CVE-2026-3062: Out-of-bounds Read

Out of bounds read and write in Tint in Google Chrome on Mac prior to 145.0.7632.116 allowed a remote attacker to perform out of bounds memory access via a crafted HTML page. Chromium security severity: High...

CVE-2026-3061: Out-of-bounds Read

Out of bounds read in Media in Google Chrome prior to 145.0.7632.116 allowed a remote attacker to perform an out of bounds memory read via a crafted HTML page. Chromium security severity: High...

PT-2026-23055

Name of the Vulnerable Software and Affected Versions Google Chrome versions prior to 145.0.7632.159 Description A heap buffer overflow exists in the WebCodecs component of Google Chrome. This issue allows a remote attacker to perform an out-of-bounds memory write by using a specially crafted HTM...

The vulnerability of the JavaScript script handler in Google Chrome’s V8 engine allows attackers to trigger a service failure.

The vulnerability of the JavaScript script handler in Google Chrome’s V8 engine is related to type conversion errors. Exploiting this vulnerability can allow an attacker to cause a service failure through a specially created HTML page...

CVE-2026-2649: External Control of Assumed-Immutable Web Parameter

Integer overflow in V8 in Google Chrome prior to 145.0.7632.109 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. Chromium security severity: High...

CVE-2026-2650: Heap-based Buffer Overflow

Heap buffer overflow in Media in Google Chrome prior to 145.0.7632.109 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. Chromium security severity: Medium...

PT-2026-23047

Name of the Vulnerable Software and Affected Versions Google Chrome versions prior to 145.0.7632.159 Description An integer overflow in ANGLE, a low-level graphics library, within Google Chrome could allow a remote attacker to potentially perform out of bounds memory access. This issue is trigger...

The vulnerability of Google Chrome’s Codecs component allows a hacker to trigger a service failure.

The vulnerability of Google Chrome’s Codecs component is related to writing beyond the buffer boundaries. Exploiting this vulnerability could allow a malicious actor to cause a service failure through a specially created HTML page...

PT-2026-31492

Name of the Vulnerable Software and Affected Versions Google Chrome versions prior to 147.0.7727.55 Description A use after free issue existed in PrivateAI within Google Chrome. A remote attacker could potentially perform a sandbox escape by convincing a user to interact with a crafted HTML page...

CVE-2025-65717

An issue in Visual Studio Code Extensions Live Server v5.7.9 allows attackers to exfiltrate files via user interaction with a crafted HTML page...

Google Chromium CSS Use-After-Free Vulnerability

Google Chromium CSS contains a use-after-free vulnerability that could allow a remote attacker to potentially exploit heap corruption via a crafted HTML page. This vulnerability could affect multiple web browsers that utilize Chromium, including, but not limited to, Google Chrome, Microsoft Edge,...

PT-2026-8356

Name of the Vulnerable Software and Affected Versions Visual Studio Code Live Server version 5.7.9 Description An issue in Visual Studio Code Live Server allows attackers to exfiltrate files through user interaction with a specially crafted HTML page. Recommendations At the moment, there is no...

CVE-2025-65717

An issue in Visual Studio Code Extensions Live Server v5.7.9 allows attackers to exfiltrate files via user interaction with a crafted HTML page...

CVE-2025-65717: Improper Neutralization of Input During Web Page Generation

An issue in Visual Studio Code Extensions Live Server v5.7.9 allows attackers to exfiltrate files via user interaction with a crafted HTML page...

The vulnerability of the privacy protection function of Google Chrome’s Fenced Frames allows a hacker to replace the user interface.

The vulnerability of the Fenced Frames privacy function in Google Chrome relates to information representation errors in the user interface. Exploiting this vulnerability could allow a malicious actor to replace the user interface with a specially created HTML page...

PT-2026-54136

Name of the Vulnerable Software and Affected Versions Google Chrome versions prior to 150.0.7871.47 Description An inappropriate implementation in ANGLE, a compatibility layer that allows OpenGL ES APIs to run on non-native platforms, could allow a remote attacker to perform a sandbox escape. Thi...

PT-2026-31502

Name of the Vulnerable Software and Affected Versions Google Chrome versions prior to 147.0.7727.55 Description A flaw exists in Google Chrome's handling of untrusted input within the Media component. A remote attacker compromising the renderer process could potentially execute arbitrary code...

CVE-2026-2441

Use after free in CSS in Google Chrome prior to 145.0.7632.75 allowed a remote attacker to execute arbitrary code inside a sandbox via a crafted HTML page. Chromium security severity: High...

CVE-2026-2441

Use after free in CSS in Google Chrome prior to 145.0.7632.75 allowed a remote attacker to execute arbitrary code inside a sandbox via a crafted HTML page. Chromium security severity: High...

SUSE CVE-2026-2323

Inappropriate implementation in Downloads in Google Chrome prior to 145.0.7632.45 allowed a remote attacker to perform UI spoofing via a crafted HTML page. Chromium security severity: Low...