CVE-2026-95287

Google Chrome versions prior to 154.0.8037.57 are affected by a missing authorization check in the Navigation mechanism. This flaw allows a remote attacker who has compromised a renderer process to bypass site isolation protections by tricking a user into loading a crafted HTML page. Site isolati...

CVE-2026-95381

Improper input validation in Printing in Google Chrome prior to 154.0.8037.57 allowed a remote attacker who had compromised the renderer process to potentially execute arbitrary code outside the sandbox via a crafted HTML page. Chromium security severity: Medium...

CVE-2026-95366

Use of released resource in Core in Google Chrome prior to 154.0.8037.57 allowed a remote attacker who had compromised the renderer process to bypass web origin policy via a crafted HTML page. Chromium security severity: Medium...

CVE-2026-95381

Improper input validation in Printing in Google Chrome prior to 154.0.8037.57 allowed a remote attacker who had compromised the renderer process to potentially execute arbitrary code outside the sandbox via a crafted HTML page. Chromium security severity: Medium...

CVE-2026-95287

Missing authorization in Navigation in Google Chrome prior to 154.0.8037.57 allowed a remote attacker who had compromised the renderer process to bypass site isolation via a crafted HTML page. Chromium security severity: Medium...

CVE-2026-95366

Use of released resource in Core in Google Chrome prior to 154.0.8037.57 allowed a remote attacker who had compromised the renderer process to bypass web origin policy via a crafted HTML page. Chromium security severity: Medium...

CVE-2026-95382

Improper input validation in Auth in Google Chrome prior to 154.0.8037.57 allowed a remote attacker who had compromised the renderer process and leveraged social engineering to obtain sensitive information via a crafted HTML page. Chromium security severity: Medium...

CVE-2026-95382

Google Chrome versions prior to 154.0.8037.57 are vulnerable to a Medium severity security flaw caused by improper input validation in the Auth component. A remote attacker who has successfully compromised the renderer process can use social engineering to trick a user into visiting a crafted HTM...

CVE-2026-95366

A use-after-free condition in the Core component of Google Chrome and chromium-browser (prior to version 154.0.8037.57 ) allows a remote attacker who has compromised the renderer process to bypass the web origin policy . The attacker can achieve this by loading a crafted HTML page , effectively w...

CVE-2026-95351

Use after free in Views in Google Chrome prior to 154.0.8037.57 allowed a remote attacker who had compromised the renderer process to execute arbitrary code outside the sandbox via a crafted HTML page. Chromium security severity: High...

CVE-2026-95351

Google Chrome versions prior to 154.0.8037.57 are vulnerable to a use after free flaw in the Views component. A remote attacker who has successfully compromised the renderer process can leverage this vulnerability to execute arbitrary code outside the sandbox by navigating to a crafted HTML page ...

CVE-2026-95351

Use after free in Views in Google Chrome prior to 154.0.8037.57 allowed a remote attacker who had compromised the renderer process to execute arbitrary code outside the sandbox via a crafted HTML page. Chromium security severity: High...

CVE-2026-95351

Use after free in Views in Google Chrome prior to 154.0.8037.57 allowed a remote attacker who had compromised the renderer process to execute arbitrary code outside the sandbox via a crafted HTML page. Chromium security severity: High...

CVE-2026-95335

Use after free in HID in Google Chrome prior to 154.0.8037.57 allowed a remote attacker who had compromised the renderer process to potentially execute arbitrary code outside the sandbox via a crafted HTML page. Chromium security severity: High...

CVE-2026-95335

Google Chrome versions prior to 154.0.8037.57 are vulnerable to a Use after free issue in the HID component. A remote attacker who successfully compromises the renderer process can exploit this flaw via a crafted HTML page to potentially execute arbitrary code outside the sandbox . Remediation is...

CVE-2026-95348

A use after free vulnerability exists in the Bluetooth component of Google Chrome prior to version 154.0.8037.57 . A remote attacker who has successfully compromised the renderer process can exploit this flaw by using a crafted HTML page to potentially achieve arbitrary code execution outside the...

CVE-2026-95335

Use after free in HID in Google Chrome prior to 154.0.8037.57 allowed a remote attacker who had compromised the renderer process to potentially execute arbitrary code outside the sandbox via a crafted HTML page. Chromium security severity: High...

CVE-2026-95348

Use after free in Bluetooth in Google Chrome prior to 154.0.8037.57 allowed a remote attacker who had compromised the renderer process to potentially execute arbitrary code outside the sandbox via a crafted HTML page. Chromium security severity: High...

CVE-2026-95335

Use after free in HID in Google Chrome prior to 154.0.8037.57 allowed a remote attacker who had compromised the renderer process to potentially execute arbitrary code outside the sandbox via a crafted HTML page. Chromium security severity: High...

EUVD-2026-89235

Use after free in Bluetooth in Google Chrome prior to 154.0.8037.57 allowed a remote attacker who had compromised the renderer process to potentially execute arbitrary code outside the sandbox via a crafted HTML page. Chromium security severity: High...