CVE-2026-10979

Out of bounds read in ANGLE in Google Chrome prior to 149.0.7827.53 allowed a remote attacker to obtain potentially sensitive information from process memory via a crafted HTML page. Chromium security severity: High...

CVE-2026-10976

Uninitialized Use in Dawn in Google Chrome prior to 149.0.7827.53 allowed a remote attacker to obtain potentially sensitive information from process memory via a crafted HTML page. Chromium security severity: High...

CVE-2026-10975

Use after free in WebRTC in Google Chrome prior to 149.0.7827.53 allowed a remote attacker to execute arbitrary code inside a sandbox via a crafted HTML page. Chromium security severity: High...

CVE-2026-10976

Uninitialized Use in Dawn in Google Chrome prior to 149.0.7827.53 allowed a remote attacker to obtain potentially sensitive information from process memory via a crafted HTML page. Chromium security severity: High...

CVE-2026-10976

CVE-2026-10976 concerns uninitialized use in Dawn within Google Chrome prior to 149.0.7827.53, enabling a remote attacker to potentially read sensitive data from process memory through a crafted HTML page. The vulnerability affects Chrome/Dawn components; the root cause is described as uninitiali...

CVE-2026-10975

CVE-2026-10975 describes a use-after-free in Chrome's WebRTC prior to build 149.0.7827.53, enabling a remote attacker to execute arbitrary code inside Chrome’s sandbox via a crafted HTML page. The vulnerability is labeled High severity with a network attack vector, requiring user interaction. Aff...

CVE-2026-10975

Use after free in WebRTC in Google Chrome prior to 149.0.7827.53 allowed a remote attacker to execute arbitrary code inside a sandbox via a crafted HTML page. Chromium security severity: High...

CVE-2026-10973

Uninitialized Use in Dawn in Google Chrome prior to 149.0.7827.53 allowed a remote attacker to leak cross-origin data via a crafted HTML page. Chromium security severity: High...

CVE-2026-10973

Uninitialized Use in Dawn in Google Chrome prior to 149.0.7827.53 allowed a remote attacker to leak cross-origin data via a crafted HTML page. Chromium security severity: High...

CVE-2026-10974

Insufficient validation of untrusted input in ANGLE in Google Chrome prior to 149.0.7827.53 allowed a remote attacker to potentially perform a sandbox escape via a crafted HTML page. Chromium security severity: High...

CVE-2026-10973

CVE-2026-10973 describes an uninitialized use in Dawn within Google Chrome, affecting Chrome builds prior to 149.0.7827.53. This vulnerability could allow a remote attacker to leak cross-origin data via a crafted HTML page. The description attributes impact to data leakage with network-exposed at...

CVE-2026-10972

Use after free in Ozone in Google Chrome on Linux prior to 149.0.7827.53 allowed a remote attacker to potentially perform a sandbox escape via a crafted HTML page. Chromium security severity: High...

CVE-2026-10972

Use after free in Ozone in Google Chrome on Linux prior to 149.0.7827.53 allowed a remote attacker to potentially perform a sandbox escape via a crafted HTML page. Chromium security severity: High...

CVE-2026-10972

Use after free in Ozone in Google Chrome on Linux prior to 149.0.7827.53 allowed a remote attacker to potentially perform a sandbox escape via a crafted HTML page. Chromium security severity: High...

CVE-2026-10972

Use-after-free in Ozone within Google Chrome on Linux, fixed by patch to 149.0.7827.53 or newer. The flaw could allow a remote attacker to escape the sandbox via a crafted HTML page. Affected component: Ozone in Chrome; root cause: use-after-free. Impact: high (sandbox escape, remote code executi...

CVE-2026-10970

Google Chrome is affected by CVE-2026-10970 due to insufficient validation of untrusted input in the InterestGroups feature. The issue allows a remote attacker who has already compromised the renderer process to potentially escape the browser sandbox via a crafted HTML page. The vulnerability is ...

CVE-2026-10971

CVE-2026-10971 : In Google Chrome on Windows, printing input is insufficiently validated, enabling a remote attacker who compromised the renderer process to escape the sandbox via a crafted HTML page. Affected: Windows builds before 149.0.7827.53. Remediation: update to 149.0.7827.53 or later. Re...

CVE-2026-10971

Insufficient validation of untrusted input in Printing in Google Chrome on Windows prior to 149.0.7827.53 allowed a remote attacker who had compromised the renderer process to potentially perform a sandbox escape via a crafted HTML page. Chromium security severity: High...

CVE-2026-10971

Insufficient validation of untrusted input in Printing in Google Chrome on Windows prior to 149.0.7827.53 allowed a remote attacker who had compromised the renderer process to potentially perform a sandbox escape via a crafted HTML page. Chromium security severity: High...

CVE-2026-10970

Insufficient validation of untrusted input in InterestGroups in Google Chrome prior to 149.0.7827.53 allowed a remote attacker who had compromised the renderer process to potentially perform a sandbox escape via a crafted HTML page. Chromium security severity: High...