63 matches found
CVE-2026-91713
A flaw was found in the Browser component of Google Chrome. A remote attacker, after compromising the renderer process, could exploit missing authorization to spoof user interface UI elements. This could lead to a user being deceived by malicious UI, potentially enabling further attacks...
CVE-2026-92055
Privilege escalation in the DevTools component. This vulnerability was fixed in Firefox 156, Firefox ESR 153.3, Thunderbird 156, and Thunderbird 153.3...
EUVD-2026-78482
Mitigation bypass in the Remote Settings Client component. This vulnerability was fixed in Firefox 156, Firefox ESR 115.41, Firefox ESR 140.16, Firefox ESR 153.3, Thunderbird 156, and Thunderbird 140.16...
Chromium CVE-2026-87494: Use after free in Browser
This CVE was assigned by Chrome. Microsoft Edge Chromium-based ingests Chromium, which addresses this vulnerability. Please see Google Chrome Releases for more information...
CVE-2026-87494
Use after free in Browser in Google Chrome on on Windows prior to 153...
CVE-2026-87496
UI misrepresentation in Browser in Google Chrome prior to 153.0.8010.3...
CVE-2026-87560
Missing authorization in Browser in Google Chrome prior to 153.0.8010...
CVE-2026-87641
Race condition in Browser in Google Chrome prior to 153.0.8010.36 allo...
CVE-2026-87436
Incomplete cleanup in Browser in Google Chrome prior to 153.0.8010.36...
CVE-2026-87560
Missing authorization in Browser in Google Chrome prior to 153.0.8010.36 allowed a remote attacker to bypass system access restrictions via a crafted HTML page. Chromium security severity: Medium...
CVE-2026-87641
A race condition in the Browser component of Google Chrome prior to version 153.0.8010.36 allowed a remote attacker to bypass system access restrictions by serving a crafted HTML page. The vulnerability is rated Medium severity by Chromium and scored 4.2 (CVSS 3.1) by NVD, reflecting high attack ...
CVE-2026-84349
Use after free in Browser in Google Chrome prior to 152.0.7977.75 allowed a remote attacker who had compromised the renderer process to execute arbitrary code outside the sandbox via a crafted HTML page. Chromium security severity: High...
CVE-2026-84356
An ui misrepresentation flaw was found in the FullScreen component of the Chromium browser. Upstream bugs: https://code.google.com/p/chromium/issues/detail?id=503787232 Mitigation Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product...
CVE-2026-84357
An improper input validation flaw was found in the Omnibox component of the Chromium browser. Upstream bugs: https://code.google.com/p/chromium/issues/detail?id=523208474 Mitigation Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Produc...
CVE-2026-84349
An use after free flaw was found in the Browser component of the Chromium browser. Upstream bugs: https://code.google.com/p/chromium/issues/detail?id=537105664 Mitigation Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security...
CVE-2026-84348
Information leak in MediaCapture in Google Chrome prior to 152.0.7977...
CVE-2026-84349
Use after free in Browser in Google Chrome prior to 152.0.7977.75 allo...
CVE-2026-84128
Privilege escalation in the WebDriver BiDi component. This vulnerability was fixed in Firefox 155 and Thunderbird 155...
CVE-2026-84129 Site isolation issue in the DOM: Navigation component
Site isolation issue in the DOM: Navigation component. This vulnerability was fixed in Firefox 155, Firefox ESR 153.2, Thunderbird 155, and Thunderbird 153.2...
