13706 matches found
CVE-2026-9992
Use after free in Network in Google Chrome prior to 148.0.7778.216 allowed a remote attacker to execute arbitrary code inside a sandbox via a crafted HTML page. Chromium security severity: High...
CVE-2026-9992
Use after free in Network in Google Chrome prior to 148.0.7778.216 allowed a remote attacker to execute arbitrary code inside a sandbox via a crafted HTML page. Chromium security severity: High...
CVE-2026-9991
Inappropriate implementation in Media in Google Chrome on Windows prior to 148.0.7778.216 allowed a remote attacker who had compromised the renderer process to leak cross-origin data via a crafted HTML page. Chromium security severity: High...
CVE-2026-9991
Inappropriate implementation in Media in Google Chrome on Windows prior to 148.0.7778.216 allowed a remote attacker who had compromised the renderer process to leak cross-origin data via a crafted HTML page. Chromium security severity: High...
CVE-2026-9990
Google Chrome and Microsoft Edge are vulnerable to a use after free memory corruption flaw in the WebAppInstalls component. A remote attacker can exploit this via a crafted HTML page by convincing a user to perform specific UI gestures, potentially leading to arbitrary code execution , denial of ...
CVE-2026-9991
Inappropriate implementation in Media in Google Chrome on Windows prior to 148.0.7778.216 allowed a remote attacker who had compromised the renderer process to leak cross-origin data via a crafted HTML page. Chromium security severity: High...
CVE-2026-9990
Use after free in WebAppInstalls in Google Chrome on Mac prior to 148.0.7778.216 allowed a remote attacker who convinced a user to engage in specific UI gestures to potentially exploit heap corruption via a crafted HTML page. Chromium security severity: High...
CVE-2026-9986
Google Chrome and Microsoft Edge are vulnerable to a high-severity security flaw in the OptimizationGuide component due to insufficient validation of untrusted input . A remote attacker who has already compromised the renderer process can exploit this to perform UI spoofing by serving a specially...
CVE-2026-9985
Google Chrome and Microsoft Edge are affected by CVE-2026-9985 , a vulnerability in the Media component caused by insufficient validation of untrusted input. A remote attacker who has already compromised the renderer process can exploit this via a crafted HTML page to obtain potentially sensitive...
CVE-2026-9984
Use after free in UI in Google Chrome on Windows prior to 148.0.7778.216 allowed a remote attacker to execute arbitrary code via a crafted HTML page. Chromium security severity: High...
CVE-2026-9984
Use after free in UI in Google Chrome on Windows prior to 148.0.7778.216 allowed a remote attacker to execute arbitrary code via a crafted HTML page. Chromium security severity: High...
CVE-2026-9981
Inappropriate implementation in Skia in Google Chrome prior to 148.0.7778.216 allowed a remote attacker to obtain potentially sensitive information from process memory via a crafted HTML page. Chromium security severity: High...
CVE-2026-9981
Inappropriate implementation in Skia in Google Chrome prior to 148.0.7778.216 allowed a remote attacker to obtain potentially sensitive information from process memory via a crafted HTML page. Chromium security severity: High...
CVE-2026-9982
Insufficient validation of untrusted input in ANGLE in Google Chrome prior to 148.0.7778.216 allowed a remote attacker who had compromised the renderer process to potentially perform a sandbox escape via a crafted HTML page. Chromium security severity: High...
CVE-2026-9981
A high-severity vulnerability exists in the Skia component of the Google Chrome and Microsoft Edge web browsers. Due to an inappropriate implementation, a remote attacker can obtain sensitive information from process memory by viewing a crafted HTML page . Affected versions include Google Chrome ...
CVE-2026-9982
Google Chrome and Microsoft Edge versions prior to 148.0.7778.216 are vulnerable to a sandbox escape due to insufficient validation of untrusted input within the ANGLE component. A remote attacker who has already compromised the renderer process can leverage a crafted HTML page to bypass the sand...
CVE-2026-9980
The Printing component in Google Chrome and Microsoft Edge web browsers is vulnerable to a security flaw due to insufficient validation of untrusted input . Prior to version 148.0.7778.216 , a remote attacker who has already compromised the renderer process can use a crafted HTML page to bypass s...
CVE-2026-9978
A use-after-free vulnerability exists in the Glic component of Google Chrome and Microsoft Edge web browsers. This flaw allows a remote attacker to execute arbitrary code inside a sandbox or cause a service failure by navigating to a crafted HTML page. The vulnerability impacts versions of Google...
CVE-2026-9975
Out of bounds read and write in ANGLE in Google Chrome prior to 148.0.7778.216 allowed a remote attacker who had compromised the renderer process to potentially perform a sandbox escape via a crafted HTML page. Chromium security severity: High...