25667 matches found
CVE-2026-14115
Insufficient validation of untrusted input in Cast in Google Chrome prior to 150.0.7871.47 allowed a remote attacker who had compromised the renderer process to perform privilege escalation via a crafted HTML page. Chromium security severity: Low...
CVE-2026-14116
The vulnerability CVE-2026-14116 affects Google Chrome DevTools. The root cause is insufficient validation of untrusted input in DevTools, allowing a remote attacker to leak cross-origin data through a crafted HTML page when a user is guided to perform specific UI gestures. Impact is cross-origin...
CVE-2026-14115
Insufficient validation of untrusted input in Cast in Google Chrome prior to 150.0.7871.47 allowed a remote attacker who had compromised the renderer process to perform privilege escalation via a crafted HTML page. Chromium security severity: Low...
CVE-2026-14116
Insufficient validation of untrusted input in DevTools in Google Chrome prior to 150.0.7871.47 allowed a remote attacker who convinced a user to engage in specific UI gestures to leak cross-origin data via a crafted HTML page. Chromium security severity: Low...
CVE-2026-14113
Use after free in Updater in Google Chrome on Windows prior to 150.0.7871.47 allowed a remote attacker who had compromised the renderer process to potentially perform a sandbox escape via a crafted HTML page. Chromium security severity: Low...
CVE-2026-14113
Use after free in Updater in Google Chrome on Windows prior to 150.0.7871.47 allowed a remote attacker who had compromised the renderer process to potentially perform a sandbox escape via a crafted HTML page. Chromium security severity: Low...
CVE-2026-14112
Inappropriate implementation in Enterprise in Google Chrome prior to 150.0.7871.47 allowed a remote attacker who convinced a user to engage in specific UI gestures to obtain potentially sensitive information from process memory via a crafted HTML page. Chromium security severity: Low...
CVE-2026-14112
Inappropriate implementation in Enterprise in Google Chrome prior to 150.0.7871.47 allowed a remote attacker who convinced a user to engage in specific UI gestures to obtain potentially sensitive information from process memory via a crafted HTML page. Chromium security severity: Low...
CVE-2026-14113
Use after free in Updater in Google Chrome on Windows prior to 150.0.7871.47 allowed a remote attacker who had compromised the renderer process to potentially perform a sandbox escape via a crafted HTML page. Chromium security severity: Low...
CVE-2026-14113
A use after free flaw exists in the Updater component of the Google Chrome browser on Windows. This vulnerability affects versions prior to 150.0.7871.47 and could allow a remote attacker who has already compromised the renderer process to achieve a sandbox escape by navigating to a crafted HTML ...
CVE-2026-14112
An inappropriate implementation flaw in the Enterprise component of the Chromium browser (including Google Chrome and Microsoft Edge ) allows a remote attacker to obtain potentially sensitive information from process memory. This vulnerability is triggered when a user is convinced to perform spec...
CVE-2026-14113
Use after free in Updater in Google Chrome on Windows prior to 150.0.7871.47 allowed a remote attacker who had compromised the renderer process to potentially perform a sandbox escape via a crafted HTML page. Chromium security severity: Low...
CVE-2026-14112
Inappropriate implementation in Enterprise in Google Chrome prior to 150.0.7871.47 allowed a remote attacker who convinced a user to engage in specific UI gestures to obtain potentially sensitive information from process memory via a crafted HTML page. Chromium security severity: Low...
CVE-2026-14110
Inappropriate implementation in DarkMode in Google Chrome prior to 150.0.7871.47 allowed a remote attacker to perform UI spoofing via a crafted HTML page. Chromium security severity: Low...
CVE-2026-14109
Insufficient policy enforcement in Mojo in Google Chrome prior to 150.0.7871.47 allowed a remote attacker who had compromised the renderer process to potentially perform a sandbox escape via a crafted HTML page. Chromium security severity: Low...
CVE-2026-14109
CVE-2026-14109 describes insufficient policy enforcement in Mojo within Google Chrome prior to 150.0.7871.47, enabling a sandbox escape if a renderer process is compromised via a crafted HTML page. The connected Linux/Unix-facing records (Debian OSV, NVD, CVE lists, EUVD) corroborate: affected so...
CVE-2026-14110
The CVE-2026-14110 entry concerns Google Chrome’s DarkMode implementation. Affected product: Google Chrome (Chromium-based) before version 150.0.7871.47. Issue: Inappropriate DarkMode implementation allows a remote attacker to achieve UI spoofing via a crafted HTML page. Root cause: improper hand...
CVE-2026-14109
Insufficient policy enforcement in Mojo in Google Chrome prior to 150.0.7871.47 allowed a remote attacker who had compromised the renderer process to potentially perform a sandbox escape via a crafted HTML page. Chromium security severity: Low...