CVE-2026-95287

Missing authorization in Navigation in Google Chrome prior to 154.0.8037.57 allowed a remote attacker who had compromised the renderer process to bypass site isolation via a crafted HTML page. Chromium security severity: Medium...

CVE-2026-95381

Google Chrome is vulnerable to an improper input validation flaw in its Printing component in versions prior to 154.0.8037.57 . A remote attacker who has already compromised the renderer process can leverage this vulnerability to execute arbitrary code outside the sandbox by providing a crafted H...

CVE-2026-95287

Missing authorization in Navigation in Google Chrome prior to 154.0.8037.57 allowed a remote attacker who had compromised the renderer process to bypass site isolation via a crafted HTML page. Chromium security severity: Medium...

CVE-2026-95381

Improper input validation in Printing in Google Chrome prior to 154.0.8037.57 allowed a remote attacker who had compromised the renderer process to potentially execute arbitrary code outside the sandbox via a crafted HTML page. Chromium security severity: Medium...

CVE-2026-95287

Missing authorization in Navigation in Google Chrome prior to 154.0.8037.57 allowed a remote attacker who had compromised the renderer process to bypass site isolation via a crafted HTML page. Chromium security severity: Medium...

CVE-2026-95382

Google Chrome versions prior to 154.0.8037.57 are vulnerable to a Medium severity security flaw caused by improper input validation in the Auth component. A remote attacker who has successfully compromised the renderer process can use social engineering to trick a user into visiting a crafted HTM...

CVE-2026-95366

Google Chrome versions prior to 154.0.8037.57 are vulnerable to a Use of released resource in the Core component. This flaw allows a remote attacker who has already compromised the renderer process to bypass the web origin policy by serving a crafted HTML page. The Chromium security severity is r...

CVE-2026-95351

Use after free in Views in Google Chrome prior to 154.0.8037.57 allowed a remote attacker who had compromised the renderer process to execute arbitrary code outside the sandbox via a crafted HTML page. Chromium security severity: High...

CVE-2026-95351

Use after free in Views in Google Chrome prior to 154.0.8037.57 allowed a remote attacker who had compromised the renderer process to execute arbitrary code outside the sandbox via a crafted HTML page. Chromium security severity: High...

CVE-2026-95351

Google Chrome versions prior to 154.0.8037.57 are vulnerable to a use after free flaw in the Views component. A remote attacker who has successfully compromised the renderer process can leverage this vulnerability to execute arbitrary code outside the sandbox by navigating to a crafted HTML page ...

CVE-2026-95335

Google Chrome versions prior to 154.0.8037.57 are vulnerable to a Use after free issue in the HID component. A remote attacker who successfully compromises the renderer process can exploit this flaw via a crafted HTML page to potentially execute arbitrary code outside the sandbox . Remediation is...

CVE-2026-95348

Use after free in Bluetooth in Google Chrome prior to 154.0.8037.57 allowed a remote attacker who had compromised the renderer process to potentially execute arbitrary code outside the sandbox via a crafted HTML page. Chromium security severity: High...

CVE-2026-95335

Use after free in HID in Google Chrome prior to 154.0.8037.57 allowed a remote attacker who had compromised the renderer process to potentially execute arbitrary code outside the sandbox via a crafted HTML page. Chromium security severity: High...

CVE-2026-95335

Use after free in HID in Google Chrome prior to 154.0.8037.57 allowed a remote attacker who had compromised the renderer process to potentially execute arbitrary code outside the sandbox via a crafted HTML page. Chromium security severity: High...

CVE-2026-95348

A use after free vulnerability exists in the Bluetooth component of Google Chrome prior to version 154.0.8037.57 . A remote attacker who has successfully compromised the renderer process can exploit this flaw by using a crafted HTML page to potentially achieve arbitrary code execution outside the...

EUVD-2026-89235

Use after free in Bluetooth in Google Chrome prior to 154.0.8037.57 allowed a remote attacker who had compromised the renderer process to potentially execute arbitrary code outside the sandbox via a crafted HTML page. Chromium security severity: High...

EUVD-2026-89236

Use after free in HID in Google Chrome prior to 154.0.8037.57 allowed a remote attacker who had compromised the renderer process to potentially execute arbitrary code outside the sandbox via a crafted HTML page. Chromium security severity: High...

EUVD-2026-89231

Improper output encoding in DevTools in Google Chrome prior to 154.0.8037.57 allowed a remote attacker who had compromised the renderer process to potentially execute arbitrary code outside the sandbox via a crafted HTML page. Chromium security severity: High...

CVE-2026-95274

Improper output encoding in DevTools in Google Chrome prior to 154.0.8037.57 allowed a remote attacker who had compromised the renderer process to potentially execute arbitrary code outside the sandbox via a crafted HTML page. Chromium security severity: High...

CVE-2026-95274

The Google Chrome browser is vulnerable to improper output encoding within the DevTools component in versions prior to 154.0.8037.57 . A remote attacker who successfully compromises the renderer process can leverage a crafted HTML page to potentially execute arbitrary code outside the sandbox . E...