CVE-2026-10021

Insufficient validation of untrusted input in USB in Google Chrome prior to 148.0.7778.216 allowed a remote attacker to execute arbitrary code via a crafted HTML page. Chromium security severity: Medium...

CVE-2026-10014

Google Chrome on Android (prior to version 148.0.7778.216) is vulnerable to a use after free flaw in the WebMIDI component. A remote attacker who has already compromised the renderer process can exploit this vulnerability by using a crafted HTML page to potentially perform a sandbox escape . Expl...

CVE-2026-10007

Use after free in SVG in Google Chrome prior to 148.0.7778.216 allowed a remote attacker to execute arbitrary code inside a sandbox via a crafted HTML page. Chromium security severity: High...

CVE-2026-10000

Use after free in Passwords in Google Chrome on Windows prior to 148.0.7778.216 allowed a remote attacker who had compromised the renderer process to potentially perform a sandbox escape via a crafted HTML page. Chromium security severity: High...

CVE-2026-9992

Use after free in Network in Google Chrome prior to 148.0.7778.216 allowed a remote attacker to execute arbitrary code inside a sandbox via a crafted HTML page. Chromium security severity: High...

CVE-2026-9994

A use after free vulnerability in the Core components of Google Chrome on Windows (prior to version 148.0.7778.216 ) allows a remote attacker who has already compromised the renderer process to perform a sandbox escape using a crafted HTML page. This vulnerability also affects Microsoft Edge as i...

CVE-2026-9983

Type Confusion in Skia in Google Chrome prior to 148.0.7778.216 allowed a remote attacker to execute arbitrary code inside a sandbox via a crafted HTML page. Chromium security severity: High...

CVE-2026-9979

Insufficient validation of untrusted input in Input in Google Chrome prior to 148.0.7778.216 allowed a remote attacker who had compromised the renderer process to bypass site isolation via a crafted HTML page. Chromium security severity: High...

CVE-2026-9979

The Input component in Google Chrome (prior to version 148.0.7778.216 ) is vulnerable to a security flaw caused by insufficient validation of untrusted input . A remote attacker who has already compromised the renderer process can exploit this to bypass site isolation using a crafted HTML page. T...

CVE-2026-9974

Google Chrome and Microsoft Edge are affected by an out-of-bounds write vulnerability in the GPU components . This flaw allows a remote attacker who has already compromised the renderer process to perform a sandbox escape using a specially crafted HTML page. The vulnerability may also lead to a s...

CVE-2026-9967

Google Chrome and Microsoft Edge are vulnerable to a buffer overflow (out-of-bounds write) within the GPU components . A remote attacker can exploit this vulnerability by providing a crafted HTML page to potentially perform a sandbox escape . The issue affects Google Chrome versions prior to 148....

CVE-2026-9966

Integer overflow in XML in Google Chrome on Windows prior to 148.0.7778.216 allowed a remote attacker who had compromised the renderer process to potentially perform a sandbox escape via a crafted HTML page. Chromium security severity: High...

CVE-2026-9952

A use after free vulnerability exists in the WebAudio component of Google Chrome and Microsoft Edge web browsers (prior to version 148.0.7778.216). The flaw stems from a resource management error where objects are reused after being released. A remote attacker could exploit this via a crafted HTM...

CVE-2026-9946

Use after free in ANGLE in Google Chrome prior to 148.0.7778.216 allowed a remote attacker who had compromised the renderer process to potentially perform a sandbox escape via a crafted HTML page. Chromium security severity: High...

CVE-2026-9942

Uninitialized Use in ANGLE in Google Chrome prior to 148.0.7778.216 allowed a remote attacker who had compromised the renderer process to bypass site isolation via a crafted HTML page. Chromium security severity: High...

CVE-2026-9922

A use after free vulnerability in the GPU components of Google Chrome (and Microsoft Edge ) allows a remote attacker to execute arbitrary code via a crafted HTML page. This issue is triggered by the reuse of GPU components after they have been released and can occur even when the renderer process...

CVE-2026-9911

Integer overflow in ANGLE in Google Chrome prior to 148.0.7778.216 allowed a remote attacker to perform an out of bounds memory read via a crafted HTML page. Chromium security severity: High...

CVE-2026-9906

Out of bounds write in GPU in Google Chrome prior to 148.0.7778.216 allowed a remote attacker who had compromised the renderer process to potentially perform a sandbox escape via a crafted HTML page. Chromium security severity: High...

CVE-2026-9897

A use after free vulnerability exists in the DOM components of Google Chrome and Microsoft Edge (prior to version 148.0.7778.216). This resource management flaw occurs when memory is reused after being freed, potentially allowing a remote attacker to execute arbitrary code within a sandbox via a ...

CVE-2026-9896

Out of bounds write in V8 in Google Chrome prior to 148.0.7778.216 allowed a remote attacker to execute arbitrary code inside a sandbox via a crafted HTML page. Chromium security severity: High...