CVE-2026-121062

Google Chrome versions prior to 157.0.8103.38 are vulnerable to an incorrect authorization flaw in an API. This vulnerability allows a remote attacker who has already compromised the renderer process to bypass system access restrictions by using a crafted HTML page . No specific exploit code or i...

CVE-2026-121105

Information leak in Network in Google Chrome prior to 157.0.8103.38 allowed a remote attacker to obtain cross-origin data via a crafted HTML page. Chromium security severity: Medium...

CVE-2026-121105

Information leak in Network in Google Chrome prior to 157.0.8103.38 allowed a remote attacker to obtain cross-origin data via a crafted HTML page. Chromium security severity: Medium...

CVE-2026-121060

Incorrect authorization in FileSystem in Google Chrome prior to 157.0.8103.38 allowed a remote attacker leveraging social engineering to potentially execute arbitrary code outside the sandbox via a crafted HTML page. Chromium security severity: High...

CVE-2026-121227

Uninitialized resource in Skia in Google Chrome prior to 157.0.8103.38 allowed a remote attacker who had compromised the renderer process to read memory outside the sandbox via a crafted HTML page. Chromium security severity: High...

CVE-2026-121227

Google Chrome versions prior to 157.0.8103.38 are vulnerable to a high-severity issue involving an uninitialized resource within the Skia component. A remote attacker who has already compromised the renderer process can use a crafted HTML page to read memory outside the sandbox . No specific expl...

EUVD-2026-116424

Uninitialized resource in Skia in Google Chrome prior to 157.0.8103.38 allowed a remote attacker who had compromised the renderer process to read memory outside the sandbox via a crafted HTML page. Chromium security severity: High...

CVE-2026-121087

Improper input validation in Mobile in Google Chrome prior to 157.0.8103.38 allowed a remote attacker to bypass web origin policy via a crafted HTML page. Chromium security severity: High...

CVE-2026-121038

Information leak in Compositing in Google Chrome prior to 157.0.8103.38 allowed a remote attacker to obtain cross-origin data via a crafted HTML page. Chromium security severity: High...

CVE-2026-121051

Google Chrome on iOS prior to version 157.0.8103.38 is vulnerable to a UI misrepresentation in the iOSWeb component. A remote attacker can exploit this by using a crafted HTML page to spoof the address bar , potentially misleading the user. The Chromium security severity for this issue is rated a...

CVE-2026-121051

UI misrepresentation in iOSWeb in Google Chrome on on iOS prior to 157.0.8103.38 allowed a remote attacker to spoof address bar via a crafted HTML page. Chromium security severity: High...

EUVD-2026-116391

Information leak in Compositing in Google Chrome prior to 157.0.8103.38 allowed a remote attacker to obtain cross-origin data via a crafted HTML page. Chromium security severity: High...

CVE-2026-121124

Google Chrome versions prior to 157.0.8103.38 are vulnerable to a High severity security issue (Chromium severity) caused by improper adherence to coding standards in XML . A remote attacker could exploit this vulnerability by serving a crafted HTML page to potentially execute arbitrary code insi...

CVE-2026-121124

Improper adherence to coding standards in XML in Google Chrome prior to 157.0.8103.38 allowed a remote attacker to potentially execute arbitrary code inside the sandbox via a crafted HTML page. Chromium security severity: High...

EUVD-2026-116520

Improper adherence to coding standards in XML in Google Chrome prior to 157.0.8103.38 allowed a remote attacker to potentially execute arbitrary code inside the sandbox via a crafted HTML page. Chromium security severity: High...

CVE-2026-121124

Improper adherence to coding standards in XML in Google Chrome prior to 157.0.8103.38 allowed a remote attacker to potentially execute arbitrary code inside the sandbox via a crafted HTML page. Chromium security severity: High...

CVE-2026-121207

Google Chrome on Mac versions prior to 157.0.8103.38 is vulnerable to an uninitialized resource (CWE-908) within the Dawn component. A remote attacker can exploit this flaw by using a crafted HTML page to read memory outside the sandbox . The Chromium security severity for this issue is rated as ...

EUVD-2026-116516

Uninitialized resource in Dawn in Google Chrome on on Mac prior to 157.0.8103.38 allowed a remote attacker to read memory outside the sandbox via a crafted HTML page. Chromium security severity: High...

CVE-2026-121173

Uninitialized resource in WebGL in Google Chrome prior to 157.0.8103.38 allowed a remote attacker to read memory outside the sandbox via a crafted HTML page. Chromium security severity: High...

CVE-2026-121095

Google Chrome versions prior to 157.0.8103.38 are vulnerable to an uninitialized resource issue within WebGL . A remote attacker can exploit this by hosting a crafted HTML page to read memory outside the sandbox . This vulnerability is classified with a High security severity. Remediation is avai...