CVE-2026-10903

Use after free in WebRTC in Google Chrome prior to 149.0.7827.53 allowed a remote attacker to execute arbitrary code inside a sandbox via a crafted HTML page. Chromium security severity: High...

CVE-2026-10910

Type Confusion in V8 in Google Chrome prior to 149.0.7827.53 allowed a remote attacker to execute arbitrary code inside a sandbox via a crafted HTML page. Chromium security severity: High...

CVE-2026-10896

Use after free in Chrome for iOS in Google Chrome on iOS prior to 149.0.7827.53 allowed a remote attacker to execute arbitrary code via a crafted HTML page. Chromium security severity: Critical...

CVE-2026-10895

Use after free in Ozone in Google Chrome prior to 149.0.7827.53 allowed a remote attacker to execute arbitrary code via a crafted HTML page. Chromium security severity: Critical...

CVE-2026-10902

Use after free in Ozone in Google Chrome prior to 149.0.7827.53 allowed a remote attacker to execute arbitrary code via a crafted HTML page. Chromium security severity: Critical...

CVE-2026-10893

Use after free in Chromoting in Google Chrome prior to 149.0.7827.53 allowed a remote attacker to execute arbitrary code via malicious network traffic. Chromium security severity: Critical...

CVE-2026-10882

Use after free in Network in Google Chrome prior to 149.0.7827.53 allowed a remote attacker to execute arbitrary code via a crafted HTML page. Chromium security severity: Critical...

CVE-2026-11306

CVE-2026-11306 concerns Google Chrome’s PDFium component. Affects Chrome builds prior to 149.0.7827.53 . Root cause is a use-after-free in PDFium invoked while processing a crafted PDF, allowing a remote attacker to execute arbitrary code inside the sandbox. The vulnerability is tied to the Chrom...

CVE-2026-11306

Use after free in PDFium in Google Chrome prior to 149.0.7827.53 allowed a remote attacker to execute arbitrary code inside a sandbox via a crafted PDF file. Chromium security severity: Low...

CVE-2026-11307

Use after free in PDFium in Google Chrome prior to 149.0.7827.53 allowed a remote attacker to execute arbitrary code inside a sandbox via a crafted PDF file. Chromium security severity: Low...

CVE-2026-11307

Use after free in PDFium in Google Chrome prior to 149.0.7827.53 allowed a remote attacker to execute arbitrary code inside a sandbox via a crafted PDF file. Chromium security severity: Low...

CVE-2026-11305

Use after free in PDFium in Google Chrome prior to 149.0.7827.53 allowed a remote attacker to execute arbitrary code inside a sandbox via a crafted PDF file. Chromium security severity: Low...

CVE-2026-11305

CVE-2026-11305 is a use-after-free in PDFium used by Google Chrome, fixed in version 149.0.7827.53 or later. The vulnerability allows a remote attacker to execute arbitrary code inside the Chrome sandbox via a crafted PDF file. The description does not provide exploitation details beyond this, an...

CVE-2026-11305

Use after free in PDFium in Google Chrome prior to 149.0.7827.53 allowed a remote attacker to execute arbitrary code inside a sandbox via a crafted PDF file. Chromium security severity: Low...

CVE-2026-11303

Use after free in PDFium in Google Chrome prior to 149.0.7827.53 allowed a remote attacker to execute arbitrary code inside a sandbox via a crafted PDF file. Chromium security severity: Low...

CVE-2026-11303

Use after free in PDFium in Google Chrome prior to 149.0.7827.53 allowed a remote attacker to execute arbitrary code inside a sandbox via a crafted PDF file. Chromium security severity: Low...

CVE-2026-11303

CVE-2026-11303 : A use-after-free in PDFium in Google Chrome before 149.0.7827.53 allows a remote attacker to execute arbitrary code within the sandbox via a crafted PDF file. Affected component: PDFium (Chrome browser). Root cause: use-after-free. Impact: arbitrary code execution in sandboxed co...

CVE-2026-11279

The CVE-2026-11279 entry describes an out-of-bounds read in Google Chrome’s DevTools (Chromium) prior to version 149.0.7827.53. A remote attacker could induce arbitrary code execution inside the browser sandbox via a crafted HTML page. The vulnerability is associated with the browser’s DevTools c...

CVE-2026-11279

Out of bounds read in DevTools in Google Chrome prior to 149.0.7827.53 allowed a remote attacker to execute arbitrary code inside a sandbox via a crafted HTML page. Chromium security severity: Low...

CVE-2026-11262

CVE-2026-11262 describes a use-after-free in Chrome’s TabStrip, affecting Google Chrome versions prior to 149.0.7827.53. A remote attacker could exploit a crafted HTML page to execute arbitrary code. The description implies the fix is in 149.0.7827.53 or later. No exploitation details beyond this...