CVE-2026-102310

Missing authorization in Payments in Google Chrome prior to 154.0.8037.92 allowed a remote attacker who had compromised the renderer process to bypass web origin policy via a crafted HTML page. Chromium security severity: Low...

CVE-2026-102315

Google Chrome on Windows versions prior to 154.0.8037.92 is affected by an uninitialized resource vulnerability in the Media component. This flaw allows a remote attacker who has already compromised the renderer process to read memory outside the sandbox by interacting with a crafted HTML page . ...

EUVD-2026-89399

Missing authorization in CORS in Google Chrome prior to 154.0.8037.92 allowed a remote attacker who had compromised the renderer process to bypass web origin policy via a crafted HTML page. Chromium security severity: Medium...

CVE-2026-102315

Uninitialized resource in Media in Google Chrome on on Windows prior to 154.0.8037.92 allowed a remote attacker who had compromised the renderer process to read memory outside the sandbox via a crafted HTML page. Chromium security severity: High...

EUVD-2026-89400

Missing authorization in Payments in Google Chrome prior to 154.0.8037.92 allowed a remote attacker who had compromised the renderer process to bypass web origin policy via a crafted HTML page. Chromium security severity: Low...

CVE-2026-102310

Google Chrome versions prior to 154.0.8037.92 are vulnerable to a missing authorization flaw in the Payments component. A remote attacker who has successfully compromised the renderer process can bypass the web origin policy by presenting a crafted HTML page. This issue is assigned a Low security...

CVE-2026-102319

Uninitialized resource in GPU in Google Chrome prior to 154.0.8037.92 allowed a remote attacker who had compromised the renderer process to read memory outside the sandbox via a crafted HTML page. Chromium security severity: High...

CVE-2026-102301

Out of bounds write in GPU in Google Chrome prior to 154.0.8037.92 allowed a remote attacker who had compromised the renderer process to potentially execute arbitrary code outside the sandbox via a crafted HTML page. Chromium security severity: High...

EUVD-2026-89391

Out of bounds write in GPU in Google Chrome prior to 154.0.8037.92 allowed a remote attacker who had compromised the renderer process to potentially execute arbitrary code outside the sandbox via a crafted HTML page. Chromium security severity: High...

CVE-2026-102324

Use after free in PictureInPicture in Google Chrome prior to 154.0.8037.92 allowed a remote attacker who had compromised the renderer process to potentially execute arbitrary code outside the sandbox via a crafted HTML page. Chromium security severity: High...

CVE-2026-102319

Google Chrome versions prior to 154.0.8037.92 are affected by a vulnerability involving an uninitialized resource in the GPU . This flaw allows a remote attacker who has already compromised the renderer process to read memory outside the sandbox by using a crafted HTML page. The impact is charact...

EUVD-2026-89382

Uninitialized resource in GPU in Google Chrome on on Android prior to 154.0.8037.92 allowed a remote attacker who had compromised the renderer process to read memory outside the sandbox via a crafted HTML page. Chromium security severity: High...

CVE-2026-102311

Uninitialized resource in GPU in Google Chrome on on Android prior to 154.0.8037.92 allowed a remote attacker who had compromised the renderer process to read memory outside the sandbox via a crafted HTML page. Chromium security severity: High...

CVE-2026-102311

A vulnerability exists in the GPU component of Google Chrome on Android prior to version 154.0.8037.92 . The root cause is an uninitialized resource flaw, which allows a remote attacker who has already compromised the renderer process to read memory outside the sandbox using a crafted HTML page ....

CVE-2026-95278

A flaw was found in chromium-browser. Due to missing authorization in the WakeLock component, a remote attacker who has already compromised the browser's renderer process can bypass system access restrictions. An attacker could exploit this vulnerability by convincing a user to open a specially...

CVE-2026-95308

A flaw was found in chromium-browser. An integer overflow in the Metrics component allows a remote attacker who has already compromised the renderer process to read memory outside the security sandbox. By convincing a user to visit a crafted HTML page, the attacker can exploit this issue to acces...

CVE-2026-95371

A flaw was found in chromium-browser. A missing authorization check in the Views component allows a remote attacker who has compromised the renderer process to spoof user interface UI elements. By tricking a user into visiting a crafted web page, the attacker can display deceptive interface...

CVE-2026-95375

A flaw was found in chromium-browser. An incorrect authorization issue in the BrowserTag component allows a remote attacker who has compromised a renderer process to bypass the web origin policy via a crafted HTML page. This allows the attacker to circumvent the security boundary that isolates da...

CVE-2026-95290

A flaw was found in chromium-browser. Due to missing authorization checks in the Near Field Communication NFC component, a remote attacker who has compromised a renderer process can bypass system access restrictions via a crafted HTML page. Successful exploitation allows the attacker to access...

CVE-2026-95372

A flaw was found in the Chromecast component of chromium-browser. This vulnerability can lead to arbitrary code execution outside the browser's security sandbox. A remote attacker who has already compromised the renderer process could trigger a use-after-free memory flaw by convincing a user to...