CVE-2026-13909

Insufficient policy enforcement in DevTools in Google Chrome prior to 150.0.7871.47 allowed a remote attacker who had compromised the renderer process to potentially perform a sandbox escape via a crafted HTML page. Chromium security severity: Medium...

CVE-2026-13907

Inappropriate implementation in iOSWeb in Google Chrome on iOS prior to 150.0.7871.47 allowed a remote attacker who convinced a user to engage in specific UI gestures to perform UI spoofing via a crafted HTML page. Chromium security severity: Medium...

CVE-2026-13907

An inappropriate implementation in iOSWeb within Google Chrome on iOS (prior to version 150.0.7871.47 ) allows a remote attacker to perform UI spoofing . Success requires the attacker to convince a user to perform specific UI gestures while interacting with a crafted HTML page. The Chromium secur...

CVE-2026-13906

Out of bounds read in Codecs in Google Chrome prior to 150.0.7871.47 allowed a remote attacker to obtain potentially sensitive information from process memory via a crafted HTML page. Chromium security severity: Medium...

CVE-2026-13906

Google Chrome and Microsoft Edge are vulnerable to an out of bounds read flaw in the Codecs component. A remote attacker can exploit this by using a crafted HTML page to obtain potentially sensitive information from process memory . The vulnerability exists in versions of Chromium prior to 150.0....

CVE-2026-13904

Inappropriate implementation in Safe Browsing in Google Chrome on iOS prior to 150.0.7871.47 allowed a remote attacker to bypass navigation restrictions via a crafted HTML page. Chromium security severity: Medium...

CVE-2026-13903

Insufficient policy enforcement in Bluetooth in Google Chrome prior to 150.0.7871.47 allowed a remote attacker to perform privilege escalation via a crafted HTML page. Chromium security severity: Medium...

CVE-2026-13902

Inappropriate implementation in Chrome for iOS in Google Chrome on iOS prior to 150.0.7871.47 allowed a remote attacker to perform UI spoofing via a crafted HTML page. Chromium security severity: Medium...

CVE-2026-13903

Insufficient policy enforcement in Bluetooth in Google Chrome prior to 150.0.7871.47 allowed a remote attacker to perform privilege escalation via a crafted HTML page. Chromium security severity: Medium...

CVE-2026-13904

Inappropriate implementation in Safe Browsing in Google Chrome on iOS prior to 150.0.7871.47 allowed a remote attacker to bypass navigation restrictions via a crafted HTML page. Chromium security severity: Medium...

CVE-2026-13902

Inappropriate implementation in Chrome for iOS in Google Chrome on iOS prior to 150.0.7871.47 allowed a remote attacker to perform UI spoofing via a crafted HTML page. Chromium security severity: Medium...

CVE-2026-13904

An incorrect security UI flaw exists in the Safe Browsing component of the Chromium browser, affecting Google Chrome on iOS prior to version 150.0.7871.47 . A remote attacker can use a crafted HTML page to bypass navigation restrictions. This vulnerability is categorized with a Medium security se...

CVE-2026-13902

An inappropriate implementation flaw in the Chrome for iOS component of the Chromium browser allows a remote attacker to perform UI spoofing via a crafted HTML page. This vulnerability affects versions prior to 150.0.7871.47 . Exploitation details are not provided in the documents, but the flaw i...

CVE-2026-13903

The Chromium browser (including Google Chrome and Microsoft Edge ) is vulnerable to an insufficient policy enforcement flaw within its Bluetooth components. This issue stems from improper implementation of client-side security features, which may allow a remote attacker to perform privilege escal...

CVE-2026-13901

Insufficient policy enforcement in Serial in Google Chrome prior to 150.0.7871.47 allowed a remote attacker who had compromised the renderer process to potentially perform a sandbox escape via a crafted HTML page. Chromium security severity: Medium...

CVE-2026-13900

Inappropriate implementation in Chromecast in Google Chrome prior to 150.0.7871.47 allowed a remote attacker who had compromised the renderer process to bypass navigation restrictions via a crafted HTML page. Chromium security severity: Medium...

CVE-2026-13900

Inappropriate implementation in Chromecast in Google Chrome prior to 150.0.7871.47 allowed a remote attacker who had compromised the renderer process to bypass navigation restrictions via a crafted HTML page. Chromium security severity: Medium...

CVE-2026-13899

A use after free flaw exists in the HTML component of the Chromium browser (including Google Chrome and Microsoft Edge ). A remote attacker could exploit this vulnerability by using a crafted HTML page to execute arbitrary code within a sandbox. This issue impacts versions of Chrome prior to 150....

CVE-2026-13900

An insufficient validation of untrusted input flaw in the Chromecast component of the Chromium browser (used by Google Chrome and Microsoft Edge) allows a remote attacker to bypass navigation restrictions . The attack can be executed by an actor who has already compromised the renderer process vi...

CVE-2026-13897

Insufficient policy enforcement in Chromecast in Google Chrome prior to 150.0.7871.47 allowed a remote attacker to perform privilege escalation via a crafted HTML page. Chromium security severity: Medium...