed a remote attacker to potentially execute arbitrary code inside the sandbox via a crafted HTML page. (Chromium security severity: Low)Show less
1Google
1Chrome
Oct 21, 2026
Oct 20, 2026
N/A· v4
8.8 HIGH· v3
N/A· v2
Memory corruption in Extensions in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML page. (Chromium security severity: Medium)
1Google
1Chrome
Oct 22, 2026
Oct 20, 2026
N/A· v4
6.5 MEDIUM· v3
N/A· v2
Memory corruption in GPU in Google Chrome on on Android prior to 156.0.8078.47 allowed a remote attacker to potentially read memory inside the sandbox via a crafted HTML page. (Chromium security severity: Medium)
1Google
1Chrome
Oct 21, 2026
Oct 20, 2026
N/A· v4
8.8 HIGH· v3
N/A· v2
Memory corruption in WebRTC in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to potentially execute arbitrary code inside the sandbox via a crafted HTML page. (Chromium security severity: Critical)
1Google
1Chrome
Oct 21, 2026
Oct 20, 2026
N/A· v4
8.8 HIGH· v3
N/A· v2
Memory corruption in WebAppInstalls in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to potentially execute arbitrary code inside the sandbox via a crafted HTML page. (Chromium security severity: Medium)
1Google
1Chrome
Oct 21, 2026
Oct 20, 2026
N/A· v4
8.8 HIGH· v3
N/A· v2
Memory corruption in WebProtect in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to potentially execute arbitrary code inside the sandbox via a crafted HTML page. (Chromium security severity: Low)
1Google
1Chrome
Oct 21, 2026
Oct 20, 2026
N/A· v4
6.5 MEDIUM· v3
N/A· v2
Memory corruption in Actor in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to potentially read memory inside the sandbox via a crafted HTML page. (Chromium security severity: Low)
1Google
1Chrome
Oct 21, 2026
Oct 20, 2026
N/A· v4
8.8 HIGH· v3
N/A· v2
Memory corruption in FullScreen in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to potentially execute arbitrary code inside the sandbox via a crafted HTML page. (Chromium security severity: Low)
1Google
1Chrome
Oct 21, 2026
Oct 20, 2026
N/A· v4
8.8 HIGH· v3
N/A· v2
Memory corruption in Core in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML page. (Chromium security severity: Low)
1Google
1Chrome
Oct 21, 2026
Oct 20, 2026
N/A· v4
8.8 HIGH· v3
N/A· v2
Memory corruption in Google Lens in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML page. (Chromium security severity: Low)
1Google
1Chrome
Oct 22, 2026
Oct 20, 2026
N/A· v4
8.8 HIGH· v3
N/A· v2
Memory corruption in ANGLE in Google Chrome on on Windows prior to 156.0.8078.47 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML page. (Chromium security severity: High)
1Google
1Chrome
Oct 21, 2026
Oct 20, 2026
N/A· v4
8.8 HIGH· v3
N/A· v2
Memory corruption in XML in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to potentially execute arbitrary code inside the sandbox via a crafted HTML page. (Chromium security severity: High)
1Google
1Chrome
Oct 22, 2026
Oct 20, 2026
N/A· v4
9.6 CRITICAL· v3
N/A· v2
Memory corruption in CredentialProvider in Google Chrome on on Windows prior to 156.0.8078.47 allowed a remote attacker to potentially execute arbitrary code outside the sandbox via a crafted HTML page. (Chromium securit...Show more
Memory corruption in CredentialProvider in Google Chrome on on Windows prior to 156.0.8078.47 allowed a remote attacker to potentially execute arbitrary code outside the sandbox via a crafted HTML page. (Chromium security severity: Medium)Show less