CVE-2026-11068

Use after free in WebSockets in Google Chrome prior to 149.0.7827.53 allowed a remote attacker to execute arbitrary code inside a sandbox via a crafted HTML page. Chromium security severity: Medium...

CVE-2026-11068

The CVE-2026-11068 pertains to Google Chrome prior to 149.0.7827.53, where a use-after-free in WebSockets via a crafted HTML page allowed remote code execution within the sandbox. Affected component: WebSockets in Chromium-based Chrome. Root cause: use-after-free condition. Impact: remote arbitra...

CVE-2026-11068

Use after free in WebSockets in Google Chrome prior to 149.0.7827.53 allowed a remote attacker to execute arbitrary code inside a sandbox via a crafted HTML page. Chromium security severity: Medium...

CVE-2026-11060

Use after free in Media in Google Chrome on Windows prior to 149.0.7827.53 allowed a remote attacker to execute arbitrary code inside a sandbox via a crafted HTML page. Chromium security severity: Medium...

CVE-2026-11060

This CVE describes a Use-After-Free vulnerability in Chrome’s Media component on Windows, exploitable via a crafted HTML page to run arbitrary code within the browser sandbox. Affected software: Google Chrome on Windows. Root cause: use-after-free in Media handling (no deeper technical detail pro...

CVE-2026-11060

Use after free in Media in Google Chrome on Windows prior to 149.0.7827.53 allowed a remote attacker to execute arbitrary code inside a sandbox via a crafted HTML page. Chromium security severity: Medium...

CVE-2026-11059

CVE-2026-11059: Use-after-free in Blink (Chromium) allows a remote attacker to execute arbitrary code inside a sandbox via a crafted HTML page, affecting Google Chrome builds prior to 149.0.7827.53. Impact details are described as a remote code execution in sandbox; remediation is to update to Ch...

CVE-2026-11059

Use after free in Blink in Google Chrome prior to 149.0.7827.53 allowed a remote attacker to execute arbitrary code inside a sandbox via a crafted HTML page. Chromium security severity: Medium...

CVE-2026-11059

Use after free in Blink in Google Chrome prior to 149.0.7827.53 allowed a remote attacker to execute arbitrary code inside a sandbox via a crafted HTML page. Chromium security severity: Medium...

CVE-2026-11054

Use after free in WebRTC in Google Chrome prior to 149.0.7827.53 allowed a remote attacker to execute arbitrary code inside a sandbox via a crafted HTML page. Chromium security severity: Medium...

CVE-2026-11054

CVE-2026-11054 describes a use-after-free in WebRTC in Google Chrome prior to 149.0.7827.53. A remote attacker could execute arbitrary code inside the browser sandbox via a crafted HTML page. Affected software is Google Chrome (WebRTC component) with versions before 149.0.7827.53. The vulnerabili...

CVE-2026-11055

CVE-2026-11055 affects ANGLE in Google Chrome on Windows. The issue is a use-after-free in ANGLE that could allow a remote attacker to execute arbitrary code inside Chrome’s sandbox via a crafted HTML page. Affected versions are Chrome on Windows prior to 149.0.7827.53. Remedy: upgrade to Chrome ...

CVE-2026-11055

Use after free in ANGLE in Google Chrome on Windows prior to 149.0.7827.53 allowed a remote attacker to execute arbitrary code inside a sandbox via a crafted HTML page. Chromium security severity: Medium...

CVE-2026-11049

Use after free in Password Manager in Google Chrome prior to 149.0.7827.53 allowed a remote attacker to execute arbitrary code inside a sandbox via a crafted HTML page. Chromium security severity: Medium...

CVE-2026-11050

Use after free in V8 in Google Chrome prior to 149.0.7827.53 allowed a remote attacker to execute arbitrary code inside a sandbox via a crafted HTML page. Chromium security severity: Medium...

CVE-2026-11050

The CVE-2026-11050 entry concerns a Use-After-Free in V8 (Chrome) before version 149.0.7827.53 that could allow a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML page. Affected product is Google Chrome (V8 engine); the underlying cause is a use-after-free in V8 par...

CVE-2026-11049

CVE-2026-11049 describes a use-after-free in Chrome’s Password Manager that could allow a remote attacker to execute arbitrary code within the sandbox via a crafted HTML page. Affected software: Google Chrome (Password Manager component). Root cause: use-after-free defect in the Password Manager ...

CVE-2026-11046

Insufficient validation of untrusted input in Media in Google Chrome prior to 149.0.7827.53 allowed a remote attacker who had compromised the renderer process to execute arbitrary code inside a sandbox via a crafted HTML page. Chromium security severity: Medium...

CVE-2026-11028

CVE-2026-11028 is a use-after-free in Media on Linux/ChromeOS of Google Chrome prior to 149.0.7827.53. A remote attacker who has compromised the renderer process could execute arbitrary code inside the Chrome sandbox via a crafted HTML page. This indicates an in-sandbox attacker exploit affecting...

CVE-2026-11028

Use after free in Media in Google Chrome on Linux and ChromeOS prior to 149.0.7827.53 allowed a remote attacker who had compromised the renderer process to execute arbitrary code inside a sandbox via a crafted HTML page. Chromium security severity: Medium...