CVE-2026-14124

CVE-2026-14124 affects Google Chrome on Windows, prior to version 150.0.7871.47, where an inappropriate CredentialProvider implementation enables a local attacker to achieve OS-level privilege escalation via a malicious file. Root cause: flawed CredentialProvider handling in Chrome on Windows. Af...

CVE-2026-14115

CVE-2026-14115 affects Google Chrome (Chromium-based) Cast component prior to 150.0.7871.47. Root cause: insufficient validation of untrusted input in Cast. Impact: remote attacker who has compromised the renderer process can escalate privileges via a crafted HTML page. Mitigation: upgrade to Chr...

CVE-2026-14094

CVE-2026-14094 : Use-after-free in the Google Chrome Installer on Windows allows local privilege escalation via a malicious file. Affected: Chrome Installer on Windows (pre-150.0.7871.47). Root cause: use-after-free in Installer code. Impact: OS-level privilege escalation as described by Chromium...

CVE-2026-14060

CVE-2026-14060 affects Chromoting in Google Chrome on Windows before version 150.0.7871.47. Root cause: insufficient validation of untrusted input. Impact: local privilege escalation via a malicious file. Exploitation status and detailed mitigation are not provided in the documents. Connected ref...

CVE-2026-14041

CVE-2026-14041 describes insufficient policy enforcement in Chrome’s Serial component before version 150.0.7871.47, enabling a remote attacker to escalate privileges via a crafted HTML page. Affected software is Google Chrome (Chromium-derived); the issue is a low severity, as noted. The availabl...

CVE-2026-14036

CVE-2026-14036 : The vulnerability affects Google Chrome’s Bluetooth policy enforcement. Before version 150.0.7871.47, insufficient policy enforcement could allow a remote attacker to escalate privileges by persuading a user to load a crafted HTML page. This is documented in the CVE and NVD entri...

CVE-2026-14018

CVE-2026-14018 refers to a use-after-free in the Chrome OS/Windows Updater component that could enable a local attacker to achieve OS‑level privilege escalation via a malicious file . Affected product: Google Chrome on Windows (Updater). Vulnerable component/file: Updater; root cause is use-after...

CVE-2026-13927

CVE-2026-13927 concerns Google Chrome on Android, where insufficient validation of untrusted input in the UI could allow a local attacker to escalate privileges via a malicious file. The issue affects Chrome versions prior to 150.0.7871.47. The description across sources consistently notes a UI i...

CVE-2026-13928

CVE-2026-13928 affects Google Chrome on multiple platforms, where insufficient validation of untrusted input in Enterprise components allows a remote attacker to upgrade privileges via a crafted HTML page. The issue is tied to Chrome versions prior to 150.0.7871.47 (Chromium base: Medium severity...

CVE-2026-13903

CVE-2026-13903: Google Chrome Bluetooth policy enforcement flaw prior to 150.0.7871.47 could let a remote attacker escalate privileges via a crafted HTML page. This is documented across the CVE entries, confirming the affected software (Chrome) and vulnerability class (Bluetooth policy enforcemen...

CVE-2026-13897

CVE-2026-13897 describes insufficient policy enforcement in Chromecast within Google Chrome prior to version 150.0.7871.47, allowing a remote attacker to escalate privileges via a crafted HTML page. The affected component is Chromecast in Chrome; root cause is policy enforcement weakness. The vul...

CVE-2026-13891

CVE-2026-13891 affects Google Chrome . The issue is described as insufficient validation of untrusted input in Extensions before version 150.0.7871.47 . A remote attacker who had compromised the renderer process could escalate privileges via a crafted HTML page. The vulnerability is rated medium ...

CVE-2026-13864

The vulnerability CVE-2026-13864 affects Google Chrome’s WebHID component prior to version 150.0.7871.47, caused by insufficient policy enforcement. An attacker could lure a user to install a crafted Chrome Extension, enabling privilege escalation on the affected browser. The issue is tied to Web...

CVE-2026-13863

CVE-2026-13863 affects Google Chrome on Android through the CustomTabs component, due to insufficient validation of untrusted input. This allows a local attacker to escalate privileges via a malicious file. The impact is limited to local privilege escalation; remediation is to upgrade Chrome to v...

CVE-2026-13856

Summary: CVE-2026-13856 refers to insufficient validation of untrusted input in the Speech component of Google Chrome on Android. Component: Chrome on Android; likely affects the Speech-related functionality. Root cause: insufficient validation in the input handling path within the renderer. Impa...

CVE-2026-13844

Summary: CVE-2026-13844 describes a use-after-free in Chrome’s Updater on Windows, enabling local privilege escalation via a malicious file. Affected software: Google Chrome on Windows. Impact: OS-level privilege escalation; no further exploit details are provided in the supplied documents. Affec...

CVE-2026-13827

CVE-2026-13827 describes a use-after-free in the Updater component of Google Chrome on macOS prior to version 150.0.7871.47 , enabling a local attacker to achieve privilege escalation via a malicious file. The affected part is the Updater; root cause is a use-after-free condition. The vulnerabili...

CVE-2026-13824

CVE-2026-13824 : Affects Google Chrome extensions; root cause is insufficient policy enforcement in the Extensions module. Versions prior to 150.0.7871.47 are vulnerable. If a renderer process is compromised, a crafted HTML page can lead to privilege escalation. According to the sources, remediat...

CVE-2026-13800

CVE-2026-13800 affects Google Chrome Updater on Windows, where an inappropriate updater implementation allowed OS-level privilege escalation via a malicious file. A fix is available in Chrome 150.0.7871.47 (released for Windows; the related update notes reference 150.0.7871.46/47). Remediate by u...

CVE-2026-57995

phpMyFAQ