CVE-2026-13943

Uninitialized Use in CSS in Google Chrome on Android prior to 150.0.7871.47 allowed a remote attacker to obtain potentially sensitive information from process memory via a crafted HTML page. Chromium security severity: Medium...

CVE-2026-13936

An inappropriate implementation flaw exists in the Passwords component of the Chromium browser, affecting Google Chrome on Android prior to version 150.0.7871.47 . A remote attacker can exploit this by using a crafted HTML page to obtain potentially sensitive information from process memory. This...

CVE-2026-13937

A vulnerability in the Passwords component of the Chromium browser (including Google Chrome and Microsoft Edge ) is caused by a lack of access control (insufficient policy enforcement). A remote attacker who has successfully compromised the renderer process can leverage this flaw to leak cross-or...

CVE-2026-13932

Inappropriate implementation in Sharing in Google Chrome on Android prior to 150.0.7871.47 allowed a remote attacker who had compromised the renderer process to leak cross-origin data via a crafted HTML page. Chromium security severity: Medium...

CVE-2026-13932

An inappropriate implementation flaw in the Sharing component of the Chromium browser (affecting Google Chrome on Android prior to version 150.0.7871.47 ) allows a remote attacker who has compromised the renderer process to leak cross-origin data via a crafted HTML page. This vulnerability is cat...

CVE-2026-13931

Inappropriate implementation in Media in Google Chrome on Windows prior to 150.0.7871.47 allowed a remote attacker who had compromised the renderer process to perform UI spoofing via a crafted HTML page. Chromium security severity: Medium...

CVE-2026-13924

The WebView component in the Chromium browser (including Google Chrome on Android ) is vulnerable to an insufficient validation of untrusted input flaw (CVE-2026-13924 ). A remote attacker who has already compromised the renderer process can exploit this by using a crafted HTML page to bypass the...

CVE-2026-13926

Insufficient validation of untrusted input in Network in Google Chrome prior to 150.0.7871.47 allowed a remote attacker who had compromised the renderer process to bypass navigation restrictions via a crafted HTML page. Chromium security severity: Medium...

CVE-2026-13923

Uninitialized Use in GPU in Google Chrome on Android prior to 150.0.7871.47 allowed a remote attacker to obtain potentially sensitive information from process memory via a crafted HTML page. Chromium security severity: Medium...

CVE-2026-13914

Inappropriate implementation in Passwords in Google Chrome on Mac prior to 150.0.7871.47 allowed a local attacker to obtain potentially sensitive information from process memory via a malicious file. Chromium security severity: Medium...

CVE-2026-13911

The Spellcheck component in Google Chrome and Microsoft Edge is vulnerable to insufficient data validation. A remote attacker who has compromised the renderer process can exploit this flaw by using a crafted HTML page to obtain potentially sensitive information from process memory. This issue was...

CVE-2026-13905

Race in Chrome for iOS in Google Chrome on iOS prior to 150.0.7871.47 allowed a local attacker to obtain potentially sensitive information from process memory via physical access to the device. Chromium security severity: Medium...

CVE-2026-13901

A remote attacker who has compromised the renderer process in Google Chrome (prior to version 150.0.7871.47 ) can perform a sandbox escape due to insufficient policy enforcement in the Serial component. The root cause is identified as insufficient validation of untrusted input , which allows the ...

CVE-2026-13891

The Extensions component in the Chromium browser (used by Google Chrome and Microsoft Edge ) is vulnerable to insufficient validation of untrusted input . A remote attacker who has compromised the renderer process can exploit this flaw via a crafted HTML page to perform privilege escalation or ca...

CVE-2026-13875

Insufficient validation of untrusted input in GPU in Google Chrome on Windows prior to 150.0.7871.47 allowed a remote attacker who had compromised the renderer process to obtain potentially sensitive information from process memory via a crafted HTML page. Chromium security severity: Medium...

CVE-2026-13869

Use after free in Device in Google Chrome on Windows prior to 150.0.7871.47 allowed a remote attacker who had compromised the renderer process to potentially perform a sandbox escape via a crafted HTML page. Chromium security severity: Medium...

CVE-2026-13871

The GuestView component in Google Chrome and Microsoft Edge suffers from insufficient policy enforcement. This vulnerability allows a remote attacker who has already compromised the renderer process to bypass site isolation by navigating to a crafted HTML page, potentially compromising data integ...

CVE-2026-13868

Inappropriate implementation in Network in Google Chrome on Android prior to 150.0.7871.47 allowed a remote attacker who had compromised the renderer process to bypass site isolation via a crafted HTML page. Chromium security severity: Medium...

CVE-2026-13861

A use after free vulnerability exists in the Core component of the Chromium browser (affecting Google Chrome and Microsoft Edge ). This flaw allows a remote attacker who has already compromised the renderer process to potentially perform a sandbox escape by interacting with a specially crafted HT...

CVE-2026-13854

Use after free in Ozone in Google Chrome on Linux prior to 150.0.7871.47 allowed a remote attacker who had compromised the renderer process to potentially perform a sandbox escape via a crafted HTML page. Chromium security severity: High...