11217 matches found
CVE-2026-7341
Use after free in WebRTC in Google Chrome prior to 147.0.7727.138 allowed a remote attacker to execute arbitrary code inside a sandbox via a crafted HTML page. Chromium security severity: High...
CVE-2026-7346
CVE-2026-7346 affects Google Chrome on all platforms prior to 147.0.7727.138, due to an inappropriate implementation in Tint that allows out-of-bounds memory access via a crafted HTML page. The vulnerability enables remote code execution with network access and requires user interaction, per CVSS...
CVE-2026-7346
Inappropriate implementation in Tint in Google Chrome prior to 147.0.7727.138 allowed a remote attacker to perform out of bounds memory access via a crafted HTML page. Chromium security severity: High...
CVE-2026-7337
Type Confusion in V8 in Google Chrome prior to 147.0.7727.138 allowed a remote attacker to execute arbitrary code inside a sandbox via a crafted HTML page. Chromium security severity: High...
CVE-2026-7337
Type Confusion in V8 in Google Chrome prior to 147.0.7727.138 allowed a remote attacker to execute arbitrary code inside a sandbox via a crafted HTML page. Chromium security severity: High...
CVE-2026-7336
CVE-2026-7336 is a use-after-free in WebRTC reported for Google Chrome versions before 147.0.7727.138. The issue allows remote code execution in the sandbox via a crafted HTML page. Affected product: Google Chrome (pre-147.7727.138). Root cause: use-after-free in WebRTC per the sources. Impact: a...
CVE-2026-7336
Use after free in WebRTC in Google Chrome prior to 147.0.7727.138 allowed a remote attacker to execute arbitrary code inside a sandbox via a crafted HTML page. Chromium security severity: High...
CVE-2026-7335
CVE-2026-7335 is a use-after-free in Google Chrome’s media handling prior to 147.0.7727.138 that could allow a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML page. Affected product: Google Chrome. Root cause: use-after-free in media. Impact: arbitrary code executi...
CVE-2026-7335
Use after free in media in Google Chrome prior to 147.0.7727.138 allowed a remote attacker to execute arbitrary code inside a sandbox via a crafted HTML page. Chromium security severity: High...
CVE-2026-7348
CVE-2026-7348 is a use-after-free in Chrome's Codecs component. A crafted HTML page can trigger the bug to achieve remote arbitrary code execution inside the Chrome sandbox. Affected: Google Chrome before 147.0.7727.138. Root cause: use-after-free in Codecs. Impact: high (arbitrary code execution...
CVE-2026-7348
Use after free in Codecs in Google Chrome prior to 147.0.7727.138 allowed a remote attacker to execute arbitrary code inside a sandbox via a crafted HTML page. Chromium security severity: High...
EUVD-2026-26176
Use after free in WebMIDI in Google Chrome prior to 147.0.7727.138 allowed a remote attacker who had compromised the renderer process to potentially perform a sandbox escape via a crafted HTML page. Chromium security severity: High...
CVE-2026-7350
Use after free in WebMIDI in Google Chrome prior to 147.0.7727.138 allowed a remote attacker who had compromised the renderer process to potentially perform a sandbox escape via a crafted HTML page. Chromium security severity: High...
CVE-2026-7352
Use after free in Media in Google Chrome on Android prior to 147.0.7727.138 allowed a remote attacker who had compromised the renderer process to potentially perform a sandbox escape via a crafted HTML page. Chromium security severity: High...
CVE-2026-7352
Use after free in Media in Google Chrome on Android prior to 147.0.7727.138 allowed a remote attacker who had compromised the renderer process to potentially perform a sandbox escape via a crafted HTML page. Chromium security severity: High...
CVE-2026-7353
CVE-2026-7353 describes a heap buffer overflow in Skia used by Google Chrome before 147.0.7727.138. The flaw could allow a remote attacker who has compromised the renderer process to escape the sandbox via a crafted HTML page, as stated in multiple sources. Affected product: Google Chrome (pre-14...
CVE-2026-7354
CVE-2026-7354 : Out-of-bounds read/write in ANGLE (Chromium/Google Chrome) prior to 147.0.7727.138 can allow a remote attacker to sandbox-escape via a crafted HTML page. This affects Google Chrome and is listed with high severity; the Chrome release notes indicate the fix is included in the 147.0...
EUVD-2026-26182
Use after free in Navigation in Google Chrome prior to 147.0.7727.138 allowed a remote attacker to execute arbitrary code via a crafted HTML page. Chromium security severity: High...
