17792 matches found
CVE-2026-8011
Summary of CVE-2026-8011: Google Chrome before 148.0.7778.96 has an insufficient policy enforcement issue in the Search feature that allows a remote attacker to leak cross-origin data via a crafted HTML page. This is documented across multiple sources (NVD, Debian OSV, ENISA EUVD, CVE list, and r...
CVE-2026-8011
Insufficient policy enforcement in Search in Google Chrome prior to 148.0.7778.96 allowed a remote attacker to leak cross-origin data via a crafted HTML page. Chromium security severity: Low...
CVE-2026-8009
Inappropriate implementation in Cast in Google Chrome prior to 148.0.7778.96 allowed a remote attacker who had compromised the renderer process to bypass navigation restrictions via a crafted HTML page. Chromium security severity: Low...
CVE-2026-8009
Inappropriate implementation in Cast in Google Chrome prior to 148.0.7778.96 allowed a remote attacker who had compromised the renderer process to bypass navigation restrictions via a crafted HTML page. Chromium security severity: Low...
CVE-2026-8009
Inappropriate implementation in Cast in Google Chrome prior to 148.0.7778.96 allowed a remote attacker who had compromised the renderer process to bypass navigation restrictions via a crafted HTML page. Chromium security severity: Low...
CVE-2026-8009
CVE-2026-8009: Google Chrome prior to 148.0.7778.96 has an Inappropriate implementation in Cast that lets a remote attacker who compromised the renderer bypass navigation restrictions via a crafted HTML page. Affected software is Chrome versions before 148.0.7778.96; the root cause is an incorrec...
CVE-2026-8007
CVE-2026-8007 describes insufficient validation of untrusted input in the Cast component of Google Chrome, allowing a remote attacker who has compromised the renderer process to escalate privileges via a crafted HTML page. Affected product: Google Chrome (Cast, prior to version 148.0.7778.96). Ro...
CVE-2026-8002
Use after free in Audio in Google Chrome on Mac prior to 148.0.7778.96 allowed a remote attacker to execute arbitrary code inside a sandbox via a crafted HTML page. Chromium security severity: Low...
CVE-2026-8001
CVE-2026-8001 involves a Use After Free in Google Chrome’s printing component for Linux, macOS, and ChromeOS. The vulnerability, present in Chrome builds prior to 148.0.7778.96, could allow a remote attacker who has already compromised the renderer process to potentially escape the sandbox via a ...
CVE-2026-8002
Use after free in Audio in Google Chrome on Mac prior to 148.0.7778.96 allowed a remote attacker to execute arbitrary code inside a sandbox via a crafted HTML page. Chromium security severity: Low...
CVE-2026-8002
Use after free in Audio in Google Chrome on Mac prior to 148.0.7778.96 allowed a remote attacker to execute arbitrary code inside a sandbox via a crafted HTML page. Chromium security severity: Low...
CVE-2026-8000
CVE-2026-8000 concerns ChromeDriver in Google Chrome on Windows prior to 148.0.7778.96. The root cause is insufficient validation of untrusted input on crafted HTML pages, enabling a remote attacker to execute arbitrary code. Affected component is ChromeDriver (Chromium-based), with the vulnerabi...
CVE-2026-7999
Inappropriate implementation in V8 in Google Chrome prior to 148.0.7778.96 allowed a remote attacker to obtain potentially sensitive information from process memory via a crafted HTML page. Chromium security severity: Low...
CVE-2026-7995
CVE-2026-7995 : Out-of-bounds read in Chrome’s AdFilter component allows a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML page when using Chrome versions prior to 148.0.7778.96. The vulnerability affects Google Chrome (desktop) and is fixed in Chrome 148.0.7778.96...
CVE-2026-7996
Insufficient validation of untrusted input in SSL in Google Chrome prior to 148.0.7778.96 allowed a remote attacker who had compromised the renderer process to perform UI spoofing via a crafted HTML page. Chromium security severity: Low...
CVE-2026-7992
CVE-2026-7992 affects Google Chrome on Linux and ChromeOS prior to 148.0.7778.96. The root cause is insufficient validation of untrusted input in the UI, allowing a remote attacker who entices a user to perform specific UI gestures to execute arbitrary code via a crafted HTML page. The CVE is ref...
CVE-2026-7993
Insufficient validation of untrusted input in Payments in Google Chrome on Android prior to 148.0.7778.96 allowed a remote attacker who had compromised the renderer process to spoof the contents of the Omnibox URL bar via a crafted HTML page. Chromium security severity: Medium...
CVE-2026-7992
Insufficient validation of untrusted input in UI in Google Chrome on Linux, ChromeOS prior to 148.0.7778.96 allowed a remote attacker who convinced a user to engage in specific UI gestures to execute arbitrary code via a crafted HTML page. Chromium security severity: Medium...
CVE-2026-7991
Use after free in UI in Google Chrome prior to 148.0.7778.96 allowed a remote attacker who had compromised the renderer process to execute arbitrary code inside a sandbox via a crafted HTML page. Chromium security severity: Medium...