33888 matches found
DEBIAN-CVE-2026-10943
Use after free in WebRTC in Google Chrome prior to 149.0.7827.53 allowed a remote attacker to execute arbitrary code inside a sandbox via a crafted HTML page. Chromium security severity: High...
CVE-2026-10903
Use after free in WebRTC in Google Chrome prior to 149.0.7827.53 allowed a remote attacker to execute arbitrary code inside a sandbox via a crafted HTML page. Chromium security severity: High...
DEBIAN-CVE-2026-10903
Use after free in WebRTC in Google Chrome prior to 149.0.7827.53 allowed a remote attacker to execute arbitrary code inside a sandbox via a crafted HTML page. Chromium security severity: High...
CVE-2026-10903
Use after free in WebRTC in Google Chrome prior to 149.0.7827.53 allowed a remote attacker to execute arbitrary code inside a sandbox via a crafted HTML page. Chromium security severity: High...
CVE-2026-10939
Use after free in WebRTC in Google Chrome prior to 149.0.7827.53 allowed a remote attacker to execute arbitrary code inside a sandbox via a crafted HTML page. Chromium security severity: High...
CVE-2026-11200
Inappropriate implementation in WebRTC in Google Chrome prior to 149.0.7827.53 allowed a remote attacker to leak cross-origin data via a crafted HTML page. Chromium security severity: Medium...
CVE-2026-11200
An inappropriate implementation in the WebRTC component of Google Chrome and Microsoft Edge allows a remote attacker to leak cross-origin data via a crafted HTML page. The vulnerability is caused by a lack of mechanisms for verifying the source of the connection . Affected versions of Google Chro...
CVE-2026-11200
Inappropriate implementation in WebRTC in Google Chrome prior to 149.0.7827.53 allowed a remote attacker to leak cross-origin data via a crafted HTML page. Chromium security severity: Medium...
CVE-2026-11199
An inappropriate implementation in the WebRTC component of Google Chrome (prior to version 149.0.7827.53 ) allows an attacker in a privileged network position to leak cross-origin data via malicious network traffic. This vulnerability stems from insufficient validation of input data . The impact ...
CVE-2026-11199
Inappropriate implementation in WebRTC in Google Chrome prior to 149.0.7827.53 allowed an attacker in a privileged network position to leak cross-origin data via malicious network traffic. Chromium security severity: Medium...
CVE-2026-11118
Use after free in WebRTC in Google Chrome prior to 149.0.7827.53 allowed a remote attacker to execute arbitrary code inside a sandbox via a crafted HTML page. Chromium security severity: Medium...
CVE-2026-11118
Use after free in WebRTC in Google Chrome prior to 149.0.7827.53 allowed a remote attacker to execute arbitrary code inside a sandbox via a crafted HTML page. Chromium security severity: Medium...
CVE-2026-11096
Google Chrome and Microsoft Edge (Chromium-based) are vulnerable to an out-of-bounds read in the WebRTC component. This flaw allows a remote attacker to obtain potentially sensitive information from process memory by visiting a crafted HTML page . Affected versions include all Chrome releases pri...
CVE-2026-11074
Use after free in WebRTC in Google Chrome on Linux prior to 149.0.7827.53 allowed a remote attacker to execute arbitrary code via a crafted HTML page. Chromium security severity: Medium...
CVE-2026-11074
A use after free vulnerability exists in the WebRTC component of Google Chrome (and Microsoft Edge , which ingests Chromium) on Linux in versions prior to 149.0.7827.53 . The root cause is a resource management error where memory is reused after being released, potentially allowing a remote attac...
CVE-2026-11054
Google Chrome and Microsoft Edge are affected by a use-after-free vulnerability in the WebRTC component. This flaw allows a remote attacker to execute arbitrary code inside a sandbox by navigating to a crafted HTML page. The vulnerability is also present in the Chromium package used by Astra Linu...
CVE-2026-11003
A use after free vulnerability exists in the WebRTC component of Google Chrome (prior to version 149.0.7827.53). This flaw arises from the reuse of memory after it has been freed, potentially allowing a remote attacker to execute arbitrary code within a sandbox by navigating to a crafted HTML pag...
CVE-2026-11003
Use after free in WebRTC in Google Chrome prior to 149.0.7827.53 allowed a remote attacker to execute arbitrary code inside a sandbox via a crafted HTML page. Chromium security severity: Medium...