The vulnerability of the Digital Credentials API component in browsers Google Chrome and Microsoft Edge allows a perpetrator to trigger a service failure.

The vulnerability of the Digital Credentials API for Google Chrome and Microsoft Edge browsers relates to the possibility of using memory after it is freed. Exploiting this vulnerability could allow a malicious actor to cause a service failure through a specially created HTML page...

The vulnerability of the WebRTC component in Google Chrome and Microsoft Edge browsers allows a hacker to induce a service failure.

The vulnerability of the WebRTC component in Google Chrome and Microsoft Edge relates to the possibility of using memory after it is freed. Exploiting this vulnerability could allow a remote attacker to cause a service failure through a specially created HTML page...

EUVD-2026-14682

Use after free in Dawn in Google Chrome prior to 146.0.7680.165 allowed a remote attacker to potentially perform a sandbox escape via a crafted HTML page. Chromium security severity: High...

CVE-2026-4679

Integer overflow in Fonts in Google Chrome prior to 146.0.7680.165 allowed a remote attacker to perform an out of bounds memory write via a crafted HTML page. Chromium security severity: High...

CVE-2026-4454

Use after free in Network in Google Chrome prior to 146.0.7680.153 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. Chromium security severity: High...

DEBIAN-CVE-2026-4454

Use after free in Network in Google Chrome prior to 146.0.7680.153 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. Chromium security severity: High...

CVE-2026-4441

CVE-2026-4441 is a Google Chrome/Chromium use-after-free in the Base component causing potential heap corruption on crafted HTML pages, fixed in Chrome 146.0.7680.153 (and Linux/builds referenced by Debian: 146.0.7680.153-1~deb12u1/ -1~deb13u1). Affected product: Google Chrome (Chromium core); ro...

The vulnerability of the WebAssembly module of Google Chrome and Microsoft Edge browsers allows a hacker to trigger a service failure.

The vulnerability of the WebAssembly module in Google Chrome and Microsoft Edge is related to access control deficiencies. Exploiting this vulnerability could allow a malicious actor to cause a service failure through a specially crafted HTML page...

CVE-2026-3940

Insufficient policy enforcement in DevTools in Google Chrome prior to 146.0.7680.71 allowed a remote attacker to bypass navigation restrictions via a crafted HTML page. Chromium security severity: Low...

DEBIAN-CVE-2026-3941

Insufficient policy enforcement in DevTools in Google Chrome prior to 146.0.7680.71 allowed a remote attacker to bypass navigation restrictions via a crafted HTML page. Chromium security severity: Low...

CVE-2026-3938

CVE-2026-3938 affects Google Chrome/Chromium clipboard policy enforcement. Prior to version 146.0.7680.71, a renderer-compromised attacker could leak cross-origin data via a crafted HTML page due to insufficient clipboard policy enforcement. Impact is data leakage with low severity according to C...

CVE-2026-3937

Incorrect security UI in Downloads in Google Chrome on Android prior to 146.0.7680.71 allowed a remote attacker to perform UI spoofing via a crafted HTML page. Chromium security severity: Low...

CVE-2026-3931

Heap buffer overflow in Skia in Google Chrome prior to 146.0.7680.71 allowed a remote attacker to perform out of bounds memory access via a crafted HTML page. Chromium security severity: Medium...

CVE-2026-3929

CVE-2026-3929 : A side-channel information leakage in Chrome/Chromium’s ResourceTiming allows a remote attacker to leak cross-origin data via a crafted HTML page. Affected: Chrome/Chromium prior to 146.0.7680.71. Impact: information disclosure (Chromium-level) as described; CVSS base score 3.1 (L...

CVE-2026-3925

Incorrect security UI in LookalikeChecks in Google Chrome on Android prior to 146.0.7680.71 allowed a remote attacker to perform UI spoofing via a crafted HTML page. Chromium security severity: Medium...

CVE-2026-3917

Use after free in Agents in Google Chrome prior to 146.0.7680.71 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. Chromium security severity: High...

ROS-20260310-73-0007

A vulnerability in the V8 JavaScript script handler of Google Chrome browser is related to an operation exceeding buffer boundaries in memory. Exploitation of the vulnerability could allow a remote attacker to execute arbitrary code and cause a denial of service via a specially crafted HTML page...

ROS-20260310-73-0009

A vulnerability in the Blink display module of the Google Chrome browser is related to flaws in the implementation of security checks for standard elements. Exploitation of the vulnerability could allow an attacker acting remotely to gain access to read and delete data using a specially crafted...

The vulnerability of the Animation component in the Google Chrome browser allows a perpetrator to compromise the confidentiality of protected information.

The vulnerability of the Animation component in Google Chrome browser is related to the disclosure of information. Exploiting this vulnerability can allow a malicious actor to compromise the confidentiality of protected information through a specially created HTML page...

Google Chrome < 144.0.7559.177 Vulnerability

The version of Google Chrome installed on the remote macOS host is prior to 144.0.7559.177. It is, therefore, affected by a vulnerability as referenced in the 202602extended-stable-updates-for-desktop13 advisory. - Use after free in CSS in Google Chrome prior to 145.0.7632.75 allowed a remote...