CVE-2026-8538

CVE-2026-8538 describes insufficient validation of untrusted input in the GPU component of Google Chrome, prior to version 148.0.7778.168. A remote attacker who has compromised the renderer process could trigger a denial of service by presenting a crafted HTML page. The description and connected ...

CVE-2026-8538

Insufficient validation of untrusted input in GPU in Google Chrome prior to 148.0.7778.168 allowed a remote attacker who had compromised the renderer process to perform a denial of service via a crafted HTML page. Chromium security severity: High...

CVE-2026-8536

Insufficient validation of untrusted input in ReadingMode in Google Chrome on Mac prior to 148.0.7778.168 allowed a remote attacker who had compromised the renderer process to bypass site Isolation via a crafted HTML page. Chromium security severity: High...

CVE-2026-8534

Integer overflow in GPU in Google Chrome on Linux and ChromeOS prior to 148.0.7778.168 allowed a remote attacker who had compromised the renderer process to potentially perform a sandbox escape via a crafted HTML page. Chromium security severity: High...

EUVD-2026-30449

Out of bounds read in Media in Google Chrome on Linux and ChromeOS prior to 148.0.7778.168 allowed a remote attacker who had compromised the renderer process to obtain potentially sensitive information from process memory via a crafted JPEG file. Chromium security severity: High...

EUVD-2026-30444

Insufficient validation of untrusted input in SiteIsolation in Google Chrome prior to 148.0.7778.168 allowed a remote attacker who had compromised the renderer process to bypass Site Isolation via a crafted HTML page. Chromium security severity: High...

CVE-2026-8528

CVE-2026-8528 affects Google Chrome’s SiteIsolation in Chromium. The issue is "insufficient validation of untrusted input" in SiteIsolation, allowing a remote attacker who has already compromised the renderer process to bypass Site Isolation via a crafted HTML page. The vulnerability is present i...

CVE-2026-8528

Insufficient validation of untrusted input in SiteIsolation in Google Chrome prior to 148.0.7778.168 allowed a remote attacker who had compromised the renderer process to bypass Site Isolation via a crafted HTML page. Chromium security severity: High...

CVE-2026-8523

CVE-2026-8523 : A use-after-free in Mojo within Google Chrome’s renderer can allow a remote attacker who has compromised the renderer to escape the sandbox via a crafted HTML page. Affected: Chrome (Mojo/renderer). Impact per sources: high. Root cause: use-after-free in Mojo. Exploitation context...

CVE-2026-8514

CVE-2026-8514 describes a use-after-free in Chrome’s Aura component affecting the renderer process, enabling a remote attacker to potentially escape the sandbox via a crafted HTML page on Chrome versions prior to 148.0.7778.168. The vulnerability is labeled Critical. Affected software is the Chro...

CVE-2026-8510

Integer overflow in Skia in Google Chrome on Windows prior to 148.0.7778.168 allowed a remote attacker who had compromised the renderer process to perform an out of bounds memory write via a crafted HTML page. Chromium security severity: Critical...

EUVD-2026-30421

Integer overflow in Skia in Google Chrome on Windows prior to 148.0.7778.168 allowed a remote attacker who had compromised the renderer process to perform an out of bounds memory write via a crafted HTML page. Chromium security severity: Critical...

Linux Distros Unpatched Vulnerability : CVE-2026-8583

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Insufficient policy enforcement in WebXR in Google Chrome on Android prior to 148.0.7778.168 allowed a remote attacker who had compromised the renderer process ...

PT-2026-41104

Name of the Vulnerable Software and Affected Versions Google Chrome versions prior to 148.0.7778.168 Description A use after free issue in the UI allows a remote attacker who has compromised the renderer process to potentially perform a sandbox escape via a crafted HTML page. Use after free is a...

PT-2026-41070

Name of the Vulnerable Software and Affected Versions Google Chrome versions prior to 148.0.7778.168 Description An out of bounds read in the UI allows a remote attacker who has compromised the renderer process to obtain potentially sensitive information from process memory by using a crafted HTM...

PT-2026-41057

Name of the Vulnerable Software and Affected Versions Google Chrome versions prior to 148.0.7778.168 Description Insufficient validation of untrusted input in SiteIsolation allows a remote attacker who has compromised the renderer process to bypass Site Isolation using a crafted HTML page. Site...

PT-2026-41075

Name of the Vulnerable Software and Affected Versions Google Chrome versions prior to 148.0.7778.168 Description An out-of-bounds read in the GPU allows a remote attacker who has compromised the renderer process to obtain potentially sensitive information from process memory via a crafted HTML...

PT-2026-41097

Name of the Vulnerable Software and Affected Versions Google Chrome versions prior to 148.0.7778.168 Description Insufficient policy enforcement in AI allows a remote attacker who has compromised the renderer process to bypass Site Isolation, a security feature that ensures websites are loaded in...

PT-2026-41101

Name of the Vulnerable Software and Affected Versions Google Chrome on Android versions prior to 148.0.7778.168 Description Insufficient policy enforcement in the Network component allows a remote attacker who has compromised the renderer process to leak cross-origin data using a crafted HTML pag...

PT-2026-41113

Name of the Vulnerable Software and Affected Versions Google Chrome on iOS versions prior to 148.0.7778.168 Description An inappropriate implementation in Views allows a remote attacker who has compromised the renderer process to perform UI spoofing using a crafted HTML page. UI spoofing is a...