46985 matches found
CVE-2026-7969
Integer overflow in Network in Google Chrome prior to 148.0.7778.96 allowed a remote attacker who had compromised the renderer process to bypass same origin policy via a crafted HTML page. Chromium security severity: Medium...
CVE-2026-7967
Insufficient validation of untrusted input in Navigation in Google Chrome prior to 148.0.7778.96 allowed a remote attacker who had compromised the renderer process to potentially perform a sandbox escape via a crafted HTML page. Chromium security severity: Medium...
CVE-2026-7961
CVE-2026-7961 corresponds to a vulnerability in Google Chrome prior to 148.0.7778.96. The connected documents describe insufficient validation of untrusted input in Permissions, enabling an attacker on a local network segment to leak cross-origin data via malicious network traffic. The issue is d...
CVE-2026-7951
Out of bounds write in WebRTC in Google Chrome prior to 148.0.7778.96 allowed a remote attacker to execute arbitrary code inside a sandbox via a crafted HTML page. Chromium security severity: Medium...
CVE-2026-7951
Out of bounds write in WebRTC in Google Chrome prior to 148.0.7778.96 allowed a remote attacker to execute arbitrary code inside a sandbox via a crafted HTML page. Chromium security severity: Medium...
CVE-2026-7949
CVE-2026-7949 : Out-of-bounds read in Skia used by Google Chrome before 148.0.7778.96 allows a remote attacker who has compromised the renderer process to leak cross-origin data via a crafted Chrome Extension. Affected: Google Chrome/Skia stack; Root cause: out-of-bounds read in Skia. Impact: pot...
CVE-2026-7946
CVE-2026-7946 affects Google Chrome WebUI on Linux, Mac, Windows, and ChromeOS prior to 148.0.7778.96, where insufficient policy enforcement in the WebUI allowed a renderer-compromised remote attacker to bypass site isolation via a crafted HTML page. The connected Debian OSV entry confirms the sa...
CVE-2026-7943
Insufficient validation of untrusted input in ANGLE in Google Chrome prior to 148.0.7778.96 allowed a remote attacker who had compromised the renderer process to perform arbitrary read/write via a crafted HTML page. Chromium security severity: Medium...
CVE-2026-7938
Use after free in CSS in Google Chrome prior to 148.0.7778.96 allowed a remote attacker to execute arbitrary code inside a sandbox via a crafted HTML page. Chromium security severity: Medium...
CVE-2026-7937
Insufficient policy enforcement in DevTools in Google Chrome prior to 148.0.7778.96 allowed an attacker who convinced a user to install a malicious extension to bypass navigation restrictions via a crafted Chrome Extension. Chromium security severity: Medium...
CVE-2026-7935
CVE-2026-7935 concerns an Inappropriate implementation in the Speech component of Google Chrome, affecting Chrome versions prior to 148.0.7778.96. A remote attacker could induce UI spoofing via a crafted HTML page. The Debian OSV, ENISA EUVD, CVE lists, and PT Security entry corroborate the issue...
CVE-2026-7931
Insufficient validation of untrusted input in iOS in Google Chrome on iOS prior to 148.0.7778.96 allowed a remote attacker to perform UI spoofing via a crafted HTML page. Chromium security severity: Medium...
CVE-2026-7927
CVE-2026-7927 is a Chrome sandbox Type Confusion in Runtime vulnerability affecting Google Chrome before version 148.0.7778.96. The issue, described in multiple connected sources, stems from a runtime type-handling confusion that could allow a remote attacker to execute arbitrary code within the ...
CVE-2026-7923
Out of bounds write in Skia in Google Chrome prior to 148.0.7778.96 allowed a remote attacker who had compromised the renderer process to potentially perform a sandbox escape via a crafted HTML page. Chromium security severity: High...
CVE-2026-7922
Use after free in ServiceWorker in Google Chrome prior to 148.0.7778.96 allowed a remote attacker to potentially perform a sandbox escape via a crafted HTML page. Chromium security severity: High...
CVE-2026-7922
Use after free in ServiceWorker in Google Chrome prior to 148.0.7778.96 allowed a remote attacker to potentially perform a sandbox escape via a crafted HTML page. Chromium security severity: High...
CVE-2026-7923
Out of bounds write in Skia in Google Chrome prior to 148.0.7778.96 allowed a remote attacker who had compromised the renderer process to potentially perform a sandbox escape via a crafted HTML page. Chromium security severity: High...
CVE-2026-7919
Use after free in Aura in Google Chrome prior to 148.0.7778.96 allowed a remote attacker who had compromised the renderer process to potentially perform a sandbox escape via a crafted HTML page. Chromium security severity: High...
CVE-2026-7911
Use after free in Aura in Google Chrome on Windows prior to 148.0.7778.96 allowed a remote attacker who had compromised the renderer process to potentially perform a sandbox escape via a crafted HTML page. Chromium security severity: High...
