CVE-2026-9953

Out of bounds read in ANGLE in Google Chrome prior to 148.0.7778.216 allowed a remote attacker to obtain potentially sensitive information from process memory via a crafted HTML page. Chromium security severity: High...

CVE-2026-9953

Out of bounds read in ANGLE in Google Chrome prior to 148.0.7778.216 allowed a remote attacker to obtain potentially sensitive information from process memory via a crafted HTML page. Chromium security severity: High...

CVE-2026-9953

Google Chrome and Microsoft Edge versions prior to 148.0.7778.216 are vulnerable to an out-of-bounds read in the ANGLE component. A remote attacker can exploit this flaw by using a specially crafted HTML page to obtain potentially sensitive information from the process memory. For Debian users, t...

CVE-2026-9950

Insufficient validation of untrusted input in iOS in Google Chrome on iOS prior to 148.0.7778.216 allowed a remote attacker who had compromised the renderer process to bypass same origin policy via a crafted HTML page. Chromium security severity: High...

CVE-2026-9951

A use after free vulnerability in the UI components of Google Chrome and Microsoft Edge (prior to version 148.0.7778.216 ) allows a remote attacker to potentially perform a sandbox escape or cause a service failure via a crafted HTML page. The root cause is a resource management error where memor...

CVE-2026-9947

Use after free in XML in Google Chrome prior to 148.0.7778.216 allowed a remote attacker to execute arbitrary code inside a sandbox via a crafted HTML page. Chromium security severity: High...

CVE-2026-9947

Use after free in XML in Google Chrome prior to 148.0.7778.216 allowed a remote attacker to execute arbitrary code inside a sandbox via a crafted HTML page. Chromium security severity: High...

CVE-2026-9946

CVE-2026-9946 : A use-after-free in ANGLE within Google Chrome (Chromium) allows a remote attacker with a compromised renderer to potentially escape the sandbox via a crafted HTML page. Affected: ANGLE in Chrome prior to 148.0.7778.216. Impact: sandbox escape risk if exploited. Mitigation: upgrad...

CVE-2026-9947

Use after free in XML in Google Chrome prior to 148.0.7778.216 allowed a remote attacker to execute arbitrary code inside a sandbox via a crafted HTML page. Chromium security severity: High...

CVE-2026-9943

Out of bounds read in WebGL in Google Chrome on Android prior to 148.0.7778.216 allowed a remote attacker to leak cross-origin data via a crafted HTML page. Chromium security severity: High...

CVE-2026-9943

Out of bounds read in WebGL in Google Chrome on Android prior to 148.0.7778.216 allowed a remote attacker to leak cross-origin data via a crafted HTML page. Chromium security severity: High...

CVE-2026-9941

Use after free in ANGLE in Google Chrome prior to 148.0.7778.216 allowed a remote attacker to execute arbitrary code inside a sandbox via a crafted HTML page. Chromium security severity: High...

CVE-2026-9941

Use after free in ANGLE in Google Chrome prior to 148.0.7778.216 allowed a remote attacker to execute arbitrary code inside a sandbox via a crafted HTML page. Chromium security severity: High...

CVE-2026-9940

Heap buffer overflow in ANGLE in Google Chrome prior to 148.0.7778.216 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. Chromium security severity: High...

CVE-2026-9942

Uninitialized Use in ANGLE in Google Chrome prior to 148.0.7778.216 allowed a remote attacker who had compromised the renderer process to bypass site isolation via a crafted HTML page. Chromium security severity: High...

CVE-2026-9938

A high-severity vulnerability exists in the V8 engine of Google Chrome (prior to version 148.0.7778.216 ) due to an inappropriate implementation. A remote attacker can exploit this by serving a crafted HTML page to execute arbitrary code within a sandbox. Impact includes potential for denial of s...

CVE-2026-9934

Use after free in Aura in Google Chrome prior to 148.0.7778.216 allowed a remote attacker who convinced a user to engage in specific UI gestures to execute arbitrary code via a crafted HTML page. Chromium security severity: High...

CVE-2026-9935

The ANGLE component in Google Chrome (and Microsoft Edge ) is vulnerable to an uninitialized use of variables/resources. This flaw allows a remote attacker to leak cross-origin data by tricking a user into visiting a specially crafted HTML page . The issue affects versions of Google Chrome prior ...

CVE-2026-9933

A use after free vulnerability exists in the Input component of Google Chrome (and Microsoft Edge ) prior to version 148.0.7778.216 . The flaw arises from memory being accessed after it has been freed, allowing a remote attacker to exploit heap corruption by convincing a user to perform specific ...

CVE-2026-9930

Out of bounds write in Dawn in Google Chrome on Mac prior to 148.0.7778.216 allowed a remote attacker to perform an out of bounds memory write via a crafted HTML page. Chromium security severity: High...